Function at 0x45eecd
Capabilities:
Accept command line arguments
Check os version
Connect pipe
Create pipe
Delete directory
Get common file path
Get disk information
Get file size
Get geographical location
Hide graphical window
Log keystrokes
Query or enumerate registry key
Set environment variable
Start service
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x30fc
call fcn.00492da0
push esi
push edi
push 1
lea ecx, [ebp - 0x1af8]
call fcn.0042db9d
mov dword [ebp - 0x2484], 1
mov dword [ebp - 0x2480], 1
mov dword [ebp - 0x247c], 1
mov dword [ebp - 0x2478], 1
lea ecx, [ebp - 0xa29]
call fcn.0042dc9a
push eax
lea eax, [ebp - 0x2474]
push eax
lea eax, [ebp - 0x2484]
push eax
lea ecx, [ebp - 0x3010]
call fcn.0042dc9d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x850]
call fcn.0042dc49
mov dword [ebp - 0x1970], 0xf3f17e2f
mov dword [ebp - 0x1ba8], 0x38f738f5
mov dword [ebp - 0x1d8c], 0x604491d0
push 2
lea ecx, [ebp - 0x254c]
call fcn.0042db9d
mov dword [ebp - 0xf0], 0
jmp 0x45ef8a
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x45efa9
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x1af8]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x45ef7d
mov dword [ebp - 0xf0], 0
jmp 0x45efc2
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x45efe4
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x254c]
call fcn.0042dc8b
mov dword [eax], 0xb01d976d
jmp 0x45efb5
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x45f01a
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0xd10]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd10]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
cmp dword [eax], 0
jg 0x45f182
mov dword [ebp - 0x1980], 0x37c1
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1af8]
call fcn.0042dc8b
push 3
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
push 0
lea ecx, [ebp - 0x1af8]
call fcn.0042dc8b
mov eax, dword [eax]
mov dword [ebp - 0x1970], eax
cmp dword [ebp - 0x1970], 0
jne 0x45f08b
mov dword [ebp - 0x1978], 1
jmp 0x45f092
and dword [ebp - 0x1978], 0
mov eax, dword [ebp - 0x1978]
mov dword [ebp - 0x1980], eax
mov esi, dword [ebp - 0x1980]
push 3
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
cmp esi, dword [eax]
jne 0x45f0c1
mov dword [ebp - 0x1988], 1
jmp 0x45f0c8
and dword [ebp - 0x1988], 0
mov eax, dword [ebp - 0x1988]
add eax, 0x1f145ba1
cmp eax, 0x74bf90ed
jle 0x45f0e6
mov dword [ebp - 0x1990], 1
jmp 0x45f0ed
and dword [ebp - 0x1990], 0
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1af8]
call fcn.0042dc8b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1990]
jle 0x45f11d
mov dword [ebp - 0x1998], 1
jmp 0x45f124
and dword [ebp - 0x1998], 0
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1af8]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x1998]
cmp ecx, dword [eax]
jl 0x45f154
mov dword [ebp - 0x19a0], 1
jmp 0x45f15b
and dword [ebp - 0x19a0], 0
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1af8]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x19a0]
mov dword [eax], ecx
jmp 0x45eff6
cmp dword [ebp - 0x1ba8], 0x50cfdfe9
jle 0x45f19a
mov dword [ebp - 0x19a8], 1
jmp 0x45f1a1
and dword [ebp - 0x19a8], 0
cmp dword [ebp - 0x19a8], 0xa284
je 0x45f1b9
mov dword [ebp - 0x19b0], 1
jmp 0x45f1c0
and dword [ebp - 0x19b0], 0
cmp dword [ebp - 0x19b0], 0x9b78
jle 0x45f1d8
mov dword [ebp - 0x1d84], 1
jmp 0x45f1df
and dword [ebp - 0x1d84], 0
push 3
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
push 0
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x1d8c]
imul ecx, dword [eax]
cmp ecx, 0xdef9
jg 0x45f216
mov dword [ebp - 0x19b8], 1
jmp 0x45f21d
and dword [ebp - 0x19b8], 0
push 1
lea ecx, [ebp - 0x254c]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x19b8]
add ecx, dword [eax]
cmp ecx, 0xe70
je 0x45f246
mov dword [ebp - 0x19c0], 1
jmp 0x45f24d
and dword [ebp - 0x19c0], 0
push 2
lea ecx, [ebp - 0x850]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x19c0]
mov dword [eax], ecx
lea ecx, [ebp - 0x254c]
call fcn.0042dc6f
lea ecx, [ebp - 0x850]
call fcn.0042dc6f
lea ecx, [ebp - 0x1af8]
call fcn.0042dc6f
mov dword [ebp - 0x6c4], 0xdd33a4a9
push 4
lea ecx, [ebp - 0x2b20]
call fcn.0042db9d
mov dword [ebp - 0x2750], 0xccb24ce5
mov dword [ebp - 0x29e0], 1
mov dword [ebp - 0x2dd0], 0x1d52aa0a
mov dword [ebp - 0x29e8], 0xfffffffe
mov dword [ebp - 0x544], 0
jmp 0x45f2db
mov eax, dword [ebp - 0x544]
inc eax
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 4
jge 0x45f2fd
push dword [ebp - 0x544]
lea ecx, [ebp - 0x2b20]
call fcn.0042dc8b
mov dword [eax], 1
jmp 0x45f2ce
mov dword [ebp - 0x6c4], 0
jmp 0x45f316
mov eax, dword [ebp - 0x6c4]
dec eax
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0xffffffff
je 0x45f3ef
mov dword [ebp - 0x54c], 0xffffffff
mov dword [ebp - 0x2c94], 0xffffffff
mov dword [ebp - 0x29f0], 0xffffffff
mov dword [ebp - 0x2eb4], 0x3dbc56e7
mov dword [ebp - 0x19e0], 0
mov dword [ebp - 0x54c], 0
jmp 0x45f36e
mov eax, dword [ebp - 0x54c]
dec eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0xffffffef
je 0x45f3ea
mov dword [ebp - 0x6d4], 0xfffffff8
mov dword [ebp - 0x29f8], 9
mov dword [ebp - 0x2ca4], 0xffffffff
mov dword [ebp - 0x6d4], 0
jmp 0x45f3ae
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 3
jg 0x45f3d8
mov byte [ebp - 0x250], 0
movzx eax, byte [ebp - 0x250]
test eax, eax
je 0x45f3d6
push 0xf5b
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x45f3a1
mov eax, dword [ebp - 0x19e0]
inc eax
mov dword [ebp - 0x19e0], eax
jmp 0x45f361
jmp 0x45f309
lea ecx, [ebp - 0x2b20]
call fcn.0042dc6f
mov dword [ebp - 0x1cc], 0xfffffff6
mov dword [ebp - 0x1a18], 0x5ec35211
mov dword [ebp - 0x1d94], 2
mov dword [ebp - 0x1cc], 6
jmp 0x45f431
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jne 0x45f65c
mov dword [ebp - 0x168], 0xbf2d3f50
mov dword [ebp - 0x1d9c], 2
cmp dword [ebp - 0x168], 0
jne 0x45f46d
mov eax, 0x93e75cb5
test eax, eax
jne 0x45f46d
and dword [ebp - 0x19f8], 0
jmp 0x45f477
mov dword [ebp - 0x19f8], 1
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x2a00], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x2de4], eax
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x1cc], eax
jne 0x45f4a9
mov dword [ebp - 0x19e8], 1
jmp 0x45f4b0
and dword [ebp - 0x19e8], 0
cmp dword [ebp - 0x19e8], 0
ja 0x45f4c5
mov dword [ebp - 0x19f0], 1
jmp 0x45f4cc
and dword [ebp - 0x19f0], 0
mov eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x19f0]
test eax, eax
jg 0x45f4e8
mov dword [ebp - 0x1a00], 1
jmp 0x45f4ef
and dword [ebp - 0x1a00], 0
mov eax, dword [ebp - 0x19f8]
cmp eax, dword [ebp - 0x1a00]
je 0x45f509
mov dword [ebp - 0x1a08], 1
jmp 0x45f510
and dword [ebp - 0x1a08], 0
cmp dword [ebp - 0x1a08], 0x17c7
jge 0x45f52a
or eax, 0xffffffff
jne 0x45f52a
and dword [ebp - 0x1a10], 0
jmp 0x45f534
mov dword [ebp - 0x1a10], 1
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x1a10]
mov dword [ebp - 0x1a18], eax
cmp dword [ebp - 0x1a18], 0xfafb
je 0x45f55f
mov dword [ebp - 0x1a20], 1
jmp 0x45f566
and dword [ebp - 0x1a20], 0
mov eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x1a20]
jle 0x45f587
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x45f587
mov dword [ebp - 0x1a28], 1
jmp 0x45f58e
and dword [ebp - 0x1a28], 0
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x1a28]
test eax, eax
jne 0x45f5b1
cmp dword [ebp - 0x168], 0
jne 0x45f5b1
and dword [ebp - 0xaa0], 0
jmp 0x45f5bb
mov dword [ebp - 0xaa0], 1
cmp dword [ebp - 0xaa0], 0x63372585
jle 0x45f5d3
mov dword [ebp - 0x18f0], 1
jmp 0x45f5da
and dword [ebp - 0x18f0], 0
mov eax, dword [ebp - 0x18f0]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x168], eax
jle 0x45f600
mov dword [ebp - 0xaa8], 1
jmp 0x45f607
and dword [ebp - 0xaa8], 0
cmp dword [ebp - 0xaa8], 0xda37
jne 0x45f61f
mov dword [ebp - 0x18f8], 1
jmp 0x45f626
and dword [ebp - 0x18f8], 0
cmp dword [ebp - 0x18f8], 0x87b35f19
jb 0x45f63e
mov dword [ebp - 0xab0], 1
jmp 0x45f645
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0xab0]
sub eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x1d9c], eax
jmp 0x45f424
mov byte [ebp - 0x2a9], 0
movzx eax, byte [ebp - 0x2a9]
test eax, eax
je 0x45f67d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 1
lea ecx, [ebp - 0x1ae0]
call fcn.0042db9d
mov dword [ebp - 0x1910], 4
mov dword [ebp - 0x2a08], 0xffffffff
mov dword [ebp - 0x1928], 0xfffffff9
push 2
lea ecx, [ebp - 0x1b38]
call fcn.0042db9d
mov dword [ebp - 0x54], 0
jmp 0x45f6c5
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x45f6db
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x19cc], 0xfffffffc
jmp 0x45f6be
mov dword [ebp - 0x54], 0
jmp 0x45f6eb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x45f704
push dword [ebp - 0x54]
lea ecx, [ebp - 0x1b38]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x45f6e4
mov dword [ebp - 0x54], 0
jmp 0x45f714
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x45f72a
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2b30], 1
jmp 0x45f70d
push 1
lea ecx, [ebp - 0x1b38]
call fcn.0042dc8b
mov dword [ebp - 0x1900], eax
mov eax, dword [ebp - 0x1900]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1900]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x19cc]
push 1
lea ecx, [ebp - 0x1b38]
call fcn.0042dc8b
mov eax, dword [eax]
lea eax, [esi + eax + 0xa205]
test eax, eax
je 0x45f849
mov esi, dword [ebp - 0x1910]
push 1
lea ecx, [ebp - 0x1b38]
call fcn.0042dc8b
cmp esi, dword [eax]
jge 0x45f79c
mov dword [ebp - 0xab8], 1
jmp 0x45f7a3
and dword [ebp - 0xab8], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x19cc]
add ecx, dword [ebp - 0xab8]
cmp dword [ebp + eax - 0x19cc], ecx
jl 0x45f7d1
mov dword [ebp - 0x1908], 1
jmp 0x45f7d8
and dword [ebp - 0x1908], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1908]
mov dword [ebp + eax - 0x2b30], ecx
push 1
lea ecx, [ebp - 0x1b38]
call fcn.0042dc8b
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x19cc]
cmp dword [eax], ecx
jl 0x45f815
mov dword [ebp - 0xac0], 1
jmp 0x45f81c
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0x1928]
cmp dword [ebp - 0xac0], eax
je 0x45f849
mov byte [ebp - 0x2ab], 0
movzx eax, byte [ebp - 0x2ab]
test eax, eax
je 0x45f844
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
jmp 0x45f9d7
mov dword [ebp - 0x360], 0xf4cc
mov dword [ebp - 0xac8], 1
push 3
lea ecx, [ebp - 0x22d0]
call fcn.0042db9d
mov dword [ebp - 0x554], 0
jmp 0x45f883
mov eax, dword [ebp - 0x554]
inc eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 3
jge 0x45f8a5
push dword [ebp - 0x554]
lea ecx, [ebp - 0x22d0]
call fcn.0042dc8b
mov dword [eax], 0x2f4e55b6
jmp 0x45f876
mov eax, dword [ebp - 0x1910]
mov dword [ebp - 0x2cb4], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2a10], eax
imul eax, dword [ebp - 0x360], 0xfffd
cmp dword [ebp - 0x360], eax
jg 0x45f8db
mov dword [ebp - 0x1da4], 1
jmp 0x45f8e2
and dword [ebp - 0x1da4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19cc]
mov dword [ebp - 0x2e8c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x360]
cmp dword [ebp + eax - 0x2b30], ecx
jne 0x45f916
mov dword [ebp - 0x1918], 1
jmp 0x45f91d
and dword [ebp - 0x1918], 0
mov dword [ebp - 0xac8], 0x37b30477
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0xad0], eax
push 0
lea ecx, [ebp - 0x22d0]
call fcn.0042dc8b
mov ecx, dword [ebp - 0xad0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1918]
sub eax, dword [ebp - 0x360]
cmp dword [ebp - 0xad0], eax
je 0x45f968
mov dword [ebp - 0x1dac], 1
jmp 0x45f96f
and dword [ebp - 0x1dac], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2a18], eax
push 0
lea ecx, [ebp - 0x22d0]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x45f99d
xor eax, eax
je 0x45f99d
mov dword [ebp - 0x1920], 1
jmp 0x45f9a4
and dword [ebp - 0x1920], 0
cmp dword [ebp - 0x1920], 0
jne 0x45f9b9
mov dword [ebp - 0xad8], 1
jmp 0x45f9c0
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0x1928], eax
lea ecx, [ebp - 0x22d0]
call fcn.0042dc6f
lea ecx, [ebp - 0x1b38]
call fcn.0042dc6f
mov dword [ebp - 0x240c], 1
mov dword [ebp - 0x2408], 1
mov dword [ebp - 0x2404], 1
mov dword [ebp - 0x2400], 1
lea ecx, [ebp - 0x86d]
call fcn.0042dc9a
push eax
lea eax, [ebp - 0x23fc]
push eax
lea eax, [ebp - 0x240c]
push eax
lea ecx, [ebp - 0x3008]
call fcn.0042dc9d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x844]
call fcn.0042dc49
mov dword [ebp - 0xa30], 0x6aa16542
mov dword [ebp - 0x1d8], 0xfffffffd
mov dword [ebp - 0x3c8], 0x411d7fea
mov dword [ebp - 0x1dcc], 1
mov dword [ebp - 0x6d0], 0
jmp 0x45fa80
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 2
jge 0x45fa9c
mov eax, dword [ebp - 0x6d0]
mov dword [ebp + eax*4 - 0x1e00], 1
jmp 0x45fa73
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2cc4], eax
or eax, 0xffffffff
cmp eax, 0x8716b5b3
jne 0x45fabe
mov dword [ebp - 0xae0], 1
jmp 0x45fac5
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0x1d8]
sub eax, dword [ebp - 0xae0]
cmp eax, dword [ebp - 0x1d8]
jl 0x45fae5
mov dword [ebp - 0x1db4], 1
jmp 0x45faec
and dword [ebp - 0x1db4], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2a20], eax
mov dword [ebp - 0xa30], 0xef5d870a
mov eax, dword [ebp - 0x1d8]
sub eax, 0x1ef9
cmp dword [ebp - 0xa30], eax
jge 0x45fb21
mov dword [ebp - 0x1930], 1
jmp 0x45fb28
and dword [ebp - 0x1930], 0
cmp dword [ebp - 0x1930], 4
jge 0x45fb3d
mov dword [ebp - 0xae8], 1
jmp 0x45fb44
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0xae8], eax
jg 0x45fb5e
mov dword [ebp - 0x1dbc], 1
jmp 0x45fb65
and dword [ebp - 0x1dbc], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2df8], eax
mov dword [ebp - 0x1d8], 0xcaa5d732
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0xa30], eax
jl 0x45fb95
mov dword [ebp - 0x1938], 1
jmp 0x45fb9c
and dword [ebp - 0x1938], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x1938], eax
jge 0x45fbb6
mov dword [ebp - 0xaf0], 1
jmp 0x45fbbd
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0xaf0], eax
jne 0x45fbe0
cmp dword [ebp - 0x1d8], 0
je 0x45fbe0
mov dword [ebp - 0x1940], 1
jmp 0x45fbe7
and dword [ebp - 0x1940], 0
cmp dword [ebp - 0x1940], 0x243b
jg 0x45fbff
mov dword [ebp - 0x1dc4], 1
jmp 0x45fc06
and dword [ebp - 0x1dc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e00]
mov dword [ebp - 0x2a28], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x2cd4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e00]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1e00], eax
mov eax, dword [ebp - 0x1dcc]
mov dword [ebp - 0x2a30], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x2d2c], eax
or eax, 0xffffffff
je 0x45fc95
mov byte [ebp - 0x2ad], 0
movzx eax, byte [ebp - 0x2ad]
test eax, eax
je 0x45fc79
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov byte [ebp - 0x2af], 0
movzx eax, byte [ebp - 0x2af]
test eax, eax
je 0x45fc93
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
jmp 0x45fcb6
mov byte [ebp - 0x2b1], 0
movzx eax, byte [ebp - 0x2b1]
test eax, eax
je 0x45fcb6
push 0x11b3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [ebp - 0xbc4], 0xf3f17e2f
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x55c], 0
jmp 0x45fce3
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 2
jge 0x45fcff
mov eax, dword [ebp - 0x55c]
mov dword [ebp + eax*4 - 0xa78], 0xb57f
jmp 0x45fcd6
mov dword [ebp - 0x230], 0
jmp 0x45fd18
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jg 0x46008e
mov dword [ebp - 0x368], 0x2a2c7c8a
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x370], 0xffffffff
mov dword [ebp - 0x368], 1
jmp 0x45fd5c
mov eax, dword [ebp - 0x368]
dec eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
jl 0x460089
push 3
lea ecx, [ebp - 0x2300]
call fcn.0042db9d
mov dword [ebp - 0x1ddc], 1
mov dword [ebp - 0x80c], 0
jmp 0x45fd99
mov eax, dword [ebp - 0x80c]
inc eax
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 3
jge 0x45fdbb
push dword [ebp - 0x80c]
lea ecx, [ebp - 0x2300]
call fcn.0042dc8b
mov dword [eax], 5
jmp 0x45fd8c
mov eax, dword [ebp - 0x230]
cmp dword [ebp + eax*4 - 0xa78], 0
jne 0x45fde9
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x2a38], eax
cmp dword [ebp - 0x368], 0
jne 0x45fde9
and dword [ebp - 0xaf8], 0
jmp 0x45fdf3
mov dword [ebp - 0xaf8], 1
mov eax, dword [ebp - 0x230]
mov eax, dword [ebp + eax*4 - 0xa78]
mov dword [ebp - 0x2ce4], eax
push 1
lea ecx, [ebp - 0x2300]
call fcn.0042dc8b
mov ecx, dword [ebp - 0xaf8]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa78], 0
mov dword [ebp - 0x3f8], 0x9599
cmp dword [ebp - 0x3f8], 6
je 0x45fe48
mov dword [ebp - 0x1948], 1
jmp 0x45fe4f
and dword [ebp - 0x1948], 0
mov eax, dword [ebp - 0x1948]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x370], 0
jmp 0x45fe74
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 1
jg 0x460079
mov dword [ebp - 0x564], 0
jmp 0x45fe9a
mov eax, dword [ebp - 0x564]
inc eax
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 1
jge 0x45feb6
mov eax, dword [ebp - 0x564]
mov dword [ebp + eax*4 - 0x898], 1
jmp 0x45fe8d
mov dword [ebp - 0x3f8], 1
jmp 0x45fecf
mov eax, dword [ebp - 0x3f8]
dec eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
jl 0x46005f
mov dword [ebp - 0xb00], 0xffffffff
push 1
lea ecx, [ebp - 0x22e8]
call fcn.0042db9d
mov dword [ebp - 0x6d8], 0
jmp 0x45ff0c
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 1
jge 0x45ff2e
push dword [ebp - 0x6d8]
lea ecx, [ebp - 0x22e8]
call fcn.0042dc8b
mov dword [eax], 0xe318b474
jmp 0x45feff
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x2a40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x898]
mov dword [ebp - 0x2d34], eax
mov dword [ebp - 0xb00], 5
cmp dword [ebp - 0xb00], 0
jne 0x45ff85
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x898]
cmp dword [ebp + eax - 0xa78], ecx
jl 0x45ff85
and dword [ebp - 0x1950], 0
jmp 0x45ff8f
mov dword [ebp - 0x1950], 1
push 0
lea ecx, [ebp - 0x22e8]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x1950]
cmp ecx, dword [eax]
jg 0x45ffb2
mov dword [ebp - 0xb08], 1
jmp 0x45ffb9
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0xb08], eax
jg 0x45ffd3
mov dword [ebp - 0x1958], 1
jmp 0x45ffda
and dword [ebp - 0x1958], 0
mov esi, dword [ebp - 0x1958]
add esi, 8
push 0
lea ecx, [ebp - 0x22e8]
call fcn.0042dc8b
cmp esi, dword [eax]
jl 0x460000
mov dword [ebp - 0x1dd4], 1
jmp 0x460007
and dword [ebp - 0x1dd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x898]
mov dword [ebp - 0x2a48], eax
mov eax, dword [ebp - 0x230]
imul eax, dword [ebp + eax*4 - 0xa78], 7
mov dword [ebp - 0xb10], eax
push 0
lea ecx, [ebp - 0x2300]
call fcn.0042dc8b
mov ecx, dword [ebp - 0xb10]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x1ddc], eax
lea ecx, [ebp - 0x22e8]
call fcn.0042dc6f
jmp 0x45fec2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa78], 0
je 0x460074
jmp 0x45fe67
jmp 0x45fe67
lea ecx, [ebp - 0x2300]
call fcn.0042dc6f
jmp 0x45fd4f
jmp 0x45fd0b
mov dword [ebp - 0x1ee4], 0x38f738f5
push 3
lea ecx, [ebp - 0x2654]
call fcn.0042db9d
mov dword [ebp - 0x518], 0x2667a876
mov dword [ebp - 0x56c], 0
jmp 0x4600c8
mov eax, dword [ebp - 0x56c]
inc eax
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 3
jge 0x4600ea
push dword [ebp - 0x56c]
lea ecx, [ebp - 0x2654]
call fcn.0042dc8b
mov dword [eax], 0xfdf99ff6
jmp 0x4600bb
mov dword [ebp - 0x518], 0
jmp 0x460103
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 2
jg 0x460140
mov byte [ebp - 0x2b3], 0
movzx eax, byte [ebp - 0x2b3]
test eax, eax
je 0x460126
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
push dword [ebp - 0x518]
lea ecx, [ebp - 0x2654]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x46013e
jmp 0x460140
jmp 0x4600f6
lea ecx, [ebp - 0x2654]
call fcn.0042dc6f
mov dword [ebp - 0x1ef4], 0x604491d0
push 1
lea ecx, [ebp - 0x1f8c]
call fcn.0042db9d
mov dword [ebp - 0x980], 1
mov dword [ebp - 0x3d0], 0xffffffff
mov dword [ebp - 0x4e4], 0xaa05d762
mov dword [ebp - 0x1de4], 0xfffffff8
mov dword [ebp - 0x1dec], 0x2522abf7
mov dword [ebp - 0x78c], 0
jmp 0x4601ad
mov eax, dword [ebp - 0x78c]
inc eax
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x78c], 1
jge 0x4601cf
push dword [ebp - 0x78c]
lea ecx, [ebp - 0x1f8c]
call fcn.0042dc8b
mov dword [eax], 0xffff
jmp 0x4601a0
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.0042dc8b
mov eax, dword [eax]
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x3d0], 0xfffd
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x980], eax
jge 0x4602f2
cmp dword [ebp - 0x3d0], 0
jne 0x46027c
cmp dword [ebp - 0x3d0], 0xf9b6917a
ja 0x460221
mov dword [ebp - 0x1960], 1
jmp 0x460228
and dword [ebp - 0x1960], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x1960], eax
jl 0x460242
mov dword [ebp - 0x1968], 1
jmp 0x460249
and dword [ebp - 0x1968], 0
mov eax, dword [ebp - 0x1968]
sub eax, dword [ebp - 0x980]
add eax, 0x6578
cmp eax, 0xef6e229e
je 0x46027c
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.0042dc8b
cmp dword [eax], 0
jne 0x46027c
and dword [ebp - 0xb1c], 0
jmp 0x460286
mov dword [ebp - 0xb1c], 1
mov esi, dword [ebp - 0x3d0]
imul esi, dword [ebp - 0xb1c]
imul esi, dword [ebp - 0x4e4]
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.0042dc8b
cmp esi, dword [eax]
jle 0x4602b7
mov dword [ebp - 0x12e4], 1
jmp 0x4602be
and dword [ebp - 0x12e4], 0
cmp dword [ebp - 0x12e4], 0xdb6084ed
jb 0x4602d6
mov dword [ebp - 0xb24], 1
jmp 0x4602dd
and dword [ebp - 0xb24], 0
cmp dword [ebp - 0xb24], 0
jle 0x4602f2
mov dword [ebp - 0x1720], 1
jmp 0x4602f9
and dword [ebp - 0x1720], 0
mov eax, dword [ebp - 0x1de4]
cmp dword [ebp - 0x1720], eax
jne 0x460313
mov dword [ebp - 0xb2c], 1
jmp 0x46031a
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x1dec], eax
mov dword [ebp - 0x4e4], 0
jmp 0x46033f
mov eax, dword [ebp - 0x4e4]
inc eax
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 0x3a
jle 0x46035f
mov dword [ebp - 0x1df4], 0xffffffff
cmp dword [ebp - 0x1df4], 0
je 0x46035d
jmp 0x46035f
jmp 0x460332
lea ecx, [ebp - 0x1f8c]
call fcn.0042dc6f
push 2
lea ecx, [ebp - 0x25f4]
call fcn.0042db9d
push 1
lea ecx, [ebp - 0x1f9c]
call fcn.0042db9d
mov dword [ebp - 0x8a0], 1
mov dword [ebp - 0x378], 0xffffffff
mov dword [ebp - 0x43c], 0xaa05d762
mov dword [ebp - 0x1e6c], 0xfffffff8
mov dword [ebp - 0x1e74], 0x2522abf7
mov dword [ebp - 0x574], 0
jmp 0x4603cf
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 1
jge 0x4603f1
push dword [ebp - 0x574]
lea ecx, [ebp - 0x1f9c]
call fcn.0042dc8b
mov dword [eax], 0xffff
jmp 0x4603c2
push 0
lea ecx, [ebp - 0x1f9c]
call fcn.0042dc8b
mov eax, dword [eax]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x378], 0xfffd
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x8a0], eax
jge 0x460514
cmp dword [ebp - 0x378], 0
jne 0x46049e
cmp dword [ebp - 0x378], 0xf9b6917a
ja 0x460443
mov dword [ebp - 0x12ec], 1
jmp 0x46044a
and dword [ebp - 0x12ec], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x12ec], eax
jl 0x460464
mov dword [ebp - 0xb34], 1
jmp 0x46046b
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0xb34]
sub eax, dword [ebp - 0x8a0]
add eax, 0x6578
cmp eax, 0xef6e229e
je 0x46049e
push 0
lea ecx, [ebp - 0x1f9c]
call fcn.0042dc8b
cmp dword [eax], 0
jne 0x46049e
and dword [ebp - 0x189c], 0
jmp 0x4604a8
mov dword [ebp - 0x189c], 1
mov esi, dword [ebp - 0x378]
imul esi, dword [ebp - 0x189c]
imul esi, dword [ebp - 0x43c]
push 0
lea ecx, [ebp - 0x1f9c]
call fcn.0042dc8b
cmp esi, dword [eax]
jle 0x4604d9
mov dword [ebp - 0xb3c], 1
jmp 0x4604e0
and dword [ebp - 0xb3c], 0
cmp dword [ebp - 0xb3c], 0xdb6084ed
jb 0x4604f8
mov dword [ebp - 0x12f4], 1
jmp 0x4604ff
and dword [ebp - 0x12f4], 0
cmp dword [ebp - 0x12f4], 0
jle 0x460514
mov dword [ebp - 0xb44], 1
jmp 0x46051b
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x1e6c]
cmp dword [ebp - 0xb44], eax
jne 0x460535
mov dword [ebp - 0x16dc], 1
jmp 0x46053c
and dword [ebp - 0x16dc], 0
mov eax, dword [ebp - 0x16dc]
mov dword [ebp - 0x1e74], eax
mov dword [ebp - 0x43c], 0
jmp 0x460561
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0x3a
jle 0x460581
mov dword [ebp - 0x1e7c], 0xffffffff
cmp dword [ebp - 0x1e7c], 0
je 0x46057f
jmp 0x460581
jmp 0x460554
lea ecx, [ebp - 0x1f9c]
call fcn.0042dc6f
mov dword [ebp - 0x418], 0
push 3
lea ecx, [ebp - 0x2564]
call fcn.0042db9d
mov dword [ebp - 0x12fc], 0x71013923
mov dword [ebp - 0xf8], 0
jmp 0x4605c6
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x4605e5
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x2564]
call fcn.0042dc8b
or dword [eax], 0xffffffff
jmp 0x4605b9
mov dword [ebp - 0xf8], 0
jmp 0x4605fe
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x46061a
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x1e8c], 0x59b504db
jmp 0x4605f1
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x418], eax
jle 0x460634
mov dword [ebp - 0xb4c], 1
jmp 0x46063b
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0xb4c]
jl 0x460655
mov dword [ebp - 0x1304], 1
jmp 0x46065c
and dword [ebp - 0x1304], 0
push 0
lea ecx, [ebp - 0x2564]
call fcn.0042dc8b
mov dword [eax], 1
xor eax, eax
inc eax
cmp eax, 0xfffffff6
jne 0x460689
cmp dword [ebp - 0x12fc], 0
jne 0x460689
and dword [ebp - 0xb54], 0
jmp 0x460693
mov dword [ebp - 0xb54], 1
mov eax, dword [ebp - 0x12fc]
cmp dword [ebp - 0xb54], eax
jl 0x4606ad
mov dword [ebp - 0x1a6c], 1
jmp 0x4606b4
and dword [ebp - 0x1a6c], 0
mov eax, dword [ebp - 0x418]
imul eax, dword [ebp - 0x1a6c]
test eax, eax
je 0x4606d7
cmp dword [ebp - 0x418], 0
je 0x4606d7
and dword [ebp - 0xb5c], 0
jmp 0x4606e1
mov dword [ebp - 0xb5c], 1
cmp dword [ebp - 0xb5c], 0xe0bec035
je 0x4606f9
mov dword [ebp - 0xb64], 1
jmp 0x460700
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x1304]
cmp eax, dword [ebp - 0xb64]
jg 0x46071a
mov dword [ebp - 0x16e4], 1
jmp 0x460721
and dword [ebp - 0x16e4], 0
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x16e4], eax
jge 0x46073b
mov dword [ebp - 0x1e84], 1
jmp 0x460742
and dword [ebp - 0x1e84], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1e8c], 0xfffffffd
lea ecx, [ebp - 0x2564]
call fcn.0042dc6f
mov dword [ebp - 0x170], 0
jmp 0x460777
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x460796
push dword [ebp - 0x170]
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x46076a
mov dword [ebp - 0x448], 0xad386cce
mov dword [ebp - 0x6e0], 0
jmp 0x4607b9
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 2
jge 0x4607d5
mov eax, dword [ebp - 0x6e0]
mov dword [ebp + eax*4 - 0x2cf8], 0x14a02569
jmp 0x4607ac
mov dword [ebp - 0x448], 1
jmp 0x4607ee
mov eax, dword [ebp - 0x448]
dec eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0
jl 0x46092e
mov dword [ebp - 0x57c], 0
jmp 0x460814
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 3
jge 0x460830
mov eax, dword [ebp - 0x57c]
mov dword [ebp + eax*4 - 0x2318], 8
jmp 0x460807
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2318], 1
jmp 0x46085e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2318]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2318], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2318], 0
jl 0x460929
push 4
lea ecx, [ebp - 0x1fac]
call fcn.0042db9d
mov dword [ebp - 0x7e4], 0
jmp 0x460898
mov eax, dword [ebp - 0x7e4]
inc eax
mov dword [ebp - 0x7e4], eax
cmp dword [ebp - 0x7e4], 4
jge 0x4608ba
push dword [ebp - 0x7e4]
lea ecx, [ebp - 0x1fac]
call fcn.0042dc8b
mov dword [eax], 0xd72276b
jmp 0x46088b
push 3
lea ecx, [ebp - 0x1fac]
call fcn.0042dc8b
mov dword [eax], 1
jmp 0x4608f3
push 3
lea ecx, [ebp - 0x1fac]
call fcn.0042dc8b
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xb6c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb6c]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1fac]
call fcn.0042dc8b
cmp dword [eax], 0
jl 0x460919
mov eax, dword [ebp - 0x448]
cmp dword [ebp + eax*4 - 0x2cf8], 0
je 0x460917
jmp 0x460919
jmp 0x4608cf
lea ecx, [ebp - 0x1fac]
call fcn.0042dc6f
jmp 0x460843
jmp 0x4607e1
mov dword [ebp - 0x170], 0
jmp 0x460947
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x460969
push dword [ebp - 0x170]
lea ecx, [ebp - 0x25f4]
call fcn.0042dc8b
mov dword [eax], 0xb01d976d
jmp 0x46093a
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x46099f
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
mov dword [ebp - 0x130c], eax
mov eax, dword [ebp - 0x130c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x130c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
cmp dword [eax], 0
jg 0x461081
mov dword [ebp - 0x1e0], 0x9d19
mov dword [ebp - 0x44c], 0xfffffffa
mov dword [ebp - 0x8a8], 1
mov dword [ebp - 0x9e0], 0xffffffff
mov dword [ebp - 0x988], 1
mov dword [ebp - 0xb84], 1
mov dword [ebp - 0xb8c], 0xf456574b
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], eax
jne 0x460a15
mov dword [ebp - 0x1e94], 1
jmp 0x460a1c
and dword [ebp - 0x1e94], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2754], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x275c], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0x2ba75a59
jge 0x460a58
mov dword [ebp - 0xb74], 1
jmp 0x460a5f
and dword [ebp - 0xb74], 0
cmp dword [ebp - 0xb74], 0xd1e1
jge 0x460a77
mov dword [ebp - 0x18a4], 1
jmp 0x460a7e
and dword [ebp - 0x18a4], 0
mov eax, dword [ebp - 0x18a4]
sub eax, 0x53f0d3ec
cmp eax, dword [ebp - 0x8a8]
jge 0x460a9d
mov dword [ebp - 0xb7c], 1
jmp 0x460aa4
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x8a8]
cmp dword [ebp - 0x988], eax
jge 0x460adc
mov dword [ebp - 0x1314], 1
jmp 0x460ae3
and dword [ebp - 0x1314], 0
mov eax, dword [ebp - 0x1314]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0
je 0x460b0a
cmp dword [ebp - 0x9e0], 0
jne 0x460b0a
and dword [ebp - 0x16ec], 0
jmp 0x460b14
mov dword [ebp - 0x16ec], 1
mov eax, dword [ebp - 0x16ec]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0xb8c]
add eax, dword [ebp - 0x1e0]
je 0x460bf1
mov dword [ebp - 0x131c], 0x48214d2f
mov dword [ebp - 0xb9c], 0xffffffff
mov dword [ebp - 0x1ea4], 0xf717c925
cmp dword [ebp - 0x44c], 0
jne 0x460b8c
mov eax, dword [ebp - 0x131c]
cmp dword [ebp - 0x44c], eax
jge 0x460b73
mov dword [ebp - 0xb94], 1
jmp 0x460b7a
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0x131c]
add eax, dword [ebp - 0xb94]
cmp eax, dword [ebp - 0x44c]
cmp dword [ebp - 0x8a8], 0
je 0x460ba8
push 6
pop eax
test eax, eax
je 0x460ba8
mov dword [ebp - 0x1984], 1
jmp 0x460baf
and dword [ebp - 0x1984], 0
mov eax, dword [ebp - 0x1984]
mov dword [ebp - 0xb9c], eax
imul eax, dword [ebp - 0xb9c], 0x2742
test eax, eax
jne 0x460bdb
cmp dword [ebp - 0x1e0], 0
jne 0x460bdb
and dword [ebp - 0x1e9c], 0
jmp 0x460be5
mov dword [ebp - 0x1e9c], 1
mov dword [ebp - 0x1ea4], 4
jmp 0x460c26
mov dword [ebp - 0x1eac], 0xfffffffb
mov eax, dword [ebp - 0x1eac]
mov dword [ebp - 0x988], eax
mov byte [ebp - 0x2b5], 0
movzx eax, byte [ebp - 0x2b5]
test eax, eax
je 0x460c26
push 0x1f1a
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov byte [ebp - 0x2b7], 0
movzx eax, byte [ebp - 0x2b7]
test eax, eax
je 0x460c47
push 0
push 0
push 0x60d
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov dword [ebp - 0xbcc], 0x37c1
mov dword [ebp - 0x8b0], 0x2b165808
mov eax, 0xffff
cmp eax, 0x7d50
je 0x460c73
mov dword [ebp - 0x1324], 1
jmp 0x460c7a
and dword [ebp - 0x1324], 0
imul eax, dword [ebp - 0x8b0], 0x3c6c722c
cmp eax, dword [ebp - 0x1324]
je 0x460c98
mov dword [ebp - 0xba4], 1
jmp 0x460c9f
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x8b0]
add eax, dword [ebp - 0xba4]
imul eax, dword [ebp - 0x8b0]
add eax, 0x91dd612
je 0x460cd7
mov byte [ebp - 0x2b9], 0
movzx eax, byte [ebp - 0x2b9]
test eax, eax
je 0x460cd5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
jmp 0x460d02
mov byte [ebp - 0x2bb], 0
movzx eax, byte [ebp - 0x2bb]
test eax, eax
je 0x460d02
push 0x28c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
push 2
lea ecx, [ebp - 0x2348]
call fcn.0042db9d
mov dword [ebp - 0xb8], 0xffffffff
push 3
lea ecx, [ebp - 0x2330]
call fcn.0042db9d
mov dword [ebp - 0x2764], 1
mov dword [ebp - 0x38], 0
jmp 0x460d40
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x460d5c
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2348]
call fcn.0042dc8b
mov dword [eax], 0x1e2c
jmp 0x460d39
mov dword [ebp - 0x38], 0
jmp 0x460d6c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x460d82
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1eb4], 1
jmp 0x460d65
mov dword [ebp - 0x38], 0
jmp 0x460d92
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x460dae
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2330]
call fcn.0042dc8b
mov dword [eax], 0x840eb449
jmp 0x460d8b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1eb4], 0x6950
mov eax, dword [ebp - 0xb8]
add eax, 0x6950
mov ecx, dword [ebp - 0xb8]
imul ecx, eax
mov dword [ebp - 0x16f4], ecx
push 2
lea ecx, [ebp - 0x2330]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x16f4]
mov dword [eax], ecx
cmp dword [ebp - 0x16f4], 0
je 0x460dfe
cmp dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xfffc
ja 0x460e16
mov dword [ebp - 0xbac], 1
jmp 0x460e1d
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 0xbac]
sub eax, dword [ebp - 0xb8]
cmp eax, 0xffff
ja 0x460e3c
mov dword [ebp - 0x132c], 1
jmp 0x460e43
and dword [ebp - 0x132c], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x132c]
jge 0x460e5d
mov dword [ebp - 0xbb4], 1
jmp 0x460e64
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0xbb4]
cmp eax, 0xffff
je 0x460e83
mov dword [ebp - 0x18ac], 1
jmp 0x460e8a
and dword [ebp - 0x18ac], 0
mov eax, dword [ebp - 0x18ac]
sub eax, 0x7608562e
cmp eax, dword [ebp - 0xb8]
je 0x460ea9
mov dword [ebp - 0x1ebc], 1
jmp 0x460eb0
and dword [ebp - 0x1ebc], 0
push 0
lea ecx, [ebp - 0x2348]
call fcn.0042dc8b
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0xbbc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x276c], eax
push 0
lea ecx, [ebp - 0x2348]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x460f10
push 2
lea ecx, [ebp - 0x2330]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x460f10
mov dword [ebp - 0x1334], 1
jmp 0x460f17
and dword [ebp - 0x1334], 0
mov eax, dword [ebp - 0x1334]
mov dword [ebp - 0xb8], eax
lea ecx, [ebp - 0x2330]
call fcn.0042dc6f
lea ecx, [ebp - 0x2348]
call fcn.0042dc6f
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc8b
push 3
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
push 0
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc8b
mov eax, dword [eax]
mov dword [ebp - 0xbc4], eax
cmp dword [ebp - 0xbc4], 0
jne 0x460f8a
mov dword [ebp - 0x16fc], 1
jmp 0x460f91
and dword [ebp - 0x16fc], 0
mov eax, dword [ebp - 0x16fc]
mov dword [ebp - 0xbcc], eax
mov esi, dword [ebp - 0xbcc]
push 3
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
cmp esi, dword [eax]
jne 0x460fc0
mov dword [ebp - 0x133c], 1
jmp 0x460fc7
and dword [ebp - 0x133c], 0
mov eax, dword [ebp - 0x133c]
add eax, 0x1f145ba1
cmp eax, 0x74bf90ed
jle 0x460fe5
mov dword [ebp - 0xbd4], 1
jmp 0x460fec
and dword [ebp - 0xbd4], 0
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc8b
mov eax, dword [eax]
cmp eax, dword [ebp - 0xbd4]
jle 0x46101c
mov dword [ebp - 0x19fc], 1
jmp 0x461023
and dword [ebp - 0x19fc], 0
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x19fc]
cmp ecx, dword [eax]
jl 0x461053
mov dword [ebp - 0xbdc], 1
jmp 0x46105a
and dword [ebp - 0xbdc], 0
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
push dword [eax]
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc8b
mov ecx, dword [ebp - 0xbdc]
mov dword [eax], ecx
jmp 0x46097b
mov dword [ebp - 0xe0], 0xf5540d7f
mov dword [ebp - 0x1edc], 0x110cbbbc
mov dword [ebp - 0xe0], 0
jmp 0x4610ae
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jg 0x46127f
mov dword [ebp - 0xa10], 0x58d020bd
mov dword [ebp - 0x1ed4], 7
mov dword [ebp - 0x584], 0
jmp 0x4610e8
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 3
jge 0x461104
mov eax, dword [ebp - 0x584]
mov dword [ebp + eax*4 - 0x2b40], 0
jmp 0x4610db
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xa10], eax
jl 0x46111e
mov dword [ebp - 0x1704], 1
jmp 0x461125
and dword [ebp - 0x1704], 0
cmp dword [ebp - 0xe0], 0
je 0x461143
cmp dword [ebp - 0xe0], 0
je 0x461143
mov dword [ebp - 0x1344], 1
jmp 0x46114a
and dword [ebp - 0x1344], 0
cmp dword [ebp - 0x1344], 1
jl 0x46116c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b40], 0
jne 0x46116c
and dword [ebp - 0xbe4], 0
jmp 0x461176
mov dword [ebp - 0xbe4], 1
mov eax, dword [ebp - 0xbe4]
sub eax, 0x8699
cmp dword [ebp - 0x1704], eax
jle 0x461195
mov dword [ebp - 0x1ec4], 1
jmp 0x46119c
and dword [ebp - 0x1ec4], 0
cmp dword [ebp - 0xe0], 0
jne 0x4611b2
xor eax, eax
jne 0x4611b2
and dword [ebp - 0xbec], 0
jmp 0x4611bc
mov dword [ebp - 0xbec], 1
cmp dword [ebp - 0xbec], 7
jle 0x4611d1
mov dword [ebp - 0x134c], 1
jmp 0x4611d8
and dword [ebp - 0x134c], 0
cmp dword [ebp - 0x134c], 0xfffffffe
jb 0x4611ed
mov dword [ebp - 0x1ecc], 1
jmp 0x4611f4
and dword [ebp - 0x1ecc], 0
mov eax, dword [ebp - 0x1ed4]
mov dword [ebp - 0x2774], eax
mov eax, dword [ebp - 0xa10]
push 8
pop ecx
sub ecx, dword [ebp - 0xe0]
imul ecx, ecx, 0xfffffff7
sub eax, ecx
cmp eax, dword [ebp - 0xe0]
je 0x461231
mov eax, 0xa4d91f06
test eax, eax
je 0x461231
mov dword [ebp - 0xbf4], 1
jmp 0x461238
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0xbf4]
sub eax, dword [ebp - 0x1edc]
jne 0x461264
or eax, 0xffffffff
jne 0x461264
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b40], 0
jne 0x461264
and dword [ebp - 0x18b4], 0
jmp 0x46126e
mov dword [ebp - 0x18b4], 1
mov eax, dword [ebp - 0x18b4]
mov dword [ebp - 0xa10], eax
jmp 0x4610a1
cmp dword [ebp - 0x1ee4], 0x50cfdfe9
jle 0x461297
mov dword [ebp - 0xbfc], 1
jmp 0x46129e
and dword [ebp - 0xbfc], 0
cmp dword [ebp - 0xbfc], 0xa284
je 0x4612b6
mov dword [ebp - 0x1354], 1
jmp 0x4612bd
and dword [ebp - 0x1354], 0
cmp dword [ebp - 0x1354], 0x9b78
jle 0x4612d5
mov dword [ebp - 0x1eec], 1
jmp 0x4612dc
and dword [ebp - 0x1eec], 0
push 3
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
push 0
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x1ef4]
imul ecx, dword [eax]
cmp ecx, 0xdef9
jg 0x461313
mov dword [ebp - 0xc04], 1
jmp 0x46131a
and dword [ebp - 0xc04], 0
push 1
lea ecx, [ebp - 0x25f4]
call fcn.0042dc8b
mov ecx, dword [ebp - 0xc04]
add ecx, dword [eax]
cmp ecx, 0xe70
je 0x461343
mov dword [ebp - 0x170c], 1
jmp 0x46134a
and dword [ebp - 0x170c], 0
push 2
lea ecx, [ebp - 0x844]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x170c]
mov dword [eax], ecx
lea ecx, [ebp - 0x25f4]
call fcn.0042dc6f
lea ecx, [ebp - 0x844]
call fcn.0042dc6f
lea ecx, [ebp - 0x1ae0]
call fcn.0042dc6f
mov dword [ebp - 0x454], 0x307b5ca9
mov dword [ebp - 0x58c], 0xb80be39e
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x277c], 0xc7279c90
mov dword [ebp - 0x6e8], 0
jmp 0x4613c1
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 3
jge 0x4613dd
mov eax, dword [ebp - 0x6e8]
mov dword [ebp + eax*4 - 0x30a4], 0xeb300a9e
jmp 0x4613b4
cmp dword [ebp - 0x454], 1
jle 0x4613f2
mov dword [ebp - 0xc0c], 1
jmp 0x4613f9
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4b4], 0x1a
jmp 0x46141e
mov eax, dword [ebp - 0x4b4]
dec eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0xffffffee
jg 0x461551
mov dword [ebp - 0x2784], 0xd9532955
mov dword [ebp - 0x100], 0
jmp 0x46144e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x46146a
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x3048], 0xfffffffe
jmp 0x461441
mov dword [ebp - 0x100], 0
jmp 0x461483
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x46149f
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x278c], 8
jmp 0x461476
mov dword [ebp - 0x58c], 1
jmp 0x4614b8
mov eax, dword [ebp - 0x58c]
dec eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0
jl 0x46154c
mov dword [ebp - 0x1f04], 0
mov dword [ebp - 0x1efc], 0xffffffff
mov dword [ebp - 0x454], 1
jmp 0x4614f2
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jl 0x46153b
mov dword [ebp - 0x135c], 0xe10b49f2
mov eax, dword [ebp - 0x135c]
dec eax
mov dword [ebp - 0x135c], eax
mov byte [ebp - 0x2bd], 0
movzx eax, byte [ebp - 0x2bd]
test eax, eax
je 0x461539
push 0
push 0
push 0x1fa3
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x4614e5
mov eax, dword [ebp - 0x1efc]
mov dword [ebp - 0x1f04], eax
jmp 0x4614ab
jmp 0x461411
cmp dword [ebp + 8], 2
jl 0x468931
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x20], 0
jmp 0x461572
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe2
jne 0x46159a
mov byte [ebp - 0x2bf], 0
movzx eax, byte [ebp - 0x2bf]
test eax, eax
je 0x461598
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
jmp 0x46156b
mov dword [ebp - 0x20], 0
jmp 0x4615aa
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff6
jl 0x461837
mov dword [ebp - 0x380], 0x80d4
push 4
lea ecx, [ebp - 0x1b8c]
call fcn.0042db9d
push 4
lea ecx, [ebp - 0x2360]
call fcn.0042db9d
mov dword [ebp - 0x1f1c], 0xb07f
mov dword [ebp - 0x178], 0
jmp 0x4615fb
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 4
jge 0x46161d
push dword [ebp - 0x178]
lea ecx, [ebp - 0x1b8c]
call fcn.0042dc8b
mov dword [eax], 0xfff9
jmp 0x4615ee
mov dword [ebp - 0x178], 0
jmp 0x461636
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 4
jge 0x461658
push dword [ebp - 0x178]
lea ecx, [ebp - 0x2360]
call fcn.0042dc8b
mov dword [eax], 0xe5034859
jmp 0x461629
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x380], eax
jl 0x46166f
mov dword [ebp - 0xc14], 1
jmp 0x461676
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0xc14], eax
jl 0x461690
mov dword [ebp - 0xc24], 1
jmp 0x461697
and dword [ebp - 0xc24], 0
mov esi, dword [ebp - 0x380]
add esi, dword [ebp - 0x380]
push 1
lea ecx, [ebp - 0x1b8c]
call fcn.0042dc8b
cmp esi, dword [eax]
jle 0x4616d2
push 2
lea ecx, [ebp - 0x1b8c]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x4616d2
mov dword [ebp - 0x198c], 1
jmp 0x4616d9
and dword [ebp - 0x198c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x198c], eax
je 0x4616f0
mov dword [ebp - 0xc1c], 1
jmp 0x4616f7
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0xc1c]
jge 0x461711
mov dword [ebp - 0x1364], 1
jmp 0x461718
and dword [ebp - 0x1364], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x1364], eax
jne 0x461732
mov dword [ebp - 0x1f0c], 1
jmp 0x461739
and dword [ebp - 0x1f0c], 0
mov esi, dword [ebp - 0xc24]
sub esi, dword [ebp - 0x20]
push 1
lea ecx, [ebp - 0x2360]
call fcn.0042dc8b
mov dword [eax], esi
mov esi, dword [ebp - 0x20]
push 1
lea ecx, [ebp - 0x1b8c]
call fcn.0042dc8b
cmp esi, dword [eax]
jle 0x461771
mov dword [ebp - 0xc2c], 1
jmp 0x461778
and dword [ebp - 0xc2c], 0
cmp dword [ebp - 0x20], 4
jle 0x46178a
mov dword [ebp - 0x1714], 1
jmp 0x461791
and dword [ebp - 0x1714], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1714]
jne 0x4617a8
mov dword [ebp - 0x1f14], 1
jmp 0x4617af
and dword [ebp - 0x1f14], 0
mov eax, dword [ebp - 0x1f1c]
mov dword [ebp - 0x2794], eax
push 1
lea ecx, [ebp - 0x1b8c]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x20]
imul ecx, dword [eax]
cmp dword [ebp - 0xc2c], ecx
jge 0x4617e2
mov dword [ebp - 0x136c], 1
jmp 0x4617e9
and dword [ebp - 0x136c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x136c], eax
jg 0x461800
mov dword [ebp - 0xc34], 1
jmp 0x461807
and dword [ebp - 0xc34], 0
push 1
lea ecx, [ebp - 0x2360]
call fcn.0042dc8b
mov ecx, dword [ebp - 0xc34]
mov dword [eax], ecx
lea ecx, [ebp - 0x2360]
call fcn.0042dc6f
lea ecx, [ebp - 0x1b8c]
call fcn.0042dc6f
jmp 0x4615a3
mov dword [ebp - 0x279c], 0x57a1
mov dword [ebp - 0x108], 0
jmp 0x46185a
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x461876
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x860], 0xffff
jmp 0x46184d
mov dword [ebp - 0x108], 0
jmp 0x46188f
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x4618ab
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x2368], 0xcff8ee1d
jmp 0x461882
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x4618de
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x860], 0
je 0x4618de
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x860], 0
je 0x4618de
mov dword [ebp - 0x18bc], 1
jmp 0x4618e5
and dword [ebp - 0x18bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x860]
mov dword [ebp - 0x27a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x860]
mov dword [ebp - 0x27ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x860]
cmp dword [ebp - 0x18bc], eax
jge 0x46192c
mov dword [ebp - 0xc3c], 1
jmp 0x461933
and dword [ebp - 0xc3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x860]
add eax, dword [ebp - 0xc3c]
jne 0x461961
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x860], 0
jne 0x461961
and dword [ebp - 0x1374], 0
jmp 0x46196b
mov dword [ebp - 0x1374], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1374]
mov dword [ebp + eax - 0x2368], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2368]
mov dword [ebp - 0x27b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x860], 0
je 0x461a18
push 1
lea ecx, [ebp - 0x257c]
call fcn.0042db9d
mov dword [ebp - 0x1f24], 1
mov dword [ebp - 0x794], 0
jmp 0x4619d1
mov eax, dword [ebp - 0x794]
inc eax
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 1
jge 0x4619f3
push dword [ebp - 0x794]
lea ecx, [ebp - 0x257c]
call fcn.0042dc8b
mov dword [eax], 0xfffffff7
jmp 0x4619c4
push 0
lea ecx, [ebp - 0x257c]
call fcn.0042dc8b
mov eax, dword [eax]
mov dword [ebp - 0x1f24], eax
lea ecx, [ebp - 0x257c]
call fcn.0042dc6f
jmp 0x461a99
mov dword [ebp - 0x594], 0x9f5954e3
mov dword [ebp - 0x594], 1
jmp 0x461a3b
mov eax, dword [ebp - 0x594]
dec eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0
jl 0x461a99
mov byte [ebp - 0x2c1], 0
movzx eax, byte [ebp - 0x2c1]
test eax, eax
je 0x461a76
push 0
push 0x1b36
push 0x1702
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov byte [ebp - 0x29e], 0
movzx eax, byte [ebp - 0x29e]
test eax, eax
je 0x461a97
push 0
push 0x54e
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
jmp 0x461a2e
mov dword [ebp - 0x4bc], 6
push 4
lea ecx, [ebp - 0x524]
call fcn.0042db9d
mov dword [ebp - 0x18c4], 0
mov dword [ebp - 0xc64], 0xffffffff
mov dword [ebp - 0x139c], 0xffffffff
push 2
lea ecx, [ebp - 0x21ec]
call fcn.0042db9d
mov dword [ebp - 0x180], 0
jmp 0x461af4
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x461b16
push dword [ebp - 0x180]
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
mov dword [eax], 0xfffffffa
jmp 0x461ae7
mov dword [ebp - 0x180], 0
jmp 0x461b2f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x461b51
push dword [ebp - 0x180]
lea ecx, [ebp - 0x21ec]
call fcn.0042dc8b
mov dword [eax], 0xa83b1d31
jmp 0x461b22
push 2
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
mov dword [eax], 0x14
jmp 0x461b8a
push 2
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
cmp dword [eax], 9
jle 0x462027
mov dword [ebp - 0x8b8], 0xcf9e8bfa
push 2
lea ecx, [ebp - 0x2354]
call fcn.0042db9d
push 3
lea ecx, [ebp - 0x21d4]
call fcn.0042db9d
mov dword [ebp - 0x4c], 0
jmp 0x461bd4
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x461bea
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xa88], 0
jmp 0x461bcd
mov dword [ebp - 0x4c], 0
jmp 0x461bfa
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x461c16
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2354]
call fcn.0042dc8b
mov dword [eax], 0x270b
jmp 0x461bf3
mov dword [ebp - 0x4c], 0
jmp 0x461c26
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x461c42
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x21d4]
call fcn.0042dc8b
mov dword [eax], 0x2de4
jmp 0x461c1f
push 2
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x461d0c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa88]
mov dword [ebp - 0x27bc], eax
xor eax, eax
inc eax
je 0x461c8e
push 2
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x461c8e
and dword [ebp - 0x171c], 0
push 1
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x171c]
sub ecx, dword [eax]
sub ecx, 0x72e636df
cmp ecx, 0x9c279a20
jae 0x461cc4
and dword [ebp - 0xc54], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xa88]
imul esi, dword [ebp - 0xc54]
push 2
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
cmp esi, dword [eax]
jl 0x461d44
mov dword [ebp - 0x1a3c], 1
jmp 0x461d4b
and dword [ebp - 0x1a3c], 0
push 0
lea ecx, [ebp - 0x524]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x1a3c]
cmp ecx, dword [eax]
jl 0x461d7e
lea ecx, [ebp - 0x21ec]
call fcn.0042dc6f
lea ecx, [ebp - 0x524]
call fcn.0042dc6f
mov dword [ebp - 0x4bc], 0
jmp 0x462056
cmp dword [ebp - 0x4bc], 0xffffffee
jle 0x462f24
push 2
lea ecx, [ebp - 0x1fbc]
call fcn.0042db9d
mov dword [ebp - 0x27c4], 0xfb91e60e
mov dword [ebp - 0x27cc], 0xfffffffb
mov dword [ebp - 0x27d4], 0xffffffff
mov dword [ebp - 0x6f0], 0
jmp 0x4620a7
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 2
jge 0x4620c9
push dword [ebp - 0x6f0]
lea ecx, [ebp - 0x1fbc]
call fcn.0042dc8b
mov dword [eax], 1
jmp 0x46209a
push 0
lea ecx, [ebp - 0x1fbc]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x4620ff
push 0
lea ecx, [ebp - 0x1fbc]
call fcn.0042dc8b
cmp dword [eax], 0xfffffffd
jl 0x462326
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x27dc], 0xfffffff6
mov dword [ebp - 0x27e4], 0
mov dword [ebp - 0xcb4], 0xffff
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x110], 0x17
jmp 0x462163
cmp dword [ebp - 0x110], 0x1a
jge 0x462321
mov dword [ebp - 0x1aac], 0xfcf09cc2
mov dword [ebp - 0x1aa8], 0xfcf09cc2
mov dword [ebp - 0x1aa4], 0xfcf09cc2
mov dword [ebp - 0x1aa0], 0xfcf09cc2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1aac], 0
jmp 0x4621c6
jmp 0x4620db
lea ecx, [ebp - 0x1fbc]
call fcn.0042dc6f
mov dword [ebp - 0x214c], 0xe57b
mov dword [ebp - 0x188], 0xfffffffe
mov dword [ebp - 0x8c0], 0xfffffffd
mov dword [ebp - 0x990], 0x3086335c
mov dword [ebp - 0x824], 0x1477
mov dword [ebp - 0x9e8], 0x6d9e96b
mov dword [ebp - 0xcbc], 0
mov dword [ebp - 0x3d8], 0xfffffffd
mov dword [ebp - 0x1f5c], 0xa1e2510a
mov dword [ebp - 0x59c], 0
jmp 0x4623a4
cmp dword [ebp - 0x59c], 2
jge 0x4623c0
mov eax, dword [ebp - 0x59c]
mov dword [ebp + eax*4 - 0x2a54], 0xbbe26b5c
jmp 0x462397
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x990], eax
cmp dword [ebp - 0x990], 1
jl 0x4623e8
mov dword [ebp - 0x40], 0
jmp 0x462f34
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x462f4a
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x45c], 1
jmp 0x462f2d
mov dword [ebp - 0x40], 0
jmp 0x462f5a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x462f70
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x26cc], 9
jmp 0x462f53
mov dword [ebp - 0x40], 0
jmp 0x462f80
cmp dword [ebp - 0x40], 1
jge 0x462f96
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x28b4], 0
jmp 0x462f79
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0x28bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0x28c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0x28cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x45c], 0x8f57
jle 0x462fee
cmp dword [ebp + 8], 1
jne 0x46f777
mov dword [ebp - 0x2df4], 0x70ad6f2e
mov dword [ebp - 0x2df0], 0x70ad6f2e
mov dword [ebp - 0x2dec], 0x70ad6f2e
mov dword [ebp - 0x2de8], 0x70ad6f2e
push 4
lea ecx, [ebp - 0x200c]
call fcn.0042db9d
mov dword [ebp - 0x68c], 0
jmp 0x468989
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 4
jge 0x4689ab
push dword [ebp - 0x68c]
lea ecx, [ebp - 0x200c]
call fcn.0042dc8b
mov dword [eax], 9
jmp 0x46897c
push 3
lea ecx, [ebp - 0x200c]
call fcn.0042dc8b
mov dword [eax], 3
jmp 0x4689e4
push 3
lea ecx, [ebp - 0x200c]
call fcn.0042dc8b
mov dword [ebp - 0x15dc], eax
mov eax, dword [ebp - 0x15dc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x15dc]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x200c]
call fcn.0042dc8b
cmp dword [eax], 0
jl 0x468a12
mov byte [ebp - 0x27e], 0
movzx eax, byte [ebp - 0x27e]
test eax, eax
je 0x468a10
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
jmp 0x4689c0
lea ecx, [ebp - 0x200c]
call fcn.0042dc6f
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042db9d
mov dword [ebp - 0x111c], 0xa56c37fc
mov dword [ebp - 0x1ce8], 0xfffffffa
mov dword [ebp - 0x2ec0], 0x6b7a7bc6
mov dword [ebp - 0x7d4], 0
jmp 0x468a61
mov eax, dword [ebp - 0x7d4]
inc eax
mov dword [ebp - 0x7d4], eax
cmp dword [ebp - 0x7d4], 2
jge 0x468a83
push dword [ebp - 0x7d4]
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
mov dword [eax], 1
jmp 0x468a54
mov byte [ebp - 0x2b2], 0
movzx eax, byte [ebp - 0x2b2]
test eax, eax
je 0x468a9d
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
mov dword [eax], 0xbaeef20f
mov eax, 0xbaeef20f
test eax, eax
je 0x468bd6
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
push 1
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
mov esi, eax
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
mov esi, dword [esi]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
cmp esi, dword [eax]
jl 0x468b07
mov dword [ebp - 0x1114], 1
jmp 0x468b0e
and dword [ebp - 0x1114], 0
cmp dword [ebp - 0x1114], 0x68593f9b
jg 0x468b26
mov dword [ebp - 0x19e4], 1
jmp 0x468b2d
and dword [ebp - 0x19e4], 0
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x111c], eax
mov esi, dword [ebp - 0x111c]
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
mov edi, dword [eax]
sub edi, esi
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
cmp edi, dword [eax]
jl 0x468b7c
mov dword [ebp - 0x15e4], 1
jmp 0x468b83
and dword [ebp - 0x15e4], 0
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
mov esi, dword [ebp - 0x15e4]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042dc8b
cmp esi, dword [eax]
jl 0x468bb6
mov dword [ebp - 0x1124], 1
jmp 0x468bbd
and dword [ebp - 0x1124], 0
mov eax, 0xad43
sub eax, dword [ebp - 0x1124]
je 0x468bd6
mov dword [ebp - 0x1854], 1
jmp 0x468bdd
and dword [ebp - 0x1854], 0
mov eax, dword [ebp - 0x1854]
mov dword [ebp - 0x1ce8], eax
lea ecx, [ebp - 0x86c]
call fcn.0042dc6f
mov dword [ebp - 0x228], 0xe83c773
mov dword [ebp - 0x514], 0xffffffff
mov dword [ebp - 0x938], 0x3f08700d
mov dword [ebp - 0x20b8], 0xde8c
mov dword [ebp - 0x1cf0], 0
mov dword [ebp - 0x694], 0
jmp 0x468c3f
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 3
jge 0x468c5b
mov eax, dword [ebp - 0x694]
mov dword [ebp + eax*4 - 0x201c], 1
jmp 0x468c32
mov dword [ebp - 0x228], 0
jmp 0x468c74
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jg 0x468cc9
mov dword [ebp - 0x770], 0
mov dword [ebp - 0x770], 0
jmp 0x468ca0
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 2
jg 0x468cc7
mov byte [ebp - 0x280], 0
movzx eax, byte [ebp - 0x280]
test eax, eax
je 0x468cc5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
jmp 0x468c93
jmp 0x468c67
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x201c]
cmp dword [ebp + eax - 0x201c], ecx
jg 0x468cf1
mov dword [ebp - 0x112c], 1
jmp 0x468cf8
and dword [ebp - 0x112c], 0
cmp dword [ebp - 0x112c], 5
jb 0x468d0d
mov dword [ebp - 0x15ec], 1
jmp 0x468d14
and dword [ebp - 0x15ec], 0
cmp dword [ebp - 0x15ec], 0xffffffff
jle 0x468d29
mov dword [ebp - 0x1134], 1
jmp 0x468d30
and dword [ebp - 0x1134], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x514]
imul ecx, dword [ebp - 0x1134]
cmp dword [ebp + eax - 0x201c], ecx
jg 0x468d57
mov dword [ebp - 0x195c], 1
jmp 0x468d5e
and dword [ebp - 0x195c], 0
mov eax, dword [ebp - 0x514]
cmp dword [ebp - 0x195c], eax
jle 0x468d78
mov dword [ebp - 0x113c], 1
jmp 0x468d7f
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x113c]
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 0xa0c0
jge 0x468dac
cmp dword [ebp - 0x514], 0
je 0x468dac
mov dword [ebp - 0x15f4], 1
jmp 0x468db3
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 0x15f4]
sub eax, dword [ebp - 0x228]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x201c]
cmp dword [ebp - 0x228], eax
jle 0x468de1
mov dword [ebp - 0x1144], 1
jmp 0x468de8
and dword [ebp - 0x1144], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1144]
sub ecx, dword [ebp + eax - 0x201c]
mov dword [ebp - 0x228], ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x2ec8], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x2ed0], eax
mov eax, dword [ebp - 0x20b8]
cmp dword [ebp - 0x938], eax
je 0x468e32
mov dword [ebp - 0x185c], 1
jmp 0x468e39
and dword [ebp - 0x185c], 0
mov eax, dword [ebp - 0x514]
cmp dword [ebp - 0x185c], eax
jle 0x468e53
mov dword [ebp - 0x114c], 1
jmp 0x468e5a
and dword [ebp - 0x114c], 0
mov eax, dword [ebp - 0x114c]
mov dword [ebp - 0x1cf0], eax
push 1
lea ecx, [ebp - 0x1b20]
call fcn.0042db9d
push 2
lea ecx, [ebp - 0xa3c]
call fcn.0042db9d
mov dword [ebp - 0xe8], 0
jmp 0x468e99
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x468ebb
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x1b20]
call fcn.0042dc8b
mov dword [eax], 0x53b26bdd
jmp 0x468e8c
mov dword [ebp - 0xe8], 0
jmp 0x468ed4
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x468ef6
push dword [ebp - 0xe8]
lea ecx, [ebp - 0xa3c]
call fcn.0042dc8b
mov dword [eax], 3
jmp 0x468ec7
push 0
lea ecx, [ebp - 0x1b20]
call fcn.0042dc8b
and dword [eax], 0
jmp 0x468f2c
push 0
lea ecx, [ebp - 0x1b20]
call fcn.0042dc8b
cmp dword [eax], 0x16
jle 0x469255
mov dword [ebp - 0xb0], 0xb999fb02
mov dword [ebp - 0x116c], 0
mov dword [ebp - 0xb0], 1
jmp 0x468f6f
lea ecx, [ebp - 0xa3c]
call fcn.0042dc6f
lea ecx, [ebp - 0x1b20]
call fcn.0042dc6f
mov dword [ebp - 0x948], 0x6aa16542
mov dword [ebp - 0x2448], 0xfffffffd
mov dword [ebp - 0x2444], 0xfffffffd
mov dword [ebp - 0x2440], 0xfffffffd
mov dword [ebp - 0x243c], 0xfffffffd
lea ecx, [ebp - 0x9f1]
call fcn.0042dc9a
push eax
lea eax, [ebp - 0x2438]
push eax
lea eax, [ebp - 0x2448]
push eax
lea ecx, [ebp - 0x3070]
call fcn.0042dc9d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2f60]
call fcn.0042dc49
push 1
lea ecx, [ebp - 0x202c]
call fcn.0042db9d
mov dword [ebp - 0x2e08], 0xb3a3fc4b
mov dword [ebp - 0x2e04], 0xb3a3fc4b
mov dword [ebp - 0x2e00], 0xb3a3fc4b
mov dword [ebp - 0x2dfc], 0xb3a3fc4b
mov dword [ebp - 0x82c], 0
jmp 0x469320
mov dword [ebp - 0x490], 0x68206240
mov dword [ebp - 0x1160], 0x6ce1a812
mov dword [ebp - 0x1188], 0x10b49f2b
mov byte [ebp - 0x26f], 0
movzx eax, byte [ebp - 0x26f]
test eax, eax
je 0x46f7b4
push 0
push 0x150d
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov dword [ebp - 0x490], 0xfffffff7
jmp 0x46f7cd
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 1
jne 0x46fba9
mov dword [ebp - 0xa4], 0x976ff55e
push 3
lea ecx, [ebp - 0x2630]
call fcn.0042db9d
mov dword [ebp - 0x6e4], 0
jmp 0x46f80a
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 3
jge 0x46f82c
push dword [ebp - 0x6e4]
lea ecx, [ebp - 0x2630]
call fcn.0042dc8b
mov dword [eax], 0xd34108fa
jmp 0x46f7fd
mov dword [ebp - 0xa4], 0
jmp 0x46f845
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x1a
jg 0x46fb99
push 1
lea ecx, [ebp - 0x1a88]
call fcn.0042db9d
mov dword [ebp - 0x8dc], 0xffffffff
mov dword [ebp - 0x2510], 0x697ab83d
mov dword [ebp - 0x250c], 0x697ab83d
mov dword [ebp - 0x2508], 0x697ab83d
mov dword [ebp - 0x2504], 0x697ab83d
lea ecx, [ebp - 0x9e9]
call fcn.0042dc9a
push eax
lea eax, [ebp - 0x2500]
push eax
lea eax, [ebp - 0x2510]
push eax
lea ecx, [ebp - 0x2fe8]
call fcn.0042dc9d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2ca0]
call fcn.0042dc49
mov dword [ebp - 0x1e40], 0xffffffff
mov dword [ebp - 0xec], 0
jmp 0x46f8e9
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x46f90b
push dword [ebp - 0xec]
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
mov dword [eax], 0xa1fa
jmp 0x46f8dc
mov dword [ebp - 0xec], 0
jmp 0x46f924
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x46f940
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x272c], 1
jmp 0x46f917
mov byte [ebp - 0x271], 0
movzx eax, byte [ebp - 0x271]
test eax, eax
je 0x46f972
push 0
push 0x1b4b
push 0x1d06
push 0
push 0x1ea7
push 0x1f7a
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2d80], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x28a8], eax
mov eax, dword [ebp - 0x8dc]
cmp dword [ebp - 0xa4], eax
jl 0x46f9ac
cmp dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1160], eax
cmp dword [ebp - 0x1160], 0xc90e69cd
jne 0x46f9d0
mov dword [ebp - 0x1168], 1
jmp 0x46f9d7
and dword [ebp - 0x1168], 0
mov eax, dword [ebp - 0x8dc]
cmp eax, dword [ebp - 0x1168]
jl 0x46f9f7
mov eax, 0xffff
test eax, eax
jne 0x46f9f7
and dword [ebp - 0x1170], 0
jmp 0x46fa01
mov dword [ebp - 0x1170], 1
cmp dword [ebp - 0x1170], 0xffff
jb 0x46fa19
mov dword [ebp - 0x1e50], 1
jmp 0x46fa20
and dword [ebp - 0x1e50], 0
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x2b54], eax
cmp dword [ebp - 0xa4], 0
je 0x46fa53
push 0
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
cmp dword [eax], 0
je 0x46fa53
mov dword [ebp - 0x1178], 1
jmp 0x46fa5a
and dword [ebp - 0x1178], 0
mov eax, dword [ebp - 0x1178]
sub eax, 0xa9e1a0
mov dword [ebp - 0x1180], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1180]
mov dword [ebp + eax - 0x272c], ecx
mov eax, dword [ebp - 0x1180]
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1188], eax
jge 0x46faa4
mov dword [ebp - 0x8e4], 1
jmp 0x46faab
and dword [ebp - 0x8e4], 0
push 0
lea ecx, [ebp - 0x2630]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x8e4]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0x2ca0]
call fcn.0042dc8b
mov ecx, dword [ebp - 0x8e4]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
cmp dword [ebp - 0xa4], 0xe3f0e26a
je 0x46fafa
mov dword [ebp - 0x1190], 1
jmp 0x46fb01
and dword [ebp - 0x1190], 0
push 0
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
mov esi, dword [ebp - 0x1190]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
add esi, dword [eax]
je 0x46fb3d
mov eax, 0xfff8
test eax, eax
je 0x46fb3d
mov dword [ebp - 0x1198], 1
jmp 0x46fb44
and dword [ebp - 0x1198], 0
push 0
lea ecx, [ebp - 0x1a88]
call fcn.0042dc8b
imul ecx, dword [ebp - 0x1198], 0xffff
cmp dword [eax], ecx
jg 0x46fb6b
mov dword [ebp - 0x11a0], 1
jmp 0x46fb72
and dword [ebp - 0x11a0], 0
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x1e40], eax
lea ecx, [ebp - 0x2ca0]
call fcn.0042dc6f
lea ecx, [ebp - 0x1a88]
call fcn.0042dc6f
jmp 0x46f838
lea ecx, [ebp - 0x2630]
call fcn.0042dc6f
jmp 0x46f7c0
mov dword [ebp - 0x7c], 0x25d1
mov dword [ebp - 0xd4], 0x80997408
mov dword [ebp - 0x20c], 0x1b6ba00b
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x8f4], 1
mov dword [ebp - 0x8ec], 0x4f12ce33
mov dword [ebp - 0x1e64], 0xa10b
mov dword [ebp - 0x1260], 0xfffffff6
mov dword [ebp - 0x1e68], 0x20126639
mov dword [ebp - 0xf4], 0
jmp 0x46fc19
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x46fc35
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x2228], 1
jmp 0x46fc0c
mov dword [ebp - 0xf4], 0
jmp 0x46fc4e
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x46fc6a
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x1e3c], 0
jmp 0x46fc41
cmp dword [ebp - 0x7c], 0
jne 0x46fef5
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x28b0], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jge 0x46fc91
mov dword [ebp - 0x11a8], 1
jmp 0x46fc98
and dword [ebp - 0x11a8], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x11a8]
jne 0x46fcaf
mov dword [ebp - 0x11b0], 1
jmp 0x46fcb6
and dword [ebp - 0x11b0], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x11b0]
jle 0x46fcdf
cmp dword [ebp - 0xd4], 0
jne 0x46fcdf
and dword [ebp - 0x11b8], 0
jmp 0x46fce9
mov dword [ebp - 0x11b8], 1
cmp dword [ebp - 0x11b8], 1
jbe 0x46fcfe
mov dword [ebp - 0x11c0], 1
jmp 0x46fd05
and dword [ebp - 0x11c0], 0
cmp dword [ebp - 0x11c0], 0x47e0
jl 0x46fd1d
mov dword [ebp - 0x1e54], 1
jmp 0x46fd24
and dword [ebp - 0x1e54], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2e60], eax
cmp dword [ebp - 0xd4], 0
jne 0x46fd48
cmp dword [ebp - 0xd4], 0
jne 0x46fd48
and dword [ebp - 0x11c8], 0
jmp 0x46fd52
mov dword [ebp - 0x11c8], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x11c8], eax
jle 0x46fd69
mov dword [ebp - 0x11d0], 1
jmp 0x46fd70
and dword [ebp - 0x11d0], 0
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x11d0]
jne 0x46fd96
mov eax, 0xc586
test eax, eax
jne 0x46fd96
cmp dword [ebp - 0xd4], 0
jne 0x46fd96
and dword [ebp - 0x1e4c], 0
jmp 0x46fda0
mov dword [ebp - 0x1e4c], 1
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x28b8], eax
cmp dword [ebp - 0xd4], 0x7f1b
jne 0x46fdc4
mov dword [ebp - 0x11d8], 1
jmp 0x46fdcb
and dword [ebp - 0x11d8], 0
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x11d8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2228]
je 0x46fdef
mov dword [ebp - 0x11e0], 1
jmp 0x46fdf6
and dword [ebp - 0x11e0], 0
mov eax, dword [ebp - 0x11e0]
sub eax, dword [ebp - 0x20c]
cmp eax, 0xffffffff
jge 0x46fe13
mov dword [ebp - 0x11e8], 1
jmp 0x46fe1a
and dword [ebp - 0x11e8], 0
mov eax, dword [ebp - 0x11e8]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
neg eax
jne 0x46fe39
cmp dword [ebp - 0x20c], 0
je 0x46fe42
mov eax, 0xdfeee83a
test eax, eax
jne 0x46fe52
push 3
pop eax
test eax, eax
jne 0x46fe52
and dword [ebp - 0x11f0], 0
jmp 0x46fe5c
mov dword [ebp - 0x11f0], 1
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x11f0], eax
jg 0x46fe76
mov dword [ebp - 0x11f8], 1
jmp 0x46fe7d
and dword [ebp - 0x11f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2228]
add eax, dword [ebp - 0x11f8]
je 0x46fea3
xor eax, eax
inc eax
je 0x46fea3
mov dword [ebp - 0x1200], 1
jmp 0x46feaa
and dword [ebp - 0x1200], 0
mov eax, dword [ebp - 0x8f4]
mov ecx, dword [ebp - 0x1200]
lea eax, [ecx + eax - 0xb0c3]
test eax, eax
jne 0x46fecf
or eax, 0xffffffff
jne 0x46fecf
and dword [ebp - 0x1208], 0
jmp 0x46fed9
mov dword [ebp - 0x1208], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e3c]
imul eax, dword [ebp - 0x1208]
test eax, eax
je 0x470021
mov dword [ebp - 0x3b4], 0xfddd0c6a
mov dword [ebp - 0x1e58], 0xfffffff9
mov dword [ebp - 0x1228], 0x1ec3d250
mov dword [ebp - 0x20d8], 0x2131ac69
xor eax, eax
inc eax
je 0x46ff3e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2228], 0
je 0x46ff3e
mov dword [ebp - 0x1210], 1
jmp 0x46ff45
and dword [ebp - 0x1210], 0
cmp dword [ebp - 0x1210], 0x85c3
jne 0x46ff5d
mov dword [ebp - 0x1e5c], 1
jmp 0x46ff64
and dword [ebp - 0x1e5c], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x2b64], eax
mov eax, dword [ebp - 0x1e64]
mov dword [ebp - 0x1e58], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x28c0], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x2d88], eax
mov eax, dword [ebp - 0x8ec]
mov ecx, dword [ebp - 0x3b4]
add ecx, dword [ebp - 0xd4]
imul eax, ecx
cmp eax, dword [ebp - 0x3b4]
jle 0x46ffbd
mov dword [ebp - 0x1218], 1
jmp 0x46ffc4
and dword [ebp - 0x1218], 0
cmp dword [ebp - 0x1218], 0xc5fd
jl 0x46ffdc
mov dword [ebp - 0x1220], 1
jmp 0x46ffe3
and dword [ebp - 0x1220], 0
mov eax, dword [ebp - 0x1220]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x1228], eax
jle 0x470009
mov dword [ebp - 0x1230], 1
jmp 0x470010
and dword [ebp - 0x1230], 0
mov eax, dword [ebp - 0x1230]
mov dword [ebp - 0x20d8], eax
jmp 0x47013e
mov dword [ebp - 0x1e60], 0x115e53f0
mov dword [ebp - 0x6ec], 0
jmp 0x470044
cmp dword [ebp - 0x6ec], 3
jge 0x470060
mov eax, dword [ebp - 0x6ec]
mov dword [ebp + eax*4 - 0x2f24], 8
jmp 0x470037
mov byte [ebp - 0x273], 0
movzx eax, byte [ebp - 0x273]
test eax, eax
je 0x47007a
xor eax, eax
jne 0x470198
mov dword [ebp - 0xd4], 1
cmp dword [ebp - 0xd4], 0
jne 0x470167
cmp dword [ebp - 0x8f4], 0
jne 0x470167
and dword [ebp - 0x2048], 0
jmp 0x470171
mov dword [ebp - 0x2048], 1
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x28c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2228]
cmp dword [ebp - 0x7c], eax
jg 0x470198
and dword [ebp - 0x1258], 0
jmp 0x4701a2
mov dword [ebp - 0x1258], 1
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0x1260], eax
mov eax, dword [ebp - 0x1260]
imul eax, dword [ebp - 0x8f4]
cmp dword [ebp - 0x6f4], eax
jl 0x4701d8
mov dword [ebp - 0x1268], 1
jmp 0x4701df
and dword [ebp - 0x1268], 0
cmp dword [ebp - 0x1268], 0x52259155
jg 0x4701f7
mov dword [ebp - 0x1270], 1
jmp 0x4701fe
and dword [ebp - 0x1270], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x1270]
mov dword [ebp - 0x1e68], eax
mov dword [ebp - 0x8fc], 0x6aa16542
mov dword [ebp - 0x214], 0xfffffffd
mov dword [ebp - 0x3bc], 0x411d7fea
mov dword [ebp - 0x1e78], 1
mov dword [ebp - 0x6fc], 0
jmp 0x47024e
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 2
jge 0x47026a
mov eax, dword [ebp - 0x6fc]
mov dword [ebp + eax*4 - 0x1e48], 1
jmp 0x470241
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x2b74], eax
or eax, 0xffffffff
cmp eax, 0x8716b5b3
jne 0x47028c
mov dword [ebp - 0x1278], 1
jmp 0x470293
and dword [ebp - 0x1278], 0
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x1278]
cmp eax, dword [ebp - 0x214]
jl 0x4702b3
mov dword [ebp - 0x213c], 1
jmp 0x4702ba
and dword [ebp - 0x213c], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x28d0], eax
mov dword [ebp - 0x8fc], 0xef5d870a
mov eax, dword [ebp - 0x214]
sub eax, 0x1ef9
cmp dword [ebp - 0x8fc], eax
jge 0x4702ef
mov dword [ebp - 0x1280], 1
jmp 0x4702f6
and dword [ebp - 0x1280], 0
cmp dword [ebp - 0x1280], 4
jge 0x47030b
mov dword [ebp - 0x1288], 1
jmp 0x470312
and dword [ebp - 0x1288], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x1288], eax
jg 0x47032c
mov dword [ebp - 0x1e70], 1
jmp 0x470333
and dword [ebp - 0x1e70], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x2e68], eax
mov dword [ebp - 0x214], 0xcaa5d732
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x8fc], eax
jl 0x470363
mov dword [ebp - 0x1290], 1
jmp 0x47036a
and dword [ebp - 0x1290], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x1290], eax
jge 0x470384
mov dword [ebp - 0x1298], 1
jmp 0x47038b
and dword [ebp - 0x1298], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x1298], eax
jne 0x4703ae
cmp dword [ebp - 0x214], 0
je 0x4703ae
and dword [ebp - 0x12a0], 0
cmp dword [ebp - 0x12a0], 0x243b
jg 0x4703cd