Function at 0x10045a15
Capabilities:
Query or enumerate registry value
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa78
push esi
push edi
mov dword [ebp - 0x54], 0xfffffff6
mov dword [ebp - 0x184], 0
jmp 0x10045a40
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x10045a5c
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x19c], 0xb34e6d4f
jmp 0x10045a33
mov dword [ebp - 0x54], 0x12
jmp 0x10045a6c
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x10
jge 0x10045a8b
mov dword [ebp - 0x31c], 0xe1d925b0
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
jmp 0x10045a65
mov dword [ebp - 0x54], 0
jmp 0x10045a9b
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10045b14
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x128], 0
jmp 0x10045ac4
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x10045af8
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x19c]
mov dword [ebp - 0x840], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
neg eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp + ecx*4 - 0x19c], eax
jmp 0x10045ab7
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10045b12
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
jmp 0x10045a94
mov dword [ebp - 0x78], 0x76820624
mov dword [ebp - 0x768], 0x76ff55e0
mov dword [ebp - 0x764], 0x76ff55e0
mov dword [ebp - 0x760], 0x76ff55e0
mov dword [ebp - 0x75c], 0x76ff55e0
mov dword [ebp - 0xb0], 0x73ff82f
mov dword [ebp - 0x21c], 0x20bd2ab
mov dword [ebp - 0x1e0], 6
mov dword [ebp - 0x604], 0xec2184e5
mov dword [ebp - 0x58], 0
jmp 0x10045b7b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10045b91
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x224], 0x969161d5
jmp 0x10045b74
mov dword [ebp - 0x58], 0
jmp 0x10045ba1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10045bb7
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x6e4], 1
jmp 0x10045b9a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x224], 0
mov eax, dword [ebp - 0xb0]
neg eax
add eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 0
jne 0x10045c03
mov dword [ebp - 0x548], 1
jmp 0x10045c0a
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x548], 0x5cb8
jne 0x10045c22
mov dword [ebp - 0x534], 1
jmp 0x10045c29
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x534], eax
je 0x10045c43
mov dword [ebp - 0x53c], 1
jmp 0x10045c4a
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x53c]
jg 0x10045c70
mov dword [ebp - 0x634], 1
jmp 0x10045c77
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x8a4], eax
push 0xfffffffffffffffa
pop eax
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x224], ecx
mov dword [ebp - 0x78], 0
jmp 0x10045cc5
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xd
jg 0x10045e7f
mov dword [ebp - 0x10c], 2
mov dword [ebp - 0x6f4], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x10045cf3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10045d09
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf4], 1
jmp 0x10045cec
mov dword [ebp - 0x20], 0
jmp 0x10045d19
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10045d2f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1a8], 0x3690f1d8
jmp 0x10045d12
mov dword [ebp - 0x20], 0
jmp 0x10045d3f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10045d55
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9e4], 2
jmp 0x10045d38
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp + ecx - 0x1a8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xf4]
push 4
pop edx
imul edx, edx, 0
imul edx, dword [ebp + edx - 0x1a8], 0
add ecx, edx
cmp dword [ebp + eax - 0xf4], ecx
jne 0x10045da7
mov dword [ebp - 0x544], 1
jmp 0x10045dae
and dword [ebp - 0x544], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x544], eax
jg 0x10045dcf
mov dword [ebp - 0x6ec], 1
jmp 0x10045dd6
and dword [ebp - 0x6ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x8ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x8b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
mov dword [ebp - 0x8bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
neg eax
cmp eax, 0x9bdba76a
jne 0x10045e31
mov dword [ebp - 0x22c], 1
jmp 0x10045e38
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x6f4], eax
mov dword [ebp - 0x10c], 0
jmp 0x10045e5d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jg 0x10045e7a
mov eax, dword [ebp - 0x10c]
cmp dword [ebp + eax*4 - 0x768], 0
je 0x10045e78
jmp 0x10045e7a
jmp 0x10045e50
jmp 0x10045cbe
mov dword [ebp - 0x80], 0xc176b0f7
mov dword [ebp - 0x788], 0xbc657e3b
mov dword [ebp - 0x784], 0xbc657e3b
mov dword [ebp - 0x780], 0xbc657e3b
mov dword [ebp - 0x77c], 0xbc657e3b
mov dword [ebp - 0x57c], 1
mov dword [ebp - 0x264], 0x4bbc1846
mov dword [ebp - 0x738], 0xffffffff
mov dword [ebp - 0x178], 0
jmp 0x10045ee5
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 4
jge 0x10045f01
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x20c], 0xfffffffc
jmp 0x10045ed8
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0
jmp 0x10045f18
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x1004628d
mov dword [ebp - 4], 7
mov dword [ebp - 0x104], 0x14b81230
mov dword [ebp - 4], 0
jmp 0x10045f43
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x10046288
mov dword [ebp - 0x274], 0x24e228c5
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x20c], 0
jne 0x10045f70
mov dword [ebp - 0x554], 1
jmp 0x10045f77
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x20c], ecx
jne 0x10045f92
mov dword [ebp - 0x6fc], 1
jmp 0x10045f99
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x20c]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x20c], 0
jg 0x10045fcb
mov dword [ebp - 0x54c], 1
jmp 0x10045fd2
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x54c]
sub eax, 4
je 0x10045fef
cmp dword [ebp - 4], 0
je 0x10045fef
mov dword [ebp - 0x234], 1
jmp 0x10045ff6
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x788], 0x110bc03d
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x554]
lea eax, [ecx + eax - 0x110bc03d]
cmp eax, dword [ebp - 0x80]
jle 0x1004602b
mov dword [ebp - 0x23c], 1
jmp 0x10046032
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x23c]
test eax, eax
je 0x10046053
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10046053
mov dword [ebp - 0x55c], 1
jmp 0x1004605a
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0xfe9f4864
je 0x10046072
mov dword [ebp - 0x244], 1
jmp 0x10046079
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 6
jbe 0x1004608e
mov dword [ebp - 0x564], 1
jmp 0x10046095
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x20c]
cmp eax, dword [ebp - 4]
jl 0x100460c5
mov dword [ebp - 0x24c], 1
jmp 0x100460cc
and dword [ebp - 0x24c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
add eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x20c], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x56c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x56c]
mov dword [ebp + eax - 0x788], ecx
cmp dword [ebp - 0x56c], 0xdcb0c7b2
jae 0x10046126
cmp dword [ebp - 4], 0
je 0x10046126
mov dword [ebp - 0x254], 1
jmp 0x1004612d
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x254], eax
jle 0x10046151
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x20c], 0
je 0x10046151
mov dword [ebp - 0x574], 1
jmp 0x10046158
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 0x5412
jne 0x10046170
mov dword [ebp - 0x25c], 1
jmp 0x10046177
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x264], eax
je 0x100461af
cmp dword [ebp - 0x104], 0
je 0x100461af
mov dword [ebp - 0x704], 1
jmp 0x100461b6
and dword [ebp - 0x704], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x104], eax
jle 0x100461d7
mov dword [ebp - 0x584], 1
jmp 0x100461de
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x20c]
cmp dword [ebp - 0x584], eax
jle 0x100461fc
mov dword [ebp - 0x26c], 1
jmp 0x10046203
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x26c]
je 0x1004621a
mov dword [ebp - 0x58c], 1
jmp 0x10046221
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x20c]
sub eax, dword [ebp - 0x58c]
mov dword [ebp - 0x738], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x788]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 4]
cmp eax, 0xb307
jg 0x10046266
mov dword [ebp - 0x594], 1
jmp 0x1004626d
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x20c]
add eax, dword [ebp - 0x594]
mov dword [ebp - 0x104], eax
jmp 0x10045f3c
jmp 0x10045f11
mov dword [ebp - 0x78], 0
jmp 0x1004629d
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff1
je 0x10046c3e
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xe8], 0x5b9b55bb
mov dword [ebp - 0x284], 0xedad94e8
mov dword [ebp - 0xe8], 0
jmp 0x100462de
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xfffffff2
jge 0x10046432
mov dword [ebp - 0x130], 0
jmp 0x10046304
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x10046320
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x610], 0xbdbdf7c
jmp 0x100462f7
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x8d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x610], 0x82d5
jle 0x1004634b
mov dword [ebp - 0x27c], 1
jmp 0x10046352
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0
jl 0x10046367
mov dword [ebp - 0x59c], 1
jmp 0x1004636e
and dword [ebp - 0x59c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x610]
cmp dword [ebp - 0x59c], eax
jl 0x10046391
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x610], 0
mov dword [ebp - 0x284], 0xfffffffd
cmp dword [ebp - 0x284], 0xfffffff7
je 0x100463b0
mov dword [ebp - 0x5a4], 1
jmp 0x100463b7
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0xa5f34bda
je 0x100463cf
mov dword [ebp - 0x28c], 1
jmp 0x100463d6
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x28c], eax
jne 0x100463f2
or eax, 0xffffffff
jne 0x100463f2
and dword [ebp - 0x5ac], 0
jmp 0x100463fc
mov dword [ebp - 0x5ac], 1
imul eax, dword [ebp - 0x5ac], 0x9d73
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x610], eax
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1004642d
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x100462d1
cmp dword [ebp - 0xb8], 0
je 0x10046440
jmp 0x10046c3e
mov dword [ebp - 0x180], 0
jmp 0x10046459
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x10046475
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x630], 0x68206240
jmp 0x1004644c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x630], 0xffffffee
jmp 0x100464a3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x630]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x630], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x630], 0x15
jne 0x100464d9
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x100464d7
push 0x9f3
push 0x1501
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x10046488
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x100464f8
push 0
push 0x22f6
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp dword [ebp - 0xb8], 0
je 0x10046c1c
mov dword [ebp - 0xdc], 0xfffffffd
mov eax, dword [ebp - 0x78]
neg eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xdc], 0
jmp 0x10046533
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jg 0x10046c1a
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x6cc], 0xfffffff7
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x640], 6
mov dword [ebp - 0x70], 0
jmp 0x10046582
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10046598
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x740], 0xb78acc4b
jmp 0x1004657b
mov dword [ebp - 0x70], 0
jmp 0x100465a8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x100465be
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x1d0], 0x4a90c6d2
jmp 0x100465a1
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x294], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x740], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d0]
add eax, dword [ebp - 0x294]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
cmp dword [ebp - 0xf8], eax
je 0x10046629
mov dword [ebp - 0x29c], 1
jmp 0x10046630
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0xf8]
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1004664f
mov eax, 0x8787d636
test eax, eax
jne 0x1004664f
and dword [ebp - 0x5bc], 0
jmp 0x10046659
mov dword [ebp - 0x5bc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5bc]
sub ecx, dword [ebp + eax - 0x1d0]
cmp ecx, 0x3e86
jle 0x10046680
mov dword [ebp - 0x2a4], 1
jmp 0x10046687
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0xfffffffb
je 0x1004669c
mov dword [ebp - 0x5c4], 1
jmp 0x100466a3
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0x40e1
je 0x100466bb
mov dword [ebp - 0x2ac], 1
jmp 0x100466c2
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0xa3c3d214
jne 0x100466da
mov dword [ebp - 0x5cc], 1
jmp 0x100466e1
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0xccd20446
jbe 0x100466f9
mov dword [ebp - 0x2b4], 1
jmp 0x10046700
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x2b4], eax
jge 0x1004671a
mov dword [ebp - 0x5d4], 1
jmp 0x10046721
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1d0]
cmp eax, 0x78e6
jg 0x10046753
mov dword [ebp - 0x5dc], 1
jmp 0x1004675a
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0xb8], 0
jmp 0x1004677f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x100467a6
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x768]
neg eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + ecx*4 - 0x768], eax
jmp 0x10046772
mov dword [ebp - 0x1b0], 0x61f9c28a
mov dword [ebp - 0x8c], 0x1d925b0e
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x728], 0x7d3d
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x8c], 0xffffffe2
jmp 0x100467eb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffe6
jg 0x10046a81
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x650], 0x27a4ef21
mov dword [ebp - 0x138], 0
jmp 0x10046822
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x1004683e
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0xa20], 0xfffffffa
jmp 0x10046815
cmp dword [ebp - 0x8c], 0
je 0x10046980
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
jl 0x1004685f
mov dword [ebp - 0x2c4], 1
jmp 0x10046866
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x2c4], eax
jne 0x1004687d
mov dword [ebp - 0x6dc], 1
jmp 0x10046884
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x918], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xfffffffa
jl 0x100468bd
mov dword [ebp - 0x5e4], 1
jmp 0x100468c4
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x5e4], eax
jl 0x100468de
mov dword [ebp - 0x648], 1
jmp 0x100468e5
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x68], eax
jle 0x10046905
mov dword [ebp - 0x5ec], 1
jmp 0x1004690c
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5ec], eax
jne 0x10046923
mov dword [ebp - 0x2d0], 1
jmp 0x1004692a
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
sub eax, dword [ebp - 0x68]
cmp eax, 5
jge 0x10046944
mov dword [ebp - 0x478], 1
jmp 0x1004694b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x478], eax
jge 0x10046962
mov dword [ebp - 0x2d8], 1
jmp 0x10046969
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x2d8], eax
jle 0x10046980
mov dword [ebp - 0x5e8], 1
jmp 0x10046987
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5e8], eax
je 0x100469a1
cmp dword [ebp - 0x44], 0
jne 0x100469a1
and dword [ebp - 0x2e0], 0
jmp 0x100469ab
mov dword [ebp - 0x2e0], 1
mov eax, dword [ebp - 0x2e0]
sub eax, dword [ebp - 0x68]
cmp eax, 1
jb 0x100469c5
mov dword [ebp - 0x480], 1
jmp 0x100469cc
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x480]
test eax, eax
je 0x100469ec
cmp dword [ebp - 0x8c], 0
je 0x100469ec
and dword [ebp - 0x6d8], 0
jmp 0x100469f6
mov dword [ebp - 0x6d8], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x728], 0
je 0x10046a26
cmp dword [ebp - 0x1b0], 0
je 0x10046a26
mov dword [ebp - 0x2e8], 1
jmp 0x10046a2d
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x2e8], eax
jl 0x10046a44
mov dword [ebp - 0x550], 1
jmp 0x10046a4b
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0x5faafe30
jle 0x10046a63
mov dword [ebp - 0x2f0], 1
jmp 0x10046a6a
and dword [ebp - 0x2f0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0xa20], ecx
jmp 0x100467de
mov byte [ebp - 0xab], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x660], 0x31ea062
mov dword [ebp - 0x4c], 0
jmp 0x10046aa9
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff1
je 0x10046bc8
mov dword [ebp - 0x188], 8
mov dword [ebp - 0x488], 5
mov dword [ebp - 0x97c], 0xffffffff
mov dword [ebp - 0x984], 0xdfddae9
mov dword [ebp - 0x300], 0x94ff5452
cmp dword [ebp - 0x188], 0
je 0x10046af3
jmp 0x10046bc8
mov dword [ebp - 0x488], 2
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x488], eax
jle 0x10046b17
mov dword [ebp - 0x490], 1
jmp 0x10046b1e
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x188], eax
je 0x10046b41
mov dword [ebp - 0x2f8], 1
jmp 0x10046b48
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
dec eax
cmp eax, dword [ebp - 0x4c]
jl 0x10046b60
mov dword [ebp - 0x5b8], 1
jmp 0x10046b67
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x5b8], eax
jle 0x10046b84
cmp dword [ebp - 0x300], 0
jne 0x10046b84
and dword [ebp - 0x658], 0
jmp 0x10046b8e
mov dword [ebp - 0x658], 1
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x490]
add eax, 0x3bb2669c
jne 0x10046bb3
mov dword [ebp - 0x6e0], 1
jmp 0x10046bba
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x660], eax
jmp 0x10046aa2
mov dword [ebp - 0x4c], 0xffffffe4
jmp 0x10046bd8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe9
jle 0x10046c00
mov dword [ebp - 0x72c], 0xf23d37f4
mov dword [ebp - 0x668], 0xaffa898c
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x668], eax
jmp 0x10046bd1
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10046c15
push 0
push 0
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
jmp 0x10046526
jmp 0x10046c39
mov dword [ebp - 0x6e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x768]
mov dword [ebp - 0x6e8], eax
jmp 0x10046296
mov dword [ebp - 0x11c], 3
mov dword [ebp - 0x4a0], 0xe713a473
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x498], 0x4f77722a
mov dword [ebp - 0x9a8], 0xffffffff
mov dword [ebp - 0x7a8], 0x711a
mov dword [ebp - 0x7a4], 0x711a
mov dword [ebp - 0x7a0], 0x711a
mov dword [ebp - 0x79c], 0x711a
mov dword [ebp - 0x320], 0xa2f
mov dword [ebp - 0x730], 1
mov dword [ebp - 0x140], 0
jmp 0x10046cc5
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x10046ce1
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x7cc], 0xd513c61c
jmp 0x10046cb8
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x9b0], eax
cmp dword [ebp - 0x11c], 0
je 0x10046da5
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x7e8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7a8]
dec eax
mov dword [ebp - 0x308], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x7a8], ecx
cmp dword [ebp - 0x308], 0
je 0x10046d78
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7cc], 0xffffffff
ja 0x10046d50
mov dword [ebp - 0x558], 1
jmp 0x10046d57
and dword [ebp - 0x558], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x558]
sub ecx, dword [ebp + eax - 0x7a8]
je 0x10046d78
mov dword [ebp - 0x310], 1
jmp 0x10046d7f
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x498], eax
jl 0x10046da5
mov dword [ebp - 0x318], 1
jmp 0x10046dac
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x670]
imul eax, dword [ebp - 0x318]
cmp eax, 1
jb 0x10046dca
mov dword [ebp - 0x5f8], 1
jmp 0x10046dd1
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x328], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x328]
mov dword [ebp + eax - 0x7cc], ecx
mov eax, dword [ebp - 0x4a0]
cmp eax, dword [ebp - 0x328]
jg 0x10046e22
mov dword [ebp - 0x560], 1
jmp 0x10046e29
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x84], 0xce125d16
mov dword [ebp - 0x678], 0xfffffffe
mov dword [ebp - 0x190], 0
jmp 0x10046e62
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x10046e7e
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x928], 0
jmp 0x10046e55
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10046ea7
push 0x1cad
push 0
push 0x1c77
push 0x1230
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x928]
mov dword [ebp - 0x8f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x928]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x700], 9
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x5c], 0x55fff839
mov dword [ebp - 0xc0], 0x3d37f4a1
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x798], 1
mov dword [ebp - 0x794], 1
mov dword [ebp - 0x790], 1
mov dword [ebp - 0x78c], 1
cmp dword [ebp - 0x18], 0
jne 0x10046f8c
cmp dword [ebp - 0x18], 0
je 0x10046f3d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
jne 0x10046f4c
cmp dword [ebp - 0x18], 0
jne 0x10046f4c
and dword [ebp - 0x330], 0
jmp 0x10046f56
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0x18]
jl 0x10046f71
mov dword [ebp - 0x4a8], 1
jmp 0x10046f78
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4a8], eax
jl 0x10046f8c
and dword [ebp - 0x338], 0
jmp 0x10046f96
mov dword [ebp - 0x338], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x338]
jle 0x10046fad
mov dword [ebp - 0x5c0], 1
jmp 0x10046fb4
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x5c0]
jne 0x10046fcb
mov dword [ebp - 0x340], 1
jmp 0x10046fd2
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0
je 0x10046fe7
mov dword [ebp - 0x6f0], 1
jmp 0x10046fee
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x900], eax
mov eax, dword [ebp - 0x18]
add eax, 0x6085e071
je 0x100470d9
mov dword [ebp - 0x198], 9
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x198], 0
jne 0x1004702a
cmp dword [ebp - 0x198], 0
je 0x1004703b
xor eax, eax
inc eax
je 0x1004703b
mov dword [ebp - 0x4b0], 1
jmp 0x10047042
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
sub eax, dword [ebp - 0x198]
cmp eax, 0xe58e
jge 0x10047061
mov dword [ebp - 0x348], 1
jmp 0x10047068
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x10047083
cmp dword [ebp - 0x18], 0
je 0x100470a1
cmp dword [ebp - 0x198], 0
je 0x100470a1
cmp dword [ebp - 0xc0], 0
je 0x100470a1
mov dword [ebp - 0x568], 1
jmp 0x100470a8
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
neg eax
cmp dword [ebp - 0x5c], eax
jl 0x100470c1
mov dword [ebp - 0x350], 1
jmp 0x100470c8
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x9c], eax
jmp 0x100473a4
mov dword [ebp - 0x110], 0x39c1d55e
mov dword [ebp - 0xc8], 0xfffffffc
mov dword [ebp - 0x9c], 0
jmp 0x10047106
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jg 0x100473a4
mov dword [ebp - 0x7c4], 0xfc39fa23
mov dword [ebp - 0x7c0], 0xfc39fa23
mov dword [ebp - 0x7bc], 0xfc39fa23
mov dword [ebp - 0x7b8], 0xfc39fa23
mov dword [ebp - 0x5c], 0
jmp 0x1004714b
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x1004731d
mov dword [ebp - 0x680], 1
mov dword [ebp - 0xc0], 3
jmp 0x10047178
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10047318
mov dword [ebp - 0x1ec], 2
mov dword [ebp - 0x18], 0
jmp 0x1004719f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x10047309
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x14c], 0
jmp 0x100471cc
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x100471e8
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0xa08], 0x4446
jmp 0x100471bf
mov eax, dword [ebp - 0x9c]
cmp dword [ebp + eax*4 - 0x798], 0
je 0x100471fd
jmp 0x10047309
cmp dword [ebp - 0x680], 1
jle 0x10047212
mov dword [ebp - 0x4b8], 1
jmp 0x10047219
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jne 0x10047240
cmp dword [ebp - 0x1ec], 0
jne 0x10047240
and dword [ebp - 0x358], 0
jmp 0x1004724a
mov dword [ebp - 0x358], 1
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x798]
cmp dword [ebp - 0x358], eax
jg 0x1004726b
mov dword [ebp - 0x734], 1
jmp 0x10047272
and dword [ebp - 0x734], 0
xor eax, eax
neg eax
je 0x100472f1
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x118], 0x37d
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x8f4], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xc8]
cmp eax, 0xffff
je 0x100472cf
mov dword [ebp - 0x5f0], 1
jmp 0x100472d6
and dword [ebp - 0x5f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c4]
add eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x688], eax
jmp 0x10047304
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0xa08], ecx
jmp 0x10047198
mov dword [ebp - 0xc8], 0x26b13122
jmp 0x1004716b
jmp 0x10047144
mov dword [ebp - 0x5c], 3
jmp 0x1004732d
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1004739f
mov dword [ebp - 0xc8], 0
jmp 0x1004734c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 4
jge 0x10047368
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x798], 0x1cf
jmp 0x1004733f
mov dword [ebp - 0x110], 0
jmp 0x10047381
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x1004739d
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x7c4], 0xd6df81f9
jmp 0x10047374
jmp 0x10047326
jmp 0x100470f9
mov dword [ebp - 0x174], 0
jmp 0x100473bd
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x100473d9
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x9f0], 0xfff6
jmp 0x100473b0
mov dword [ebp - 0x84], 2
jmp 0x100473f2
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1004750d
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x154], 0
jmp 0x1004741f
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1004743b
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x1b8], 0xb34e6d4f
jmp 0x10047412
mov dword [ebp - 0x50], 0x12
jmp 0x1004744b
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x10
jge 0x1004746a
mov dword [ebp - 0x360], 0xe1d925b0
mov eax, dword [ebp - 0x360]
dec eax
mov dword [ebp - 0x360], eax
jmp 0x10047444
mov dword [ebp - 0x50], 0
jmp 0x1004747a
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x100474f3
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x194], 0
jmp 0x100474a3
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x100474d7
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1b8]
mov dword [ebp - 0x808], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
neg eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp + ecx*4 - 0x1b8], eax
jmp 0x10047496
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x100474f1
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
jmp 0x10047473
mov dword [ebp - 0x6f8], 0xf782
cmp dword [ebp - 0x6f8], 0
je 0x10047508
jmp 0x1004750d
jmp 0x100473e5
mov dword [ebp - 0x15c], 0
jmp 0x10047526
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jge 0x10047542
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x628], 0xdf99ff60
jmp 0x10047519
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x628], 0
jmp 0x10047570
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x628]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x628], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x628], 0xfffffff9
jne 0x100475b6
mov dword [ebp - 0x690], 0x6a48
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x100475a9
push 0
push 0xac5
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
cmp dword [ebp - 0x690], 0
je 0x100475b4
jmp 0x100475b6
jmp 0x10047555
mov dword [ebp - 0x84], 9
jmp 0x100475cf
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 8
jge 0x10047883
mov dword [ebp - 0xf0], 0xfffffffd
mov dword [ebp - 0x88], 0x1cecb457
mov dword [ebp - 0x164], 0x87a9b65c
mov dword [ebp - 0x388], 0xfffffffe
mov dword [ebp - 0x698], 1
mov dword [ebp - 0x17c], 0
jmp 0x10047627
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x10047643
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x714], 0x7e434392
jmp 0x1004761a
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x990], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf0]
cmp dword [ebp + eax - 0x714], ecx
jge 0x1004767c
mov dword [ebp - 0x4c0], 1
jmp 0x10047683
and dword [ebp - 0x4c0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x714]
cmp dword [ebp - 0x4c0], eax
jne 0x100476a3
mov dword [ebp - 0x368], 1
jmp 0x100476aa
and dword [ebp - 0x368], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x714]
cmp dword [ebp - 0x368], eax
jg 0x100476ca
mov dword [ebp - 0x570], 1
jmp 0x100476d1
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x570], eax
jge 0x100476f4
mov eax, 0x21f
test eax, eax
je 0x100476f4
mov dword [ebp - 0x370], 1
jmp 0x100476fb
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x370]
jne 0x1004771b
mov dword [ebp - 0x4c8], 1
jmp 0x10047722
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0xdd5d
jle 0x1004773a
mov dword [ebp - 0x378], 1
jmp 0x10047741
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x378], eax
jne 0x1004775b
mov dword [ebp - 0x744], 1
jmp 0x10047762
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x810], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x714]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x88]
dec eax
dec eax
cmp eax, dword [ebp - 0xf0]
je 0x100477aa
mov eax, 0x982b
test eax, eax
jne 0x100477aa
push 6
pop eax
test eax, eax
jne 0x100477aa
and dword [ebp - 0x5c8], 0
jmp 0x100477b4
mov dword [ebp - 0x5c8], 1
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x88], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x714]
cmp dword [ebp - 0x88], eax
je 0x100477e0
mov dword [ebp - 0x380], 1
jmp 0x100477e7
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x380], eax
jne 0x10047801
mov dword [ebp - 0x4d0], 1
jmp 0x10047808
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x970], eax
mov eax, 0x2b416c28
test eax, eax
je 0x10047856
cmp dword [ebp - 0x164], 0
je 0x10047856
mov dword [ebp - 0x578], 1
jmp 0x1004785d
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
neg eax
mov dword [ebp - 0x698], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9f0]
mov dword [ebp - 0x700], eax
jmp 0x100475c2
mov dword [ebp - 0x100], 0xfffffffd
mov dword [ebp - 0x90], 0x1cecb457
mov dword [ebp - 0x120], 0x87a9b65c
mov dword [ebp - 0x4e8], 0xfffffffe
mov dword [ebp - 0x73c], 1
mov dword [ebp - 0x18c], 0
jmp 0x100478ce
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x100478ea
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x724], 0x7e434392
jmp 0x100478c1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x820], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x100]
cmp dword [ebp + eax - 0x724], ecx
jge 0x10047923
mov dword [ebp - 0x390], 1
jmp 0x1004792a
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x724]
cmp dword [ebp - 0x390], eax
jne 0x1004794a
mov dword [ebp - 0x4d8], 1
jmp 0x10047951
and dword [ebp - 0x4d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x724]
cmp dword [ebp - 0x4d8], eax
jg 0x10047971
mov dword [ebp - 0x398], 1
jmp 0x10047978
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x398], eax
jge 0x1004799b
mov eax, 0x21f
test eax, eax
je 0x1004799b
mov dword [ebp - 0x600], 1
jmp 0x100479a2
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x600]
jne 0x100479c2
mov dword [ebp - 0x3a0], 1
jmp 0x100479c9
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xdd5d
jle 0x100479e1
mov dword [ebp - 0x4e0], 1
jmp 0x100479e8
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x4e0], eax
jne 0x10047a02
mov dword [ebp - 0x6a0], 1
jmp 0x10047a09
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x904], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x724]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x90]
dec eax
dec eax
cmp eax, dword [ebp - 0x100]
je 0x10047a51
mov eax, 0x982b
test eax, eax
jne 0x10047a51
push 6
pop eax
test eax, eax
jne 0x10047a51
and dword [ebp - 0x3a8], 0
jmp 0x10047a5b
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x90], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x724]
cmp dword [ebp - 0x90], eax
je 0x10047a87
mov dword [ebp - 0x580], 1
jmp 0x10047a8e
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x580], eax
jne 0x10047aa8
mov dword [ebp - 0x3b0], 1
jmp 0x10047aaf
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x830], eax
mov eax, 0x2b416c28
test eax, eax
je 0x10047afd
cmp dword [ebp - 0x120], 0
je 0x10047afd
mov dword [ebp - 0x3b8], 1
jmp 0x10047b04
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
neg eax
mov dword [ebp - 0x73c], eax
push 1
lea eax, [ebp - 0xa48]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.100447a6
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x9fc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x9fc]
lea edi, [ebp - 0x7b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x90c], 7
mov dword [ebp - 0x838], 0xb7d8
mov dword [ebp - 0x5d0], 0x4a276ac1
mov dword [ebp - 0x14], 0
jmp 0x10047b6f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10047b85
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa34], 0x261f9c28
jmp 0x10047b68
mov dword [ebp - 0x14], 0
jmp 0x10047b95
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10047bab
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa58], 4
jmp 0x10047b8e
mov dword [ebp - 0x14], 0
jmp 0x10047bbb
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10047bd1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7dc], 0xccc8
jmp 0x10047bb4
mov dword [ebp - 0x14], 0
jmp 0x10047be1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10047bf7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x978], 0x4e10
jmp 0x10047bda
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7dc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7dc], eax
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x708], 0x76270e7a
mov dword [ebp - 0x7e0], 0x1f7d9671
mov dword [ebp - 0x914], 0xdc0223de
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x940], 1
mov dword [ebp - 0x850], 0x9b95
mov dword [ebp - 0x60], 0
jmp 0x10047c7f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10047c95
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xa68], 0x77c422d5
jmp 0x10047c78
mov dword [ebp - 0x60], 0
jmp 0x10047ca5
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10047cbb
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x938], 0xfff6
jmp 0x10047c9e
mov dword [ebp - 0x16c], 0xac70c309
cmp dword [ebp - 0x16c], 0
jne 0x10047d7a
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x98], eax
je 0x10047cf8
mov dword [ebp - 0x6a8], 1
jmp 0x10047cff
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x98]
sub eax, 0xffff
jne 0x10047d24
mov dword [ebp - 0x3c0], 1
jmp 0x10047d2b
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
sub eax, dword [ebp - 0x98]
cmp eax, 0xcabf
jge 0x10047d50
cmp dword [ebp - 0x98], 0
jne 0x10047d50
and dword [ebp - 0x4f0], 0
jmp 0x10047d5a
mov dword [ebp - 0x4f0], 1
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x4f0]
je 0x10047d7a
cmp dword [ebp - 0x16c], 0
jne 0x10047d7a
and dword [ebp - 0x3c8], 0
jmp 0x10047d84
mov dword [ebp - 0x3c8], 1
cmp dword [ebp - 0x3c8], 0xffffffff
je 0x10047d99
mov dword [ebp - 0x588], 1
jmp 0x10047da0
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x588], eax
jl 0x10047dba
mov dword [ebp - 0x3d0], 1
jmp 0x10047dc1
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x708], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x938]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x938], eax
mov dword [ebp - 0x38], 0xa5273358
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x590], 0x58aae07e
mov dword [ebp - 0x3f0], 5
mov dword [ebp - 0x5d8], 0x97440271
mov dword [ebp - 0x748], 1
mov dword [ebp - 0x944], 0xd3ed23c5
mov dword [ebp - 0x860], 0
mov dword [ebp - 0x92c], 1
mov dword [ebp - 0x868], 0xa1d2
mov dword [ebp - 0x94c], 0x98cbdb62
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x9c4], 0x954eb856
mov dword [ebp - 0x9c0], 0x954eb856
mov dword [ebp - 0x9bc], 0x954eb856
mov dword [ebp - 0x9b8], 0x954eb856
mov dword [ebp - 0x400], 0xb4ab
mov dword [ebp - 0x144], 0
jmp 0x10047ea8
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x10047ec4
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x93c], 0x634d71b3
jmp 0x10047e9b
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jl 0x10047ed8
mov dword [ebp - 0x4f8], 1
jmp 0x10047edf
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x4f8]
jle 0x10047ef6
mov dword [ebp - 0x608], 1
jmp 0x10047efd
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jl 0x10047f23
mov dword [ebp - 0x3d8], 1
jmp 0x10047f2a
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x608], eax
jl 0x10047f53
cmp dword [ebp - 0x38], 0
je 0x10047f53
mov dword [ebp - 0x3e0], 1
jmp 0x10047f5a
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0xdfd
jl 0x10047f75
cmp dword [ebp - 0x38], 0
jne 0x10047f75
and dword [ebp - 0x500], 0
jmp 0x10047f7f
mov dword [ebp - 0x500], 1
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x38]
imul eax, eax, 0x11f3
cmp eax, 0xfffffffb
jne 0x10047f9f
mov dword [ebp - 0x3e8], 1
jmp 0x10047fa6
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0xb91ee4cf
jb 0x10047fd7
mov dword [ebp - 0x508], 1
jmp 0x10047fde
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jge 0x10047ff8
mov dword [ebp - 0x3f8], 1
jmp 0x10047fff
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x880], 7
mov dword [ebp - 0x95c], 0xb7d8
mov dword [ebp - 0x510], 0x4a276ac1
mov dword [ebp - 0x1c], 0
jmp 0x10048052
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10048068
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa3c], 0x261f9c28
jmp 0x1004804b
mov dword [ebp - 0x1c], 0
jmp 0x10048078
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1004808e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa78], 4
jmp 0x10048071
mov dword [ebp - 0x1c], 0
jmp 0x1004809e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100480b4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7d4], 0xccc8
jmp 0x10048097
mov dword [ebp - 0x1c], 0
jmp 0x100480c4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100480da
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x888], 0x4e10
jmp 0x100480bd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7d4], eax
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x40], 0xa5273358
mov dword [ebp - 0x6b8], 0
mov dword [ebp - 0x420], 0x58aae07e
mov dword [ebp - 0x520], 5
mov dword [ebp - 0x430], 0x97440271
mov dword [ebp - 0x718], 1
mov dword [ebp - 0x948], 0xd3ed23c5
mov dword [ebp - 0x890], 0
mov dword [ebp - 0x980], 1
mov dword [ebp - 0x898], 0xa1d2
mov dword [ebp - 0x950], 0x98cbdb62
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x9d8], 0x954eb856
mov dword [ebp - 0x9d4], 0x954eb856
mov dword [ebp - 0x9d0], 0x954eb856
mov dword [ebp - 0x9cc], 0x954eb856
mov dword [ebp - 0x528], 0xb4ab
mov dword [ebp - 0x148], 0
jmp 0x100481c2
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x100481de
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x9b4], 0x634d71b3
jmp 0x100481b5
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
jl 0x100481f2
mov dword [ebp - 0x408], 1
jmp 0x100481f9
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x408]
jle 0x10048210
mov dword [ebp - 0x410], 1
jmp 0x10048217
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
jl 0x1004823d
mov dword [ebp - 0x598], 1
jmp 0x10048244
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x410], eax
jl 0x1004826d
cmp dword [ebp - 0x40], 0
je 0x1004826d
mov dword [ebp - 0x518], 1
jmp 0x10048274
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0xdfd
jl 0x1004828f
cmp dword [ebp - 0x40], 0
jne 0x1004828f
and dword [ebp - 0x418], 0
jmp 0x10048299
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0x418]
sub eax, dword [ebp - 0x40]
imul eax, eax, 0x11f3
cmp eax, 0xfffffffb
jne 0x100482b9
mov dword [ebp - 0x5fc], 1
jmp 0x100482c0
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0xb91ee4cf
jb 0x100482f1
mov dword [ebp - 0x428], 1
jmp 0x100482f8
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
sub eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jge 0x10048312
mov dword [ebp - 0x5a0], 1
jmp 0x10048319
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x528]
dec eax
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x74], 0x76820624
mov dword [ebp - 0x30], 0
jmp 0x10048355
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10048368
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x24], 0xb26bdde0
jmp 0x1004834e
mov dword [ebp - 0x30], 0
jmp 0x10048378
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1004838e
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1a0], 0xffffffff
jmp 0x10048371
mov dword [ebp - 0x30], 0
jmp 0x1004839e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x100483b4
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x9a4], 0xc3167647
jmp 0x10048397
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24], 0xa
jmp 0x100483d9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0x13
jge 0x100489e7
mov dword [ebp - 0x158], 0x56fd8c65
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x2dc], 0x3c25
mov dword [ebp - 0x150], 0
jmp 0x10048421
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x1004843a
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x10], 0xffffffff
jmp 0x10048414
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 0xf
jmp 0x1004845f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 4
jne 0x10048556
mov dword [ebp - 0x438], 0xffffffff
mov dword [ebp - 0x6c0], 0xd60a2215
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x100484a8
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x988], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x8b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x8c0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x9ac], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x10]
cmp dword [ebp + eax - 0x10], ecx
je 0x10048522
mov dword [ebp - 0x5e0], 1
jmp 0x10048529
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 5
ja 0x1004853e
mov dword [ebp - 0x440], 1
jmp 0x10048545
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x6c0], eax
jmp 0x1004844a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x158]
cmp dword [ebp + eax - 0x10], ecx
jge 0x10048574
mov dword [ebp - 0x530], 1
jmp 0x1004857b
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0x90707e2
je 0x10048593
mov dword [ebp - 0x448], 1
jmp 0x1004859a
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0x8fe4
jl 0x100485b2
mov dword [ebp - 0x5a8], 1
jmp 0x100485b9
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0x6f94
jg 0x100485e4
mov eax, 0x9b03be46
test eax, eax
jne 0x100485e4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x100485e4
and dword [ebp - 0x450], 0
jmp 0x100485ee
mov dword [ebp - 0x450], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x450], eax
jne 0x1004860c
mov dword [ebp - 0x538], 1
jmp 0x10048613
and dword [ebp - 0x538], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
sub eax, 4
cmp eax, dword [ebp - 0x538]
jne 0x10048634
mov dword [ebp - 0x458], 1
jmp 0x1004863b
and dword [ebp - 0x458], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp eax, dword [ebp - 0x458]
jle 0x10048659
mov dword [ebp - 0x5f4], 1
jmp 0x10048660
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
inc eax
imul eax, eax, 6
test eax, eax
je 0x10048687
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
je 0x10048687
mov dword [ebp - 0x460], 1
jmp 0x1004868e
and dword [ebp - 0x460], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x460], eax
je 0x100486ac
mov dword [ebp - 0x540], 1
jmp 0x100486b3
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0x6e82a74
jg 0x100486cb
mov dword [ebp - 0x468], 1
jmp 0x100486d2
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
sub eax, 0x3b5b0d6
mov dword [ebp - 0x5b0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp + eax - 0x10], ecx
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x5b0], eax
jle 0x10048839
mov dword [ebp - 0x1d8], 0xffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x8c8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x10048738
mov dword [ebp - 0x1c0], 1
jmp 0x1004873f
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1d8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x10]
cmp eax, dword [ebp - 0x1d8]
jle 0x10048763
mov dword [ebp - 0x470], 1
jmp 0x1004876a
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x470], eax
je 0x10048787
mov dword [ebp - 0x1c8], 0x936bb358
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
sub eax, dword [ebp - 0x2dc]
jne 0x10048943
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a4], 0xf1c2
jle 0x10048884
mov dword [ebp - 0x1e8], 1
jmp 0x1004888b
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x2e4], 0
je 0x100488b9
push 4
pop eax
test eax, eax
je 0x10048956
mov dword [ebp - 0x304], 1
jmp 0x1004895d
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0xfffffffb
ja 0x10048972
mov dword [ebp - 0x758], 0x76ff55e0
mov dword [ebp - 0x754], 0x76ff55e0
mov dword [ebp - 0x750], 0x76ff55e0
mov dword [ebp - 0x74c], 0x76ff55e0
mov dword [ebp - 0x74], 0
jmp 0x10048a1f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xd
jg 0x10049010
mov dword [ebp - 0x114], 2
mov dword [ebp - 0xd0], 0x73ff82f
mov dword [ebp - 0x33c], 0x20bd2ab
mov dword [ebp - 0x1a4], 6
mov dword [ebp - 0x324], 0xec2184e5
mov dword [ebp - 0x6c], 0
jmp 0x10048a6b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10048a81
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x34c], 0x969161d5
jmp 0x10048a64
mov dword [ebp - 0x6c], 0
jmp 0x10048a91
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10048aa7
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x6c8], 1
jmp 0x10048a8a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x34c], 0
mov eax, dword [ebp - 0xd0]
neg eax
add eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x10048af3
mov dword [ebp - 0x32c], 1
jmp 0x10048afa
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0x5cb8
jne 0x10048b12
mov dword [ebp - 0x334], 1
jmp 0x10048b19
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x334], eax
je 0x10048b33
mov dword [ebp - 0x344], 1
jmp 0x10048b3a
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0x344]
jg 0x10048b60
mov dword [ebp - 0x6d0], 1
jmp 0x10048b67
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x8f0], eax
push 0xfffffffffffffffa
pop eax
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x34c], ecx
mov dword [ebp - 0x114], 0
jmp 0x10048bbe
cmp dword [ebp - 0x114], 3
jg 0x1004900b
mov dword [ebp - 0xa0], 0xc176b0f7
mov dword [ebp - 0x778], 0xbc657e3b
mov dword [ebp - 0x774], 0xbc657e3b
mov dword [ebp - 0x770], 0xbc657e3b
mov dword [ebp - 0x76c], 0xbc657e3b
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0x3bc], 0x4bbc1846
mov dword [ebp - 0x63c], 0xffffffff
mov dword [ebp - 0x160], 0
jmp 0x10048c34
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x10048c50
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x1fc], 0xfffffffc
jmp 0x10048c27
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa0], 0
jmp 0x10048c76
cmp dword [ebp - 0xa0], 3
jg 0x10048ff4
mov dword [ebp - 8], 7
mov dword [ebp - 0x108], 0x14b81230
mov dword [ebp - 8], 0
jmp 0x10048ca4
cmp dword [ebp - 8], 3
jg 0x10048fef
mov eax, dword [ebp - 0x114]
cmp dword [ebp + eax*4 - 0x758], 0
je 0x10049006
jmp 0x1004900b
jmp 0x10048bb1
jmp 0x10048a18
mov dword [ebp - 0x74], 0
jmp 0x10049020
cmp dword [ebp - 0x74], 0xfffffff1
je 0x10049b31
mov dword [ebp - 0x64c], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x10049044
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1004905a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xfc], 1
jmp 0x1004903d
mov dword [ebp - 0x2c], 0
jmp 0x1004906a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10049080
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1ac], 0x3690f1d8
jmp 0x10049063
mov dword [ebp - 0x2c], 0
jmp 0x10049090
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100490a6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xa14], 2
jmp 0x10049089
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp + ecx - 0x1ac], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xfc]
push 4
pop edx
imul edx, edx, 0
imul edx, dword [ebp + edx - 0x1ac], 0
add ecx, edx
cmp dword [ebp + eax - 0xfc], ecx
jne 0x100490f8
mov dword [ebp - 0x3ec], 1
jmp 0x100490ff
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x3ec], eax
jg 0x10049120
mov dword [ebp - 0x644], 1
jmp 0x10049127
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x7ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x7f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa14]
mov dword [ebp - 0x7fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
neg eax
cmp eax, 0x9bdba76a
jne 0x10049182
mov dword [ebp - 0x3f4], 1
jmp 0x10049189
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0
je 0x100491ad
jmp 0x10049b31
cmp dword [ebp - 0xd8], 0
je 0x10049997
mov dword [ebp - 0xec], 0xfffffffd
mov dword [ebp - 0xe0], 0x5b9b55bb
mov dword [ebp - 0x40c], 0xedad94e8
mov dword [ebp - 0xe0], 0
jmp 0x100491f1
cmp dword [ebp - 0xe0], 0xfffffff2
jge 0x10049345
mov dword [ebp - 0x168], 0
jmp 0x10049217
mov eax, dword [ebp - 0x74]
neg eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x170], 0
jmp 0x10049369
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x6a4], 0x31ea062
mov dword [ebp - 0x48], 0
jmp 0x100499b8
cmp dword [ebp - 0x48], 0xfffffff1
je 0x10049ad7
mov dword [ebp - 0x12c], 8
mov dword [ebp - 0x4ec], 5
mov dword [ebp - 0x83c], 0xffffffff
mov dword [ebp - 0x844], 0xdfddae9
mov dword [ebp - 0x504], 0x94ff5452
cmp dword [ebp - 0x12c], 0
je 0x10049a02
mov dword [ebp - 0x48], 0xffffffe4
jmp 0x10049ae7
mov dword [ebp - 0x34], 0
jmp 0x10049b41
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10049b54
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x28], 0xb26bdde0
jmp 0x10049b3a
mov dword [ebp - 0x34], 0
jmp 0x10049b64
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10049b7a
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1e4], 0xffffffff
jmp 0x10049b5d
mov dword [ebp - 0x34], 0
jmp 0x10049b8a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10049ba0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x8ec], 0xc3167647
jmp 0x10049b83
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 0xa
jmp 0x10049bc5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0x13
jge 0x1004a1d3
mov dword [ebp - 0x13c], 0x56fd8c65
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0x280], 0x3c25
mov dword [ebp - 0x134], 0
jmp 0x10049c0d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x10049c26
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0xc], 0xffffffff
jmp 0x10049c00
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc], 0xf
jmp 0x10049c4b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 4
jne 0x10049d42
mov dword [ebp - 0x514], 0xffffffff
mov dword [ebp - 0x6c4], 0xd60a2215
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x10049c94
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x864], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x86c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x87c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x884], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
cmp dword [ebp + eax - 0xc], ecx
je 0x10049d0e
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
cmp dword [ebp + eax - 0xc], ecx
jge 0x10049d60
mov dword [ebp - 0x52c], 1
jmp 0x10049d67
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0x90707e2
je 0x10049d7f
cmp dword [ebp - 0x7b4], 0
je 0x1004a1f0
push 3
push dword [ebp - 0x7ac]
push dword [ebp - 0x7b0]
call dword [ebp - 0x7b4]
pop edi
pop esi
mov esp, ebp
pop ebp
ret