Function at 0x4463f1
Capabilities:
Get common file path
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x440
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x447fed
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x446427
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff7
je 0x446461
mov dword [ebp - 0x74], 3
mov dword [ebp - 0x290], 0xfffffff9
mov dword [ebp - 0x74], 0
jmp 0x44644e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x16
jne 0x44645f
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x290], eax
jmp 0x446447
jmp 0x446420
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x42c], 0x2d5e48d3
mov dword [ebp - 0x428], 0x2d5e48d3
mov dword [ebp - 0x424], 0x2d5e48d3
mov dword [ebp - 0x420], 0x2d5e48d3
mov dword [ebp - 0x338], 0xf665683c
mov dword [ebp - 0x334], 0xf665683c
mov dword [ebp - 0x330], 0xf665683c
mov dword [ebp - 0x32c], 0xf665683c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x338], 0
jmp 0x4464e5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x338]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x338], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x338], 3
jg 0x446525
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x44650d
push 0x11eb
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x446523
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
jmp 0x4464cc
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x44653b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x1d0], 8
mov dword [ebp - 0xc], 0xfffffffb
jmp 0x446565
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffe7
jne 0x44672b
mov dword [ebp - 0x6c], 0xfffffff8
mov dword [ebp - 0x7c], 0
jmp 0x446586
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x44659c
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xc8], 0xfffffffd
jmp 0x44657f
cmp dword [ebp - 0xc], 0
je 0x446677
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
add eax, dword [ebp - 0xc]
cmp eax, 0x5954e3f1
jge 0x4465cb
mov dword [ebp - 0x268], 1
jmp 0x4465d2
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0x1c09
jne 0x4465ea
mov dword [ebp - 0x234], 1
jmp 0x4465f1
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
neg eax
imul ecx, dword [ebp - 0x234], 0x21dd
add eax, ecx
cmp dword [ebp - 0xc], eax
jge 0x44661d
mov dword [ebp - 0x11c], 1
jmp 0x446624
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x11c], eax
jge 0x44663b
mov dword [ebp - 0x23c], 1
jmp 0x446642
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x23c], eax
jge 0x446659
mov dword [ebp - 0x124], 1
jmp 0x446660
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x124], eax
jge 0x446677
mov dword [ebp - 0x244], 1
jmp 0x44667e
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 1
jle 0x446693
mov dword [ebp - 0x2f0], 1
jmp 0x44669a
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
je 0x44670d
mov dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0
je 0x4466da
cmp dword [ebp - 0xc], 0
je 0x4466d8
jmp 0x44672b
jmp 0x44670b
mov dword [ebp - 0x6c], 0
jmp 0x4466ea
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x44670b
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x446709
push 0
push 0x2c6
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x4466e3
jmp 0x446726
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x446726
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x44655e
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x34], 0xf43b7c7c
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x58], 4
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x2c], 0xed1d25bb
mov dword [ebp - 0x284], 0xfffffffd
mov dword [ebp - 0x50], 0xf3b0639e
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x1c], 6
push 2
lea ecx, [ebp - 0x300]
call fcn.004013fc
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0xa0], 0
jmp 0x4467a6
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x4467c8
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x300]
call fcn.004014ea
mov dword [eax], 0x1f88
jmp 0x446799
mov dword [ebp - 0x34], 0xfffffff7
jmp 0x4467d8
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff5
je 0x446a2a
mov dword [ebp - 0x64], 0xd6b65720
mov dword [ebp - 0x88], 0x3b1dab55
mov dword [ebp - 0xe8], 0xffff
cmp dword [ebp - 0x64], 0
jne 0x44689e
cmp dword [ebp - 0x34], 0
jne 0x446882
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x34]
cmp eax, 0xfffffffe
jl 0x446824
mov dword [ebp - 0x12c], 1
jmp 0x44682b
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x12c], eax
jg 0x446842
mov dword [ebp - 0x24c], 1
jmp 0x446849
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x24c]
jne 0x446868
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x2c], eax
jne 0x446882
and dword [ebp - 0x134], 0
jmp 0x44688c
mov dword [ebp - 0x134], 1
cmp dword [ebp - 0x134], 0
ja 0x44689e
and dword [ebp - 0x254], 0
jmp 0x4468a8
mov dword [ebp - 0x254], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x254], eax
jle 0x4468bf
mov dword [ebp - 0x13c], 1
jmp 0x4468c6
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x13c], eax
jle 0x4468e0
mov dword [ebp - 0x25c], 1
jmp 0x4468e7
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x25c], eax
jne 0x446907
mov eax, 0x18eb
test eax, eax
je 0x446907
mov dword [ebp - 0x144], 1
jmp 0x44690e
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x58]
jne 0x44692b
cmp dword [ebp - 0x88], 0
jne 0x44692b
and dword [ebp - 0x264], 0
jmp 0x446935
mov dword [ebp - 0x264], 1
cmp dword [ebp - 0x264], 0x40b319b
jge 0x44694d
mov dword [ebp - 0x14c], 1
jmp 0x446954
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0x8ba79672
jb 0x44696c
mov dword [ebp - 0x26c], 1
jmp 0x446973
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x64]
inc eax
inc eax
sub eax, dword [ebp - 0x18]
cmp eax, 1
jge 0x4469b0
cmp dword [ebp - 0x18], 0
jne 0x4469b0
and dword [ebp - 0x154], 0
jmp 0x4469ba
mov dword [ebp - 0x154], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x154], eax
jl 0x4469d1
mov dword [ebp - 0x274], 1
jmp 0x4469d8
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 0xb6f2
jne 0x4469f4
push 6
pop eax
test eax, eax
jne 0x4469f4
and dword [ebp - 0x15c], 0
jmp 0x4469fe
mov dword [ebp - 0x15c], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x15c], eax
jne 0x446a15
mov dword [ebp - 0x27c], 1
jmp 0x446a1c
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x18], eax
jmp 0x4467d1
cmp dword [ebp - 0x50], 0
je 0x446c18
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4c], eax
je 0x446a4b
cmp dword [ebp - 0x4c], 0
je 0x446a5d
cmp dword [ebp - 0x2c], 0
je 0x446a5d
mov dword [ebp - 0x164], 1
jmp 0x446a64
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
sub eax, 8
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x446a8c
cmp dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x4c], eax
jge 0x446aa0
mov dword [ebp - 0x28c], 1
jmp 0x446aa7
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
add eax, 0x68191e7b
cmp eax, dword [ebp - 0x1c]
jge 0x446ac9
cmp dword [ebp - 0x4c], 0
je 0x446ac9
mov dword [ebp - 0x29c], 1
jmp 0x446ad0
and dword [ebp - 0x29c], 0
push 0
lea ecx, [ebp - 0x300]
call fcn.004014ea
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x1c], 1
jne 0x446af8
mov dword [ebp - 0x170], 1
jmp 0x446aff
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x1c]
cmp eax, 0xce086565
ja 0x446b1f
mov dword [ebp - 0x200], 1
jmp 0x446b26
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0xc26b
jne 0x446b3e
mov dword [ebp - 0x178], 1
jmp 0x446b45
and dword [ebp - 0x178], 0
push 1
lea ecx, [ebp - 0x300]
call fcn.004014ea
mov ecx, dword [ebp - 0x178]
sub ecx, dword [eax]
jne 0x446b68
mov dword [ebp - 0x248], 1
jmp 0x446b6f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x248], eax
jge 0x446b86
mov dword [ebp - 0x180], 1
jmp 0x446b8d
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2c], eax
jl 0x446baa
mov dword [ebp - 0x208], 1
jmp 0x446bb1
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x2f4]
jle 0x446bce
mov dword [ebp - 0x188], 1
jmp 0x446bd5
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x446bf6
mov eax, 0x6f59
test eax, eax
jne 0x446bf6
and dword [ebp - 0x288], 0
jmp 0x446c00
mov dword [ebp - 0x288], 1
cmp dword [ebp - 0x288], 0xfe45
jg 0x446c18
mov dword [ebp - 0x190], 1
jmp 0x446c1f
and dword [ebp - 0x190], 0
mov dword [ebp - 0x18], 0x242e
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x190]
jle 0x446c60
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x446c5b
push 0x21cd
push 0xcf1
push 0
push 0
push 0x1897
push 0x208d
call dword [sym.imp.USER32.dll_ToUnicode]
jmp 0x446f1a
mov dword [ebp - 0xa8], 7
mov dword [ebp - 0xd0], 0xfffffff6
mov dword [ebp - 0x90], 0x3aa5b3e5
mov dword [ebp - 0x228], 1
mov dword [ebp - 0xb0], 0
jmp 0x446ca1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x446cbd
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x3a8], 5
jmp 0x446c94
cmp dword [ebp - 0x50], 0
je 0x446ce8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0xa8], 1
jbe 0x446ce1
mov dword [ebp - 0x210], 1
jmp 0x446ce8
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], eax
je 0x446d02
mov dword [ebp - 0x198], 1
jmp 0x446d09
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x198], eax
jge 0x446d20
mov dword [ebp - 0x250], 1
jmp 0x446d27
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x446d45
cmp dword [ebp - 0x1c], 0
jne 0x446d45
and dword [ebp - 0x1a0], 0
jmp 0x446d4f
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x1a0]
cmp eax, 0xfff9
ja 0x446d6b
mov dword [ebp - 0x218], 1
jmp 0x446d72
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1a8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x3a8], ecx
mov eax, dword [ebp - 0x1a8]
add eax, 0x846
cmp eax, dword [ebp - 0x90]
jle 0x446dbc
mov dword [ebp - 0x270], 1
jmp 0x446dc3
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x270], eax
jl 0x446ddd
mov dword [ebp - 0x1b0], 1
jmp 0x446de4
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xc7f14991
jbe 0x446dfc
mov dword [ebp - 0x220], 1
jmp 0x446e03
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0xa875637
jl 0x446e1b
mov dword [ebp - 0x1b8], 1
jmp 0x446e22
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x446e53
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a8], 0
je 0x446e53
mov dword [ebp - 0x2a4], 1
jmp 0x446e5a
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3d4], eax
or eax, 0xffffffff
je 0x446e9e
mov dword [ebp - 0x258], 2
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x446e8f
push 0
push 0
push 0x1d13
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
jmp 0x446f1a
mov dword [ebp - 0x3dc], 1
mov dword [ebp - 0x340], 0xfffffff9
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x3e8], eax
push 2
pop eax
test eax, eax
je 0x446eda
cmp dword [ebp - 0xd0], 0
je 0x446eda
mov dword [ebp - 0x1c0], 1
jmp 0x446ee1
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x300]
call fcn.004014ea
mov eax, dword [eax]
imul eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x340], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3a8], 0xfffffffd
lea ecx, [ebp - 0x300]
call fcn.004014ce
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x364], 1
mov dword [ebp - 0x360], 1
lea ecx, [ebp - 0xbd]
call fcn.004014f9
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x434]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x358]
call fcn.004014a8
mov dword [ebp - 0x98], 0
jmp 0x446f9b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x446fb7
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x10c], 0xffffffff
jmp 0x446f8e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x10c], 3
jmp 0x446fe5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x10c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10c], 0
jl 0x447041
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x10c]
lea ecx, [ebp - 0x358]
call fcn.004014ea
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x10c]
lea ecx, [ebp - 0x358]
call fcn.004014ea
mov ecx, dword [esi]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x358]
call fcn.004014ea
cmp dword [eax], 0
je 0x44703f
jmp 0x446fca
jmp 0x446fca
lea ecx, [ebp - 0x358]
call fcn.004014ce
mov eax, dword [ebp - 0x2ac]
movzx eax, byte [eax]
test eax, eax
je 0x447c14
mov dword [ebp - 0x1e8], 0xfc07e17f
mov dword [ebp - 0x100], 7
mov dword [ebp - 0x3f0], 0xfffffff7
mov dword [ebp - 0xd8], 0x2d2c87a7
mov dword [ebp - 0xf8], 0xfffffff7
mov dword [ebp - 0x314], 0xf13e13a6
mov dword [ebp - 0xf0], 0x8fb0b44
mov dword [ebp - 0xc4], 0x58e92eda
mov dword [ebp - 0x3f8], 0x6501874d
push 3
lea ecx, [ebp - 0x3b4]
call fcn.004013fc
mov dword [ebp - 0x328], 5
mov dword [ebp - 0x2bc], 0x82e77e81
mov dword [ebp - 0xe0], 0xfffc
mov dword [ebp - 0x2b4], 0xfffffff7
mov dword [ebp - 0xb8], 0
jmp 0x447105
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x447124
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x3b4]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x4470f8
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xf8], eax
jge 0x44713e
mov dword [ebp - 0x1c8], 1
jmp 0x447145
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0xc4]
jl 0x447166
mov dword [ebp - 0x304], 1
jmp 0x44716d
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0xf0]
sub eax, 0xe005
sub eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0xd8]
jl 0x447192
mov dword [ebp - 0x280], 1
jmp 0x447199
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xcd21
je 0x4471bd
mov dword [ebp - 0x110], 1
jmp 0x4471c4
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x110], eax
je 0x4471de
mov dword [ebp - 0x230], 1
jmp 0x4471e5
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x230], eax
jl 0x4471ff
mov dword [ebp - 0x1d8], 1
jmp 0x447206
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x1d8], eax
jl 0x447220
mov dword [ebp - 0x260], 1
jmp 0x447227
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x260], eax
jl 0x44724a
cmp dword [ebp - 0xf0], 0
je 0x44724a
mov dword [ebp - 0x238], 1
jmp 0x447251
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x100]
sub ecx, eax
neg ecx
mov dword [ebp - 0x1e0], ecx
push 1
lea ecx, [ebp - 0x3b4]
call fcn.004014ea
mov ecx, dword [ebp - 0x1e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e8]
imul eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x238]
inc ecx
cmp eax, ecx
jne 0x4472bc
mov eax, 0xd9236f91
test eax, eax
je 0x4472bc
mov dword [ebp - 0x278], 1
jmp 0x4472c3
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x2bc]
add ecx, dword [ebp - 0x278]
add eax, ecx
imul eax, dword [ebp - 0x314]
test eax, eax
je 0x4472f7
mov eax, 0x32a5b4d6
test eax, eax
je 0x4472f7
mov dword [ebp - 0x1f0], 1
jmp 0x4472fe
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x3b4]
call fcn.004014ce
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x344], eax
mov dword [ebp - 8], 0x83c7730f
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x80], 0
jmp 0x44733f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x447352
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x3c], 4
jmp 0x447338
mov dword [ebp - 8], 0
jmp 0x447362
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jg 0x44737e
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x44737c
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
jmp 0x44735b
mov dword [ebp - 8], 0
jmp 0x44738e
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x4476e5
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 4], 0
jmp 0x4473af
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x4476e0
mov dword [ebp - 0x20], 0xb5131d8b
mov dword [ebp - 0x54], 0xffffffff
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x3c], ecx
jl 0x4473df
mov dword [ebp - 0x240], 1
jmp 0x4473e6
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
neg eax
mov dword [ebp - 0x20], eax
je 0x447678
push 1
lea ecx, [ebp - 0x390]
call fcn.004013fc
mov dword [ebp - 0x184], 0x8036
mov dword [ebp - 0x1ac], 0xf61949f
mov dword [ebp - 0x84], 0
jmp 0x447431
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x447450
push dword [ebp - 0x84]
lea ecx, [ebp - 0x390]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x447424
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x447462
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
cmp dword [ebp - 4], 0
jne 0x4474c0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 8], 0xfff8
jb 0x447486
mov dword [ebp - 0x1f8], 1
jmp 0x44748d
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov ecx, dword [ebp - 0x1f8]
lea eax, [ecx + eax + 2]
test eax, eax
jne 0x4474c0
push 0
lea ecx, [ebp - 0x390]
call fcn.004014ea
cmp dword [eax], 0
jne 0x4474c0
and dword [ebp - 0x168], 0
jmp 0x4474ca
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x168]
je 0x4474e1
mov dword [ebp - 0x16c], 1
jmp 0x4474e8
and dword [ebp - 0x16c], 0
imul eax, dword [ebp - 0x16c], 0x511b
cmp eax, dword [ebp - 0x184]
jne 0x447506
mov dword [ebp - 0x174], 1
jmp 0x44750d
and dword [ebp - 0x174], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x174], eax
jne 0x44752b
mov dword [ebp - 0x17c], 1
jmp 0x447532
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp dword [ebp - 0x20], eax
jge 0x447553
mov dword [ebp - 0x33c], 1
jmp 0x44755a
and dword [ebp - 0x33c], 0
or eax, 0xffffffff
cmp eax, 4
ja 0x44756e
mov dword [ebp - 0x18c], 1
jmp 0x447575
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x18c], eax
jne 0x44758f
mov dword [ebp - 0x194], 1
jmp 0x447596
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x194]
jg 0x4475ad
mov dword [ebp - 0x19c], 1
jmp 0x4475b4
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x19c], eax
jl 0x4475cb
mov dword [ebp - 0x1a4], 1
jmp 0x4475d2
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp dword [ebp - 0x1ac], eax
jg 0x4475ff
mov eax, 0xdda31432
test eax, eax
jne 0x4475ff
and dword [ebp - 0x2cc], 0
jmp 0x447609
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x3c], ecx
jg 0x447633
mov dword [ebp - 0x1b4], 1
jmp 0x44763a
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp dword [ebp - 0x54], eax
je 0x44765b
mov dword [ebp - 0x1bc], 1
jmp 0x447662
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x70], eax
lea ecx, [ebp - 0x390]
call fcn.004014ce
jmp 0x4476db
mov dword [ebp - 0x70], 0
jmp 0x447688
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x4476db
mov dword [ebp - 0x54], 0
jmp 0x44769e
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x4476d9
mov dword [ebp - 0x20], 0
jmp 0x4476b4
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x4476d7
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x4476d5
push 0
push 0x2174
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x4476ad
jmp 0x447697
jmp 0x447681
jmp 0x4473a8
jmp 0x447387
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x294], eax
push 2
lea ecx, [ebp - 0x310]
call fcn.004013fc
mov dword [ebp - 0x8c], 0
jmp 0x447717
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x447736
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x310]
call fcn.004014ea
and dword [eax], 0
jmp 0x44770a
push 1
lea ecx, [ebp - 0x310]
call fcn.004014ea
and dword [eax], 0
jmp 0x44776c
push 1
lea ecx, [ebp - 0x310]
call fcn.004014ea
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1c4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x310]
call fcn.004014ea
cmp dword [eax], 1
jne 0x447795
mov dword [ebp - 0x2d4], 0x95364446
cmp dword [ebp - 0x2d4], 0
je 0x447793
jmp 0x447795
jmp 0x447748
lea ecx, [ebp - 0x310]
call fcn.004014ce
mov dword [ebp - 0x10], 0xbe1d925b
mov dword [ebp - 0x94], 0
jmp 0x4477c0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x4477dc
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x3e4], 0x261f9c28
jmp 0x4477b3
mov dword [ebp - 0x10], 1
jmp 0x4477ec
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x447854
mov dword [ebp - 0x9c], 9
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x3e4], 0
je 0x44780b
jmp 0x447854
mov dword [ebp - 0x9c], 1
jmp 0x447824
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x447852
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x447850
push 0xa38
push 0xf1b
push 0x1998
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
jmp 0x447817
jmp 0x4477e5
mov dword [ebp - 0x10], 0xfffffff4
jmp 0x447864
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe2
je 0x447883
mov dword [ebp - 0x1cc], 0xfffc
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
jmp 0x44785d
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x214], 0xfc07e17f
mov dword [ebp - 0xec], 7
mov dword [ebp - 0x3f4], 0xfffffff7
mov dword [ebp - 0xd4], 0x2d2c87a7
mov dword [ebp - 0xcc], 0xfffffff7
mov dword [ebp - 0x2ec], 0xf13e13a6
mov dword [ebp - 0xdc], 0x8fb0b44
mov dword [ebp - 0xf4], 0x58e92eda
mov dword [ebp - 0x3c8], 0x6501874d
push 3
lea ecx, [ebp - 0x378]
call fcn.004013fc
mov dword [ebp - 0x2e4], 5
mov dword [ebp - 0x348], 0x82e77e81
mov dword [ebp - 0xe4], 0xfffc
mov dword [ebp - 0x34c], 0xfffffff7
mov dword [ebp - 0xa4], 0
jmp 0x447937
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x447956
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x378]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x44792a
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xcc], eax
jge 0x447970
mov dword [ebp - 0x1d4], 1
jmp 0x447977
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0xf4]
jl 0x447998
mov dword [ebp - 0x2dc], 1
jmp 0x44799f
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0xdc]
sub eax, 0xe005
sub eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0xd4]
jl 0x4479c4
mov dword [ebp - 0x1dc], 1
jmp 0x4479cb
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xcd21
je 0x4479ef
mov dword [ebp - 0x1e4], 1
jmp 0x4479f6
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x1e4], eax
je 0x447a10
mov dword [ebp - 0x1ec], 1
jmp 0x447a17
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x1ec], eax
jl 0x447a31
mov dword [ebp - 0x1f4], 1
jmp 0x447a38
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x1f4], eax
jl 0x447a52
mov dword [ebp - 0x1fc], 1
jmp 0x447a59
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x1fc], eax
jl 0x447a7c
cmp dword [ebp - 0xdc], 0
je 0x447a7c
mov dword [ebp - 0x20c], 1
jmp 0x447a83
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xec]
sub ecx, eax
neg ecx
mov dword [ebp - 0x204], ecx
push 1
lea ecx, [ebp - 0x378]
call fcn.004014ea
mov ecx, dword [ebp - 0x204]
mov dword [eax], ecx
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x20c]
inc ecx
cmp eax, ecx
jne 0x447aee
mov eax, 0xd9236f91
test eax, eax
je 0x447aee
mov dword [ebp - 0x21c], 1
jmp 0x447af5
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x348]
add ecx, dword [ebp - 0x21c]
add eax, ecx
imul eax, dword [ebp - 0x2ec]
test eax, eax
je 0x447b29
mov eax, 0x32a5b4d6
test eax, eax
je 0x447b29
mov dword [ebp - 0x224], 1
jmp 0x447b30
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xf4], eax
lea ecx, [ebp - 0x378]
call fcn.004014ce
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x24], 0xca4f833f
mov dword [ebp - 0xac], 0
jmp 0x447b73
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x447b8f
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x440], 1
jmp 0x447b66
mov dword [ebp - 0x24], 2
jmp 0x447b9f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x447bbb
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x447bb9
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x447b98
mov dword [ebp - 0x24], 0
jmp 0x447bcb
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x447bfc
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x447bfa
push 0
push 0x79a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
jmp 0x447bc4
mov eax, dword [ebp - 0x298]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2a0]
mov ecx, dword [ecx]
mov dword [eax + 8], ecx
jmp 0x447feb
push 4
lea ecx, [ebp - 0x408]
call fcn.004013fc
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x2a8], 0xffffffff
mov dword [ebp - 0x114], 0xdc5336de
mov dword [ebp - 0x14], 0
jmp 0x447c4f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x447c6b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x408]
call fcn.004014ea
mov dword [eax], 0xffff
jmp 0x447c48
mov dword [ebp - 0x14], 0
jmp 0x447c7b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x447c91
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x320], 0x2167fa5c
jmp 0x447c74
mov dword [ebp - 0xb4], 0
jmp 0x447caa
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jg 0x447ccc
mov dword [ebp - 0x22c], 0xd9a924c0
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
jmp 0x447c9d
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
cmp dword [ebp + eax - 0x320], ecx
jle 0x447ced
mov dword [ebp - 0x118], 1
jmp 0x447cf4
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x320]
mov dword [ebp - 0x414], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x114], eax
jge 0x447d27
mov dword [ebp - 0x120], 1
jmp 0x447d2e
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x120]
jge 0x447d48
mov dword [ebp - 0x128], 1
jmp 0x447d4f
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2a8]
imul ecx, dword [ebp - 0x128]
cmp dword [ebp + eax - 0x320], ecx
jne 0x447d76
mov dword [ebp - 0x130], 1
jmp 0x447d7d
and dword [ebp - 0x130], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x320], ecx
lea ecx, [ebp - 0x408]
call fcn.004014ce
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x5c], 0xdf99ff60
mov dword [ebp - 0x3d0], 0x6507e673
mov dword [ebp - 0x3fc], 0xeb200688
push 2
lea ecx, [ebp - 0x39c]
call fcn.004013fc
mov dword [ebp - 0x104], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xbc], 0
jmp 0x447dfb
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x447e1a
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x39c]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x447dee
mov dword [ebp - 0x5c], 0
jmp 0x447e2a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x17
jl 0x447fbb
mov dword [ebp - 0x2c8], 0xcf1813f1
mov dword [ebp - 0x140], 0xfffffff6
mov dword [ebp - 0x3d8], 2
push 3
lea ecx, [ebp - 0x384]
call fcn.004013fc
mov dword [ebp - 0x78], 0
jmp 0x447e6f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x447e88
push dword [ebp - 0x78]
lea ecx, [ebp - 0x384]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x447e68
cmp dword [ebp - 0x5c], 0
jne 0x447e9c
xor eax, eax
inc eax
jne 0x447e9c
and dword [ebp - 0x158], 0
jmp 0x447ea6
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 6
ja 0x447ec8
mov dword [ebp - 0x2b8], 1
jmp 0x447ecf
and dword [ebp - 0x2b8], 0
xor eax, eax
inc eax
je 0x447ee6
cmp dword [ebp - 0x5c], 0
je 0x447ee6
mov dword [ebp - 0x2c0], 1
jmp 0x447eed
and dword [ebp - 0x2c0], 0
xor eax, eax
inc eax
cmp eax, 0x3e01
jb 0x447f03
mov dword [ebp - 0x138], 1
jmp 0x447f0a
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x140]
jne 0x447f2a
mov dword [ebp - 0x148], 1
jmp 0x447f31
and dword [ebp - 0x148], 0
imul esi, dword [ebp - 0x148], 5
push 0
lea ecx, [ebp - 0x39c]
call fcn.004014ea
cmp esi, dword [eax]
jle 0x447f55
mov dword [ebp - 0x150], 1
jmp 0x447f5c
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x150]
cmp dword [ebp - 0x158], eax
jle 0x447f8f
mov dword [ebp - 0x160], 1
jmp 0x447f96
and dword [ebp - 0x160], 0
push 0
lea ecx, [ebp - 0x384]
call fcn.004014ea
mov ecx, dword [ebp - 0x160]
mov dword [eax], ecx
lea ecx, [ebp - 0x384]
call fcn.004014ce
jmp 0x447e23
lea ecx, [ebp - 0x39c]
call fcn.004014ce
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
movzx eax, byte [eax]
test eax, eax
je 0x447feb
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
jmp 0x448005
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2e0], eax
push 0
push dword [ebp - 0x2e0]
call fcn.00448040
pop ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret