Function at 0x40129e
Capabilities:
Get disk information
Get file size
Identify system language via api
Query service status
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2814
call fcn.004a9330
push esi
push edi
push 3
lea ecx, [ebp - 0x670]
call fcn.00413c51
mov dword [ebp - 0x16a8], 0
mov dword [ebp - 0xd4], 0
jmp 0x4012dd
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x4012ff
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov dword [eax], 0xf70ad6f2
jmp 0x4012d0
mov dword [ebp - 0xd4], 0
jmp 0x401318
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x401334
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x388], 0
jmp 0x40130b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x388], 2
jmp 0x401362
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x388]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x388], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x388], 0
jl 0x4015a1
mov dword [ebp - 0x148], 0xfb770a77
mov dword [ebp - 0x199c], 2
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x388]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
cmp dword [eax], 0
je 0x4013ac
jmp 0x4015a1
mov dword [ebp - 0x148], 0
jmp 0x4013c5
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jg 0x40159c
push dword [ebp - 0x148]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x388]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0x148]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x388]
cmp dword [eax], ecx
jl 0x40142f
mov dword [ebp - 0x106c], 1
jmp 0x401436
and dword [ebp - 0x106c], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x388]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov ecx, dword [ebp - 0x106c]
cmp ecx, dword [eax]
jne 0x401464
mov dword [ebp - 0x1890], 1
jmp 0x40146b
and dword [ebp - 0x1890], 0
push dword [ebp - 0x148]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x388]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
cmp dword [eax], 7
jbe 0x4014a5
mov dword [ebp - 0x1688], 1
jmp 0x4014ac
and dword [ebp - 0x1688], 0
push dword [ebp - 0x148]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1688]
add ecx, dword [eax]
imul eax, ecx, 5
test eax, eax
jne 0x4014de
cmp dword [ebp - 0x148], 0
jne 0x4014de
and dword [ebp - 0x1690], 0
jmp 0x4014e8
mov dword [ebp - 0x1690], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x388]
cmp dword [ebp - 0x1690], eax
jg 0x401509
mov dword [ebp - 0x1698], 1
jmp 0x401510
and dword [ebp - 0x1698], 0
push 2
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1698]
jg 0x401533
mov dword [ebp - 0x16a0], 1
jmp 0x40153a
and dword [ebp - 0x16a0], 0
push 0
lea ecx, [ebp - 0x670]
call fcn.00413d3f
mov eax, dword [eax]
imul eax, dword [ebp - 0x16a0]
mov dword [ebp - 0x16a8], eax
mov esi, dword [ebp - 0x16a8]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x388]
lea ecx, [ebp - 0x670]
call fcn.00413d3f
cmp esi, dword [eax]
je 0x401584
mov dword [ebp - 0x16c8], 1
jmp 0x40158b
and dword [ebp - 0x16c8], 0
mov eax, dword [ebp - 0x16c8]
mov dword [ebp - 0x199c], eax
jmp 0x4013b8
jmp 0x401347
mov byte [ebp - 0x255], 0
movzx eax, byte [ebp - 0x255]
test eax, eax
je 0x4015bd
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x670]
call fcn.00413d23
push 3
lea ecx, [ebp - 0x1b48]
call fcn.00413c51
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0x16e0], 0x6753f3ac
mov dword [ebp - 0x20d0], 0x64ce34aa
mov dword [ebp - 0x20cc], 0x64ce34aa
mov dword [ebp - 0x20c8], 0x64ce34aa
mov dword [ebp - 0x20c4], 0x64ce34aa
mov dword [ebp - 0x3a8], 0
jmp 0x40162a
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 3
jge 0x40164c
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x1b48]
call fcn.00413d3f
mov dword [eax], 0xb9b55bb2
jmp 0x40161d
mov dword [ebp - 0xb4], 2
jmp 0x401665
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x40181e
mov dword [ebp - 0x350], 0xf0bc5021
mov dword [ebp - 0x1718], 9
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2148], eax
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0xb4], eax
jge 0x4016ac
mov dword [ebp - 0x19a4], 1
jmp 0x4016b3
and dword [ebp - 0x19a4], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2658], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jg 0x4016d9
mov dword [ebp - 0x16d0], 1
jmp 0x4016e0
and dword [ebp - 0x16d0], 0
cmp dword [ebp - 0x16d0], 0
jle 0x4016f5
mov dword [ebp - 0x16d8], 1
jmp 0x4016fc
and dword [ebp - 0x16d8], 0
mov eax, dword [ebp - 0x16d8]
mov dword [ebp - 0x16e0], eax
mov eax, dword [ebp - 0x16e0]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jg 0x40172d
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x40172d
and dword [ebp - 0x16e8], 0
jmp 0x401737
mov dword [ebp - 0x16e8], 1
cmp dword [ebp - 0x16e8], 0
jle 0x40174c
mov dword [ebp - 0x16f0], 1
jmp 0x401753
and dword [ebp - 0x16f0], 0
cmp dword [ebp - 0x16f0], 0xb50f6b34
jae 0x40176b
mov dword [ebp - 0x1700], 1
jmp 0x401772
and dword [ebp - 0x1700], 0
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1b48]
call fcn.00413d3f
mov dword [ebp - 0x16f8], eax
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1b48]
call fcn.00413d3f
mov ecx, dword [ebp - 0x16f8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x16f8]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1700]
jl 0x4017c0
mov dword [ebp - 0x1708], 1
jmp 0x4017c7
and dword [ebp - 0x1708], 0
mov eax, dword [ebp - 0x1718]
cmp dword [ebp - 0x1708], eax
jl 0x4017e1
mov dword [ebp - 0x1710], 1
jmp 0x4017e8
and dword [ebp - 0x1710], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20d0]
add eax, dword [ebp - 0x1710]
mov dword [ebp - 0x1718], eax
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1b48]
call fcn.00413d3f
cmp dword [eax], 0
je 0x401819
jmp 0x40181e
jmp 0x401658
lea ecx, [ebp - 0x1b48]
call fcn.00413d23
push 3
lea ecx, [ebp - 0x67c]
call fcn.00413c51
mov dword [ebp - 0x20], 0x6e54ee87
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x50c], 0xffffffff
mov dword [ebp - 0x19c4], 1
mov dword [ebp - 0x19dc], 4
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
je 0x401876
mov dword [ebp - 0x172c], 1
jmp 0x40187d
and dword [ebp - 0x172c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x172c]
jle 0x401894
mov dword [ebp - 0x19ac], 1
jmp 0x40189b
and dword [ebp - 0x19ac], 0
mov dword [ebp - 0x20], 0x4d1878ab
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], eax
jle 0x4018b6
mov dword [ebp - 0x1734], 1
jmp 0x4018bd
and dword [ebp - 0x1734], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1734], eax
jne 0x4018d4
mov dword [ebp - 0x19b4], 1
jmp 0x4018db
and dword [ebp - 0x19b4], 0
cmp dword [ebp - 0x20], 0xf2b29949
jne 0x4018f0
mov dword [ebp - 0x173c], 1
jmp 0x4018f7
and dword [ebp - 0x173c], 0
cmp dword [ebp - 0x173c], 0x7b1c2a2c
jne 0x401912
cmp dword [ebp - 0x20], 0
jne 0x401912
and dword [ebp - 0x8a0], 0
jmp 0x40191c
mov dword [ebp - 0x8a0], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x8a0], eax
jle 0x401933
mov dword [ebp - 0x1240], 1
jmp 0x40193a
and dword [ebp - 0x1240], 0
mov eax, dword [ebp - 0x1240]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x20], 0
jne 0x401955
mov dword [ebp - 0x8c8], 1
jmp 0x40195c
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], eax
jne 0x401970
mov dword [ebp - 0x19bc], 1
jmp 0x401977
and dword [ebp - 0x19bc], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x22a0], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2504], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x22a8], eax
cmp dword [ebp - 0x24], 0x322e
jge 0x4019b9
cmp dword [ebp - 0x20], 0
je 0x4019b9
mov dword [ebp - 0x8a8], 1
jmp 0x4019c0
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0
jne 0x4019d5
mov dword [ebp - 0x1248], 1
jmp 0x4019dc
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1248], eax
jne 0x4019f3
mov dword [ebp - 0x8b0], 1
jmp 0x4019fa
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x19c4], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x50c], eax
jg 0x401a1d
mov dword [ebp - 0x1250], 1
jmp 0x401a24
and dword [ebp - 0x1250], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1250], eax
jle 0x401a3b
mov dword [ebp - 0x8b8], 1
jmp 0x401a42
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x8b8], eax
jle 0x401a59
mov dword [ebp - 0x1258], 1
jmp 0x401a60
and dword [ebp - 0x1258], 0
mov eax, dword [ebp - 0x1258]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x401a7a
mov dword [ebp - 0x8c0], 1
jmp 0x401a81
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x8c0], eax
jl 0x401a98
mov dword [ebp - 0x1260], 1
jmp 0x401a9f
and dword [ebp - 0x1260], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1260]
lea eax, [ecx + eax + 0x60e7]
cmp eax, 0xfffb
jae 0x401ac2
mov dword [ebp - 0x1268], 1
jmp 0x401ac9
and dword [ebp - 0x1268], 0
mov eax, dword [ebp - 0x8c8]
cmp eax, dword [ebp - 0x1268]
jne 0x401ae3
mov dword [ebp - 0x8d0], 1
jmp 0x401aea
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x8d0], eax
jle 0x401b01
mov dword [ebp - 0x1270], 1
jmp 0x401b08
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0x1270]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x401b95
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0x19cc], 0x33196add
cmp dword [ebp - 0x8d8], 0
je 0x401b55
mov dword [ebp - 0x19d4], 0x70f
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x19cc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x19d4], eax
jmp 0x401b87
mov dword [ebp - 0x20], 0
jmp 0x401b65
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe6
jge 0x401b87
mov byte [ebp - 0x1d3], 0
movzx eax, byte [ebp - 0x1d3]
test eax, eax
je 0x401b85
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x401b5e
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x19dc], eax
jmp 0x401be5
mov dword [ebp - 0x3b0], 0
jmp 0x401bae
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 2
jge 0x401bca
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x1d6c], 0x4f7bc72e
jmp 0x401ba1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d6c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1d6c], eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0x510], 0
jmp 0x401c08
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 1
jge 0x401c24
mov eax, dword [ebp - 0x510]
mov dword [ebp + eax*4 - 0x19e4], 0x13638ecf
jmp 0x401bfb
mov byte [ebp - 0x1d5], 0
movzx eax, byte [ebp - 0x1d5]
test eax, eax
je 0x401c4c
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x19e4], 0
mov dword [ebp - 0xdc], 0
jmp 0x401c76
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x401c98
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov dword [eax], 0xf70ad6f2
jmp 0x401c69
mov dword [ebp - 0xdc], 0
jmp 0x401cb1
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x401ccd
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x394], 0
jmp 0x401ca4
or dword [ebp - 0x1e44], 0xffffffff
or dword [ebp - 0x1e40], 0xffffffff
or dword [ebp - 0x1e3c], 0xffffffff
or dword [ebp - 0x1e38], 0xffffffff
lea ecx, [ebp - 0x6a5]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x1e34]
push eax
lea eax, [ebp - 0x1e44]
push eax
lea ecx, [ebp - 0x2788]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x81c]
call fcn.00413cfd
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x8e8], 0xfffffffb
mov dword [ebp - 0x1290], 0
mov dword [ebp - 0x12c8], 0x33d4965d
mov dword [ebp - 0x1a70], 0xfffffffc
mov dword [ebp - 0x3b8], 0
jmp 0x401d66
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 2
jge 0x401d82
mov eax, dword [ebp - 0x3b8]
mov dword [ebp + eax*4 - 0x19f8], 1
jmp 0x401d59
mov dword [ebp - 0x58], 3
jmp 0x401d92
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x40221f
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x1278], 0x318b4743
mov dword [ebp - 0x6c0], 0xd5f49dcb
mov dword [ebp - 0x5c], 0
jmp 0x401dc7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x40221a
mov dword [ebp - 0x318], 0x92d14b43
mov dword [ebp - 0x7e8], 0x92ad5889
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
cmp dword [eax], 0
je 0x401f75
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1278], eax
cmp dword [ebp - 0x1278], 0
jne 0x401e20
mov eax, 0x976b5a7d
test eax, eax
jne 0x401e20
and dword [ebp - 0x8e0], 0
jmp 0x401e2a
mov dword [ebp - 0x8e0], 1
cmp dword [ebp - 0x8e0], 0xae65c342
je 0x401e42
mov dword [ebp - 0x19ec], 1
jmp 0x401e49
and dword [ebp - 0x19ec], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1a58], eax
push dword [ebp - 0x58]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1a58]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
cmp dword [eax], 0
je 0x401e8d
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x401e8d
mov dword [ebp - 0x1a60], 1
jmp 0x401e94
and dword [ebp - 0x1a60], 0
cmp dword [ebp - 0x58], 0x60be6286
jne 0x401ea9
mov dword [ebp - 0x1280], 1
jmp 0x401eb0
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0x1280]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 2
jne 0x401edd
mov dword [ebp - 0x1288], 1
jmp 0x401ee4
and dword [ebp - 0x1288], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x1288]
sub eax, dword [ebp - 0x58]
neg eax
cmp eax, dword [ebp - 0x5c]
jl 0x401f04
mov dword [ebp - 0x8f0], 1
jmp 0x401f0b
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x1290], eax
cmp dword [ebp - 0x1290], 0
jne 0x401f32
mov eax, 0xa5c1
test eax, eax
jne 0x401f32
and dword [ebp - 0x8f8], 0
jmp 0x401f3c
mov dword [ebp - 0x8f8], 1
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x8f8]
imul eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x58]
cmp eax, 0x30906344
jl 0x401f75
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
cmp dword [eax], 0
je 0x401f75
mov dword [ebp - 0x1298], 1
jmp 0x401f7c
and dword [ebp - 0x1298], 0
cmp dword [ebp - 0x1298], 0
ja 0x401f91
mov dword [ebp - 0x900], 1
jmp 0x401f98
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x900], eax
jne 0x401faf
mov dword [ebp - 0x12a0], 1
jmp 0x401fb6
and dword [ebp - 0x12a0], 0
mov eax, dword [ebp - 0x12a0]
neg eax
jne 0x401fd2
mov eax, 0xfefa2e57
test eax, eax
jne 0x401fd2
and dword [ebp - 0x908], 0
jmp 0x401fdc
mov dword [ebp - 0x908], 1
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x12a8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x12a8]
mov dword [ebp + eax - 0x19f8], ecx
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x12a8], eax
jne 0x40201e
mov dword [ebp - 0x910], 1
jmp 0x402025
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
inc eax
jne 0x40203a
mov dword [ebp - 0x12b0], 1
jmp 0x402041
and dword [ebp - 0x12b0], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x12b0], eax
jg 0x402058
mov dword [ebp - 0x918], 1
jmp 0x40205f
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0x12c8], eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x6c0]
cmp dword [eax], ecx
je 0x40208f
mov dword [ebp - 0x12b8], 1
jmp 0x402096
and dword [ebp - 0x12b8], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x12b8], eax
jl 0x4020b0
mov dword [ebp - 0x920], 1
jmp 0x4020b7
and dword [ebp - 0x920], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x920]
cmp ecx, dword [eax]
jg 0x4020e1
cmp dword [ebp - 0x7e8], 0
jne 0x4020e1
and dword [ebp - 0x12c0], 0
jmp 0x4020eb
mov dword [ebp - 0x12c0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x19f8]
cmp dword [ebp - 0x12c0], eax
je 0x40210c
mov dword [ebp - 0x928], 1
jmp 0x402113
and dword [ebp - 0x928], 0
push dword [ebp - 0x58]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x928]
je 0x402137
mov dword [ebp - 0x1a68], 1
jmp 0x40213e
and dword [ebp - 0x1a68], 0
mov eax, dword [ebp - 0x12c8]
mov dword [ebp - 0x25d8], eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x7e8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x19f8]
cmp eax, 1
jb 0x402185
mov dword [ebp - 0x930], 1
jmp 0x40218c
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x930], 0
jne 0x4021a1
mov dword [ebp - 0x12d0], 1
jmp 0x4021a8
and dword [ebp - 0x12d0], 0
push 1
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x12d0]
add ecx, dword [eax]
cmp ecx, 0x26da
jne 0x4021d1
mov dword [ebp - 0x938], 1
jmp 0x4021d8
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x7e8]
add eax, dword [ebp - 0x938]
cmp eax, dword [ebp - 0x1a70]
je 0x4021f8
mov dword [ebp - 0x12d8], 1
jmp 0x4021ff
and dword [ebp - 0x12d8], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x81c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x12d8]
mov dword [eax], ecx
jmp 0x401dc0
jmp 0x401d8b
lea ecx, [ebp - 0x81c]
call fcn.00413d23
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x394], 2
jmp 0x402258
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x394]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x394], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x394], 0
jl 0x4034a3
mov dword [ebp - 0xec], 0xfb770a77
mov dword [ebp - 0x1f4], 1
mov dword [ebp - 0x6c8], 0x37ac
mov dword [ebp - 0x3c0], 0x51938d10
mov dword [ebp - 0x1f4], 0
jmp 0x4022ad
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xfffffff3
jg 0x402464
mov dword [ebp - 0x1fc], 0x8bb4aad9
mov dword [ebp - 0x5c0], 0xfffffffe
mov dword [ebp - 0x1a78], 0xffffffff
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x22b0], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x2514], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x22b8], eax
mov eax, 0x57f2e3e3
sub eax, dword [ebp - 0x1fc]
add eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x6c8]
jne 0x402339
mov dword [ebp - 0x940], 1
jmp 0x402340
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x940], eax
jne 0x402360
cmp dword [ebp - 0x1f4], 0
jne 0x402360
and dword [ebp - 0x12e0], 0
jmp 0x40236a
mov dword [ebp - 0x12e0], 1
mov eax, dword [ebp - 0x1a78]
add eax, dword [ebp - 0x12e0]
cmp eax, dword [ebp - 0x1fc]
jne 0x40238a
mov dword [ebp - 0x1a80], 1
jmp 0x402391
and dword [ebp - 0x1a80], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x2518], eax
mov eax, dword [ebp - 0x3c0]
dec eax
cmp eax, 3
je 0x4023b5
mov dword [ebp - 0x948], 1
jmp 0x4023bc
and dword [ebp - 0x948], 0
imul eax, dword [ebp - 0x948], 0x95b
cmp eax, 1
jge 0x4023d7
mov dword [ebp - 0x1a88], 1
jmp 0x4023de
and dword [ebp - 0x1a88], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x22c0], eax
cmp dword [ebp - 0x1fc], 0
je 0x402408
cmp dword [ebp - 0x5c0], 0
je 0x402408
mov dword [ebp - 0x12e8], 1
jmp 0x40240f
and dword [ebp - 0x12e8], 0
cmp dword [ebp - 0x12e8], 7
jg 0x402424
mov dword [ebp - 0x950], 1
jmp 0x40242b
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x3c0]
imul eax, dword [ebp - 0x950]
cmp eax, dword [ebp - 0x1fc]
jge 0x40244c
mov dword [ebp - 0x12f0], 1
jmp 0x402453
and dword [ebp - 0x12f0], 0
mov eax, dword [ebp - 0x12f0]
mov dword [ebp - 0x3c0], eax
jmp 0x4022a0
mov dword [ebp - 0x1ae0], 2
push 3
lea ecx, [ebp - 0x2360]
call fcn.00413c51
mov dword [ebp - 0x2520], 0x7a876e6b
mov dword [ebp - 0x22c8], 0x36444696
mov dword [ebp - 0x268c], 7
mov dword [ebp - 0x22d0], 0
mov dword [ebp - 0x2524], 1
mov dword [ebp - 0x22d8], 0x813f1a07
mov dword [ebp - 0x25e0], 5
mov dword [ebp - 0x2558], 0xfffffffc
mov dword [ebp - 0x2334], 0x7e08a110
mov dword [ebp - 0x266c], 0xffffffff
mov dword [ebp - 0x1dac], 7
mov dword [ebp - 0x1da8], 7
mov dword [ebp - 0x1da4], 7
mov dword [ebp - 0x1da0], 7
mov dword [ebp - 0x160], 0
jmp 0x402520
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x402542
push dword [ebp - 0x160]
lea ecx, [ebp - 0x2360]
call fcn.00413d3f
mov dword [eax], 0x9ff6
jmp 0x402513
mov dword [ebp - 0x160], 0
jmp 0x40255b
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x402577
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x27b4], 6
jmp 0x40254e
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1dac]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1dac], eax
lea ecx, [ebp - 0x2360]
call fcn.00413d23
mov dword [ebp - 0x10], 0x860b4ffb
mov dword [ebp - 0x1338], 0x4f27d270
mov dword [ebp - 0x60c], 0x4a41637c
mov dword [ebp - 0x204], 0xfffffff8
mov dword [ebp - 0x1a98], 0xc655ef1c
mov dword [ebp - 0x518], 0
jmp 0x4025e5
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 3
jge 0x402601
mov eax, dword [ebp - 0x518]
mov dword [ebp + eax*4 - 0x888], 1
jmp 0x4025d8
mov dword [ebp - 0x10], 2
jmp 0x402611
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x4026f4
mov dword [ebp - 0x1a90], 0x3b28
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x888]
mov dword [ebp - 0x233c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x888], 0
jne 0x402664
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x888]
mov dword [ebp - 0x2560], eax
cmp dword [ebp - 0x1338], 0
jne 0x402664
and dword [ebp - 0x958], 0
jmp 0x40266e
mov dword [ebp - 0x958], 1
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp + eax*4 - 0x888], 0xffffffff
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 0
je 0x402695
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x888], 0
jne 0x4026ab
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x888], 0
jne 0x4026ab
and dword [ebp - 0x12f8], 0
jmp 0x4026b5
mov dword [ebp - 0x12f8], 1
mov eax, dword [ebp - 0x958]
cmp eax, dword [ebp - 0x12f8]
jg 0x4026cf
mov dword [ebp - 0x960], 1
jmp 0x4026d6
and dword [ebp - 0x960], 0
mov eax, dword [ebp - 0x960]
sub eax, dword [ebp - 0x1a90]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x888], eax
jmp 0x40260a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x888]
mov dword [ebp - 0x2344], eax
cmp dword [ebp - 0x60c], 0
jne 0x4027d2
cmp dword [ebp - 0x204], 0
je 0x402724
cmp dword [ebp - 0x10], 0xb6b
or eax, 0xffffffff
cmp eax, 0xf574
jg 0x40273a
mov dword [ebp - 0x1300], 1
jmp 0x402741
and dword [ebp - 0x1300], 0
cmp dword [ebp - 0x1300], 0x10a1
jge 0x402759
mov dword [ebp - 0x968], 1
jmp 0x402760
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
sub eax, 0x18f7411a
jne 0x40277f
cmp dword [ebp - 0x204], 0
jne 0x40277f
and dword [ebp - 0x1308], 0
jmp 0x402789
mov dword [ebp - 0x1308], 1
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x1308], eax
jle 0x4027a3
mov dword [ebp - 0x970], 1
jmp 0x4027aa
and dword [ebp - 0x970], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x970]
mov dword [ebp + eax - 0x888], ecx
mov eax, 0x44ed25e4
cmp eax, 0x6ed55c5
je 0x4027d2
and dword [ebp - 0x1310], 0
jmp 0x4027dc
mov dword [ebp - 0x1310], 1
cmp dword [ebp - 0x1310], 0x6fbc
jle 0x4027f4
mov dword [ebp - 0x978], 1
jmp 0x4027fb
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x204], eax
imul eax, dword [ebp - 0x204], 0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x402a4d
mov dword [ebp - 0x9a8], 0xfffffffe
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x3c8], 0
jmp 0x402848
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 2
jge 0x402864
mov eax, dword [ebp - 0x3c8]
mov dword [ebp + eax*4 - 0x22e4], 0xdd14a140
jmp 0x40283b
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x204], eax
jl 0x40287e
mov dword [ebp - 0x1318], 1
jmp 0x402885
and dword [ebp - 0x1318], 0
cmp dword [ebp - 0x1318], 0xaa7fcf62
jb 0x40289d
mov dword [ebp - 0x980], 1
jmp 0x4028a4
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x980]
jl 0x4028bb
mov dword [ebp - 0x1320], 1
jmp 0x4028c2
and dword [ebp - 0x1320], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x1320], eax
jg 0x4028dc
mov dword [ebp - 0x988], 1
jmp 0x4028e3
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x988]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x278]
je 0x402900
mov dword [ebp - 0x1328], 1
jmp 0x402907
and dword [ebp - 0x1328], 0
cmp dword [ebp - 0x1328], 0xfd6f6066
jb 0x40291f
mov dword [ebp - 0x990], 1
jmp 0x402926
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x1a98]
cmp dword [ebp - 0x990], eax
jle 0x402940
mov dword [ebp - 0x1330], 1
jmp 0x402947
and dword [ebp - 0x1330], 0
cmp dword [ebp - 0x1330], 3
je 0x40295c
mov dword [ebp - 0x998], 1
jmp 0x402963
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x9a8]
mov ecx, dword [ebp - 0x998]
lea eax, [ecx + eax + 0x4378215c]
cmp eax, dword [ebp - 0x278]
je 0x40298a
mov dword [ebp - 0x9a0], 1
jmp 0x402991
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x1338]
cmp dword [ebp - 0x9a0], eax
jg 0x4029ab
mov dword [ebp - 0x1340], 1
jmp 0x4029b2
and dword [ebp - 0x1340], 0
mov eax, dword [ebp - 0x1340]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xc9e48991
jb 0x4029d9
cmp dword [ebp - 0x204], 0
je 0x4029d9
mov dword [ebp - 0x1348], 1
jmp 0x4029e0
and dword [ebp - 0x1348], 0
mov eax, dword [ebp - 0x9a8]
sub eax, dword [ebp - 0x1348]
mov ecx, 0xe69ed994
sub ecx, eax
cmp dword [ebp - 0x60c], ecx
jg 0x402a10
cmp dword [ebp - 0x278], 0
je 0x402a10
mov dword [ebp - 0x9b0], 1
jmp 0x402a17
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x9b0], eax
jne 0x402a31
mov dword [ebp - 0x1350], 1
jmp 0x402a38
and dword [ebp - 0x1350], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1350]
mov dword [ebp + eax - 0x22e4], ecx
jmp 0x402a8b
mov dword [ebp - 0x10], 2
jmp 0x402a5d
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x402a8b
mov byte [ebp - 0x1d7], 0
movzx eax, byte [ebp - 0x1d7]
test eax, eax
je 0x402a89
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
jmp 0x402a56
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x394]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
cmp dword [eax], 0
je 0x402aad
jmp 0x4034a3
mov dword [ebp - 0x1aa0], 0x714a0256
mov dword [ebp - 0x2608], 0x276b87d0
mov dword [ebp - 0xe4], 0
jmp 0x402ada
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x402af6
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x1aa8], 0x951ad386
jmp 0x402acd
mov dword [ebp - 0xe4], 0
jmp 0x402b0f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x402b2b
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x2370], 0
jmp 0x402b02
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2370]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2370], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1aa0]
mov dword [ebp + eax - 0x1aa8], ecx
mov dword [ebp - 0xec], 0
jmp 0x402b72
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jg 0x40349e
mov dword [ebp - 0xa4], 0x90ac204e
mov dword [ebp - 0x790], 0x1ba028ea
push 4
lea ecx, [ebp - 0x858]
call fcn.00413c51
mov dword [ebp - 0x3d0], 1
mov dword [ebp - 0x9d0], 0
push 2
lea ecx, [ebp - 0x2048]
call fcn.00413c51
mov dword [ebp - 0x150], 0
jmp 0x402bda
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x402bf9
push dword [ebp - 0x150]
lea ecx, [ebp - 0x858]
call fcn.00413d3f
and dword [eax], 0
jmp 0x402bcd
mov dword [ebp - 0x150], 0
jmp 0x402c12
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x402c34
push dword [ebp - 0x150]
lea ecx, [ebp - 0x2048]
call fcn.00413d3f
mov dword [eax], 0x458d81c9
jmp 0x402c05
mov dword [ebp - 0xa4], 0
jmp 0x402c4d
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffeb
jg 0x402e6b
mov dword [ebp - 0x1ee4], 0x17ca0029
mov dword [ebp - 0x1ee0], 0x17ca0029
mov dword [ebp - 0x1edc], 0x17ca0029
mov dword [ebp - 0x1ed8], 0x17ca0029
lea ecx, [ebp - 0x6ad]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x1ed4]
push eax
lea eax, [ebp - 0x1ee4]
push eax
lea ecx, [ebp - 0x26d8]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2030]
call fcn.00413cfd
mov dword [ebp - 0x19c], 0x438bea12
mov dword [ebp - 0x1ab0], 0xffffffff
mov dword [ebp - 0x19c], 3
jmp 0x402ce4
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x402cfa
cmp dword [ebp - 0x19c], 0
je 0x402cf8
jmp 0x402cfa
jmp 0x402cd7
cmp dword [ebp - 0x19c], 0
jne 0x402d27
imul eax, dword [ebp - 0x3d0], 0xe45b
mov ecx, dword [ebp - 0x3d0]
dec ecx
mov dword [ebp - 0x3d0], ecx
test eax, eax
jne 0x402d27
and dword [ebp - 0x1360], 0
jmp 0x402d31
mov dword [ebp - 0x1360], 1
push 2
lea ecx, [ebp - 0x2030]
call fcn.00413d3f
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x234c], eax
push 3
lea ecx, [ebp - 0x858]
call fcn.00413d3f
mov esi, dword [ebp - 0x19c]
push 3
lea ecx, [ebp - 0x858]
call fcn.00413d3f
imul esi, dword [eax]
cmp esi, 0x32883e73
jle 0x402d81
mov dword [ebp - 0x9b8], 1
jmp 0x402d88
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x9b8]
sub eax, dword [ebp - 0x1ab0]
sub eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa4]
jne 0x402dae
mov dword [ebp - 0x1358], 1
jmp 0x402db5
and dword [ebp - 0x1358], 0
cmp dword [ebp - 0x1358], 0
jbe 0x402dca
mov dword [ebp - 0x9c0], 1
jmp 0x402dd1
and dword [ebp - 0x9c0], 0
push 0
lea ecx, [ebp - 0x2030]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9c0]
jg 0x402df4
mov dword [ebp - 0x9c8], 1
jmp 0x402dfb
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x1360]
cmp eax, dword [ebp - 0x9c8]
jge 0x402e15
mov dword [ebp - 0x1368], 1
jmp 0x402e1c
and dword [ebp - 0x1368], 0
cmp dword [ebp - 0x1368], 0
je 0x402e3c
mov esi, dword [ebp - 0x19c]
push 2
lea ecx, [ebp - 0x858]
call fcn.00413d3f
mov dword [eax], esi
jmp 0x402e5b
mov dword [ebp - 0x1ab8], 0x21576660
push 2
lea ecx, [ebp - 0x858]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x1ab8], eax
lea ecx, [ebp - 0x2030]
call fcn.00413d23
jmp 0x402c40
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2568], eax
mov eax, dword [ebp - 0x9d0]
sub eax, 0x7d904387
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x9d0]
cmp dword [ebp - 0x790], eax
jne 0x402ea2
mov dword [ebp - 0x1370], 1
jmp 0x402ea9
and dword [ebp - 0x1370], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1370], eax
jle 0x402ec9
push 2
lea ecx, [ebp - 0x858]
call fcn.00413d3f
cmp dword [eax], 0
jne 0x402ed9
push 2
pop eax
test eax, eax
jne 0x402ed9
and dword [ebp - 0x9d8], 0
jmp 0x402ee3
mov dword [ebp - 0x9d8], 1
push 0
lea ecx, [ebp - 0x858]
call fcn.00413d3f
mov esi, dword [eax]
add esi, dword [ebp - 0x9d8]
push 0
lea ecx, [ebp - 0x858]
call fcn.00413d3f
cmp esi, dword [eax]
jg 0x402f15
mov dword [ebp - 0x1378], 1
jmp 0x402f1c
and dword [ebp - 0x1378], 0
cmp dword [ebp - 0x1378], 0x2570
je 0x402f34
mov dword [ebp - 0x9e0], 1
jmp 0x402f3b
and dword [ebp - 0x9e0], 0
push 0
lea ecx, [ebp - 0x858]
call fcn.00413d3f
mov ecx, dword [ebp - 0x9e0]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0x4e2bba6d
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0xa4], eax
jge 0x402f74
mov dword [ebp - 0x1380], 1
jmp 0x402f7b
and dword [ebp - 0x1380], 0
push 0
lea ecx, [ebp - 0x2048]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1380]
mov dword [eax], ecx
lea ecx, [ebp - 0x2048]
call fcn.00413d23
lea ecx, [ebp - 0x858]
call fcn.00413d23
push dword [ebp - 0xec]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x394]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov ecx, dword [esi]
mov dword [eax], ecx
mov dword [ebp - 0x50], 2
mov dword [ebp - 0x1ad0], 0x3ea3a722
mov dword [ebp - 0x520], 0
jmp 0x402fff
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 2
jge 0x40301b
mov eax, dword [ebp - 0x520]
mov dword [ebp + eax*4 - 0x300], 0x3342eb9
jmp 0x402ff2
mov dword [ebp - 0x50], 1
jmp 0x40302b
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x4032db
mov dword [ebp - 0x9f8], 0xfffffffa
mov dword [ebp - 0x1e6c], 0xfffffffd
mov dword [ebp - 0x1e68], 0xfffffffd
mov dword [ebp - 0x1e64], 0xfffffffd
mov dword [ebp - 0x1e60], 0xfffffffd
lea ecx, [ebp - 0x7c1]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x1e5c]
push eax
lea eax, [ebp - 0x1e6c]
push eax
lea ecx, [ebp - 0x26e0]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2380]
call fcn.00413cfd
mov dword [ebp - 0x13a0], 0xd065835a
mov dword [ebp - 0x1ac8], 0xffffffff
mov dword [ebp - 0x3d8], 0
jmp 0x4030c9
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 1
jge 0x4030e5
mov eax, dword [ebp - 0x3d8]
mov dword [ebp + eax*4 - 0xa00], 0xc511ec1f
jmp 0x4030bc
mov eax, 0x165352f7
test eax, eax
je 0x403263
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x300]
mov dword [ebp - 0x2354], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x300]
mov dword [ebp - 0x2694], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x300], 0x70b1
je 0x40312e
mov dword [ebp - 0x9e8], 1
jmp 0x403135
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x9e8], 0xf928
jne 0x403157
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x300], 0
jne 0x403157
and dword [ebp - 0x1388], 0
jmp 0x403161
mov dword [ebp - 0x1388], 1
cmp dword [ebp - 0x1388], 0x129b8575
jne 0x403179
mov dword [ebp - 0x9f0], 1
jmp 0x403180
and dword [ebp - 0x9f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x300]
cmp dword [ebp - 0x9f0], eax
je 0x4031a1
mov dword [ebp - 0x1ac0], 1
jmp 0x4031a8
and dword [ebp - 0x1ac0], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x300]
mov dword [ebp - 0x2364], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x300]
mov dword [ebp - 0x2570], eax
mov eax, dword [ebp - 0x50]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x300]
cmp dword [ebp + eax*4 - 0x300], ecx
jne 0x4031f0
mov dword [ebp - 0x1390], 1
jmp 0x4031f7
and dword [ebp - 0x1390], 0
mov eax, dword [ebp - 0x1390]
mov dword [ebp - 0x9f8], eax
cmp dword [ebp - 0x9f8], 0
jne 0x40321c
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x40321c
and dword [ebp - 0x6d0], 0
jmp 0x403226
mov dword [ebp - 0x6d0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6d0]
mov dword [ebp + eax - 0xa00], ecx
push 3
lea ecx, [ebp - 0x2380]
call fcn.00413d3f
mov ecx, dword [ebp - 0x6d0]
mov dword [eax], ecx
mov eax, 0x2718b962
test eax, eax
je 0x403263
mov dword [ebp - 0x1398], 1
jmp 0x40326a
and dword [ebp - 0x1398], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x300]
add eax, dword [ebp - 0x1398]
je 0x403298
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa00], 0
je 0x403298
mov dword [ebp - 0x840], 1
jmp 0x40329f
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x840]
mov dword [ebp + eax*4 - 0x300], ecx
mov eax, dword [ebp - 0x840]
inc eax
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x13a0], eax
mov eax, dword [ebp - 0x13a0]
mov dword [ebp - 0x1ac8], eax
lea ecx, [ebp - 0x2380]
call fcn.00413d23
jmp 0x403024
mov eax, dword [ebp - 0x1ad0]
mov dword [ebp - 0xa08], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa08]
mov dword [ebp + eax - 0x300], ecx
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x50], eax
push dword [ebp - 0xec]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x394]
cmp dword [eax], ecx
jl 0x403331
mov dword [ebp - 0x13a8], 1
jmp 0x403338
and dword [ebp - 0x13a8], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x394]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x13a8]
cmp ecx, dword [eax]
jne 0x403366
mov dword [ebp - 0x1ad8], 1
jmp 0x40336d
and dword [ebp - 0x1ad8], 0
push dword [ebp - 0xec]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x394]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
cmp dword [eax], 7
jbe 0x4033a7
mov dword [ebp - 0xa10], 1
jmp 0x4033ae
and dword [ebp - 0xa10], 0
push dword [ebp - 0xec]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov ecx, dword [ebp - 0xa10]
add ecx, dword [eax]
imul eax, ecx, 5
test eax, eax
jne 0x4033e0
cmp dword [ebp - 0xec], 0
jne 0x4033e0
and dword [ebp - 0x13b0], 0
jmp 0x4033ea
mov dword [ebp - 0x13b0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x394]
cmp dword [ebp - 0x13b0], eax
jg 0x40340b
mov dword [ebp - 0xa18], 1
jmp 0x403412
and dword [ebp - 0xa18], 0
push 2
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa18]
jg 0x403435
mov dword [ebp - 0x13b8], 1
jmp 0x40343c
and dword [ebp - 0x13b8], 0
push 0
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
mov eax, dword [eax]
imul eax, dword [ebp - 0x13b8]
mov dword [ebp - 0xa20], eax
mov esi, dword [ebp - 0xa20]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x394]
lea ecx, [ebp - 0x67c]
call fcn.00413d3f
cmp esi, dword [eax]
je 0x403486
mov dword [ebp - 0x13c0], 1
jmp 0x40348d
and dword [ebp - 0x13c0], 0
mov eax, dword [ebp - 0x13c0]
mov dword [ebp - 0x1ae0], eax
jmp 0x402b65
jmp 0x40223d
mov dword [ebp - 0x1f34], 3
mov dword [ebp - 0x1f30], 3
mov dword [ebp - 0x1f2c], 3
mov dword [ebp - 0x1f28], 3
lea ecx, [ebp - 0x7c9]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x1f24]
push eax
lea eax, [ebp - 0x1f34]
push eax
lea ecx, [ebp - 0x27a8]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2390]
call fcn.00413cfd
push 1
lea ecx, [ebp - 0x188c]
call fcn.00413c51
mov dword [ebp - 0x5c4], 0
jmp 0x403526
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 1
jge 0x403548
push dword [ebp - 0x5c4]
lea ecx, [ebp - 0x188c]
call fcn.00413d3f
mov dword [eax], 0xfffffff6
jmp 0x403519
push 0
lea ecx, [ebp - 0x188c]
call fcn.00413d3f
mov dword [eax], 3
jmp 0x403581
push 0
lea ecx, [ebp - 0x188c]
call fcn.00413d3f
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xa28]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa28]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x188c]
call fcn.00413d3f
cmp dword [eax], 0
jl 0x4035b6
push 0
lea ecx, [ebp - 0x188c]
call fcn.00413d3f
push dword [eax]
lea ecx, [ebp - 0x2390]
call fcn.00413d3f
cmp dword [eax], 0
je 0x4035b4
jmp 0x4035b6
jmp 0x40355d
lea ecx, [ebp - 0x188c]
call fcn.00413d23
lea ecx, [ebp - 0x2390]
call fcn.00413d23
mov byte [ebp - 0x1d9], 0
movzx eax, byte [ebp - 0x1d9]
test eax, eax
je 0x4035e8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x67c]
call fcn.00413d23
mov dword [ebp - 0x2604], 0x3556
mov dword [ebp - 0x2600], 0x3556
mov dword [ebp - 0x25fc], 0x3556
mov dword [ebp - 0x25f8], 0x3556
mov byte [ebp - 0x1db], 0
movzx eax, byte [ebp - 0x1db]
test eax, eax
je 0x403637
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
mov byte [ebp - 0x1dd], 0
movzx eax, byte [ebp - 0x1dd]
test eax, eax
je 0x40364f
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov dword [ebp - 0xa38], 0x44ad72d7
mov dword [ebp - 0x13d0], 0xa278c007
mov dword [ebp - 0x13d8], 0x2189f42c
mov dword [ebp - 0xa48], 0xd65f4e26
mov dword [ebp - 0x1e94], 1
mov dword [ebp - 0x1e90], 1
mov dword [ebp - 0x1e8c], 1
mov dword [ebp - 0x1e88], 1
lea ecx, [ebp - 0x7d1]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x1e84]
push eax
lea eax, [ebp - 0x1e94]
push eax
lea ecx, [ebp - 0x2708]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x23a0]
call fcn.00413cfd
mov dword [ebp - 0x3e0], 0
jmp 0x4036ed
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 1
jge 0x403709
mov eax, dword [ebp - 0x3e0]
mov dword [ebp + eax*4 - 0x2d4], 0x2a4f
jmp 0x4036e0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2d4]
cmp dword [ebp + eax - 0x2d4], ecx
jle 0x403731
mov dword [ebp - 0x13c8], 1
jmp 0x403738
and dword [ebp - 0x13c8], 0
cmp dword [ebp - 0x13c8], 0
jae 0x40374d
mov dword [ebp - 0xa30], 1
jmp 0x403754
and dword [ebp - 0xa30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d4]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x13d0], eax
mov eax, 0x98e64e6d
sub eax, dword [ebp - 0x13d0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2d4]
imul ecx, eax
mov dword [ebp - 0x13d8], ecx
mov eax, dword [ebp - 0xa38]
sub eax, dword [ebp - 0x13d8]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x2d4], eax
jg 0x4037bb
mov dword [ebp - 0xa40], 1
jmp 0x4037c2
and dword [ebp - 0xa40], 0
cmp dword [ebp - 0xa40], 0xdac7
jge 0x4037da
mov dword [ebp - 0x13e0], 1
jmp 0x4037e1
and dword [ebp - 0x13e0], 0
mov eax, dword [ebp - 0x13e0]
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0xa48], 0
je 0x403812
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d4], 0
je 0x403812
mov dword [ebp - 0x13e8], 1
jmp 0x403819
and dword [ebp - 0x13e8], 0
push 0
lea ecx, [ebp - 0x23a0]
call fcn.00413d3f
mov ecx, dword [ebp - 0x13e8]
mov dword [eax], ecx
lea ecx, [ebp - 0x23a0]
call fcn.00413d23
mov dword [ebp - 0x530], 0x48bbca63
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x20c], 0x49cec79e
mov dword [ebp - 0x528], 0x16501874
mov dword [ebp - 0x370], 0xffffffff
mov dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x34], 0
jne 0x403885
xor eax, eax
jne 0x403885
and dword [ebp - 0xa50], 0
jmp 0x40388f
mov dword [ebp - 0xa50], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa50], eax
jne 0x4038a6
mov dword [ebp - 0x13f0], 1
jmp 0x4038ad
and dword [ebp - 0x13f0], 0
mov eax, dword [ebp - 0x13f0]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
cmp eax, 0x8e92eda8
ja 0x4038cc
mov dword [ebp - 0xa58], 1
jmp 0x4038d3
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xa58]
jne 0x4038ea
mov dword [ebp - 0x13f8], 1
jmp 0x4038f1
and dword [ebp - 0x13f8], 0
mov eax, dword [ebp - 0x13f8]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x528], eax
jle 0x403914
mov dword [ebp - 0xa60], 1
jmp 0x40391b
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa60], eax
jge 0x403935
cmp dword [ebp - 0x34], 0
jne 0x403935
and dword [ebp - 0x1400], 0
jmp 0x40393f
mov dword [ebp - 0x1400], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
dec eax
dec eax
cmp eax, dword [ebp - 0x1400]
jg 0x40396a
cmp dword [ebp - 0x20c], 0
jne 0x40396a
and dword [ebp - 0xa68], 0
jmp 0x403974
mov dword [ebp - 0xa68], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa68], eax
jle 0x403991
cmp dword [ebp - 0x20c], 0
jne 0x403991
and dword [ebp - 0x1408], 0
jmp 0x40399b
mov dword [ebp - 0x1408], 1
mov eax, dword [ebp - 0x1408]
add eax, 3
cmp eax, dword [ebp - 0x34]
je 0x4039b5
mov dword [ebp - 0xa70], 1
jmp 0x4039bc
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
je 0x403a42
mov dword [ebp - 0x1ae8], 0xc2a41b87
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
jne 0x403a09
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x1ae8], eax
je 0x403a00
xor eax, eax
inc eax
jne 0x403a09
and dword [ebp - 0x1410], 0
jmp 0x403a13
mov dword [ebp - 0x1410], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1410], eax
jge 0x403a2a
mov dword [ebp - 0x1af0], 1
jmp 0x403a31
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x370], eax
jmp 0x403bb4
mov dword [ebp - 0x1af8], 1
mov dword [ebp - 0x3e8], 0
jmp 0x403a65
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 1
jge 0x403a81
mov eax, dword [ebp - 0x3e8]
mov dword [ebp + eax*4 - 0x634], 1
jmp 0x403a58
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x634]
add eax, 0x4fbfd527
cmp dword [ebp - 0x34], eax
je 0x403aa4
mov dword [ebp - 0xa78], 1
jmp 0x403aab
and dword [ebp - 0xa78], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x634]
neg eax
cmp eax, dword [ebp - 0xa78]
jg 0x403ad4
cmp dword [ebp - 0x3f0], 0
jne 0x403ad4
and dword [ebp - 0x1418], 0
jmp 0x403ade
mov dword [ebp - 0x1418], 1
mov eax, dword [ebp - 0x3f0]
cmp dword [ebp - 0x1418], eax
jne 0x403afc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x634], 0
jne 0x403b0b
cmp dword [ebp - 0x34], 0
jne 0x403b0b
and dword [ebp - 0xa80], 0
jmp 0x403b15
mov dword [ebp - 0xa80], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x634]
mov ecx, dword [ebp - 0xa80]
lea eax, [eax + ecx + 0xecce]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x9991
jg 0x403b56
cmp dword [ebp - 0x1af8], 0
je 0x403b56
mov dword [ebp - 0x1420], 1
jmp 0x403b5d
and dword [ebp - 0x1420], 0
mov eax, dword [ebp - 0x1420]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
je 0x403b84
cmp dword [ebp - 0x34], 0
je 0x403b84
mov dword [ebp - 0xa88], 1
jmp 0x403b8b
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0x370], eax
mov byte [ebp - 0x1df], 0
movzx eax, byte [ebp - 0x1df]
test eax, eax
je 0x403bb4
push 0xc51
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x284], 0xffffffff
push 1
lea ecx, [ebp - 0x1b58]
call fcn.00413c51
push 3
lea ecx, [ebp - 0x2060]
call fcn.00413c51
mov dword [ebp - 0x1b00], 0x1e6
mov dword [ebp - 0x12c], 0
jmp 0x403bfb
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x403c1d
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x1b58]
call fcn.00413d3f
mov dword [eax], 0xfffffffc
jmp 0x403bee
mov dword [ebp - 0x12c], 0
jmp 0x403c36
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x403c58
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x2060]
call fcn.00413d3f
mov dword [eax], 0x1f2e9667
jmp 0x403c29
mov dword [ebp - 0x284], 0xfffffff2
jmp 0x403c71
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xfffffff0
jge 0x403c98
mov byte [ebp - 0x1e1], 0
movzx eax, byte [ebp - 0x1e1]
test eax, eax
je 0x403c96
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
jmp 0x403c64
push 0
lea ecx, [ebp - 0x1b58]
call fcn.00413d3f
mov eax, 0xa1fa
test eax, eax
je 0x403ccc
push 0
lea ecx, [ebp - 0x1b58]
call fcn.00413d3f
cmp dword [eax], 0
jg 0x403ccc
mov dword [ebp - 0x6d8], 1
jmp 0x403cd3
and dword [ebp - 0x6d8], 0
push 0
lea ecx, [ebp - 0x1b58]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x284], eax
push 2
lea ecx, [ebp - 0x2060]
call fcn.00413d3f
mov ecx, dword [ebp - 0x6d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x6d8]
je 0x403d17
mov dword [ebp - 0x1428], 1
jmp 0x403d1e
and dword [ebp - 0x1428], 0
mov eax, dword [ebp - 0x1428]
mov dword [ebp - 0x1b00], eax
lea ecx, [ebp - 0x2060]
call fcn.00413d23
lea ecx, [ebp - 0x1b58]
call fcn.00413d23
mov byte [ebp - 0x1e3], 0
movzx eax, byte [ebp - 0x1e3]
test eax, eax
je 0x403d61
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0x2374], 0xffffffff
mov dword [ebp - 0x261c], 0xfffffffd
mov dword [ebp - 0x2384], 0x20fe6e32
push 3
lea ecx, [ebp - 0x23c0]
call fcn.00413c51
mov dword [ebp - 0x2578], 0xffffffff
mov dword [ebp - 0x2394], 0x796840e
push 3
lea ecx, [ebp - 0x23b0]
call fcn.00413c51
mov dword [ebp - 0x2138], 0xffffffff
mov dword [ebp - 0xa90], 0xffff
mov dword [ebp - 0xf4], 0
jmp 0x403dda
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x403dfc
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x23c0]
call fcn.00413d3f
mov dword [eax], 1
jmp 0x403dcd
mov dword [ebp - 0xf4], 0
jmp 0x403e15
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x403e37
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x23b0]
call fcn.00413d3f
mov dword [eax], 0xab1d
jmp 0x403e08
mov eax, dword [ebp - 0xa90]
inc eax
mov dword [ebp - 0xa90], eax
lea ecx, [ebp - 0x23b0]
call fcn.00413d23
lea ecx, [ebp - 0x23c0]
call fcn.00413d23
mov dword [ebp - 0x530], 0xfffffff2
jmp 0x403e73
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 7
jne 0x404991
mov dword [ebp - 0xc4], 8
mov dword [ebp - 0x213c], 1
mov dword [ebp - 0x2144], 0x108fa7ad
mov dword [ebp - 0xc4], 0x10
jmp 0x403eb7
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffee
jle 0x403f9b
mov dword [ebp - 0x6e0], 3
mov dword [ebp - 0x1b08], 6
mov dword [ebp - 0x1b10], 9
mov dword [ebp - 0x3f8], 0
jmp 0x403efb
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 2
jge 0x403f17
mov eax, dword [ebp - 0x3f8]
mov dword [ebp + eax*4 - 0x1a04], 2
jmp 0x403eee
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b08]
cmp dword [ebp + eax - 0x1a04], ecx
jge 0x403f48
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a04], 0
je 0x403f48
mov dword [ebp - 0x798], 1
jmp 0x403f4f
and dword [ebp - 0x798], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x798]
mov dword [ebp + eax - 0x1a04], ecx
mov eax, dword [ebp - 0x798]
sub eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x214c], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2154], eax
mov dword [ebp - 0x1b10], 1
jmp 0x403eaa
mov dword [ebp - 0xc4], 0xfffffffb
jmp 0x403fb4
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffed
jne 0x40416d
mov dword [ebp - 0x215c], 0
mov dword [ebp - 0x5cc], 0
jmp 0x403fe4
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 4
jge 0x404000
mov eax, dword [ebp - 0x5cc]
mov dword [ebp + eax*4 - 0x2130], 0
jmp 0x403fd7
mov byte [ebp - 0x1e5], 0
movzx eax, byte [ebp - 0x1e5]
test eax, eax
je 0x40401a
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2130], 0
jmp 0x404045
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2130]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2130], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2130], 0xfffffffc
jle 0x404168
mov dword [ebp - 0x538], 0xfffffff7
mov dword [ebp - 0x2164], 0x67684abf
mov dword [ebp - 0x216c], 0x18158fb5
mov dword [ebp - 0x400], 0
jmp 0x40408f
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 3
jge 0x4040ab
mov eax, dword [ebp - 0x400]
mov dword [ebp + eax*4 - 0x27d8], 0x49f2b782
jmp 0x404082
mov dword [ebp - 0x538], 0xffffffed
jmp 0x4040c4
mov eax, dword [ebp - 0x538]
dec eax
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0xffffffea
jg 0x404163
push 4
lea ecx, [ebp - 0x1c98]
call fcn.00413c51
mov dword [ebp - 0x408], 0
jmp 0x4040f7
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 4
jge 0x404119
push dword [ebp - 0x408]
lea ecx, [ebp - 0x1c98]
call fcn.00413d3f
mov dword [eax], 0x97ab83de
jmp 0x4040ea
cmp dword [ebp - 0xc4], 0
je 0x40412f
lea ecx, [ebp - 0x1c98]
call fcn.00413d23
jmp 0x404163
push 2
lea ecx, [ebp - 0x1c98]
call fcn.00413d3f
mov dword [ebp - 0x1430], eax
mov eax, dword [ebp - 0x1430]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1430]
mov dword [ecx], eax
lea ecx, [ebp - 0x1c98]
call fcn.00413d23
jmp 0x4040b7
jmp 0x40402c
jmp 0x403fa7
mov dword [ebp - 0x2bc], 0x47dc4b4e
mov dword [ebp - 0x2bc], 0
jmp 0x404190
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x1c
jle 0x404964
mov dword [ebp - 0x614], 3
mov dword [ebp - 0x540], 0xba86ba47
mov dword [ebp - 0x1450], 0xade0980d
mov dword [ebp - 0x1de4], 0xffffffff
mov dword [ebp - 0x1de0], 0xffffffff
mov dword [ebp - 0x1ddc], 0xffffffff
mov dword [ebp - 0x1dd8], 0xffffffff
mov dword [ebp - 0x2174], 9
mov dword [ebp - 0x614], 0xffffffee
jmp 0x404206
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 0xfffffff2
jl 0x40448c
mov dword [ebp - 0x7f0], 0x22e6
mov dword [ebp - 0xaa8], 0x9900
mov dword [ebp - 0x1440], 0xffffffff
cmp dword [ebp - 0x7f0], 0xffff
je 0x404249
mov dword [ebp - 0xa98], 1
jmp 0x404250
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0xaa8]
add eax, dword [ebp - 0xa98]
imul eax, eax, 0xfffffff8
test eax, eax
je 0x404290
mov byte [ebp - 0x1e7], 0
movzx eax, byte [ebp - 0x1e7]
test eax, eax
je 0x40428b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x404487
mov dword [ebp - 0x320], 0xc9bf5e4d
mov dword [ebp - 0x1b20], 0xffffffff
mov dword [ebp - 0x410], 0
jmp 0x4042bd
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 2
jge 0x4042d9
mov eax, dword [ebp - 0x410]
mov dword [ebp + eax*4 - 0x2530], 0x6ab2aee5
jmp 0x4042b0
cmp dword [ebp - 0x540], 0
je 0x4042e7
jmp 0x40448c
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x1438], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1438]
mov dword [ebp + eax - 0x1de4], ecx
cmp dword [ebp - 0x1438], 0
je 0x4043ea
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x217c], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1de4], 0x551b32e2
mov eax, 0x551b32e2
cmp eax, 0x3380ee91
jg 0x404348
mov dword [ebp - 0xaa0], 1
jmp 0x40434f
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x1440], eax
cmp dword [ebp - 0x1440], 0
je 0x40436b
cmp dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x1450], eax
jl 0x404385
mov dword [ebp - 0x1b18], 1
jmp 0x40438c
and dword [ebp - 0x1b18], 0
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0x2184], eax
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x1b20]
add eax, dword [ebp - 0x540]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0x320], eax
jg 0x4043ca
mov dword [ebp - 0x1448], 1
jmp 0x4043d1
and dword [ebp - 0x1448], 0
mov eax, dword [ebp - 0x1448]
sub eax, 0x9c2b
je 0x4043ea
mov dword [ebp - 0xab8], 1
jmp 0x4043f1
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xab0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xab0]
mov dword [ebp + eax - 0x2530], ecx
mov eax, dword [ebp - 0xab0]
sub eax, dword [ebp - 0x1450]
cmp eax, dword [ebp - 0xab8]
jl 0x40443e
mov byte [ebp - 0x1e9], 0
movzx eax, byte [ebp - 0x1e9]
test eax, eax
je 0x40443c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x404487
mov byte [ebp - 0x1eb], 0
movzx eax, byte [ebp - 0x1eb]
test eax, eax
je 0x404461
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov byte [ebp - 0x1ed], 0
movzx eax, byte [ebp - 0x1ed]
test eax, eax
je 0x404487
push 0x71
push 0xf76
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x4041f9
mov byte [ebp - 0x26b], 0
movzx eax, byte [ebp - 0x26b]
test eax, eax
je 0x40495f
mov dword [ebp - 0x214], 2
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x1c64], 0
mov dword [ebp - 0x1c6c], 0xfc6a3f0b
mov dword [ebp - 0x1c74], 0xfffffffb
mov dword [ebp - 0x218c], 0xd0bc
mov dword [ebp - 0x134], 0
jmp 0x4044f4
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x404510
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x694], 0xfffffff6
jmp 0x4044e7
mov dword [ebp - 0x134], 0
jmp 0x404529
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x404545
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x1808], 0xffffffff
jmp 0x40451c
cmp dword [ebp - 0x214], 0
jne 0x404647
xor eax, eax
inc eax
sub eax, dword [ebp - 0x214]
cmp eax, 0xfffa
jb 0x40456e
mov dword [ebp - 0x1458], 1
jmp 0x404575
and dword [ebp - 0x1458], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1458], eax
jle 0x40458f
mov dword [ebp - 0xac0], 1
jmp 0x404596
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xac0], eax
jg 0x4045b0
mov dword [ebp - 0x1460], 1
jmp 0x4045b7
and dword [ebp - 0x1460], 0
mov eax, dword [ebp - 0x1460]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x214]
inc eax
je 0x4045de
cmp dword [ebp - 0x28], 0
je 0x4045de
mov dword [ebp - 0xac8], 1
jmp 0x4045e5
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x1468], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1468]
mov dword [ebp + eax - 0x694], ecx
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0xac8]
cmp dword [ebp - 0x1468], eax
jg 0x404625
mov dword [ebp - 0xad0], 1
jmp 0x40462c
and dword [ebp - 0xad0], 0
cmp dword [ebp - 0xad0], 0x4f2887cf
jg 0x40463e
cmp dword [ebp - 0x28], 0
jne 0x404647
and dword [ebp - 0x1b28], 0
jmp 0x404651
mov dword [ebp - 0x1b28], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x28]
mov dword [ebp + eax - 0x1808], ecx
mov dword [ebp - 0x28], 0
jmp 0x404671
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x404949
mov dword [ebp - 0x7a0], 0x276ac116
mov dword [ebp - 0xad8], 0x7d3d8e1c
cmp dword [ebp - 0x7a0], 1
je 0x4046a4
mov dword [ebp - 0x1b30], 1
jmp 0x4046ab
and dword [ebp - 0x1b30], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x694]
mov dword [ebp - 0x1b38], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1b38]
mov dword [ebp + eax*4 - 0x694], ecx
mov eax, 0x5c7d
test eax, eax
jne 0x4046e0
mov dword [ebp - 0x1c5c], 1
jmp 0x4046e7
and dword [ebp - 0x1c5c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x694], 0
je 0x404701
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x694], 0
jne 0x404713
cmp dword [ebp - 0x7a0], 0
jne 0x404713
and dword [ebp - 0x6e8], 0
jmp 0x40471d
mov dword [ebp - 0x6e8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp + eax - 0x1808], ecx
cmp dword [ebp - 0x6e8], 0
jg 0x404745
mov dword [ebp - 0x1470], 1
jmp 0x40474c
and dword [ebp - 0x1470], 0
mov eax, dword [ebp - 0x1470]
mov dword [ebp - 0x1c64], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x694]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0xad8]
add eax, 0xfff9
je 0x40478a
mov eax, 0xc7d75752
test eax, eax
je 0x40478a
mov dword [ebp - 0x1478], 1
jmp 0x404791
and dword [ebp - 0x1478], 0
cmp dword [ebp - 0x1478], 0x860c
jg 0x4047a9
mov dword [ebp - 0xae0], 1
jmp 0x4047b0
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x1c6c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1808]
mov dword [ebp - 0x2194], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x694], 0
je 0x4047f4
mov eax, 0x18f7f2f1
test eax, eax
je 0x4047f4
mov dword [ebp - 0x1480], 1
jmp 0x4047fb
and dword [ebp - 0x1480], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x694]
cmp dword [ebp - 0x1480], eax
jne 0x404819
mov dword [ebp - 0xae8], 1
jmp 0x404820
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
neg eax
neg eax
cmp eax, dword [ebp - 0x7a0]
jne 0x40483e
mov dword [ebp - 0x1488], 1
jmp 0x404845
and dword [ebp - 0x1488], 0
cmp dword [ebp - 0x1488], 0x68f7
jl 0x40485d
mov dword [ebp - 0xaf0], 1
jmp 0x404864
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
shl eax, 1
je 0x40488a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1808], 0
je 0x40488a
mov dword [ebp - 0x1490], 1
jmp 0x404891
and dword [ebp - 0x1490], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x694]
cmp eax, dword [ebp - 0x1490]
je 0x4048b2
mov dword [ebp - 0xaf8], 1
jmp 0x4048b9
and dword [ebp - 0xaf8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x694]
cmp eax, dword [ebp - 0xaf8]
jl 0x4048da
mov dword [ebp - 0x1498], 1
jmp 0x4048e1
and dword [ebp - 0x1498], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x694]
cmp dword [ebp - 0x1498], eax
jne 0x404905
mov eax, 0x9349
test eax, eax
jne 0x404905
and dword [ebp - 0xb00], 0
jmp 0x40490f
mov dword [ebp - 0xb00], 1
mov eax, dword [ebp - 0x1c74]
cmp dword [ebp - 0xb00], eax
je 0x404929
mov dword [ebp - 0x14a0], 1
jmp 0x404930
and dword [ebp - 0x14a0], 0
imul eax, dword [ebp - 0x14a0], 0x2935
mov ecx, dword [ebp - 0x28]
mov dword [ebp + ecx*4 - 0x694], eax
jmp 0x40466a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
jmp 0x404183
cmp dword [ebp - 0x2bc], 0
jne 0x404979
mov dword [ebp - 0xb08], 1
jmp 0x404980
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0x2bc], eax
jmp 0x403e66
mov dword [ebp - 0x6f0], 0xfffffffd
mov dword [ebp - 0x828], 0xf6f97812
mov dword [ebp - 0x14c8], 0xea21
mov dword [ebp - 0x420], 0x3f5cfeb4
mov dword [ebp - 0x418], 0
jmp 0x4049d2
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 2
jge 0x4049ee
mov eax, dword [ebp - 0x418]
mov dword [ebp + eax*4 - 0x16b4], 0
jmp 0x4049c5
mov dword [ebp - 0x6f0], 0xfffffffe
cmp dword [ebp - 0x6f0], 0x91ba
jle 0x404a10
mov dword [ebp - 0x14a8], 1
jmp 0x404a17
and dword [ebp - 0x14a8], 0
cmp dword [ebp - 0x14a8], 1
jne 0x404a2c
mov dword [ebp - 0xb10], 1
jmp 0x404a33
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x828]
cmp dword [ebp - 0xb10], eax
jl 0x404a4d
mov dword [ebp - 0x14b0], 1
jmp 0x404a54
and dword [ebp - 0x14b0], 0
cmp dword [ebp - 0x14b0], 0xf2f34e40
ja 0x404a6c
mov dword [ebp - 0xb18], 1
jmp 0x404a73
and dword [ebp - 0xb18], 0
imul eax, dword [ebp - 0xb18], 9
imul eax, eax, 0xfffa
test eax, eax
je 0x404b59
mov dword [ebp - 0xb28], 0xfffffffb
cmp dword [ebp - 0x14c8], 0
jne 0x404aab
push 4
pop eax
test eax, eax
jne 0x404aab
and dword [ebp - 0x14b8], 0
jmp 0x404ab5
mov dword [ebp - 0x14b8], 1
mov eax, dword [ebp - 0xb28]
cmp dword [ebp - 0x14b8], eax
je 0x404acf
mov dword [ebp - 0xb20], 1
jmp 0x404ad6
and dword [ebp - 0xb20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16b4]
cmp eax, dword [ebp - 0xb20]
jl 0x404afb
push 7
pop eax
test eax, eax
jne 0x404afb
and dword [ebp - 0x14c0], 0
jmp 0x404b05
mov dword [ebp - 0x14c0], 1
mov eax, dword [ebp - 0x14c0]
inc eax
cmp eax, dword [ebp - 0xb28]
je 0x404b20
mov dword [ebp - 0xb30], 1
jmp 0x404b27
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x14c8]
cmp dword [ebp - 0xb30], eax
je 0x404b41
mov dword [ebp - 0x14d0], 1
jmp 0x404b48
and dword [ebp - 0x14d0], 0
mov eax, dword [ebp - 0x14d0]
mov dword [ebp - 0x420], eax
jmp 0x404e53
mov dword [ebp - 0x80], 0x3ede
mov dword [ebp - 0x88], 0x4d3380d4
mov eax, dword [ebp - 0x6f0]
add eax, dword [ebp - 0x80]
cmp eax, 0x85c68ab8
ja 0x404b86
mov dword [ebp - 0xb38], 1
jmp 0x404b8d
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0xb38], 0xffffffff
jbe 0x404ba2
mov dword [ebp - 0x14d8], 1
jmp 0x404ba9
and dword [ebp - 0x14d8], 0
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x14d8], eax
jle 0x404bc3
mov dword [ebp - 0x1c7c], 1
jmp 0x404bca
and dword [ebp - 0x1c7c], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x219c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x21a4], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x404bfd
cmp dword [ebp - 0x80], 0
jne 0x404bfd
and dword [ebp - 0x1c84], 0
jmp 0x404c07
mov dword [ebp - 0x1c84], 1
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x21ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16b4], 0
je 0x404df6
mov dword [ebp - 0x5d4], 0
jmp 0x404c3d
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 4
jge 0x404c59
mov eax, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x1d7c], 0xfffffff6
jmp 0x404c30
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1d7c], 0
jne 0x404cef
push 2
pop eax
test eax, eax
je 0x404ca5
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x16b4]
cmp dword [ebp + eax - 0x1d7c], ecx
jle 0x404c99
cmp dword [ebp - 0x88], 0
je 0x404ca5
mov dword [ebp - 0xb40], 1
jmp 0x404cac
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
je 0x404cd6
cmp dword [ebp - 0x828], 0
je 0x404cd6
mov dword [ebp - 0x14e0], 1
jmp 0x404cdd
and dword [ebp - 0x14e0], 0
mov eax, dword [ebp - 0x14e0]
dec eax
jne 0x404cef
and dword [ebp - 0xb48], 0
jmp 0x404cf9
mov dword [ebp - 0xb48], 1
cmp dword [ebp - 0xb48], 9
jae 0x404d0e
mov dword [ebp - 0x1520], 1
jmp 0x404d15
and dword [ebp - 0x1520], 0
mov eax, dword [ebp - 0x1520]
sub eax, 0xc87c
je 0x404d30
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1d7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16b4]
mov dword [ebp - 0x21b4], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x21bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d7c]
mov dword [ebp - 0x21c4], eax
mov eax, 0x777
test eax, eax
jne 0x404d71
cmp dword [ebp - 0x88], 0
je 0x404d86
cmp dword [ebp - 0x88], 0
je 0x404d86
mov dword [ebp - 0xb50], 1
jmp 0x404d8d
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0xb50]
neg eax
cmp eax, dword [ebp - 0x88]
je 0x404da9
mov dword [ebp - 0x1528], 1
jmp 0x404db0
and dword [ebp - 0x1528], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1528]
sub ecx, dword [ebp + eax - 0x1d7c]
jne 0x404dde
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16b4], 0
jne 0x404dde
and dword [ebp - 0xb58], 0
jmp 0x404de8
mov dword [ebp - 0xb58], 1
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x88], eax
jmp 0x404e53
mov dword [ebp - 0x1530], 0x266a
mov dword [ebp - 0x88], 0
jmp 0x404e19
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xa
jge 0x404e2f
cmp dword [ebp - 0x1530], 0
je 0x404e2d
jmp 0x404e2f
jmp 0x404e0c
mov dword [ebp - 0x80], 0
jmp 0x404e3f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x23
jle 0x404e53
mov eax, dword [ebp - 0x1530]
mov dword [ebp - 0x828], eax
jmp 0x404e38
mov dword [ebp - 0x548], 0x469ad59e
mov dword [ebp - 0x21cc], 0x20985a95
mov dword [ebp - 0x1994], 0xb8ee41b6
mov dword [ebp - 0x21d4], 0xffffffff
mov dword [ebp - 0x21dc], 0x1ba028e
mov dword [ebp - 0x21e4], 0x515fdc8d
mov dword [ebp - 0x21ec], 0xfffffffd
mov dword [ebp - 0x21f4], 0x4952f341
mov dword [ebp - 0xb60], 0x2a5bc422
mov dword [ebp - 0xfc], 0
jmp 0x404ec6
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x404ee2
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x2808], 1
jmp 0x404eb9
mov dword [ebp - 0xfc], 0
jmp 0x404efb
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x404f17
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x1c8c], 3
jmp 0x404eee
mov dword [ebp - 0x548], 2
jmp 0x404f30
mov eax, dword [ebp - 0x548]
dec eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0
jl 0x404fd7
push 1
lea ecx, [ebp - 0x23d0]
call fcn.00413c51
mov dword [ebp - 0x13c], 0
jmp 0x404f63
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x404f7f
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x21fc], 0x290b
jmp 0x404f56
mov dword [ebp - 0x13c], 0
jmp 0x404f98
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x404fba
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x23d0]
call fcn.00413d3f
mov dword [eax], 0xfffffff7
jmp 0x404f8b
mov eax, dword [ebp - 0xb60]
inc eax
mov dword [ebp - 0xb60], eax
lea ecx, [ebp - 0x23d0]
call fcn.00413d23
jmp 0x404f23
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c8c], 0x4361
jl 0x404ff6
mov dword [ebp - 0x1538], 1
jmp 0x404ffd
and dword [ebp - 0x1538], 0
mov eax, dword [ebp - 0x1538]
mov dword [ebp - 0x1994], eax
push 2
lea ecx, [ebp - 0x23e0]
call fcn.00413c51
mov dword [ebp - 0x428], 0
jmp 0x40502f
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 2
jge 0x40504e
push dword [ebp - 0x428]
lea ecx, [ebp - 0x23e0]
call fcn.00413d3f
and dword [eax], 0
jmp 0x405022
mov byte [ebp - 0x1bc], 0
movzx eax, byte [ebp - 0x1bc]
test eax, eax
je 0x405084
push 0x1c39
push 0
push 0
push 0xe7e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov byte [ebp - 0x23d], 0
movzx eax, byte [ebp - 0x23d]
test eax, eax
je 0x4050bb
push 0x444
push 0
push 0x1f9d
push 0x1a82
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
lea ecx, [ebp - 0x23e0]
call fcn.00413d23
mov dword [ebp - 0xac], 0xbeaa
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0xbd0], 0
push 3
lea ecx, [ebp - 0x174c]
call fcn.00413c51
mov dword [ebp - 0x654], 0
jmp 0x405114
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 3
jge 0x405136
push dword [ebp - 0x654]
lea ecx, [ebp - 0x174c]
call fcn.00413d3f
mov dword [eax], 0xc411
jmp 0x405107
cmp dword [ebp - 0xac], 0
je 0x4056e8
mov dword [ebp - 4], 0xbbf9
mov dword [ebp - 0x184], 0xea0c8d46
mov dword [ebp - 0x18a8], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 4], eax
jl 0x405175
mov dword [ebp - 0xb68], 1
jmp 0x40517c
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xb68]
jge 0x405193
mov dword [ebp - 0x1540], 1
jmp 0x40519a
and dword [ebp - 0x1540], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1540], eax
jge 0x4051b4
mov dword [ebp - 0xb70], 1
jmp 0x4051bb
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0xb70]
test eax, eax
je 0x4051e1
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0x174c]
call fcn.00413d23
push 3
lea ecx, [ebp - 0x664]
call fcn.00413c51
push 4
lea ecx, [ebp - 0x23f0]
call fcn.00413c51
mov dword [ebp - 0x550], 0
jmp 0x405732
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 4
jge 0x405754
push dword [ebp - 0x550]
lea ecx, [ebp - 0x23f0]
call fcn.00413d3f
mov dword [eax], 4
jmp 0x405725
mov byte [ebp - 0x26d], 0
movzx eax, byte [ebp - 0x26d]
test eax, eax
je 0x40577b
push 0
push 0x1a3e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0x1c0], 0
movzx eax, byte [ebp - 0x1c0]
test eax, eax
je 0x405798