Function at 0x4516db
Capabilities:
Check os version
Connect pipe
Create thread
Enumerate gui resources
Extract resource via kernel32 functions
Get file attributes
Get memory capacity
Hide graphical window
Log keystrokes
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Query service status
Read .ini file
Resume thread
Set registry value
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x32cc
call fcn.00486ea0
push esi
push edi
mov dword [ebp - 0xb90], 0xcbcb1a7a
mov dword [ebp - 0xba0], 0xbda18461
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x9ec], 0xfffc
mov dword [ebp - 0x190], 0
jmp 0x45172b
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jge 0x451747
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x24dc], 1
jmp 0x45171e
mov dword [ebp - 0x190], 0
jmp 0x451760
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x45177c
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x108], 0x2ba39464
jmp 0x451753
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x108], 3
jmp 0x4517aa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jl 0x451a7f
mov dword [ebp - 0x1ebc], 1
mov dword [ebp - 0x1eb8], 1
mov dword [ebp - 0x1eb4], 1
mov dword [ebp - 0x1eb0], 1
mov dword [ebp - 0x62c], 0x628405ce
mov dword [ebp - 0x22a8], 9
mov dword [ebp - 0x1d94], 2
mov dword [ebp - 0x60], 0
jmp 0x451814
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x45182a
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2fc4], 0x25189d9e
jmp 0x45180d
mov dword [ebp - 0x60], 0
jmp 0x45183a
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x451850
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2a30], 0xfffffff8
jmp 0x451833
mov dword [ebp - 0x60], 0
jmp 0x451860
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x451876
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2a3c], 0x61131e34
jmp 0x451859
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1ebc], 3
jmp 0x4518a4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ebc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ebc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ebc], 0
jl 0x451a67
mov dword [ebp - 0x624], 1
mov dword [ebp - 0x2c14], 0x77e815f8
mov dword [ebp - 0x624], 3
jmp 0x4518e5
mov eax, dword [ebp - 0x624]
dec eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 0
jl 0x451910
mov byte [ebp - 0x42a], 0
movzx eax, byte [ebp - 0x42a]
test eax, eax
je 0x45190e
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x4518d8
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x62c], eax
jl 0x451943
mov dword [ebp - 0x1f38], 1
jmp 0x45194a
and dword [ebp - 0x1f38], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x62c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2fc4]
cmp dword [ebp - 0x62c], eax
jge 0x451977
mov dword [ebp - 0xa58], 1
jmp 0x45197e
and dword [ebp - 0xa58], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa58]
mov dword [ebp + eax - 0x2a30], ecx
cmp dword [ebp - 0xa58], 0
jne 0x4519a8
xor eax, eax
inc eax
jne 0x4519a8
and dword [ebp - 0x1a38], 0
jmp 0x4519b2
mov dword [ebp - 0x1a38], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1ebc]
mov ecx, dword [ebp - 0x1a38]
lea eax, [ecx + eax - 1]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x108]
sub eax, dword [ebp + ecx*4 - 0x24dc]
imul eax, eax, 0x457a
test eax, eax
je 0x4519fc
cmp dword [ebp - 0x2b4], 0
je 0x4519fc
mov dword [ebp - 0x1d84], 1
jmp 0x451a03
and dword [ebp - 0x1d84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ebc]
mov eax, dword [ebp + eax*4 - 0x24dc]
cmp eax, dword [ebp - 0x1d84]
jne 0x451a2b
mov dword [ebp - 0x1d8c], 1
jmp 0x451a32
and dword [ebp - 0x1d8c], 0
mov eax, dword [ebp - 0x22a8]
imul eax, dword [ebp - 0x1d8c]
mov dword [ebp - 0x1d94], eax
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x28ac], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2a3c], 0x6c8c5cec
jmp 0x451889
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0xb90], eax
jmp 0x45178f
xor eax, eax
inc eax
je 0x451c20
mov dword [ebp - 0xb90], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp eax, dword [ebp - 0xb90]
jle 0x451ab3
mov dword [ebp - 0x22b0], 1
jmp 0x451aba
and dword [ebp - 0x22b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24dc]
mov dword [ebp - 0x28b4], eax
mov eax, dword [ebp - 0x9ec]
inc eax
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x28bc], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x28c4], eax
push 0x2e
pop eax
cmp eax, 0x5e26
jne 0x451b08
mov dword [ebp - 0x1d9c], 1
jmp 0x451b0f
and dword [ebp - 0x1d9c], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x1d9c], eax
jl 0x451b29
mov dword [ebp - 0x1da4], 1
jmp 0x451b30
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x1da4]
mov dword [ebp - 0xba0], eax
cmp dword [ebp - 0xba0], 0
je 0x451b4c
cmp dword [ebp - 0x9ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24dc]
mov dword [ebp - 0x28cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x28d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x2b4], eax
je 0x451b93
mov dword [ebp - 0x1dac], 1
jmp 0x451b9a
and dword [ebp - 0x1dac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x1dac], eax
jge 0x451bbb
mov dword [ebp - 0xb98], 1
jmp 0x451bc2
and dword [ebp - 0xb98], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb98]
mov dword [ebp + eax - 0x108], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x24dc]
cmp dword [ebp - 0xb98], eax
jge 0x451bf6
mov dword [ebp - 0x1db4], 1
jmp 0x451bfd
and dword [ebp - 0x1db4], 0
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x1db4]
jle 0x451c14
cmp dword [ebp - 0xba0], 0
je 0x451c20
mov dword [ebp - 0x1dbc], 1
jmp 0x451c27
and dword [ebp - 0x1dbc], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1dbc]
mov dword [ebp + eax - 0x24dc], ecx
mov dword [ebp - 0x28dc], 0xfffffffb
mov dword [ebp - 0x28e4], 0xef20fe6e
mov dword [ebp - 0x28ec], 1
mov dword [ebp - 0x1dc4], 1
mov dword [ebp - 0x208], 0
jmp 0x451c7b
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x451c97
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x28f4], 0
jmp 0x451c6e
mov dword [ebp - 0x208], 0
jmp 0x451cb0
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x451ccc
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x31d4], 0x1a4d63a8
jmp 0x451ca3
mov eax, dword [ebp - 0x1dc4]
inc eax
mov dword [ebp - 0x1dc4], eax
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0x9f4], 0
jmp 0x451cfc
mov eax, dword [ebp - 0x9f4]
inc eax
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x9f4], 0xa
je 0x451d4a
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0x9fc], 0
jmp 0x451d28
mov eax, dword [ebp - 0x9fc]
inc eax
mov dword [ebp - 0x9fc], eax
cmp dword [ebp - 0x9fc], 0
jne 0x451d48
mov dword [ebp - 0x22b8], 0
cmp dword [ebp - 0x22b8], 0
je 0x451d46
jmp 0x451d48
jmp 0x451d1b
jmp 0x451cef
mov dword [ebp - 0xab8], 0xcbcb1a7a
mov dword [ebp - 0x28fc], 4
mov dword [ebp - 0x2904], 0x56915a13
mov dword [ebp - 0x290c], 0x86cce57b
mov dword [ebp - 0x2914], 0
mov dword [ebp - 0x22c0], 0xf47a6d
mov dword [ebp - 0x1dcc], 8
mov dword [ebp - 0xa04], 0
jmp 0x451da9
mov eax, dword [ebp - 0xa04]
inc eax
mov dword [ebp - 0xa04], eax
cmp dword [ebp - 0xa04], 3
jge 0x451dc5
mov eax, dword [ebp - 0xa04]
mov dword [ebp + eax*4 - 0x2fdc], 0x1328f6c7
jmp 0x451d9c
mov eax, dword [ebp - 0x1dcc]
dec eax
mov dword [ebp - 0x1dcc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fdc]
mov dword [ebp - 0x22c0], eax
mov dword [ebp - 0xac0], 0xbda18461
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x328], 0xd94fe5f3
mov dword [ebp - 0x61c], 1
mov dword [ebp - 0xba8], 0xfffffff6
mov dword [ebp - 0x22c8], 0xa41a80d1
cmp dword [ebp - 0x328], 0
je 0x451f1f
mov eax, dword [ebp - 0x328]
imul eax, dword [ebp - 0x328]
imul eax, eax, 0xffff
cmp eax, 0xe82ca96
jle 0x451e54
mov dword [ebp - 0x1dd4], 1
jmp 0x451e5b
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x1dd4], eax
jg 0x451e75
mov dword [ebp - 0x1ddc], 1
jmp 0x451e7c
and dword [ebp - 0x1ddc], 0
cmp dword [ebp - 0x1ddc], 0xb3a3fc4b
jb 0x451e94
mov dword [ebp - 0x1de4], 1
jmp 0x451e9b
and dword [ebp - 0x1de4], 0
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x1de4]
jge 0x451eb5
mov dword [ebp - 0x1dec], 1
jmp 0x451ebc
and dword [ebp - 0x1dec], 0
mov eax, dword [ebp - 0x328]
add eax, dword [ebp - 0x1dec]
je 0x451edf
cmp dword [ebp - 0x61c], 0
je 0x451edf
mov dword [ebp - 0x1df4], 1
jmp 0x451ee6
and dword [ebp - 0x1df4], 0
mov eax, dword [ebp - 0x1df4]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0x291c], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x2924], eax
cmp dword [ebp - 0xba8], 0
je 0x451f1f
mov dword [ebp - 0x1dfc], 1
jmp 0x451f26
and dword [ebp - 0x1dfc], 0
cmp dword [ebp - 0x1dfc], 0x1888
jle 0x451f40
xor eax, eax
inc eax
jne 0x451f40
and dword [ebp - 0x1e04], 0
jmp 0x451f4a
mov dword [ebp - 0x1e04], 1
mov eax, dword [ebp - 0x1e04]
mov dword [ebp - 0x22c8], eax
mov dword [ebp - 0x61c], 0
jmp 0x451f6f
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0x11
jle 0x451fbc
mov dword [ebp - 0x1e0c], 0xffffffff
mov byte [ebp - 0x2e4], 0
movzx eax, byte [ebp - 0x2e4]
test eax, eax
je 0x451fad
push 0x14f6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
mov eax, dword [ebp - 0x1e0c]
inc eax
mov dword [ebp - 0x1e0c], eax
jmp 0x451f62
mov dword [ebp - 0x8dc], 0xfffc
mov dword [ebp - 0x448], 2
mov dword [ebp - 0x19c], 0xa928f0bd
mov dword [ebp - 0x6c], 0
jmp 0x451fea
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x452000
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x66c], 0
jmp 0x451fe3
mov dword [ebp - 0x6c], 0
jmp 0x452010
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x452026
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x638], 0xfff7
jmp 0x452009
mov dword [ebp - 0x6c], 0
jmp 0x452036
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x45204c
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x31e0], 0xfffffff7
jmp 0x45202f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x66c], 0
jmp 0x45207a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x66c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x66c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x66c], 0xb
je 0x4526a4
mov dword [ebp - 0x30], 0xdae8c9f3
mov dword [ebp - 0x330], 0x584d571f
mov dword [ebp - 0x22e8], 0xbb70294b
mov dword [ebp - 0x30], 1
jmp 0x4520b9
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x45269f
mov dword [ebp - 0x1e30], 3
mov dword [ebp - 0xa0c], 0
jmp 0x4520e6
mov eax, dword [ebp - 0xa0c]
inc eax
mov dword [ebp - 0xa0c], eax
cmp dword [ebp - 0xa0c], 4
jge 0x452102
mov eax, dword [ebp - 0xa0c]
mov dword [ebp + eax*4 - 0x2e80], 0xbb6e74
jmp 0x4520d9
mov eax, 0x94b2
test eax, eax
je 0x4521a4
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x638]
mov dword [ebp - 0x292c], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x638]
mov dword [ebp + ecx*4 - 0x638], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x638], 0
jle 0x452150
xor eax, eax
je 0x452150
mov dword [ebp - 0x1e14], 1
jmp 0x452157
and dword [ebp - 0x1e14], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x638]
cmp eax, dword [ebp - 0x1e14]
jne 0x452178
mov dword [ebp - 0x1e28], 1
jmp 0x45217f
and dword [ebp - 0x1e28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x66c]
imul eax, dword [ebp - 0x1e28]
cmp eax, dword [ebp - 0x30]
je 0x4521a4
mov dword [ebp - 0x22d0], 1
jmp 0x4521ab
and dword [ebp - 0x22d0], 0
mov eax, dword [ebp - 0x1e30]
mov dword [ebp - 0x2934], eax
mov eax, dword [ebp - 0x1e30]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x448], 0
jmp 0x4521dc
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x11
jge 0x45269a
mov dword [ebp - 0xa14], 0
jmp 0x452202
mov eax, dword [ebp - 0xa14]
inc eax
mov dword [ebp - 0xa14], eax
cmp dword [ebp - 0xa14], 3
jge 0x45221e
mov eax, dword [ebp - 0xa14]
mov dword [ebp + eax*4 - 0xc70], 0xfffffff9
jmp 0x4521f5
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x638]
mov dword [ebp - 0x293c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
mov dword [ebp - 0x2944], eax
mov dword [ebp - 0x19c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x66c]
cmp eax, dword [ebp - 0x19c]
je 0x452275
mov eax, 0x4260
test eax, eax
je 0x452275
mov dword [ebp - 0x1e38], 1
jmp 0x45227c
and dword [ebp - 0x1e38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc70]
imul ecx, dword [ebp - 0x1e38]
imul eax, ecx
test eax, eax
je 0x4522de
mov dword [ebp - 0x19c], 0
jmp 0x4522bd
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x4522d9
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xc70], 3
jmp 0x4522b0
jmp 0x45264e
mov dword [ebp - 0x22d8], 0x8b80bbe9
mov dword [ebp - 0xcac], 0xfffffffa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e80]
dec eax
jne 0x452312
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x66c], 0
je 0x452321
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e80], 0
jne 0x452337
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x638], 0
jne 0x452337
and dword [ebp - 0x1e40], 0
jmp 0x452341
mov dword [ebp - 0x1e40], 1
mov eax, dword [ebp - 0x22d8]
cmp eax, dword [ebp - 0x1e40]
jle 0x45235b
mov dword [ebp - 0x1e48], 1
jmp 0x452362
and dword [ebp - 0x1e48], 0
imul eax, dword [ebp - 0x1e48], 0x13e9
test eax, eax
jne 0x452386
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x638], 0
jne 0x452386
and dword [ebp - 0xea0], 0
jmp 0x452390
mov dword [ebp - 0xea0], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xea0], eax
jle 0x4523a7
mov dword [ebp - 0x1b7c], 1
jmp 0x4523ae
and dword [ebp - 0x1b7c], 0
cmp dword [ebp - 0x1b7c], 0
jne 0x4523c3
mov dword [ebp - 0xc9c], 1
jmp 0x4523ca
and dword [ebp - 0xc9c], 0
imul eax, dword [ebp - 0xc9c], 0xebc5
cmp eax, dword [ebp - 0x30]
jl 0x4523eb
mov eax, 0x51f0
test eax, eax
jne 0x4523eb
and dword [ebp - 0x1b84], 0
jmp 0x4523f5
mov dword [ebp - 0x1b84], 1
cmp dword [ebp - 0x1b84], 0x82d8
jge 0x45240d
mov dword [ebp - 0xca4], 1
jmp 0x452414
and dword [ebp - 0xca4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
cmp dword [ebp - 0xca4], eax
jne 0x452435
mov dword [ebp - 0x1b8c], 1
jmp 0x45243c
and dword [ebp - 0x1b8c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e80]
add eax, dword [ebp - 0x1b8c]
imul eax, eax, 0xffff
mov dword [ebp - 0xcac], eax
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x330], eax
jne 0x452481
mov dword [ebp - 0x1b94], 1
jmp 0x452488
and dword [ebp - 0x1b94], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x1b94], eax
jge 0x4524a2
mov dword [ebp - 0xcb4], 1
jmp 0x4524a9
and dword [ebp - 0xcb4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc70]
cmp dword [ebp - 0xcb4], eax
jle 0x4524ca
mov dword [ebp - 0x22e0], 1
jmp 0x4524d1
and dword [ebp - 0x22e0], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x294c], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x638]
mov dword [ebp - 0x2954], eax
cmp dword [ebp - 0x30], 0
jne 0x45250c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x66c], 0
jne 0x45250c
and dword [ebp - 0x1b9c], 0
jmp 0x452516
mov dword [ebp - 0x1b9c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
cmp dword [ebp - 0x1b9c], eax
je 0x452537
mov dword [ebp - 0xcbc], 1
jmp 0x45253e
and dword [ebp - 0xcbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
cmp dword [ebp - 0xcbc], eax
jg 0x45255f
mov dword [ebp - 0x1ba4], 1
jmp 0x452566
and dword [ebp - 0x1ba4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x66c]
cmp dword [ebp - 0x1ba4], eax
jne 0x452587
mov dword [ebp - 0xcc4], 1
jmp 0x45258e
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x638]
cmp dword [ebp - 0xcc4], eax
jge 0x4525ac
mov dword [ebp - 0x1bac], 1
jmp 0x4525b3
and dword [ebp - 0x1bac], 0
cmp dword [ebp - 0x1bac], 0x4000
jge 0x4525e1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x638], 0
jne 0x4525e1
cmp dword [ebp - 0x330], 0
jne 0x4525e1
and dword [ebp - 0xccc], 0
jmp 0x4525eb
mov dword [ebp - 0xccc], 1
mov eax, dword [ebp - 0xccc]
sub eax, 0xb058064
cmp eax, 0x2f1
jle 0x452609
mov dword [ebp - 0x1bb4], 1
jmp 0x452610
and dword [ebp - 0x1bb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x66c]
sub eax, dword [ebp - 0x1bb4]
cmp eax, 2
jl 0x452634
mov dword [ebp - 0xcd4], 1
jmp 0x45263b
and dword [ebp - 0xcd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcd4]
mov dword [ebp + eax - 0xc70], ecx
mov dword [ebp - 0x330], 0xffffffe4
jmp 0x452667
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xfffffffb
jne 0x452695
mov dword [ebp - 0xbb0], 0xb361f3d4
mov eax, dword [ebp - 0xbb0]
inc eax
mov dword [ebp - 0xbb0], eax
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x22e8], eax
jmp 0x45265a
jmp 0x4521cf
jmp 0x4520b2
jmp 0x45205f
mov dword [ebp - 0x514], 0
mov dword [ebp - 0xa1c], 0
jmp 0x4526c7
mov eax, dword [ebp - 0xa1c]
inc eax
mov dword [ebp - 0xa1c], eax
cmp dword [ebp - 0xa1c], 2
jge 0x4526e3
mov eax, dword [ebp - 0xa1c]
mov dword [ebp + eax*4 - 0xc44], 0xe8cff0ea
jmp 0x4526ba
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc44], 0xfffffff3
jmp 0x452711
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc44]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc44], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc44], 0xffffffe7
jge 0x45273d
mov byte [ebp - 0x2e6], 0
movzx eax, byte [ebp - 0x2e6]
test eax, eax
je 0x45273b
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x4526f6
mov dword [ebp - 0x514], 0
jmp 0x452756
mov eax, dword [ebp - 0x514]
inc eax
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 8
jg 0x452923
mov dword [ebp - 0x510], 1
mov dword [ebp - 0x22f0], 1
mov dword [ebp - 0x510], 0
jmp 0x452790
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0x17
jle 0x4528d0
mov dword [ebp - 0x2300], 0x31d2
mov dword [ebp - 0xcec], 1
mov dword [ebp - 0x2308], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc44], 0
jne 0x4527e4
cmp dword [ebp - 0x510], 0
jne 0x4527e4
push 4
pop eax
test eax, eax
jne 0x4527e4
and dword [ebp - 0x1bbc], 0
jmp 0x4527ee
mov dword [ebp - 0x1bbc], 1
cmp dword [ebp - 0x1bbc], 1
je 0x452803
mov dword [ebp - 0xcdc], 1
jmp 0x45280a
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x22f0]
cmp dword [ebp - 0xcdc], eax
je 0x452824
mov dword [ebp - 0x22f8], 1
jmp 0x45282b
and dword [ebp - 0x22f8], 0
or eax, 0xffffffff
je 0x452845
cmp dword [ebp - 0x514], 0
je 0x452845
mov dword [ebp - 0x1bc4], 1
jmp 0x45284c
and dword [ebp - 0x1bc4], 0
mov eax, dword [ebp - 0x2300]
cmp eax, dword [ebp - 0x1bc4]
jle 0x452866
mov dword [ebp - 0xce4], 1
jmp 0x45286d
and dword [ebp - 0xce4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc44]
cmp dword [ebp - 0xce4], eax
jge 0x45288e
mov dword [ebp - 0x1bcc], 1
jmp 0x452895
and dword [ebp - 0x1bcc], 0
mov eax, dword [ebp - 0x1bcc]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x2308], eax
mov byte [ebp - 0x2e8], 0
movzx eax, byte [ebp - 0x2e8]
test eax, eax
je 0x4528cb
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
jmp 0x452783
mov byte [ebp - 0x2ea], 0
movzx eax, byte [ebp - 0x2ea]
test eax, eax
je 0x45291e
push 0x1a2
push 0xd8a
push 0x416
push 0x237e
push 0x732
push 0xc09
push 0x108b
push 0xdd7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
jmp 0x452749
mov dword [ebp - 0x224], 0
jmp 0x45293c
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 4
jge 0x452958
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x24fc], 1
jmp 0x45292f
mov dword [ebp - 0x600], 0x2569
mov dword [ebp - 0xa2c], 0xffffffff
mov dword [ebp - 0xbc0], 0xffffffff
mov dword [ebp - 0x1bd4], 0x779a7b44
mov dword [ebp - 0x295c], 0
mov dword [ebp - 0xa24], 0x9e885dc1
mov dword [ebp - 0xbd0], 0x3cf81320
mov dword [ebp - 0x2964], 0x73d5943e
mov dword [ebp - 0xbc8], 0
mov dword [ebp - 0x678], 0xc698dc50
mov dword [ebp - 0xd1c], 0x277ed46
mov dword [ebp - 0x9c], 0
jmp 0x4529df
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x4529fb
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x2630], 6
jmp 0x4529d2
mov dword [ebp - 0x9c], 0
jmp 0x452a14
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x452a30
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x2ff4], 1
jmp 0x452a07
mov dword [ebp - 0x9c], 0
jmp 0x452a49
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x452a65
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x300c], 0xfffffffd
jmp 0x452a3c
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x678]
dec eax
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0xbd0]
cmp dword [ebp - 0x678], eax
jl 0x452bbe
cmp dword [ebp - 0xa24], 0
jne 0x452b7c
mov eax, dword [ebp - 0x1bd4]
imul eax, dword [ebp - 0xbc8]
imul eax, dword [ebp - 0x1bd4]
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0xa2c]
cmp dword [ebp - 0xa24], eax
jne 0x452ada
cmp dword [ebp - 0xa24], 0
je 0x452ada
mov dword [ebp - 0xbb8], 1
jmp 0x452ae1
and dword [ebp - 0xbb8], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2630], 0x786c
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbb8]
mov dword [ebp + eax - 0x2ff4], ecx
mov eax, dword [ebp - 0xbb8]
add eax, 0x786c
cmp eax, 0x5534fd39
jge 0x452b32
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2630], 0
je 0x452b32
mov dword [ebp - 0xcf4], 1
jmp 0x452b39
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x600]
cmp dword [ebp - 0xa2c], eax
jge 0x452b5f
mov dword [ebp - 0x1bdc], 1
jmp 0x452b66
and dword [ebp - 0x1bdc], 0
mov eax, dword [ebp - 0x1bdc]
sub eax, 0x6f2c
jne 0x452b7c
and dword [ebp - 0xcfc], 0
jmp 0x452b86
mov dword [ebp - 0xcfc], 1
mov eax, dword [ebp - 0x600]
cmp dword [ebp - 0xcfc], eax
jne 0x452ba0
mov dword [ebp - 0x1be4], 1
jmp 0x452ba7
and dword [ebp - 0x1be4], 0
mov eax, dword [ebp - 0xd1c]
cmp dword [ebp - 0x1be4], eax
jne 0x452bbe
and dword [ebp - 0x2310], 0
jmp 0x452bc8
mov dword [ebp - 0x2310], 1
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0x296c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2630], 0xa53061ec
ja 0x452bf7
push 9
pop eax
test eax, eax
jne 0x452bf7
and dword [ebp - 0xd04], 0
jmp 0x452c01
mov dword [ebp - 0xd04], 1
mov eax, dword [ebp - 0xbc0]
cmp dword [ebp - 0xd04], eax
jge 0x452c1b
mov dword [ebp - 0x1bec], 1
jmp 0x452c22
and dword [ebp - 0x1bec], 0
mov eax, dword [ebp - 0xbc8]
imul eax, dword [ebp - 0x1bec]
sub eax, dword [ebp - 0xbc0]
cmp eax, dword [ebp - 0x600]
jl 0x452c52
mov eax, 0x44bab92a
test eax, eax
je 0x452c52
mov dword [ebp - 0xd0c], 1
jmp 0x452c59
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x600]
cmp dword [ebp - 0xd0c], eax
jge 0x452c73
mov dword [ebp - 0x1bf4], 1
jmp 0x452c7a
and dword [ebp - 0x1bf4], 0
cmp dword [ebp - 0x1bf4], 1
je 0x452c8f
mov dword [ebp - 0xd14], 1
jmp 0x452c96
and dword [ebp - 0xd14], 0
cmp dword [ebp - 0xd14], 0x7efbae54
jne 0x452cae
mov dword [ebp - 0x1bfc], 1
jmp 0x452cb5
and dword [ebp - 0x1bfc], 0
mov eax, dword [ebp - 0xbc8]
imul eax, dword [ebp - 0x1bfc]
cmp eax, dword [ebp - 0xd1c]
jl 0x452cd6
mov dword [ebp - 0x1c04], 1
jmp 0x452cdd
and dword [ebp - 0x1c04], 0
mov eax, dword [ebp - 0x1c04]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x2974], eax
mov eax, dword [ebp - 0x678]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x300c], eax
mov dword [ebp - 0x224], 0
jmp 0x452d21
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x452d3d
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x110], 0x2ba39464
jmp 0x452d14
mov dword [ebp - 0x2320], 0
mov dword [ebp - 0x2328], 0x5e314a5e
mov dword [ebp - 0x86c], 0
jmp 0x452d6a
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 2
jge 0x452d86
mov eax, dword [ebp - 0x86c]
mov dword [ebp + eax*4 - 0x1ea4], 0xfffffffa
jmp 0x452d5d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ea4], 0
je 0x452dfc
mov dword [ebp - 0x51c], 6
mov dword [ebp - 0x51c], 1
jmp 0x452db9
mov eax, dword [ebp - 0x51c]
dec eax
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0
jl 0x452df7
mov eax, dword [ebp - 0x51c]
cmp dword [ebp + eax*4 - 0x1ea4], 0
je 0x452dd4
jmp 0x452df7
mov byte [ebp - 0x2ec], 0
movzx eax, byte [ebp - 0x2ec]
test eax, eax
je 0x452df5
push 0xc49
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
jmp 0x452dac
jmp 0x452ebf
mov dword [ebp - 0x1c14], 0xc9214a9b
cmp dword [ebp - 0x1c14], 0xd697e780
jae 0x452e1e
mov dword [ebp - 0xd24], 1
jmp 0x452e25
and dword [ebp - 0xd24], 0
cmp dword [ebp - 0xd24], 0
jle 0x452e3a
mov dword [ebp - 0x1c0c], 1
jmp 0x452e41
and dword [ebp - 0x1c0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ea4]
cmp eax, dword [ebp - 0x1c0c]
jle 0x452e62
mov dword [ebp - 0xd2c], 1
jmp 0x452e69
and dword [ebp - 0xd2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ea4]
cmp eax, dword [ebp - 0xd2c]
jl 0x452e8a
mov dword [ebp - 0x2318], 1
jmp 0x452e91
and dword [ebp - 0x2318], 0
cmp dword [ebp - 0x1c14], 8
jge 0x452ea6
mov dword [ebp - 0xd34], 1
jmp 0x452ead
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0xd34]
sub eax, dword [ebp - 0x2320]
mov dword [ebp - 0x2328], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x110], 3
jmp 0x452eed
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jl 0x456d48
mov dword [ebp - 0x5b8], 0xa4f833fc
mov dword [ebp - 0x680], 0
jmp 0x452f24
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 3
jge 0x452f40
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x3024], 1
jmp 0x452f17
mov dword [ebp - 0x5b8], 2
jmp 0x452f59
mov eax, dword [ebp - 0x5b8]
dec eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
jl 0x452f76
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp + eax*4 - 0x3024], 0
je 0x452f74
jmp 0x452f76
jmp 0x452f4c
mov byte [ebp - 0x2ee], 0
movzx eax, byte [ebp - 0x2ee]
test eax, eax
je 0x452f93
push 0x1654
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [ebp - 0x1ed4], 1
mov dword [ebp - 0x1ed0], 1
mov dword [ebp - 0x1ecc], 1
mov dword [ebp - 0x1ec8], 1
mov dword [ebp - 0x500], 0xc04e
mov dword [ebp - 0x1c24], 0xd5fa
mov dword [ebp - 0x2330], 0xfffffff8
mov dword [ebp - 0x2338], 1
mov dword [ebp - 0x500], 0x2061f665
cmp dword [ebp - 0x500], 0
jne 0x453063
mov eax, dword [ebp - 0x500]
sub eax, 0x4990069f
cmp eax, dword [ebp - 0x500]
jl 0x453015
mov dword [ebp - 0x1c1c], 1
jmp 0x45301c
and dword [ebp - 0x1c1c], 0
mov eax, dword [ebp - 0x500]
cmp dword [ebp - 0x1c1c], eax
jne 0x453036
mov dword [ebp - 0xd3c], 1
jmp 0x45303d
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0x1c24], eax
mov eax, dword [ebp - 0x500]
imul eax, dword [ebp - 0x1c24]
test eax, eax
jne 0x453063
and dword [ebp - 0xd44], 0
jmp 0x45306d
mov dword [ebp - 0xd44], 1
mov eax, dword [ebp - 0x2330]
cmp dword [ebp - 0xd44], eax
jg 0x453087
mov dword [ebp - 0x1c2c], 1
jmp 0x45308e
and dword [ebp - 0x1c2c], 0
cmp dword [ebp - 0x1c2c], 0
je 0x4531ac
mov dword [ebp - 0x874], 0x2278213
mov byte [ebp - 0x2f0], 0
movzx eax, byte [ebp - 0x2f0]
test eax, eax
je 0x4530d7
push 0
push 0x252b
push 0x1b7a
push 0
push 0xb6
push 0x1dc8
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov eax, dword [ebp - 0x874]
inc eax
cmp eax, dword [ebp - 0x874]
jge 0x4530fb
mov eax, 0x1f6f49c2
test eax, eax
je 0x4530fb
mov dword [ebp - 0xd4c], 1
jmp 0x453102
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0x874]
cmp eax, dword [ebp - 0xd4c]
jne 0x45311c
mov dword [ebp - 0x1c34], 1
jmp 0x453123
and dword [ebp - 0x1c34], 0
cmp dword [ebp - 0x1c34], 0xffffffff
je 0x453138
mov dword [ebp - 0xd54], 1
jmp 0x45313f
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0x874]
cmp eax, dword [ebp - 0xd54]
jle 0x453159
mov dword [ebp - 0x1c3c], 1
jmp 0x453160
and dword [ebp - 0x1c3c], 0
cmp dword [ebp - 0x1c3c], 0xdd972c40
jne 0x453178
mov dword [ebp - 0xd5c], 1
jmp 0x45317f
and dword [ebp - 0xd5c], 0
cmp dword [ebp - 0xd5c], 0xe5a9864b
ja 0x453197
mov dword [ebp - 0x1c44], 1
jmp 0x45319e
and dword [ebp - 0x1c44], 0
mov eax, dword [ebp - 0x1c44]
mov dword [ebp - 0x2338], eax
jmp 0x4531c8
mov byte [ebp - 0x2f2], 0
movzx eax, byte [ebp - 0x2f2]
test eax, eax
je 0x4531c8
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 0x54c], 0x628405ce
mov dword [ebp - 0x87c], 0xfffffffe
mov dword [ebp - 0x297c], 0
mov dword [ebp - 0x688], 0
jmp 0x4531ff
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 2
jge 0x45321b
mov eax, dword [ebp - 0x688]
mov dword [ebp + eax*4 - 0x305c], 0
jmp 0x4531f2
mov dword [ebp - 0x87c], 0
jmp 0x453234
mov eax, dword [ebp - 0x87c]
inc eax
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 1
jg 0x453260
mov byte [ebp - 0x2f4], 0
movzx eax, byte [ebp - 0x2f4]
test eax, eax
je 0x45325e
push 0
push 0
push 0xb18
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x453227
mov dword [ebp - 0x2244], 9
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x2984], 0xffffffff
mov dword [ebp - 0x298c], 1
mov dword [ebp - 0xbe0], 0xffffffff
mov dword [ebp - 0x25dc], 0x4d18
mov dword [ebp - 0x25d8], 0x4d18
mov dword [ebp - 0x25d4], 0x4d18
mov dword [ebp - 0x25d0], 0x4d18
mov dword [ebp - 0x1a4], 0
jmp 0x4532d3
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x4532ef
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x2d8], 0x7bf0
jmp 0x4532c6
mov dword [ebp - 0x1a4], 0
jmp 0x453308
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x453324
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x2618], 0xffffffff
jmp 0x4532fb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
mov dword [ebp - 0x2994], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d8], 0xaab72b21
ja 0x453356
mov dword [ebp - 0xd64], 1
jmp 0x45335d
and dword [ebp - 0xd64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0xd64], eax
jne 0x45337e
mov dword [ebp - 0x1c4c], 1
jmp 0x453385
and dword [ebp - 0x1c4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x2d8]
cmp eax, dword [ebp - 0x1c4c]
jle 0x4533b3
mov dword [ebp - 0xd6c], 1
jmp 0x4533ba
and dword [ebp - 0xd6c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
imul eax, dword [ebp - 0xd6c]
imul eax, eax, 0x3c4a
test eax, eax
je 0x4533f8
xor eax, eax
je 0x4533f8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d8], 0
je 0x4533f8
mov dword [ebp - 0x1c54], 1
jmp 0x4533ff
and dword [ebp - 0x1c54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x1c54], eax
je 0x453420
mov dword [ebp - 0xd74], 1
jmp 0x453427
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xd74]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x338], 0
jmp 0x45344c
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jg 0x453837
mov dword [ebp - 0x1c74], 1
mov dword [ebp - 0xc2c], 0x738f5859
mov dword [ebp - 0xbd8], 0x6fbc
mov dword [ebp - 0x2358], 0x1ff3
mov dword [ebp - 0x2360], 0xffffffff
mov dword [ebp - 0x1fc], 0
jmp 0x4534a4
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x4534c0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xc5c], 0xfffffff6
jmp 0x453497
mov dword [ebp - 0x1fc], 0
jmp 0x4534d9
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 4
jge 0x4534f5
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x30b4], 0x459cadfd
jmp 0x4534cc
mov eax, dword [ebp - 0xbd8]
inc eax
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x338]
cmp dword [ebp + eax*4 - 0x2d8], 0
je 0x453662
mov eax, dword [ebp - 0x1c74]
mov dword [ebp - 0x299c], eax
xor eax, eax
je 0x453534
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d8], 0
je 0x453560
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2618], 0
je 0x453560
mov dword [ebp - 0x1c5c], 1
jmp 0x453567
and dword [ebp - 0x1c5c], 0
mov eax, dword [ebp - 0x338]
mov eax, dword [ebp + eax*4 - 0x2d8]
cmp eax, dword [ebp - 0x1c5c]
jl 0x453588
mov dword [ebp - 0xd7c], 1
jmp 0x45358f
and dword [ebp - 0xd7c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2618]
neg eax
imul eax, dword [ebp - 0xd7c]
mov dword [ebp - 0x1c64], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c64]
mov dword [ebp + eax - 0x2618], ecx
cmp dword [ebp - 0x1c64], 0
jne 0x4535d3
mov dword [ebp - 0xd84], 1
jmp 0x4535da
and dword [ebp - 0xd84], 0
cmp dword [ebp - 0xd84], 1
jb 0x4535ef
mov dword [ebp - 0x1c6c], 1
jmp 0x4535f6
and dword [ebp - 0x1c6c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x1c6c], eax
je 0x453617
mov dword [ebp - 0xd8c], 1
jmp 0x45361e
and dword [ebp - 0xd8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
cmp dword [ebp - 0xd8c], eax
jle 0x453641
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25dc]
cmp dword [ebp - 0x1c74], eax
jge 0x453662
mov dword [ebp - 0xd94], 1
jmp 0x453669
and dword [ebp - 0xd94], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x30b4]
cmp dword [ebp - 0xd94], eax
jne 0x453689
mov dword [ebp - 0x1c7c], 1
jmp 0x453690
and dword [ebp - 0x1c7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x1c7c], eax
je 0x4536b1
mov dword [ebp - 0x2340], 1
jmp 0x4536b8
and dword [ebp - 0x2340], 0
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0x29a4], eax
mov eax, dword [ebp - 0xbd8]
sub eax, 7
je 0x4536e4
cmp dword [ebp - 0xbe0], 0
je 0x4536e4
mov dword [ebp - 0x2348], 1
jmp 0x4536eb
and dword [ebp - 0x2348], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
mov dword [ebp - 0xd9c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd9c]
mov dword [ebp + eax - 0xc5c], ecx
cmp dword [ebp - 0xd9c], 0
jne 0x453733
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x25dc], 0
jne 0x453733
and dword [ebp - 0x1c84], 0
jmp 0x45373d
mov dword [ebp - 0x1c84], 1
mov eax, dword [ebp - 0xbe0]
imul eax, dword [ebp - 0x1c84]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2d8]
jge 0x453765
mov dword [ebp - 0xda4], 1
jmp 0x45376c
and dword [ebp - 0xda4], 0
cmp dword [ebp - 0xda4], 0xfffffffb
jge 0x453781
mov dword [ebp - 0x2350], 1
jmp 0x453788
and dword [ebp - 0x2350], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
mov dword [ebp - 0x29ac], eax
cmp dword [ebp - 0xc2c], 0x1dd1
jg 0x4537b3
mov dword [ebp - 0x1c8c], 1
jmp 0x4537ba
and dword [ebp - 0x1c8c], 0
mov eax, dword [ebp - 0x1c8c]
mov dword [ebp - 0x2358], eax
cmp dword [ebp - 0x2360], 0
je 0x4537e4
mov eax, 0xffff
test eax, eax
je 0x4537e4
mov dword [ebp - 0xdac], 1
jmp 0x4537eb
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0xdac]
mov dword [ebp - 0xc2c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
cmp dword [ebp - 0xc2c], eax
jge 0x453818
mov dword [ebp - 0x1c94], 1
jmp 0x45381f
and dword [ebp - 0x1c94], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c94]
mov dword [ebp + eax - 0xc5c], ecx
jmp 0x45343f
mov dword [ebp - 0x1050], 2
mov dword [ebp - 0x23c], 0x9ca3191b
mov dword [ebp - 0x1cfc], 0x8ed7c3b7
mov dword [ebp - 0xbcc], 0xffffffff
mov dword [ebp - 0x23b8], 0xfffffff7
mov dword [ebp - 0xe14], 1
mov dword [ebp - 0x1ac], 0
jmp 0x45388c
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x4538a8
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xf4], 0
jmp 0x45387f
mov dword [ebp - 0x1ac], 0
jmp 0x4538c1
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x4538dd
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x238c], 0xd80a
jmp 0x4538b4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x29b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x29bc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 2
jg 0x45391f
mov dword [ebp - 0xdb4], 1
jmp 0x453926
and dword [ebp - 0xdb4], 0
cmp dword [ebp - 0xdb4], 5
jge 0x45393b
mov dword [ebp - 0x1c9c], 1
jmp 0x453942
and dword [ebp - 0x1c9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x1c9c], eax
jge 0x453963
mov dword [ebp - 0xdbc], 1
jmp 0x45396a
and dword [ebp - 0xdbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xf4]
cmp eax, dword [ebp - 0xdbc]
jg 0x453998
mov dword [ebp - 0x1ca4], 1
jmp 0x45399f
and dword [ebp - 0x1ca4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x1ca4], eax
jle 0x4539c0
mov dword [ebp - 0xdc4], 1
jmp 0x4539c7
and dword [ebp - 0xdc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
imul eax, dword [ebp - 0xdc4]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x4539fc
cmp dword [ebp - 0x23c], 0
jne 0x4539fc
and dword [ebp - 0x1cac], 0
jmp 0x453a06
mov dword [ebp - 0x1cac], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x1cac], eax
je 0x453a27
mov dword [ebp - 0xdcc], 1
jmp 0x453a2e
and dword [ebp - 0xdcc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
xor eax, eax
jne 0x453a4c
mov eax, 0xd4a1cf04
test eax, eax
je 0x453d6a
mov dword [ebp - 0xb4], 0x9339b884
mov dword [ebp - 0x2380], 0xce65c5bc
mov dword [ebp - 0x23c], 0
jmp 0x453a79
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xfffffff5
jl 0x453bbb
mov dword [ebp - 0xc04], 0
mov dword [ebp - 0xa60], 0xa1efe0c2
mov eax, dword [ebp - 0xb4]
add eax, 0x9f45
cmp eax, 0x4faf
jg 0x453ab8
mov dword [ebp - 0x1cb4], 1
jmp 0x453abf
and dword [ebp - 0x1cb4], 0
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0x2368], eax
mov eax, dword [ebp - 0x1cb4]
mov dword [ebp - 0x2370], eax
mov eax, dword [ebp - 0xc04]
inc eax
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x2368]
cmp eax, dword [ebp - 0x2370]
jge 0x453afe
mov dword [ebp - 0xdd4], 1
jmp 0x453b05
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0xa60]
cmp dword [ebp - 0xdd4], eax
jg 0x453b1f
mov dword [ebp - 0xddc], 1
jmp 0x453b26
and dword [ebp - 0xddc], 0
mov eax, dword [ebp - 0xa60]
cmp dword [ebp - 0xb4], eax
jl 0x453b40
mov dword [ebp - 0x1cbc], 1
jmp 0x453b47
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1cbc], eax
je 0x453b61
mov dword [ebp - 0x1cc4], 1
jmp 0x453b68
and dword [ebp - 0x1cc4], 0
mov eax, dword [ebp - 0xddc]
cmp eax, dword [ebp - 0x1cc4]
jne 0x453b82
mov dword [ebp - 0xde4], 1
jmp 0x453b89
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xde4], eax
jne 0x453ba3
mov dword [ebp - 0x1ccc], 1
jmp 0x453baa
and dword [ebp - 0x1ccc], 0
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0xa60], eax
jmp 0x453a6c
cmp dword [ebp - 0xb4], 0
je 0x453c68
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x29c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 9
jbe 0x453bf0
mov dword [ebp - 0xdec], 1
jmp 0x453bf7
and dword [ebp - 0xdec], 0
cmp dword [ebp - 0xdec], 0xec7d
jle 0x453c0f
mov dword [ebp - 0x2378], 1
jmp 0x453c16
and dword [ebp - 0x2378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x29cc], eax
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0xb4]
jne 0x453c49
cmp dword [ebp - 0x1cfc], 0
jne 0x453c49
and dword [ebp - 0x1cd4], 0
jmp 0x453c53
mov dword [ebp - 0x1cd4], 1
cmp dword [ebp - 0x1cd4], 5
jle 0x453c68
mov dword [ebp - 0xdf4], 1
jmp 0x453c6f
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0x2380], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jle 0x453c95
mov dword [ebp - 0x1cdc], 1
jmp 0x453c9c
and dword [ebp - 0x1cdc], 0
cmp dword [ebp - 0x1cdc], 0x8eeb
jg 0x453cb4
mov dword [ebp - 0xdfc], 1
jmp 0x453cbb
and dword [ebp - 0xdfc], 0
cmp dword [ebp - 0xdfc], 0x7d625c2a
jl 0x453cd3
mov dword [ebp - 0x1ce4], 1
jmp 0x453cda
and dword [ebp - 0x1ce4], 0
cmp dword [ebp - 0x1ce4], 1
jge 0x453cef
mov dword [ebp - 0xe04], 1
jmp 0x453cf6
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xe04]
jle 0x453d10
mov dword [ebp - 0x1cec], 1
jmp 0x453d17
and dword [ebp - 0x1cec], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1cec], eax
jne 0x453d31
mov dword [ebp - 0xe0c], 1
jmp 0x453d38
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0xe0c]
cmp eax, 0xfffffff8
je 0x453d55
mov dword [ebp - 0x1cf4], 1
jmp 0x453d5c
and dword [ebp - 0x1cf4], 0
mov eax, dword [ebp - 0x1cf4]
mov dword [ebp - 0xe14], eax
jmp 0x453d86
mov byte [ebp - 0x2f6], 0
movzx eax, byte [ebp - 0x2f6]
test eax, eax
je 0x453d86
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [ebp - 0xe14]
cmp dword [ebp - 0x1cfc], eax
jl 0x453da0
mov dword [ebp - 0xe1c], 1
jmp 0x453da7
and dword [ebp - 0xe1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x238c]
cmp dword [ebp - 0xe1c], eax
jg 0x453dc8
mov dword [ebp - 0x1d04], 1
jmp 0x453dcf
and dword [ebp - 0x1d04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x238c]
cmp eax, dword [ebp - 0x1d04]
jle 0x453df4
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x453df4
and dword [ebp - 0xe24], 0
jmp 0x453dfe
mov dword [ebp - 0xe24], 1
mov eax, dword [ebp - 0xe24]
mov dword [ebp - 0xbcc], eax
cmp dword [ebp - 0xbcc], 0
je 0x453e28
cmp dword [ebp - 0xbcc], 0
je 0x453e28
mov dword [ebp - 0x1d0c], 1
jmp 0x453e2f
and dword [ebp - 0x1d0c], 0
cmp dword [ebp - 0x1d0c], 1
jne 0x453e44
mov dword [ebp - 0xe2c], 1
jmp 0x453e4b
and dword [ebp - 0xe2c], 0
cmp dword [ebp - 0xe2c], 1
jle 0x453e60
mov dword [ebp - 0x1d14], 1
jmp 0x453e67
and dword [ebp - 0x1d14], 0
mov eax, dword [ebp - 0x1d14]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
neg eax
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x238c], eax
jge 0x453e96
mov dword [ebp - 0xe34], 1
jmp 0x453e9d
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0x23b8], eax
mov dword [ebp - 0x18], 0xf782a183
mov dword [ebp - 0x28], 0xee56e31b
mov dword [ebp - 0x29d4], 0xfffffffb
mov dword [ebp - 0x1b4], 0
jmp 0x453eda
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x453ef6
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xa3c], 0xfffffffe
jmp 0x453ecd
mov dword [ebp - 0x1b4], 0
jmp 0x453f0f
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x453f2b
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x25f4], 0xffffffff
jmp 0x453f02
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x29dc], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jne 0x453f48
mov dword [ebp - 0x23c0], 1
jmp 0x453f4f
and dword [ebp - 0x23c0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x29e4], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jne 0x453f6c
mov dword [ebp - 0x1d1c], 1
jmp 0x453f73
and dword [ebp - 0x1d1c], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1d1c]
imul eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jne 0x453f8c
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x453fa9
mov dword [ebp - 0xa68], 1
jmp 0x453fb0
and dword [ebp - 0xa68], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xa68]
mov dword [ebp + eax - 0xa3c], ecx
cmp dword [ebp - 0xa68], 0
je 0x453ff5
mov byte [ebp - 0x2f8], 0
movzx eax, byte [ebp - 0x2f8]
test eax, eax
je 0x453ff0
push 0x2156
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
jmp 0x4545b6
mov dword [ebp - 0x4d4], 0xeb945924
mov dword [ebp - 0x340], 0
mov dword [ebp - 0xb58], 1
mov dword [ebp - 0x266c], 0xffffffff
mov dword [ebp - 0x2668], 0xffffffff
mov dword [ebp - 0x2664], 0xffffffff
mov dword [ebp - 0x2660], 0xffffffff
mov dword [ebp - 0x2448], 0xd03c
mov dword [ebp - 0x690], 0
jmp 0x45405e
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 4
jge 0x45407a
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x2e94], 1
jmp 0x454051
mov dword [ebp - 0x28], 0
jmp 0x45408a
cmp dword [ebp - 0x28], 3
jg 0x454227
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xa3c], 0
je 0x4540ac
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x29f4], eax
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x45447e
mov byte [ebp - 0x2fc], 0
movzx eax, byte [ebp - 0x2fc]
test eax, eax
je 0x4545da
push 0x11e8
push 0x137a
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov dword [ebp - 0x264], 0x76ff
mov dword [ebp - 0xbe8], 0x1e6e4042
mov dword [ebp - 0x628], 0xb9ba5e0b
mov dword [ebp - 0x1dc8], 0xffffffff
mov dword [ebp - 0x2460], 0
mov dword [ebp - 0x204], 0
jmp 0x454625
cmp dword [ebp - 0x204], 1
jge 0x454641
mov dword [ebp - 0x2a4], 0x76ff
mov dword [ebp - 0xab0], 0x1e6e4042
mov dword [ebp - 0x554], 0xb9ba5e0b
mov dword [ebp - 0x10b0], 0xffffffff
mov dword [ebp - 0x224c], 0
mov dword [ebp - 0x1cc], 0
jmp 0x456d93
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x456daf
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x5d0], 0xfffffff8
jmp 0x456d86
mov dword [ebp - 0x1cc], 0
jmp 0x456dc8
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x456de4
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x1e9c], 0
jmp 0x456dbb
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a4]
cmp dword [ebp + eax - 0x5d0], ecx
jg 0x456e05
mov dword [ebp - 0x1098], 1
jmp 0x456e0c
and dword [ebp - 0x1098], 0
mov eax, 0xebd004dd
test eax, eax
je 0x456e2a
cmp dword [ebp - 0x2a4], 0
je 0x456e2a
mov dword [ebp - 0xb78], 1
jmp 0x456e31
and dword [ebp - 0xb78], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb78]
mov dword [ebp + eax - 0x1e9c], ecx
cmp dword [ebp - 0xb78], 0
jne 0x456e66
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e9c], 0
jne 0x456e66
and dword [ebp - 0x1080], 0
jmp 0x456e70
mov dword [ebp - 0x1080], 1
cmp dword [ebp - 0x1080], 0x67f5
jne 0x456e88
mov dword [ebp - 0x1d68], 1
jmp 0x456e8f
and dword [ebp - 0x1d68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d0]
cmp dword [ebp - 0x1d68], eax
jg 0x456eb0
mov dword [ebp - 0x1088], 1
jmp 0x456eb7
and dword [ebp - 0x1088], 0
mov eax, dword [ebp - 0x1088]
mov dword [ebp - 0xab0], eax
cmp dword [ebp - 0xab0], 0
je 0x456ee1
cmp dword [ebp - 0xab0], 0
je 0x456ee1
mov dword [ebp - 0x1768], 1
jmp 0x456ee8
and dword [ebp - 0x1768], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d0]
cmp dword [ebp - 0x1768], eax
jne 0x456f09
mov dword [ebp - 0x1090], 1
jmp 0x456f10
and dword [ebp - 0x1090], 0
mov eax, dword [ebp - 0x1090]
mov dword [ebp - 0x554], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e9c], 0x1a812c00
jg 0x456f3b
mov dword [ebp - 0x1ad8], 1
jmp 0x456f42
and dword [ebp - 0x1ad8], 0
mov eax, dword [ebp - 0x2a4]
imul eax, dword [ebp - 0x1ad8]
test eax, eax
je 0x456f61
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e9c], 0
mov eax, dword [ebp - 0x1098]
neg eax
cmp eax, dword [ebp - 0x2a4]
jle 0x456f7d
mov dword [ebp - 0x1770], 1
jmp 0x456f84
and dword [ebp - 0x1770], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d0]
cmp dword [ebp - 0x1770], eax
jne 0x456fa5
mov dword [ebp - 0xbf8], 1
jmp 0x456fac
and dword [ebp - 0xbf8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbf8]
mov dword [ebp + eax - 0x5d0], ecx
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0xbf8], eax
jle 0x456fd9
mov dword [ebp - 0x10a0], 1
jmp 0x456fe0
and dword [ebp - 0x10a0], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x10a0], eax
jge 0x456ffa
mov dword [ebp - 0x1c90], 1
jmp 0x457001
and dword [ebp - 0x1c90], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x1c90], eax
je 0x45701b
mov dword [ebp - 0x10a8], 1
jmp 0x457022
and dword [ebp - 0x10a8], 0
cmp dword [ebp - 0x10a8], 0x61c0f806
jge 0x45703a
mov dword [ebp - 0x1778], 1
jmp 0x457041
and dword [ebp - 0x1778], 0
mov eax, dword [ebp - 0x2a4]
sub eax, dword [ebp - 0x1778]
add eax, 0xe1c
mov dword [ebp - 0x10b0], eax
mov eax, dword [ebp - 0x10b0]
mov dword [ebp - 0x224c], eax
mov dword [ebp - 0x554], 0
jmp 0x45707d
mov eax, dword [ebp - 0x554]
dec eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0xfffffff7
je 0x45709f
mov dword [ebp - 0x1ae0], 0xfffffff9
mov eax, dword [ebp - 0x1ae0]
inc eax
mov dword [ebp - 0x1ae0], eax
jmp 0x457070
xor eax, eax
inc eax
je 0x457240
mov dword [ebp - 0xab8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp eax, dword [ebp - 0xab8]
jle 0x4570d3
mov dword [ebp - 0x1fb0], 1
jmp 0x4570da
and dword [ebp - 0x1fb0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24fc]
mov dword [ebp - 0x2db8], eax
mov eax, dword [ebp - 0x8dc]
inc eax
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x2dc0], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2dc8], eax
push 0x2e
pop eax
cmp eax, 0x5e26
jne 0x457128
mov dword [ebp - 0x10b8], 1
jmp 0x45712f
and dword [ebp - 0x10b8], 0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x10b8], eax
jl 0x457149
mov dword [ebp - 0x1780], 1
jmp 0x457150
and dword [ebp - 0x1780], 0
mov eax, dword [ebp - 0x1780]
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0xac0], 0
je 0x45716c
cmp dword [ebp - 0x8dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24fc]
mov dword [ebp - 0x2ddc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x2de4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x27c], eax
je 0x4571b3
mov dword [ebp - 0x10c0], 1
jmp 0x4571ba
and dword [ebp - 0x10c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x10c0], eax
jge 0x4571db
mov dword [ebp - 0xb80], 1
jmp 0x4571e2
and dword [ebp - 0xb80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb80]
mov dword [ebp + eax - 0x110], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x24fc]
cmp dword [ebp - 0xb80], eax
jge 0x457216
mov dword [ebp - 0x1dd8], 1
jmp 0x45721d
and dword [ebp - 0x1dd8], 0
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x1dd8]
jle 0x457234
cmp dword [ebp - 0xac0], 0
je 0x457240
mov dword [ebp - 0x10c8], 1
jmp 0x457247
and dword [ebp - 0x10c8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x10c8]
mov dword [ebp + eax - 0x24fc], ecx
mov dword [ebp - 0x2dec], 0xfffffffb
mov dword [ebp - 0x2df4], 0xef20fe6e
mov dword [ebp - 0x2dfc], 1
mov dword [ebp - 0x1788], 1
mov dword [ebp - 0x24c], 0
jmp 0x45729b
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x4572b7
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x2e04], 0
jmp 0x45728e
mov dword [ebp - 0x24c], 0
jmp 0x4572d0
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x4572ec
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x31f8], 0x1a4d63a8
jmp 0x4572c3
mov eax, dword [ebp - 0x1788]
inc eax
mov dword [ebp - 0x1788], eax
cmp dword [ebp + 8], 2
jl 0x46087f
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x6f0], 0
jmp 0x457326
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 1
jge 0x457342
mov eax, dword [ebp - 0x6f0]
mov dword [ebp + eax*4 - 0x2404], 0x4ec2
jmp 0x457319
mov dword [ebp - 0x504], 0
jmp 0x45735b
mov eax, dword [ebp - 0x504]
dec eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
jl 0x4573b5
mov dword [ebp - 0x8e4], 0x3d9532bb
mov dword [ebp - 0x8e4], 0
jmp 0x457387
mov eax, dword [ebp - 0x8e4]
inc eax
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x8e4], 0
jg 0x4573b3
mov byte [ebp - 0x318], 0
movzx eax, byte [ebp - 0x318]
test eax, eax
je 0x4573b1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
jmp 0x45737a
jmp 0x45734e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2404]
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0xb84], 1
mov dword [ebp - 0x610], 0xfffffff9
mov dword [ebp - 0xac8], 0x6c8a81d5
cmp dword [ebp - 0x4dc], 0x29855eec
je 0x457408
mov dword [ebp - 0x10d0], 1
jmp 0x45740f
and dword [ebp - 0x10d0], 0
cmp dword [ebp - 0x10d0], 0xfb91e60e
jae 0x457427
mov dword [ebp - 0x1fb8], 1
jmp 0x45742e
and dword [ebp - 0x1fb8], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0c], eax
cmp dword [ebp - 0x610], 0
jne 0x457459
xor eax, eax
jne 0x457459
cmp dword [ebp - 0x610], 0
jne 0x457459
and dword [ebp - 0x1ae8], 0
jmp 0x457463
mov dword [ebp - 0x1ae8], 1
cmp dword [ebp - 0x1ae8], 0x1465
jg 0x45747b
mov dword [ebp - 0x10d8], 1
jmp 0x457482
and dword [ebp - 0x10d8], 0
cmp dword [ebp - 0x10d8], 5
jge 0x457497
mov dword [ebp - 0x1790], 1
jmp 0x45749e
and dword [ebp - 0x1790], 0
mov dword [ebp - 0xb84], 0x7001
mov eax, dword [ebp - 0xb84]
imul eax, dword [ebp - 0x1790]
imul eax, eax, 0xb474
cmp dword [ebp - 0x4dc], eax
jle 0x4574cf
mov dword [ebp - 0x10e0], 1
jmp 0x4574d6
and dword [ebp - 0x10e0], 0
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x10e0], eax
jge 0x4574f9
cmp dword [ebp - 0x610], 0
jne 0x4574f9
mov dword [ebp - 0x1c98], 1
jmp 0x457500
and dword [ebp - 0x1c98], 0
cmp dword [ebp - 0x1c98], 0xba966896
jne 0x457518
mov dword [ebp - 0x10e8], 1
jmp 0x45751f
and dword [ebp - 0x10e8], 0
mov eax, dword [ebp - 0x10e8]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xac8]
add eax, dword [ebp - 0x610]
cmp dword [ebp - 0x4dc], eax
jne 0x45754b
mov dword [ebp - 0x2254], 1
jmp 0x457552
and dword [ebp - 0x2254], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x2e14], eax
mov eax, 0x5172
cmp eax, 0x9329
jge 0x457576
mov dword [ebp - 0x1798], 1
jmp 0x45757d
and dword [ebp - 0x1798], 0
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x1798], eax
jg 0x457597
mov dword [ebp - 0x10f0], 1
jmp 0x45759e
and dword [ebp - 0x10f0], 0
cmp dword [ebp - 0x10f0], 1
je 0x4575b3
mov dword [ebp - 0x1fc0], 1
jmp 0x4575ba
and dword [ebp - 0x1fc0], 0
xor eax, eax
inc eax
je 0x4575c8
cmp dword [ebp - 0xb84], 0
jne 0x4575d1
cmp dword [ebp - 0xac8], 0
je 0x4575f1
mov byte [ebp - 0x31a], 0
movzx eax, byte [ebp - 0x31a]
test eax, eax
je 0x4575ef
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x457605
mov dword [ebp - 0x235c], 0
mov dword [ebp - 0x235c], 1
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x2e1c], 6
mov dword [ebp - 0x8ec], 9
mov dword [ebp - 0x2e24], 1
mov dword [ebp - 0x7c], 0
jmp 0x45763d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x457653
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x6f8], 0xfffffffa
jmp 0x457636
mov dword [ebp - 0x7c], 0
jmp 0x457663
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x457679
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x1d70], 0xa07e4fc2
jmp 0x45765c
mov dword [ebp - 0x7c], 0
jmp 0x457689
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x45769f
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x314c], 0xfffffffd
jmp 0x457682
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6f8], 0xffffffff
jmp 0x4576cd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6f8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6f8], 0xfffffff9
je 0x457700
mov dword [ebp - 0x2e2c], 0x46df
mov dword [ebp - 0x1af0], 0x7d8cf4c5
mov eax, dword [ebp - 0x1af0]
dec eax
mov dword [ebp - 0x1af0], eax
jmp 0x4576b2
mov dword [ebp - 0x8ec], 0xfffffff3
jmp 0x457719
mov eax, dword [ebp - 0x8ec]
inc eax
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 0x11
jne 0x457895
mov dword [ebp - 0x24ac], 0x2db8
mov dword [ebp - 0x2e34], 0x8555145c
mov dword [ebp - 0x1fd0], 0x45f5b1b6
mov dword [ebp - 0x1fc8], 1
mov dword [ebp - 0x2e3c], 0x3ccd2466
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x700], 0
jmp 0x45777b
mov eax, dword [ebp - 0x700]
inc eax
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 2
jge 0x457797
mov eax, dword [ebp - 0x700]
mov dword [ebp + eax*4 - 0x2584], 0x64a11600
jmp 0x45776e
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 0xf390
jle 0x4577bc
mov dword [ebp - 0x10f8], 1
jmp 0x4577c3
and dword [ebp - 0x10f8], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x1d70], 0x6ac1
cmp eax, 0xe4f
je 0x4577e7
mov dword [ebp - 0x17a0], 1
jmp 0x4577ee
and dword [ebp - 0x17a0], 0
mov eax, dword [ebp - 0x10f8]
cmp eax, dword [ebp - 0x17a0]
jle 0x457808
mov dword [ebp - 0x1100], 1
jmp 0x45780f
and dword [ebp - 0x1100], 0
mov eax, dword [ebp - 0x1fc8]
cmp eax, dword [ebp - 0x1100]
jg 0x457826
cmp dword [ebp - 0x8f4], 0
je 0x457842
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2584], 0
je 0x457842
mov dword [ebp - 0x225c], 1
jmp 0x457849
and dword [ebp - 0x225c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d70]
mov dword [ebp - 0x2e44], eax
mov eax, dword [ebp - 0x1fd0]
cmp dword [ebp - 0x24ac], eax
jge 0x457876
mov dword [ebp - 0x1108], 1
jmp 0x45787d
and dword [ebp - 0x1108], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1108]
mov dword [ebp + eax - 0x2584], ecx
jmp 0x45770c
mov dword [ebp - 0x2cc], 0xfffffffe
mov dword [ebp - 0xec], 0x96dd1e1e
mov dword [ebp - 0x474], 0xcd6ba8da
mov dword [ebp - 0x708], 0
jmp 0x4578cc
mov eax, dword [ebp - 0x708]
inc eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 1
jge 0x4578e8
mov eax, dword [ebp - 0x708]
mov dword [ebp + eax*4 - 0x358], 5
jmp 0x4578bf
mov dword [ebp - 0xec], 0
jmp 0x457901
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x457c05
mov dword [ebp - 0x2bc], 0x3eee2fde
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x358]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2e4c], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp + eax*4 - 0x358], 0
je 0x4579cf
mov byte [ebp - 0x31c], 0
movzx eax, byte [ebp - 0x31c]
test eax, eax
je 0x457973
push 0
push 0
push 0x1073
push 0x1b13
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0x2bc], 0xc
jmp 0x45798c
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0xffffffe6
jle 0x4579ca
mov byte [ebp - 0x31e], 0
movzx eax, byte [ebp - 0x31e]
test eax, eax
je 0x4579bd
push 0
push 0
push 0x1252
push 0x2555
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
cmp dword [ebp - 0x2bc], 0
je 0x4579c8
jmp 0x4579ca
jmp 0x45797f
jmp 0x457c00
mov dword [ebp - 0x710], 0x6b779c63
mov dword [ebp - 0x1f34], 0xc25b054d
mov dword [ebp - 0x1f30], 0xc25b054d
mov dword [ebp - 0x1f2c], 0xc25b054d
mov dword [ebp - 0x1f28], 0xc25b054d
mov dword [ebp - 0x2264], 0x7c57f39c
mov dword [ebp - 0x1fe0], 1
mov dword [ebp - 0x8fc], 0
jmp 0x457a2e
mov eax, dword [ebp - 0x8fc]
inc eax
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 2
jge 0x457a4a
mov eax, dword [ebp - 0x8fc]
mov dword [ebp + eax*4 - 0x25cc], 0x6b2c4eb0
jmp 0x457a21
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x358]
mov dword [ebp - 0x710], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x710]
mov dword [ebp + eax - 0x1f34], ecx
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x710]
push 4
pop edx
shl edx, 0
add ecx, dword [ebp + edx - 0x1f34]
add eax, ecx
cmp eax, dword [ebp - 0x2bc]
jl 0x457a9f
mov dword [ebp - 0x1fd8], 1
jmp 0x457aa6
and dword [ebp - 0x1fd8], 0
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x358]
mov dword [ebp - 0x2e54], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25cc]
cmp dword [ebp - 0x2264], eax
jne 0x457ada
mov dword [ebp - 0x17a8], 1
jmp 0x457ae1
and dword [ebp - 0x17a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
cmp eax, dword [ebp - 0x17a8]
je 0x457b02
mov dword [ebp - 0x1110], 1
jmp 0x457b09
and dword [ebp - 0x1110], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x1110], eax
jle 0x457b2c
cmp dword [ebp - 0xec], 0
je 0x457b2c
mov dword [ebp - 0x1af8], 1
jmp 0x457b33
and dword [ebp - 0x1af8], 0
mov eax, dword [ebp - 0x710]
cmp dword [ebp - 0x1af8], eax
jle 0x457b4d
mov dword [ebp - 0x1118], 1
jmp 0x457b54
and dword [ebp - 0x1118], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1118]
sub ecx, dword [ebp + eax - 0x1f34]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x25cc]
jge 0x457b82
jmp 0x4578f4
mov dword [ebp - 0x474], 0
jmp 0x457c1e
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 1
jge 0x457c3a
mov eax, dword [ebp - 0x474]
mov dword [ebp + eax*4 - 0x358], 0x5533f2a6
jmp 0x457c11
mov dword [ebp - 0xe4], 0x60be6286
mov dword [ebp - 0xad0], 0xfffffffd
mov dword [ebp - 0x718], 0
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x1b00], 0xffffffff
mov dword [ebp - 0x1138], 0xf839
mov dword [ebp - 0x904], 0
jmp 0x457c8f
mov eax, dword [ebp - 0x904]
inc eax
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x904], 2
jge 0x457cab
mov eax, dword [ebp - 0x904]
mov dword [ebp + eax*4 - 0x2a78], 0xaf2c9a13
jmp 0x457c82
cmp dword [ebp - 0x718], 0
jne 0x457cc6
cmp dword [ebp - 0x718], 0
jne 0x457cc6
and dword [ebp - 0x1128], 0
jmp 0x457cd0
mov dword [ebp - 0x1128], 1
cmp dword [ebp - 0x55c], 0
je 0x457cea
xor eax, eax
inc eax
je 0x457cea
mov dword [ebp - 0x1ca0], 1
jmp 0x457cf1
and dword [ebp - 0x1ca0], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x1ca0], eax
jne 0x457d0b
mov dword [ebp - 0x17b8], 1
jmp 0x457d12
and dword [ebp - 0x17b8], 0
mov eax, dword [ebp - 0x1128]
sub eax, dword [ebp - 0x55c]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
cmp eax, dword [ebp - 0x17b8]
jl 0x457d3e
mov dword [ebp - 0x1130], 1
jmp 0x457d45
and dword [ebp - 0x1130], 0
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0x55c]
add eax, dword [ebp - 0x1130]
cmp dword [ebp - 0xad0], eax
je 0x457d71
cmp dword [ebp + 8], 1
jne 0x4632be
mov dword [ebp - 0x968], 0xbaf43b7c
mov dword [ebp - 0x1054], 0x6b43d271
mov dword [ebp - 0x898], 0
jmp 0x4608b6
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 2
jge 0x4608d2
mov eax, dword [ebp - 0x898]
mov dword [ebp + eax*4 - 0x254c], 0xe1c5a3d7
jmp 0x4608a9
cmp dword [ebp - 0x968], 0
je 0x4609c0
mov dword [ebp - 0xbbc], 0xfffffffe
mov dword [ebp - 0x104c], 0x8f0aa6e6
mov byte [ebp - 0x31b], 0
movzx eax, byte [ebp - 0x31b]
test eax, eax
je 0x460919
push 0x2586
push 0
push 0x180
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
cmp dword [ebp - 0x968], 0
jne 0x460942
mov eax, dword [ebp - 0xbbc]
cmp dword [ebp - 0x968], eax
jg 0x460942
cmp dword [ebp - 0x968], 0
jne 0x460942
and dword [ebp - 0x103c], 0
jmp 0x46094c
mov dword [ebp - 0x103c], 1
imul eax, dword [ebp - 0x103c], 0x1085
imul eax, dword [ebp - 0x104c]
cmp eax, dword [ebp - 0xbbc]
jge 0x460971
mov dword [ebp - 0x1044], 1
jmp 0x460978
and dword [ebp - 0x1044], 0
mov eax, dword [ebp - 0xbbc]
cmp dword [ebp - 0x1044], eax
jle 0x460992
mov dword [ebp - 0xb38], 1
jmp 0x460999
and dword [ebp - 0xb38], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb38]
mov dword [ebp + eax - 0x254c], ecx
mov eax, dword [ebp - 0x104c]
add eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1054], eax
jmp 0x4609f9
mov byte [ebp - 0x420], 0
movzx eax, byte [ebp - 0x420]
test eax, eax
je 0x4609e6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x254c]
mov dword [ebp - 0x1054], eax
mov dword [ebp - 0x2e28], 0x974b666a
mov dword [ebp - 0x2928], 0x67f5ed9a
mov dword [ebp - 0x2ca4], 0xfffffffb
mov dword [ebp - 0x2930], 0xfffffff7
mov dword [ebp - 0x107c], 5
mov dword [ebp - 0x21c0], 1
mov dword [ebp - 0x2dac], 0
mov dword [ebp - 0x21b8], 0x1e3ff14e
mov dword [ebp - 0x2938], 0xd0714ad3
mov dword [ebp - 0x2cac], 0xfffffff6
mov dword [ebp - 0x2940], 1
mov dword [ebp - 0x2e98], 0xfffffffa
mov dword [ebp - 0x2948], 0xaf5bfb66
mov dword [ebp - 0x2cb4], 1
mov dword [ebp - 0x2950], 0xfffffffe
mov dword [ebp - 0x106c], 0xffffffff
mov dword [ebp - 0x2db4], 0x2f093d7f
mov dword [ebp - 0x2958], 0x4f57
mov dword [ebp - 0xc28], 0x21f997ec
mov dword [ebp - 0x2240], 0
mov dword [ebp - 0x2cbc], 9
mov dword [ebp - 0x8a0], 0
jmp 0x460ae4
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 2
jge 0x460b00
mov eax, dword [ebp - 0x8a0]
mov dword [ebp + eax*4 - 0x317c], 0xdf11bbb4
jmp 0x460ad7
mov eax, dword [ebp - 0xc28]
dec eax
mov dword [ebp - 0xc28], eax
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x2960], eax
mov eax, dword [ebp - 0x21b8]
cmp dword [ebp - 0x107c], eax
jle 0x460b3c
cmp dword [ebp - 0x106c], 0
je 0x460b3c
mov dword [ebp - 0x105c], 1
jmp 0x460b43
and dword [ebp - 0x105c], 0
imul eax, dword [ebp - 0x105c], 0xfffe
cmp eax, 1
ja 0x460b5e
mov dword [ebp - 0x1064], 1
jmp 0x460b65
and dword [ebp - 0x1064], 0
mov eax, dword [ebp - 0x2240]
cmp eax, dword [ebp - 0x1064]
jne 0x460b88
cmp dword [ebp - 0x106c], 0
je 0x460b88
mov dword [ebp - 0x1074], 1
jmp 0x460b8f
and dword [ebp - 0x1074], 0
mov eax, dword [ebp - 0x21c0]
imul eax, dword [ebp - 0x1074]
mov dword [ebp - 0x107c], eax
mov dword [ebp - 0x10ac], 1
mov dword [ebp - 0x2250], 0xfffffffa
mov dword [ebp - 0x70], 0
jmp 0x460bc6
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x460bdc
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xb40], 6
jmp 0x460bbf
mov dword [ebp - 0x70], 0
jmp 0x460bec
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x460c02
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x3b8], 0xffffffff
jmp 0x460be5
mov dword [ebp - 0x70], 0
jmp 0x460c12
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x460c28
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2248], 0
jmp 0x460c0b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3b8], 0
jmp 0x460c56
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b8], 0
jg 0x460d6f
mov dword [ebp - 0x108c], 0x590f0234
mov dword [ebp - 0x21c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
cmp dword [ebp + eax*4 - 0xb40], 0xffff
jbe 0x460ca4
mov dword [ebp - 0x1084], 1
jmp 0x460cab
and dword [ebp - 0x1084], 0
mov eax, dword [ebp - 0x1084]
mov dword [ebp - 0x108c], eax
mov eax, dword [ebp - 0x108c]
mov dword [ebp - 0x1094], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1094]
mov dword [ebp + eax - 0x2248], ecx
cmp dword [ebp - 0x1094], 0
je 0x460d28
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov eax, dword [ebp + eax*4 - 0xb40]
mov dword [ebp - 0x109c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov ecx, dword [ebp - 0x109c]
mov dword [ebp + eax*4 - 0xb40], ecx
cmp dword [ebp - 0x109c], 0
je 0x460d28
mov dword [ebp - 0x10a4], 1
jmp 0x460d2f
and dword [ebp - 0x10a4], 0
mov eax, dword [ebp - 0x10a4]
mov dword [ebp - 0x10ac], eax
cmp dword [ebp - 0x10ac], 0
jne 0x460d50
mov dword [ebp - 0x10b4], 1
jmp 0x460d57
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x21c8]
imul eax, dword [ebp - 0x10b4]
mov dword [ebp - 0x2250], eax
jmp 0x460c3b
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x530], 0x62d5e48d
mov dword [ebp - 0x21d0], 0
mov dword [ebp - 0xa20], 0
jmp 0x460da6
mov eax, dword [ebp - 0xa20]
inc eax
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 2
jge 0x460dc2
mov eax, dword [ebp - 0xa20]
mov dword [ebp + eax*4 - 0x2af0], 0
jmp 0x460d99
mov dword [ebp - 0x530], 8
jmp 0x460ddb
mov eax, dword [ebp - 0x530]
dec eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0xfffffffd
jge 0x460e9e
mov dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0
jne 0x460e83
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x2e30], eax
mov eax, dword [ebp - 0x21d0]
mov dword [ebp - 0x2968], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x2cc4], eax
mov eax, 0x9900
sub eax, dword [ebp - 0x468]
mov dword [ebp - 0x2258], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2258]
mov dword [ebp + eax - 0x2af0], ecx
cmp dword [ebp - 0x468], 0xfffffff9
ja 0x460e5c
mov dword [ebp - 0x10bc], 1
jmp 0x460e63
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0x530]
cmp dword [ebp - 0x10bc], eax
jge 0x460e83
mov eax, 0x32e3
test eax, eax
jne 0x460e83
and dword [ebp - 0x10c4], 0
jmp 0x460e8d
mov dword [ebp - 0x10c4], 1
mov eax, dword [ebp - 0x10c4]
mov dword [ebp - 0x468], eax
jmp 0x460dce
mov dword [ebp - 0x670], 0
jmp 0x460eb7
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0xa
je 0x4614b7
mov dword [ebp - 0x2970], 6
mov dword [ebp - 0x970], 9
mov dword [ebp - 0x2dbc], 1
mov dword [ebp - 0x78], 0
jmp 0x460ef2
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x460f08
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x8a8], 0xfffffffa
jmp 0x460eeb
mov dword [ebp - 0x78], 0
jmp 0x460f18
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x460f2e
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x10ec], 0xa07e4fc2
jmp 0x460f11
mov dword [ebp - 0x78], 0
jmp 0x460f3e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x460f54
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x3094], 0xfffffffd
jmp 0x460f37
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8a8], 0xffffffff
jmp 0x460f82
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8a8], 0xfffffff9
je 0x460fb5
mov dword [ebp - 0x2978], 0x46df
mov dword [ebp - 0x10cc], 0x7d8cf4c5
mov eax, dword [ebp - 0x10cc]
dec eax
mov dword [ebp - 0x10cc], eax
jmp 0x460f67
mov dword [ebp - 0x970], 0xfffffff3
jmp 0x460fce
cmp dword [ebp - 0x970], 0x11
jne 0x46114a
mov dword [ebp - 0x2268], 0x2db8
mov dword [ebp - 0x2ccc], 0x8555145c
mov dword [ebp - 0x21e0], 0x45f5b1b6
mov dword [ebp - 0x21d8], 1
mov dword [ebp - 0x2980], 0x3ccd2466
mov dword [ebp - 0x9d0], 0
mov dword [ebp - 0x8b0], 0
jmp 0x461030
mov eax, dword [ebp - 0x8b0]
inc eax
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 2
jge 0x46104c
mov eax, dword [ebp - 0x8b0]
mov dword [ebp + eax*4 - 0x256c], 0x64a11600
jmp 0x461023
mov eax, dword [ebp - 0x9d0]
inc eax
mov dword [ebp - 0x9d0], eax
cmp dword [ebp - 0x9d0], 0xf390
jle 0x461071
mov dword [ebp - 0x10d4], 1
jmp 0x461078
and dword [ebp - 0x10d4], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x10ec], 0x6ac1
cmp eax, 0xe4f
je 0x46109c
mov dword [ebp - 0x10dc], 1
jmp 0x4610a3
and dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x10d4]
cmp eax, dword [ebp - 0x10dc]
jle 0x4610bd
mov dword [ebp - 0x10e4], 1
jmp 0x4610c4
and dword [ebp - 0x10e4], 0
mov eax, dword [ebp - 0x21d8]
cmp eax, dword [ebp - 0x10e4]
jg 0x4610db
cmp dword [ebp - 0x9d0], 0
je 0x4610f7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x256c], 0
je 0x4610f7
mov dword [ebp - 0x8b8], 0
mov dword [ebp - 0x8b8], 0
jmp 0x46116d
cmp dword [ebp - 0x8b8], 0
jne 0x4614b2
mov dword [ebp - 0x538], 5
mov dword [ebp - 0x470], 0x56a0b349
mov dword [ebp - 0x538], 0
jmp 0x4611a7
mov eax, dword [ebp - 0x538]
dec eax
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0xffffffe8
jl 0x461216
mov dword [ebp - 0x2988], 0xdf82d83d
mov dword [ebp - 0x10fc], 0x47cdedfc
mov dword [ebp - 0x21e8], 1
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x10fc], eax
mov eax, dword [ebp - 0x10fc]
imul eax, dword [ebp - 0x538]
test eax, eax
jge 0x461201
mov dword [ebp - 0x1104], 1
jmp 0x461208
and dword [ebp - 0x1104], 0
mov eax, dword [ebp - 0x1104]
mov dword [ebp - 0x21e8], eax
jmp 0x46119a
mov dword [ebp - 0x470], 0
jmp 0x46122f
cmp dword [ebp - 0x470], 5
jg 0x46125d
mov byte [ebp - 0x31d], 0
movzx eax, byte [ebp - 0x31d]
test eax, eax
je 0x46125b
mov dword [ebp - 0x21f0], 0
mov dword [ebp - 0x2270], 5
mov dword [ebp - 0xbc4], 0xc1ec2db2
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x2cd4], 0xa39ed080
mov dword [ebp - 0xa00], 0xffffffff
mov dword [ebp - 0x2990], 1
mov dword [ebp - 0x2dc4], 1
mov eax, dword [ebp - 0xbc4]
cmp dword [ebp - 0x2270], eax
je 0x461316
jmp 0x460eaa
mov dword [ebp - 0x58], 0x53606de7
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x3c8], 0x7c80c7f4
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x29a0], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2e38], eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x58]
cmp eax, 1
ja 0x4614fb
mov dword [ebp - 0x113c], 1
jmp 0x461502
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x113c], eax
jge 0x461519
mov dword [ebp - 0x1144], 1
jmp 0x461520
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1144], eax
je 0x461537
mov dword [ebp - 0x114c], 1
jmp 0x46153e
and dword [ebp - 0x114c], 0
mov eax, dword [ebp - 0x114c]
add eax, 0x693009c
cmp eax, 1
je 0x46155a
mov dword [ebp - 0x1154], 1
jmp 0x461561
and dword [ebp - 0x1154], 0
mov eax, dword [ebp - 0x1154]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x58]
jge 0x461587
mov dword [ebp - 0x115c], 1
jmp 0x46158e
and dword [ebp - 0x115c], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x115c]
jl 0x4619ed
mov dword [ebp - 0x8d0], 0xffffffff
mov dword [ebp - 0x8c8], 0
jmp 0x4615c0
mov eax, dword [ebp - 0x8c8]
inc eax
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 1
jge 0x4615d9
mov eax, dword [ebp - 0x8c8]
mov dword [ebp + eax*4 - 0x80], 0xfa8bc07c
jmp 0x4615b3
mov dword [ebp - 0x88], 0
jmp 0x4615f2
cmp dword [ebp - 0x88], 0
jl 0x4619e8
mov dword [ebp - 0xbe4], 0xfffffffd
mov dword [ebp - 0x980], 0
jmp 0x461622
mov eax, dword [ebp - 0x980]
inc eax
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x980], 2
jge 0x46163e
mov eax, dword [ebp - 0x980]
mov dword [ebp + eax*4 - 0x257c], 0xb6ef5427
jmp 0x461615
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x29a8], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x80], 0xffffffff
jge 0x461660
mov dword [ebp - 0x1164], 1
jmp 0x461667
and dword [ebp - 0x1164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp eax, dword [ebp - 0x1164]
jge 0x461685
mov dword [ebp - 0x116c], 1
jmp 0x46168c
and dword [ebp - 0x116c], 0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x80]
cmp dword [ebp - 0x116c], eax
je 0x4616aa
mov dword [ebp - 0x1174], 1
jmp 0x4616b1
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x80]
cmp eax, dword [ebp - 0x1174]
jg 0x4616cf
mov dword [ebp - 0x117c], 1
jmp 0x4616d6
and dword [ebp - 0x117c], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x117c]
test eax, eax
jne 0x461703
jmp 0x461b76
mov dword [ebp - 0x16c], 0xb6b3
mov dword [ebp - 0x2200], 0
or eax, 0xffffffff
je 0x461a18
cmp dword [ebp - 0x16c], 0
je 0x461a18
cmp dword [ebp - 0x16c], 0
jne 0x461a2a
cmp dword [ebp - 0x88], 0
jne 0x461a2a
and dword [ebp - 0x2280], 0
jmp 0x461a34
mov dword [ebp - 0x2280], 1
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x29c0], eax
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x16c]
je 0x461a61
mov dword [ebp - 0x11ec], 1
jmp 0x461a68
and dword [ebp - 0x11ec], 0
cmp dword [ebp - 0x11ec], 0xffffffff
jge 0x461a86
cmp dword [ebp - 0x16c], 0
je 0x461a86
mov dword [ebp - 0x11f4], 1
jmp 0x461a8d
and dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x11f4], eax
jg 0x461aa7
mov dword [ebp - 0x11fc], 1
jmp 0x461aae
and dword [ebp - 0x11fc], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x11fc]
cmp eax, dword [ebp - 0x3c8]
jne 0x461acb
mov dword [ebp - 0x1204], 1
jmp 0x461ad2
and dword [ebp - 0x1204], 0
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x1204], eax
je 0x461aec
mov dword [ebp - 0x120c], 1
jmp 0x461af3
and dword [ebp - 0x120c], 0
mov eax, dword [ebp - 0x16c]
dec eax
cmp eax, dword [ebp - 0x120c]
jl 0x461b0e
mov dword [ebp - 0x1214], 1
jmp 0x461b15
and dword [ebp - 0x1214], 0
cmp dword [ebp - 0x1214], 0x5ee192ef
jl 0x461b32
or eax, 0xffffffff
je 0x461b32
mov dword [ebp - 0x121c], 1
jmp 0x461b39
and dword [ebp - 0x121c], 0
cmp dword [ebp - 0x121c], 0x13d9
jg 0x461b51
mov dword [ebp - 0x1224], 1
jmp 0x461b58
and dword [ebp - 0x1224], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1224], eax
jge 0x461b6a
mov dword [ebp - 0x3c8], 0
jmp 0x461b8f
mov eax, dword [ebp - 0x3c8]
dec eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0xffffffe9
jne 0x461bba
mov byte [ebp - 0x422], 0
movzx eax, byte [ebp - 0x422]
test eax, eax
je 0x461bb8
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
jmp 0x461b82
call fcn.004516d6
mov dword [ebp - 0x2b68], 0x76b0f738
mov byte [ebp - 0x321], 0
movzx eax, byte [ebp - 0x321]
test eax, eax
je 0x461bf9
push 0xfd
push 0
push 0x1a37
push 0
push 0x1b21
push 0x228a
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov byte [ebp - 0x432], 0
movzx eax, byte [ebp - 0x432]
test eax, eax
je 0x461c15
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 0x8d8], 0xd5e48d32
mov dword [ebp - 0x988], 0xffffffff
mov dword [ebp - 0x2208], 0x8ceef9a8
mov dword [ebp - 0x9d8], 0
jmp 0x461c4c
cmp dword [ebp - 0x9d8], 1
jge 0x461c68
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x3d0], 0xffffffff
mov dword [ebp - 0x2a0], 0xd64f6899
mov dword [ebp - 0x144c], 0xaeaba4a2
mov dword [ebp - 0x1fa4], 0x8663c10b
cmp dword [ebp - 0x2c], 0
je 0x463479
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2a40], eax
xor eax, eax
je 0x463319
mov eax, 0x876a47cd
test eax, eax
je 0x463319
mov dword [ebp - 0x1404], 1
jmp 0x463320
and dword [ebp - 0x1404], 0
imul eax, dword [ebp - 0x1404], 0x3e8c
cmp eax, 0x7d19fa55
jg 0x46333d
mov dword [ebp - 0x140c], 1
jmp 0x463344
and dword [ebp - 0x140c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x140c], eax
je 0x46335b
mov dword [ebp - 0x1414], 1
jmp 0x463362
and dword [ebp - 0x1414], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1414], eax
jl 0x46337d
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x46337d
and dword [ebp - 0x141c], 0
jmp 0x463387
mov dword [ebp - 0x141c], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x141c], eax
jne 0x46339e
mov dword [ebp - 0x1424], 1
jmp 0x4633a5
and dword [ebp - 0x1424], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1424], eax
jge 0x4633bc
mov dword [ebp - 0x142c], 1
jmp 0x4633c3
and dword [ebp - 0x142c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x142c], eax
je 0x4633da
mov dword [ebp - 0x1f94], 1
jmp 0x4633e1
and dword [ebp - 0x1f94], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x2be0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2a4c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2be8], eax
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x2a0], eax
je 0x463422
mov dword [ebp - 0x1f9c], 1
jmp 0x463429
and dword [ebp - 0x1f9c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2a58], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2bf0], eax
mov eax, dword [ebp - 0x3d0]
neg eax
imul eax, dword [ebp - 0x2c]
cmp eax, 8
ja 0x46345b
mov dword [ebp - 0x1434], 1
jmp 0x463462
and dword [ebp - 0x1434], 0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1434]
je 0x463479
mov dword [ebp - 0x143c], 1
jmp 0x463480
and dword [ebp - 0x143c], 0
cmp dword [ebp - 0x143c], 0
jbe 0x463495
mov dword [ebp - 0x1444], 1
jmp 0x46349c
and dword [ebp - 0x1444], 0
mov eax, dword [ebp - 0x1444]
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 0x144c]
mov dword [ebp - 0x2a64], eax
mov dword [ebp - 0x1fa4], 0xa5fc0266
mov dword [ebp - 0x2c], 0
jmp 0x4634ce
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x15
je 0x4635af
mov dword [ebp - 0x81c], 0
jmp 0x4634f1
mov eax, dword [ebp - 0x81c]
inc eax
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 2
jge 0x46350d
mov eax, dword [ebp - 0x81c]
mov dword [ebp + eax*4 - 0x2b20], 0xc73ee49c
jmp 0x4634e4
mov byte [ebp - 0x369], 0
movzx eax, byte [ebp - 0x369]
test eax, eax
je 0x463534
push 0x211d
push 0x3ba
push 0x2440
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [ebp - 0x3d0], 1
jmp 0x46354d
mov eax, dword [ebp - 0x3d0]
dec eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0
jl 0x4635aa
mov dword [ebp - 0x2a0], 0
jmp 0x46356f
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jg 0x4635a8
mov byte [ebp - 0x415], 0
movzx eax, byte [ebp - 0x415]
test eax, eax
je 0x463594
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp + eax*4 - 0x2b20], 0
je 0x4635a6
jmp 0x4635a8
jmp 0x463562
jmp 0x463540
jmp 0x4634c7
xor ecx, ecx
call fcn.004288a6
push eax
call fcn.0046b653
pop ecx
mov dword [ebp - 0x568], 1
mov dword [ebp - 0x824], 0
jmp 0x4635e0
mov eax, dword [ebp - 0x824]
inc eax
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x824], 2
jge 0x4635fc
mov eax, dword [ebp - 0x824]
mov dword [ebp + eax*4 - 0xa44], 0xca631852
jmp 0x4635d3
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa44], 0
je 0x46365f
mov dword [ebp - 0x82c], 0xb0647dc4
mov dword [ebp - 0x1fb4], 0x4445559
mov dword [ebp - 0x82c], 0
jmp 0x463639
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0xa
jge 0x46365a
mov dword [ebp - 0x1fac], 0xe77ab392
mov eax, dword [ebp - 0x1fac]
mov dword [ebp - 0x1fb4], eax
jmp 0x46362c
jmp 0x4639e3
mov dword [ebp - 0x134], 0xdfe4d9ed
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x134], 0
jmp 0x46368c
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 7
jle 0x463884
mov dword [ebp - 0x1474], 9
mov dword [ebp - 0x834], 0
jmp 0x4636bc
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 3
jge 0x4636d8
mov eax, dword [ebp - 0x834]
mov dword [ebp + eax*4 - 0x2f34], 0
jmp 0x4636af
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x2bf8], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xc8], eax
imul eax, dword [ebp - 0xc8], 0x412
test eax, eax
je 0x463782
cmp dword [ebp - 0xc8], 0xc5706b37
jbe 0x46371a
mov dword [ebp - 0x1454], 1
jmp 0x463721
and dword [ebp - 0x1454], 0
cmp dword [ebp - 0x1454], 0x5cc7
jne 0x463739
mov dword [ebp - 0x145c], 1
jmp 0x463740
and dword [ebp - 0x145c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa44]
cmp dword [ebp - 0x145c], eax
jge 0x463761
mov dword [ebp - 0x1464], 1
jmp 0x463768
and dword [ebp - 0x1464], 0
mov eax, dword [ebp - 0x1474]
cmp dword [ebp - 0x1464], eax
jl 0x463782
mov dword [ebp - 0x146c], 1
jmp 0x463789
and dword [ebp - 0x146c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa44]
imul eax, dword [ebp - 0x146c]
cmp eax, 0x9031
jl 0x4637b0
mov dword [ebp - 0x147c], 1
jmp 0x4637b7
and dword [ebp - 0x147c], 0
mov eax, dword [ebp - 0x1474]
cmp dword [ebp - 0x147c], eax
jne 0x4637d1
mov dword [ebp - 0x1484], 1
jmp 0x4637d8
and dword [ebp - 0x1484], 0
mov eax, dword [ebp - 0x1484]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa44]
je 0x4637fb
mov dword [ebp - 0x148c], 1
jmp 0x463802
and dword [ebp - 0x148c], 0
mov eax, 0x9f3faa32
sub eax, dword [ebp - 0x148c]
jne 0x46381b
mov dword [ebp - 0x1fbc], 1
jmp 0x463822
and dword [ebp - 0x1fbc], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x2a70], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xc8], eax
jl 0x463848
mov dword [ebp - 0x1494], 1
jmp 0x46384f
and dword [ebp - 0x1494], 0
cmp dword [ebp - 0x1494], 0xffffffff
jl 0x463864
mov dword [ebp - 0x149c], 1
jmp 0x46386b
and dword [ebp - 0x149c], 0
mov eax, dword [ebp - 0x149c]
neg eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2f34], eax
jmp 0x46367f
mov dword [ebp - 0xc8], 0
jmp 0x46389d
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jg 0x4639e3
mov dword [ebp - 0x14c4], 0x58a4122e
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xa44], 0xdc068927
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x4639c7
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa44], 0
je 0x463994
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xa44], 0
jne 0x463972
cmp dword [ebp - 0x134], 0
je 0x463912
cmp dword [ebp - 0xc8], 0
je 0x463912
mov dword [ebp - 0x14a4], 1
jmp 0x463919
and dword [ebp - 0x14a4], 0
mov eax, dword [ebp - 0x14a4]
imul eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x14ac], eax
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x14ac]
mov dword [ebp + eax*4 - 0xa44], ecx
mov eax, dword [ebp - 0x568]
cmp dword [ebp - 0x14ac], eax
jle 0x463959
mov dword [ebp - 0x14b4], 1
jmp 0x463960
and dword [ebp - 0x14b4], 0
cmp dword [ebp - 0x14b4], 0
jne 0x463972
and dword [ebp - 0x14bc], 0
jmp 0x46397c
mov dword [ebp - 0x14bc], 1
cmp dword [ebp - 0x14bc], 0x87e5
jl 0x463994
mov dword [ebp - 0x1fc4], 1
jmp 0x46399b
and dword [ebp - 0x1fc4], 0
mov eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x2c00], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x2a7c], eax
xor eax, eax
jne 0x4639bb
xor eax, eax
je 0x4639c7
mov dword [ebp - 0x14cc], 1
jmp 0x4639ce
and dword [ebp - 0x14cc], 0
imul eax, dword [ebp - 0x14cc], 0x82e7
mov dword [ebp - 0x134], eax
jmp 0x463890
mov dword [ebp - 0x568], 0x1b
jmp 0x4639fc
mov eax, dword [ebp - 0x568]
dec eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0xf
jle 0x463a31
mov byte [ebp - 0x371], 0
movzx eax, byte [ebp - 0x371]
test eax, eax
je 0x463a2f
push 0
push 0x17cc
push 0
push 0
push 0x9cd
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x4639ef
mov dword [ebp - 0x2a8], 0x76ff
mov dword [ebp - 0xa8c], 0x1e6e4042
mov dword [ebp - 0x578], 0xb9ba5e0b
mov dword [ebp - 0x1534], 0xffffffff
mov dword [ebp - 0x1fcc], 0
mov dword [ebp - 0x1e8], 0
jmp 0x463a7c
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jge 0x463a98
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x570], 0xfffffff8
jmp 0x463a6f
mov dword [ebp - 0x1e8], 0
jmp 0x463ab1
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x463acd
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x1eac], 0
jmp 0x463aa4
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a8]
cmp dword [ebp + eax - 0x570], ecx
jg 0x463aee
mov dword [ebp - 0x1504], 1
jmp 0x463af5
and dword [ebp - 0x1504], 0
mov eax, 0xebd004dd
test eax, eax
je 0x463b13
cmp dword [ebp - 0x2a8], 0
je 0x463b13
mov dword [ebp - 0xa84], 1
jmp 0x463b1a
and dword [ebp - 0xa84], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa84]
mov dword [ebp + eax - 0x1eac], ecx
cmp dword [ebp - 0xa84], 0
jne 0x463b4f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1eac], 0
jne 0x463b4f
and dword [ebp - 0x14d4], 0
jmp 0x463b59
mov dword [ebp - 0x14d4], 1
cmp dword [ebp - 0x14d4], 0x67f5
jne 0x463b71
mov dword [ebp - 0x14dc], 1
jmp 0x463b78
and dword [ebp - 0x14dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x570]
cmp dword [ebp - 0x14dc], eax
jg 0x463b99
mov dword [ebp - 0x14e4], 1
jmp 0x463ba0
and dword [ebp - 0x14e4], 0
mov eax, dword [ebp - 0x14e4]
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 0
je 0x463bca
cmp dword [ebp - 0xa8c], 0
je 0x463bca
mov dword [ebp - 0x14ec], 1
jmp 0x463bd1
and dword [ebp - 0x14ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x570]
cmp dword [ebp - 0x14ec], eax
jne 0x463bf2
mov dword [ebp - 0x14f4], 1
jmp 0x463bf9
and dword [ebp - 0x14f4], 0
mov eax, dword [ebp - 0x14f4]
mov dword [ebp - 0x578], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1eac], 0x1a812c00
jg 0x463c24
mov dword [ebp - 0x14fc], 1
jmp 0x463c2b
and dword [ebp - 0x14fc], 0
mov eax, dword [ebp - 0x2a8]
imul eax, dword [ebp - 0x14fc]
test eax, eax
je 0x463c4a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1eac], 0
mov eax, dword [ebp - 0x1504]
neg eax
cmp eax, dword [ebp - 0x2a8]
jle 0x463c66
mov dword [ebp - 0x150c], 1
jmp 0x463c6d
and dword [ebp - 0x150c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x570]
cmp dword [ebp - 0x150c], eax
jne 0x463c8e
mov dword [ebp - 0xa94], 1
jmp 0x463c95
and dword [ebp - 0xa94], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa94]
mov dword [ebp + eax - 0x570], ecx
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0xa94], eax
jle 0x463cc2
mov dword [ebp - 0x1514], 1
jmp 0x463cc9
and dword [ebp - 0x1514], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x1514], eax
jge 0x463ce3
mov dword [ebp - 0x151c], 1
jmp 0x463cea
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x151c], eax
je 0x463d04
mov dword [ebp - 0x1524], 1
jmp 0x463d0b
and dword [ebp - 0x1524], 0
cmp dword [ebp - 0x1524], 0x61c0f806
jge 0x463d23
mov dword [ebp - 0x152c], 1
jmp 0x463d2a
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0x2a8]
sub eax, dword [ebp - 0x152c]
add eax, 0xe1c
mov dword [ebp - 0x1534], eax
mov eax, dword [ebp - 0x1534]
mov dword [ebp - 0x1fcc], eax
mov dword [ebp - 0x578], 0
jmp 0x463d66
mov eax, dword [ebp - 0x578]
dec eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 0xfffffff7
je 0x463d88
mov dword [ebp - 0x153c], 0xfffffff9
mov eax, dword [ebp - 0x153c]
inc eax
mov dword [ebp - 0x153c], eax
jmp 0x463d59
mov dword [ebp - 0x1fd4], 0
cmp dword [ebp - 0x1fd4], 0
je 0x463dca
mov byte [ebp - 0x417], 0
movzx eax, byte [ebp - 0x417]
test eax, eax
je 0x463dc8
push 0x54b
push 0
push 0x1601
push 0x268e
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x463de4
mov byte [ebp - 0x379], 0
movzx eax, byte [ebp - 0x379]
test eax, eax
je 0x463de4
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
mov dword [ebp - 0x3d8], 0xd94fe5f3
mov dword [ebp - 0x1f0], 0x68206240
mov dword [ebp - 0x83c], 0
jmp 0x463e11
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 4
jge 0x463e2d
mov eax, dword [ebp - 0x83c]
mov dword [ebp + eax*4 - 0x318c], 0x1e6e2bfb
jmp 0x463e04
mov dword [ebp - 0x1f0], 0xfffffffb
jmp 0x463e46
cmp dword [ebp - 0x1f0], 0x19
jle 0x463f1d