Function at 0x44cae8
Capabilities:
Accept command line arguments
Check for time delay via queryperformancecounter
Check os version
Clear file content
Create pipe
Delete registry value
Enumerate files on windows
Enumerate files recursively
Enumerate gui resources
Get common file path
Get disk size
Get file attributes
Get file system object information
Get system information on windows
Hide graphical window
Identify system language via api
Modify service
Query or enumerate registry value
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x354c
call fcn.00482b90
push esi
push edi
mov dword [ebp - 0xc4], 0x9b55bb2c
mov dword [ebp - 0x2a98], 1
mov dword [ebp - 0xc4], 0xffffffe7
jmp 0x44cb24
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff1
jg 0x44cb49
mov byte [ebp - 0x41d], 0
movzx eax, byte [ebp - 0x41d]
test eax, eax
je 0x44cb47
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x44cb17
mov eax, dword [ebp - 0xc4]
inc eax
cmp eax, dword [ebp - 0xc4]
je 0x44cb64
mov dword [ebp - 0x20e8], 1
jmp 0x44cb6b
and dword [ebp - 0x20e8], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2b64], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
jle 0x44cb91
mov dword [ebp - 0x2380], 1
jmp 0x44cb98
and dword [ebp - 0x2380], 0
cmp dword [ebp - 0xc4], 0x534d
jle 0x44cbb0
mov dword [ebp - 0x1718], 1
jmp 0x44cbb7
and dword [ebp - 0x1718], 0
imul eax, dword [ebp - 0x1718], 0xfffd
test eax, eax
jne 0x44cbd7
cmp dword [ebp - 0xc4], 0
jne 0x44cbd7
and dword [ebp - 0x1ed4], 0
jmp 0x44cbe1
mov dword [ebp - 0x1ed4], 1
mov eax, dword [ebp - 0x1ed4]
add eax, 6
mov dword [ebp - 0xc4], eax
push 2
pop eax
test eax, eax
je 0x44cc11
mov byte [ebp - 0x2ae], 0
movzx eax, byte [ebp - 0x2ae]
test eax, eax
je 0x44cc0f
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x44cc29
mov byte [ebp - 0x2b0], 0
movzx eax, byte [ebp - 0x2b0]
test eax, eax
je 0x44cc29
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0x540], 0xd313dd33
mov dword [ebp - 0x540], 0
jmp 0x44cc4c
mov eax, dword [ebp - 0x540]
dec eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0xfffffff2
jle 0x44ccb4
mov dword [ebp - 0x2388], 0x90f1d898
mov dword [ebp - 0x9e0], 0
jmp 0x44cc78
mov eax, dword [ebp - 0x9e0]
inc eax
mov dword [ebp - 0x9e0], eax
cmp dword [ebp - 0x9e0], 3
jge 0x44cc94
mov eax, dword [ebp - 0x9e0]
mov dword [ebp + eax*4 - 0x3314], 6
jmp 0x44cc6b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3314]
mov dword [ebp - 0x2388], eax
cmp dword [ebp - 0x540], 0
je 0x44ccb2
jmp 0x44ccb4
jmp 0x44cc3f
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d8], 0xfffffff9
jmp 0x44ccd7
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x1b
jl 0x44cec3
mov dword [ebp - 0x1ee4], 8
mov dword [ebp - 0x23a0], 0xfffffff6
mov dword [ebp - 0x818], 0
jmp 0x44cd11
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 1
jge 0x44cd2d
mov eax, dword [ebp - 0x818]
mov dword [ebp + eax*4 - 0x228], 3
jmp 0x44cd04
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x228], 0
jmp 0x44cd5b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x228]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x228], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x228], 0xfffffffc
je 0x44cebe
mov dword [ebp - 0x1ef4], 0xca955a63
mov dword [ebp - 0x64c], 0
jmp 0x44cd92
mov eax, dword [ebp - 0x64c]
inc eax
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 2
jge 0x44cdae
mov eax, dword [ebp - 0x64c]
mov dword [ebp + eax*4 - 0x2768], 0xfffffffa
jmp 0x44cd85
push 6
pop eax
test eax, eax
je 0x44cdd1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x228], 0
je 0x44cdd1
mov dword [ebp - 0x1edc], 1
jmp 0x44cdd8
and dword [ebp - 0x1edc], 0
mov eax, dword [ebp - 0x1edc]
mov dword [ebp - 0x1ee4], eax
mov eax, dword [ebp - 0x1ee4]
cmp dword [ebp - 0x2d8], eax
jl 0x44cdfe
mov dword [ebp - 0x2390], 1
jmp 0x44ce05
and dword [ebp - 0x2390], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x228], 0xd1dc6b79
jae 0x44ce24
mov dword [ebp - 0x1eec], 1
jmp 0x44ce2b
and dword [ebp - 0x1eec], 0
mov eax, dword [ebp - 0x1eec]
mov dword [ebp - 0x1ef4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x228]
cmp eax, dword [ebp - 0x1ef4]
je 0x44ce58
mov dword [ebp - 0x1efc], 1
jmp 0x44ce5f
and dword [ebp - 0x1efc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x228]
cmp eax, dword [ebp - 0x1efc]
je 0x44ce80
mov dword [ebp - 0x2398], 1
jmp 0x44ce87
and dword [ebp - 0x2398], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2768]
mov dword [ebp - 0x2b6c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2768]
sub eax, dword [ebp - 0x2d8]
sub eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x23a0], eax
jmp 0x44cd40
jmp 0x44ccca
mov dword [ebp - 0xd4], 0x9b55bb2c
mov dword [ebp - 0x2b74], 0xcd8c45cd
mov byte [ebp - 0x2b2], 0
movzx eax, byte [ebp - 0x2b2]
test eax, eax
je 0x44cefb
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov byte [ebp - 0x2b4], 0
movzx eax, byte [ebp - 0x2b4]
test eax, eax
je 0x44cf35
push 0x19bd
push 0x1870
push 0x11bf
push 0xa36
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov dword [ebp - 0x2b7c], 1
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x450], 0x5ff44426
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x820], 0
jmp 0x44cf76
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 3
jge 0x44cf92
mov eax, dword [ebp - 0x820]
mov dword [ebp + eax*4 - 0x2048], 0xec0ae971
jmp 0x44cf69
mov dword [ebp - 0x2e0], 0
jmp 0x44cfab
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jg 0x44d1e7
mov dword [ebp - 0x23b0], 0x943e2f7c
mov eax, dword [ebp - 0x2e0]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2048]
cmp dword [ebp + eax*4 - 0x2048], ecx
jl 0x44cff6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2048], 0
je 0x44cff1
jmp 0x44d1e7
jmp 0x44d1e2
mov dword [ebp - 0x1f14], 0x51ebf0dd
mov dword [ebp - 0x23a8], 0
mov dword [ebp - 0x654], 0
jmp 0x44d023
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 3
jge 0x44d03f
mov eax, dword [ebp - 0x654]
mov dword [ebp + eax*4 - 0x2f7c], 0x166941fc
jmp 0x44d016
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f7c], 0
je 0x44d12c
mov eax, dword [ebp - 0x2e0]
mov eax, dword [ebp + eax*4 - 0x2048]
mov ecx, dword [ebp - 0x23a8]
lea eax, [eax + ecx + 0xeab3]
test eax, eax
je 0x44d086
cmp dword [ebp - 0x23b0], 0
je 0x44d086
mov dword [ebp - 0x1f04], 1
jmp 0x44d08d
and dword [ebp - 0x1f04], 0
cmp dword [ebp - 0x1f04], 0xc4dd
je 0x44d0a5
mov dword [ebp - 0x1f0c], 1
jmp 0x44d0ac
and dword [ebp - 0x1f0c], 0
cmp dword [ebp - 0x1f0c], 0x4c6a
jne 0x44d0c4
mov dword [ebp - 0x1f90], 1
jmp 0x44d0cb
and dword [ebp - 0x1f90], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2048]
mov dword [ebp - 0x1f14], eax
mov eax, dword [ebp - 0x1f14]
sub eax, dword [ebp - 0x1f90]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x2f7c], eax
jg 0x44d104
mov dword [ebp - 0x1f98], 1
jmp 0x44d10b
and dword [ebp - 0x1f98], 0
mov eax, dword [ebp - 0x2e0]
mov eax, dword [ebp + eax*4 - 0x2048]
cmp eax, dword [ebp - 0x1f98]
jl 0x44d12c
mov dword [ebp - 0x1fa0], 1
jmp 0x44d133
and dword [ebp - 0x1fa0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2048]
cmp dword [ebp - 0x1fa0], eax
jg 0x44d153
mov dword [ebp - 0x1fa8], 1
jmp 0x44d15a
and dword [ebp - 0x1fa8], 0
cmp dword [ebp - 0x1fa8], 4
ja 0x44d16f
mov dword [ebp - 0x1fb0], 1
jmp 0x44d176
and dword [ebp - 0x1fb0], 0
mov eax, dword [ebp - 0x1fb0]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
je 0x44d1a4
cmp dword [ebp - 0x2e8], 0
je 0x44d1a2
jmp 0x44d1e7
jmp 0x44d1e2
mov dword [ebp - 0x2e8], 2
jmp 0x44d1bd
mov eax, dword [ebp - 0x2e8]
dec eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
jl 0x44d1e2
mov byte [ebp - 0x2b6], 0
movzx eax, byte [ebp - 0x2b6]
test eax, eax
je 0x44d1e0
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x44d1b0
jmp 0x44cf9e
mov dword [ebp - 0x450], 0
jmp 0x44d200
mov eax, dword [ebp - 0x450]
dec eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0xfffffffa
jg 0x44d236
mov byte [ebp - 0x2b8], 0
movzx eax, byte [ebp - 0x2b8]
test eax, eax
je 0x44d234
push 0x18ed
push 0x40
push 0x1f33
push 0x4f7
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
jmp 0x44d1f3
mov dword [ebp - 0xd4], 0xffffffe7
jmp 0x44d24f
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xfffffff1
jg 0x44d8f4
mov dword [ebp - 0x828], 0xffffffff
mov dword [ebp - 0x828], 0xfffffff6
jmp 0x44d27f
mov eax, dword [ebp - 0x828]
dec eax
mov dword [ebp - 0x828], eax
cmp dword [ebp - 0x828], 0xffffffe2
jg 0x44d2ff
mov dword [ebp - 0x63c], 0xaa9ac70c
mov dword [ebp - 0x23b8], 0xbfc3938d
mov dword [ebp - 0x63c], 0
jmp 0x44d2b5
mov eax, dword [ebp - 0x63c]
dec eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0xfffffffa
je 0x44d2fa
mov dword [ebp - 0x65c], 1
mov dword [ebp - 0x65c], 0
jmp 0x44d2e1
mov eax, dword [ebp - 0x65c]
dec eax
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 0xffffffe3
jl 0x44d2f8
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x23b8], eax
jmp 0x44d2d4
jmp 0x44d2a8
jmp 0x44d272
mov byte [ebp - 0x2bc], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x458], 0xfffffffe
mov dword [ebp - 0x114], 0xfffffff9
mov dword [ebp - 0x830], 0
jmp 0x44d33a
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 3
jge 0x44d356
mov eax, dword [ebp - 0x830]
mov dword [ebp + eax*4 - 0x9fc], 0xfffc
jmp 0x44d32d
mov dword [ebp - 0x14], 2
jmp 0x44d366
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x44d536
mov dword [ebp - 0x664], 0xe0cd
mov dword [ebp - 0x23c0], 0xffffffff
mov dword [ebp - 0xc84], 0x69cd17cd
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x9fc]
mov dword [ebp - 0x2b84], eax
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x2b8c], eax
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x664], eax
je 0x44d3c4
mov dword [ebp - 0x1fb8], 1
jmp 0x44d3cb
and dword [ebp - 0x1fb8], 0
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x1fb8], eax
jne 0x44d3e5
mov dword [ebp - 0x2004], 1
jmp 0x44d3ec
and dword [ebp - 0x2004], 0
cmp dword [ebp - 0x2004], 3
jg 0x44d401
mov dword [ebp - 0x2018], 1
jmp 0x44d408
and dword [ebp - 0x2018], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2018]
add ecx, 0x2c51
cmp dword [ebp + eax*4 - 0x9fc], ecx
jg 0x44d439
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x9fc], 0
je 0x44d439
mov dword [ebp - 0x2020], 1
jmp 0x44d440
and dword [ebp - 0x2020], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2020], eax
jg 0x44d457
mov dword [ebp - 0x2028], 1
jmp 0x44d45e
and dword [ebp - 0x2028], 0
mov eax, dword [ebp - 0x23c0]
cmp dword [ebp - 0x2028], eax
jg 0x44d478
mov dword [ebp - 0x1b34], 1
jmp 0x44d47f
and dword [ebp - 0x1b34], 0
cmp dword [ebp - 0x1b34], 0xb2f6
je 0x44d497
mov dword [ebp - 0x23c8], 1
jmp 0x44d49e
and dword [ebp - 0x23c8], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x9fc]
mov dword [ebp - 0x2b94], eax
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x44d4ce
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9fc], 0
jne 0x44d4ce
and dword [ebp - 0xc7c], 0
jmp 0x44d4d8
mov dword [ebp - 0xc7c], 1
cmp dword [ebp - 0xc7c], 0
jne 0x44d4ed
mov dword [ebp - 0x1b3c], 1
jmp 0x44d4f4
and dword [ebp - 0x1b3c], 0
mov eax, dword [ebp - 0x1b3c]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x9fc]
cmp dword [ebp - 0xc84], eax
jl 0x44d51e
mov dword [ebp - 0x1b44], 1
jmp 0x44d525
and dword [ebp - 0x1b44], 0
mov eax, dword [ebp - 0x1b44]
mov dword [ebp - 0x458], eax
jmp 0x44d35f
mov dword [ebp - 0x458], 0xc2a91181
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x44d626
cmp dword [ebp - 0x14], 0
jne 0x44d568
cmp dword [ebp - 0x14], 0
jne 0x44d568
and dword [ebp - 0xc8c], 0
jmp 0x44d572
mov dword [ebp - 0xc8c], 1
mov eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0xc8c]
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x9fc]
lea ecx, [ecx + edx + 0x1684]
add eax, ecx
je 0x44d5af
mov eax, 0x5f8a4198
test eax, eax
je 0x44d5af
mov dword [ebp - 0x23d0], 1
jmp 0x44d5b6
and dword [ebp - 0x23d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9fc]
mov dword [ebp - 0x2b9c], eax
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0x14], eax
jle 0x44d5df
mov dword [ebp - 0x1b4c], 1
jmp 0x44d5e6
and dword [ebp - 0x1b4c], 0
cmp dword [ebp - 0x1b4c], 0x8d34108f
je 0x44d5fe
mov dword [ebp - 0xc94], 1
jmp 0x44d605
and dword [ebp - 0xc94], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9fc]
cmp dword [ebp - 0xc94], eax
jg 0x44d626
cmp dword [ebp - 0x114], 0
je 0x44d85e
mov dword [ebp - 0xca4], 0xffffffff
mov dword [ebp - 0x170], 0
jmp 0x44d649
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x44d665
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0xa5c], 0xd90c37c5
jmp 0x44d63c
mov dword [ebp - 0x170], 0
jmp 0x44d67e
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x44d69a
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x27f0], 0
jmp 0x44d671
mov dword [ebp - 0x114], 0x8cb0b9d6
mov dword [ebp - 0x114], 2
jmp 0x44d6bd
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x44d85c
mov dword [ebp - 0xc9c], 0x89f82a41
mov dword [ebp - 0x23e8], 0x4ddaf14
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp + eax*4 - 0x9fc]
mov dword [ebp - 0x23d8], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xa5c], 0
mov dword [ebp - 0x23e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa5c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa5c], eax
mov eax, dword [ebp - 0x23d8]
cmp eax, dword [ebp - 0x23e0]
jg 0x44d73a
mov dword [ebp - 0x1b54], 1
jmp 0x44d741
and dword [ebp - 0x1b54], 0
mov eax, dword [ebp - 0x1b54]
neg eax
jne 0x44d802
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xc9c], eax
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp + eax*4 - 0x9fc]
mov ecx, dword [ebp - 0x114]
sub eax, dword [ebp + ecx*4 - 0x9fc]
cmp dword [ebp - 0xc9c], eax
jl 0x44d789
mov dword [ebp - 0x1b5c], 1
jmp 0x44d790
and dword [ebp - 0x1b5c], 0
mov eax, dword [ebp - 0x1b5c]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xca4], eax
je 0x44d7b3
mov dword [ebp - 0x1b64], 1
jmp 0x44d7ba
and dword [ebp - 0x1b64], 0
cmp dword [ebp - 0x1b64], 6
jne 0x44d7cf
mov dword [ebp - 0xcac], 1
jmp 0x44d7d6
and dword [ebp - 0xcac], 0
cmp dword [ebp - 0xcac], 9
jle 0x44d7eb
mov dword [ebp - 0x1b6c], 1
jmp 0x44d7f2
and dword [ebp - 0x1b6c], 0
mov eax, dword [ebp - 0x1b6c]
mov dword [ebp - 0x14], eax
imul eax, dword [ebp - 0x14], 0xf33
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp + eax*4 - 0x9fc]
mov ecx, dword [ebp - 0x114]
add eax, dword [ebp + ecx*4 - 0x9fc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x27f0]
jge 0x44d837
mov dword [ebp - 0xcb4], 1
jmp 0x44d83e
and dword [ebp - 0xcb4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcb4]
sub ecx, dword [ebp + eax - 0x27f0]
mov dword [ebp - 0x23e8], ecx
jmp 0x44d6b0
jmp 0x44d884
mov byte [ebp - 0x2ba], 0
movzx eax, byte [ebp - 0x2ba]
test eax, eax
je 0x44d884
push 0
push 0x22e3
push 0
push 0x1138
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
movzx eax, byte [ebp - 0x2bc]
test eax, eax
je 0x44d8ef
mov dword [ebp - 0x2ba4], 0xac78
mov byte [ebp - 0x2be], 0
movzx eax, byte [ebp - 0x2be]
test eax, eax
je 0x44d8b5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov byte [ebp - 0x2c0], 0
movzx eax, byte [ebp - 0x2c0]
test eax, eax
je 0x44d8e7
push 0
push 0x67f
push 0x26b9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x44d242
mov dword [ebp - 0x268], 0x24a8c6a5
mov dword [ebp - 0x838], 0
jmp 0x44d917
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x838], 1
jge 0x44d933
mov eax, dword [ebp - 0x838]
mov dword [ebp + eax*4 - 0x2bac], 0x717be9fb
jmp 0x44d90a
mov dword [ebp - 0x268], 0
jmp 0x44d94c
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xfffffff3
jle 0x44da4f
mov dword [ebp - 0x2894], 0x69f4288a
mov dword [ebp - 0x2890], 0x69f4288a
mov dword [ebp - 0x288c], 0x69f4288a
mov dword [ebp - 0x2888], 0x69f4288a
mov dword [ebp - 0x5c0], 0xfffffff9
mov dword [ebp - 0x5c0], 3
jmp 0x44d9a4
mov eax, dword [ebp - 0x5c0]
dec eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0
jl 0x44da4a
mov dword [ebp - 0x66c], 0x283066c9
mov byte [ebp - 0x2c2], 0
movzx eax, byte [ebp - 0x2c2]
test eax, eax
je 0x44d9f5
push 0
push 0x14fb
push 0x18b4
push 0xbb7
push 0x1e28
push 0x10bf
push 0x22a8
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [ebp - 0x66c], 3
jmp 0x44da0e
mov eax, dword [ebp - 0x66c]
dec eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0
jl 0x44da45
mov byte [ebp - 0x2c4], 0
movzx eax, byte [ebp - 0x2c4]
test eax, eax
je 0x44da31
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp + eax*4 - 0x2894], 0
je 0x44da43
jmp 0x44da01
jmp 0x44da01
jmp 0x44d997
jmp 0x44d93f
mov dword [ebp - 0x268], 0
jmp 0x44da68
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jg 0x44da8f
mov byte [ebp - 0x2c6], 0
movzx eax, byte [ebp - 0x2c6]
test eax, eax
je 0x44da8d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x44da5b
mov eax, dword [ebp - 0xd4]
inc eax
cmp eax, dword [ebp - 0xd4]
je 0x44daaa
mov dword [ebp - 0x23f0], 1
jmp 0x44dab1
and dword [ebp - 0x23f0], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x2bb4], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0xd4], eax
jle 0x44dad7
mov dword [ebp - 0x23f8], 1
jmp 0x44dade
and dword [ebp - 0x23f8], 0
cmp dword [ebp - 0xd4], 0x534d
jle 0x44daf6
mov dword [ebp - 0x1b74], 1
jmp 0x44dafd
and dword [ebp - 0x1b74], 0
imul eax, dword [ebp - 0x1b74], 0xfffd
test eax, eax
jne 0x44db1d
cmp dword [ebp - 0xd4], 0
jne 0x44db1d
and dword [ebp - 0xcbc], 0
jmp 0x44db27
mov dword [ebp - 0xcbc], 1
mov eax, dword [ebp - 0xcbc]
add eax, 6
mov dword [ebp - 0xd4], eax
push 2
pop eax
test eax, eax
je 0x44e3b9
mov dword [ebp - 0x2bbc], 0x92beaa32
mov byte [ebp - 0x2c8], 0
movzx eax, byte [ebp - 0x2c8]
test eax, eax
je 0x44db6a
push 0x1af9
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov byte [ebp - 0x2ca], 0
movzx eax, byte [ebp - 0x2ca]
test eax, eax
je 0x44db86
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov dword [ebp - 0x4c8], 0x24039b64
mov dword [ebp - 0x2bc4], 0xe307b5ca
mov dword [ebp - 0x1b8c], 0
mov dword [ebp - 0x178], 0x5a1fa147
mov dword [ebp - 0x2450], 0x9e3cf957
mov dword [ebp - 0x1b7c], 0xfff6
mov dword [ebp - 0x1dc], 0
jmp 0x44dbdb
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x44dbf7
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x2700], 1
jmp 0x44dbce
mov dword [ebp - 0x1dc], 0
jmp 0x44dc10
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x44dc2c
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x2f8c], 1
jmp 0x44dc03
mov dword [ebp - 0x4c8], 0
jmp 0x44dc45
mov eax, dword [ebp - 0x4c8]
dec eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0xffffffe2
jl 0x44dcc7
mov dword [ebp - 0x3160], 2
mov dword [ebp - 0x315c], 2
mov dword [ebp - 0x3158], 2
mov dword [ebp - 0x3154], 2
mov dword [ebp - 0x2bcc], 0xffffffff
mov dword [ebp - 0x840], 0
jmp 0x44dc99
mov eax, dword [ebp - 0x840]
inc eax
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 4
jge 0x44dcb5
mov eax, dword [ebp - 0x840]
mov dword [ebp + eax*4 - 0x34e0], 0
jmp 0x44dc8c
mov eax, dword [ebp - 0x1b7c]
inc eax
mov dword [ebp - 0x1b7c], eax
jmp 0x44dc38
mov dword [ebp - 0x178], 0
jmp 0x44dce0
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jg 0x44de7b
mov dword [ebp - 0x2bd4], 7
mov dword [ebp - 0xbb8], 1
mov dword [ebp - 0x2448], 1
mov dword [ebp - 0x674], 0
jmp 0x44dd24
mov eax, dword [ebp - 0x674]
inc eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 3
jge 0x44dd40
mov eax, dword [ebp - 0x674]
mov dword [ebp + eax*4 - 0x3470], 0xa5e0b2f6
jmp 0x44dd17
mov dword [ebp - 0x4c8], 0x4eb300a9
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x2f8c]
cmp dword [ebp - 0x4c8], eax
jne 0x44dd6b
mov dword [ebp - 0xcc4], 1
jmp 0x44dd72
and dword [ebp - 0xcc4], 0
cmp dword [ebp - 0xcc4], 0xa911
jg 0x44dd8a
mov dword [ebp - 0x2400], 1
jmp 0x44dd91
and dword [ebp - 0x2400], 0
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0x2bdc], eax
mov eax, dword [ebp - 0xbb8]
inc eax
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x2700]
mov dword [ebp - 0x2be4], eax
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x2700]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x2700]
je 0x44ddee
cmp dword [ebp - 0x2448], 0
je 0x44ddee
mov dword [ebp - 0x1b84], 1
jmp 0x44ddf5
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x1b84]
dec eax
cmp eax, 0xe3f0
jge 0x44de0f
mov dword [ebp - 0xccc], 1
jmp 0x44de16
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0x1b8c], eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x1b8c]
sub ecx, dword [ebp + eax*4 - 0x2700]
mov dword [ebp - 0xcd4], ecx
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0xcd4]
mov dword [ebp + eax*4 - 0x2f8c], ecx
cmp dword [ebp - 0xcd4], 0
jne 0x44de63
mov dword [ebp - 0x1b94], 1
jmp 0x44de6a
and dword [ebp - 0x1b94], 0
mov eax, dword [ebp - 0x1b94]
mov dword [ebp - 0x2450], eax
jmp 0x44dcd3
mov byte [ebp - 0x2cc], 0
mov dword [ebp - 0x30], 0xbe8e56f9
mov dword [ebp - 0x1e4], 0
jmp 0x44dea2
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x44debe
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xe4], 0x6bdde0bc
jmp 0x44de95
mov dword [ebp - 0x1e4], 0
jmp 0x44ded7
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x44def3
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x2544], 0
jmp 0x44deca
mov dword [ebp - 0x30], 0
jmp 0x44df03
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x44e137
mov dword [ebp - 0x2f0], 5
mov dword [ebp - 0x1ba4], 0xd8c65816
mov dword [ebp - 0x253c], 0xfffffffd
mov dword [ebp - 0x2f0], 0
jmp 0x44df44
mov eax, dword [ebp - 0x2f0]
dec eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
jl 0x44e132
mov dword [ebp - 0x251c], 0xffffffff
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe4]
mov dword [ebp - 0x2bec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x2bf4], eax
mov eax, dword [ebp - 0x251c]
mov dword [ebp - 0x2bfc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c04], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x44dfb3
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x44dfb3
and dword [ebp - 0x2524], 0
jmp 0x44dfbd
mov dword [ebp - 0x2524], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe4]
mov dword [ebp - 0x2c0c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
add ecx, dword [ebp - 0x2f0]
imul ecx, ecx, 0x2ef7
cmp dword [ebp + eax - 0xe4], ecx
jle 0x44dffa
mov dword [ebp - 0xcdc], 1
jmp 0x44e001
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x1ba4]
cmp dword [ebp - 0xcdc], eax
jg 0x44e01b
mov dword [ebp - 0x252c], 1
jmp 0x44e022
and dword [ebp - 0x252c], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2c14], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0xe4], 0
jg 0x44e047
mov dword [ebp - 0x1b9c], 1
jmp 0x44e04e
and dword [ebp - 0x1b9c], 0
cmp dword [ebp - 0x1b9c], 0xfa8f90a3
jb 0x44e066
mov dword [ebp - 0xce4], 1
jmp 0x44e06d
and dword [ebp - 0xce4], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe4]
cmp eax, dword [ebp - 0xce4]
je 0x44e08b
mov dword [ebp - 0x2534], 1
jmp 0x44e092
and dword [ebp - 0x2534], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe4]
mov dword [ebp - 0x2c1c], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0xe4], 3
jbe 0x44e0bb
mov dword [ebp - 0xcec], 1
jmp 0x44e0c2
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0x1ba4]
cmp dword [ebp - 0xcec], eax
jge 0x44e0dc
mov dword [ebp - 0x1bac], 1
jmp 0x44e0e3
and dword [ebp - 0x1bac], 0
cmp dword [ebp - 0x1bac], 0x456b8642
jne 0x44e0fb
mov dword [ebp - 0xcf4], 1
jmp 0x44e102
and dword [ebp - 0xcf4], 0
cmp dword [ebp - 0xcf4], 0xda19
jne 0x44e11a
mov dword [ebp - 0x1bb4], 1
jmp 0x44e121
and dword [ebp - 0x1bb4], 0
mov eax, dword [ebp - 0x1bb4]
mov dword [ebp - 0x253c], eax
jmp 0x44df37
jmp 0x44defc
mov dword [ebp - 0x30], 0
jmp 0x44e147
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x44e1c0
mov dword [ebp - 0xd04], 0x95866b38
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp + ecx*4 - 0xe4]
cmp dword [ebp + eax*4 - 0xe4], ecx
je 0x44e179
mov dword [ebp - 0xcfc], 1
jmp 0x44e180
and dword [ebp - 0xcfc], 0
cmp dword [ebp - 0xcfc], 0xd482
je 0x44e198
mov dword [ebp - 0x1bbc], 1
jmp 0x44e19f
and dword [ebp - 0x1bbc], 0
mov eax, dword [ebp - 0x1bbc]
mov dword [ebp - 0xd04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd04]
mov dword [ebp + eax - 0x2544], ecx
jmp 0x44e140
movzx eax, byte [ebp - 0x2cc]
test eax, eax
je 0x44e3b4
mov dword [ebp - 0x67c], 0x6e52d8cb
mov dword [ebp - 0xd0c], 0xffffffff
mov dword [ebp - 0xbc0], 0x47c2c9eb
mov dword [ebp - 0x254c], 0
mov dword [ebp - 0xd14], 1
mov dword [ebp - 0xd1c], 0x3b16aac8
mov dword [ebp - 0x2554], 0xa2a0c0e0
mov dword [ebp - 0x848], 0
jmp 0x44e22e
mov eax, dword [ebp - 0x848]
inc eax
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 1
jge 0x44e24a
mov eax, dword [ebp - 0x848]
mov dword [ebp + eax*4 - 0x850], 0x75ee
jmp 0x44e221
mov eax, dword [ebp - 0xbc0]
dec eax
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xbc0]
cmp dword [ebp - 0x67c], eax
jge 0x44e271
mov dword [ebp - 0x1bc4], 1
jmp 0x44e278
and dword [ebp - 0x1bc4], 0
mov eax, dword [ebp - 0x1bc4]
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 0
je 0x44e2dd
mov eax, dword [ebp - 0x254c]
mov dword [ebp - 0x2c24], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x850]
mov dword [ebp - 0x2c2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x850]
cmp dword [ebp - 0xd14], eax
jl 0x44e2dd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x850], 0
je 0x44e2dd
mov dword [ebp - 0x1bcc], 1
jmp 0x44e2e4
and dword [ebp - 0x1bcc], 0
mov eax, dword [ebp - 0x67c]
cmp eax, dword [ebp - 0x1bcc]
jl 0x44e307
cmp dword [ebp - 0xd14], 0
je 0x44e307
mov dword [ebp - 0x1bd4], 1
jmp 0x44e30e
and dword [ebp - 0x1bd4], 0
mov eax, dword [ebp - 0x1bd4]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0xd1c]
cmp dword [ebp - 0x67c], eax
jge 0x44e334
mov dword [ebp - 0x1bdc], 1
jmp 0x44e33b
and dword [ebp - 0x1bdc], 0
cmp dword [ebp - 0x1bdc], 1
jae 0x44e350
mov dword [ebp - 0xd24], 1
jmp 0x44e357
and dword [ebp - 0xd24], 0
mov eax, dword [ebp - 0x67c]
imul eax, dword [ebp - 0xd24]
cmp eax, 0xffffffff
je 0x44e375
mov dword [ebp - 0x1be4], 1
jmp 0x44e37c
and dword [ebp - 0x1be4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x850]
imul eax, dword [ebp - 0x1be4]
mov dword [ebp - 0x2554], eax
mov byte [ebp - 0x2ce], 0
movzx eax, byte [ebp - 0x2ce]
test eax, eax
je 0x44e3ae
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x44eb01
mov dword [ebp - 0xd3c], 0x278c007c
mov dword [ebp - 0x2f8], 0x1543f36f
mov dword [ebp - 0x1c1c], 7
mov dword [ebp - 0xd5c], 0xf34c9333
mov dword [ebp - 0x180], 0
jmp 0x44e3fa
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x44e416
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x238], 1
jmp 0x44e3ed
mov dword [ebp - 0x180], 0
jmp 0x44e42f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x44e44b
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x25a4], 0x3d2f5512
jmp 0x44e422
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x238]
mov dword [ebp - 0x2c34], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x238], 0
je 0x44e49a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x238], 0
je 0x44e49a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x238], 0
je 0x44e49a
mov dword [ebp - 0xd2c], 1
jmp 0x44e4a1
and dword [ebp - 0xd2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x238]
cmp dword [ebp - 0xd2c], eax
jge 0x44e4c2
mov dword [ebp - 0x1bec], 1
jmp 0x44e4c9
and dword [ebp - 0x1bec], 0
cmp dword [ebp - 0x1bec], 0xa10dd664
jbe 0x44e4ee
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x238], 0
jne 0x44e4ee
and dword [ebp - 0xd34], 0
jmp 0x44e4f8
mov dword [ebp - 0xd34], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x238]
imul eax, dword [ebp - 0xd34]
cmp eax, 3
jne 0x44e51d
mov dword [ebp - 0x1bf4], 1
jmp 0x44e524
and dword [ebp - 0x1bf4], 0
mov dword [ebp - 0xd3c], 0xdcdf
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1bf4]
mov dword [ebp - 0x1bfc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1bfc]
mov dword [ebp + eax - 0x238], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0xd3c]
imul edx, dword [ebp - 0x1bfc]
sub edx, dword [ebp + ecx - 0x25a4]
add edx, dword [ebp + eax - 0x25a4]
mov dword [ebp - 0xd44], edx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd44]
mov dword [ebp + eax - 0x25a4], ecx
mov eax, dword [ebp - 0x2f8]
imul eax, dword [ebp - 0xd44]
sub eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x2f8]
jg 0x44e5b7
mov dword [ebp - 0x1c04], 1
jmp 0x44e5be
and dword [ebp - 0x1c04], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x1c04], eax
jl 0x44e5d8
mov dword [ebp - 0xd4c], 1
jmp 0x44e5df
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0xd4c], eax
jne 0x44e5f9
mov dword [ebp - 0x1c0c], 1
jmp 0x44e600
and dword [ebp - 0x1c0c], 0
cmp dword [ebp - 0x1c0c], 0xfffffffb
jl 0x44e615
mov dword [ebp - 0xd54], 1
jmp 0x44e61c
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x2c3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x25a4]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c1c]
cmp dword [ebp + eax - 0x25a4], ecx
jg 0x44e65c
mov dword [ebp - 0x1c14], 1
jmp 0x44e663
and dword [ebp - 0x1c14], 0
mov eax, dword [ebp - 0x1c14]
neg eax
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0x1c1c], eax
mov byte [ebp - 0x29f], 0
mov dword [ebp - 0x308], 0xf57a7c2
mov dword [ebp - 0x1c2c], 0xfffffffe
mov dword [ebp - 0x1ec], 0
jmp 0x44e6b1
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x44e6cd
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x25b4], 0x77862fd4
jmp 0x44e6a4
mov dword [ebp - 0x1ec], 0
jmp 0x44e6e6
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x44e702
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x20a0], 0xbe26b5cf
jmp 0x44e6d9
mov dword [ebp - 0x308], 2
jmp 0x44e71b
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
jl 0x44e8b0
mov dword [ebp - 0x300], 0xffffffff
mov dword [ebp - 0x2c44], 0xffffffff
mov dword [ebp - 0x300], 2
jmp 0x44e755
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0
jl 0x44e8ab
mov dword [ebp - 0x460], 4
mov dword [ebp - 0x255c], 0xc27f
mov dword [ebp - 0x460], 0
jmp 0x44e78f
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 2
jg 0x44e89a
mov dword [ebp - 0x548], 0x9ba095a9
mov dword [ebp - 0x548], 2
jmp 0x44e7bf
mov eax, dword [ebp - 0x548]
dec eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0
jl 0x44e7fe
mov byte [ebp - 0x2d0], 0
movzx eax, byte [ebp - 0x2d0]
test eax, eax
je 0x44e7e2
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x460]
mov ecx, dword [ebp - 0x308]
mov eax, dword [ebp + eax*4 - 0x25b4]
mov dword [ebp + ecx*4 - 0x25b4], eax
jmp 0x44e7b2
mov eax, dword [ebp - 0x300]
cmp dword [ebp + eax*4 - 0x25b4], 1
jl 0x44e81a
mov dword [ebp - 0xd64], 1
jmp 0x44e821
and dword [ebp - 0xd64], 0
cmp dword [ebp - 0xd64], 0x8009
jne 0x44e839
mov dword [ebp - 0x1c24], 1
jmp 0x44e840
and dword [ebp - 0x1c24], 0
mov eax, dword [ebp - 0x548]
imul eax, dword [ebp - 0x1c24]
test eax, eax
jb 0x44e866
cmp dword [ebp - 0x255c], 0
je 0x44e866
mov dword [ebp - 0xd6c], 1
jmp 0x44e86d
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp + eax*4 - 0x25b4]
neg eax
imul eax, dword [ebp - 0xd6c]
xor ecx, ecx
inc ecx
sub ecx, eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x20a0], ecx
jmp 0x44e782
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x460], eax
jmp 0x44e748
jmp 0x44e70e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25b4]
mov dword [ebp - 0x2c4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20a0]
mov dword [ebp - 0x1c2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20a0]
cmp dword [ebp - 0x1c2c], eax
jge 0x44e8f7
mov dword [ebp - 0xd74], 1
jmp 0x44e8fe
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xd74]
neg eax
cmp eax, 0xb5fb
jne 0x44e919
mov dword [ebp - 0x1c34], 1
jmp 0x44e920
and dword [ebp - 0x1c34], 0
mov dword [ebp - 0x308], 0x93d7f28
mov eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x1c34]
jle 0x44e944
mov dword [ebp - 0xd7c], 1
jmp 0x44e94b
and dword [ebp - 0xd7c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20a0]
imul eax, dword [ebp - 0xd7c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x20a0]
jne 0x44e97a
mov dword [ebp - 0x1c3c], 1
jmp 0x44e981
and dword [ebp - 0x1c3c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c3c]
mov dword [ebp + eax - 0x20a0], ecx
movzx eax, byte [ebp - 0x29f]
test eax, eax
je 0x44eb01
mov dword [ebp - 0xd84], 0xfffffff9
mov dword [ebp - 0x2564], 0x43d9532b
mov dword [ebp - 0x2c54], 0
mov dword [ebp - 0x2c5c], 0x3afc3718
mov dword [ebp - 0x2c64], 3
mov dword [ebp - 0x2c6c], 0xdb6d0374
mov dword [ebp - 0x2c74], 0x5131d8b9
mov dword [ebp - 0x2c7c], 0x3fa3a92b
mov dword [ebp - 0x2c84], 0xa2ae7b79
mov dword [ebp - 0x2c8c], 1
mov dword [ebp - 0x2c94], 0x7c2c9ebf
mov dword [ebp - 0x2c9c], 0xfffffff9
mov dword [ebp - 0x2ca4], 0xffffffff
mov dword [ebp - 0x2cac], 3
mov dword [ebp - 0x2cb4], 0xa00d0e75
mov dword [ebp - 0x2cbc], 0xa2b82c44
mov dword [ebp - 0x2e5c], 0xfffffff6
mov dword [ebp - 0x2e64], 0
mov dword [ebp - 0x2e6c], 0x9a56718e
mov dword [ebp - 0x3174], 0
mov dword [ebp - 0x3170], 0
mov dword [ebp - 0x316c], 0
mov dword [ebp - 0x3168], 0
mov dword [ebp - 0x27e8], 0xd1d8
mov dword [ebp - 0x27e4], 0xd1d8
mov dword [ebp - 0x27e0], 0xd1d8
mov dword [ebp - 0x27dc], 0xd1d8
cmp dword [ebp - 0xd84], 0
jne 0x44eacc
cmp dword [ebp - 0xd84], 0
jne 0x44eacc
and dword [ebp - 0x1c44], 0
jmp 0x44ead6
mov dword [ebp - 0x1c44], 1
mov eax, dword [ebp - 0x1c44]
mov dword [ebp - 0x2564], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x27e8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x27e8], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0xbc8], 1
mov dword [ebp - 0x310], 6
mov dword [ebp - 0x130], 1
mov dword [ebp - 0xbd0], 0x702377d6
mov dword [ebp - 0x684], 0
jmp 0x44eb42
mov eax, dword [ebp - 0x684]
inc eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 1
jge 0x44eb5e
mov eax, dword [ebp - 0x684]
mov dword [ebp + eax*4 - 0x257c], 0
jmp 0x44eb35
mov eax, 0x3606
test eax, eax
je 0x44ec7c
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2e74], eax
mov eax, dword [ebp - 0x130]
inc eax
cmp dword [ebp - 0x130], eax
jg 0x44eb92
mov dword [ebp - 0x256c], 1
jmp 0x44eb99
and dword [ebp - 0x256c], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2e7c], eax
push 0xfffffffffffffffa
pop eax
inc eax
add eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x130]
jl 0x44ebc9
cmp dword [ebp - 0x130], 0
jne 0x44ebc9
and dword [ebp - 0xd8c], 0
jmp 0x44ebd3
mov dword [ebp - 0xd8c], 1
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0xd8c]
jne 0x44ec0e
mov eax, 0x198ab79
test eax, eax
je 0x44ec0e
mov dword [ebp - 0x1c4c], 1
jmp 0x44ec15
and dword [ebp - 0x1c4c], 0
cmp dword [ebp - 0x1c4c], 0xfffffff9
jle 0x44ec2a
mov dword [ebp - 0x2574], 1
jmp 0x44ec31
and dword [ebp - 0x2574], 0
mov eax, 0xc02a3062
test eax, eax
je 0x44ec4b
or eax, 0xffffffff
je 0x44ec4b
mov dword [ebp - 0xd94], 1
jmp 0x44ec52
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0xd94]
sub eax, dword [ebp - 0x130]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xbac89d73
jbe 0x44ec7c
mov dword [ebp - 0x1c54], 1
jmp 0x44ec83
and dword [ebp - 0x1c54], 0
mov eax, dword [ebp - 0x1c54]
sub eax, dword [ebp - 0xbd0]
mov dword [ebp - 0xbd0], eax
mov dword [ebp - 0x310], 0
jmp 0x44ecae
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
jl 0x44ecd1
mov eax, dword [ebp - 0x310]
mov eax, dword [ebp + eax*4 - 0x257c]
sub eax, 0x3c2f893b
mov dword [ebp - 0xbd0], eax
jmp 0x44eca1
cmp dword [ebp + 8], 2
jl 0x45cc45
mov dword [ebp - 0x468], 0xfff8
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x550], 0x2fbb6bc3
mov dword [ebp - 0x600], 0x6d8d3833
mov dword [ebp - 0x858], 0
jmp 0x44ed26
mov eax, dword [ebp - 0x858]
inc eax
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 1
jge 0x44ed42
mov eax, dword [ebp - 0x858]
mov dword [ebp + eax*4 - 0x68c], 0xf9c3
jmp 0x44ed19
mov eax, dword [ebp - 0x468]
dec eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0x1449c9fb
jle 0x44ed67
mov dword [ebp - 0x2584], 1
jmp 0x44ed6e
and dword [ebp - 0x2584], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x550]
cmp eax, dword [ebp - 0x600]
jg 0x44edb2
mov dword [ebp - 0x258c], 1
jmp 0x44edb9
and dword [ebp - 0x258c], 0
mov eax, 0x4f98cafa
test eax, eax
je 0x44eff1
mov dword [ebp - 0x148], 1
mov dword [ebp - 0xbfc], 0xfffffffd
mov dword [ebp - 0x1c6c], 0x5537
mov dword [ebp - 0x2674], 6
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
cmp dword [ebp - 0x4d0], eax
jge 0x44ee20
mov dword [ebp - 0x1c5c], 1
jmp 0x44ee27
and dword [ebp - 0x1c5c], 0
cmp dword [ebp - 0x318], 0xfcc013ce
jae 0x44ee3f
mov dword [ebp - 0xd9c], 1
jmp 0x44ee46
and dword [ebp - 0xd9c], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0xd9c], eax
jge 0x44ee5b
cmp dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x2e84], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x2e8c], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x2e94], eax
cmp dword [ebp - 0x550], 0
je 0x44ee8f
cmp dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x1c5c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x68c]
jle 0x44eeb7
mov dword [ebp - 0xda4], 1
jmp 0x44eebe
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0xda4], eax
jl 0x44eee5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68c], 0
jne 0x44eee5
and dword [ebp - 0x1c64], 0
jmp 0x44eeef
mov dword [ebp - 0x1c64], 1
mov eax, dword [ebp - 0x1c64]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x318]
jne 0x44ef1b
mov eax, 0x10b42b8f
test eax, eax
jne 0x44ef1b
and dword [ebp - 0x2594], 0
jmp 0x44ef25
mov dword [ebp - 0x2594], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68c], 1
jle 0x44ef41
mov dword [ebp - 0x2664], 1
jmp 0x44ef48
and dword [ebp - 0x2664], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x2e9c], eax
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0xbfc], eax
imul eax, dword [ebp - 0xbfc], 0x700
cmp eax, dword [ebp - 0x148]
jge 0x44ef7f
mov dword [ebp - 0x266c], 1
jmp 0x44ef86
and dword [ebp - 0x266c], 0
cmp dword [ebp - 0x318], 0
jne 0x44efa1
cmp dword [ebp - 0x148], 0
jne 0x44efa1
and dword [ebp - 0xdac], 0
jmp 0x44efab
mov dword [ebp - 0xdac], 1
mov eax, dword [ebp - 0xdac]
sub eax, 0xb036
mov dword [ebp - 0x1c6c], eax
jne 0x44efd0
mov eax, 0x799e6047
test eax, eax
jne 0x44efd0
and dword [ebp - 0xdb4], 0
jmp 0x44efda
mov dword [ebp - 0xdb4], 1
mov eax, dword [ebp - 0x600]
add eax, dword [ebp - 0xdb4]
mov dword [ebp - 0x2674], eax
jmp 0x44f10d
mov dword [ebp - 0xdc4], 9
mov dword [ebp - 0x500], 0x4d23a2cc
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x500], 0xfffffffc
jle 0x44f032
mov dword [ebp - 0x1c74], 1
jmp 0x44f039
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x1c74]
jl 0x44f053
mov dword [ebp - 0x267c], 1
jmp 0x44f05a
and dword [ebp - 0x267c], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x2ea4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68c], 0
je 0x44f08b
mov eax, 0x5b7dff93
test eax, eax
je 0x44f08b
mov dword [ebp - 0xdbc], 1
jmp 0x44f092
and dword [ebp - 0xdbc], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0xdbc]
jl 0x44f0b3
push 9
pop eax
test eax, eax
je 0x44f0b3
mov dword [ebp - 0x1c7c], 1
jmp 0x44f0ba
and dword [ebp - 0x1c7c], 0
cmp dword [ebp - 0x1c7c], 0xffffffff
jne 0x44f0cf
mov dword [ebp - 0x2690], 1
jmp 0x44f0d6
and dword [ebp - 0x2690], 0
mov eax, dword [ebp - 0xdc4]
sub eax, dword [ebp - 0x468]
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 0x442], 0
movzx eax, byte [ebp - 0x442]
test eax, eax
je 0x44f10d
push 0
push 0x1596
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x860], 0xb871c7bf
mov dword [ebp - 0x2eac], 0x85c9e53e
mov dword [ebp - 0x2eb4], 0x9503
mov dword [ebp - 0x1c84], 0x7e2f9d44
mov dword [ebp - 0x160], 0
jmp 0x44f14e
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x44f16a
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x34b8], 0x64a6847d
jmp 0x44f141
mov dword [ebp - 0x160], 0
jmp 0x44f183
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x44f19f
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x3530], 2
jmp 0x44f176
mov dword [ebp - 0x860], 2
jmp 0x44f1b8
mov eax, dword [ebp - 0x860]
dec eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 0
jl 0x44f1f9
mov byte [ebp - 0x2a1], 0
movzx eax, byte [ebp - 0x2a1]
test eax, eax
je 0x44f1db
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov byte [ebp - 0x3f9], 0
movzx eax, byte [ebp - 0x3f9]
test eax, eax
je 0x44f1f7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
jmp 0x44f1ab
mov eax, dword [ebp - 0x1c84]
inc eax
mov dword [ebp - 0x1c84], eax
mov dword [ebp - 0xc04], 1
mov dword [ebp - 0x320], 6
mov dword [ebp - 0x138], 1
mov dword [ebp - 0xc0c], 0x702377d6
mov dword [ebp - 0x694], 0
jmp 0x44f247
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 1
jge 0x44f263
mov eax, dword [ebp - 0x694]
mov dword [ebp + eax*4 - 0x26a8], 0
jmp 0x44f23a
mov eax, 0x3606
test eax, eax
je 0x44f381
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2ebc], eax
mov eax, dword [ebp - 0x138]
inc eax
cmp dword [ebp - 0x138], eax
jg 0x44f297
mov dword [ebp - 0x2698], 1
jmp 0x44f29e
and dword [ebp - 0x2698], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2ec4], eax
push 0xfffffffffffffffa
pop eax
inc eax
add eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x138]
jl 0x44f2ce
cmp dword [ebp - 0x138], 0
jne 0x44f2ce
and dword [ebp - 0xdcc], 0
jmp 0x44f2d8
mov dword [ebp - 0xdcc], 1
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 0xdcc]
jne 0x44f313
mov eax, 0x198ab79
test eax, eax
je 0x44f313
mov dword [ebp - 0x1c8c], 1
jmp 0x44f31a
and dword [ebp - 0x1c8c], 0
cmp dword [ebp - 0x1c8c], 0xfffffff9
jle 0x44f32f
mov dword [ebp - 0x26a0], 1
jmp 0x44f336
and dword [ebp - 0x26a0], 0
mov eax, 0xc02a3062
test eax, eax
je 0x44f350
or eax, 0xffffffff
je 0x44f350
mov dword [ebp - 0xdd4], 1
jmp 0x44f357
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0xdd4]
sub eax, dword [ebp - 0x138]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xbac89d73
jbe 0x44f381
mov dword [ebp - 0x1c94], 1
jmp 0x44f388
and dword [ebp - 0x1c94], 0
mov eax, dword [ebp - 0x1c94]
sub eax, dword [ebp - 0xc0c]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0x320], 0
jmp 0x44f3b3
mov eax, dword [ebp - 0x320]
dec eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
jl 0x44f3d6
mov eax, dword [ebp - 0x320]
mov eax, dword [ebp + eax*4 - 0x26a8]
sub eax, 0x3c2f893b
mov dword [ebp - 0xc0c], eax
jmp 0x44f3a6
mov dword [ebp - 0x58], 0x9b55bb2c
mov dword [ebp - 0x26b0], 0xa2b3b7be
mov dword [ebp - 0x868], 0
jmp 0x44f400
mov eax, dword [ebp - 0x868]
inc eax
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 4
jge 0x44f41c
mov eax, dword [ebp - 0x868]
mov dword [ebp + eax*4 - 0x3188], 0xffffffff
jmp 0x44f3f3
mov byte [ebp - 0x2a3], 0
movzx eax, byte [ebp - 0x2a3]
test eax, eax
je 0x44f43f
push 0
push 0x91a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3188], 0x9cfe0482
jb 0x44f45e
mov dword [ebp - 0xddc], 1
jmp 0x44f465
and dword [ebp - 0xddc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xddc]
mov dword [ebp + eax - 0x3188], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3188]
mov dword [ebp - 0x2ecc], eax
mov dword [ebp - 0x26b0], 0x45d811f0
mov dword [ebp - 0x948], 0xffffffff
mov dword [ebp - 0x319c], 1
mov dword [ebp - 0x3198], 1
mov dword [ebp - 0x3194], 1
mov dword [ebp - 0x3190], 1
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x26b8], 0xffffffff
mov dword [ebp - 0x328], 0
jmp 0x44f4f4
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jg 0x44f517
mov byte [ebp - 0x444], 0
movzx eax, byte [ebp - 0x444]
test eax, eax
je 0x44f515
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x44f4e7
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x26b8], eax
mov dword [ebp - 0xbcc], 1
mov dword [ebp - 0x26cc], 0x3dd33a4a
mov dword [ebp - 0x26c8], 0x3dd33a4a
mov dword [ebp - 0x26c4], 0x3dd33a4a
mov dword [ebp - 0x26c0], 0x3dd33a4a
mov dword [ebp - 0x290], 0xfffffffa
mov dword [ebp - 0x20f4], 0xfffffffc
mov dword [ebp - 0x290], 3
jmp 0x44f58e
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
jl 0x44f6a4
mov dword [ebp - 0x69c], 0
jmp 0x44f5b4
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 4
jge 0x44f5d0
mov eax, dword [ebp - 0x69c]
mov dword [ebp + eax*4 - 0x33f8], 0xffffffff
jmp 0x44f5a7
mov eax, dword [ebp - 0x290]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x26cc]
cmp dword [ebp + eax*4 - 0x26cc], ecx
jne 0x44f5f8
mov dword [ebp - 0x1c9c], 1
jmp 0x44f5ff
and dword [ebp - 0x1c9c], 0
cmp dword [ebp - 0x1c9c], 0xffffffff
jle 0x44f614
mov dword [ebp - 0xde4], 1
jmp 0x44f61b
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0xde4], eax
jne 0x44f63e
mov eax, 0x3dbc
test eax, eax
je 0x44f63e
mov dword [ebp - 0x2378], 1
jmp 0x44f645
and dword [ebp - 0x2378], 0
mov eax, dword [ebp - 0x290]
mov eax, dword [ebp + eax*4 - 0x26cc]
mov dword [ebp - 0x1ca4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ca4]
mov dword [ebp + eax - 0x33f8], ecx
mov eax, dword [ebp - 0x290]
mov eax, dword [ebp + eax*4 - 0x26cc]
cmp eax, dword [ebp - 0x1ca4]
jle 0x44f68c
mov dword [ebp - 0xdec], 1
jmp 0x44f693
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0xdec]
mov dword [ebp - 0x20f4], eax
jmp 0x44f581
mov dword [ebp - 0x1088], 0xa50d0ce4
mov dword [ebp - 0x870], 4
mov dword [ebp - 0x188], 0
jmp 0x44f6d1
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x44f6ed
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x1fc8], 0x9841b3c6
jmp 0x44f6c4
mov dword [ebp - 0x188], 0
jmp 0x44f706
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x44f71f
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x64], 0x1cecb457
jmp 0x44f6f9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x64], 0
jmp 0x44f744
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x64], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 2
jg 0x44fbb1
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x330], 0xa9b65cab
mov dword [ebp - 0xa8], 0
jmp 0x44f782
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x44f8be
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x2440], 0x1a652065
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0xa8], eax
jge 0x44f7c1
mov dword [ebp - 0x1cac], 1
jmp 0x44f7c8
and dword [ebp - 0x1cac], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1cac], eax
jne 0x44f7e2
mov dword [ebp - 0xdf4], 1
jmp 0x44f7e9
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0xdf4]
add eax, 0x519d8147
cmp eax, dword [ebp - 0xa8]
jg 0x44f808
mov dword [ebp - 0x1cb4], 1
jmp 0x44f80f
and dword [ebp - 0x1cb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x1cb4], eax
jne 0x44f82d
mov dword [ebp - 0xdfc], 1
jmp 0x44f834
and dword [ebp - 0xdfc], 0
imul eax, dword [ebp - 0xdfc], 0
mov dword [ebp - 0x470], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov eax, dword [ebp + eax*4 - 0x1fc8]
cmp eax, dword [ebp - 0x470]
jge 0x44f866
mov dword [ebp - 0x1cbc], 1
jmp 0x44f86d
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0x1cbc]
mov dword [ebp - 0x2440], eax
mov dword [ebp - 0x470], 2
jmp 0x44f892
mov eax, dword [ebp - 0x470]
dec eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jl 0x44f8b9
mov byte [ebp - 0x2a5], 0
movzx eax, byte [ebp - 0x2a5]
test eax, eax
je 0x44f8b7
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x44f885
jmp 0x44f775
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2ed4], eax
mov eax, dword [ebp - 0x330]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x64]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x64]
cmp eax, dword [ebp + ecx*4 - 0x1fc8]
jl 0x44f902
mov eax, 0xbd6cd538
test eax, eax
je 0x44f902
mov dword [ebp - 0xe04], 1
jmp 0x44f909
and dword [ebp - 0xe04], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0xe04], 0xce40
cmp dword [ebp + eax - 0x1fc8], ecx
jge 0x44f92e
mov dword [ebp - 0x1cc4], 1
jmp 0x44f935
and dword [ebp - 0x1cc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1fc8]
cmp dword [ebp - 0x1cc4], eax
jle 0x44f956
mov dword [ebp - 0xe0c], 1
jmp 0x44f95d
and dword [ebp - 0xe0c], 0
cmp dword [ebp - 0xe0c], 8
jne 0x44f972
mov dword [ebp - 0x1ccc], 1
jmp 0x44f979
and dword [ebp - 0x1ccc], 0
imul eax, dword [ebp - 0x1ccc], 0xbad4
test eax, eax
jne 0x44f9a0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc8], 0
jne 0x44f9a0
and dword [ebp - 0xe14], 0
jmp 0x44f9aa
mov dword [ebp - 0xe14], 1
mov eax, dword [ebp - 0xe14]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x870]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x64]
cmp eax, 0xfffffffb
je 0x44f9d7
mov dword [ebp - 0x1cd4], 1
jmp 0x44f9de
and dword [ebp - 0x1cd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov eax, dword [ebp + eax*4 - 0x1fc8]
sub eax, dword [ebp - 0x1cd4]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x64]
cmp eax, dword [ebp + ecx*4 - 0x1fc8]
jl 0x44fa14
mov dword [ebp - 0xe1c], 1
jmp 0x44fa1b
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xe1c]
test eax, eax
jne 0x44fa37
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc8], 2
jle 0x44fa53
mov dword [ebp - 0x1cdc], 1
jmp 0x44fa5a
and dword [ebp - 0x1cdc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x1cdc], eax
je 0x44fa78
mov dword [ebp - 0xe24], 1
jmp 0x44fa7f
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0xe24]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0xa8], 0
jmp 0x44faa4
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x44fbac
mov dword [ebp - 0x6a4], 0xffffffff
mov dword [ebp - 0x20fc], 0x7138bf9c
mov dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x2edc], eax
or eax, 0xffffffff
jne 0x44faec
mov dword [ebp - 0x1ce4], 1
jmp 0x44faf3
and dword [ebp - 0x1ce4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x1ce4], eax
je 0x44fb11
mov dword [ebp - 0xe2c], 1
jmp 0x44fb18
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 0x20fc]
cmp dword [ebp - 0xe2c], eax
jg 0x44fb32
mov dword [ebp - 0x1cec], 1
jmp 0x44fb39
and dword [ebp - 0x1cec], 0
mov eax, dword [ebp - 0x1cec]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x330], 0
jmp 0x44fb5e
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jg 0x44fba7
mov dword [ebp - 0x6a4], 2
jmp 0x44fb80
mov eax, dword [ebp - 0x6a4]
dec eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0
jl 0x44fba5
mov byte [ebp - 0x401], 0
movzx eax, byte [ebp - 0x401]
test eax, eax
je 0x44fba3
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x44fb73
jmp 0x44fb51
jmp 0x44fa97
jmp 0x44f72f
mov dword [ebp - 0x24d0], 0x7991ad47
mov dword [ebp - 0x878], 0x68ec0ae9
mov dword [ebp - 0x878], 0
jmp 0x44fbde
mov eax, dword [ebp - 0x878]
dec eax
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0xffffffef
jge 0x44fbfe
mov dword [ebp - 0x240c], 0x57bf
cmp dword [ebp - 0x240c], 0
je 0x44fbfc
jmp 0x44fbfe
jmp 0x44fbd1
mov byte [ebp - 0x2a7], 0
movzx eax, byte [ebp - 0x2a7]
test eax, eax
je 0x44fc1f
push 0
push 0x2103
push 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov dword [ebp - 0x58], 0xffffffe3
jmp 0x44fc2f
cmp dword [ebp - 0x58], 0xffffffe5
jl 0x454a3e
mov dword [ebp - 0x2ee4], 0xac78
mov byte [ebp - 0x446], 0
movzx eax, byte [ebp - 0x446]
test eax, eax
je 0x44fc5f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov byte [ebp - 0x2a9], 0
movzx eax, byte [ebp - 0x2a9]
test eax, eax
je 0x44fc91
push 0
push 0x67f
push 0x26b9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov dword [ebp - 0x84], 1
mov dword [ebp - 0xf4], 0x3c7730f9
mov dword [ebp - 0xe44], 0x5425a80e
mov dword [ebp - 0x2104], 4
mov dword [ebp - 0x2934], 0xffffffff
mov dword [ebp - 0x2930], 0xffffffff
mov dword [ebp - 0x292c], 0xffffffff
mov dword [ebp - 0x2928], 0xffffffff
mov dword [ebp - 0x2590], 3
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x2104], eax
xor eax, eax
inc eax
je 0x44fd0e
mov eax, 0xfffa
test eax, eax
je 0x44fd0e
and dword [ebp - 0xe34], 0
jmp 0x44fd18
mov dword [ebp - 0xe34], 1
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xe34]
lea eax, [ecx + eax - 0xd329]
test eax, eax
jne 0x44fd3b
mov dword [ebp - 0x1cf4], 1
jmp 0x44fd42
and dword [ebp - 0x1cf4], 0
cmp dword [ebp - 0x1cf4], 0xa00d
jne 0x44fd5a
mov dword [ebp - 0xe3c], 1
jmp 0x44fd61
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xe3c], eax
je 0x44fd7b
mov dword [ebp - 0x1cfc], 1
jmp 0x44fd82
and dword [ebp - 0x1cfc], 0
mov dword [ebp - 0xe44], 0xcb4c23af
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x1cfc]
cmp dword [ebp - 0xe44], eax
jge 0x44fdb6
cmp dword [ebp - 0xf4], 0
je 0x44fdb6
mov dword [ebp - 0x1d04], 1
jmp 0x44fdbd
and dword [ebp - 0x1d04], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x1d04], eax
jl 0x44fdd7
mov dword [ebp - 0xc14], 1
jmp 0x44fdde
and dword [ebp - 0xc14], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xc14]
mov dword [ebp + eax - 0x2934], ecx
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0xc14]
mov dword [ebp - 0x2590], eax
mov dword [ebp - 0xf4], 0
jmp 0x44fe1c
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x44fe41
mov byte [ebp - 0x409], 0
movzx eax, byte [ebp - 0x409]
test eax, eax
je 0x44fe3f
push 0
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
jmp 0x44fe0f
mov dword [ebp - 0x1068], 0xcf97a265
mov dword [ebp - 0x528], 0xfffffff7
mov dword [ebp - 0xc1c], 0
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x210c], 0x912530a9
mov dword [ebp - 0x6ac], 0
jmp 0x44fe8c
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 3
jge 0x44fea8
mov eax, dword [ebp - 0x6ac]
mov dword [ebp + eax*4 - 0x2f9c], 4
jmp 0x44fe7f
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x240], eax
jne 0x44fec2
mov dword [ebp - 0xe4c], 1
jmp 0x44fec9
and dword [ebp - 0xe4c], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0xe4c], eax
jne 0x44fee3
mov dword [ebp - 0x1d0c], 1
jmp 0x44feea
and dword [ebp - 0x1d0c], 0
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x240]
neg ecx
add eax, ecx
cmp eax, dword [ebp - 0x1d0c]
jne 0x44ff0e
mov dword [ebp - 0xe54], 1
jmp 0x44ff15
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0xe54], eax
jle 0x44ff2f
mov dword [ebp - 0x1d14], 1
jmp 0x44ff36
and dword [ebp - 0x1d14], 0
mov eax, dword [ebp - 0xc1c]
inc eax
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x1d14]
sub eax, dword [ebp - 0x240]
cmp dword [ebp - 0xc1c], eax
jle 0x44ff6a
mov dword [ebp - 0xe5c], 1
jmp 0x44ff71
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0x528]
cmp eax, dword [ebp - 0xe5c]
jg 0x44ff8b
mov dword [ebp - 0x1d1c], 1
jmp 0x44ff92
and dword [ebp - 0x1d1c], 0
mov eax, dword [ebp - 0x528]
cmp eax, dword [ebp - 0x1d1c]
jg 0x44ffac
mov dword [ebp - 0xc00], 1
jmp 0x44ffb3
and dword [ebp - 0xc00], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc00]
mov dword [ebp + eax - 0x2f9c], ecx
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0x210c], eax
mov dword [ebp - 0x528], 0
jmp 0x44ffea
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x30
jg 0x45003d
mov dword [ebp - 0x2414], 0x6b42be19
mov dword [ebp - 0xe64], 0x4ab653b1
mov dword [ebp - 0x1d24], 0xfffffffd
mov eax, dword [ebp - 0x2414]
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x1d24], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1d24]
mov dword [ebp + eax - 0x2f9c], ecx
jmp 0x44ffdd
cmp dword [ebp - 0x84], 0
jl 0x450052
mov dword [ebp - 0xe6c], 1
jmp 0x450059
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0xe6c]
dec eax
sub eax, dword [ebp - 0x58]
je 0x451844
mov dword [ebp - 0x478], 0xfffffffc
mov dword [ebp - 0x2eec], 0xffffffff
mov dword [ebp - 0x2ef4], 0x5dec4f3f
mov dword [ebp - 0x2efc], 0xc6076fda
mov dword [ebp - 0x2f04], 0xfffffffa
mov dword [ebp - 0x6c], 0
jmp 0x4500ab
cmp dword [ebp - 0x6c], 2
jge 0x4500c1
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x4d8], 0xfffffffe
mov dword [ebp - 0xfc], 0xfffffff9
mov dword [ebp - 0x6ec], 0
jmp 0x451878
cmp dword [ebp - 0x6ec], 3
jge 0x451894
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x1240], 0x587c7ab8
mov dword [ebp - 0x1250], 0
mov dword [ebp - 0x1268], 0xfff6
mov dword [ebp - 0x24d8], 0x37b30477
mov dword [ebp - 0x18], 0
jmp 0x454a80
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x454a96
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x27c8], 0xfffffffd
jmp 0x454a79
mov dword [ebp - 0x18], 0
jmp 0x454aa6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x454abc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1940], 1
jmp 0x454a9f
mov dword [ebp - 0x18], 0
jmp 0x454acc
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x454ae2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2254], 0xfffffff7
jmp 0x454ac5
mov dword [ebp - 0x18], 0
jmp 0x454af2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x454b08
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac4], 9
jmp 0x454aeb
cmp dword [ebp - 0x4e8], 0
je 0x454bce
cmp dword [ebp - 0x4e8], 0xf985
jne 0x454b2d
mov dword [ebp - 0x1930], 1
jmp 0x454b34
and dword [ebp - 0x1930], 0
mov eax, dword [ebp - 0x1930]
mov dword [ebp - 0x1240], eax
cmp dword [ebp - 0x1240], 0
jne 0x454b55
mov dword [ebp - 0x1e68], 1
jmp 0x454b5c
and dword [ebp - 0x1e68], 0
mov eax, dword [ebp - 0x4e8]
add eax, dword [ebp - 0x1e68]
cmp dword [ebp - 0x4e8], eax
je 0x454b7c
mov dword [ebp - 0x1248], 1
jmp 0x454b83
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x4e8]
imul eax, dword [ebp - 0x1248]
neg eax
cmp eax, dword [ebp - 0x4e8]
jg 0x454ba6
mov dword [ebp - 0x1938], 1
jmp 0x454bad
and dword [ebp - 0x1938], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c8]
cmp dword [ebp - 0x1938], eax
jg 0x454bce
mov dword [ebp - 0xabc], 1
jmp 0x454bd5
and dword [ebp - 0xabc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xabc]
mov dword [ebp + eax - 0x1940], ecx
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x1250], eax
mov eax, dword [ebp - 0x1268]
cmp dword [ebp - 0x1250], eax
jg 0x454c0e
mov dword [ebp - 0x1cb0], 1
jmp 0x454c15
and dword [ebp - 0x1cb0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c8]
cmp dword [ebp - 0x1cb0], eax
jge 0x454c36
mov dword [ebp - 0xb74], 1
jmp 0x454c3d
and dword [ebp - 0xb74], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb74]
mov dword [ebp + eax - 0x2254], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac4]
cmp dword [ebp - 0xb74], eax
jge 0x454c71
mov dword [ebp - 0x1258], 1
jmp 0x454c78
and dword [ebp - 0x1258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac4]
imul eax, dword [ebp - 0x1258]
test eax, eax
je 0x454cac
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1940], 0
je 0x454cac
mov dword [ebp - 0x1260], 1
jmp 0x454cb3
and dword [ebp - 0x1260], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac4]
cmp dword [ebp - 0x1260], eax
jg 0x454cd4
mov dword [ebp - 0x1f80], 1
jmp 0x454cdb
and dword [ebp - 0x1f80], 0
cmp dword [ebp - 0x1f80], 0x38ec
jle 0x454cf3
mov dword [ebp - 0x1948], 1
jmp 0x454cfa
and dword [ebp - 0x1948], 0
mov eax, dword [ebp - 0x1268]
cmp dword [ebp - 0x1948], eax
jle 0x454d14
mov dword [ebp - 0x1270], 1
jmp 0x454d1b
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0x1270]
mov dword [ebp - 0x24d8], eax
mov dword [ebp - 0x58], 0x1152f54c
mov dword [ebp - 0x68], 0x49fe387
mov dword [ebp - 0x1960], 0xffffffff
mov dword [ebp - 0x1f88], 0x8db0
mov dword [ebp - 0x2264], 0xfe6b3e96
mov dword [ebp - 0x1a8], 0
jmp 0x454d6c
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x454d88
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x1f44], 1
jmp 0x454d5f
mov dword [ebp - 0x1a8], 0
jmp 0x454da1
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x454dbd
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x950], 0xfffb
jmp 0x454d94
cmp dword [ebp - 0x68], 0
je 0x454dfe
mov dword [ebp - 0x68], 0
jmp 0x454dd3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jg 0x454de9
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1f44], 0xed080c17
jmp 0x454dcc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f44]
mov dword [ebp - 0x68], eax
jmp 0x455262
mov dword [ebp - 0x60], 0xfc88eb98
mov dword [ebp - 0xc18], 0xe19f23e5
cmp dword [ebp - 0x60], 0
jne 0x454e21
mov dword [ebp - 0x1cb8], 1
jmp 0x454e28
and dword [ebp - 0x1cb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x950]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x1cb8]
jge 0x454e4f
mov dword [ebp - 0x1278], 1
jmp 0x454e56
and dword [ebp - 0x1278], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1278], eax
jne 0x454e6d
mov dword [ebp - 0x225c], 1
jmp 0x454e74
and dword [ebp - 0x225c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x950]
mov dword [ebp - 0x2e40], eax
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffff7
pop ecx
sub ecx, dword [ebp + eax - 0x950]
cmp ecx, dword [ebp - 0x60]
jge 0x454ea8
mov dword [ebp - 0x68], 9
jmp 0x455272
cmp dword [ebp + 8], 1
jne 0x46346f
mov dword [ebp - 0x28e4], 0x624
mov dword [ebp - 0x28e0], 0x624
mov dword [ebp - 0x28dc], 0x624
mov dword [ebp - 0x28d8], 0x624
mov dword [ebp - 0x8bc], 0x43d837bc
mov byte [ebp - 0x41c], 0
movzx eax, byte [ebp - 0x41c]
test eax, eax
je 0x45cc9b
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
mov dword [ebp - 0x8bc], 0
jmp 0x45ccb4
mov eax, dword [ebp - 0x8bc]
inc eax
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 3
jg 0x45cd69
mov dword [ebp - 0x964], 0x5e00fe1c
mov byte [ebp - 0x361], 0
movzx eax, byte [ebp - 0x361]
test eax, eax
je 0x45cce7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov byte [ebp - 0x41e], 0
movzx eax, byte [ebp - 0x41e]
test eax, eax
je 0x45cd01
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x964], 0
jmp 0x45cd1a
mov eax, dword [ebp - 0x964]
inc eax
mov dword [ebp - 0x964], eax
cmp dword [ebp - 0x964], 3
jg 0x45cd64
mov dword [ebp - 0x5ac], 0xc4279c41
mov dword [ebp - 0x5ac], 0
jmp 0x45cd46
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 4
jge 0x45cd62
mov eax, dword [ebp - 0x5ac]
mov dword [ebp + eax*4 - 0x28e4], 0xa1fa
jmp 0x45cd39
jmp 0x45cd0d
jmp 0x45cca7
mov dword [ebp - 0x5b4], 8
mov dword [ebp - 0x8c4], 0
jmp 0x45cd8c
mov eax, dword [ebp - 0x8c4]
inc eax
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 4
jge 0x45cda8
mov eax, dword [ebp - 0x8c4]
mov dword [ebp + eax*4 - 0x33e8], 0xdf99
jmp 0x45cd7f
mov dword [ebp - 0x5b4], 0
jmp 0x45cdc1
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 3
jg 0x45ce83
mov dword [ebp - 0x264], 0x36444696
mov dword [ebp - 0xa00], 0
jmp 0x45cdf1
mov eax, dword [ebp - 0xa00]
inc eax
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0xa00], 1
jge 0x45ce0d
mov eax, dword [ebp - 0xa00]
mov dword [ebp + eax*4 - 0x2f40], 0
jmp 0x45cde4
mov dword [ebp - 0x264], 3
jmp 0x45ce26
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jl 0x45ce48
mov dword [ebp - 0x1104], 0
mov eax, dword [ebp - 0x1104]
dec eax
mov dword [ebp - 0x1104], eax
jmp 0x45ce19
mov dword [ebp - 0x264], 0
jmp 0x45ce61
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jg 0x45ce7e
mov eax, dword [ebp - 0x5b4]
cmp dword [ebp + eax*4 - 0x33e8], 0
je 0x45ce7c
jmp 0x45ce7e
jmp 0x45ce54
jmp 0x45cdb4
mov dword [ebp - 0x100], 7
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0x8cc], 0
jmp 0x45ceb0
mov eax, dword [ebp - 0x8cc]
inc eax
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 1
jge 0x45cecc
mov eax, dword [ebp - 0x8cc]
mov dword [ebp + eax*4 - 0x1144], 1
jmp 0x45cea3
mov dword [ebp - 0x100], 0x12
jmp 0x45cee5
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffffa
je 0x45d033
mov dword [ebp - 0x112c], 0
cmp dword [ebp - 0x100], 0xa4748753
jge 0x45cf14
mov dword [ebp - 0x110c], 1
jmp 0x45cf1b
and dword [ebp - 0x110c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x110c], eax
jg 0x45cf35
mov dword [ebp - 0x1114], 1
jmp 0x45cf3c
and dword [ebp - 0x1114], 0
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x1114]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0xa78]
mov dword [ebp - 0x2c08], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x30a8], eax
mov eax, dword [ebp - 0x100]
add eax, 0x4309
imul eax, dword [ebp - 0x100]
cmp eax, 0xc279a20b
jbe 0x45cf8b
mov dword [ebp - 0x111c], 1
jmp 0x45cf92
and dword [ebp - 0x111c], 0
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x111c]
test eax, eax
jne 0x45cfb5
cmp dword [ebp - 0xa78], 0
jne 0x45cfb5
and dword [ebp - 0x1124], 0
jmp 0x45cfbf
mov dword [ebp - 0x1124], 1
mov eax, dword [ebp - 0x1124]
sub eax, 0x5b2e4bf2
cmp dword [ebp - 0x112c], eax
jle 0x45cfde
mov dword [ebp - 0x1134], 1
jmp 0x45cfe5
and dword [ebp - 0x1134], 0
mov eax, dword [ebp - 0x112c]
cmp eax, dword [ebp - 0x1134]
jg 0x45cfff
mov dword [ebp - 0x113c], 1
jmp 0x45d006
and dword [ebp - 0x113c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x113c]
mov dword [ebp + eax - 0x1144], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1144], 0
je 0x45d02e
jmp 0x45ced8
jmp 0x45ced8
mov dword [ebp - 0xd8], 0xa876
mov dword [ebp - 0xa88], 0x17f2
mov dword [ebp - 0x118c], 1
mov dword [ebp - 0x1194], 0x3ede5c48
mov dword [ebp - 0x23ac], 0x5ce5aba8
mov dword [ebp - 0x1f0], 0
jmp 0x45d07e
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x45d09a
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x27a0], 0x915bb002
jmp 0x45d071
mov dword [ebp - 0x1f0], 0
jmp 0x45d0b3
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x45d0cf
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x32f0], 1
jmp 0x45d0a6
mov eax, dword [ebp - 0xa88]
cmp dword [ebp - 0xd8], eax
jne 0x45d0e9
mov dword [ebp - 0xa80], 1
jmp 0x45d0f0
and dword [ebp - 0xa80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa80]
mov dword [ebp + eax - 0x27a0], ecx
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xa80], eax
jl 0x45d122
or eax, 0xffffffff
je 0x45d122
mov dword [ebp - 0x114c], 1
jmp 0x45d129
and dword [ebp - 0x114c], 0
mov eax, dword [ebp - 0xa88]
cmp dword [ebp - 0x114c], eax
jle 0x45d143
mov dword [ebp - 0x269c], 1
jmp 0x45d14a
and dword [ebp - 0x269c], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2c10], eax
or eax, 0xffffffff
jne 0x45d16d
cmp dword [ebp - 0xd8], 0
jne 0x45d16d
and dword [ebp - 0x23a4], 0
jmp 0x45d177
mov dword [ebp - 0x23a4], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2f48], eax
mov eax, 0xf68e10d3
cmp eax, 0xe5a9390d
ja 0x45d19b
mov dword [ebp - 0x1154], 1
jmp 0x45d1a2
and dword [ebp - 0x1154], 0
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x1154]
jl 0x45d1cc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27a0], 0
je 0x45d1cc
mov dword [ebp - 0x115c], 1
jmp 0x45d1d3
and dword [ebp - 0x115c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x115c], eax
jle 0x45d1ed
mov dword [ebp - 0x2580], 1
jmp 0x45d1f4
and dword [ebp - 0x2580], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2c18], eax
xor eax, eax
cmp eax, 0xffffffff
ja 0x45d213
mov dword [ebp - 0x1164], 1
jmp 0x45d21a
and dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0xa88]
imul eax, dword [ebp - 0x1164]
cmp eax, dword [ebp - 0xd8]
jge 0x45d23b
mov dword [ebp - 0x116c], 1
jmp 0x45d242
and dword [ebp - 0x116c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x116c], eax
je 0x45d25c
mov dword [ebp - 0x1174], 1
jmp 0x45d263
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x1174]
add eax, 0x4d41bd43
cmp eax, dword [ebp - 0xd8]
jge 0x45d282
mov dword [ebp - 0x117c], 1
jmp 0x45d289
and dword [ebp - 0x117c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x32f0]
cmp dword [ebp - 0x117c], eax
jle 0x45d2a9
mov dword [ebp - 0x1184], 1
jmp 0x45d2b0
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0x1184]
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0x118c]
mov dword [ebp - 0x1194], eax
mov eax, dword [ebp - 0x1194]
mov dword [ebp - 0x23ac], eax
mov dword [ebp - 0x3a8], 1
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x8c], 0x9008
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x23b4], 0xfffffffb
mov dword [ebp - 0x96c], 0
jmp 0x45d325
mov eax, dword [ebp - 0x96c]
inc eax
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 3
jge 0x45d341
mov eax, dword [ebp - 0x96c]
mov dword [ebp + eax*4 - 0x2748], 0x424b969b
jmp 0x45d318
cmp dword [ebp - 0x8c], 0
je 0x45d35f
cmp dword [ebp - 0x8c], 0
je 0x45d35f
mov dword [ebp - 0x119c], 1
jmp 0x45d366
and dword [ebp - 0x119c], 0
cmp dword [ebp - 0x119c], 0xfffffff7
jb 0x45d37b
mov dword [ebp - 0x11a4], 1
jmp 0x45d382
and dword [ebp - 0x11a4], 0
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x11a4]
jge 0x45d39c
mov dword [ebp - 0x11ac], 1
jmp 0x45d3a3
and dword [ebp - 0x11ac], 0
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x5bc], eax
jne 0x45d3cf
mov dword [ebp - 0x11b4], 1
jmp 0x45d3d6
and dword [ebp - 0x11b4], 0
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x11b4]
jge 0x45d3f6
cmp dword [ebp - 0x1bc], 0
jne 0x45d3f6
and dword [ebp - 0x11bc], 0
jmp 0x45d400
mov dword [ebp - 0x11bc], 1
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x11bc], eax
je 0x45d41a
mov dword [ebp - 0x2660], 1
jmp 0x45d421
and dword [ebp - 0x2660], 0
or eax, 0xffffffff
je 0x45d42f
cmp dword [ebp - 0x8c], 0
jne 0x45d441
cmp dword [ebp - 0x8c], 0
jne 0x45d441
and dword [ebp - 0x11c4], 0
jmp 0x45d44b
mov dword [ebp - 0x11c4], 1
imul eax, dword [ebp - 0x11c4], 0x478c
cmp eax, dword [ebp - 0x8c]
jl 0x45d469
mov dword [ebp - 0x11cc], 1
jmp 0x45d470
and dword [ebp - 0x11cc], 0
mov eax, dword [ebp - 0x11cc]
sub eax, dword [ebp - 0x8c]
sub eax, 0xaee0
cmp eax, dword [ebp - 0x5bc]
jge 0x45d495
mov dword [ebp - 0x11d4], 1
jmp 0x45d49c
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x11d4]
mov dword [ebp - 0x23b4], eax
mov dword [ebp - 0x8c], 2
jmp 0x45d4c8
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x45d56d
mov dword [ebp - 0x1bc], 0
jmp 0x45d4ee
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jg 0x45d54e
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp + eax*4 - 0x2748], 0
je 0x45d523
mov byte [ebp - 0x369], 0
movzx eax, byte [ebp - 0x369]
test eax, eax
je 0x45d521
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x45d53a
mov dword [ebp - 0x11dc], 0xffffffff
mov eax, dword [ebp - 0x11dc]
inc eax
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp + eax*4 - 0x2748], 0
je 0x45d54c
jmp 0x45d54e
jmp 0x45d4e1
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x2748]
mov dword [ebp + ecx*4 - 0x2748], eax
jmp 0x45d4bb
mov dword [ebp - 0x4e4], 0x5ff44426
mov dword [ebp - 0x9bc], 5
mov dword [ebp - 0x8d4], 0
jmp 0x45d59a
mov eax, dword [ebp - 0x8d4]
inc eax
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 4
jge 0x45d5b6
mov eax, dword [ebp - 0x8d4]
mov dword [ebp + eax*4 - 0x1f30], 1
jmp 0x45d58d
mov dword [ebp - 0x9bc], 0xfffffff0
jmp 0x45d5cf
mov eax, dword [ebp - 0x9bc]
dec eax
mov dword [ebp - 0x9bc], eax
cmp dword [ebp - 0x9bc], 0xffffffec
jl 0x45da0f
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x26d0], 0x52c25470
mov dword [ebp - 0xb8], 0
jmp 0x45d609
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x45da0a
mov dword [ebp - 0x4c], 0x64b5c6f8
mov dword [ebp - 0x1234], 0xfffffffe
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x1f30]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
je 0x45d649
mov dword [ebp - 0x11e4], 1
jmp 0x45d650
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x1f30]
cmp eax, dword [ebp - 0x11e4]
je 0x45d6ff
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x1f30], ecx
je 0x45d685
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x45d69e
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x1f30], 0
jne 0x45d69e
and dword [ebp - 0x11ec], 0
jmp 0x45d6a8
mov dword [ebp - 0x11ec], 1
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x11ec], eax
jne 0x45d6c2
mov dword [ebp - 0x11f4], 1
jmp 0x45d6c9
and dword [ebp - 0x11f4], 0
cmp dword [ebp - 0x11f4], 0x272b
jne 0x45d6e1
mov dword [ebp - 0x11fc], 1
jmp 0x45d6e8
and dword [ebp - 0x11fc], 0
mov eax, dword [ebp - 0x11fc]
sub eax, dword [ebp - 0xb8]
jne 0x45d6ff
and dword [ebp - 0x1204], 0
jmp 0x45d709
mov dword [ebp - 0x1204], 1
cmp dword [ebp - 0x1204], 0x3bc1
je 0x45d721
mov dword [ebp - 0x120c], 1
jmp 0x45d728
and dword [ebp - 0x120c], 0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x120c]
sub ecx, dword [ebp + eax*4 - 0x1f30]
jne 0x45d74f
mov eax, 0x46e7
test eax, eax
jne 0x45d74f
and dword [ebp - 0x1214], 0
jmp 0x45d759
mov dword [ebp - 0x1214], 1
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x1f30]
imul eax, dword [ebp - 0x1214]
test eax, eax
jne 0x45d77a
xor eax, eax
inc eax
je 0x45d932
mov dword [ebp - 0x8dc], 0
jmp 0x45d793
mov eax, dword [ebp - 0x8dc]
inc eax
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 2
jge 0x45d7af
mov eax, dword [ebp - 0x8dc]
mov dword [ebp + eax*4 - 0x2d28], 0x211
jmp 0x45d786
mov dword [ebp - 0x4c], 0
jmp 0x45d7bf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x45d92d
mov dword [ebp - 0x4ac], 0xa4e63097
mov dword [ebp - 0x974], 0
jmp 0x45d7ec
mov eax, dword [ebp - 0x974]
inc eax
mov dword [ebp - 0x974], eax
cmp dword [ebp - 0x974], 1
jge 0x45d808
mov eax, dword [ebp - 0x974]
mov dword [ebp + eax*4 - 0x4a4], 0xe7374489
jmp 0x45d7df
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4a4], 0
jmp 0x45d836
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4a4], 3
jg 0x45d928
mov dword [ebp - 0x2588], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4a4], 0
je 0x45d8b6
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3130], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2588]
cmp dword [ebp + eax - 0x2d28], ecx
je 0x45d88e
mov dword [ebp - 0x121c], 1
jmp 0x45d895
and dword [ebp - 0x121c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4a4]
cmp dword [ebp - 0x121c], eax
je 0x45d8b6
mov dword [ebp - 0x1224], 1
jmp 0x45d8bd
and dword [ebp - 0x1224], 0
cmp dword [ebp - 0x1224], 0x57b51ae2
jl 0x45d8d5
mov dword [ebp - 0x122c], 1
jmp 0x45d8dc
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0x122c]
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4ac], 0
jmp 0x45d901
cmp dword [ebp - 0x4ac], 3
jg 0x45d923
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4ac]
mov eax, dword [ebp + eax*4 - 0x1f30]
mov dword [ebp + ecx*4 - 0x1f30], eax
jmp 0x45d8f4
jmp 0x45d81b
jmp 0x45d7b8
jmp 0x45d9f8
mov dword [ebp - 0xa90], 0x8962
mov dword [ebp - 0x23bc], 0
mov dword [ebp - 0x4c], 0
jmp 0x45d956
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x45d9f8
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x1f30]
mov dword [ebp + ecx*4 - 0x1f30], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x1f30]
mov dword [ebp - 0x1234], eax
mov eax, dword [ebp - 0xa90]
cmp dword [ebp - 0x1234], eax
jne 0x45d99e
mov dword [ebp - 0x123c], 1
jmp 0x45d9a5
and dword [ebp - 0x123c], 0
mov eax, dword [ebp - 0xa90]
cmp dword [ebp - 0x123c], eax
jne 0x45d9bf
mov dword [ebp - 0x1244], 1
jmp 0x45d9c6
and dword [ebp - 0x1244], 0
mov eax, dword [ebp - 0xa90]
cmp eax, dword [ebp - 0x1244]
jg 0x45d9e0
mov dword [ebp - 0x124c], 1
jmp 0x45d9e7
and dword [ebp - 0x124c], 0
mov eax, dword [ebp - 0x124c]
mov dword [ebp - 0x23bc], eax
jmp 0x45d94f
imul eax, dword [ebp - 0x4c], 0xdfe3b8c1
mov dword [ebp - 0x26d0], eax
jmp 0x45d5fc
jmp 0x45d5c2
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x108], 3
mov dword [ebp - 0x5c4], 0xfffffffb
mov dword [ebp - 0x12b4], 1
mov dword [ebp - 0x2404], 1
mov dword [ebp - 0x8e4], 0
jmp 0x45da5a
mov eax, dword [ebp - 0x8e4]
inc eax
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x8e4], 1
jge 0x45da76
mov eax, dword [ebp - 0x8e4]
mov dword [ebp + eax*4 - 0x23c4], 0xae055a24
jmp 0x45da4d
mov byte [ebp - 0x420], 0
movzx eax, byte [ebp - 0x420]
test eax, eax
je 0x45da90
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x5c4], 0x8e55
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x2c20], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x2f50], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x2c28], eax
cmp dword [ebp - 0x108], 0xfaeb
jle 0x45dad6
mov dword [ebp - 0x1254], 1
jmp 0x45dadd
and dword [ebp - 0x1254], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x1254], eax
je 0x45daf7
mov dword [ebp - 0x125c], 1
jmp 0x45dafe
and dword [ebp - 0x125c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x125c], eax
jg 0x45db18
mov dword [ebp - 0x1264], 1
jmp 0x45db1f
and dword [ebp - 0x1264], 0
cmp dword [ebp - 0x1264], 0xfffffff6
jg 0x45db34
mov dword [ebp - 0x126c], 1
jmp 0x45db3b
and dword [ebp - 0x126c], 0
mov eax, dword [ebp - 0x126c]
sub eax, 0xffff
cmp eax, 0xfa1
jle 0x45db54
cmp dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x108], eax
jle 0x45db6e
mov dword [ebp - 0x1274], 1
jmp 0x45db75
and dword [ebp - 0x1274], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x1274], eax
jle 0x45db8f
mov dword [ebp - 0x127c], 1
jmp 0x45db96
and dword [ebp - 0x127c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x127c], eax
jle 0x45dbb0
mov dword [ebp - 0x1284], 1
jmp 0x45dbb7
and dword [ebp - 0x1284], 0
cmp dword [ebp - 0x1284], 6
jl 0x45dbcc
mov dword [ebp - 0x128c], 1
jmp 0x45dbd3
and dword [ebp - 0x128c], 0
cmp dword [ebp - 0x128c], 0xc23cea2f
jne 0x45dbeb
mov dword [ebp - 0x1294], 1
jmp 0x45dbf2
and dword [ebp - 0x1294], 0
mov eax, dword [ebp - 0x1294]
add eax, 0xe141
cmp eax, 0xfffffffd
jb 0x45dc0e
mov dword [ebp - 0x129c], 1
jmp 0x45dc15
and dword [ebp - 0x129c], 0
mov eax, dword [ebp - 0x129c]
sub eax, dword [ebp - 0x108]
cmp eax, 0xd437f1bd
jne 0x45dc34
mov dword [ebp - 0x12a4], 1
jmp 0x45dc3b
and dword [ebp - 0x12a4], 0
push 4
pop eax
sub eax, dword [ebp - 0x12a4]
jne 0x45dc4f
mov eax, 0x3818
test eax, eax
je 0x45dc64
cmp dword [ebp - 0x5c4], 0
je 0x45dc64
mov dword [ebp - 0xa98], 1
jmp 0x45dc6b
and dword [ebp - 0xa98], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa98]
mov dword [ebp + eax - 0x23c4], ecx
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0xa98], eax
jg 0x45dc98
mov dword [ebp - 0x12ac], 1
jmp 0x45dc9f
and dword [ebp - 0x12ac], 0
mov eax, dword [ebp - 0x12ac]
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x12b4]
add eax, dword [ebp - 0x108]
mov dword [ebp - 0x2404], eax
mov dword [ebp - 0xaa8], 0xfffffffe
mov dword [ebp - 0x23d4], 0x7e12
mov dword [ebp - 0x9e4], 0
jmp 0x45dcea
cmp dword [ebp - 0x9e4], 3
jge 0x45dd06
xor ecx, ecx
call fcn.00426593
push eax
call fcn.004673e3
pop ecx
mov dword [ebp - 0x788], 0xffffffff
mov dword [ebp - 0x788], 0xfffffff6
jmp 0x4634a0
mov eax, dword [ebp - 0x788]
dec eax
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 0xffffffe2
jg 0x463520
mov dword [ebp - 0x62c], 0xaa9ac70c
mov dword [ebp - 0x2290], 0xbfc3938d
mov dword [ebp - 0x62c], 0
jmp 0x4634d6
mov eax, dword [ebp - 0x62c]
dec eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0xfffffffa
je 0x46351b
mov dword [ebp - 0x790], 1
mov dword [ebp - 0x790], 0
jmp 0x463502
mov eax, dword [ebp - 0x790]
dec eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0xffffffe3
jl 0x463519
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x2290], eax
jmp 0x4634f5
jmp 0x4634c9
jmp 0x463493
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x514], 0xfffffffe
mov dword [ebp - 0x120], 0xfffffff9
mov dword [ebp - 0x798], 0
jmp 0x463554
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 3
jge 0x463570
mov eax, dword [ebp - 0x798]
mov dword [ebp + eax*4 - 0xa28], 0xfffc
jmp 0x463547
mov dword [ebp - 0x24], 2
jmp 0x463580
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x463750
mov dword [ebp - 0x7a0], 0xe0cd
mov dword [ebp - 0x2298], 0xffffffff
mov dword [ebp - 0xcc0], 0x69cd17cd
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa28]
mov dword [ebp - 0x2a5c], eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x2a64], eax
mov eax, dword [ebp - 0x7a0]
cmp dword [ebp - 0x7a0], eax
je 0x4635de
mov dword [ebp - 0xc80], 1
jmp 0x4635e5
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x7a0]
cmp dword [ebp - 0xc80], eax
jne 0x4635ff
mov dword [ebp - 0xc88], 1
jmp 0x463606
and dword [ebp - 0xc88], 0
cmp dword [ebp - 0xc88], 3
jg 0x46361b
mov dword [ebp - 0xc90], 1
jmp 0x463622
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc90]
add ecx, 0x2c51
cmp dword [ebp + eax*4 - 0xa28], ecx
jg 0x463653
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xa28], 0
je 0x463653
mov dword [ebp - 0xc98], 1
jmp 0x46365a
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xc98], eax
jg 0x463671
mov dword [ebp - 0xca0], 1
jmp 0x463678
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x2298]
cmp dword [ebp - 0xca0], eax
jg 0x463692
mov dword [ebp - 0xca8], 1
jmp 0x463699
and dword [ebp - 0xca8], 0
cmp dword [ebp - 0xca8], 0xb2f6
je 0x4636b1
mov dword [ebp - 0x22a0], 1
jmp 0x4636b8
and dword [ebp - 0x22a0], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa28]
mov dword [ebp - 0x2a6c], eax
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x4636e8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa28], 0
jne 0x4636e8
and dword [ebp - 0xcb0], 0
jmp 0x4636f2
mov dword [ebp - 0xcb0], 1
cmp dword [ebp - 0xcb0], 0
jne 0x463707
mov dword [ebp - 0xcb8], 1
jmp 0x46370e
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0xcb8]
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa28]
cmp dword [ebp - 0xcc0], eax
jl 0x463738
mov dword [ebp - 0xcc8], 1
jmp 0x46373f
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x514], eax
jmp 0x463579
mov dword [ebp - 0x514], 0xc2a91181
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x463840
cmp dword [ebp - 0x24], 0
jne 0x463782
cmp dword [ebp - 0x24], 0
jne 0x463782
and dword [ebp - 0xcd0], 0
jmp 0x46378c
mov dword [ebp - 0xcd0], 1
mov eax, dword [ebp - 0x514]
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0xcd0]
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0xa28]
lea ecx, [ecx + edx + 0x1684]
add eax, ecx
je 0x4637c9
mov eax, 0x5f8a4198
test eax, eax
je 0x4637c9
mov dword [ebp - 0x22a8], 1
jmp 0x4637d0
and dword [ebp - 0x22a8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa28]
mov dword [ebp - 0x2a74], eax
mov eax, dword [ebp - 0x514]
cmp dword [ebp - 0x24], eax
jle 0x4637f9
mov dword [ebp - 0xcd8], 1
jmp 0x463800
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 0x8d34108f
je 0x463818
mov dword [ebp - 0xce0], 1
jmp 0x46381f
and dword [ebp - 0xce0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa28]
cmp dword [ebp - 0xce0], eax
jg 0x463840
cmp dword [ebp - 0x120], 0
je 0x463a78
mov dword [ebp - 0xd00], 0xffffffff
mov dword [ebp - 0x18c], 0
jmp 0x463863
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x46387f
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0xb58], 0xd90c37c5
jmp 0x463856
mov dword [ebp - 0x18c], 0
jmp 0x463898
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x4638b4
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x27d8], 0
jmp 0x46388b
mov dword [ebp - 0x120], 0x8cb0b9d6
mov dword [ebp - 0x120], 2
jmp 0x4638d7
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x463a76
mov dword [ebp - 0xcf0], 0x89f82a41
mov dword [ebp - 0x22c0], 0x4ddaf14
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0xa28]
mov dword [ebp - 0x22b0], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xb58], 0
mov dword [ebp - 0x22b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb58]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb58], eax
mov eax, dword [ebp - 0x22b0]
cmp eax, dword [ebp - 0x22b8]
jg 0x463954
mov dword [ebp - 0xce8], 1
jmp 0x46395b
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xce8]
neg eax
jne 0x463a1c
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0xa28]
mov ecx, dword [ebp - 0x120]
sub eax, dword [ebp + ecx*4 - 0xa28]
cmp dword [ebp - 0xcf0], eax
jl 0x4639a3
mov dword [ebp - 0xcf8], 1
jmp 0x4639aa
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xd00], eax
je 0x4639cd
mov dword [ebp - 0xd08], 1
jmp 0x4639d4
and dword [ebp - 0xd08], 0
cmp dword [ebp - 0xd08], 6
jne 0x4639e9
mov dword [ebp - 0xd10], 1
jmp 0x4639f0
and dword [ebp - 0xd10], 0
cmp dword [ebp - 0xd10], 9
jle 0x463a05
mov dword [ebp - 0xd18], 1
jmp 0x463a0c
and dword [ebp - 0xd18], 0
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x24], 0xf33
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0xa28]
mov ecx, dword [ebp - 0x120]
add eax, dword [ebp + ecx*4 - 0xa28]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x27d8]
jge 0x463a51
mov dword [ebp - 0xd20], 1
jmp 0x463a58
and dword [ebp - 0xd20], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd20]
sub ecx, dword [ebp + eax - 0x27d8]
mov dword [ebp - 0x22c0], ecx
jmp 0x4638ca
jmp 0x463a9e
mov byte [ebp - 0x3f1], 0
movzx eax, byte [ebp - 0x3f1]
test eax, eax
je 0x463a9e
push 0
push 0x22e3
push 0
push 0x1138
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa7da0c
push 0xa7da0c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xb68], eax
mov dword [ebp - 0x2a7c], 0xac78
mov byte [ebp - 0x29e], 0
movzx eax, byte [ebp - 0x29e]
test eax, eax
je 0x463af7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov byte [ebp - 0x2a0], 0
movzx eax, byte [ebp - 0x2a0]
test eax, eax
je 0x463b29
push 0
push 0x67f
push 0x26b9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 5
push dword [ebp - 0xb68]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2a84], 0x92beaa32
mov byte [ebp - 0x2a2], 0
movzx eax, byte [ebp - 0x2a2]
test eax, eax
je 0x463b60
push 0x1af9
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov byte [ebp - 0x2a4], 0
movzx eax, byte [ebp - 0x2a4]
test eax, eax
je 0x463b7c
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
push dword [ebp - 0xb68]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 0x51c], 0x24039b64
mov dword [ebp - 0x2a8c], 0xe307b5ca
mov dword [ebp - 0xd48], 0
mov dword [ebp - 0x19c], 0x5a1fa147
mov dword [ebp - 0x22d8], 0x9e3cf957
mov dword [ebp - 0xd28], 0xfff6
mov dword [ebp - 0x194], 0
jmp 0x463bdd
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x463bf9
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x273c], 1
jmp 0x463bd0
mov dword [ebp - 0x194], 0
jmp 0x463c12
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x463c2e
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x301c], 1
jmp 0x463c05
mov dword [ebp - 0x51c], 0
jmp 0x463c47
mov eax, dword [ebp - 0x51c]
dec eax
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0xffffffe2
jl 0x463cc9
mov dword [ebp - 0x2d80], 2
mov dword [ebp - 0x2d7c], 2
mov dword [ebp - 0x2d78], 2
mov dword [ebp - 0x2d74], 2
mov dword [ebp - 0x2a94], 0xffffffff
mov dword [ebp - 0x7a8], 0
jmp 0x463c9b
mov eax, dword [ebp - 0x7a8]
inc eax
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 4
jge 0x463cb7
mov eax, dword [ebp - 0x7a8]
mov dword [ebp + eax*4 - 0x3520], 0
jmp 0x463c8e
mov eax, dword [ebp - 0xd28]
inc eax
mov dword [ebp - 0xd28], eax
jmp 0x463c3a
mov dword [ebp - 0x19c], 0
jmp 0x463ce2
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jg 0x463e7d
mov dword [ebp - 0x2a9c], 7
mov dword [ebp - 0xb60], 1
mov dword [ebp - 0x22d0], 1
mov dword [ebp - 0x7b0], 0
jmp 0x463d26
mov eax, dword [ebp - 0x7b0]
inc eax
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x7b0], 3
jge 0x463d42
mov eax, dword [ebp - 0x7b0]
mov dword [ebp + eax*4 - 0x3464], 0xa5e0b2f6
jmp 0x463d19
mov dword [ebp - 0x51c], 0x4eb300a9
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp + eax*4 - 0x301c]
cmp dword [ebp - 0x51c], eax
jne 0x463d6d
mov dword [ebp - 0xd30], 1
jmp 0x463d74
and dword [ebp - 0xd30], 0
cmp dword [ebp - 0xd30], 0xa911
jg 0x463d8c
mov dword [ebp - 0x22c8], 1
jmp 0x463d93
and dword [ebp - 0x22c8], 0
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0x2aa4], eax
mov eax, dword [ebp - 0xb60]
inc eax
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp + eax*4 - 0x273c]
mov dword [ebp - 0x2aac], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp + eax*4 - 0x273c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x273c]
je 0x463df0
cmp dword [ebp - 0x22d0], 0
je 0x463df0
mov dword [ebp - 0xd38], 1
jmp 0x463df7
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0xd38]
dec eax
cmp eax, 0xe3f0
jge 0x463e11
mov dword [ebp - 0xd40], 1
jmp 0x463e18
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0xd48]
sub ecx, dword [ebp + eax*4 - 0x273c]
mov dword [ebp - 0xd50], ecx
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0xd50]
mov dword [ebp + eax*4 - 0x301c], ecx
cmp dword [ebp - 0xd50], 0
jne 0x463e65
mov dword [ebp - 0xd58], 1
jmp 0x463e6c
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0x22d8], eax
jmp 0x463cd5
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp - 0x22e0], eax
lea eax, [ebp - 0x22e0]
push eax
push fcn.0044cae8
lea ecx, [ebp - 0x2780]
call fcn.0046581a
mov dword [ebp - 0x38], 0xbe8e56f9
mov dword [ebp - 0x1a4], 0
jmp 0x463ebe
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x463eda
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xec], 0x6bdde0bc
jmp 0x463eb1
mov dword [ebp - 0x1a4], 0
jmp 0x463ef3
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x463f0f
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x2310], 0
jmp 0x463ee6
mov dword [ebp - 0x38], 0
jmp 0x463f1f
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x464153
mov dword [ebp - 0x3f0], 5
mov dword [ebp - 0xd78], 0xd8c65816
mov dword [ebp - 0x2308], 0xfffffffd
mov dword [ebp - 0x3f0], 0
jmp 0x463f60
mov eax, dword [ebp - 0x3f0]
dec eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jl 0x46414e
mov dword [ebp - 0x22e8], 0xffffffff
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x2ab4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0x2abc], eax
mov eax, dword [ebp - 0x22e8]
mov dword [ebp - 0x2ac4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2acc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
jne 0x463fcf
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x463fcf
and dword [ebp - 0x22f0], 0
jmp 0x463fd9
mov dword [ebp - 0x22f0], 1
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x2ad4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [ebp - 0x3f0]
imul ecx, ecx, 0x2ef7
cmp dword [ebp + eax - 0xec], ecx
jle 0x464016
mov dword [ebp - 0xd60], 1
jmp 0x46401d
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0xd78]
cmp dword [ebp - 0xd60], eax
jg 0x464037
mov dword [ebp - 0x22f8], 1
jmp 0x46403e
and dword [ebp - 0x22f8], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x2adc], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0xec], 0
jg 0x464063
mov dword [ebp - 0xd68], 1
jmp 0x46406a
and dword [ebp - 0xd68], 0
cmp dword [ebp - 0xd68], 0xfa8f90a3
jb 0x464082
mov dword [ebp - 0xd70], 1
jmp 0x464089
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, dword [ebp - 0xd70]
je 0x4640a7
mov dword [ebp - 0x2300], 1
jmp 0x4640ae
and dword [ebp - 0x2300], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x2ae4], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0xec], 3
jbe 0x4640d7
mov dword [ebp - 0xd80], 1
jmp 0x4640de
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0xd78]
cmp dword [ebp - 0xd80], eax
jge 0x4640f8
mov dword [ebp - 0xd88], 1
jmp 0x4640ff
and dword [ebp - 0xd88], 0
cmp dword [ebp - 0xd88], 0x456b8642
jne 0x464117
mov dword [ebp - 0xd90], 1
jmp 0x46411e
and dword [ebp - 0xd90], 0
cmp dword [ebp - 0xd90], 0xda19
jne 0x464136
mov dword [ebp - 0xd98], 1
jmp 0x46413d
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0x2308], eax
jmp 0x463f53
jmp 0x463f18
mov dword [ebp - 0x38], 0
jmp 0x464163
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x4641dc
mov dword [ebp - 0xdb0], 0x95866b38
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp + ecx*4 - 0xec]
cmp dword [ebp + eax*4 - 0xec], ecx
je 0x464195
mov dword [ebp - 0xda0], 1
jmp 0x46419c
and dword [ebp - 0xda0], 0
cmp dword [ebp - 0xda0], 0xd482
je 0x4641b4
mov dword [ebp - 0xda8], 1
jmp 0x4641bb
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0xdb0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdb0]
mov dword [ebp + eax - 0x2310], ecx
jmp 0x46415c
push 0
push 0
push 0
lea eax, [ebp - 0x354c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x4647ef
push 0
push 0
push 0x10
push dword [ebp - 0xb68]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0xdd8], 0x278c007c
mov dword [ebp - 0x3f8], 0x1543f36f
mov dword [ebp - 0xe20], 7
mov dword [ebp - 0xe18], 0xf34c9333
mov dword [ebp - 0x1ac], 0
jmp 0x46424a
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x464266
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x230], 1
jmp 0x46423d
mov dword [ebp - 0x1ac], 0
jmp 0x46427f
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x46429b
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x2620], 0x3d2f5512
jmp 0x464272
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230]
mov dword [ebp - 0x2aec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0
je 0x4642ea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0
je 0x4642ea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0
je 0x4642ea
mov dword [ebp - 0xdb8], 1
jmp 0x4642f1
and dword [ebp - 0xdb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0xdb8], eax
jge 0x464312
mov dword [ebp - 0xdc0], 1
jmp 0x464319
and dword [ebp - 0xdc0], 0
cmp dword [ebp - 0xdc0], 0xa10dd664
jbe 0x46433e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0
jne 0x46433e
and dword [ebp - 0xdc8], 0
jmp 0x464348
mov dword [ebp - 0xdc8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230]
imul eax, dword [ebp - 0xdc8]
cmp eax, 3
jne 0x46436d
mov dword [ebp - 0xdd0], 1
jmp 0x464374
and dword [ebp - 0xdd0], 0
mov dword [ebp - 0xdd8], 0xdcdf
xor eax, eax
inc eax
sub eax, dword [ebp - 0xdd0]
mov dword [ebp - 0xde0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xde0]
mov dword [ebp + eax - 0x230], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0xdd8]
imul edx, dword [ebp - 0xde0]
sub edx, dword [ebp + ecx - 0x2620]
add edx, dword [ebp + eax - 0x2620]
mov dword [ebp - 0xde8], edx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xde8]
mov dword [ebp + eax - 0x2620], ecx
mov eax, dword [ebp - 0x3f8]
imul eax, dword [ebp - 0xde8]
sub eax, dword [ebp - 0x3f8]
cmp eax, dword [ebp - 0x3f8]
jg 0x464407
mov dword [ebp - 0xdf0], 1
jmp 0x46440e
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0xdf0], eax
jl 0x464428
mov dword [ebp - 0xdf8], 1
jmp 0x46442f
and dword [ebp - 0xdf8], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0xdf8], eax
jne 0x464449
mov dword [ebp - 0xe00], 1
jmp 0x464450
and dword [ebp - 0xe00], 0
cmp dword [ebp - 0xe00], 0xfffffffb
jl 0x464465
mov dword [ebp - 0xe08], 1
jmp 0x46446c
and dword [ebp - 0xe08], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x2af4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2620]
mov dword [ebp - 0x3f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe20]
cmp dword [ebp + eax - 0x2620], ecx
jg 0x4644ac
mov dword [ebp - 0xe10], 1
jmp 0x4644b3
and dword [ebp - 0xe10], 0
mov eax, dword [ebp - 0xe10]
neg eax
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0xe20], eax
lea ecx, [ebp - 0x2780]
call fcn.0044ca83
mov dword [ebp - 0x408], 0xf57a7c2
mov dword [ebp - 0xe40], 0xfffffffe
mov dword [ebp - 0x1b4], 0
jmp 0x464505
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x464521
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x2630], 0x77862fd4
jmp 0x4644f8
mov dword [ebp - 0x1b4], 0
jmp 0x46453a
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x464556
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x20b8], 0xbe26b5cf
jmp 0x46452d
mov dword [ebp - 0x408], 2
jmp 0x46456f
mov eax, dword [ebp - 0x408]
dec eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
jl 0x464704
mov dword [ebp - 0x400], 0xffffffff
mov dword [ebp - 0x2afc], 0xffffffff
mov dword [ebp - 0x400], 2
jmp 0x4645a9
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
jl 0x4646ff
mov dword [ebp - 0x524], 4
mov dword [ebp - 0x2318], 0xc27f
mov dword [ebp - 0x524], 0
jmp 0x4645e3
mov eax, dword [ebp - 0x524]
inc eax
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 2
jg 0x4646ee
mov dword [ebp - 0x634], 0x9ba095a9
mov dword [ebp - 0x634], 2
jmp 0x464613
mov eax, dword [ebp - 0x634]
dec eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 0
jl 0x464652
mov byte [ebp - 0x2a6], 0
movzx eax, byte [ebp - 0x2a6]
test eax, eax
je 0x464636
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x524]
mov ecx, dword [ebp - 0x408]
mov eax, dword [ebp + eax*4 - 0x2630]
mov dword [ebp + ecx*4 - 0x2630], eax
jmp 0x464606
mov eax, dword [ebp - 0x400]
cmp dword [ebp + eax*4 - 0x2630], 1
jl 0x46466e
mov dword [ebp - 0xe28], 1
jmp 0x464675
and dword [ebp - 0xe28], 0
cmp dword [ebp - 0xe28], 0x8009
jne 0x46468d
mov dword [ebp - 0xe30], 1
jmp 0x464694
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0x634]
imul eax, dword [ebp - 0xe30]
test eax, eax
jb 0x4646ba
cmp dword [ebp - 0x2318], 0
je 0x4646ba
mov dword [ebp - 0xe38], 1
jmp 0x4646c1
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0x400]
mov eax, dword [ebp + eax*4 - 0x2630]
neg eax
imul eax, dword [ebp - 0xe38]
xor ecx, ecx
inc ecx
sub ecx, eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x20b8], ecx
jmp 0x4645d6
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x524], eax
jmp 0x46459c
jmp 0x464562
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2630]
mov dword [ebp - 0x2b04], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20b8]
mov dword [ebp - 0xe40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20b8]
cmp dword [ebp - 0xe40], eax
jge 0x46474b
mov dword [ebp - 0xe48], 1
jmp 0x464752
and dword [ebp - 0xe48], 0
mov eax, dword [ebp - 0xe48]
neg eax
cmp eax, 0xb5fb
jne 0x46476d
mov dword [ebp - 0xe50], 1
jmp 0x464774
and dword [ebp - 0xe50], 0
mov dword [ebp - 0x408], 0x93d7f28
mov eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0xe50]
jle 0x464798
mov dword [ebp - 0xe58], 1
jmp 0x46479f
and dword [ebp - 0xe58], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20b8]
imul eax, dword [ebp - 0xe58]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x20b8]
jne 0x4647ce
mov dword [ebp - 0xe60], 1
jmp 0x4647d5
and dword [ebp - 0xe60], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe60]
mov dword [ebp + eax - 0x20b8], ecx
jmp 0x4647ef
mov dword [ebp - 0x7c0], 0x6e52d8cb
mov dword [ebp - 0xe70], 0xffffffff
mov dword [ebp - 0xb70], 0x47c2c9eb
mov dword [ebp - 0x2320], 0
mov dword [ebp - 0xe80], 1
mov dword [ebp - 0xe90], 0x3b16aac8
mov dword [ebp - 0x2328], 0xa2a0c0e0
mov dword [ebp - 0x7b8], 0
jmp 0x46484e
mov eax, dword [ebp - 0x7b8]
inc eax
mov dword [ebp - 0x7b8], eax
cmp dword [ebp - 0x7b8], 1
jge 0x46486a
mov eax, dword [ebp - 0x7b8]
mov dword [ebp + eax*4 - 0x7c8], 0x75ee
jmp 0x464841
mov eax, dword [ebp - 0xb70]
dec eax
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0xb70]
cmp dword [ebp - 0x7c0], eax
jge 0x464891
mov dword [ebp - 0xe68], 1
jmp 0x464898
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0xe68]
mov dword [ebp - 0xe70], eax
cmp dword [ebp - 0xe70], 0
je 0x4648fd
mov eax, dword [ebp - 0x2320]
mov dword [ebp - 0x2b0c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c8]
mov dword [ebp - 0x2b14], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c8]
cmp dword [ebp - 0xe80], eax
jl 0x4648fd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c8], 0
je 0x4648fd
mov dword [ebp - 0xe78], 1
jmp 0x464904
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0x7c0]
cmp eax, dword [ebp - 0xe78]
jl 0x464927
cmp dword [ebp - 0xe80], 0
je 0x464927
mov dword [ebp - 0xe88], 1
jmp 0x46492e
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0xe88]
mov dword [ebp - 0xe90], eax
mov eax, dword [ebp - 0xe90]
cmp dword [ebp - 0x7c0], eax
jge 0x464954
mov dword [ebp - 0xe98], 1
jmp 0x46495b
and dword [ebp - 0xe98], 0
cmp dword [ebp - 0xe98], 1
jae 0x464970
mov dword [ebp - 0xea0], 1
jmp 0x464977
and dword [ebp - 0xea0], 0
mov eax, dword [ebp - 0x7c0]
imul eax, dword [ebp - 0xea0]
cmp eax, 0xffffffff
je 0x464995
mov dword [ebp - 0xea8], 1
jmp 0x46499c
and dword [ebp - 0xea8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c8]
imul eax, dword [ebp - 0xea8]
mov dword [ebp - 0x2328], eax
mov byte [ebp - 0x2a8], 0
movzx eax, byte [ebp - 0x2a8]
test eax, eax
je 0x4649ce
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
lea ecx, [ebp - 0x2780]
call fcn.0044ca78
jmp 0x4653e2
pop edi
pop esi
mov esp, ebp
pop ebp
ret