Function at 0x46f985
Capabilities:
Check os version
Create directory
Get common file path
Get keyboard layout
Get system information on windows
Read .ini file
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2f1b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2af4
call fcn.004a26a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xfb4], 0xc3
mov dword [ebp - 0x18cc], str.pcqvrf_jpxo_ewxjktmv_vuopqwd
mov dword [ebp - 0x15c], 0x24a8c6a5
mov dword [ebp - 0x79c], 0xe55a4419
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0x704], 0x3927
mov dword [ebp - 0x14c8], 0xfffffff7
mov dword [ebp - 0x1758], 0x94592404
mov dword [ebp - 0x5bc], 0
jmp 0x46fa17
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 4
jge 0x46fa33
mov eax, dword [ebp - 0x5bc]
mov dword [ebp + eax*4 - 0x2948], 0xa332e525
jmp 0x46fa0a
mov dword [ebp - 0x15c], 0
jmp 0x46fa4c
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jle 0x46faa8
mov dword [ebp - 0x40c], 0x1d69f428
mov dword [ebp - 0x40c], 0xffffffec
jmp 0x46fa78
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0x13
je 0x46faa6
mov byte [ebp - 0x1e3], 0
movzx eax, byte [ebp - 0x1e3]
test eax, eax
je 0x46faa4
push 0
push 0x744
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x46fa6b
jmp 0x46fa3f
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x215c], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x27a4], eax
mov eax, 0xfff9
inc eax
cmp eax, dword [ebp - 0xdc]
jl 0x46fada
mov dword [ebp - 0xcc8], 1
jmp 0x46fae1
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xcc8], eax
jl 0x46fafb
mov dword [ebp - 0x160c], 1
jmp 0x46fb02
and dword [ebp - 0x160c], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x23ac], eax
mov eax, dword [ebp - 0x15c]
sub eax, 0xb000
cmp eax, 0x467b
jl 0x46fb2c
mov dword [ebp - 0x1498], 1
jmp 0x46fb33
and dword [ebp - 0x1498], 0
mov eax, dword [ebp - 0x79c]
cmp dword [ebp - 0x1498], eax
je 0x46fb4d
mov dword [ebp - 0x14a0], 1
jmp 0x46fb54
and dword [ebp - 0x14a0], 0
mov eax, dword [ebp - 0x79c]
cmp dword [ebp - 0x14a0], eax
je 0x46fb6e
mov dword [ebp - 0x1750], 1
jmp 0x46fb75
and dword [ebp - 0x1750], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x25f4], eax
mov eax, dword [ebp - 0x704]
cmp dword [ebp - 0x15c], eax
jg 0x46fb9b
mov dword [ebp - 0x14a8], 1
jmp 0x46fba2
and dword [ebp - 0x14a8], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x14a8], eax
jne 0x46fbbc
mov dword [ebp - 0x14b0], 1
jmp 0x46fbc3
and dword [ebp - 0x14b0], 0
mov eax, dword [ebp - 0x14c8]
cmp dword [ebp - 0x14b0], eax
jne 0x46fbdd
mov dword [ebp - 0x14b8], 1
jmp 0x46fbe4
and dword [ebp - 0x14b8], 0
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x14b8]
jl 0x46fc00
xor eax, eax
inc eax
jne 0x46fc00
and dword [ebp - 0x14c0], 0
jmp 0x46fc0a
mov dword [ebp - 0x14c0], 1
mov eax, dword [ebp - 0x704]
add eax, dword [ebp - 0x14c0]
je 0x46fd54
push 1
lea ecx, [ebp - 0x155c]
call fcn.00428a20
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0x414], 0
jmp 0x46fc4c
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 1
jge 0x46fc6e
push dword [ebp - 0x414]
lea ecx, [ebp - 0x155c]
call fcn.00428b0e
mov dword [eax], 4
jmp 0x46fc3f
mov eax, dword [ebp - 0x1758]
mov dword [ebp - 0x23b4], eax
mov esi, dword [ebp - 0x14c8]
push 0
lea ecx, [ebp - 0x155c]
call fcn.00428b0e
cmp esi, dword [eax]
jge 0x46fc9d
mov dword [ebp - 0x1760], 1
jmp 0x46fca4
and dword [ebp - 0x1760], 0
push 0
lea ecx, [ebp - 0x155c]
call fcn.00428b0e
cmp dword [eax], 0x8a1b
jge 0x46fcc5
mov dword [ebp - 0x14d0], 1
jmp 0x46fccc
and dword [ebp - 0x14d0], 0
push 0
lea ecx, [ebp - 0x155c]
call fcn.00428b0e
mov ecx, dword [ebp - 0x14d0]
cmp ecx, dword [eax]
jg 0x46fcef
mov dword [ebp - 0x1768], 1
jmp 0x46fcf6
and dword [ebp - 0x1768], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1444], eax
push 0
lea ecx, [ebp - 0x155c]
call fcn.00428b0e
mov ecx, dword [ebp - 0x1444]
mov dword [eax], ecx
mov eax, dword [ebp - 0xee8]
cmp dword [ebp - 0x1444], eax
jg 0x46fd31
mov dword [ebp - 0x8d4], 1
jmp 0x46fd38
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0xee8], eax
lea ecx, [ebp - 0x155c]
call fcn.00428af2
jmp 0x46fe8c
mov dword [ebp - 0xeec], 0xfffffffa
mov dword [ebp - 0x18c8], 0xffffffff
mov dword [ebp - 0xdc], 0
jmp 0x46fd81
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xfffffff0
jg 0x46fe8c
mov dword [ebp - 0x14f8], 0xfffc
mov dword [ebp - 0x18d0], 0xfffffffb
mov dword [ebp - 0x5c4], 0
jmp 0x46fdbb
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 3
jge 0x46fdd7
mov eax, dword [ebp - 0x5c4]
mov dword [ebp + eax*4 - 0x1f7c], 1
jmp 0x46fdae
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f7c]
cmp dword [ebp - 0x14f8], eax
jne 0x46fdf8
mov dword [ebp - 0x8dc], 1
jmp 0x46fdff
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jne 0x46fe66
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f7c]
mov dword [ebp - 0x26fc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f7c]
mov dword [ebp - 0x23bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2948]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0xeec]
sub eax, 6
sub eax, dword [ebp - 0x18c8]
jne 0x46fe66
and dword [ebp - 0x8e4], 0
jmp 0x46fe70
mov dword [ebp - 0x8e4], 1
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x18d0], eax
cmp dword [ebp - 0x14f8], 0
je 0x46fe87
jmp 0x46fe8c
jmp 0x46fd74
mov dword [ebp - 0x35c], 1
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x35c], 0
jmp 0x46feb9
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x21
jg 0x46fede
mov byte [ebp - 0x245], 0
movzx eax, byte [ebp - 0x245]
test eax, eax
je 0x46fedc
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x46feac
mov dword [ebp - 0x81c], 0xffffffff
mov dword [ebp - 0x7a4], 0xc6ef
mov dword [ebp - 0x8fc], 0xf8d19c92
mov dword [ebp - 0x1200], 0
mov dword [ebp - 0x1fc], 0x9843
mov dword [ebp - 0x41c], 0
jmp 0x46ff29
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 4
jge 0x46ff45
mov eax, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x1d68], 0x58a835a
jmp 0x46ff1c
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0x2604], eax
cmp dword [ebp - 0x81c], 1
jne 0x46ff66
mov dword [ebp - 0x8ec], 1
jmp 0x46ff6d
and dword [ebp - 0x8ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d68]
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x8fc]
cmp dword [ebp - 0x7a4], eax
jg 0x46ff99
mov dword [ebp - 0xef4], 1
jmp 0x46ffa0
and dword [ebp - 0xef4], 0
mov eax, dword [ebp - 0x8ec]
sub eax, dword [ebp - 0xef4]
jne 0x46ffc0
cmp dword [ebp - 0x81c], 0
jne 0x46ffc0
and dword [ebp - 0x8f4], 0
jmp 0x46ffca
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x1200], eax
cmp dword [ebp - 0x1200], 0
je 0x47014b
mov dword [ebp - 0x18e0], 1
mov dword [ebp - 0x23c4], 0x64d64ea3
mov dword [ebp - 0x18d8], 0x402da3c3
mov dword [ebp - 0x18e8], 0
mov dword [ebp - 0x69c], 0
jmp 0x470024
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 2
jge 0x470040
mov eax, dword [ebp - 0x69c]
mov dword [ebp + eax*4 - 0x1d28], 1
jmp 0x470017
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x1fc]
dec ecx
mov dword [ebp - 0x1fc], ecx
test eax, eax
je 0x4700d5
imul eax, dword [ebp - 0x8fc], 5
test eax, eax
je 0x470075
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x470075
mov dword [ebp - 0xefc], 1
jmp 0x47007c
and dword [ebp - 0xefc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d68]
sub eax, dword [ebp - 0xefc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1d28]
jge 0x4700a9
mov dword [ebp - 0x904], 1
jmp 0x4700b0
and dword [ebp - 0x904], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d28]
imul eax, dword [ebp - 0x904]
cmp eax, 0xfffffff6
jl 0x4700d5
mov dword [ebp - 0x1380], 1
jmp 0x4700dc
and dword [ebp - 0x1380], 0
mov eax, dword [ebp - 0x18d8]
cmp dword [ebp - 0x1380], eax
jge 0x4700f6
mov dword [ebp - 0x90c], 1
jmp 0x4700fd
and dword [ebp - 0x90c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d68]
imul eax, dword [ebp - 0x90c]
sub eax, dword [ebp - 0x18e0]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x1d68]
cmp eax, 1
jge 0x470133
mov dword [ebp - 0xf04], 1
jmp 0x47013a
and dword [ebp - 0xf04], 0
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0x18e8], eax
jmp 0x4702e8
mov dword [ebp - 0x204], 7
mov dword [ebp - 0x1900], 0
mov dword [ebp - 0x1fc], 0x13
jmp 0x470178
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x37
jne 0x4702e8
mov dword [ebp - 0x1908], 0xffffffff
mov dword [ebp - 0x424], 0
jmp 0x4701a8
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 1
jge 0x4701c4
mov eax, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0x18f0], 1
jmp 0x47019b
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x204], eax
jl 0x4701de
mov dword [ebp - 0x914], 1
jmp 0x4701e5
and dword [ebp - 0x914], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18f0]
cmp dword [ebp - 0x914], eax
jle 0x470206
mov dword [ebp - 0x1208], 1
jmp 0x47020d
and dword [ebp - 0x1208], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x1208], eax
jge 0x470227
mov dword [ebp - 0x18f8], 1
jmp 0x47022e
and dword [ebp - 0x18f8], 0
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x27e4], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x23cc], eax
mov eax, dword [ebp - 0x1900]
cmp dword [ebp - 0x204], eax
jne 0x470260
mov dword [ebp - 0x91c], 1
jmp 0x470267
and dword [ebp - 0x91c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d68]
cmp eax, dword [ebp - 0x91c]
jle 0x470288
mov dword [ebp - 0xf0c], 1
jmp 0x47028f
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x204]
add eax, dword [ebp - 0xf0c]
cmp eax, 0x36f
je 0x4702ae
mov dword [ebp - 0x924], 1
jmp 0x4702b5
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x1908]
cmp dword [ebp - 0x924], eax
jg 0x4702cf
mov dword [ebp - 0x1440], 1
jmp 0x4702d6
and dword [ebp - 0x1440], 0
imul eax, dword [ebp - 0x1440], 6
mov dword [ebp - 0x204], eax
jmp 0x47016b
mov dword [ebp - 0xec], 0x24a8c6a5
mov dword [ebp - 0x874], 0xe55a4419
mov dword [ebp - 0x1bc4], 0
mov dword [ebp - 0x1bc0], 0
mov dword [ebp - 0x1bbc], 0
mov dword [ebp - 0x1bb8], 0
mov dword [ebp - 0x73c], 0xd085c9e5
mov dword [ebp - 0x2614], 0x52a26f3f
mov dword [ebp - 0x5cc], 0
jmp 0x470351
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 1
jge 0x47036d
mov eax, dword [ebp - 0x5cc]
mov dword [ebp + eax*4 - 0x23d4], 1
jmp 0x470344
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1bc4], 0
jmp 0x47039b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1bc4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1bc4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1bc4], 0
jl 0x470422
push 1
lea ecx, [ebp - 0x2084]
call fcn.00428a20
mov dword [ebp - 0x1910], 0
mov dword [ebp - 0x42c], 0
jmp 0x4703db
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 1
jge 0x4703fd
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x2084]
call fcn.00428b0e
mov dword [eax], 0x250e6da5
jmp 0x4703ce
push 0
lea ecx, [ebp - 0x2084]
call fcn.00428b0e
mov eax, dword [eax]
mov dword [ebp - 0x1910], eax
lea ecx, [ebp - 0x2084]
call fcn.00428af2
jmp 0x470380
mov dword [ebp - 0x73c], 0
jmp 0x47043b
mov eax, dword [ebp - 0x73c]
inc eax
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x73c], 0
jg 0x4704fc
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x434], 0
jmp 0x47046b
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 3
jg 0x4704cc
mov byte [ebp - 0x2db], 0
movzx eax, byte [ebp - 0x2db]
test eax, eax
je 0x470494
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov byte [ebp - 0x24d], 0
movzx eax, byte [ebp - 0x24d]
test eax, eax
je 0x4704ca
push 0x6a3
push 0
push 0
push 0x18de
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x47045e
mov byte [ebp - 0x2eb], 0
movzx eax, byte [ebp - 0x2eb]
test eax, eax
je 0x4704f7
push 0x13f1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
jmp 0x47042e
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0x6a4], 0x3927
mov dword [ebp - 0x1464], 0xfffffff7
mov dword [ebp - 0x2f0], 0x901f
mov dword [ebp - 0x84], 0x3df603fa
mov dword [ebp - 0x1918], 0x5912
push 1
lea ecx, [ebp - 0x1960]
call fcn.00428a20
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0xe4], 0
jmp 0x470568
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x470587
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1960]
call fcn.00428b0e
or dword [eax], 0xffffffff
jmp 0x47055b
mov dword [ebp - 0xe4], 0
jmp 0x4705a0
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x4705bc
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x2ae8], 0xedf4
jmp 0x470593
mov eax, dword [ebp - 0x1918]
mov dword [ebp - 0x92c], eax
push 0
lea ecx, [ebp - 0x1960]
call fcn.00428b0e
mov ecx, dword [ebp - 0x92c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x20c], eax
je 0x470603
mov dword [ebp - 0xf14], 1
jmp 0x47060a
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0xf14]
jne 0x4707fb
mov dword [ebp - 0x1920], 0x73672d71
mov dword [ebp - 0x2f0], 0
jmp 0x47064b
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 7
je 0x4707f9
mov dword [ebp - 0x1928], 0x7d1
mov dword [ebp - 0x1930], 0x39200279
mov dword [ebp - 0x20c], 0
jmp 0x470685
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x13
jg 0x4707f4
mov dword [ebp - 0x360], 0x2e6c
cmp dword [ebp - 0x1920], 0
jne 0x47075b
cmp dword [ebp - 0x20c], 0
jl 0x4706be
mov dword [ebp - 0x934], 1
jmp 0x4706c5
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
add eax, 0x47cdedfc
cmp eax, dword [ebp - 0x1928]
jle 0x4706e4
mov dword [ebp - 0x1210], 1
jmp 0x4706eb
and dword [ebp - 0x1210], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x1210], eax
jge 0x470705
mov dword [ebp - 0x93c], 1
jmp 0x47070c
and dword [ebp - 0x93c], 0
mov esi, dword [ebp - 0x84]
push 0
lea ecx, [ebp - 0x1960]
call fcn.00428b0e
sub esi, dword [eax]
cmp esi, dword [ebp - 0x93c]
jle 0x470735
mov dword [ebp - 0xf1c], 1
jmp 0x47073c
and dword [ebp - 0xf1c], 0
mov eax, dword [ebp - 0xf1c]
sub eax, 0x2d2e5b2
jne 0x47075b
mov eax, 0x33ee6768
test eax, eax
jne 0x47075b
and dword [ebp - 0x944], 0
jmp 0x470765
mov dword [ebp - 0x944], 1
cmp dword [ebp - 0x944], 0x6fbfcc01
jg 0x47077d
mov dword [ebp - 0x1388], 1
jmp 0x470784
and dword [ebp - 0x1388], 0
mov eax, dword [ebp - 0x1388]
mov dword [ebp - 0x1930], eax
mov dword [ebp - 0x360], 0
jmp 0x4707a9
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0
jg 0x4707ef
mov dword [ebp - 0x84], 0
jmp 0x4707cb
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x4707ed
push dword [ebp - 0x84]
lea ecx, [ebp - 0x1960]
call fcn.00428b0e
mov dword [eax], 0x61fb9a31
jmp 0x4707be
jmp 0x47079c
jmp 0x470678
jmp 0x47063e
jmp 0x47081e
mov byte [ebp - 0x255], 0
movzx eax, byte [ebp - 0x255]
test eax, eax
je 0x47081e
push 0
push 1
push 0x99a
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [ebp - 0x84], 0xfffffff9
jmp 0x470837
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xa
jl 0x470857
mov dword [ebp - 0x1938], 0
cmp dword [ebp - 0x1938], 0
je 0x470855
jmp 0x470857
jmp 0x47082a
lea ecx, [ebp - 0x1960]
call fcn.00428af2
mov dword [ebp - 0x1950], 0x94592404
mov dword [ebp - 0x5d4], 0
jmp 0x470885
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 4
jge 0x4708a1
mov eax, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x28f8], 0xa332e525
jmp 0x470878
mov dword [ebp - 0xec], 0
jmp 0x4708ba
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jle 0x470916
mov dword [ebp - 0x43c], 0x1d69f428
mov dword [ebp - 0x43c], 0xffffffec
jmp 0x4708e6
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0x13
je 0x470914
mov byte [ebp - 0x2dd], 0
movzx eax, byte [ebp - 0x2dd]
test eax, eax
je 0x470912
push 0
push 0x744
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x4708d9
jmp 0x4708ad
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x2704], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x23dc], eax
mov eax, 0xfff9
inc eax
cmp eax, dword [ebp - 0x1a4]
jl 0x470948
mov dword [ebp - 0x94c], 1
jmp 0x47094f
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x94c], eax
jl 0x470969
mov dword [ebp - 0x1940], 1
jmp 0x470970
and dword [ebp - 0x1940], 0
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x2624], eax
mov eax, dword [ebp - 0xec]
sub eax, 0xb000
cmp eax, 0x467b
jl 0x47099a
mov dword [ebp - 0xf24], 1
jmp 0x4709a1
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0x874]
cmp dword [ebp - 0xf24], eax
je 0x4709bb
mov dword [ebp - 0x954], 1
jmp 0x4709c2
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x874]
cmp dword [ebp - 0x954], eax
je 0x4709dc
mov dword [ebp - 0x1948], 1
jmp 0x4709e3
and dword [ebp - 0x1948], 0
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x23e4], eax
mov eax, dword [ebp - 0x6a4]
cmp dword [ebp - 0xec], eax
jg 0x470a09
mov dword [ebp - 0x1218], 1
jmp 0x470a10
and dword [ebp - 0x1218], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x1218], eax
jne 0x470a2a
mov dword [ebp - 0x95c], 1
jmp 0x470a31
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x1464]
cmp dword [ebp - 0x95c], eax
jne 0x470a4b
mov dword [ebp - 0xf2c], 1
jmp 0x470a52
and dword [ebp - 0xf2c], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xf2c]
jl 0x470a6e
xor eax, eax
inc eax
jne 0x470a6e
and dword [ebp - 0x964], 0
jmp 0x470a78
mov dword [ebp - 0x964], 1
mov eax, dword [ebp - 0x6a4]
add eax, dword [ebp - 0x964]
je 0x470bc2
push 1
lea ecx, [ebp - 0x1568]
call fcn.00428a20
mov dword [ebp - 0x1220], 1
mov dword [ebp - 0x444], 0
jmp 0x470aba
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 1
jge 0x470adc
push dword [ebp - 0x444]
lea ecx, [ebp - 0x1568]
call fcn.00428b0e
mov dword [eax], 4
jmp 0x470aad
mov eax, dword [ebp - 0x1950]
mov dword [ebp - 0x2648], eax
mov esi, dword [ebp - 0x1464]
push 0
lea ecx, [ebp - 0x1568]
call fcn.00428b0e
cmp esi, dword [eax]
jge 0x470b0b
mov dword [ebp - 0x1b98], 1
jmp 0x470b12
and dword [ebp - 0x1b98], 0
push 0
lea ecx, [ebp - 0x1568]
call fcn.00428b0e
cmp dword [eax], 0x8a1b
jge 0x470b33
mov dword [ebp - 0x96c], 1
jmp 0x470b3a
and dword [ebp - 0x96c], 0
push 0
lea ecx, [ebp - 0x1568]
call fcn.00428b0e
mov ecx, dword [ebp - 0x96c]
cmp ecx, dword [eax]
jg 0x470b5d
mov dword [ebp - 0x1ba0], 1
jmp 0x470b64
and dword [ebp - 0x1ba0], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xf34], eax
push 0
lea ecx, [ebp - 0x1568]
call fcn.00428b0e
mov ecx, dword [ebp - 0xf34]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1220]
cmp dword [ebp - 0xf34], eax
jg 0x470b9f
mov dword [ebp - 0x974], 1
jmp 0x470ba6
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x1220], eax
lea ecx, [ebp - 0x1568]
call fcn.00428af2
jmp 0x470cfa
mov dword [ebp - 0xf3c], 0xfffffffa
mov dword [ebp - 0x1ba8], 0xffffffff
mov dword [ebp - 0x1a4], 0
jmp 0x470bef
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xfffffff0
jg 0x470cfa
mov dword [ebp - 0x1390], 0xfffc
mov dword [ebp - 0x1bb0], 0xfffffffb
mov dword [ebp - 0x5dc], 0
jmp 0x470c29
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 3
jge 0x470c45
mov eax, dword [ebp - 0x5dc]
mov dword [ebp + eax*4 - 0x1f94], 1
jmp 0x470c1c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f94]
cmp dword [ebp - 0x1390], eax
jne 0x470c66
mov dword [ebp - 0x97c], 1
jmp 0x470c6d
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x470cd4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f94]
mov dword [ebp - 0x23ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f94]
mov dword [ebp - 0x2634], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28f8]
mov dword [ebp - 0xf3c], eax
mov eax, dword [ebp - 0xf3c]
sub eax, 6
sub eax, dword [ebp - 0x1ba8]
jne 0x470cd4
and dword [ebp - 0x984], 0
jmp 0x470cde
mov dword [ebp - 0x984], 1
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x1bb0], eax
cmp dword [ebp - 0x1390], 0
je 0x470cf5
jmp 0x470cfa
jmp 0x470be2
cmp dword [ebp - 0xfb4], 0x43e
jle 0x471848
and dword [ebp - 0x5e4], 0
jmp 0x470d20
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x4c5f
jge 0x471840
mov dword [ebp - 0x23f4], 0x70ad6f2e
mov dword [ebp - 0x2650], 0xffffffff
mov dword [ebp - 0x23fc], 0x58d32ffa
mov dword [ebp - 0x2644], 0xf3de0369
mov dword [ebp - 0x98c], 0
mov dword [ebp - 0x44c], 0
jmp 0x470d7b
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 2
jge 0x470d97
mov eax, dword [ebp - 0x44c]
mov dword [ebp + eax*4 - 0x2890], 9
jmp 0x470d6e
mov eax, dword [ebp - 0x98c]
dec eax
mov dword [ebp - 0x98c], eax
mov byte [ebp - 0x25d], 0
movzx eax, byte [ebp - 0x25d]
test eax, eax
je 0x470dd5
push 0
push 0
push 0x731
push 0
push 0xf01
push 0
push 0xdcc
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
and dword [ebp - 0x45c], 0
jmp 0x470deb
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0x5915
jge 0x47183b
mov dword [ebp - 0xc4], 0x90ac204e
mov dword [ebp - 0x338], 0xa0029bf3
mov dword [ebp - 0x7ac], 0x6e3e45bb
mov dword [ebp - 0x1228], 2
mov dword [ebp - 0x1690], 0xb5cf
mov dword [ebp - 0x70c], 0
jmp 0x470e46
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 3
jge 0x470e62
mov eax, dword [ebp - 0x70c]
mov dword [ebp + eax*4 - 0x1c0c], 0xfffb
jmp 0x470e39
mov dword [ebp - 0xc4], 0xfffffff7
jmp 0x470e7b
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffe5
jl 0x470e9d
mov dword [ebp - 0xf44], 3
mov eax, dword [ebp - 0xf44]
inc eax
mov dword [ebp - 0xf44], eax
jmp 0x470e6e
mov dword [ebp - 0x338], 0
jmp 0x470eb6
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jg 0x471104
mov dword [ebp - 0x1e4c], 0xd018
mov dword [ebp - 0x1e48], 0xd018
mov dword [ebp - 0x1e44], 0xd018
mov dword [ebp - 0x1e40], 0xd018
lea ecx, [ebp - 0x885]
call fcn.00428b1d
push eax
lea eax, [ebp - 0x1e3c]
push eax
lea eax, [ebp - 0x1e4c]
push eax
lea ecx, [ebp - 0x28c0]
call fcn.00428b20
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1c60]
call fcn.00428acc
mov dword [ebp - 0xc4], 0
jmp 0x470f39
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jg 0x471008
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x2f8], 2
jmp 0x470f69
mov eax, dword [ebp - 0x2f8]
dec eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jl 0x471003
mov dword [ebp - 0x454], 0xba028ea3
mov dword [ebp - 0x454], 2
jmp 0x470f99
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jl 0x470fec
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0x1c0c], 0
je 0x470fb4
jmp 0x470fec
push 3
lea ecx, [ebp - 0x1c60]
call fcn.00428b0e
mov ecx, dword [ebp - 0x2f8]
cmp dword [eax], ecx
jge 0x470fd7
mov dword [ebp - 0x994], 1
jmp 0x470fde
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x7ac], eax
jmp 0x470f8c
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp + eax*4 - 0x1c0c], 0
je 0x470ffe
jmp 0x471003
jmp 0x470f5c
jmp 0x470f2c
mov dword [ebp - 0x1228], 0x65b0
cmp dword [ebp - 0x1228], 0xfffffff6
jne 0x471027
mov dword [ebp - 0x99c], 1
jmp 0x47102e
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x338]
mov eax, dword [ebp + eax*4 - 0x1c0c]
cmp eax, dword [ebp - 0x99c]
jl 0x47104f
mov dword [ebp - 0xf4c], 1
jmp 0x471056
and dword [ebp - 0xf4c], 0
cmp dword [ebp - 0xf4c], 0xfffffffb
jne 0x47106b
mov dword [ebp - 0x9a4], 1
jmp 0x471072
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x338]
mov eax, dword [ebp + eax*4 - 0x1c0c]
add eax, dword [ebp - 0x9a4]
cmp eax, dword [ebp - 0x7ac]
jle 0x471099
mov dword [ebp - 0x1448], 1
jmp 0x4710a0
and dword [ebp - 0x1448], 0
mov esi, 0x4361
sub esi, dword [ebp - 0x1448]
push 3
lea ecx, [ebp - 0x1c60]
call fcn.00428b0e
cmp esi, dword [eax]
jne 0x4710c8
mov dword [ebp - 0x1748], 1
jmp 0x4710cf
and dword [ebp - 0x1748], 0
mov eax, dword [ebp - 0x1690]
mov dword [ebp - 0x2404], eax
push 1
lea ecx, [ebp - 0x1c60]
call fcn.00428b0e
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x1c60]
call fcn.00428af2
jmp 0x470ea9
and dword [ebp - 0x6ac], 0
jmp 0x47111a
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 0x3ff0
jge 0x471836
mov dword [ebp - 0x9b4], 0x97a4
mov dword [ebp - 0x159c], 1
mov dword [ebp - 0x1398], 0xfffffffd
mov dword [ebp - 0x2658], 0xaae4b9a7
mov dword [ebp - 0x240c], 0xffffffff
mov dword [ebp - 0x9ac], 0xfffffffd
mov dword [ebp - 0x15a4], 5
mov dword [ebp - 0x1bd8], 1
mov dword [ebp - 0x1bd4], 1
mov dword [ebp - 0x1bd0], 1
mov dword [ebp - 0x1bcc], 1
mov dword [ebp - 0x824], 4
mov dword [ebp - 0x2660], 1
mov dword [ebp - 0x164], 0
jmp 0x4711c5
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x4711e1
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x1ebc], 0xe74a
jmp 0x4711b8
mov dword [ebp - 0x164], 0
jmp 0x4711fa
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x471216
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x1aa0], 0xb467bb1a
jmp 0x4711ed
cmp dword [ebp - 0x9b4], 0
je 0x47133d
cmp dword [ebp - 0x1398], 0
je 0x471247
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1ebc]
cmp dword [ebp + eax - 0x1ebc], ecx
jge 0x471255
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1bd8], 0
mov eax, dword [ebp - 0x824]
inc eax
mov dword [ebp - 0x824], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1bd8]
mov dword [ebp - 0x9ac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9ac]
add ecx, dword [ebp + eax - 0x1bd8]
mov eax, dword [ebp - 0x159c]
sub eax, dword [ebp - 0x824]
add eax, ecx
jne 0x4712b0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1aa0], 0
jne 0x4712b0
and dword [ebp - 0xf54], 0
jmp 0x4712ba
mov dword [ebp - 0xf54], 1
cmp dword [ebp - 0xf54], 1
jae 0x4712cf
mov dword [ebp - 0x1230], 1
jmp 0x4712d6
and dword [ebp - 0x1230], 0
mov eax, dword [ebp - 0x9b4]
add eax, dword [ebp - 0x1230]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1ebc]
jl 0x4712fd
mov dword [ebp - 0x9bc], 1
jmp 0x471304
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x15a4]
cmp dword [ebp - 0x9bc], eax
jle 0x47131e
mov dword [ebp - 0xf5c], 1
jmp 0x471325
and dword [ebp - 0xf5c], 0
cmp dword [ebp - 0xf5c], 0x8214d2fc
jb 0x47133d
mov dword [ebp - 0x9c4], 1
jmp 0x471344
and dword [ebp - 0x9c4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x9c4]
mov dword [ebp + eax - 0x1bd8], ecx
mov dword [ebp - 0x1398], 0xffffffff
and dword [ebp - 0x464], 0
jmp 0x471377
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0x4c99
jge 0x471831
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x9cc], 0xfffffff6
push 2
lea ecx, [ebp - 0x1c78]
call fcn.00428a20
push 3
lea ecx, [ebp - 0x1504]
call fcn.00428a20
mov dword [ebp - 0x1dfc], 0xa9550690
mov dword [ebp - 0x1df8], 0xa9550690
mov dword [ebp - 0x1df4], 0xa9550690
mov dword [ebp - 0x1df0], 0xa9550690
lea ecx, [ebp - 0x771]
call fcn.00428b1d
push eax
lea eax, [ebp - 0x1dec]
push eax
lea eax, [ebp - 0x1dfc]
push eax
lea ecx, [ebp - 0x2930]
call fcn.00428b20
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x24f0]
call fcn.00428acc
push 2
lea ecx, [ebp - 0x1fac]
call fcn.00428a20
mov dword [ebp - 0x14], 0
jmp 0x47142c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x471448
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1c78]
call fcn.00428b0e
mov dword [eax], 7
jmp 0x471425
mov dword [ebp - 0x14], 0
jmp 0x471458
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x471471
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1504]
call fcn.00428b0e
or dword [eax], 0xffffffff
jmp 0x471451
mov dword [ebp - 0x14], 0
jmp 0x471481
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x471497
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d40], 0xb3f4b141
jmp 0x47147a
mov dword [ebp - 0x14], 0
jmp 0x4714a7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4714c3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1fac]
call fcn.00428b0e
mov dword [eax], 0xbe86de1
jmp 0x4714a0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x9cc], eax
imul eax, dword [ebp - 0x74], 0x9478
cmp dword [ebp - 0x9cc], eax
jle 0x4714e7
mov dword [ebp - 0x9d4], 1
jmp 0x4714ee
and dword [ebp - 0x9d4], 0
push 0
lea ecx, [ebp - 0x1c78]
call fcn.00428b0e
mov dword [eax], 0xb597857
push 0
lea ecx, [ebp - 0x1504]
call fcn.00428b0e
mov dword [eax], 0xb597857
mov eax, 0xb597857
test eax, eax
je 0x47153b
push 0
lea ecx, [ebp - 0x1c78]
call fcn.00428b0e
cmp dword [eax], 0
je 0x47153b
mov dword [ebp - 0xf64], 1
jmp 0x471542
and dword [ebp - 0xf64], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf64]
mov dword [ebp + eax - 0x1d40], ecx
push 0
lea ecx, [ebp - 0x1504]
call fcn.00428b0e
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2414], eax
mov eax, dword [ebp - 0x9d4]
sub eax, 0xfff8
cmp eax, 0xd17cd953
je 0x471589
mov dword [ebp - 0x1238], 1
jmp 0x471590
and dword [ebp - 0x1238], 0
cmp dword [ebp - 0x1238], 0x55f1
jle 0x4715a8
mov dword [ebp - 0x9dc], 1
jmp 0x4715af
and dword [ebp - 0x9dc], 0
cmp dword [ebp - 0x9dc], 0xfff9
jae 0x4715d9
push 0
lea ecx, [ebp - 0x1504]
call fcn.00428b0e
cmp dword [eax], 0
je 0x4715d9
mov dword [ebp - 0x18b4], 1
jmp 0x4715e0
and dword [ebp - 0x18b4], 0
or eax, 0xffffffff
je 0x4715f2
push 2
lea ecx, [ebp - 0x1504]
call fcn.00428b0e
mov eax, 0x4eb300a9
test eax, eax
je 0x47160c
or eax, 0xffffffff
je 0x47160c
mov dword [ebp - 0xf6c], 1
jmp 0x471613
and dword [ebp - 0xf6c], 0
cmp dword [ebp - 0xf6c], 0x2a911815
je 0x47162b
mov dword [ebp - 0x9e4], 1
jmp 0x471632
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9e4], eax
jge 0x471649
mov dword [ebp - 0x1478], 1
jmp 0x471650
and dword [ebp - 0x1478], 0
cmp dword [ebp - 0x1478], 0x49f2
jg 0x471668
mov dword [ebp - 0x9ec], 1
jmp 0x47166f
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9ec], eax
jl 0x47168b
or eax, 0xffffffff
je 0x47168b
mov dword [ebp - 0xf74], 1
jmp 0x471692
and dword [ebp - 0xf74], 0
imul eax, dword [ebp - 0xf74], 9
cmp eax, dword [ebp - 0x74]
jg 0x4716aa
mov dword [ebp - 0x9f4], 1
jmp 0x4716b1
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x9f4]
cmp eax, 0x307b5ca9
jne 0x4716ce
mov dword [ebp - 0x1240], 1
jmp 0x4716d5
and dword [ebp - 0x1240], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1240], eax
jle 0x4716ec
mov dword [ebp - 0x9fc], 1
jmp 0x4716f3
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9fc], eax
jl 0x47171a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d40], 0
je 0x47171a
mov dword [ebp - 0x7b4], 1
jmp 0x471721
and dword [ebp - 0x7b4], 0
push 3
lea ecx, [ebp - 0x24f0]
call fcn.00428b0e
mov ecx, dword [ebp - 0x7b4]
mov dword [eax], ecx
cmp dword [ebp - 0x7b4], 0
jne 0x47174d
xor eax, eax
inc eax
jne 0x47174d
and dword [ebp - 0xf7c], 0
jmp 0x471757
mov dword [ebp - 0xf7c], 1
cmp dword [ebp - 0xf7c], 0xfffffff9
jge 0x47176c
mov dword [ebp - 0xa04], 1
jmp 0x471773
and dword [ebp - 0xa04], 0
push 1
lea ecx, [ebp - 0x1fac]
call fcn.00428b0e
mov ecx, dword [ebp - 0xa04]
mov dword [eax], ecx
mov dword [ebp - 0x74], 0
jmp 0x471798
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xa
jl 0x4717bf
mov dword [ebp - 0x15ac], 0
push 2
lea ecx, [ebp - 0x1504]
call fcn.00428b0e
mov eax, dword [eax]
mov dword [ebp - 0x15ac], eax
jmp 0x471791
lea ecx, [ebp - 0x1fac]
call fcn.00428af2
lea ecx, [ebp - 0x24f0]
call fcn.00428af2
lea ecx, [ebp - 0x1504]
call fcn.00428af2
lea ecx, [ebp - 0x1c78]
call fcn.00428af2
mov eax, dword [ebp - 0x5e4]
mov ecx, dword [ebp - 0x45c]
sar eax, cl
mov edx, dword [ebp - 0x6ac]
mov ecx, dword [ebp - 0x464]
sar edx, cl
and eax, edx
cdq
mov dword [ebp - 0x1774], eax
mov dword [ebp - 0x1770], edx
push dword [ebp - 0x1770]
push dword [ebp - 0x1774]
mov ecx, 0xabae40
call fcn.00482113
jmp 0x47136a
jmp 0x47110d
jmp 0x470dde
jmp 0x470d13
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
mov dword [ebp - 0x24], 0xb7c7ce53
push 3
lea ecx, [ebp - 0x1970]
call fcn.00428a20
mov dword [ebp - 0x18bc], 0x2fbf3f07
mov dword [ebp - 0x4c], 0
jmp 0x471876
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x47188c
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x8b8], 0xffffffff
jmp 0x47186f
mov dword [ebp - 0x4c], 0
jmp 0x47189c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x4718b2
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x1518], 0x5051
jmp 0x471895
mov dword [ebp - 0x4c], 0
jmp 0x4718c2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x4718de
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1970]
call fcn.00428b0e
mov dword [eax], 0x72d50fa8
jmp 0x4718bb
mov dword [ebp - 0x24], 2
jmp 0x4718ee
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x471ada
mov dword [ebp - 0x5ec], 0
jmp 0x471911
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 3
jge 0x47192d
mov eax, dword [ebp - 0x5ec]
mov dword [ebp + eax*4 - 0x2500], 0x120dd93b
jmp 0x471904
push 6
pop eax
test eax, eax
je 0x471959
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x8b8]
mov dword [ebp - 0x27ac], eax
mov eax, 0xfffe
test eax, eax
je 0x471959
mov dword [ebp - 0xa0c], 1
jmp 0x471960
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp + eax*4 - 0x8b8], 9
mov ecx, dword [ebp - 0x24]
cmp eax, dword [ebp + ecx*4 - 0x8b8]
jle 0x471983
mov dword [ebp - 0x13a0], 1
jmp 0x47198a
and dword [ebp - 0x13a0], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp + ecx*4 - 0x8b8]
add ecx, dword [ebp - 0x13a0]
cmp dword [ebp + eax*4 - 0x8b8], ecx
jg 0x4719b2
mov dword [ebp - 0xf84], 1
jmp 0x4719b9
and dword [ebp - 0xf84], 0
mov eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0xf84]
jne 0x4719d3
mov dword [ebp - 0xa14], 1
jmp 0x4719da
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x8b8]
cmp dword [ebp - 0xa14], eax
jl 0x4719f8
mov dword [ebp - 0x1248], 1
jmp 0x4719ff
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x8b8]
imul eax, dword [ebp - 0x24]
imul eax, eax, 0x1fa4
mov ecx, dword [ebp - 0x24]
mov dword [ebp + ecx*4 - 0x8b8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2500], 6
jbe 0x471a38
mov dword [ebp - 0xa1c], 1
jmp 0x471a3f
and dword [ebp - 0xa1c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2500]
cmp dword [ebp - 0xa1c], eax
jle 0x471a5f
mov dword [ebp - 0x1b48], 1
jmp 0x471a66
and dword [ebp - 0x1b48], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x241c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1518]
mov dword [ebp - 0x2654], eax
mov eax, 0x32d3
test eax, eax
je 0x471aa7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1518], 0
je 0x471aa7
mov dword [ebp - 0xf8c], 1
jmp 0x471aae
and dword [ebp - 0xf8c], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x1518]
imul esi, dword [ebp - 0xf8c]
imul esi, dword [ebp - 0x24]
push 0
lea ecx, [ebp - 0x1970]
call fcn.00428b0e
mov dword [eax], esi
jmp 0x4718e7
mov eax, 0x20f
test eax, eax
je 0x471b25
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1518], 0
je 0x471b25
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b8]
mov dword [ebp - 0x2424], eax
push 0
lea ecx, [ebp - 0x1970]
call fcn.00428b0e
cmp dword [ebp - 0x24], 0
je 0x471b25
mov dword [ebp - 0x15b4], 1
jmp 0x471b2c
and dword [ebp - 0x15b4], 0
cmp dword [ebp - 0x18bc], 6
ja 0x471b47
cmp dword [ebp - 0x24], 0
je 0x471b47
mov dword [ebp - 0xa24], 1
jmp 0x471b4e
and dword [ebp - 0xa24], 0
mov esi, dword [ebp - 0xa24]
neg esi
push 0
lea ecx, [ebp - 0x1970]
call fcn.00428b0e
mov dword [eax], esi
lea ecx, [ebp - 0x1970]
call fcn.00428af2
xor ecx, ecx
call fcn.00428d8b
push eax
call fcn.00486af3
pop ecx
mov dword [ebp - 0x30], 0xb7c7ce53
push 3
lea ecx, [ebp - 0x1980]
call fcn.00428a20
mov dword [ebp - 0x15c4], 0x2fbf3f07
mov dword [ebp - 0x5c], 0
jmp 0x471bac
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x471bc2
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x8ac], 0xffffffff
jmp 0x471ba5
mov dword [ebp - 0x5c], 0
jmp 0x471bd2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x471be8
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1520], 0x5051
jmp 0x471bcb
mov dword [ebp - 0x5c], 0
jmp 0x471bf8
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x471c14
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1980]
call fcn.00428b0e
mov dword [eax], 0x72d50fa8
jmp 0x471bf1
mov dword [ebp - 0x30], 2
jmp 0x471c24
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x471e10
mov dword [ebp - 0x46c], 0
jmp 0x471c47
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 3
jge 0x471c63
mov eax, dword [ebp - 0x46c]
mov dword [ebp + eax*4 - 0x2510], 0x120dd93b
jmp 0x471c3a
push 6
pop eax
test eax, eax
je 0x471c8f
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x8ac]
mov dword [ebp - 0x270c], eax
mov eax, 0xfffe
test eax, eax
je 0x471c8f
mov dword [ebp - 0xa2c], 1
jmp 0x471c96
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp + eax*4 - 0x8ac], 9
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ebp + ecx*4 - 0x8ac]
jle 0x471cb9
mov dword [ebp - 0x1454], 1
jmp 0x471cc0
and dword [ebp - 0x1454], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp + ecx*4 - 0x8ac]
add ecx, dword [ebp - 0x1454]
cmp dword [ebp + eax*4 - 0x8ac], ecx
jg 0x471ce8
mov dword [ebp - 0xf94], 1
jmp 0x471cef
and dword [ebp - 0xf94], 0
mov eax, dword [ebp - 0xa2c]
cmp eax, dword [ebp - 0xf94]
jne 0x471d09
mov dword [ebp - 0xa34], 1
jmp 0x471d10
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x8ac]
cmp dword [ebp - 0xa34], eax
jl 0x471d2e
mov dword [ebp - 0x1250], 1
jmp 0x471d35
and dword [ebp - 0x1250], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x8ac]
imul eax, dword [ebp - 0x30]
imul eax, eax, 0x1fa4
mov ecx, dword [ebp - 0x30]
mov dword [ebp + ecx*4 - 0x8ac], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2510], 6
jbe 0x471d6e
mov dword [ebp - 0xa3c], 1
jmp 0x471d75
and dword [ebp - 0xa3c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2510]
cmp dword [ebp - 0xa3c], eax
jle 0x471d95
mov dword [ebp - 0x15bc], 1
jmp 0x471d9c
and dword [ebp - 0x15bc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x242c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1520]
mov dword [ebp - 0x265c], eax
mov eax, 0x32d3
test eax, eax
je 0x471ddd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1520], 0
je 0x471ddd
mov dword [ebp - 0xf9c], 1
jmp 0x471de4
and dword [ebp - 0xf9c], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x1520]
imul esi, dword [ebp - 0xf9c]
imul esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0x1980]
call fcn.00428b0e
mov dword [eax], esi
jmp 0x471c1d
mov eax, 0x20f
test eax, eax
je 0x471e5b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1520], 0
je 0x471e5b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8ac]
mov dword [ebp - 0x2434], eax
push 0
lea ecx, [ebp - 0x1980]
call fcn.00428b0e
cmp dword [ebp - 0x30], 0
je 0x471e5b
mov dword [ebp - 0x1ab0], 1
jmp 0x471e62
and dword [ebp - 0x1ab0], 0
cmp dword [ebp - 0x15c4], 6
ja 0x471e7d
cmp dword [ebp - 0x30], 0
je 0x471e7d
mov dword [ebp - 0xa44], 1
jmp 0x471e84
and dword [ebp - 0xa44], 0
mov esi, dword [ebp - 0xa44]
neg esi
push 0
lea ecx, [ebp - 0x1980]
call fcn.00428b0e
mov dword [eax], esi
lea ecx, [ebp - 0x1980]
call fcn.00428af2
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa5c], 0xa3d88101
mov dword [ebp - 0x2168], 0xc6eb81f9
mov dword [ebp - 0x2170], 4
mov dword [ebp - 0x2178], 0x42b8ffd0
mov dword [ebp - 0x2180], 0xffffffff
mov dword [ebp - 0x2188], 0x8880d0e
mov dword [ebp - 0x2190], 0x1cdffa87
mov dword [ebp - 0x2198], 0x2349124c
mov dword [ebp - 0x21a0], 0xfffffff9
mov dword [ebp - 0x21a8], 0x203fca5e
mov dword [ebp - 0x21b0], 0xb48fe2d5
mov dword [ebp - 0x21b8], 0xd357e8f5
mov dword [ebp - 0xa6c], 0x8db0
mov dword [ebp - 0x764], 0
jmp 0x471f4b
mov eax, dword [ebp - 0x764]
inc eax
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 2
jge 0x471f67
mov eax, dword [ebp - 0x764]
mov dword [ebp + eax*4 - 0x28d0], 0xfffffffa
jmp 0x471f3e
mov dword [ebp - 0xa0], 0
jmp 0x471f80
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x19
je 0x4721de
mov dword [ebp - 0x15cc], 0
mov dword [ebp - 0xf4], 0
jmp 0x471fb0
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x471fcc
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x8c4], 0x78c3
jmp 0x471fa3
mov dword [ebp - 0xf4], 0
jmp 0x471fe5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x472001
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x29dc], 0x90ba5fc0
jmp 0x471fd8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8c4]
mov dword [ebp - 0x21c0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8c4], 0xfc2e
jne 0x472037
mov eax, 0xe6c0b333
test eax, eax
jne 0x472037
and dword [ebp - 0x13a8], 0
jmp 0x472041
mov dword [ebp - 0x13a8], 1
cmp dword [ebp - 0x13a8], 0x7684593f
je 0x472062
cmp dword [ebp - 0xa0], 0
je 0x472062
mov dword [ebp - 0xa4c], 1
jmp 0x472069
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa4c], eax
jne 0x47208f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8c4], 0
jne 0x47208f
and dword [ebp - 0xfa4], 0
jmp 0x472099
mov dword [ebp - 0xfa4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8c4]
neg eax
cmp eax, dword [ebp - 0xfa4]
je 0x4720bb
mov dword [ebp - 0x18c4], 1
jmp 0x4720c2
and dword [ebp - 0x18c4], 0
cmp dword [ebp - 0xa0], 0x56e623b2
jl 0x4720da
mov dword [ebp - 0xa54], 1
jmp 0x4720e1
and dword [ebp - 0xa54], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8c4]
add eax, dword [ebp - 0xa54]
imul eax, dword [ebp - 0xa0]
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa0]
cmp dword [ebp + eax - 0x8c4], ecx
jl 0x472127
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8c4], 0
jne 0x472127
and dword [ebp - 0x1258], 0
jmp 0x472131
mov dword [ebp - 0x1258], 1
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0xa5c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa5c]
imul ecx, dword [ebp + eax - 0x8c4]
cmp dword [ebp - 0xa0], ecx
jle 0x472165
mov dword [ebp - 0xfac], 1
jmp 0x47216c
and dword [ebp - 0xfac], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xfac]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x8c4]
jl 0x472193
mov dword [ebp - 0xa64], 1
jmp 0x47219a
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0xa64]
sub eax, dword [ebp - 0xa0]
cmp eax, 0xc19c5a65
jbe 0x4721b9
mov dword [ebp - 0x1480], 1
jmp 0x4721c0
and dword [ebp - 0x1480], 0
mov eax, dword [ebp - 0x1480]
mov dword [ebp - 0x15cc], eax
mov eax, dword [ebp - 0xa6c]
inc eax
mov dword [ebp - 0xa6c], eax
jmp 0x471f73
and dword [ebp - 4], 0
cmp dword [ebp - 0xfb4], 0xffffffec
jge 0x4723c1
mov dword [ebp - 0xa84], 0xbacd7953
mov dword [ebp - 0x3a0], 0x15aa9614
mov dword [ebp - 0x85c], 0xfffffff7
push 1
lea ecx, [ebp - 0x1990]
call fcn.00428a20
mov dword [ebp - 0xfbc], 0x362395e2
mov dword [ebp - 0x15d4], 0x278ee3f2
mov dword [ebp - 0x474], 0
jmp 0x472247
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 1
jge 0x472269
push dword [ebp - 0x474]
lea ecx, [ebp - 0x1990]
call fcn.00428b0e
mov dword [eax], 1
jmp 0x47223a
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 0xc5eb2006
jb 0x472299
mov dword [ebp - 0xa74], 1
jmp 0x4722a0
and dword [ebp - 0xa74], 0
push 0
lea ecx, [ebp - 0x1990]
call fcn.00428b0e
mov ecx, dword [ebp - 0xa74]
sub ecx, dword [eax]
jne 0x472308
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x3a0], eax
jg 0x4722d1
mov dword [ebp - 0x1260], 1
jmp 0x4722d8
and dword [ebp - 0x1260], 0
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x1260], eax
jne 0x4722ed
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x4722ff
push 0
lea ecx, [ebp - 0x1990]
call fcn.00428b0e
cmp dword [eax], 0
jne 0x472308
and dword [ebp - 0xa7c], 0
jmp 0x472312
mov dword [ebp - 0xa7c], 1
mov eax, dword [ebp - 0xfbc]
cmp dword [ebp - 0xa7c], eax
je 0x47232c
mov dword [ebp - 0x1b50], 1
jmp 0x472333
and dword [ebp - 0x1b50], 0
mov esi, dword [ebp - 0xfbc]
push 0
lea ecx, [ebp - 0x1990]
call fcn.00428b0e
cmp esi, dword [eax]
jl 0x47235c
mov eax, 0x33c0
test eax, eax
jne 0x47235c
and dword [ebp - 0x13b0], 0
jmp 0x472366
mov dword [ebp - 0x13b0], 1
mov dword [ebp - 0xa84], 5
mov eax, dword [ebp - 0xa84]
cmp eax, dword [ebp - 0x13b0]
jg 0x472393
mov eax, 0x6091
test eax, eax
je 0x472393
mov dword [ebp - 0xa8c], 1
jmp 0x47239a
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x15d4], eax
lea ecx, [ebp - 0x1990]
call fcn.00428af2
mov edx, dword [ebp - 0x18cc]
mov ecx, 0xabae40
call fcn.004835c1
jmp 0x4723dd
or dword [ebp - 4], 0xffffffff
jmp 0x4723e7
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xaa4], 0xa3d88101
mov dword [ebp - 0x21c8], 0xc6eb81f9
mov dword [ebp - 0x21d0], 4
mov dword [ebp - 0x21d8], 0x42b8ffd0
mov dword [ebp - 0x21e0], 0xffffffff
mov dword [ebp - 0x21e8], 0x8880d0e
mov dword [ebp - 0x21f0], 0x1cdffa87
mov dword [ebp - 0x21f8], 0x2349124c
mov dword [ebp - 0x2200], 0xfffffff9
mov dword [ebp - 0x2208], 0x203fca5e
mov dword [ebp - 0x2210], 0xb48fe2d5
mov dword [ebp - 0x2218], 0xd357e8f5
mov dword [ebp - 0xab4], 0x8db0
mov dword [ebp - 0x5f4], 0
jmp 0x47248c
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 2
jge 0x4724a8
mov eax, dword [ebp - 0x5f4]
mov dword [ebp + eax*4 - 0x2970], 0xfffffffa
jmp 0x47247f
mov dword [ebp - 0x8c], 0
jmp 0x4724c1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x19
je 0x47271f
mov dword [ebp - 0x1ac0], 0
mov dword [ebp - 0x188], 0
jmp 0x4724f1
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x47250d
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x8a0], 0x78c3
jmp 0x4724e4
mov dword [ebp - 0x188], 0
jmp 0x472526
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x472542
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x2a48], 0x90ba5fc0
jmp 0x472519
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0x2220], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8a0], 0xfc2e
jne 0x472578
mov eax, 0xe6c0b333
test eax, eax
jne 0x472578
and dword [ebp - 0xfc4], 0
jmp 0x472582
mov dword [ebp - 0xfc4], 1
cmp dword [ebp - 0xfc4], 0x7684593f
je 0x4725a3
cmp dword [ebp - 0x8c], 0
je 0x4725a3
mov dword [ebp - 0xa94], 1
jmp 0x4725aa
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xa94], eax
jne 0x4725d0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8a0], 0
jne 0x4725d0
and dword [ebp - 0x1268], 0
jmp 0x4725da
mov dword [ebp - 0x1268], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
neg eax
cmp eax, dword [ebp - 0x1268]
je 0x4725fc
mov dword [ebp - 0x15dc], 1
jmp 0x472603
and dword [ebp - 0x15dc], 0
cmp dword [ebp - 0x8c], 0x56e623b2
jl 0x47261b
mov dword [ebp - 0xa9c], 1
jmp 0x472622
and dword [ebp - 0xa9c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
add eax, dword [ebp - 0xa9c]
imul eax, dword [ebp - 0x8c]
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + eax - 0x8a0], ecx
jl 0x472668
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8a0], 0
jne 0x472668
and dword [ebp - 0xfcc], 0
jmp 0x472672
mov dword [ebp - 0xfcc], 1
mov eax, dword [ebp - 0xfcc]
mov dword [ebp - 0xaa4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xaa4]
imul ecx, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x8c], ecx
jle 0x4726a6
mov dword [ebp - 0x1460], 1
jmp 0x4726ad
and dword [ebp - 0x1460], 0
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x1460]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x8a0]
jl 0x4726d4
mov dword [ebp - 0xaac], 1
jmp 0x4726db
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0xaac]
sub eax, dword [ebp - 0x8c]
cmp eax, 0xc19c5a65
jbe 0x4726fa
mov dword [ebp - 0xfd4], 1
jmp 0x472701
and dword [ebp - 0xfd4], 0
mov eax, dword [ebp - 0xfd4]
mov dword [ebp - 0x1ac0], eax
mov eax, dword [ebp - 0xab4]
inc eax
mov dword [ebp - 0xab4], eax
jmp 0x4724b4
mov dword [ebp - 0xfc], 0x1e559696
mov dword [ebp - 0x15ec], 0xdc5336de
mov dword [ebp - 0x47c], 0
jmp 0x47274c
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 1
jge 0x472768
mov eax, dword [ebp - 0x47c]
mov dword [ebp + eax*4 - 0x18d4], 0xfffffffd
jmp 0x47273f
mov dword [ebp - 0xfc], 0
jmp 0x472781
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x4727ba
mov byte [ebp - 0x2e5], 0
movzx eax, byte [ebp - 0x2e5]
test eax, eax
je 0x4727b8
push 0
push 0x1e3e
push 0x1a3e
push 0x1e0b
push 0xdcb
call dword [sym.imp.GDI32.dll_CreateBitmap]
jmp 0x472774
cmp dword [ebp - 0xfc], 0
je 0x4727d6
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x4727d6
mov dword [ebp - 0x15e4], 1
jmp 0x4727dd
and dword [ebp - 0x15e4], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2228], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xa924c000
ja 0x47280d
mov dword [ebp - 0x1270], 1
jmp 0x472814
and dword [ebp - 0x1270], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18d4]
cmp eax, dword [ebp - 0x1270]
jge 0x472835
mov dword [ebp - 0xabc], 1
jmp 0x47283c
and dword [ebp - 0xabc], 0
cmp dword [ebp - 0xabc], 0xc8f0d071
jae 0x472854
mov dword [ebp - 0xfdc], 1
jmp 0x47285b
and dword [ebp - 0xfdc], 0
mov eax, dword [ebp - 0xfdc]
mov dword [ebp - 0x15ec], eax
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1869f
push 0x1869f
push 0x90000000
push 0xab0ae8
push 0xab0ae8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x7f8], eax
push 5
push dword [ebp - 0x7f8]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x300], 0x5540d7f8
mov dword [ebp - 0x214], 0xd2ab60e7
mov dword [ebp - 0x6b4], 0
jmp 0x4728d5
mov eax, dword [ebp - 0x6b4]
inc eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 2
jge 0x4728f1
mov eax, dword [ebp - 0x6b4]
mov dword [ebp + eax*4 - 0x2134], 0x9c213245
jmp 0x4728c8
mov dword [ebp - 0x300], 0
jmp 0x47290a
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xfffffffb
jne 0x472934
mov byte [ebp - 0x265], 0
movzx eax, byte [ebp - 0x265]
test eax, eax
je 0x472932
push 0x24d9
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x4728fd
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x2230], eax
cmp dword [ebp - 0x214], 0
jne 0x47295b
cmp dword [ebp - 0x214], 0
jne 0x47295b
and dword [ebp - 0x7bc], 0
jmp 0x472965
mov dword [ebp - 0x7bc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp + eax - 0x2134], ecx
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x7bc]
cmp eax, dword [ebp - 0x214]
jle 0x472998
mov dword [ebp - 0x1b58], 1
jmp 0x47299f
and dword [ebp - 0x1b58], 0
mov dword [ebp - 0x300], 0x5b3b9da4
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x2238], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x109c], 0x741d
mov dword [ebp - 0x16c], 0x1e559696
mov dword [ebp - 0x15fc], 0xdc5336de
mov dword [ebp - 0x484], 0
jmp 0x4729f8
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 1
jge 0x472a14
mov eax, dword [ebp - 0x484]
mov dword [ebp + eax*4 - 0x18dc], 0xfffffffd
jmp 0x4729eb
mov dword [ebp - 0x16c], 0
jmp 0x472a2d
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x472a66
mov byte [ebp - 0x2df], 0
movzx eax, byte [ebp - 0x2df]
test eax, eax
je 0x472a64
push 0
push 0x1e3e
push 0x1a3e
push 0x1e0b
push 0xdcb
call dword [sym.imp.GDI32.dll_CreateBitmap]
jmp 0x472a20
cmp dword [ebp - 0x16c], 0
je 0x472a82
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x472a82
mov dword [ebp - 0x15f4], 1
jmp 0x472a89
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x2240], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xa924c000
ja 0x472ab9
mov dword [ebp - 0xac4], 1
jmp 0x472ac0
and dword [ebp - 0xac4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18dc]
cmp eax, dword [ebp - 0xac4]
jge 0x472ae1
mov dword [ebp - 0x13b8], 1
jmp 0x472ae8
and dword [ebp - 0x13b8], 0
cmp dword [ebp - 0x13b8], 0xc8f0d071
jae 0x472b00
mov dword [ebp - 0xacc], 1
jmp 0x472b07
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0x15fc], eax
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x20b8], 0x5021c3a2
mov dword [ebp - 0x20b4], 0x5021c3a2
mov dword [ebp - 0x20b0], 0x5021c3a2
mov dword [ebp - 0x20ac], 0x5021c3a2
mov dword [ebp - 0x5fc], 0
jmp 0x472b5e
mov eax, dword [ebp - 0x5fc]
inc eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 3
jge 0x472b7a
mov eax, dword [ebp - 0x5fc]
mov dword [ebp + eax*4 - 0x2a00], 0xfffffffb
jmp 0x472b51
mov dword [ebp - 0x48c], 0xffffffff
jmp 0x472b93
mov eax, dword [ebp - 0x48c]
dec eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0xffffffe5
je 0x472de5
mov dword [ebp - 0x604], 1
mov dword [ebp - 0x714], 0
jmp 0x472bc3
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 3
jge 0x472bdf
mov eax, dword [ebp - 0x714]
mov dword [ebp + eax*4 - 0x19a0], 0x236432a2
jmp 0x472bb6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x19a0], 0
jmp 0x472c0d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x19a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19a0], 0xf
jl 0x472d8c
push 4
lea ecx, [ebp - 0x19b0]
call fcn.00428a20
mov dword [ebp - 0x1ad0], 0
mov dword [ebp - 0x494], 0
jmp 0x472c51
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 4
jge 0x472c73
push dword [ebp - 0x494]
lea ecx, [ebp - 0x19b0]
call fcn.00428b0e
mov dword [eax], 0x95010f7a
jmp 0x472c44
mov byte [ebp - 0x26d], 0
movzx eax, byte [ebp - 0x26d]
test eax, eax
je 0x472c97
push 0
push 0xa02
push 0xd35
call dword [sym.imp.GDI32.dll_CreatePen]
push 1
lea ecx, [ebp - 0x19b0]
call fcn.00428b0e
mov dword [eax], 0x11
jmp 0x472cd0
push 1
lea ecx, [ebp - 0x19b0]
call fcn.00428b0e
cmp dword [eax], 0
jle 0x472d7c
mov dword [ebp - 0x104], 0x46ddcd16
mov dword [ebp - 0x104], 0
jmp 0x472d09
cmp dword [ebp - 0x104], 3
jg 0x472d40
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0x20b8], 0
je 0x472d24
jmp 0x472d40
mov byte [ebp - 0x2e9], 0
movzx eax, byte [ebp - 0x2e9]
test eax, eax
je 0x472d3e
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
jmp 0x472cfc
mov dword [ebp - 0x104], 0
jmp 0x472d59
cmp dword [ebp - 0x104], 0xfffffffb
jl 0x472d77
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19a0]
mov dword [ebp - 0x1ad0], eax
jmp 0x472d4c
jmp 0x472cac
lea ecx, [ebp - 0x19b0]
call fcn.00428af2
jmp 0x472bf2
mov dword [ebp - 0x604], 0x14
jmp 0x472da5
mov eax, dword [ebp - 0x604]
dec eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 8
jg 0x472de0
mov byte [ebp - 0x275], 0
movzx eax, byte [ebp - 0x275]
test eax, eax
je 0x472dde
push 0xf6d
push 0x6b8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
jmp 0x472d98
jmp 0x472b86
mov dword [ebp - 0x1664], str.cirpityly_dwv_maocjntxw
cmp dword [ebp - 0x109c], 0x7569
jle 0x473878
and dword [ebp - 0x6bc], 0
jmp 0x472e15
mov eax, dword [ebp - 0x6bc]
inc eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 0x22d5
jge 0x473878
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x2c], 0xae355683
cmp dword [ebp - 0x2c], 0
jne 0x472f5d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2248], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2250], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jne 0x472e6d
mov dword [ebp - 0xad4], 1
jmp 0x472e74
and dword [ebp - 0xad4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xad4], eax
jl 0x472e8b
mov dword [ebp - 0x1278], 1
jmp 0x472e92
and dword [ebp - 0x1278], 0
cmp dword [ebp - 0x1278], 0
jl 0x472ea7
mov dword [ebp - 0xadc], 1
jmp 0x472eae
and dword [ebp - 0xadc], 0
cmp dword [ebp - 0xadc], 0
jne 0x472ec6
cmp dword [ebp - 0x2c], 0
jne 0x472ec6
and dword [ebp - 0xfec], 0
jmp 0x472ed0
mov dword [ebp - 0xfec], 1
cmp dword [ebp - 0xfec], 0xffff
jae 0x472ee8
mov dword [ebp - 0xae4], 1
jmp 0x472eef
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xae4]
jle 0x472f06
mov dword [ebp - 0x1488], 1
jmp 0x472f0d
and dword [ebp - 0x1488], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1488], eax
jg 0x472f24
mov dword [ebp - 0xaec], 1
jmp 0x472f2b
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xaec]
jg 0x472f42
mov dword [ebp - 0xff4], 1
jmp 0x472f49
and dword [ebp - 0xff4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xff4], eax
jge 0x472f5d
and dword [ebp - 0xaf4], 0
jmp 0x472f67
mov dword [ebp - 0xaf4], 1
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0x2c]
je 0x472f82
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x368], eax
jl 0x472f99
mov dword [ebp - 0x1280], 1
jmp 0x472fa0
and dword [ebp - 0x1280], 0
cmp dword [ebp - 0x1280], 0x2a3062a
jg 0x473032
mov dword [ebp - 0x1604], 0x45
mov dword [ebp - 0x158c], 3
cmp dword [ebp - 0x2c], 7
jbe 0x472fd6
mov dword [ebp - 0xafc], 1
jmp 0x472fdd
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x1604]
cmp eax, dword [ebp - 0xafc]
jl 0x472ff7
mov dword [ebp - 0xffc], 1
jmp 0x472ffe
and dword [ebp - 0xffc], 0
cmp dword [ebp - 0xffc], 0xa67f6a19
je 0x473016
mov dword [ebp - 0x18e4], 1
jmp 0x47301d
and dword [ebp - 0x18e4], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2258], eax
mov dword [ebp - 0x158c], 0
jmp 0x47305a
mov byte [ebp - 0x2e1], 0
movzx eax, byte [ebp - 0x2e1]
test eax, eax
je 0x47304e
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x368], eax
and dword [ebp - 0x4a4], 0
jmp 0x473070
cmp dword [ebp - 0x4a4], 0x25d3
jge 0x473873
mov dword [ebp - 0x38], 0xf644accb
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0xb0c], 0xfffffffa
mov dword [ebp - 0x21c], 0x246c3825
push 2
lea ecx, [ebp - 0x1cd8]
call fcn.00428a20
push 2
lea ecx, [ebp - 0x206c]
call fcn.00428a20
mov dword [ebp - 0x18ec], 1
mov dword [ebp - 0x190], 0
jmp 0x4730e2
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x473101
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1cd8]
call fcn.00428b0e
or dword [eax], 0xffffffff
jmp 0x4730d5
mov dword [ebp - 0x190], 0
jmp 0x47311a
cmp dword [ebp - 0x190], 2
jge 0x473139
jmp 0x472e08
mov dword [ebp - 0xcc], 0x24a8c6a5
mov dword [ebp - 0x7c4], 0xe55a4419
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x744], 0x3927
mov dword [ebp - 0xb94], 0xfffffff7
mov dword [ebp - 0x162c], 0x94592404
mov dword [ebp - 0x60c], 0
jmp 0x4738cd
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 4
jge 0x4738e9
mov eax, dword [ebp - 0x60c]
mov dword [ebp + eax*4 - 0x2998], 0xa332e525
jmp 0x4738c0
mov dword [ebp - 0xcc], 0
jmp 0x473902
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jle 0x47395e
mov dword [ebp - 0x4ac], 0x1d69f428
mov dword [ebp - 0x4ac], 0xffffffec
jmp 0x47392e
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0x13
je 0x47395c
mov byte [ebp - 0x27d], 0
movzx eax, byte [ebp - 0x27d]
test eax, eax
je 0x47395a
push 0
push 0x744
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x473921
jmp 0x4738f5
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x2268], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x2270], eax
mov eax, 0xfff9
inc eax
cmp eax, dword [ebp - 0x114]
jl 0x473990
mov dword [ebp - 0x12a0], 1
jmp 0x473997
and dword [ebp - 0x12a0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x12a0], eax
jl 0x4739b1
mov dword [ebp - 0x1624], 1
jmp 0x4739b8
and dword [ebp - 0x1624], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x2278], eax
mov eax, dword [ebp - 0xcc]
sub eax, 0xb000
cmp eax, 0x467b
jl 0x4739e2
mov dword [ebp - 0xb7c], 1
jmp 0x4739e9
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0xb7c], eax
je 0x473a03
mov dword [ebp - 0x103c], 1
jmp 0x473a0a
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x103c], eax
je 0x473a24
mov dword [ebp - 0x18f4], 1
jmp 0x473a2b
and dword [ebp - 0x18f4], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x2280], eax
mov eax, dword [ebp - 0x744]
cmp dword [ebp - 0xcc], eax
jg 0x473a51
mov dword [ebp - 0xb84], 1
jmp 0x473a58
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xb84], eax
jne 0x473a72
mov dword [ebp - 0x13d0], 1
jmp 0x473a79
and dword [ebp - 0x13d0], 0
mov eax, dword [ebp - 0xb94]
cmp dword [ebp - 0x13d0], eax
jne 0x473a93
mov dword [ebp - 0xb8c], 1
jmp 0x473a9a
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xb8c]
jl 0x473ab6