Function at 0x44e93b
Capabilities:
Accept command line arguments
Create directory
Create pipe
Create process on windows
Enumerate gui resources
Extract resource via kernel32 functions
Get disk information
Get file attributes
Get file size
Get file system object information
Get geographical location
Get graphical window text
Get memory capacity
Hide graphical window
Query environment variable
Query or enumerate registry value
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3ee0
call fcn.00487890
push esi
push edi
mov dword [ebp - 0x9e4], 0xfffffffb
mov dword [ebp - 0xa18], 0xc3d6
mov dword [ebp - 0x48], 0
jmp 0x44e96e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x44e984
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x13c], 0xe649f6d4
jmp 0x44e967
mov dword [ebp - 0x48], 0
jmp 0x44e994
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x44e9aa
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3c84], 0xfc9b996a
jmp 0x44e98d
mov dword [ebp - 0x48], 0
jmp 0x44e9ba
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x44e9d0
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3bec], 4
jmp 0x44e9b3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x31c8], eax
mov eax, dword [ebp - 0x9e4]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x13c]
je 0x44ea0d
cmp dword [ebp - 0x9e4], 0
jle 0x44ea0d
mov dword [ebp - 0x1378], 1
jmp 0x44ea14
and dword [ebp - 0x1378], 0
mov eax, dword [ebp - 0xa18]
cmp dword [ebp - 0x1378], eax
jge 0x44ea2e
mov dword [ebp - 0x2330], 1
jmp 0x44ea35
and dword [ebp - 0x2330], 0
mov eax, dword [ebp - 0x2330]
sub eax, 0x936b
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3c84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x33cc], eax
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0x33d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x33dc], eax
cmp dword [ebp - 0xa18], 3
jne 0x44ea93
mov dword [ebp - 0x2338], 1
jmp 0x44ea9a
and dword [ebp - 0x2338], 0
mov eax, dword [ebp - 0x9e4]
imul eax, dword [ebp - 0x2338]
sub eax, dword [ebp - 0xa18]
cmp eax, dword [ebp - 0xa18]
jge 0x44ead1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13c], 0
je 0x44ead1
mov dword [ebp - 0x2340], 1
jmp 0x44ead8
and dword [ebp - 0x2340], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x2340], eax
jge 0x44eaf9
mov dword [ebp - 0x2348], 1
jmp 0x44eb00
and dword [ebp - 0x2348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
imul eax, dword [ebp - 0x2348]
test eax, eax
jne 0x44eb2a
mov eax, 0xce3d
test eax, eax
jne 0x44eb2a
and dword [ebp - 0x2350], 0
jmp 0x44eb34
mov dword [ebp - 0x2350], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x2350], eax
jne 0x44eb65
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13c], 0
je 0x44eb65
mov dword [ebp - 0x2358], 1
jmp 0x44eb6c
and dword [ebp - 0x2358], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2358]
mov dword [ebp + eax - 0x3bec], ecx
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0x540], 1
mov dword [ebp - 0x258], 0x47cdedfc
mov dword [ebp - 0xbf8], 0x2f92e6c0
mov dword [ebp - 0x243c], 0xffffffff
mov dword [ebp - 0x1fc], 0
jmp 0x44ebca
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 4
jge 0x44ebe6
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x2658], 0x8d383303
jmp 0x44ebbd
mov dword [ebp - 0x1fc], 0
jmp 0x44ebff
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x44ec1b
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x24a4], 0xffffffff
jmp 0x44ebf2
cmp dword [ebp - 0xa20], 0
je 0x44ed9e
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0xa20], eax
jle 0x44ec42
mov dword [ebp - 0x2360], 1
jmp 0x44ec49
and dword [ebp - 0x2360], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2658]
cmp dword [ebp - 0x2360], eax
je 0x44ec6a
mov dword [ebp - 0x2370], 1
jmp 0x44ec71
and dword [ebp - 0x2370], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2658]
cmp dword [ebp - 0xa20], eax
jl 0x44ec9b
cmp dword [ebp - 0xa20], 0
je 0x44ec9b
mov dword [ebp - 0x2368], 1
jmp 0x44eca2
and dword [ebp - 0x2368], 0
mov eax, dword [ebp - 0x2368]
add eax, 0x2dc71b7a
cmp eax, 0xd3ec
jle 0x44ecc0
mov dword [ebp - 0x2378], 1
jmp 0x44ecc7
and dword [ebp - 0x2378], 0
mov eax, dword [ebp - 0x2370]
imul eax, dword [ebp - 0x2378]
test eax, eax
je 0x44eceb
push 7
pop eax
test eax, eax
je 0x44eceb
mov dword [ebp - 0x2380], 1
jmp 0x44ecf2
and dword [ebp - 0x2380], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2658]
cmp dword [ebp - 0x2380], eax
jge 0x44ed13
mov dword [ebp - 0x2388], 1
jmp 0x44ed1a
and dword [ebp - 0x2388], 0
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0x2388], eax
jle 0x44ed34
mov dword [ebp - 0x2390], 1
jmp 0x44ed3b
and dword [ebp - 0x2390], 0
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0x2390], eax
jge 0x44ed55
mov dword [ebp - 0x2398], 1
jmp 0x44ed5c
and dword [ebp - 0x2398], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x2398], eax
je 0x44ed76
mov dword [ebp - 0x266c], 1
jmp 0x44ed7d
and dword [ebp - 0x266c], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x33e4], eax
cmp dword [ebp - 0xbf8], 0
je 0x44ed9e
mov dword [ebp - 0x297c], 1
jmp 0x44eda5
and dword [ebp - 0x297c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2658]
mov dword [ebp - 0x33ec], eax
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x33f4], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x33fc], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24a4], 3
mov dword [ebp - 0x258], 0
jmp 0x44edfa
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xe
je 0x44f22b
mov dword [ebp - 0x2d8], 0xfffffffa
mov dword [ebp - 0x25f8], 0xfffffffa
mov dword [ebp - 0x25f4], 0xfffffffa
mov dword [ebp - 0x25f0], 0xfffffffa
mov dword [ebp - 0x25ec], 0xfffffffa
mov dword [ebp - 0x298c], 0x8eb8
mov dword [ebp - 0x2994], 1
mov dword [ebp - 0xa28], 0
jmp 0x44ee66
mov eax, dword [ebp - 0xa28]
inc eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 1
jge 0x44ee82
mov eax, dword [ebp - 0xa28]
mov dword [ebp + eax*4 - 0x248c], 0x80e44e38
jmp 0x44ee59
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x3404], eax
cmp dword [ebp - 0x2d8], 0xffffffff
jne 0x44eea3
mov dword [ebp - 0x23a0], 1
jmp 0x44eeaa
and dword [ebp - 0x23a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d8]
imul ecx, dword [ebp - 0x23a0]
cmp dword [ebp + eax - 0x24a4], ecx
jge 0x44eed2
mov dword [ebp - 0x2984], 1
jmp 0x44eed9
and dword [ebp - 0x2984], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24a4]
mov dword [ebp - 0x340c], eax
mov eax, dword [ebp - 0x2d8]
sub eax, dword [ebp - 0x540]
cmp eax, 0x3123
jge 0x44ef0b
mov dword [ebp - 0x23a8], 1
jmp 0x44ef12
and dword [ebp - 0x23a8], 0
mov eax, dword [ebp - 0x23a8]
shl eax, 2
test eax, eax
jne 0x44ef31
cmp dword [ebp - 0x2d8], 0
jne 0x44ef31
and dword [ebp - 0x23b0], 0
jmp 0x44ef3b
mov dword [ebp - 0x23b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24a4]
cmp eax, dword [ebp - 0x23b0]
jg 0x44ef5c
mov dword [ebp - 0x23b8], 1
jmp 0x44ef63
and dword [ebp - 0x23b8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x23b8]
sub ecx, dword [ebp + eax - 0x2658]
cmp ecx, dword [ebp - 0xbf8]
jne 0x44ef8a
mov dword [ebp - 0xae4], 1
jmp 0x44ef91
and dword [ebp - 0xae4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x24a4], ecx
cmp dword [ebp - 0xae4], 0xfffffff6
jle 0x44efba
xor eax, eax
jne 0x44efba
and dword [ebp - 0x242c], 0
jmp 0x44efc4
mov dword [ebp - 0x242c], 1
imul eax, dword [ebp - 0x242c], 0xdbf6
cmp eax, dword [ebp - 0x258]
jg 0x44efe6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2658], 0
je 0x44effb
cmp dword [ebp - 0x2d8], 0
je 0x44effb
mov dword [ebp - 0x2434], 1
jmp 0x44f002
and dword [ebp - 0x2434], 0
mov eax, dword [ebp - 0x2434]
mov dword [ebp - 0x243c], eax
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x25f8], 0xfffffff9
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x44f1d1
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x243c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x25f8]
sub eax, 4
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x25f8]
jg 0x44f061
mov dword [ebp - 0x2444], 1
jmp 0x44f068
and dword [ebp - 0x2444], 0
cmp dword [ebp - 0x2444], 0xdd44351d
je 0x44f080
mov dword [ebp - 0x244c], 1
jmp 0x44f087
and dword [ebp - 0x244c], 0
cmp dword [ebp - 0x244c], 0xa5cd23e8
jne 0x44f0af
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x25f8], 0
je 0x44f0af
mov dword [ebp - 0x2454], 1
jmp 0x44f0b6
and dword [ebp - 0x2454], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24a4]
cmp dword [ebp - 0x2454], eax
jle 0x44f0d7
mov dword [ebp - 0x245c], 1
jmp 0x44f0de
and dword [ebp - 0x245c], 0
mov eax, dword [ebp - 0xbf8]
cmp eax, dword [ebp - 0x245c]
jle 0x44f108
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x248c], 0
je 0x44f108
mov dword [ebp - 0x2464], 1
jmp 0x44f10f
and dword [ebp - 0x2464], 0
mov eax, dword [ebp - 0x298c]
cmp dword [ebp - 0x2464], eax
jg 0x44f129
mov dword [ebp - 0x246c], 1
jmp 0x44f130
and dword [ebp - 0x246c], 0
mov eax, dword [ebp - 0x246c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2658]
jne 0x44f153
mov dword [ebp - 0x2474], 1
jmp 0x44f15a
and dword [ebp - 0x2474], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2658]
cmp dword [ebp - 0x2474], eax
jl 0x44f17b
mov dword [ebp - 0x247c], 1
jmp 0x44f182
and dword [ebp - 0x247c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24a4]
cmp dword [ebp - 0x247c], eax
jl 0x44f1a3
mov dword [ebp - 0x2484], 1
jmp 0x44f1aa
and dword [ebp - 0x2484], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x25f8]
cmp dword [ebp - 0x2484], eax
jge 0x44f1d1
cmp dword [ebp - 0x540], 0
jne 0x44f1d1
and dword [ebp - 0xc00], 0
jmp 0x44f1db
mov dword [ebp - 0xc00], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc00]
mov dword [ebp + eax - 0x24a4], ecx
cmp dword [ebp - 0xc00], 0
jne 0x44f210
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x248c], 0
jne 0x44f210
and dword [ebp - 0x2494], 0
jmp 0x44f21a
mov dword [ebp - 0x2494], 1
mov eax, dword [ebp - 0x2494]
mov dword [ebp - 0x2994], eax
jmp 0x44eded
mov dword [ebp - 0xa30], 1
mov dword [ebp - 0x24d4], 3
mov dword [ebp - 0x3414], 0x5764361a
mov dword [ebp - 0x341c], 5
mov dword [ebp - 0x3424], 0x811fc80a
mov dword [ebp - 0x342c], 0xffffffff
mov dword [ebp - 0x3434], 0xd66de6b9
mov dword [ebp - 0x343c], 1
mov dword [ebp - 0x3444], 0xcef3cf68
mov dword [ebp - 0x344c], 0x96559653
mov dword [ebp - 0x3454], 1
mov dword [ebp - 0x345c], 2
mov dword [ebp - 0x3464], 0x34ab462a
mov dword [ebp - 0x346c], 0xe32883e7
mov dword [ebp - 0x3474], 1
mov dword [ebp - 0x347c], 0x26cdee94
mov dword [ebp - 0x3484], 0xc51ac06e
mov dword [ebp - 0x348c], 0
mov dword [ebp - 0x3494], 0xbecc33ba
mov dword [ebp - 0x349c], 0xfffffffe
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0x144], 0
jmp 0x44f316
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x44f332
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x34a4], 0xcd1ac8c6
jmp 0x44f309
mov dword [ebp - 0x144], 0
jmp 0x44f34b
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x44f367
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x3de0], 0x4fc37f20
jmp 0x44f33e
mov dword [ebp - 0xa30], 0
jmp 0x44f380
mov eax, dword [ebp - 0xa30]
dec eax
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0xa30], 0xfffffffe
jle 0x44f552
mov dword [ebp - 0xf8], 0x5e17ca00
mov dword [ebp - 0x299c], 1
mov dword [ebp - 0xa38], 0
jmp 0x44f3ba
mov eax, dword [ebp - 0xa38]
inc eax
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 1
jge 0x44f3d6
mov eax, dword [ebp - 0xa38]
mov dword [ebp + eax*4 - 0x654], 0x197f0a2
jmp 0x44f3ad
cmp dword [ebp - 0xf8], 0
je 0x44f3e4
jmp 0x44f552
mov dword [ebp - 0xf8], 0
jmp 0x44f3fd
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jg 0x44f54d
mov dword [ebp - 0x24cc], 0x52027495
mov dword [ebp - 0x24cc], 8
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x24cc]
mov dword [ebp - 0x24d4], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x654]
cmp dword [ebp - 0x24d4], eax
je 0x44f451
mov dword [ebp - 0x24dc], 1
jmp 0x44f458
and dword [ebp - 0x24dc], 0
cmp dword [ebp - 0x24dc], 0xffffffff
jg 0x44f46d
mov dword [ebp - 0x24e4], 1
jmp 0x44f474
and dword [ebp - 0x24e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x654]
cmp dword [ebp - 0x24e4], eax
jl 0x44f495
mov dword [ebp - 0x24ec], 1
jmp 0x44f49c
and dword [ebp - 0x24ec], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x654]
cmp eax, dword [ebp - 0x24ec]
jle 0x44f4bd
mov dword [ebp - 0x24f4], 1
jmp 0x44f4c4
and dword [ebp - 0x24f4], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x654]
cmp dword [ebp - 0x24f4], eax
jle 0x44f4e5
mov dword [ebp - 0x1f7c], 1
jmp 0x44f4ec
and dword [ebp - 0x1f7c], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x654]
cmp dword [ebp - 0x1f7c], eax
jge 0x44f513
mov eax, 0x3e45bbbd
test eax, eax
jne 0x44f513
and dword [ebp - 0xd70], 0
jmp 0x44f51d
mov dword [ebp - 0xd70], 1
cmp dword [ebp - 0xd70], 0x889e022a
je 0x44f535
mov dword [ebp - 0x20d8], 1
jmp 0x44f53c
and dword [ebp - 0x20d8], 0
mov eax, dword [ebp - 0x20d8]
mov dword [ebp - 0x299c], eax
jmp 0x44f3f0
jmp 0x44f373
mov eax, dword [ebp - 0xd78]
inc eax
mov dword [ebp - 0xd78], eax
mov dword [ebp - 0xcc], 0x48bbca63
mov dword [ebp - 0xdb8], 1
mov dword [ebp - 0x29ac], 0xfffc
mov dword [ebp - 0x2128], 1
mov dword [ebp - 0xcc], 0xfffffff6
jmp 0x44f5a0
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x17
jne 0x44f96a
mov dword [ebp - 0x2514], 7
mov dword [ebp - 0x2510], 7
mov dword [ebp - 0x250c], 7
mov dword [ebp - 0x2508], 7
mov dword [ebp - 0xdc0], 0x538e5efb
mov dword [ebp - 0x2130], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2514], 1
jge 0x44f605
mov dword [ebp - 0x20e0], 1
jmp 0x44f60c
and dword [ebp - 0x20e0], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x20e0], eax
jg 0x44f928
mov dword [ebp - 0x264], 0x3bf58aae
mov dword [ebp - 0xd98], 0x7dfe98d7
mov dword [ebp - 0x2108], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2514]
cmp dword [ebp - 0x264], eax
jle 0x44f65d
mov dword [ebp - 0xdd0], 1
jmp 0x44f664
and dword [ebp - 0xdd0], 0
xor eax, eax
sub eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
jge 0x44f680
mov dword [ebp - 0xd80], 1
jmp 0x44f687
and dword [ebp - 0xd80], 0
cmp dword [ebp - 0xd80], 0x8406
jge 0x44f69f
mov dword [ebp - 0x20e8], 1
jmp 0x44f6a6
and dword [ebp - 0x20e8], 0
mov eax, dword [ebp - 0x20e8]
sub eax, dword [ebp - 0x264]
cmp eax, dword [ebp - 0x264]
jl 0x44f6c6
mov dword [ebp - 0xd88], 1
jmp 0x44f6cd
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0xd88]
dec eax
cmp eax, 0x6326
jle 0x44f6e7
mov dword [ebp - 0x20f0], 1
jmp 0x44f6ee
and dword [ebp - 0x20f0], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x20f0]
jg 0x44f708
mov dword [ebp - 0xd90], 1
jmp 0x44f70f
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0xd98]
cmp dword [ebp - 0xd90], eax
jge 0x44f729
mov dword [ebp - 0x20f8], 1
jmp 0x44f730
and dword [ebp - 0x20f8], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x20f8], eax
jg 0x44f74a
mov dword [ebp - 0x2100], 1
jmp 0x44f751
and dword [ebp - 0x2100], 0
mov eax, dword [ebp - 0xd98]
cmp dword [ebp - 0x2100], eax
jg 0x44f76b
mov dword [ebp - 0xda0], 1
jmp 0x44f772
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0xda0]
mov dword [ebp - 0x2108], eax
mov eax, dword [ebp - 0x2108]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2514]
add eax, 0x5435d7d2
cmp eax, dword [ebp - 0xcc]
jl 0x44f7aa
mov dword [ebp - 0xda8], 1
jmp 0x44f7b1
and dword [ebp - 0xda8], 0
cmp dword [ebp - 0xda8], 1
jg 0x44f7c6
mov dword [ebp - 0x2110], 1
jmp 0x44f7cd
and dword [ebp - 0x2110], 0
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x2110]
cmp eax, 0xfffa
jbe 0x44f7ed
mov dword [ebp - 0xdb0], 1
jmp 0x44f7f4
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xdb0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2514]
cmp eax, dword [ebp - 0x264]
jg 0x44f81d
mov dword [ebp - 0x2118], 1
jmp 0x44f824
and dword [ebp - 0x2118], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x2118], eax
jle 0x44f83e
mov dword [ebp - 0x29a4], 1
jmp 0x44f845
and dword [ebp - 0x29a4], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x34ac], eax
mov eax, dword [ebp - 0xdb8]
cmp dword [ebp - 0xdb8], eax
jge 0x44f874
cmp dword [ebp - 0x29ac], 0
je 0x44f874
mov dword [ebp - 0x2120], 1
jmp 0x44f87b
and dword [ebp - 0x2120], 0
mov eax, dword [ebp - 0x2120]
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0x2128], eax
cmp dword [ebp - 0x2128], 0
jne 0x44f8ac
cmp dword [ebp - 0xcc], 0
jne 0x44f8ac
cmp dword [ebp - 0x264], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x2514], 0xfffffff9
test eax, eax
jne 0x44f8ce
push 6
pop eax
test eax, eax
jne 0x44f8ce
and dword [ebp - 0xdc8], 0
jmp 0x44f8d8
mov dword [ebp - 0xdc8], 1
mov eax, dword [ebp - 0xdc8]
mov dword [ebp - 0x2130], eax
mov eax, dword [ebp - 0x2130]
imul eax, dword [ebp - 0xdd0]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x2514]
jle 0x44f90c
mov dword [ebp - 0x2138], 1
jmp 0x44f913
and dword [ebp - 0x2138], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2138]
mov dword [ebp + eax - 0x2514], ecx
jmp 0x44f946
mov byte [ebp - 0x43e], 0
movzx eax, byte [ebp - 0x43e]
test eax, eax
je 0x44f946
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
mov byte [ebp - 0x41d], 0
movzx eax, byte [ebp - 0x41d]
test eax, eax
je 0x44f965
push 0x1378
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x44f593
mov dword [ebp - 0x904], 0xfffffffb
mov dword [ebp - 0xf4], 0x1f7e2799
mov dword [ebp - 0xc08], 0x4ad744d0
mov dword [ebp - 0x29b4], 0x44adca1a
mov dword [ebp - 0xf4], 0
jmp 0x44f9ab
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffe6
jg 0x44fafd
mov dword [ebp - 0x564], 0xfffb
mov dword [ebp - 0x29bc], 0xcf456574
mov dword [ebp - 0xa40], 0
jmp 0x44f9e5
mov eax, dword [ebp - 0xa40]
inc eax
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 2
jge 0x44fa01
mov eax, dword [ebp - 0xa40]
mov dword [ebp + eax*4 - 0x3518], 1
jmp 0x44f9d8
mov eax, dword [ebp - 0x564]
imul eax, dword [ebp - 0x564]
cmp eax, dword [ebp - 0xf4]
jne 0x44fa22
mov dword [ebp - 0x2140], 1
jmp 0x44fa29
and dword [ebp - 0x2140], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x34b4], eax
imul eax, dword [ebp - 0xf4], 0xfff8
test eax, eax
je 0x44fa58
cmp dword [ebp - 0x564], 0
je 0x44fa58
mov dword [ebp - 0xdd8], 1
jmp 0x44fa5f
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0xdd8]
imul eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x564]
sub eax, dword [ebp - 0x564]
mov dword [ebp - 0x29b4], eax
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x564]
cmp dword [ebp - 0xf4], eax
je 0x44faa5
mov dword [ebp - 0xde0], 1
jmp 0x44faac
and dword [ebp - 0xde0], 0
mov eax, dword [ebp - 0x2140]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xc08]
cmp eax, dword [ebp - 0xde0]
jge 0x44fad2
mov dword [ebp - 0x2148], 1
jmp 0x44fad9
and dword [ebp - 0x2148], 0
mov eax, dword [ebp - 0x2148]
mov dword [ebp - 0x29bc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3518]
mov dword [ebp - 0xc08], eax
jmp 0x44f99e
mov dword [ebp - 0x6fc], 0xc3d6
mov dword [ebp - 0xa48], 0x865925ef
mov dword [ebp - 0xe00], 0x25f5f996
mov dword [ebp - 0x56c], 0x795ed7c6
mov dword [ebp - 0xc10], 1
mov dword [ebp - 0xdf8], 0x8d92426f
mov dword [ebp - 0x2160], 7
mov dword [ebp - 0x29c4], 0xeb2d3650
mov dword [ebp - 0x29d4], 0x1465
mov dword [ebp - 0x2dfc], 0xd5f49dcb
mov dword [ebp - 0x2df8], 0xd5f49dcb
mov dword [ebp - 0x2df4], 0xd5f49dcb
mov dword [ebp - 0x2df0], 0xd5f49dcb
mov dword [ebp - 0x2170], 0xffffffff
cmp dword [ebp - 0xe00], 0
jne 0x44fc5b
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x34bc], eax
mov eax, dword [ebp - 0xc10]
imul eax, dword [ebp - 0x56c]
cmp eax, dword [ebp - 0x56c]
jne 0x44fbc3
mov dword [ebp - 0xde8], 1
jmp 0x44fbca
and dword [ebp - 0xde8], 0
cmp dword [ebp - 0xde8], 0xf219a6fd
jbe 0x44fbe2
mov dword [ebp - 0x2150], 1
jmp 0x44fbe9
and dword [ebp - 0x2150], 0
cmp dword [ebp - 0x2150], 1
jbe 0x44fbfe
mov dword [ebp - 0xdf0], 1
jmp 0x44fc05
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0x56c]
cmp dword [ebp - 0xdf0], eax
jne 0x44fc1f
mov dword [ebp - 0x2158], 1
jmp 0x44fc26
and dword [ebp - 0x2158], 0
mov eax, dword [ebp - 0x2158]
sub eax, dword [ebp - 0x56c]
mov dword [ebp - 0xdf8], eax
mov eax, dword [ebp - 0xdf8]
mov dword [ebp - 0x2160], eax
mov eax, dword [ebp - 0x2160]
add eax, dword [ebp - 0x29c4]
jne 0x44fc5b
and dword [ebp - 0x29cc], 0
jmp 0x44fc65
mov dword [ebp - 0x29cc], 1
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x34c4], eax
mov eax, dword [ebp - 0x29d4]
mov dword [ebp - 0x34cc], eax
cmp dword [ebp - 0xe00], 0x6d54
jge 0x44fc95
mov dword [ebp - 0x2168], 1
jmp 0x44fc9c
and dword [ebp - 0x2168], 0
cmp dword [ebp - 0x2168], 1
ja 0x44fcb1
mov dword [ebp - 0x29dc], 1
jmp 0x44fcb8
and dword [ebp - 0x29dc], 0
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x34d4], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x34dc], eax
mov eax, dword [ebp - 0xc10]
sub eax, dword [ebp - 0xa48]
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xe08], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xe08]
mov dword [ebp + eax - 0x2dfc], ecx
cmp dword [ebp - 0xe08], 0x19f8c517
je 0x44fd19
mov dword [ebp - 0x29e4], 1
jmp 0x44fd20
and dword [ebp - 0x29e4], 0
mov eax, dword [ebp - 0x2170]
mov dword [ebp - 0x34e4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2dfc]
mov dword [ebp - 0x2170], eax
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0xa84], 1
mov dword [ebp - 0xe10], 1
mov dword [ebp - 0xe60], 0xfcec4ee8
mov dword [ebp - 0x2a24], 4
mov dword [ebp - 0x34ec], 0xad8b3b4c
mov dword [ebp - 0x254], 0
jmp 0x44fda8
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x44fdc4
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x2d84], 0x3eb905d0
jmp 0x44fd9b
mov dword [ebp - 0x254], 0
jmp 0x44fddd
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x44fdf9
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xa58], 0xcc545e21
jmp 0x44fdd0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa90], 0xfffffff6
jmp 0x44fe27
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa90]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa90], 0xffffffe6
jle 0x450678
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x34f4], 1
mov dword [ebp - 0x548], 0x60a2fc53
mov dword [ebp - 0x34fc], 0xa3fd
mov dword [ebp - 0xea0], 0x2746
mov dword [ebp - 0xa50], 0
jmp 0x44fe83
mov eax, dword [ebp - 0xa50]
inc eax
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 1
jge 0x44fe9f
mov eax, dword [ebp - 0xa50]
mov dword [ebp + eax*4 - 0xa60], 0xffffffff
jmp 0x44fe76
mov dword [ebp - 0x70], 0
jmp 0x44feaf
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x44fec5
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2d84], 0x8ab659d5
jmp 0x44fea8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa90]
mov dword [ebp - 0x3504], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa90], 0x6316
jl 0x44ff02
mov dword [ebp - 0xe10], 0xffffffff
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xa90], 0
cmp dword [ebp - 0xe10], 0
je 0x44ff18
cmp dword [ebp - 0x70], 0
je 0x44ff18
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x44ff27
cmp dword [ebp - 0x70], 0
jne 0x44ff27
and dword [ebp - 0x2178], 0
jmp 0x44ff31
mov dword [ebp - 0x2178], 1
mov eax, dword [ebp - 0x2178]
sub eax, dword [ebp - 0x70]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2d84]
jne 0x44ff55
mov dword [ebp - 0xe18], 1
jmp 0x44ff5c
and dword [ebp - 0xe18], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xe18], eax
jge 0x44ff73
mov dword [ebp - 0x2180], 1
jmp 0x44ff7a
and dword [ebp - 0x2180], 0
cmp dword [ebp - 0x2180], 0x693009c
jg 0x44ff92
mov dword [ebp - 0xe20], 1
jmp 0x44ff99
and dword [ebp - 0xe20], 0
cmp dword [ebp - 0xe20], 0xfffffffe
je 0x450628
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x2a1c], 0xa3f30045
mov dword [ebp - 0x2208], 0x7d6446bd
mov dword [ebp - 0x2638], 0x91a83acd
mov dword [ebp - 0x2634], 0x91a83acd
mov dword [ebp - 0x2630], 0x91a83acd
mov dword [ebp - 0x262c], 0x91a83acd
mov dword [ebp - 0xc20], 1
mov dword [ebp - 0xc18], 0
mov dword [ebp - 0x29ec], 0x1e611887
cmp dword [ebp - 0x65c], 0x2a4b
jge 0x450022
mov dword [ebp - 0x2190], 1
jmp 0x450029
and dword [ebp - 0x2190], 0
mov eax, dword [ebp - 0xc18]
dec eax
mov dword [ebp - 0xc18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa90]
cmp dword [ebp - 0xc18], eax
jge 0x450057
mov dword [ebp - 0x2188], 1
jmp 0x45005e
and dword [ebp - 0x2188], 0
cmp dword [ebp - 0x2188], 0xffffffff
je 0x450073
mov dword [ebp - 0xe28], 1
jmp 0x45007a
and dword [ebp - 0xe28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa58]
cmp dword [ebp - 0xe28], eax
jge 0x45009b
mov dword [ebp - 0xe30], 1
jmp 0x4500a2
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0x2190]
cmp eax, dword [ebp - 0xe30]
jg 0x4500bc
mov dword [ebp - 0x2198], 1
jmp 0x4500c3
and dword [ebp - 0x2198], 0
mov eax, dword [ebp - 0x2198]
mov dword [ebp - 0x70], eax
mov eax, 0x3d0a
test eax, eax
je 0x450177
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70]
cmp dword [ebp + eax - 0xa90], ecx
jge 0x4500f7
mov dword [ebp - 0x21a0], 1
jmp 0x4500fe
and dword [ebp - 0x21a0], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xe38], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe38]
mov dword [ebp + eax - 0xa60], ecx
mov eax, dword [ebp - 0xe38]
cmp eax, dword [ebp - 0x21a0]
jl 0x450134
mov dword [ebp - 0xe40], 1
jmp 0x45013b
and dword [ebp - 0xe40], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe40]
sub ecx, dword [ebp + eax - 0xa90]
cmp ecx, dword [ebp - 0xc20]
jl 0x450162
mov dword [ebp - 0x21a8], 1
jmp 0x450169
and dword [ebp - 0x21a8], 0
mov eax, dword [ebp - 0x29ec]
cmp dword [ebp - 0x21a8], eax
jle 0x450189
cmp dword [ebp - 0x548], 0
jne 0x450189
and dword [ebp - 0xe48], 0
jmp 0x450193
mov dword [ebp - 0xe48], 1
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0xe48], eax
jg 0x4501ad
mov dword [ebp - 0x29f4], 1
jmp 0x4501b4
and dword [ebp - 0x29f4], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x350c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2638]
cmp dword [ebp + eax - 0xa90], ecx
jne 0x4501e7
mov dword [ebp - 0x21b0], 1
jmp 0x4501ee
and dword [ebp - 0x21b0], 0
mov eax, dword [ebp - 0x21b0]
add eax, 0x355901a7
cmp eax, 1
je 0x45020a
mov dword [ebp - 0xe50], 1
jmp 0x450211
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0x2208]
cmp dword [ebp - 0xe50], eax
jge 0x45022b
mov dword [ebp - 0x21b8], 1
jmp 0x450232
and dword [ebp - 0x21b8], 0
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0x21b8], eax
jge 0x450258
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2638], 0
jne 0x450258
and dword [ebp - 0xe58], 0
jmp 0x450262
mov dword [ebp - 0xe58], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa58]
cmp dword [ebp - 0xe58], eax
jl 0x450283
mov dword [ebp - 0x21c0], 1
jmp 0x45028a
and dword [ebp - 0x21c0], 0
mov eax, dword [ebp - 0x21c0]
mov dword [ebp - 0xe60], eax
cmp dword [ebp - 0xe60], 0
je 0x450558
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x370c], 0xffffffff
cmp dword [ebp - 0x4e4], 0
jne 0x450530
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa90]
mov ecx, dword [ebp - 0x65c]
push 4
pop edx
imul edx, edx, 0
sub ecx, dword [ebp + edx - 0xa60]
imul eax, ecx
test eax, eax
je 0x450470
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2638]
cmp dword [ebp - 0xc20], eax
jle 0x450310
mov dword [ebp - 0x21c8], 1
jmp 0x450317
and dword [ebp - 0x21c8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa90]
cmp dword [ebp - 0x21c8], eax
jge 0x450338
mov dword [ebp - 0xe68], 1
jmp 0x45033f
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0xe68], eax
jle 0x450356
cmp dword [ebp - 0x2a1c], 0
je 0x45036b
cmp dword [ebp - 0x4e4], 0
je 0x45036b
mov dword [ebp - 0x21d0], 1
jmp 0x450372
and dword [ebp - 0x21d0], 0
mov eax, dword [ebp - 0x65c]
cmp dword [ebp - 0x21d0], eax
jge 0x45038c
mov dword [ebp - 0xe70], 1
jmp 0x450393
and dword [ebp - 0xe70], 0
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0xe70], eax
je 0x4503ad
mov dword [ebp - 0x21d8], 1
jmp 0x4503b4
and dword [ebp - 0x21d8], 0
cmp dword [ebp - 0x21d8], 0xffffffff
jl 0x4503c9
mov dword [ebp - 0xe78], 1
jmp 0x4503d0
and dword [ebp - 0xe78], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa90]
add eax, dword [ebp - 0xe78]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2638]
jge 0x4503fd
mov dword [ebp - 0x21e0], 1
jmp 0x450404
and dword [ebp - 0x21e0], 0
cmp dword [ebp - 0x21e0], 0x69f1
jge 0x45041c
mov dword [ebp - 0xe80], 1
jmp 0x450423
and dword [ebp - 0xe80], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d84]
imul eax, dword [ebp - 0xe80]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x2d84]
mov dword [ebp - 0x21e8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x21e8]
mov dword [ebp + eax - 0x2638], ecx
cmp dword [ebp - 0x21e8], 0
je 0x450470
mov dword [ebp - 0xe88], 1
jmp 0x450477
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0xe88], eax
jl 0x450491
mov dword [ebp - 0x21f0], 1
jmp 0x450498
and dword [ebp - 0x21f0], 0
mov eax, dword [ebp - 0x21f0]
sub eax, dword [ebp - 0x4e4]
jne 0x4504b8
cmp dword [ebp - 0x65c], 0
jne 0x4504b8
and dword [ebp - 0xe90], 0
jmp 0x4504c2
mov dword [ebp - 0xe90], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa58]
cmp dword [ebp - 0xe90], eax
jge 0x4504e3
mov dword [ebp - 0x21f8], 1
jmp 0x4504ea
and dword [ebp - 0x21f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x21f8]
sub ecx, dword [ebp + eax - 0xa90]
add ecx, 0x41a78517
cmp ecx, 0x7f253abc
jle 0x450517
mov dword [ebp - 0xe98], 1
jmp 0x45051e
and dword [ebp - 0xe98], 0
cmp dword [ebp - 0xe98], 0xfffffffc
jae 0x450530
and dword [ebp - 0x2200], 0
jmp 0x45053a
mov dword [ebp - 0x2200], 1
mov eax, dword [ebp - 0x2200]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0xea0]
inc eax
mov dword [ebp - 0xea0], eax
jmp 0x450626
mov dword [ebp - 0xc28], 0xfffffffe
cmp dword [ebp - 0x2a24], 0
jne 0x45057d
cmp dword [ebp - 0x2208], 0
je 0x45057d
and dword [ebp - 0xea8], 0
jmp 0x450587
mov dword [ebp - 0xea8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xea8]
mov dword [ebp + eax - 0xa58], ecx
mov eax, dword [ebp - 0xc20]
neg eax
cmp dword [ebp - 0x548], eax
je 0x4505b6
mov dword [ebp - 0x2210], 1
jmp 0x4505bd
and dword [ebp - 0x2210], 0
mov eax, dword [ebp - 0x2210]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x4505dc
push 3
pop eax
test eax, eax
jne 0x4505dc
and dword [ebp - 0x2a2c], 0
jmp 0x4505e6
mov dword [ebp - 0x2a2c], 1
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x3714], eax
mov eax, dword [ebp - 0xc28]
cmp dword [ebp - 0xc28], eax
jle 0x45060c
mov dword [ebp - 0xeb0], 1
jmp 0x450613
and dword [ebp - 0xeb0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xeb0]
mov dword [ebp + eax - 0xa60], ecx
jmp 0x450673
mov dword [ebp - 0xeb8], 0xfffffff8
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xeb8]
cmp dword [ebp + eax - 0xa60], ecx
jl 0x450653
mov dword [ebp - 0x2218], 1
jmp 0x45065a
and dword [ebp - 0x2218], 0
mov eax, dword [ebp - 0x2218]
neg eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0xeb8], 0
je 0x450673
jmp 0x450678
jmp 0x44fe0c
mov dword [ebp - 0xc40], 0
mov dword [ebp - 0xc38], 1
mov dword [ebp - 0x371c], 0xcafa32fd
mov dword [ebp - 0x2a4c], 3
mov dword [ebp - 0x3724], 0xdb785b64
mov dword [ebp - 0xc7c], 0xec326874
mov dword [ebp - 0x2240], 0xfffffffd
mov dword [ebp - 0x372c], 0xaeba4d3e
mov dword [ebp - 0xc48], 0
mov dword [ebp - 0x3734], 0x8ef068cd
mov dword [ebp - 0x2248], 0x56a0b349
mov dword [ebp - 0x373c], 0x47cdedfc
mov dword [ebp - 0xec0], 0xfffffffd
mov dword [ebp - 0x3744], 0xffffffff
mov dword [ebp - 0x2238], 0x3fc2f92e
mov dword [ebp - 0x2aa4], 0xfffffffd
mov dword [ebp - 0x2a64], 0
mov dword [ebp - 0x2a34], 0x837
mov dword [ebp - 0x2260], 0x13cef339
mov dword [ebp - 0x374c], 0xe56e623b
mov dword [ebp - 0xa68], 0x4f68993d
mov dword [ebp - 0xc30], 0xec6ea3d8
mov dword [ebp - 0x2a54], 0x49ce
mov dword [ebp - 0x2a5c], 0xffff
mov dword [ebp - 0x2a74], 0
mov dword [ebp - 0x2a9c], 0x75bb799e
mov dword [ebp - 0x14c], 0
jmp 0x450795
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x4507b1
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x2a6c], 0xffffffff
jmp 0x450788
mov dword [ebp - 0x14c], 0
jmp 0x4507ca
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x4507e6
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x3ae4], 0xff97
jmp 0x4507bd
mov eax, dword [ebp - 0xc30]
mov dword [ebp - 0x2a3c], eax
mov eax, dword [ebp - 0x2a34]
mov dword [ebp - 0x2a44], eax
mov eax, dword [ebp - 0xc30]
dec eax
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0x2a3c]
cmp eax, dword [ebp - 0x2a44]
jne 0x450825
mov dword [ebp - 0xed8], 1
jmp 0x45082c
and dword [ebp - 0xed8], 0
mov eax, dword [ebp - 0x2240]
mov dword [ebp - 0x3754], eax
cmp dword [ebp - 0x2a4c], 0x2b8ffd02
jge 0x450850
mov dword [ebp - 0x2220], 1
jmp 0x450857
and dword [ebp - 0x2220], 0
mov eax, dword [ebp - 0x2220]
sub eax, dword [ebp - 0x2a54]
sub eax, dword [ebp - 0x2a5c]
mov dword [ebp - 0xec0], eax
jne 0x450883
cmp dword [ebp - 0x2a64], 0
jne 0x450883
and dword [ebp - 0x2228], 0
jmp 0x45088d
mov dword [ebp - 0x2228], 1
mov eax, dword [ebp - 0xc7c]
cmp dword [ebp - 0x2228], eax
jge 0x4508a7
mov dword [ebp - 0xec8], 1
jmp 0x4508ae
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0xec8]
sub eax, 0x1900312
mov dword [ebp - 0x2230], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2230]
mov dword [ebp + eax - 0x2a6c], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3ae4]
imul eax, dword [ebp - 0x2230]
test eax, eax
jne 0x4508fb
cmp dword [ebp - 0x2a74], 0
jne 0x4508fb
and dword [ebp - 0xed0], 0
jmp 0x450905
mov dword [ebp - 0xed0], 1
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0x2238], eax
mov eax, dword [ebp - 0x2238]
cmp dword [ebp - 0xed8], eax
jge 0x450930
xor eax, eax
inc eax
je 0x450930
mov dword [ebp - 0x2a7c], 1
jmp 0x450937
and dword [ebp - 0x2a7c], 0
mov eax, dword [ebp - 0xc38]
mov dword [ebp - 0x375c], eax
mov eax, 0xf82d
cmp eax, 1
jne 0x45095f
cmp dword [ebp - 0x2240], 0
jne 0x45095f
and dword [ebp - 0xee0], 0
jmp 0x450969
mov dword [ebp - 0xee0], 1
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0x2248], eax
cmp dword [ebp - 0x2248], 0xf6604c38
jbe 0x45098d
mov dword [ebp - 0x2a84], 1
jmp 0x450994
and dword [ebp - 0x2a84], 0
mov eax, dword [ebp - 0xc38]
cmp dword [ebp - 0xc38], eax
jl 0x4509ae
mov dword [ebp - 0xee8], 1
jmp 0x4509b5
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x2a8c], eax
mov eax, dword [ebp - 0xee8]
mov dword [ebp - 0x2a94], eax
mov eax, dword [ebp - 0xc40]
dec eax
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x2a8c]
cmp eax, dword [ebp - 0x2a94]
jge 0x4509f4
mov dword [ebp - 0x2250], 1
jmp 0x4509fb
and dword [ebp - 0x2250], 0
mov eax, dword [ebp - 0x2a9c]
cmp dword [ebp - 0x2250], eax
jl 0x450a15
mov dword [ebp - 0xef0], 1
jmp 0x450a1c
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0xc48]
cmp dword [ebp - 0xef0], eax
jl 0x450a36
mov dword [ebp - 0x2258], 1
jmp 0x450a3d
and dword [ebp - 0x2258], 0
mov eax, dword [ebp - 0x2258]
mov dword [ebp - 0xc7c], eax
mov dword [ebp - 0xa68], 0
jmp 0x450a62
mov eax, dword [ebp - 0xa68]
inc eax
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 6
je 0x450b57
mov dword [ebp - 0xc74], 0x3706
mov dword [ebp - 0x2b10], 0xb7dff937
mov eax, dword [ebp - 0x2260]
cmp dword [ebp - 0x2aa4], eax
jne 0x450a9d
mov dword [ebp - 0xef8], 1
jmp 0x450aa4
and dword [ebp - 0xef8], 0
mov eax, dword [ebp - 0xc74]
neg eax
cmp dword [ebp - 0xef8], eax
je 0x450ac9
cmp dword [ebp - 0x2260], 0
je 0x450ac9
mov dword [ebp - 0xf00], 1
jmp 0x450ad0
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0xc74]
cmp eax, dword [ebp - 0xf00]
jl 0x450aea
mov dword [ebp - 0x2268], 1
jmp 0x450af1
and dword [ebp - 0x2268], 0
mov eax, dword [ebp - 0x2268]
mov dword [ebp - 0xc48], eax
cmp dword [ebp - 0xc48], 0x9ed2
jge 0x450b1e
cmp dword [ebp - 0xc74], 0
je 0x450b1e
mov dword [ebp - 0xf08], 1
jmp 0x450b25
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0xc7c]
cmp dword [ebp - 0xf08], eax
jl 0x450b3f
mov dword [ebp - 0x2270], 1
jmp 0x450b46
and dword [ebp - 0x2270], 0
mov eax, dword [ebp - 0x2270]
mov dword [ebp - 0x2b10], eax
jmp 0x450a55
mov dword [ebp - 0x68], 0
jmp 0x450b67
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x450b7d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x240], 0xe649f6d4
jmp 0x450b60
mov dword [ebp - 0x9ec], 0xfffffff9
mov dword [ebp - 0x2b18], 1
mov dword [ebp - 0x12c], 2
mov dword [ebp - 0x2280], 0x2c59
mov dword [ebp - 0x674], 1
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x6ec], 0x578cca69
mov dword [ebp - 0x2b28], 0xffff
mov dword [ebp - 0x2b50], 0x57951f1b
mov dword [ebp - 0xa70], 0
jmp 0x450bf0
mov eax, dword [ebp - 0xa70]
inc eax
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 1
jge 0x450c0c
mov eax, dword [ebp - 0xa70]
mov dword [ebp + eax*4 - 0xf30], 0x4e5a945c
jmp 0x450be3
cmp dword [ebp - 0x9ec], 0xffff
ja 0x450c24
mov dword [ebp - 0xc84], 1
jmp 0x450c2b
and dword [ebp - 0xc84], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc84]
mov dword [ebp + eax - 0xf30], ecx
cmp dword [ebp - 0xc84], 0xffff
ja 0x450c56
mov dword [ebp - 0xf10], 1
jmp 0x450c5d
and dword [ebp - 0xf10], 0
mov eax, dword [ebp - 0x9ec]
cmp dword [ebp - 0xf10], eax
jl 0x450c77
mov dword [ebp - 0x2278], 1
jmp 0x450c7e
and dword [ebp - 0x2278], 0
mov eax, dword [ebp - 0x2b18]
add eax, 0x414696ea
cmp eax, dword [ebp - 0x2278]
jg 0x450c9d
mov dword [ebp - 0xf18], 1
jmp 0x450ca4
and dword [ebp - 0xf18], 0
mov eax, dword [ebp - 0xf18]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
add eax, dword [ebp - 0x2280]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x2280]
cmp dword [ebp - 0x674], eax
jg 0x450cdc
mov dword [ebp - 0xf20], 1
jmp 0x450ce3
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0xf20], eax
jl 0x450cfd
mov dword [ebp - 0x2288], 1
jmp 0x450d04
and dword [ebp - 0x2288], 0
cmp dword [ebp - 0x2288], 0xfff6
ja 0x450d1c
mov dword [ebp - 0xf28], 1
jmp 0x450d23
and dword [ebp - 0xf28], 0
mov eax, dword [ebp - 0x9ec]
imul eax, dword [ebp - 0xf28]
cmp dword [ebp - 0x9ec], eax
jg 0x450d44
mov dword [ebp - 0x2290], 1
jmp 0x450d4b
and dword [ebp - 0x2290], 0
mov eax, dword [ebp - 0x550]
imul eax, dword [ebp - 0x2290]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x3764], eax
cmp dword [ebp - 0x674], 0
je 0x450e42
mov dword [ebp - 0x2b20], 0xfc24489b
mov dword [ebp - 0x550], 0
jmp 0x450d9a
mov eax, dword [ebp - 0x550]
dec eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
jl 0x450e21
mov dword [ebp - 0x2298], 0
mov dword [ebp - 0x12c], 0
jmp 0x450dc6
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x450e1c
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0xf30], 0x2e072305
mov dword [ebp - 0x2298], 0x2e072305
mov eax, dword [ebp - 0x2298]
mov dword [ebp - 0x2b20], eax
mov byte [ebp - 0x344], 0
movzx eax, byte [ebp - 0x344]
test eax, eax
je 0x450e1a
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x450db9
jmp 0x450d8d
mov byte [ebp - 0x39d], 0
movzx eax, byte [ebp - 0x39d]
test eax, eax
je 0x450e3d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x4510b9
mov dword [ebp - 0x2e0], 0xfffffff9
mov dword [ebp - 0xf50], 0xffffffff
cmp dword [ebp - 0x2e0], 0
je 0x450e7e
mov byte [ebp - 0x346], 0
movzx eax, byte [ebp - 0x346]
test eax, eax
je 0x450e79
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x4510b9
mov dword [ebp - 0x67c], 1
cmp dword [ebp - 0x67c], 0
jne 0x450ea3
cmp dword [ebp - 0x6ec], 0
jne 0x450ea3
and dword [ebp - 0xf48], 0
jmp 0x450ead
mov dword [ebp - 0xf48], 1
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x12c], eax
je 0x450ec7
mov dword [ebp - 0xf38], 1
jmp 0x450ece
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0xf38]
sub eax, dword [ebp - 0x67c]
cmp eax, dword [ebp - 0x2b28]
jl 0x450ef7
mov eax, 0x95b9
test eax, eax
je 0x450ef7
mov dword [ebp - 0x22a0], 1
jmp 0x450efe
and dword [ebp - 0x22a0], 0
mov eax, dword [ebp - 0x22a0]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 0x7f4926a6
jge 0x450f22
mov dword [ebp - 0xf40], 1
jmp 0x450f29
and dword [ebp - 0xf40], 0
cmp dword [ebp - 0xf40], 0
jg 0x450f3e
mov dword [ebp - 0x2b30], 1
jmp 0x450f45
and dword [ebp - 0x2b30], 0
xor eax, eax
sub eax, 0xb5881f6c
je 0x450f63
cmp dword [ebp - 0x2e0], 0
je 0x450f63
mov dword [ebp - 0x22a8], 1
jmp 0x450f6a
and dword [ebp - 0x22a8], 0
mov eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0x22a8], eax
je 0x450f84
mov dword [ebp - 0x22b0], 1
jmp 0x450f8b
and dword [ebp - 0x22b0], 0
mov eax, dword [ebp - 0xf48]
cmp eax, dword [ebp - 0x22b0]
je 0x450fa5
mov dword [ebp - 0x2b38], 1
jmp 0x450fac
and dword [ebp - 0x2b38], 0
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x376c], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0xf50], eax
mov eax, dword [ebp - 0x2e0]
add eax, dword [ebp - 0xf50]
cmp eax, dword [ebp - 0x2e0]
jge 0x450fe4
mov dword [ebp - 0x22b8], 1
jmp 0x450feb
and dword [ebp - 0x22b8], 0
mov eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x22b8]
jle 0x451005
mov dword [ebp - 0x2b40], 1
jmp 0x45100c
and dword [ebp - 0x2b40], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x3774], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x377c], eax
mov eax, 0x9ce
test eax, eax
je 0x451040
push 5
pop eax
test eax, eax
je 0x451040
mov dword [ebp - 0xf58], 1
jmp 0x451047
and dword [ebp - 0xf58], 0
cmp dword [ebp - 0xf58], 0xfffffff8
ja 0x45105c
mov dword [ebp - 0x2b48], 1
jmp 0x451063
and dword [ebp - 0x2b48], 0
cmp dword [ebp - 0x67c], 0xfffe
ja 0x45107b
mov dword [ebp - 0x22c0], 1
jmp 0x451082
and dword [ebp - 0x22c0], 0
mov eax, dword [ebp - 0x22c0]
mov dword [ebp - 0x2b50], eax
mov byte [ebp - 0x3f5], 0
movzx eax, byte [ebp - 0x3f5]
test eax, eax
je 0x4510b9
push 0x2486
push 0
push 0x149a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov dword [ebp - 0x68], 0
jmp 0x4510c9
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x4510df
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x3bfc], 0xfc9b996a
jmp 0x4510c2
mov dword [ebp - 0xa4], 0x49aaed6b
mov dword [ebp - 0x124], 3
mov dword [ebp - 0x50], 0
jmp 0x451103
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x451119
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x6ac], 0x4dd03248
jmp 0x4510fc
mov dword [ebp - 0x50], 0
jmp 0x451129
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x45113f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2ab0], 0x65256810
jmp 0x451122
mov dword [ebp - 0x50], 0
jmp 0x45114f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x451165
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2ecc], 3
jmp 0x451148
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6ac]
mov dword [ebp - 0x3784], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x6ac]
cmp dword [ebp + eax - 0x6ac], ecx
je 0x45119f
mov dword [ebp - 0xf60], 1
jmp 0x4511a6
and dword [ebp - 0xf60], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xf60], eax
jne 0x4511c0
mov dword [ebp - 0x22c8], 1
jmp 0x4511c7
and dword [ebp - 0x22c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6ac]
cmp eax, dword [ebp - 0x22c8]
jne 0x4511e8
mov dword [ebp - 0xf68], 1
jmp 0x4511ef
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xf68], eax
je 0x451209
mov dword [ebp - 0x2b58], 1
jmp 0x451210
and dword [ebp - 0x2b58], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6ac]
mov dword [ebp - 0x378c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6ac]
sub eax, 0x43c6fe23
cmp eax, 0x6d210ec3
jg 0x451246
mov dword [ebp - 0x22d0], 1
jmp 0x45124d
and dword [ebp - 0x22d0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x22d0]
mov dword [ebp + eax - 0x2ab0], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6ac], 0
je 0x451306
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6ac]
mov dword [ebp - 0x2b60], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2b60]
mov dword [ebp + eax - 0x2ab0], ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x3794], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x379c], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x37a4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x6ac]
cmp dword [ebp + eax - 0x6ac], ecx
jle 0x4512e5
mov dword [ebp - 0xf70], 1
jmp 0x4512ec
and dword [ebp - 0xf70], 0
mov eax, dword [ebp - 0xf70]
sub eax, dword [ebp - 0xa4]
je 0x451306
mov dword [ebp - 0x22d8], 1
jmp 0x45130d
and dword [ebp - 0x22d8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x22d8]
sub ecx, dword [ebp + eax - 0x6ac]
cmp ecx, dword [ebp - 0xa4]
jg 0x451333
mov dword [ebp - 0xf78], 1
jmp 0x45133a
and dword [ebp - 0xf78], 0
mov eax, dword [ebp - 0xf78]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x4517ae
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x22f8], 0xf0fc5a51
mov dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0
je 0x45142a
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x37ac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ab0], 1
jb 0x4513a6
mov dword [ebp - 0x22e0], 1
jmp 0x4513ad
and dword [ebp - 0x22e0], 0
cmp dword [ebp - 0x22e0], 0
je 0x4513c8
mov eax, 0x1c2f
test eax, eax
jne 0x4513c8
and dword [ebp - 0xf80], 0
jmp 0x4513d2
mov dword [ebp - 0xf80], 1
cmp dword [ebp - 0xf80], 0xfff9
ja 0x4513ea
mov dword [ebp - 0x22e8], 1
jmp 0x4513f1
and dword [ebp - 0x22e8], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x22e8], eax
je 0x45140b
mov dword [ebp - 0xf88], 1
jmp 0x451412
and dword [ebp - 0xf88], 0
cmp dword [ebp - 0xf88], 0x1f32
jl 0x45142a
mov dword [ebp - 0x22f0], 1
jmp 0x451431
and dword [ebp - 0x22f0], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x22f0]
jge 0x45144b
mov dword [ebp - 0xf90], 1
jmp 0x451452
and dword [ebp - 0xf90], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf90]
mov dword [ebp + eax - 0x2ecc], ecx
mov dword [ebp - 0x104], 0
jmp 0x45147e
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xfffffff4
je 0x4517ac
mov dword [ebp - 0xc94], 0x3da7d8e2
mov dword [ebp - 0x68c], 0xffffffff
mov dword [ebp - 0x2b70], 0x9f65
mov dword [ebp - 0x2310], 9
mov dword [ebp - 0x124], 2
jmp 0x4514cc
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xfffffffb
jg 0x4516ce
mov dword [ebp - 0x2b68], 0xd61c0642
mov dword [ebp - 0xc8c], 0xb5f814d1
mov dword [ebp - 0xa4], 0
jmp 0x451506
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x19
jg 0x4516c9
mov dword [ebp - 0x6f4], 0xbb9a2f72
mov dword [ebp - 0x8fc], 0
jmp 0x451536
mov eax, dword [ebp - 0x8fc]
inc eax
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 3
jge 0x451552
mov eax, dword [ebp - 0x8fc]
mov dword [ebp + eax*4 - 0x3afc], 0xb4c01f90
jmp 0x451529
mov dword [ebp - 0x6f4], 0
jmp 0x45156b
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 0x1b
jne 0x4516c4
mov dword [ebp - 0x684], 3
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x6ac]
mov dword [ebp + ecx - 0x3afc], eax
mov dword [ebp - 0x684], 0x18
jmp 0x4515b3
mov eax, dword [ebp - 0x684]
dec eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 0xffffffe6
je 0x4516bf
mov byte [ebp - 0x348], 0
movzx eax, byte [ebp - 0x348]
test eax, eax
je 0x4515dc
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [ebp - 0x104], 0x4f412f3a
jne 0x45165f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6ac]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x6ac]
mov dword [ebp - 0xc8c], eax
mov eax, dword [ebp - 0xc8c]
imul eax, dword [ebp - 0xc94]
cmp dword [ebp - 0x684], 0
jne 0x45162f
cmp dword [ebp - 0xc8c], 0
jne 0x45162f
and dword [ebp - 0xf98], 0
jmp 0x451639
mov dword [ebp - 0xf98], 1
mov eax, dword [ebp - 0x2b68]
mov dword [ebp - 0x22f8], eax
mov eax, dword [ebp - 0x22f8]
add eax, dword [ebp - 0xf98]
je 0x45165f
mov dword [ebp - 0x2300], 1
jmp 0x451666
and dword [ebp - 0x2300], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x2300], eax
jl 0x451680
mov dword [ebp - 0xfa0], 1
jmp 0x451687
and dword [ebp - 0xfa0], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0xfa0]
jne 0x4516a1
mov dword [ebp - 0x2308], 1
jmp 0x4516a8
and dword [ebp - 0x2308], 0
mov eax, dword [ebp - 0x2308]
sub eax, dword [ebp - 0xc94]
mov dword [ebp - 0x68c], eax
jmp 0x4515a6
jmp 0x45155e
jmp 0x4514f9
jmp 0x4514bf
mov eax, dword [ebp - 0xc94]
mov dword [ebp - 0x37b4], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x37bc], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x2b70], eax
jl 0x45170c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6ac], 0
jne 0x45170c
and dword [ebp - 0xfa8], 0
jmp 0x451716
mov dword [ebp - 0xfa8], 1
mov eax, dword [ebp - 0xfa8]
mov dword [ebp - 0x2310], eax
mov eax, dword [ebp - 0x68c]
cmp dword [ebp - 0x2310], eax
jg 0x45173c
mov dword [ebp - 0xfb0], 1
jmp 0x451743
and dword [ebp - 0xfb0], 0
mov eax, dword [ebp - 0x68c]
cmp eax, dword [ebp - 0xfb0]
je 0x45175d
mov dword [ebp - 0x2318], 1
jmp 0x451764
and dword [ebp - 0x2318], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2318]
sub ecx, dword [ebp + eax - 0x2ecc]
jne 0x45178b
mov eax, 0x450de0b5
test eax, eax
jne 0x45178b
and dword [ebp - 0xfb8], 0
jmp 0x451795
mov dword [ebp - 0xfb8], 1
mov eax, dword [ebp - 0x68c]
sub eax, dword [ebp - 0xfb8]
mov dword [ebp - 0x68c], eax
jmp 0x451471
jmp 0x4517e4
mov dword [ebp - 0x2b78], 0x4c6930a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6ac]
mov dword [ebp - 0x37c4], eax
mov eax, dword [ebp - 0x2b78]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2ecc]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x68], 0
jmp 0x4517f4
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x45180a
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x3c14], 4
jmp 0x4517ed
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
mov dword [ebp - 0x37cc], eax
mov eax, dword [ebp - 0x904]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x240]
je 0x451847
cmp dword [ebp - 0x904], 0
jle 0x451847
mov dword [ebp - 0x2320], 1
jmp 0x45184e
and dword [ebp - 0x2320], 0
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x2320], eax
jge 0x451868
mov dword [ebp - 0x2328], 1
jmp 0x45186f
and dword [ebp - 0x2328], 0
mov eax, dword [ebp - 0x2328]
sub eax, 0x936b
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3bfc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
mov dword [ebp - 0x37d4], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x37dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
mov dword [ebp - 0x37e4], eax
cmp dword [ebp - 0x6fc], 3
jne 0x4518cd
mov dword [ebp - 0x1030], 1
jmp 0x4518d4
and dword [ebp - 0x1030], 0
mov eax, dword [ebp - 0x904]
imul eax, dword [ebp - 0x1030]
sub eax, dword [ebp - 0x6fc]
cmp eax, dword [ebp - 0x6fc]
jge 0x45190b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x240], 0
je 0x45190b
mov dword [ebp - 0x1008], 1
jmp 0x451912
and dword [ebp - 0x1008], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
cmp dword [ebp - 0x1008], eax
jge 0x451933
mov dword [ebp - 0xfcc], 1
jmp 0x45193a
and dword [ebp - 0xfcc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
imul eax, dword [ebp - 0xfcc]
test eax, eax
jne 0x451964
mov eax, 0xce3d
test eax, eax
jne 0x451964
and dword [ebp - 0x1a44], 0
jmp 0x45196e
mov dword [ebp - 0x1a44], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
cmp dword [ebp - 0x1a44], eax
jne 0x45199f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x240], 0
je 0x45199f
mov dword [ebp - 0xfd4], 1
jmp 0x4519a6
and dword [ebp - 0xfd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfd4]
mov dword [ebp + eax - 0x3c14], ecx
mov dword [ebp - 0xcb4], 0x3e8f0887
mov dword [ebp - 0xca4], 0x78a4
mov dword [ebp - 0x2ba0], 0x40f
mov dword [ebp - 0x154], 0
jmp 0x4519f0
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jge 0x451a0c
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x23c4], 0xffffffff
jmp 0x4519e3
mov dword [ebp - 0x154], 0
jmp 0x451a25
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x451a41
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0xa9c], 0xf1febaee
jmp 0x451a18
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa9c], 1
jmp 0x451a6f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa9c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa9c], 0
jl 0x45200e
mov dword [ebp - 0xf0], 0xe2c0d37a
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0x1004], 0xa7dbc8b6
mov dword [ebp - 0xf0], 0
jmp 0x451aba
cmp dword [ebp - 0xf0], 1
jg 0x452009
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0xcac], 0xfffffffd
mov dword [ebp - 0x1a6c], 0x6852db5
mov dword [ebp - 0x102c], 0xffffffff
mov dword [ebp - 0x2ba8], 8
mov dword [ebp - 0x90c], 0
jmp 0x451b12
mov eax, dword [ebp - 0x90c]
inc eax
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 2
jge 0x451b2e
mov eax, dword [ebp - 0x90c]
mov dword [ebp + eax*4 - 0x23d0], 0xffffffff
jmp 0x451b05
mov dword [ebp - 0x2e8], 0
jmp 0x451b47
cmp dword [ebp - 0x2e8], 1
jg 0x451d6d
mov dword [ebp - 0x221c], 0xfffffffe
mov dword [ebp - 0x2b88], 0
mov dword [ebp - 0x704], 0
jmp 0x451b81
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 3
jge 0x451b9d
mov eax, dword [ebp - 0x704]
mov dword [ebp + eax*4 - 0x3b14], 6
jmp 0x451b74
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
mov eax, dword [ebp + eax*4 - 0x23c4]
mov dword [ebp - 0x37ec], eax
mov dword [ebp - 0x221c], 0xfffffffa
cmp dword [ebp - 0x221c], 0
je 0x451c13
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0xc9c], 0
jne 0x451bf1
cmp dword [ebp - 0x2e8], 0
jne 0x451bf1
and dword [ebp - 0xfdc], 0
jmp 0x451bfb
mov dword [ebp - 0xfdc], 1
cmp dword [ebp - 0xfdc], 0x8af066b
jle 0x451c13
mov dword [ebp - 0x1a4c], 1
jmp 0x451c1a
and dword [ebp - 0x1a4c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a4c]
sub ecx, dword [ebp + eax - 0xa9c]
cmp ecx, 9
ja 0x451c3e
mov dword [ebp - 0xfe4], 1
jmp 0x451c45
and dword [ebp - 0xfe4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23d0]
cmp dword [ebp - 0xfe4], eax
jle 0x451c66
mov dword [ebp - 0x1f84], 1
jmp 0x451c6d
and dword [ebp - 0x1f84], 0
mov eax, dword [ebp - 0xcb4]
cmp dword [ebp - 0x1f84], eax
jl 0x451c87
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0xc9c], eax
mov eax, dword [ebp - 0xca4]
dec eax
mov dword [ebp - 0xca4], eax
je 0x451e83
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x23d0], 0
jne 0x451db5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x23c4], 0
jne 0x451db5
and dword [ebp - 0x2b90], 0
jmp 0x451dbf
mov dword [ebp - 0x2b90], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
mov dword [ebp - 0x37f4], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x37fc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x23d0]
mov dword [ebp - 0x3804], eax
push 0xfffffffffffffffb
pop eax
cmp eax, 0x6de1
jne 0x451e07
mov dword [ebp - 0xffc], 1
jmp 0x451e0e
and dword [ebp - 0xffc], 0
cmp dword [ebp - 0xffc], 0
jne 0x451e29
cmp dword [ebp - 0xcac], 0
jne 0x451e29
and dword [ebp - 0x1a5c], 0
jmp 0x451e33
mov dword [ebp - 0x1a5c], 1
mov eax, dword [ebp - 0x1a6c]
cmp dword [ebp - 0x1a5c], eax
jl 0x451e4d
mov dword [ebp - 0x1f8c], 1
jmp 0x451e54
and dword [ebp - 0x1f8c], 0
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0x1004], eax
mov eax, dword [ebp - 0x1004]
cmp eax, dword [ebp - 0x1f8c]
jl 0x451e83
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x100c], eax
je 0x451ea4
mov dword [ebp - 0x1a64], 1
jmp 0x451eab
and dword [ebp - 0x1a64], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0xcb4]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x1a64]
jg 0x451ee4
mov dword [ebp - 0x1014], 1
jmp 0x451eeb
and dword [ebp - 0x1014], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
cmp dword [ebp - 0x1014], eax
jne 0x451f0c
mov dword [ebp - 0x2224], 1
jmp 0x451f13
and dword [ebp - 0x2224], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x2224], eax
je 0x451f2d
mov dword [ebp - 0x101c], 1
jmp 0x451f34
and dword [ebp - 0x101c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x23c4]
cmp dword [ebp - 0x101c], eax
jg 0x451f55
jmp 0x451a54
cmp dword [ebp + 8], 2
jl 0x463002
mov dword [ebp - 0x568], 0xfffffffa
mov dword [ebp - 0x2438], 0x5b2906c9
mov dword [ebp - 0x2bc0], 0x84cb8f6c
mov dword [ebp - 0x568], 0
jmp 0x45204f
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0x11
jge 0x45210e
mov dword [ebp - 0xcec], 0xffffffff
mov dword [ebp - 0x2bb0], 0x7084bc9c
xor eax, eax
jne 0x4520e5
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0xcec], eax
mov dword [ebp - 0xcec], 0xffffffff
cmp dword [ebp - 0xcec], 9
jle 0x45209f
mov dword [ebp - 0x1034], 1
jmp 0x4520a6
and dword [ebp - 0x1034], 0
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x2438], eax
mov eax, dword [ebp - 0x2bb0]
cmp dword [ebp - 0x2438], eax
jg 0x4520cc
mov dword [ebp - 0x2bb8], 1
jmp 0x4520d3
and dword [ebp - 0x2bb8], 0
mov eax, 0x981ff29a
test eax, eax
jne 0x4520e5
and dword [ebp - 0x103c], 0
jmp 0x4520ef
mov dword [ebp - 0x103c], 1
mov eax, dword [ebp - 0x103c]
mov dword [ebp - 0x2bc0], eax
cmp dword [ebp - 0x568], 0
je 0x452109
jmp 0x452042
jmp 0x452042
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x694], 0xfe5f36f6
mov dword [ebp - 0x1054], 0x233fd52a
mov dword [ebp - 0x2f0], 0xd686a37b
mov dword [ebp - 0x2bd8], 0x5d3c
cmp dword [ebp - 0x9c], 0
jne 0x4521b9
mov eax, 0xd45b0e82
sub eax, dword [ebp - 0x9c]
cmp eax, 0xae28de63
jb 0x452167
mov dword [ebp - 0x1a7c], 1
jmp 0x45216e
and dword [ebp - 0x1a7c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1a7c], eax
jl 0x452188
mov dword [ebp - 0x2bc8], 1
jmp 0x45218f
and dword [ebp - 0x2bc8], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x381c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3824], eax
cmp dword [ebp - 0x9c], 0
jne 0x4521b9
and dword [ebp - 0x1044], 0
jmp 0x4521c3
mov dword [ebp - 0x1044], 1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1044], eax
jne 0x4521dd
mov dword [ebp - 0x1f9c], 1
jmp 0x4521e4
and dword [ebp - 0x1f9c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1f9c], eax
jle 0x4521fe
mov dword [ebp - 0x104c], 1
jmp 0x452205
and dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x104c], eax
je 0x45221f
mov dword [ebp - 0x1a84], 1
jmp 0x452226
and dword [ebp - 0x1a84], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x1a84]
mov dword [ebp - 0x1054], eax
mov eax, dword [ebp - 0x1054]
cmp dword [ebp - 0x694], eax
jl 0x452258
mov dword [ebp - 0x222c], 1
jmp 0x45225f
and dword [ebp - 0x222c], 0
cmp dword [ebp - 0x222c], 0x41a8
jg 0x452277
mov dword [ebp - 0x105c], 1
jmp 0x45227e
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x9c], eax
jl 0x4523cf
mov dword [ebp - 0xcf4], 0xacda2a4f
mov dword [ebp - 0x1fa4], 0x76bd76df
mov dword [ebp - 0x2c60], 0xd8b26de0
cmp dword [ebp - 0x2f0], 0x2a19820b
jle 0x4522d2
mov dword [ebp - 0x2bd0], 1
jmp 0x4522d9
and dword [ebp - 0x2bd0], 0
cmp dword [ebp - 0xcf4], 0
je 0x4522f7
mov byte [ebp - 0x34a], 0
movzx eax, byte [ebp - 0x34a]
test eax, eax
je 0x4523e7
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x668], 9
mov dword [ebp - 0x70c], 0xab6dad81
mov dword [ebp - 0xcfc], 1
mov dword [ebp - 0x108c], 0xd99ea5d8
mov dword [ebp - 0x2c70], 0xf199e1f9
mov dword [ebp - 0x914], 0
jmp 0x452432
cmp dword [ebp + 8], 1
jne 0x467094
mov dword [ebp - 0x814], 0
jmp 0x463025
mov eax, dword [ebp - 0x814]
inc eax
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 4
jge 0x463041
mov eax, dword [ebp - 0x814]
mov dword [ebp + eax*4 - 0x2ee8], 0
jmp 0x463018
mov byte [ebp - 0x328], 0
movzx eax, byte [ebp - 0x328]
test eax, eax
je 0x46305b
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2ee8], 0
jmp 0x463086
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ee8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2ee8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2ee8], 0xc
jg 0x463143
mov dword [ebp - 0x81c], 0xdce9d05b
mov dword [ebp - 0x81c], 0
jmp 0x4630bc
cmp dword [ebp - 0x81c], 0xd
jl 0x46313e
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x824], 0
jmp 0x4630e8
cmp dword [ebp - 0x824], 4
jge 0x463104
mov eax, dword [ebp - 0x824]
mov dword [ebp + eax*4 - 0x3d2c], 8
jmp 0x4630db
mov dword [ebp - 0x5bc], 0
jmp 0x46311d
jmp 0x46306d
mov dword [ebp - 0x64], 0xfffffffb
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0x16d0], 0xacdf
mov dword [ebp - 0x16a8], 0x1f5e
mov dword [ebp - 0x82c], 0
jmp 0x463181
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 3
jge 0x46319d
mov eax, dword [ebp - 0x82c]
mov dword [ebp + eax*4 - 0x6c0], 0x8bc588e1
jmp 0x463174
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c0], 0x934215e1
ja 0x4631bc
mov dword [ebp - 0x1660], 1
jmp 0x4631c3
and dword [ebp - 0x1660], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x6c0]
cmp dword [ebp + eax - 0x6c0], ecx
jge 0x4631eb
mov dword [ebp - 0x1650], 1
jmp 0x4631f2
and dword [ebp - 0x1650], 0
mov eax, dword [ebp - 0x1650]
mov dword [ebp - 0x64], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c0]
cmp dword [ebp - 0x64], eax
jl 0x463219
mov dword [ebp - 0xa80], 1
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0xa78], 1
mov dword [ebp - 0xa74], 1
mov dword [ebp - 0x1d20], 1
mov dword [ebp - 0x1dc0], 0xfcec4ee8
mov dword [ebp - 0x27d4], 4
mov dword [ebp - 0x31ec], 0xad8b3b4c
mov dword [ebp - 0x1b8], 0
jmp 0x4670fd
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x467119
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x2d90], 0x3eb905d0
jmp 0x4670f0
mov dword [ebp - 0x1b8], 0
jmp 0x467132
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 1
jge 0x46714e
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x740], 0xcc545e21
jmp 0x467125
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa80], 0xfffffff6
jmp 0x46717c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa80], 0xffffffe6
jle 0x4679cd
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x31f4], 1
mov dword [ebp - 0x4f8], 0x60a2fc53
mov dword [ebp - 0x31fc], 0xa3fd
mov dword [ebp - 0x1e40], 0x2746
mov dword [ebp - 0x738], 0
jmp 0x4671d8
mov eax, dword [ebp - 0x738]
inc eax
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 1
jge 0x4671f4
mov eax, dword [ebp - 0x738]
mov dword [ebp + eax*4 - 0x748], 0xffffffff
jmp 0x4671cb
mov dword [ebp - 0x7c], 0
jmp 0x467204
cmp dword [ebp - 0x7c], 3
jge 0x46721a
xor ecx, ecx
call fcn.00427c81
push eax
call fcn.0046bfb3
pop ecx
mov dword [ebp - 0xb44], 0
mov dword [ebp - 0xb3c], 1
mov dword [ebp - 0x3224], 0xcafa32fd
mov dword [ebp - 0x27fc], 3
mov dword [ebp - 0x322c], 0xdb785b64
mov dword [ebp - 0xb5c], 0xec326874
mov dword [ebp - 0x1eb8], 0xfffffffd
mov dword [ebp - 0x3234], 0xaeba4d3e
mov dword [ebp - 0xb4c], 0
mov dword [ebp - 0x323c], 0x8ef068cd
mov dword [ebp - 0x1ec8], 0x56a0b349
mov dword [ebp - 0x3244], 0x47cdedfc
mov dword [ebp - 0x1e80], 0xfffffffd
mov dword [ebp - 0x324c], 0xffffffff
mov dword [ebp - 0x1ea8], 0x3fc2f92e
mov dword [ebp - 0x2854], 0xfffffffd
mov dword [ebp - 0x2814], 0
mov dword [ebp - 0x27e4], 0x837
mov dword [ebp - 0x1ef8], 0x13cef339
mov dword [ebp - 0x3254], 0xe56e623b
mov dword [ebp - 0x750], 0x4f68993d
mov dword [ebp - 0xb34], 0xec6ea3d8
mov dword [ebp - 0x2804], 0x49ce
mov dword [ebp - 0x280c], 0xffff
mov dword [ebp - 0x2824], 0
mov dword [ebp - 0x284c], 0x75bb799e
mov dword [ebp - 0x1c0], 0
jmp 0x467af8
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x467b14
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x281c], 0xffffffff
jmp 0x467aeb
mov dword [ebp - 0x1c0], 0
jmp 0x467b2d
cmp dword [ebp - 0x1c0], 3
jge 0x467b49