Function at 0x465332
Capabilities:
Accept command line arguments
Compare security identifiers
Delete file
Get common file path
Identify system language via api
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16d8
call fcn.004a63a0
push esi
push edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x1e0], 0x66a756a3
push 3
lea ecx, [ebp - 0x122c]
call fcn.00413ed8
push 2
lea ecx, [ebp - 0x1214]
call fcn.00413ed8
mov dword [ebp - 0xe24], 0x65c2dd7
mov dword [ebp - 0x12ac], 0x1eb6
mov dword [ebp - 0xc64], 6
mov dword [ebp - 0xd0], 0
jmp 0x4653a6
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x4653c8
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x122c]
call fcn.00413f7a
mov dword [eax], 0xfffffff7
jmp 0x465399
mov dword [ebp - 0xd0], 0
jmp 0x4653e1
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x465403
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x1214]
call fcn.00413f7a
mov dword [eax], 0x714ad38d
jmp 0x4653d4
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x15cc], eax
mov eax, 0xb95ae649
test eax, eax
je 0x46542d
cmp dword [ebp - 0x214], 0
je 0x46542d
mov dword [ebp - 0xb10], 1
jmp 0x465434
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0xb10]
je 0x46544e
mov dword [ebp - 0xc54], 1
jmp 0x465455
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0xc4c], eax
push 1
lea ecx, [ebp - 0x122c]
call fcn.00413f7a
mov ecx, dword [ebp - 0xc4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4c]
cmp eax, dword [ebp - 0xc54]
je 0x46549c
mov dword [ebp - 0xda0], 1
jmp 0x4654a3
and dword [ebp - 0xda0], 0
push 0
lea ecx, [ebp - 0x1214]
call fcn.00413f7a
mov ecx, dword [ebp - 0x214]
cmp dword [eax], ecx
je 0x4654c6
mov dword [ebp - 0xc5c], 1
jmp 0x4654cd
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0xe24], eax
mov dword [ebp - 0x1e0], 0
jmp 0x4654f2
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 9
jge 0x465549
mov dword [ebp - 0x139c], 0xac3dc99c
mov dword [ebp - 0x3e0], 0
jmp 0x46551e
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 3
jge 0x46553a
mov eax, dword [ebp - 0x3e0]
mov dword [ebp + eax*4 - 0x16a0], 0xbb4f5ac3
jmp 0x465511
mov eax, dword [ebp - 0xc64]
dec eax
mov dword [ebp - 0xc64], eax
jmp 0x4654e5
lea ecx, [ebp - 0x1214]
call fcn.00413f75
lea ecx, [ebp - 0x122c]
call fcn.00413f75
mov dword [ebp - 0x70], 9
mov dword [ebp - 0xb24], 0x4e20eeb
mov dword [ebp - 0xe34], 0x38fd2320
mov dword [ebp - 0x70], 0
jmp 0x46558a
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x14
jle 0x465a4e
mov dword [ebp - 0x1f8], 0xffffffff
mov dword [ebp - 0x270], 0
jmp 0x4655b7
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x4655d3
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0xc9c], 0xfffffff6
jmp 0x4655aa
mov dword [ebp - 0x1f8], 0
jmp 0x4655ec
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 9
je 0x465a49
mov dword [ebp - 0x74], 0xffffffff
cmp dword [ebp - 0x70], 0
je 0x46560a
cmp dword [ebp - 0x74], 0
cmp dword [ebp - 0x1f8], 0
jne 0x46568c
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x13a4], eax
cmp dword [ebp - 0x70], 0
je 0x465640
cmp dword [ebp - 0x74], 0
je 0x465640
mov dword [ebp - 0xc6c], 1
jmp 0x465647
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc6c]
add eax, 0x53f0d3ec
mov dword [ebp - 0xc74], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc74]
mov dword [ebp + eax - 0xc9c], ecx
cmp dword [ebp - 0xc74], 0
je 0x46567a
cmp dword [ebp - 0x74], 0
jne 0x46568c
mov eax, 0x32c5
test eax, eax
jne 0x46568c
and dword [ebp - 0xc7c], 0
jmp 0x465696
mov dword [ebp - 0xc7c], 1
cmp dword [ebp - 0xc7c], 0x4adc
jg 0x4656a6
cmp dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
je 0x465a39
or eax, 0xffffffff
je 0x465a39
mov dword [ebp - 0xe2c], 0x7758a8c
push 4
lea ecx, [ebp - 0xf60]
call fcn.00413ed8
mov dword [ebp - 0x330], 0
jmp 0x4656eb
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 4
jge 0x46570d
push dword [ebp - 0x330]
lea ecx, [ebp - 0xf60]
call fcn.00413f7a
mov dword [eax], 0x600bf094
jmp 0x4656de
mov dword [ebp - 0x74], 2
jmp 0x46571d
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x465a2c
mov dword [ebp - 0x1114], 0x46e74a6e
mov dword [ebp - 0x1110], 0x46e74a6e
mov dword [ebp - 0x110c], 0x46e74a6e
mov dword [ebp - 0x1108], 0x46e74a6e
lea ecx, [ebp - 0x3f9]
call fcn.00401e75
push eax
lea eax, [ebp - 0x1104]
push eax
lea eax, [ebp - 0x1114]
push eax
lea ecx, [ebp - 0x161c]
call fcn.00413f89
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd68]
call fcn.00413f4b
push 1
lea ecx, [ebp - 0xd68]
call fcn.00413f7a
and dword [eax], 0
jmp 0x4657ba
push 1
lea ecx, [ebp - 0xd68]
call fcn.00413f7a
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0xc84]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc84]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xd68]
call fcn.00413f7a
cmp dword [eax], 2
jg 0x465a1c
mov dword [ebp - 0xb4c], 1
push 1
lea ecx, [ebp - 0xd68]
call fcn.00413f7a
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp + ecx*4 - 0xc9c]
cmp dword [ebp + eax*4 - 0xc9c], ecx
jl 0x4659c1
mov dword [ebp - 0x4ac], 0xfffffff8
mov byte [ebp - 0x1ce], 0
movzx eax, byte [ebp - 0x1ce]
test eax, eax
je 0x46582b
push 0x14d5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0xe2c], eax
push 2
lea ecx, [ebp - 0xd68]
call fcn.00413f7a
cmp dword [eax], 8
jge 0x465855
mov dword [ebp - 0xc8c], 1
jmp 0x46585c
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0xc9c]
cmp eax, dword [ebp - 0xc8c]
jg 0x46587a
mov dword [ebp - 0x528], 1
jmp 0x465881
and dword [ebp - 0x528], 0
mov esi, dword [ebp - 0x4ac]
add esi, dword [ebp - 0x528]
push 0
lea ecx, [ebp - 0xf60]
call fcn.00413f7a
cmp esi, dword [eax]
je 0x4658aa
mov dword [ebp - 0x404], 1
jmp 0x4658b1
and dword [ebp - 0x404], 0
push 0
lea ecx, [ebp - 0xf60]
call fcn.00413f7a
mov ecx, dword [ebp - 0x404]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb24]
cmp dword [ebp - 0x404], eax
jl 0x4658e0
mov dword [ebp - 0x530], 1
jmp 0x4658e7
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x4ac]
cmp dword [ebp - 0x530], eax
jg 0x465901
mov dword [ebp - 0xb2c], 1
jmp 0x465908
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x4ac]
cmp dword [ebp - 0xb2c], eax
jle 0x465922
mov dword [ebp - 0x538], 1
jmp 0x465929
and dword [ebp - 0x538], 0
mov eax, 0xa164e62b
sub eax, dword [ebp - 0x538]
sub eax, 0x5f7f7777
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc9c]
jl 0x465954
mov dword [ebp - 0x40c], 1
jmp 0x46595b
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0xc9c], ecx
xor eax, eax
inc eax
sub eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0xb4c]
jg 0x465988
mov dword [ebp - 0xb44], 1
jmp 0x46598f
and dword [ebp - 0xb44], 0
cmp dword [ebp - 0xb44], 0x8af1
jne 0x4659a7
mov dword [ebp - 0x540], 1
jmp 0x4659ae
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
sub eax, 0xad53
mov dword [ebp - 0xb4c], eax
jmp 0x465a17
mov byte [ebp - 0x157], 0
movzx eax, byte [ebp - 0x157]
test eax, eax
je 0x4659d9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc9c]
mov dword [ebp - 0x548], eax
push 0
lea ecx, [ebp - 0xf60]
call fcn.00413f7a
mov ecx, dword [ebp - 0x548]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x548]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc9c], eax
jmp 0x465796
lea ecx, [ebp - 0xd68]
call fcn.00413f75
jmp 0x465716
lea ecx, [ebp - 0xf60]
call fcn.00413f75
jmp 0x465a44
cmp dword [ebp - 0xe34], 0
je 0x465a44
jmp 0x465a49
jmp 0x4655df
jmp 0x465583
mov dword [ebp - 0x278], 0xffffffff
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x465a8a
push 0
push 0x1217
push 0xc82
push 0
push 0x7b0
push 0x719
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x278], 0
jmp 0x465aa3
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xfffffff8
jg 0x465ac3
mov dword [ebp - 0xe3c], 6
cmp dword [ebp - 0xe3c], 0
je 0x465ac1
jmp 0x465ac3
jmp 0x465a96
mov dword [ebp - 0x244], 0
push 4
lea ecx, [ebp - 0x504]
call fcn.00413ed8
mov dword [ebp - 0xd8], 0x66fe7d8a
mov dword [ebp - 0xe78], 9
mov dword [ebp - 0x390], 0
jmp 0x465b07
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 4
jge 0x465b29
push dword [ebp - 0x390]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
mov dword [eax], 1
jmp 0x465afa
mov dword [ebp - 0xd8], 0
jmp 0x465b42
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jg 0x465f0c
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0xb64], 0x57a55752
mov dword [ebp - 0x6c], 0
jmp 0x465b70
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x465ef4
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0xfec], 0xfffffffc
mov dword [ebp - 0xfe8], 0xfffffffc
mov dword [ebp - 0xfe4], 0xfffffffc
mov dword [ebp - 0xfe0], 0xfffffffc
mov dword [ebp - 0x16c], 0
jmp 0x465bc5
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jg 0x465d05
mov dword [ebp - 0xa4], 0xfffffffc
mov dword [ebp - 0xa4], 3
jmp 0x465bf5
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x465c44
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
mov dword [ebp - 0xb54], eax
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
mov ecx, dword [ebp - 0xb54]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb54]
mov ecx, dword [ecx]
mov dword [ebp + eax - 0xfec], ecx
jmp 0x465be8
mov dword [ebp - 0xa4], 0
jmp 0x465c5d
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jg 0x465d00
mov dword [ebp - 0xfc], 0x969161d5
mov dword [ebp - 0xfc], 0
jmp 0x465c8d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x465cb0
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
cmp dword [eax], 0
je 0x465cae
jmp 0x465cb0
jmp 0x465c80
mov dword [ebp - 0xfc], 3
jmp 0x465cc9
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x465cfb
mov byte [ebp - 0x136], 0
movzx eax, byte [ebp - 0x136]
test eax, eax
je 0x465cf9
push 0xc1e
push 0x3d3
push 0x44b
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x465cbc
jmp 0x465c50
jmp 0x465bb8
cmp dword [ebp - 0x6c], 0x1f433c8a
jl 0x465d1a
mov dword [ebp - 0x550], 1
jmp 0x465d21
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0xb64]
imul eax, dword [ebp - 0x550]
cmp eax, 0xe769035a
jae 0x465d41
mov dword [ebp - 0xe68], 1
jmp 0x465d48
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1558], eax
push 3
lea ecx, [ebp - 0x504]
call fcn.00413f7a
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xfec]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfec], 0
jne 0x465d87
mov eax, 0xffff
test eax, eax
je 0x465d96
cmp dword [ebp - 0x6c], 0
jne 0x465d96
and dword [ebp - 0xb5c], 0
jmp 0x465da0
mov dword [ebp - 0xb5c], 1
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xb5c]
sub edx, dword [ebp + ecx - 0xfec]
cmp dword [eax], edx
jl 0x465dd1
mov dword [ebp - 0x558], 1
jmp 0x465dd8
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0x919c44d4
ja 0x465df0
mov dword [ebp - 0x560], 1
jmp 0x465df7
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x560], eax
jle 0x465e11
mov dword [ebp - 0xb6c], 1
jmp 0x465e18
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xb6c], eax
je 0x465e2f
mov dword [ebp - 0x47c], 1
jmp 0x465e36
and dword [ebp - 0x47c], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
mov ecx, dword [ebp - 0x47c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x465e76
mov eax, 0xddd5d57d
test eax, eax
je 0x465e76
mov dword [ebp - 0xe70], 1
jmp 0x465e7d
and dword [ebp - 0xe70], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x13ac], eax
mov eax, dword [ebp - 0xd8]
add eax, 0x68d9a65c
cmp eax, dword [ebp - 0xd8]
jle 0x465ea8
mov dword [ebp - 0x568], 1
jmp 0x465eaf
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x568], eax
jne 0x465ed9
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x504]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x465ed9
and dword [ebp - 0xb74], 0
jmp 0x465ee3
mov dword [ebp - 0xb74], 1
mov eax, dword [ebp - 0xb74]
mov dword [ebp - 0xe78], eax
jmp 0x465b69
push 3
lea ecx, [ebp - 0x504]
call fcn.00413f7a
mov dword [eax], 0xfffffffa
jmp 0x465b35
lea ecx, [ebp - 0x504]
call fcn.00413f75
mov dword [ebp - 0x1f0], 0x66a756a3
mov dword [ebp - 0x570], 0x9eeda585
mov dword [ebp - 0x24], 0
jmp 0x465f3b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x465f51
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xcac], 0x888a
jmp 0x465f34
mov dword [ebp - 0x24], 0
jmp 0x465f61
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x465f77
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x15e4], 0x57f451d5
jmp 0x465f5a
mov dword [ebp - 0x24], 0
jmp 0x465f87
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x465f9d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1608], 0xffffffff
jmp 0x465f80
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcac], 0
jae 0x465fbf
mov eax, 0xd7bc
test eax, eax
jne 0x465fbf
and dword [ebp - 0xe80], 0
jmp 0x465fc9
mov dword [ebp - 0xe80], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcac]
mov dword [ebp - 0x1500], eax
mov dword [ebp - 0x570], 1
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xb7c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp + eax - 0x15e4], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb7c]
sub ecx, dword [ebp + eax - 0xcac]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xcac]
jle 0x466041
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xcac], 0
je 0x466041
mov dword [ebp - 0x578], 1
jmp 0x466048
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0x7a67
jle 0x466060
mov dword [ebp - 0xb84], 1
jmp 0x466067
and dword [ebp - 0xb84], 0
cmp dword [ebp - 0xb84], 0
jge 0x46607c
mov dword [ebp - 0x580], 1
jmp 0x466083
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
add eax, 0x3d87e3bc
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xcac]
jg 0x4660a8
mov dword [ebp - 0xb8c], 1
jmp 0x4660af
and dword [ebp - 0xb8c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcac]
cmp eax, dword [ebp - 0xb8c]
je 0x4660cf
mov dword [ebp - 0x588], 1
jmp 0x4660d6
and dword [ebp - 0x588], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x588]
sub ecx, dword [ebp + eax - 0xcac]
cmp ecx, 1
ja 0x4660f9
mov dword [ebp - 0xb94], 1
jmp 0x466100
and dword [ebp - 0xb94], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb94]
mov dword [ebp + eax - 0x1608], ecx
push 3
lea ecx, [ebp - 0x11c0]
call fcn.00413ed8
push 2
lea ecx, [ebp - 0x1430]
call fcn.00413ed8
mov dword [ebp - 0x280], 0x57976326
push 4
lea ecx, [ebp - 0x1420]
call fcn.00413ed8
mov dword [ebp - 0x13cc], 0x8f4e1c2e
push 4
lea ecx, [ebp - 0x1410]
call fcn.00413ed8
mov dword [ebp - 0x1508], 1
mov dword [ebp - 0x1c], 0
jmp 0x466175
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x466191
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1430]
call fcn.00413f7a
mov dword [eax], 0xffff
jmp 0x46616e
mov dword [ebp - 0x1c], 0
jmp 0x4661a1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x4661bd
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1420]
call fcn.00413f7a
mov dword [eax], 0xfffffffb
jmp 0x46619a
mov dword [ebp - 0x1c], 0
jmp 0x4661cd
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x4661e9
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1410]
call fcn.00413f7a
mov dword [eax], 0xfffffff7
jmp 0x4661c6
mov dword [ebp - 0x280], 0
jmp 0x466202
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 1
jg 0x466292
mov dword [ebp - 0x13d4], 0x696a485b
push 1
lea ecx, [ebp - 0x1400]
call fcn.00413ed8
mov dword [ebp - 0x1560], 0x18e
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x338], 0
jmp 0x466253
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jge 0x466275
push dword [ebp - 0x338]
lea ecx, [ebp - 0x1400]
call fcn.00413f7a
mov dword [eax], 1
jmp 0x466246
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
lea ecx, [ebp - 0x1400]
call fcn.00413f75
jmp 0x4661f5
lea ecx, [ebp - 0x1410]
call fcn.00413f75
lea ecx, [ebp - 0x1420]
call fcn.00413f75
lea ecx, [ebp - 0x1430]
call fcn.00413f75
push 2
lea ecx, [ebp - 0x11f0]
call fcn.00413ed8
mov dword [ebp - 0xf20], 0x65c2dd7
mov dword [ebp - 0x1164], 0x7dfa860b
mov dword [ebp - 0x1160], 0x7dfa860b
mov dword [ebp - 0x115c], 0x7dfa860b
mov dword [ebp - 0x1158], 0x7dfa860b
lea ecx, [ebp - 0x471]
call fcn.00401e75
push eax
lea eax, [ebp - 0x1154]
push eax
lea eax, [ebp - 0x1164]
push eax
lea ecx, [ebp - 0x1684]
call fcn.00413f89
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x258]
call fcn.00413f4b
mov dword [ebp - 0xac], 0x1dba3399
mov dword [ebp - 8], 0x274b
mov dword [ebp - 0x1038], 0xfffffff7
mov dword [ebp - 0x1034], 0xfffffff7
mov dword [ebp - 0x1030], 0xfffffff7
mov dword [ebp - 0x102c], 0xfffffff7
mov dword [ebp - 0x13dc], 0xffffffff
push 1
lea ecx, [ebp - 0xf70]
call fcn.00413ed8
mov dword [ebp - 0x298], 0xfffffffa
mov dword [ebp - 0xeb8], 0x5c15dc1c
mov dword [ebp - 0x288], 0
jmp 0x4663a4
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x4663c6
push dword [ebp - 0x288]
lea ecx, [ebp - 0xf70]
call fcn.00413f7a
mov dword [eax], 9
jmp 0x466397
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1510], eax
xor eax, eax
inc eax
je 0x466482
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x13e4], eax
push 3
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp dword [eax], 0
je 0x466414
cmp dword [ebp - 8], 0
jne 0x46642f
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x46642f
and dword [ebp - 0xb9c], 0
jmp 0x466439
mov dword [ebp - 0xb9c], 1
mov eax, dword [ebp - 0xb9c]
sub eax, dword [ebp - 0xac]
je 0x466465
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp dword [eax], 0
je 0x466465
mov dword [ebp - 0x598], 1
jmp 0x46646c
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
neg eax
je 0x466482
mov dword [ebp - 0xba4], 1
jmp 0x466489
and dword [ebp - 0xba4], 0
cmp dword [ebp - 0xba4], 0xb0a
jge 0x4664a1
mov dword [ebp - 0x5a0], 1
jmp 0x4664a8
and dword [ebp - 0x5a0], 0
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov ecx, dword [ebp - 0x5a0]
cmp ecx, dword [eax]
jg 0x4664cb
mov dword [ebp - 0xbac], 1
jmp 0x4664d2
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xbac]
je 0x4667b9
mov dword [ebp - 0xe88], 0xbb2f
mov dword [ebp - 0x290], 0xef906d8b
mov dword [ebp - 0xea0], 0xfffffff9
mov dword [ebp - 8], 3
jmp 0x46650f
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x4667b4
push 4
lea ecx, [ebp - 0x1208]
call fcn.00413ed8
mov dword [ebp - 0x3c0], 0
jmp 0x46653f
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 4
jge 0x466561
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x1208]
call fcn.00413f7a
mov dword [eax], 0x1d0b
jmp 0x466532
push dword [ebp - 8]
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x466589
mov eax, dword [ebp - 0xe88]
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x4665af
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov esi, eax
push dword [ebp - 8]
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x466789
mov dword [ebp - 0xbb4], 0xffffffff
mov dword [ebp - 0x1000], 1
mov dword [ebp - 0xffc], 1
mov dword [ebp - 0xff8], 1
mov dword [ebp - 0xff4], 1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x5a8], eax
push 1
lea ecx, [ebp - 0x1208]
call fcn.00413f7a
mov ecx, dword [ebp - 0x5a8]
mov dword [eax], ecx
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x5a8]
jne 0x466619
mov dword [ebp - 0xe90], 1
jmp 0x466620
and dword [ebp - 0xe90], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1000]
cmp dword [ebp - 0x290], eax
jge 0x466641
mov dword [ebp - 0x5b0], 1
jmp 0x466648
and dword [ebp - 0x5b0], 0
push 2
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov eax, dword [eax]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0xbb4]
cmp eax, dword [ebp - 0x5b0]
jg 0x466677
mov dword [ebp - 0xbbc], 1
jmp 0x46667e
and dword [ebp - 0xbbc], 0
mov eax, dword [ebp - 0xbbc]
neg eax
jne 0x4666a4
push dword [ebp - 8]
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x4666a4
and dword [ebp - 0xe98], 0
jmp 0x4666ae
mov dword [ebp - 0xe98], 1
push dword [ebp - 8]
lea ecx, [ebp - 0x258]
call fcn.00413f7a
push dword [ebp - 8]
lea ecx, [ebp - 0x258]
call fcn.00413f7a
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1000]
cmp dword [ebp - 0xea0], eax
jle 0x4666eb
mov dword [ebp - 0x5b8], 1
jmp 0x4666f2
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x5b8], eax
je 0x466709
mov dword [ebp - 0xea8], 1
jmp 0x466710
and dword [ebp - 0xea8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1000]
mov dword [ebp - 0x15c4], eax
imul eax, dword [ebp - 0xac], 0xffffffff
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1000]
jl 0x466744
mov dword [ebp - 0xbc4], 1
jmp 0x46674b
and dword [ebp - 0xbc4], 0
mov esi, dword [ebp - 0x290]
imul esi, dword [ebp - 0xbc4]
push dword [ebp - 8]
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp esi, dword [eax]
jg 0x466776
mov dword [ebp - 0x5c0], 1
jmp 0x46677d
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0xac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1038]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1038], eax
lea ecx, [ebp - 0x1208]
call fcn.00413f75
jmp 0x466508
jmp 0x466b73
mov dword [ebp - 0xbfc], 0x2f23
push 1
lea ecx, [ebp - 0x4f8]
call fcn.00413ed8
mov dword [ebp - 0xec0], 1
mov dword [ebp - 0xc0c], 0xffffffff
mov dword [ebp - 0x340], 0
jmp 0x4667fd
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x46681f
push dword [ebp - 0x340]
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov dword [eax], 0x28a21817
jmp 0x4667f0
push 0
lea ecx, [ebp - 0xf70]
call fcn.00413f7a
mov esi, eax
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x46684d
mov dword [ebp - 0xbdc], 1
jmp 0x466854
and dword [ebp - 0xbdc], 0
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
mov esi, eax
push 0
lea ecx, [ebp - 0xf70]
call fcn.00413f7a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x466882
mov dword [ebp - 0xbcc], 1
jmp 0x466889
and dword [ebp - 0xbcc], 0
mov esi, dword [ebp - 0xbcc]
sub esi, dword [ebp - 0xbfc]
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
add esi, dword [eax]
mov dword [ebp - 0xac], esi
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1274], eax
cmp dword [ebp - 8], 0xe733
jl 0x4668cb
mov dword [ebp - 0x5c8], 1
jmp 0x4668d2
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
sub eax, 0xa88d
jne 0x4668ec
xor eax, eax
jne 0x4668ec
and dword [ebp - 0xbd4], 0
jmp 0x4668f6
mov dword [ebp - 0xbd4], 1
cmp dword [ebp - 0xbd4], 0x4ade
jg 0x46690e
mov dword [ebp - 0xeb0], 1
jmp 0x466915
and dword [ebp - 0xeb0], 0
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1038], 0xffffffff
jge 0x46693e
mov dword [ebp - 0x5d0], 1
jmp 0x466945
and dword [ebp - 0x5d0], 0
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov ecx, dword [ebp - 0x5d0]
cmp ecx, dword [eax]
jge 0x466968
mov dword [ebp - 0x5d8], 1
jmp 0x46696f
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0xbdc]
cmp eax, dword [ebp - 0x5d8]
jge 0x466989
mov dword [ebp - 0xbe4], 1
jmp 0x466990
and dword [ebp - 0xbe4], 0
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov ecx, dword [ebp - 0xbe4]
imul ecx, dword [eax]
test ecx, ecx
jae 0x4669b6
mov dword [ebp - 0x5e0], 1
jmp 0x4669bd
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x5e0]
jl 0x4669e4
mov dword [ebp - 0xbec], 1
jmp 0x4669eb
and dword [ebp - 0xbec], 0
cmp dword [ebp - 0xbec], 0x8302a6f4
ja 0x466a0c
cmp dword [ebp - 0xeb8], 0
je 0x466a0c
mov dword [ebp - 0x5e8], 1
jmp 0x466a13
and dword [ebp - 0x5e8], 0
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov ecx, dword [ebp - 0x5e8]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xf70]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x466a46
mov dword [ebp - 0xbf4], 1
jmp 0x466a4d
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0xbf4], eax
je 0x466a67
mov dword [ebp - 0x5f0], 1
jmp 0x466a6e
and dword [ebp - 0x5f0], 0
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov ecx, dword [ebp - 0x5f0]
cmp ecx, dword [eax]
jl 0x466a91
mov dword [ebp - 0xc14], 1
jmp 0x466a98
and dword [ebp - 0xc14], 0
push 1
lea ecx, [ebp - 0x258]
call fcn.00413f7a
cmp dword [eax], 0
jne 0x466ab6
mov dword [ebp - 0x5f8], 1
jmp 0x466abd
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xbfc]
cmp dword [ebp - 0x5f8], eax
jle 0x466ad7
mov dword [ebp - 0xc04], 1
jmp 0x466ade
and dword [ebp - 0xc04], 0
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov esi, dword [ebp - 0xc04]
imul esi, dword [eax]
add esi, dword [ebp - 0xec0]
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
cmp esi, dword [eax]
jle 0x466b17
mov dword [ebp - 0x600], 1
jmp 0x466b1e
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xc0c], eax
cmp dword [ebp - 0xc0c], 0xe5f641d3
jbe 0x466b42
mov dword [ebp - 0x608], 1
jmp 0x466b49
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
mov ecx, dword [ebp - 0xc14]
lea esi, [ecx + eax - 7]
push 0
lea ecx, [ebp - 0x4f8]
call fcn.00413f7a
mov dword [eax], esi
lea ecx, [ebp - 0x4f8]
call fcn.00413f75
lea ecx, [ebp - 0xf70]
call fcn.00413f75
lea ecx, [ebp - 0x258]
call fcn.00413f75
mov dword [ebp - 0x1278], 0x1eb6
mov dword [ebp - 0x398], 0x31713b91
mov dword [ebp - 0x398], 0
jmp 0x466bb6
mov eax, dword [ebp - 0x398]
dec eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0xffffffe4
jge 0x466bf8
mov byte [ebp - 0x15b], 0
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x466bd7
call dword [sym.imp.KERNEL32.dll_GetACP]
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x466bf6
push 0x2018
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
jmp 0x466ba9
mov dword [ebp - 0x6fc], 6
mov dword [ebp - 0x1280], 0xffffffff
mov dword [ebp - 0x1288], 0xfffffff9
mov dword [ebp - 0x1290], 1
mov dword [ebp - 0x1298], 0x24ce5545
mov dword [ebp - 0x12a0], 0xc4f3f7e8
mov dword [ebp - 0x12a8], 1
mov dword [ebp - 0x12b0], 0
mov dword [ebp - 0x12b8], 0x5077045b
mov dword [ebp - 0x12c0], 1
mov dword [ebp - 0x12c8], 0x1fcc1031
mov dword [ebp - 0x12d0], 0x6fa66fa4
mov dword [ebp - 0x2a0], 0
jmp 0x466c89
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 3
jge 0x466ca5
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0xf80], 0xad313dd3
jmp 0x466c7c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf80], 0xb
jmp 0x466cd3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf80]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf80], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf80], 0xfffffff9
jne 0x466e71
mov dword [ebp - 0x348], 0xffffffff
mov dword [ebp - 0x10ec], 1
mov dword [ebp - 0x10e8], 1
mov dword [ebp - 0x10e4], 1
mov dword [ebp - 0x10e0], 1
lea ecx, [ebp - 0x4d1]
call fcn.00401e75
push eax
lea eax, [ebp - 0x10dc]
push eax
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x1674]
call fcn.00413f89
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x15f0]
call fcn.00413f4b
mov dword [ebp - 0x348], 0xffffffeb
jmp 0x466d67
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 1
jle 0x466e61
push 4
lea ecx, [ebp - 0x1190]
call fcn.00413ed8
mov dword [ebp - 0x12d8], 0xffffffff
mov dword [ebp - 0x12e0], 0x2e65251c
mov dword [ebp - 0x12e8], 0xfffffffe
mov dword [ebp - 0x12f0], 0xfffffff7
mov dword [ebp - 0x12f8], 0xffffffff
mov dword [ebp - 0x1300], 0xdb7b2415
mov dword [ebp - 0x1308], 0xc105a83d
mov dword [ebp - 0x1310], 0x5fec46bc
mov dword [ebp - 0x1318], 0x28451d77
mov dword [ebp - 0x1320], 0xac254176
mov dword [ebp - 0x610], 0x3053bf84
mov dword [ebp - 0x2a8], 0
jmp 0x466e08
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 4
jge 0x466e27
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x1190]
call fcn.00413f7a
and dword [eax], 0
jmp 0x466dfb
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf80], 0
je 0x466e51
lea ecx, [ebp - 0x1190]
call fcn.00413f75
jmp 0x466e61
lea ecx, [ebp - 0x1190]
call fcn.00413f75
jmp 0x466d5a
lea ecx, [ebp - 0x15f0]
call fcn.00413f75
jmp 0x466cb8
mov dword [ebp - 0xe0], 0
jmp 0x466e8a
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x466eac
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x11c0]
call fcn.00413f7a
mov dword [eax], 0xfffffff7
jmp 0x466e7d
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x34], 0xfffffffb
push 2
lea ecx, [ebp - 0xd08]
call fcn.00413ed8
mov dword [ebp - 0xc24], 0xfa1a8f1
mov dword [ebp - 0xc2c], 0xffff
mov dword [ebp - 0xf10], 0x477a75e3
mov dword [ebp - 0x3d8], 0
jmp 0x466efe
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 2
jge 0x466f20
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0xd08]
call fcn.00413f7a
mov dword [eax], 1
jmp 0x466ef1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1328], eax
cmp dword [ebp - 0x64], 4
jl 0x466f3b
mov dword [ebp - 0xc1c], 1
jmp 0x466f42
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x64]
add ecx, dword [ebp - 0xc1c]
add eax, ecx
jne 0x466f61
cmp dword [ebp - 0x64], 0
jne 0x466f61
and dword [ebp - 0x618], 0
jmp 0x466f6b
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4671d3
mov dword [ebp - 0x1e8], 1
push 1
lea ecx, [ebp - 0x11a8]
call fcn.00413ed8
mov dword [ebp - 0x630], 0xfffffffe
mov dword [ebp - 0x2b0], 0
jmp 0x466fb8
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x466fda
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0x11a8]
call fcn.00413f7a
mov dword [eax], 0x1bd53d2a
jmp 0x466fab
mov dword [ebp - 0x34], 0
jmp 0x466fea
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x467098
mov dword [ebp - 0x21c], 0xfffffffc
mov dword [ebp - 0x21c], 0x809d0107
push dword [ebp - 0x34]
lea ecx, [ebp - 0xd08]
call fcn.00413f7a
cmp dword [eax], 0
je 0x46701d
jmp 0x467098
mov dword [ebp - 0x21c], 1
jmp 0x467036
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0
jl 0x467093
mov dword [ebp - 0x64], 0
jmp 0x46704f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x467091
mov byte [ebp - 0x15f], 0
movzx eax, byte [ebp - 0x15f]
test eax, eax
je 0x46706d
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
push dword [ebp - 0x34]
lea ecx, [ebp - 0xd08]
call fcn.00413f7a
mov esi, eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.00413f7a
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x467048
jmp 0x467029
jmp 0x466fe3
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1330], eax
mov eax, dword [ebp - 0xc24]
add eax, dword [ebp - 0x1e8]
je 0x4670cd
cmp dword [ebp - 0xc24], 0
je 0x4670cd
cmp dword [ebp - 0x34], 0
je 0x4670cd
mov dword [ebp - 0x620], 1
jmp 0x4670d4
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0xc2c], eax
mov esi, dword [ebp - 0xc2c]
push 0
lea ecx, [ebp - 0xd08]
call fcn.00413f7a
cmp esi, dword [eax]
jl 0x467103
mov dword [ebp - 0xec8], 1
jmp 0x46710a
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1338], eax
cmp dword [ebp - 0x1e8], 0
jb 0x46712b
mov dword [ebp - 0xf00], 1
jmp 0x467132
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1340], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x628], eax
push 0
lea ecx, [ebp - 0x11a8]
call fcn.00413f7a
mov ecx, dword [ebp - 0x628]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x628], eax
jge 0x467176
mov dword [ebp - 0xc34], 1
jmp 0x46717d
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0x630], eax
mov esi, dword [ebp - 0x630]
push 0
lea ecx, [ebp - 0xd08]
call fcn.00413f7a
add esi, dword [eax]
imul esi, dword [ebp - 0x34]
cmp esi, 0xb834
jg 0x4671b6
mov dword [ebp - 0xc3c], 1
jmp 0x4671bd
and dword [ebp - 0xc3c], 0
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x11a8]
call fcn.00413f75
jmp 0x4671ef
mov dword [ebp - 0xf08], 0x83adeb94
mov eax, dword [ebp - 0xf08]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xf10], eax
lea ecx, [ebp - 0xd08]
call fcn.00413f75
mov dword [ebp - 0xe0], 0
jmp 0x467213
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x467235
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x11f0]
call fcn.00413f7a
mov dword [eax], 0x714ad38d
jmp 0x467206
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1348], eax
mov eax, 0xb95ae649
test eax, eax
je 0x46725f
cmp dword [ebp - 0x244], 0
je 0x46725f
mov dword [ebp - 0xc44], 1
jmp 0x467266
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0xc44]
je 0x467280
mov dword [ebp - 0x994], 1
jmp 0x467287
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x63c], eax
push 1
lea ecx, [ebp - 0x11c0]
call fcn.00413f7a
mov ecx, dword [ebp - 0x63c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x63c]
cmp eax, dword [ebp - 0x994]
je 0x4672ce
mov dword [ebp - 0xf18], 1
jmp 0x4672d5
and dword [ebp - 0xf18], 0
push 0
lea ecx, [ebp - 0x11f0]
call fcn.00413f7a
mov ecx, dword [ebp - 0x244]
cmp dword [eax], ecx
je 0x4672f8
mov dword [ebp - 0x644], 1
jmp 0x4672ff
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0xf20], eax
mov dword [ebp - 0x20c], 0x15252cb1
mov dword [ebp - 0x350], 0
jmp 0x46732e
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 3
jge 0x46734a
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x1440], 5
jmp 0x467321
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x467369
push 0
push 0x15d8
call dword [sym.imp.GDI32.dll_RectVisible]
mov dword [ebp - 0x20c], 0
jmp 0x467382
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jg 0x4673f9
mov byte [ebp - 0x163], 0
movzx eax, byte [ebp - 0x163]
test eax, eax
je 0x4673da
push 0x2308
push 0x107d
push 0x1dce
push 0xa1d
push 0x1707
push 0x1a0f
push 0x108b
push 0xc37
push 0x191e
push 0x1e26
push 0x6fa
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x20c]
mov eax, dword [ebp + eax*4 - 0x1440]
mov dword [ebp + ecx*4 - 0x1440], eax
jmp 0x467375
mov dword [ebp - 0x1f0], 0
jmp 0x467412
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 9
jge 0x468130
mov dword [ebp - 0x2b8], 0xffffffff
mov dword [ebp - 0x1350], 0x949dfcf0
mov dword [ebp - 0x1358], 0xfef9d786
mov dword [ebp - 0x1360], 0x2c36544d
mov dword [ebp - 0x2b8], 0
jmp 0x467460
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 5
jg 0x4674c4
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x1368], 0xfffffff9
mov dword [ebp - 0x1370], 0xfffffffb
mov dword [ebp - 0x3a0], 0xffffffea
jmp 0x4674a0
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 2
jl 0x4674c2
mov dword [ebp - 0x9bc], 0x7f6f
mov eax, dword [ebp - 0x9bc]
dec eax
mov dword [ebp - 0x9bc], eax
jmp 0x467493
jmp 0x467453
mov dword [ebp - 0x1378], 0xac3dc99c
mov dword [ebp - 0x48], 0xc9cc1417
mov dword [ebp - 0x2c0], 0x101aae4b
push 3
lea ecx, [ebp - 0xd50]
call fcn.00413ed8
mov dword [ebp - 0xf28], 1
push 4
lea ecx, [ebp - 0x1080]
call fcn.00413ed8
mov dword [ebp - 0xf38], 0xeab3ae5d
mov dword [ebp - 0xf40], 0xe507
mov dword [ebp - 0xb4], 0
jmp 0x467530
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x467552
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xd50]
call fcn.00413f7a
mov dword [eax], 0x1b44adca
jmp 0x467523
mov dword [ebp - 0xb4], 0
jmp 0x46756b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x46758d
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1080]
call fcn.00413f7a
mov dword [eax], 0xfffffff6
jmp 0x46755e
cmp dword [ebp - 0x48], 0
jne 0x467685
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1380], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1388], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1390], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1398], eax
imul esi, dword [ebp - 0x48], 0xffff
push 1
lea ecx, [ebp - 0xd50]
call fcn.00413f7a
cmp esi, dword [eax]
jle 0x4675ee
cmp dword [ebp - 0x48], 0
je 0x4675ee
mov dword [ebp - 0x64c], 1
jmp 0x4675f5
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0
jl 0x46760a
mov dword [ebp - 0x9a0], 1
jmp 0x467611
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0x9a0]
jl 0x46763d
push 1
lea ecx, [ebp - 0xd50]
call fcn.00413f7a
cmp dword [eax], 0
je 0x46763d
mov dword [ebp - 0x654], 1
jmp 0x467644
and dword [ebp - 0x654], 0
push 0
lea ecx, [ebp - 0xd50]
call fcn.00413f7a
mov ecx, dword [ebp - 0x654]
cmp ecx, dword [eax]
je 0x467667
mov dword [ebp - 0xb3c], 1
jmp 0x46766e
and dword [ebp - 0xb3c], 0
mov eax, dword [ebp - 0xf28]
cmp dword [ebp - 0xb3c], eax
jge 0x467685
and dword [ebp - 0x65c], 0
jmp 0x46768f
mov dword [ebp - 0x65c], 1
push 2
lea ecx, [ebp - 0x1080]
call fcn.00413f7a
mov ecx, dword [ebp - 0x65c]
cmp ecx, dword [eax]
jge 0x4676b2
mov dword [ebp - 0x9a8], 1
jmp 0x4676b9
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
sub eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jne 0x4676d3
mov dword [ebp - 0x664], 1
jmp 0x4676da
and dword [ebp - 0x664], 0
push 3
lea ecx, [ebp - 0x1080]
call fcn.00413f7a
mov ecx, dword [ebp - 0x664]
cmp ecx, dword [eax]
je 0x4676fd
mov dword [ebp - 0xf30], 1
jmp 0x467704
and dword [ebp - 0xf30], 0
push 1
lea ecx, [ebp - 0xd50]
call fcn.00413f7a
mov dword [ebp - 0x48], 0x9b467bb1
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xf38], eax
mov dword [ebp - 0x48], 0
jmp 0x467731
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe8
jge 0x467743
mov dword [ebp - 0xf40], 3
jmp 0x46772a
lea ecx, [ebp - 0x1080]
call fcn.00413f75
lea ecx, [ebp - 0xd50]
call fcn.00413f75
mov dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x17c], 0x3825062d
mov dword [ebp - 0x224], 0x5a83d87
mov dword [ebp - 0x9c0], 0x13053bf8
mov dword [ebp - 0xe8], 0
jmp 0x46779a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x4677b6
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1450], 1
jmp 0x46778d
mov dword [ebp - 0xe8], 0
jmp 0x4677cf
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x4677eb
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x13b8], 0xbb0f55f5
jmp 0x4677c2
mov dword [ebp - 0x174], 0
jmp 0x467804
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xf
je 0x467ad9
mov dword [ebp - 0x5c], 0xa3dbc56e
cmp dword [ebp - 0x174], 0xdec4
jl 0x467830
mov dword [ebp - 0xf48], 1
jmp 0x467837
and dword [ebp - 0xf48], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x5c], eax
jle 0x467851
cmp dword [ebp - 0x5c], 0
jne 0x467851
and dword [ebp - 0xb38], 0
jmp 0x46785b
mov dword [ebp - 0xb38], 1
cmp dword [ebp - 0xb38], 0x76fd
jle 0x467873
mov dword [ebp - 0x66c], 1
jmp 0x46787a
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xc35240ca
jb 0x46789e
mov dword [ebp - 0x9b0], 1
jmp 0x4678a5
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
sub eax, dword [ebp - 0x5c]
jne 0x4678bf
cmp dword [ebp - 0x5c], 0
jne 0x4678bf
and dword [ebp - 0x414], 0
jmp 0x4678c9
mov dword [ebp - 0x414], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x414]
mov dword [ebp + eax - 0x1450], ecx
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x414], eax
jl 0x4678f6
mov dword [ebp - 0x674], 1
jmp 0x4678fd
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x224], 0xffffffe6
jmp 0x467922
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1a
jge 0x467ad4
mov dword [ebp - 0xb40], 0x4433
mov dword [ebp - 0x41c], 0xdbe4fcd5
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x46795d
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
mov dword [ebp - 0x5c], 0xfffffffb
jmp 0x46796d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xe
jg 0x467acf
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x17c], 0xfffffff5
jmp 0x46799a
cmp dword [ebp - 0x17c], 0x16
jge 0x467aca
mov dword [ebp - 0x4e4], 0xbbda73a1
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0x13a0], eax
cmp dword [ebp - 0x68c], 0
je 0x467a05
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x5c], eax
jne 0x4679dd
mov dword [ebp - 0xbf8], 1
jmp 0x4679e4
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
je 0x467a05
mov dword [ebp - 0x67c], 1
jmp 0x467a0c
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x67c], eax
jne 0x467a26
mov dword [ebp - 0x9b8], 1
jmp 0x467a2d
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x9b8], eax
jl 0x467a56
cmp dword [ebp - 0x5c], 0
je 0x467a56
mov eax, 0x4fce
test eax, eax
je 0x467a56
mov dword [ebp - 0x684], 1
jmp 0x467a5d
and dword [ebp - 0x684], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1450]
mov eax, dword [ebp - 0xb40]
cmp dword [ebp - 0x4e4], eax
jne 0x467a87
cmp dword [ebp - 0x5c], 0
jne 0x467a87
and dword [ebp - 0xf50], 0
jmp 0x467a91
mov dword [ebp - 0xf50], 1
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x13a8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x13b8], 0x5ce4ec6f
cmp dword [ebp - 0x41c], 0
je 0x467ac5
jmp 0x467aca
jmp 0x46798d
jmp 0x467966
jmp 0x467915
jmp 0x4677f7
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x484], 0x7ed6f186
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x10c], 8
mov dword [ebp - 0x22c], 0x235bd639
mov dword [ebp - 0x1d8], 0xf9f0ac77
mov dword [ebp - 0x358], 0
jmp 0x467b2b
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 1
jge 0x467b44
mov eax, dword [ebp - 0x358]
mov dword [ebp + eax*4 - 0x10], 0x624039b
jmp 0x467b1e
mov dword [ebp - 0x80], 0
jmp 0x467b54
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x467fd1
mov dword [ebp - 0x44], 0x76ff55e0
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x23c], 0x697ab83d
mov dword [ebp - 0x2c8], 0
jmp 0x467b9c
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x467bb8
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x13c4], 0x58fb5c4c
jmp 0x467b8f
mov dword [ebp - 0x44], 0
jmp 0x467bc8
cmp dword [ebp - 0x44], 0
jg 0x467fcc
mov dword [ebp - 0x6cc], 0xffffffff
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x467d12
xor eax, eax
inc eax
je 0x467c05
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x467c05
mov dword [ebp - 0x694], 1
jmp 0x467c0c
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x694], eax
jle 0x467c23
mov dword [ebp - 0xc58], 1
jmp 0x467c2a
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x10]
cmp dword [ebp - 0xc58], eax
jne 0x467c45
mov dword [ebp - 0x69c], 1
jmp 0x467c4c
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 0x65f4b3f4
jg 0x467c64
mov dword [ebp - 0x9c8], 1
jmp 0x467c6b
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x9c8]
dec eax
mov dword [ebp - 0x11c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11c]
sub ecx, dword [ebp + eax - 0x10]
imul eax, ecx, 0x5d9c
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x10], eax
jg 0x467ca6
mov dword [ebp - 0x6a4], 1
jmp 0x467cad
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x10]
mov dword [ebp - 0x13b0], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x13bc], eax
cmp dword [ebp - 0x2d0], 0x176
jl 0x467cea
mov dword [ebp - 0xb48], 1
jmp 0x467cf1
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x467d12
mov dword [ebp - 0x6ac], 1
jmp 0x467d19
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x6ac]
mov ecx, dword [ebp - 0x80]
cmp eax, dword [ebp + ecx*4 - 0x10]
jne 0x467d38
mov dword [ebp - 0x9d0], 1
jmp 0x467d3f
and dword [ebp - 0x9d0], 0
mov dword [ebp - 0x484], 0xf2e9
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x9d0]
add ecx, dword [ebp + eax*4 - 0x10]
mov dword [ebp - 0xfb8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfb8]
mov dword [ebp + eax - 0x13c4], ecx
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x13c8], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x10], 0x2b782624
jle 0x467d94
mov dword [ebp - 0x6b4], 1
jmp 0x467d9b
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x6b4]
sub eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x23c]
je 0x467dc1
cmp dword [ebp - 0x44], 0
je 0x467dc1
mov dword [ebp - 0xc00], 1
jmp 0x467dc8
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x2d0], 0
jne 0x467de9
mov dword [ebp - 0x6c4], 1
jmp 0x467df0
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x467e0a
xor eax, eax
je 0x467e0a
mov dword [ebp - 0x6bc], 1
jmp 0x467e11
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x6bc], eax
jg 0x467e28
mov dword [ebp - 0x9d8], 1
jmp 0x467e2f
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 0xffffffff
je 0x467e44
mov dword [ebp - 0xb50], 1
jmp 0x467e4b
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0x6c4]
add eax, 7
sub eax, dword [ebp - 0xb50]
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp - 0x6cc]
sub eax, dword [ebp - 0x23c]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x467e9d
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x467e9d
mov dword [ebp - 0x9e0], 1
jmp 0x467ea4
and dword [ebp - 0x9e0], 0
cmp dword [ebp - 0x9e0], 7
jne 0x467eb9
mov dword [ebp - 0x6d4], 1
jmp 0x467ec0
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x6d4]
cmp eax, dword [ebp - 0x11c]
je 0x467ee0
jmp 0x467b4d
mov dword [ebp - 0x22c], 0xf
jmp 0x467fea
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xfffffff5
jg 0x4680e9
mov dword [ebp - 0x11c], 0
jmp 0x468010
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x4680e4
mov dword [ebp - 0x10c], 0
jmp 0x468036
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x4680df
mov dword [ebp - 0x1d8], 0
jmp 0x46805c
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jg 0x4680da
mov byte [ebp - 0x15a], 0
movzx eax, byte [ebp - 0x15a]
test eax, eax
je 0x468084
push 0x9a5
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov eax, 0x3bf1
test eax, eax
je 0x4680c2
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp + eax*4 - 0x10]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp + eax*4 - 0x10], ecx
cmp dword [ebp - 0x6f4], 0
je 0x4680c2
mov dword [ebp - 0xc08], 1
jmp 0x4680c9
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0x484], eax
jmp 0x46804f
jmp 0x468029
jmp 0x468003
jmp 0x467fdd
mov dword [ebp - 0x360], 0
jmp 0x468102
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 3
jge 0x46811e
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x16ac], 0xbb4f5ac3
jmp 0x4680f5
mov eax, dword [ebp - 0x6fc]
dec eax
mov dword [ebp - 0x6fc], eax
jmp 0x467405
lea ecx, [ebp - 0x11f0]
call fcn.00413f75
lea ecx, [ebp - 0x11c0]
call fcn.00413f75
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x2d8], 0
jmp 0x468169
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 4
jge 0x468185
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x1694], 0x540d
jmp 0x46815c
mov dword [ebp - 0x3a8], 0
jmp 0x46819e
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 3
jg 0x4682c3
mov dword [ebp - 0xbc], 5
mov dword [ebp - 0xbc], 0
jmp 0x4681ce
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jg 0x46827c
mov dword [ebp - 0x2e0], 0x73ff82ff
mov dword [ebp - 0x2e0], 0
jmp 0x4681fe
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jg 0x468246
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x1694], 0
je 0x468219
jmp 0x468246
mov byte [ebp - 0x13a], 0
movzx eax, byte [ebp - 0x13a]
test eax, eax
je 0x468244
push 0x150f
push 0x17fe
push 1
push 0
push 0xf5f
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x4681f1
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x468277
push 0xe43
push 0x10ab
push 0x471
push 0x2649
push 0x1ada
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
jmp 0x4681c1
mov dword [ebp - 0xbc], 3
jmp 0x468295
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x4682be
mov byte [ebp - 0x15c], 0
movzx eax, byte [ebp - 0x15c]
test eax, eax
je 0x4682bc
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
jmp 0x468288
jmp 0x468191
mov dword [ebp - 0x9f8], 0x6df3
push 4
lea ecx, [ebp - 0x1460]
call fcn.00413ed8
mov dword [ebp - 0xfcc], 0x40e1
mov dword [ebp - 0x13d0], 0xffea1e17
mov dword [ebp - 0x13d8], 0x58db2edf
mov dword [ebp - 0x13e0], 0xffffffff
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x368], 0x8c33
mov dword [ebp - 0x13e8], 5
push 3
lea ecx, [ebp - 0x1044]
call fcn.00413ed8
mov dword [ebp - 0x18], 0
jmp 0x46833d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x468353
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c8], 0xc59cdc34
jmp 0x468336
mov dword [ebp - 0x18], 0
jmp 0x468363
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x46837f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1460]
call fcn.00413f7a
mov dword [eax], 0xfffffff7
jmp 0x46835c
mov dword [ebp - 0x18], 0
jmp 0x46838f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4683ab
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1044]
call fcn.00413f7a
mov dword [eax], 0xffff
jmp 0x468388
cmp dword [ebp - 0x9f8], 0xfffffff8
jne 0x4683c0
mov dword [ebp - 0xb60], 1
jmp 0x4683c7
and dword [ebp - 0xb60], 0
push 1
lea ecx, [ebp - 0x1044]
call fcn.00413f7a
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x4c0]
neg eax
mov ecx, dword [ebp - 0x424]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x424]
mov edx, dword [edx]
inc edx
mov esi, dword [ebp - 0x424]
mov dword [esi], edx
mov edx, dword [ebp - 0x4c0]
dec edx
mov dword [ebp - 0x4c0], edx
cmp eax, ecx
jg 0x46842a
push 1
lea ecx, [ebp - 0x1044]
call fcn.00413f7a
cmp dword [eax], 0x1bb3
jg 0x46842a
and dword [ebp - 0x704], 0
jmp 0x468434
mov dword [ebp - 0x704], 1
mov eax, dword [ebp - 0x9f8]
add eax, dword [ebp - 0x704]
je 0x468457
cmp dword [ebp - 0xfcc], 0
je 0x468457
mov dword [ebp - 0x70c], 1
jmp 0x46845e
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0xb60]
add eax, 0x7cf2e566
imul eax, dword [ebp - 0x70c]
test eax, eax
je 0x4684dc
mov dword [ebp - 0xa00], 0x618c
mov dword [ebp - 0x368], 0
jmp 0x468497
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 3
jg 0x4684da
mov dword [ebp - 0x13f0], 0x72a6dd75
mov byte [ebp - 0x15e], 0
movzx eax, byte [ebp - 0x15e]
test eax, eax
je 0x4684cb
push 0
push 0
push 0x161d
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0xa00]
dec eax
mov dword [ebp - 0xa00], eax
jmp 0x46848a
jmp 0x468505
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x468505
push 0
push 0x9a0
push 0x1ef4
push 0x1686
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
lea ecx, [ebp - 0x1044]
call fcn.00413f75
lea ecx, [ebp - 0x1460]
call fcn.00413f75
mov dword [ebp - 0x60], 0xd5e48d32
push 4
lea ecx, [ebp - 0xd80]
call fcn.00413ed8
mov dword [ebp - 0x3e8], 1
mov dword [ebp - 0x2e8], 0
jmp 0x468552
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jge 0x468574
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0xd80]
call fcn.00413f7a
mov dword [eax], 0x7a9a9718
jmp 0x468545
mov dword [ebp - 0x60], 0xa
jmp 0x468584
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jl 0x4686c0
mov dword [ebp - 0x2f0], 0x29694d2b
mov dword [ebp - 0xdb0], 4
cmp dword [ebp - 0x60], 0
je 0x4685ba
cmp dword [ebp - 0x60], 0
je 0x4685ba
mov dword [ebp - 0x714], 1
jmp 0x4685c1
and dword [ebp - 0x714], 0
push 3
lea ecx, [ebp - 0xd80]
call fcn.00413f7a
mov ecx, dword [ebp - 0x714]
cmp ecx, dword [eax]
jge 0x4685e4
mov dword [ebp - 0xe1c], 1
jmp 0x4685eb
and dword [ebp - 0xe1c], 0
push 3
lea ecx, [ebp - 0xd80]
call fcn.00413f7a
push 1
lea ecx, [ebp - 0xd80]
call fcn.00413f7a
mov eax, dword [ebp - 0x3e8]
imul eax, dword [ebp - 0x2f0]
cmp eax, 0xfffffff7
jae 0x468623
mov dword [ebp - 0xc60], 1
jmp 0x46862a
and dword [ebp - 0xc60], 0
push 3
lea ecx, [ebp - 0xd80]
call fcn.00413f7a
mov ecx, dword [ebp - 0xc60]
cmp ecx, dword [eax]
jge 0x468656
cmp dword [ebp - 0x3e8], 0
je 0x468656
mov dword [ebp - 0x71c], 1
jmp 0x46865d
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x71c], eax
jne 0x46867d
cmp dword [ebp - 0x2f0], 0
jne 0x46867d
and dword [ebp - 0xa08], 0
jmp 0x468687
mov dword [ebp - 0xa08], 1
mov eax, dword [ebp - 0x3e8]
imul eax, dword [ebp - 0xa08]
cmp eax, dword [ebp - 0x2f0]
jle 0x4686a8
mov dword [ebp - 0xe14], 1
jmp 0x4686af
and dword [ebp - 0xe14], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xdb0], eax
jmp 0x46857d
mov dword [ebp - 0x60], 0xffffffe9
jmp 0x4686d0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x15
je 0x468708
mov dword [ebp - 0xef8], 0xfffffff8
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xef8], eax
mov byte [ebp - 0x13c], 0
movzx eax, byte [ebp - 0x13c]
test eax, eax
je 0x468706
push 0x1549
call dword [sym.imp.USER32.dll_GetMenu]
jmp 0x4686c9
lea ecx, [ebp - 0xd80]
call fcn.00413f75
movzx eax, byte [0x46fb5e4]
test eax, eax
je 0x468731
mov esi, 0xaadb98
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x46f9fa
mov dword [ebp - 0x48c], 0x891f782a
push 2
lea ecx, [ebp - 0x51c]
call fcn.00413ed8
mov dword [ebp - 0x370], 0x98d72a67
mov dword [ebp - 0x42c], 8
mov dword [ebp - 0x4d8], 0x42573927
mov dword [ebp - 0x2f8], 0x383de467
push 2
lea ecx, [ebp - 0x105c]
call fcn.00413ed8
mov dword [ebp - 0x434], 0
mov dword [ebp - 0xed4], 5
mov dword [ebp - 0x98], 0
jmp 0x4687aa
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x4687cc
push dword [ebp - 0x98]
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
mov dword [eax], 8
jmp 0x46879d
mov dword [ebp - 0x98], 0
jmp 0x4687e5
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x468807
push dword [ebp - 0x98]
lea ecx, [ebp - 0x105c]
call fcn.00413f7a
mov dword [eax], 1
jmp 0x4687d8
cmp dword [ebp - 0x48c], 0
jne 0x468915
mov eax, 0x61d2
test eax, eax
je 0x4688b9
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
cmp dword [eax], 0x8711
jne 0x468842
mov dword [ebp - 0x724], 1
jmp 0x468849
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0x724]
push 0xfffffffffffffff7
pop esi
sub esi, eax
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
imul esi, dword [eax]
sub esi, 0x55d2cb36
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
imul esi, dword [eax]
mov dword [ebp - 0x370], esi
mov esi, dword [ebp - 0x370]
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
cmp esi, dword [eax]
jle 0x4688b9
mov dword [ebp - 0xb68], 1
jmp 0x4688c0
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0xb68], eax
je 0x4688da
mov dword [ebp - 0x72c], 1
jmp 0x4688e1
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x42c], eax
mov esi, dword [ebp - 0x42c]
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
add esi, dword [eax]
mov eax, dword [ebp - 0x48c]
add eax, esi
jne 0x468915
and dword [ebp - 0xa10], 0
jmp 0x46891f
mov dword [ebp - 0xa10], 1
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 0xe31bb000
jb 0x468943
mov dword [ebp - 0x734], 1
jmp 0x46894a
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x2f8], eax
mov esi, dword [ebp - 0x2f8]
push 1
lea ecx, [ebp - 0x51c]
call fcn.00413f7a
imul esi, dword [eax]
mov dword [ebp - 0xc10], esi
push 0
lea ecx, [ebp - 0x105c]
call fcn.00413f7a
mov ecx, dword [ebp - 0xc10]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x150c], eax
mov esi, dword [ebp - 0x434]
push 0
lea ecx, [ebp - 0x105c]
call fcn.00413f7a
cmp esi, dword [eax]
jl 0x4689ce
mov dword [ebp - 0x73c], 1
jmp 0x4689d5
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0x5e3aa9c1
je 0x4689ed
mov dword [ebp - 0xdb8], 1
jmp 0x4689f4
and dword [ebp - 0xdb8], 0
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0xed4], eax
jl 0x468a0e
mov dword [ebp - 0xa18], 1
jmp 0x468a15
and dword [ebp - 0xa18], 0
cmp dword [ebp - 0xa18], 0xe456
jge 0x468a2d
mov dword [ebp - 0x744], 1
jmp 0x468a34
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
neg eax
jne 0x468a4a
mov dword [ebp - 0xb70], 1
jmp 0x468a51
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0xb70], eax
jg 0x468a6b
mov dword [ebp - 0x74c], 1
jmp 0x468a72
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
sub eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x2f8], eax
lea ecx, [ebp - 0x105c]
call fcn.00413f75
lea ecx, [ebp - 0x51c]
call fcn.00413f75
mov dword [ebp - 0x1514], 0xaadb98
mov dword [ebp - 0x90], 0xbe8e56f9
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0x12c], 0x891023f1
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0xee4], 0xffffffff
mov dword [ebp - 0x3b0], 0
jmp 0x468aef
cmp dword [ebp - 0x3b0], 1
jge 0x468b0b
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x308], 0x6bdde0bc
jmp 0x468ae2
mov dword [ebp - 0x90], 0
jmp 0x468b24
pop edi
pop esi
mov esp, ebp
pop ebp
ret