Function at 0x425c1d
Capabilities:
Delete directory
Resume thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6a8
push esi
mov dword [ebp - 0xc8], 0x97f6af11
mov dword [ebp - 0x5b0], 0x9c9fb37b
push 3
lea ecx, [ebp - 0x5d0]
call fcn.004011bf
mov dword [ebp - 0x9c], 0
jmp 0x425c61
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x425c80
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x5d0]
call fcn.004012ad
and dword [eax], 0
jmp 0x425c54
mov dword [ebp - 0xc8], 0
jmp 0x425c99
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffee
je 0x425ce5
mov dword [ebp - 0x414], 0x19c5a654
mov dword [ebp - 0x4bc], 0x67215912
mov dword [ebp - 0x5f4], 7
mov dword [ebp - 0x2e0], 0xfffffffc
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
jmp 0x425c8c
lea ecx, [ebp - 0x5d0]
call fcn.00401291
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x4280a7
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x324], 8
mov dword [ebp - 0x154], 1
mov dword [ebp - 0xf4], 0xfffffffc
mov dword [ebp - 0x20], 0
jmp 0x425d31
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xb
jle 0x425f2f
mov dword [ebp - 0x7c], 9
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x7c], eax
jl 0x425d72
mov dword [ebp - 0x3e8], 1
jmp 0x425d79
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3e8], eax
jg 0x425d90
mov dword [ebp - 0x3f0], 1
jmp 0x425d97
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 7
je 0x425dac
mov dword [ebp - 0x4d0], 1
jmp 0x425db3
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x7c], 0
jb 0x425dce
mov dword [ebp - 0x13c], 1
jmp 0x425dd5
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0x889e
jle 0x425ded
mov dword [ebp - 0x314], 1
jmp 0x425df4
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x314]
jl 0x425e0b
mov dword [ebp - 0x144], 1
jmp 0x425e12
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x31c], eax
je 0x425e35
mov dword [ebp - 0x14c], 1
jmp 0x425e3c
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xea3de81d
jne 0x425e6c
mov dword [ebp - 0x32c], 1
jmp 0x425e73
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
add eax, 0x5d36cf08
imul eax, eax, 0xffffffff
cmp eax, 1
je 0x425e92
mov dword [ebp - 0x15c], 1
jmp 0x425e99
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x15c], eax
jl 0x425eb0
mov dword [ebp - 0x334], 1
jmp 0x425eb7
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x334]
lea eax, [ecx + eax - 1]
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xf4]
jle 0x425edc
mov dword [ebp - 0x164], 1
jmp 0x425ee3
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 1
jge 0x425ef8
mov dword [ebp - 0x33c], 1
jmp 0x425eff
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 0xb72b
jg 0x425f17
mov dword [ebp - 0x16c], 1
jmp 0x425f1e
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xf4], eax
jmp 0x425d2a
mov dword [ebp - 0xf4], 0xfffffffe
lea eax, [ebp + 8]
mov dword [ebp - 0x440], eax
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 0xa4], 0
jmp 0x425f62
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x425f7e
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x90], 0xfffffffa
jmp 0x425f55
mov dword [ebp - 4], 2
jmp 0x425f8e
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x4261cf
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x184], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x90]
add eax, 0xb9db
jne 0x425fcb
or eax, 0xffffffff
jne 0x425fcb
and dword [ebp - 0x344], 0
jmp 0x425fd5
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x90]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x344]
imul eax, ecx
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x90], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x114], 0
je 0x42606d
mov dword [ebp - 0xd0], 0
jmp 0x426037
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x426053
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x674], 5
jmp 0x42602a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x674], 0
je 0x426068
jmp 0x4261cf
jmp 0x4261ca
mov dword [ebp - 0x364], 0x589d
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x90], 0
je 0x42609d
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x90], 0
je 0x42609d
mov dword [ebp - 0x174], 1
jmp 0x4260a4
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x90]
imul eax, dword [ebp - 0x174]
test eax, eax
je 0x4260c5
mov dword [ebp - 0x34c], 1
jmp 0x4260cc
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x34c], eax
jge 0x4260ed
mov dword [ebp - 0x17c], 1
jmp 0x4260f4
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x17c], eax
jg 0x42610e
mov dword [ebp - 0x4d8], 1
jmp 0x426115
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x184]
add eax, 9
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x90], ecx
cmp dword [ebp - 0x354], 1
je 0x426156
mov dword [ebp - 0x35c], 1
jmp 0x42615d
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x35c]
jg 0x426177
mov dword [ebp - 0x18c], 1
jmp 0x42617e
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 0xbc62
je 0x426196
mov dword [ebp - 0x194], 1
jmp 0x42619d
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x194], eax
jl 0x4261b7
mov dword [ebp - 0x36c], 1
jmp 0x4261be
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x114], eax
jmp 0x425f87
mov dword [ebp - 4], 2
jmp 0x4261df
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x42633f
mov dword [ebp - 0x54], 0x808adc70
mov dword [ebp - 0x54], 0
jmp 0x426200
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x42633a
mov dword [ebp - 0x80], 0xfffffff6
mov dword [ebp - 0x1ac], 0xfffffff9
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x90]
mov dword [ebp + ecx*4 - 0x90], eax
mov dword [ebp - 0x80], 0
jmp 0x42623f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jg 0x426335
mov dword [ebp - 0x4f0], 0xf3bc9fc2
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x90], 0
jne 0x42626e
or eax, 0xffffffff
jne 0x42626e
and dword [ebp - 0x19c], 0
jmp 0x426278
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x90]
cmp dword [ebp - 0x19c], eax
jge 0x4262b0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x90]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0x90], ecx
mov eax, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x54]
add eax, 8
cmp eax, 1
jge 0x4262c7
mov dword [ebp - 0x1a4], 1
jmp 0x4262ce
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1a4], eax
jl 0x4262eb
cmp dword [ebp - 0x54], 0
je 0x4262eb
mov dword [ebp - 0x37c], 1
jmp 0x4262f2
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
sub eax, 0x7c7592e0
jne 0x426308
cmp dword [ebp - 0x1ac], 0
je 0x42631d
mov eax, 0xe3335a02
test eax, eax
je 0x42631d
mov dword [ebp - 0x384], 1
jmp 0x426324
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x4f0], eax
jmp 0x426238
jmp 0x4261f9
jmp 0x4261d8
lea eax, [ebp + 0x20]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x394], 0xffffffff
mov dword [ebp - 0x4dc], 8
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x104], 0x921e124d
mov dword [ebp - 0x1bc], 0
push 3
lea ecx, [ebp - 0x554]
call fcn.004011bf
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1d4], 0xfffffffa
mov dword [ebp - 0x640], 0xcb314b81
mov dword [ebp - 0x63c], 0xcb314b81
mov dword [ebp - 0x638], 0xcb314b81
mov dword [ebp - 0x634], 0xcb314b81
mov dword [ebp - 0xac], 0
jmp 0x4263dc
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x4263fb
push dword [ebp - 0xac]
lea ecx, [ebp - 0x554]
call fcn.004012ad
or dword [eax], 0xffffffff
jmp 0x4263cf
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x104], 0
je 0x42642d
xor eax, eax
je 0x42642d
mov dword [ebp - 0x38c], 1
jmp 0x426434
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x27213ec7
je 0x426461
cmp dword [ebp - 0x394], 0
je 0x426461
mov dword [ebp - 0x1c4], 1
jmp 0x426468
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0xfffffffa
jg 0x42647d
mov dword [ebp - 0x39c], 1
jmp 0x426484
and dword [ebp - 0x39c], 0
imul eax, dword [ebp - 0x39c], 0xffff
inc eax
cmp eax, dword [ebp - 0x4dc]
jle 0x4264a3
mov dword [ebp - 0x1cc], 1
jmp 0x4264aa
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 1
jne 0x4264bf
mov dword [ebp - 0x3a4], 1
jmp 0x4264c6
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
neg eax
mov dword [ebp - 0x104], eax
mov esi, dword [ebp - 0x104]
push 0
lea ecx, [ebp - 0x554]
call fcn.004012ad
mov dword [eax], esi
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
lea ecx, [ebp - 0x554]
call fcn.00401291
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x124], 0xf09c
mov dword [ebp - 0x494], 0xef2c3654
mov dword [ebp - 0x5b8], 0xffffffff
mov dword [ebp - 0x10c], 0x6e54ee87
mov dword [ebp - 0x5c0], 0x7cfaf42
mov dword [ebp - 0x420], 0xfffffffd
mov dword [ebp - 0xd8], 0x42477066
mov dword [ebp - 0x4b4], 0xae65c342
mov dword [ebp - 0x24], 0
jmp 0x42656a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x426580
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4c8], 0xab5457d6
jmp 0x426563
mov dword [ebp - 0x24], 0
jmp 0x426590
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x4265a6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x668], 0xf204795e
jmp 0x426589
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0x4c8], ecx
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x3ac]
jge 0x4265df
mov dword [ebp - 0x3bc], 1
jmp 0x4265e6
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0xd8], 1
je 0x4265fb
mov dword [ebp - 0x1dc], 1
jmp 0x426602
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x1dc], eax
jg 0x42661c
mov dword [ebp - 0x3b4], 1
jmp 0x426623
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0xffffffff
jl 0x426638
mov dword [ebp - 0x1e4], 1
jmp 0x42663f
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x420]
je 0x426662
mov eax, 0xe318b474
test eax, eax
je 0x426662
mov dword [ebp - 0x1ec], 1
jmp 0x426669
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x3bc]
add eax, dword [ebp - 0x1ec]
add eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x4b4]
jl 0x42668f
mov dword [ebp - 0x1f4], 1
jmp 0x426696
and dword [ebp - 0x1f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x668]
inc eax
mov dword [ebp - 0x3c4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp + eax - 0x668], ecx
mov eax, dword [ebp - 0x3c4]
imul eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x124], eax
jg 0x4266dc
mov dword [ebp - 0x3cc], 1
jmp 0x4266e3
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x3cc], eax
jg 0x4266fd
mov dword [ebp - 0x3d4], 1
jmp 0x426704
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 1
jle 0x426719
mov dword [ebp - 0x1fc], 1
jmp 0x426720
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x1fc]
lea eax, [ecx + eax + 1]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 8], 0xbeccce1e
mov dword [ebp - 0x84], 6
mov dword [ebp - 0xe0], 0xf4399391
mov dword [ebp - 0x84], 0xc96c
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x84], eax
jl 0x426787
mov dword [ebp - 0x200], 1
jmp 0x42678e
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x200]
jg 0x4267a5
mov dword [ebp - 0x428], 1
jmp 0x4267ac
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
cmp dword [ebp - 8], eax
jle 0x4267c3
mov dword [ebp - 0x300], 1
jmp 0x4267ca
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
neg eax
cmp eax, dword [ebp - 8]
jle 0x4267e3
mov dword [ebp - 0x218], 1
jmp 0x4267ea
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x218]
jg 0x426801
mov dword [ebp - 0x378], 1
jmp 0x426808
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0x62a96950
jne 0x426820
mov dword [ebp - 0x220], 1
jmp 0x426827
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 8]
je 0x426859
mov dword [ebp - 0x308], 5
mov eax, dword [ebp - 8]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x84], eax
jmp 0x426ade
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x430], 0x85ca7db
mov dword [ebp - 0x438], 0x43ca3807
mov dword [ebp - 0xb4], 0
jmp 0x426897
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x4268b3
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x250], 0x5b872a60
jmp 0x42688a
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x11c]
jg 0x4268cd
mov dword [ebp - 0x228], 1
jmp 0x4268d4
and dword [ebp - 0x228], 0
imul eax, dword [ebp - 0x228], 0xfffa
sub eax, 0xfffffff9
mov dword [ebp - 0x3d0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp + eax - 0x250], ecx
cmp dword [ebp - 0x3d0], 0xa132
jge 0x426912
mov dword [ebp - 0x230], 1
jmp 0x426919
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x230]
jl 0x426930
mov dword [ebp - 0x4a0], 1
jmp 0x426937
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 8], eax
jg 0x42694e
mov dword [ebp - 0x310], 1
jmp 0x426955
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x11c], eax
je 0x426986
cmp dword [ebp - 0x84], 0
jne 0x426986
xor eax, eax
inc eax
jne 0x426986
and dword [ebp - 0x238], 0
jmp 0x426990
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x238], eax
jge 0x4269a7
mov dword [ebp - 0x380], 1
jmp 0x4269ae
and dword [ebp - 0x380], 0
imul eax, dword [ebp - 0x74], 0xfffb
cmp eax, dword [ebp - 0x380]
jg 0x4269c9
mov dword [ebp - 0x240], 1
jmp 0x4269d0
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x240], eax
je 0x4269e7
mov dword [ebp - 0x318], 1
jmp 0x4269ee
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x318], eax
je 0x426a08
mov dword [ebp - 0x4cc], 1
jmp 0x426a0f
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0xe0], 0xe5e2
jle 0x426a27
mov dword [ebp - 0x248], 1
jmp 0x426a2e
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x248], eax
jge 0x426a45
mov dword [ebp - 0x3b8], 1
jmp 0x426a4c
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
sub eax, 0xd594399
imul eax, dword [ebp - 0xe0]
cmp eax, 0x1183
jne 0x426a7e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0
jne 0x426a7e
and dword [ebp - 0x320], 0
jmp 0x426a88
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x438]
add eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 8]
je 0x426aab
cmp dword [ebp - 8], 0
je 0x426aab
mov dword [ebp - 0x258], 1
jmp 0x426ab2
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
add eax, 0x5d478cec
mov dword [ebp - 0x84], eax
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x426ade
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x268], 0xfffffffc
push 4
lea ecx, [ebp - 0x53c]
call fcn.004011bf
mov dword [ebp - 0x28], 0
jmp 0x426b18
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x426b2e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x130], 0x8f69f7fd
jmp 0x426b11
mov dword [ebp - 0x28], 0
jmp 0x426b3e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x426b5a
push dword [ebp - 0x28]
lea ecx, [ebp - 0x53c]
call fcn.004012ad
mov dword [eax], 3
jmp 0x426b37
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x426b7d
push 0x19be
push 0x6b9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x130], 7
jne 0x426b99
mov dword [ebp - 0x388], 1
jmp 0x426ba0
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x130]
mov ecx, dword [ebp - 0x388]
lea eax, [ecx + eax + 9]
mov dword [ebp - 0x260], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x130]
cmp eax, dword [ebp - 0x260]
jge 0x426bdd
mov dword [ebp - 0x328], 1
jmp 0x426be4
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x268], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x130]
cmp eax, dword [ebp - 0x268]
jg 0x426c10
mov dword [ebp - 0x3e4], 1
jmp 0x426c17
and dword [ebp - 0x3e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x130]
cmp dword [ebp - 0x3e4], eax
jne 0x426c38
mov dword [ebp - 0x4a8], 1
jmp 0x426c3f
and dword [ebp - 0x4a8], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x130]
cmp dword [ebp + eax - 0x130], ecx
je 0x426c66
mov dword [ebp - 0x270], 1
jmp 0x426c6d
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0x6ec7
je 0x426c85
mov dword [ebp - 0x330], 1
jmp 0x426c8c
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x130]
imul ecx, dword [ebp - 0x330]
cmp dword [ebp + eax - 0x130], ecx
jle 0x426cbb
mov dword [ebp - 0x278], 1
jmp 0x426cc2
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x130]
imul esi, dword [ebp - 0x278]
push 1
lea ecx, [ebp - 0x53c]
call fcn.004012ad
mov dword [eax], esi
lea ecx, [ebp - 0x53c]
call fcn.00401291
mov eax, dword [ebp - 0x440]
movzx eax, byte [eax]
test eax, eax
je 0x42781e
mov dword [ebp - 0x64], 0xfffffff8
mov dword [ebp - 0xbc], 0
jmp 0x426d21
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x426d3d
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x508], 0x710dd01
jmp 0x426d14
mov dword [ebp - 0x64], 0xfffffffd
mov dword [ebp - 0x64], 0
jmp 0x426d54
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff3
jne 0x426f5d
mov dword [ebp - 0x18], 0xe64f
mov dword [ebp - 0x57c], 0xffffffff
mov dword [ebp - 0x578], 0xffffffff
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0x570], 0xffffffff
mov dword [ebp - 0x398], 0x77904128
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jge 0x426dab
mov dword [ebp - 0x338], 1
jmp 0x426db2
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x64], 1
jb 0x426dc4
mov dword [ebp - 0x390], 1
jmp 0x426dcb
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x280], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x280]
mov dword [ebp + eax - 0x508], ecx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x280]
cmp eax, dword [ebp - 0x18]
jle 0x426e08
mov dword [ebp - 0x288], 1
jmp 0x426e0f
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x338]
cmp eax, dword [ebp - 0x288]
je 0x426e29
mov dword [ebp - 0x3c0], 1
jmp 0x426e30
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x64]
jl 0x426e4a
mov dword [ebp - 0xf8], 1
jmp 0x426e51
and dword [ebp - 0xf8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax - 0x57c], ecx
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0xf8], eax
jge 0x426e7e
mov dword [ebp - 0x290], 1
jmp 0x426e85
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 0xff5452fa
je 0x426e9d
mov dword [ebp - 0x340], 1
jmp 0x426ea4
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xfffffff9
jge 0x426eb9
mov dword [ebp - 0x298], 1
jmp 0x426ec0
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0xf58aae07
ja 0x426ed8
mov dword [ebp - 0x2a0], 1
jmp 0x426edf
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x2a0], eax
jle 0x426f04
mov dword [ebp - 0x4f4], 0xc3f30b9
cmp dword [ebp - 0x4f4], 0
je 0x426f02
jmp 0x426f5d
jmp 0x426f58
mov dword [ebp - 0x18], 0
jmp 0x426f14
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 9
je 0x426f44
mov dword [ebp - 0x348], 0xb8cff26a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x508], ecx
cmp dword [ebp - 0x348], 0
je 0x426f42
jmp 0x426f44
jmp 0x426f0d
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x426f58
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
jmp 0x426d4d
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x34], 0xea5d6c05
mov dword [ebp - 0xf0], 8
push 1
lea ecx, [ebp - 0x548]
call fcn.004011bf
mov dword [ebp - 0xe8], 0
jmp 0x426fac
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x426fce
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x548]
call fcn.004012ad
mov dword [eax], 0xd9964374
jmp 0x426f9f
mov dword [ebp - 0x34], 4
jmp 0x426fde
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1d
jne 0x4271e8
mov dword [ebp - 0x100], 6
mov dword [ebp - 0x450], 0xb653b1da
mov dword [ebp - 0x4d4], 1
mov dword [ebp - 0xc4], 0
jmp 0x42701f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x42703b
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x3e0], 0x30a9bca7
jmp 0x427012
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3e0]
cmp dword [ebp + eax - 0x3e0], ecx
jle 0x427063
mov dword [ebp - 0x2a8], 1
jmp 0x42706a
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3e0]
add ecx, dword [ebp - 0x2a8]
add eax, ecx
imul eax, dword [ebp - 0x450]
imul eax, eax, 0xc821
imul eax, dword [ebp - 0x34]
test eax, eax
jne 0x4270a3
cmp dword [ebp - 0xf0], 0
je 0x4270b8
mov eax, 0xba6aed1d
test eax, eax
je 0x4270b8
mov dword [ebp - 0x3d8], 1
jmp 0x4270bf
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0x193fe696
jl 0x4270d7
mov dword [ebp - 0x2b0], 1
jmp 0x4270de
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x350], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0x3e0], ecx
mov eax, dword [ebp - 0x350]
sub eax, dword [ebp - 0xf0]
je 0x42712b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3e0], 0
je 0x42712b
mov dword [ebp - 0x2b8], 1
jmp 0x427132
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x2b8], 0x8c98aac1
jbe 0x42714a
mov dword [ebp - 0x3a0], 1
jmp 0x427151
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x3a0]
jl 0x427174
mov dword [ebp - 0x2c0], 1
jmp 0x42717b
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2c0]
jl 0x427192
mov dword [ebp - 0x358], 1
jmp 0x427199
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x358]
jne 0x4271b0
mov dword [ebp - 0x2c8], 1
jmp 0x4271b7
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
neg eax
cmp eax, dword [ebp - 0xf0]
jne 0x4271ce
cmp dword [ebp - 0x100], 0
mov esi, dword [ebp - 0x4d4]
push 0
lea ecx, [ebp - 0x548]
call fcn.004012ad
mov dword [eax], esi
jmp 0x426fd7
lea ecx, [ebp - 0x548]
call fcn.00401291
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x3c8], 0x24ce5545
mov dword [ebp - 0x10], 0x51d52aa0
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x50], 0x59ea4d59
mov dword [ebp - 0x1c], 0x2273
mov dword [ebp - 0x210], 0xd29ed7d4
mov dword [ebp - 0x20c], 0xd29ed7d4
mov dword [ebp - 0x208], 0xd29ed7d4
mov dword [ebp - 0x204], 0xd29ed7d4
cmp dword [ebp - 0x3c8], 1
ja 0x42726f
mov dword [ebp - 0x10], 5
cmp dword [ebp - 0x10], 0
je 0x42726f
mov dword [ebp - 0x4b8], 1
jmp 0x427276
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x3c8], 0xffffffff
ja 0x42728b
mov dword [ebp - 0x2d0], 1
jmp 0x427292
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x2d0]
cmp eax, 5
jne 0x4272ad
mov dword [ebp - 0x360], 1
jmp 0x4272b4
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x360], eax
jg 0x4272cb
mov dword [ebp - 0x460], 1
jmp 0x4272d2
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x10]
sub eax, 0xe507
cmp eax, 0xffffffff
jl 0x4272f4
mov dword [ebp - 0x2d8], 1
jmp 0x4272fb
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x10], 9
jbe 0x42732e
cmp dword [ebp - 0x10], 0
je 0x42732e
mov dword [ebp - 0x3a8], 1
jmp 0x427335
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3a8], eax
je 0x427638
mov dword [ebp - 0xcc], 0x9191d4d0
mov dword [ebp - 0x470], 0x1f7fc01a
mov dword [ebp - 0x38], 0
jmp 0x427368
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff9
je 0x42762a
mov dword [ebp - 0x410], 0xfe0855bb
mov dword [ebp - 0x40c], 0xfe0855bb
mov dword [ebp - 0x408], 0xfe0855bb
mov dword [ebp - 0x404], 0xfe0855bb
mov dword [ebp - 0x1c], 0
jmp 0x4273aa
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x427625
mov dword [ebp - 0x2e8], 0x958a82d8
mov dword [ebp - 0x10], 0
jmp 0x4273ce
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x427462
mov dword [ebp - 0x14], 0x1cd25bb5
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x50], 0
jmp 0x4273f6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x42745d
mov dword [ebp - 0x14], 0
jmp 0x42740c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x427423
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x210], 0
je 0x427421
jmp 0x427423
jmp 0x427405
mov dword [ebp - 0x14], 0
jmp 0x427433
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x42745b
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x210], 0
je 0x427448
jmp 0x42745b
mov eax, dword [ebp - 0xcc]
inc eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp + ecx*4 - 0x210], eax
jmp 0x42742c
jmp 0x4273ef
jmp 0x4273c7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x410]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0xcc], 0
je 0x42748e
or eax, 0xffffffff
je 0x42748e
mov dword [ebp - 0x134], 1
jmp 0x427495
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0xffffffff
je 0x4274aa
mov dword [ebp - 0x4ec], 1
jmp 0x4274b1
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x210]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x210]
mov dword [ebp - 0x658], eax
or eax, 0xffffffff
cmp eax, 0xd05c4471
ja 0x4274e7
mov dword [ebp - 0x468], 1
jmp 0x4274ee
and dword [ebp - 0x468], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x410], 0xfffffff6
jge 0x427509
mov dword [ebp - 0x368], 1
jmp 0x427510
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0xcc]
jne 0x427537
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x410], 0
jne 0x427537
and dword [ebp - 0x4c0], 0
jmp 0x427541
mov dword [ebp - 0x4c0], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x210]
mov dword [ebp - 0x600], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x410]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0xfffffff6
jl 0x42758e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x410], 0
je 0x42758e
cmp dword [ebp - 0x38], 0
je 0x42758e
mov dword [ebp - 0x3ec], 1
jmp 0x427595
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x210]
imul eax, dword [ebp - 0x3ec]
test eax, eax
je 0x4275bc
cmp dword [ebp - 0x50], 0
je 0x4275bc
mov dword [ebp - 0x2f0], 1
jmp 0x4275c3
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 0xfffffff6
jge 0x4275d8
mov dword [ebp - 0x370], 1
jmp 0x4275df
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0
je 0x427604
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x410], 0
je 0x427604
mov dword [ebp - 0x2f8], 1
jmp 0x42760b
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
add eax, 0x57dc510c
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + ecx*4 - 0x210], eax
jmp 0x4273a3
jmp 0x427361
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x470], eax
jmp 0x42764b
mov dword [ebp - 0x4c4], 0x70d16aae
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x480], 7
mov dword [ebp - 0x48], 0
jmp 0x427678
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x42768b
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x70], 0xbdde0bcd
jmp 0x427671
mov dword [ebp - 0x48], 0
jmp 0x42769b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x4276b1
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x5fc], 1
jmp 0x427694
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x4276c5
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x30], 0
jmp 0x4276d5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x427804
mov dword [ebp - 0x49c], 0xe86a6760
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x70], 0
je 0x427752
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x427750
push 0x5a2
push 0x1e6e
push 0x1a77
push 0
push 0xc77
push 0x467
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1b18
push 0x19d9
push 0x4d1
push 0xf05
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
jmp 0x427760
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp + ecx*4 - 0x70], eax
cmp dword [ebp - 0x30], 1
jge 0x427772
mov dword [ebp - 0x3b0], 1
jmp 0x427779
and dword [ebp - 0x3b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0x3b0], eax
jl 0x427797
mov dword [ebp - 0x498], 1
jmp 0x42779e
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x49c], 0xaa47
jle 0x4277c2
mov dword [ebp - 0x1f8], 1
jmp 0x4277c9
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1f8]
add ecx, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x214], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x70], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x5fc], ecx
jmp 0x4276ce
mov eax, dword [ebp - 0x488]
movzx eax, word [eax]
push eax
mov ecx, dword [ebp - 0x4a4]
call fcn.0042ae7c
jmp 0x4280a2
push 2
lea ecx, [ebp - 0x5e0]
call fcn.004011bf
mov dword [ebp - 0x21c], 0xfffffff6
mov dword [ebp - 0xec], 0
jmp 0x42784e
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x42786d
push dword [ebp - 0xec]
lea ecx, [ebp - 0x5e0]
call fcn.004012ad
or dword [eax], 0xffffffff
jmp 0x427841
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x4278ab
push 0x392
push 0
push 0x1a26
push 0xab
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
lea ecx, [ebp - 0x5e0]
call fcn.00401291
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x6c], 0xfffffffb
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x25c], 0xc0f8067e
mov dword [ebp - 0x224], 0xc7c6f1fd
push 2
lea ecx, [ebp - 0x4e8]
call fcn.004011bf
mov dword [ebp - 0x41c], 7
push 1
lea ecx, [ebp - 0x5f0]
call fcn.004011bf
mov dword [ebp - 0x2c], 0
jmp 0x427927
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x427943
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4e8]
call fcn.004012ad
mov dword [eax], 0x478c
jmp 0x427920
mov dword [ebp - 0x2c], 0
jmp 0x427953
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x42796f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x5f0]
call fcn.004012ad
mov dword [eax], 0xfffffffd
jmp 0x42794c
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x427983
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0x224], 0x8d927f7b
cmp dword [ebp - 0x224], 0
jne 0x4279a5
cmp dword [ebp - 0x6c], 0
jne 0x4279a5
and dword [ebp - 0x22c], 0
jmp 0x4279af
mov dword [ebp - 0x22c], 1
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
je 0x4279cc
mov dword [ebp - 0x418], 1
jmp 0x4279d3
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x604], eax
mov eax, 0x3b8a
test eax, eax
je 0x427a03
push 1
lea ecx, [ebp - 0x4e8]
call fcn.004012ad
cmp dword [eax], 0
je 0x427a03
mov dword [ebp - 0x234], 1
jmp 0x427a0a
and dword [ebp - 0x234], 0
push 1
lea ecx, [ebp - 0x4e8]
call fcn.004012ad
mov ecx, dword [ebp - 0x234]
cmp ecx, dword [eax]
jne 0x427a2d
mov dword [ebp - 0x23c], 1
jmp 0x427a34
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 5
jg 0x427a49
mov dword [ebp - 0x244], 1
jmp 0x427a50
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x244]
jge 0x427a67
mov dword [ebp - 0x24c], 1
jmp 0x427a6e
and dword [ebp - 0x24c], 0
push 0
lea ecx, [ebp - 0x4e8]
call fcn.004012ad
mov ecx, dword [ebp - 0x24c]
cmp ecx, dword [eax]
jge 0x427a91
mov dword [ebp - 0x264], 1
jmp 0x427a98
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x25c], eax
mov eax, 0x7bc7
sub eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x264]
jg 0x427acc
mov dword [ebp - 0x26c], 1
jmp 0x427ad3
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x41c], eax
lea ecx, [ebp - 0x5f0]
call fcn.00401291
lea ecx, [ebp - 0x4e8]
call fcn.00401291
mov dword [ebp - 0x274], 0xeb0647dc
mov dword [ebp - 0x424], 0xd9edbda7
mov dword [ebp - 0x42c], 0xd9e2a8d3
mov dword [ebp - 0x594], 0x18a52733
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x284], 0x8e17c109
mov dword [ebp - 0x60c], 0x45c8100c
mov dword [ebp - 0x59c], 0x4a90611b
mov dword [ebp - 0x530], 4
mov dword [ebp - 0x52c], 4
mov dword [ebp - 0x528], 4
mov dword [ebp - 0x524], 4
lea ecx, [ebp - 0xf9]
call fcn.004012bc
push eax
lea eax, [ebp - 0x520]
push eax
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x688]
call fcn.004012bf
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x680]
call fcn.0040126b
push 1
lea ecx, [ebp - 0x500]
call fcn.004011bf
or dword [ebp - 0x51c], 0xffffffff
or dword [ebp - 0x518], 0xffffffff
or dword [ebp - 0x514], 0xffffffff
or dword [ebp - 0x510], 0xffffffff
lea ecx, [ebp - 0x11d]
call fcn.004012bc
push eax
lea eax, [ebp - 0x50c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x690]
call fcn.004012bf
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x56c]
call fcn.0040126b
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x427c23
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x427c42
push dword [ebp - 0x94]
lea ecx, [ebp - 0x500]
call fcn.004012ad
or dword [eax], 0xffffffff
jmp 0x427c16
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x274], 0xae77ab39
jne 0x427c66
mov dword [ebp - 0x27c], 1
jmp 0x427c6d
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 1
jae 0x427cd5
push 1
lea ecx, [ebp - 0x56c]
call fcn.004012ad
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x284], 0x7440
imul esi, dword [ebp - 0x284], 0xabeb
push 0
lea ecx, [ebp - 0x500]
call fcn.004012ad
sub esi, dword [eax]
mov eax, dword [ebp - 0x108]
add esi, dword [eax]
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
test esi, esi
je 0x427cd5
mov dword [ebp - 0x28c], 1
jmp 0x427cdc
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x28c], eax
jl 0x427cf6
mov dword [ebp - 0x294], 1
jmp 0x427cfd
and dword [ebp - 0x294], 0
push 0
lea ecx, [ebp - 0x500]
call fcn.004012ad
mov ecx, dword [ebp - 0x294]
mov dword [eax], ecx
cmp dword [ebp - 0x424], 0
jne 0x427d5e
push 3
lea ecx, [ebp - 0x56c]
call fcn.004012ad
mov ecx, dword [ebp - 0x29c]
sub ecx, 8
cmp dword [eax], ecx
jne 0x427d41
mov dword [ebp - 0x2a4], 1
jmp 0x427d48
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
sub eax, 0x34d7
jne 0x427d5e
and dword [ebp - 0x2ac], 0
jmp 0x427d68
mov dword [ebp - 0x2ac], 1
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x2ac], eax
jge 0x427d82
mov dword [ebp - 0x2b4], 1
jmp 0x427d89
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x434], eax
lea ecx, [ebp - 0x56c]
call fcn.00401291
lea ecx, [ebp - 0x500]
call fcn.00401291
lea ecx, [ebp - 0x680]
call fcn.00401291
mov eax, dword [ebp - 0x43c]
mov eax, dword [eax]
sub eax, 7
cdq
mov ecx, 0x51b
idiv ecx
sub eax, 7
mov ecx, dword [ebp - 0x444]
mov dword [ecx], eax
mov dword [ebp - 0x44], 0x76f5020f
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0xdc], 0xa33a4d1b
mov dword [ebp - 0x3c], 0
jmp 0x427dfc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x427e12
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x5a4], 0xfffffffd
jmp 0x427df5
mov dword [ebp - 0x3c], 0
jmp 0x427e22
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x427e35
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x78], 0
jmp 0x427e1b
mov dword [ebp - 0x44], 0
jmp 0x427e45
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x427f00
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0xd4], 0
jmp 0x427e72
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x427eed
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0xe4], 0
jmp 0x427e9e
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x427ed1
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x427ecf
push 0x1fe1
push 0x1e97
push 0x223d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
jmp 0x427e91
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x427ee8
push 0xb7
call dword [sym.imp.USER32.dll_GetSysColor]
jmp 0x427e65
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 6
jmp 0x427e3e
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jne 0x427f6e
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x4c]
jg 0x427f2c
mov dword [ebp - 0x2bc], 1
jmp 0x427f33
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2bc], eax
jle 0x427f4a
mov dword [ebp - 0x2c4], 1
jmp 0x427f51
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x2c4]
jg 0x427f6e
cmp dword [ebp - 0x44], 0
jne 0x427f6e
and dword [ebp - 0x2cc], 0
jmp 0x427f78
mov dword [ebp - 0x2cc], 1
cmp dword [ebp - 0x2cc], 0xfffffffb
jg 0x427f8d
mov dword [ebp - 0x44c], 1
jmp 0x427f94
and dword [ebp - 0x44c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x44], eax
jne 0x427fc5
mov dword [ebp - 0x2d4], 1
jmp 0x427fcc
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
add eax, dword [ebp - 0x2d4]
je 0x427fef
xor eax, eax
inc eax
je 0x427fef
mov dword [ebp - 0x2dc], 1
jmp 0x427ff6
and dword [ebp - 0x2dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
imul eax, dword [ebp - 0x2dc]
test eax, eax
je 0x428024
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0
je 0x428024
mov dword [ebp - 0x2e4], 1
jmp 0x42802b
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x2e4]
jne 0x428042
mov dword [ebp - 0x2ec], 1
jmp 0x428049
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2ec], eax
jne 0x428089
mov dword [ebp - 0x4c], 0xffffffe5
jmp 0x428064
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x1b
jne 0x428087
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x428085
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
jmp 0x42805d
jmp 0x42809d
mov dword [ebp - 0x454], 0xfffe
mov dword [ebp - 0x454], 0
jmp 0x428798
jmp 0x428798
mov dword [ebp - 0xc], 0x32b1cecb
mov dword [ebp - 0x45c], 0x35290ce9
mov dword [ebp - 0x46c], 0x7a9b65ca
mov dword [ebp - 0x98], 0
jmp 0x4280db
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x4280f7
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x400], 0xfffffff7
jmp 0x4280ce
mov dword [ebp - 0xc], 3
jmp 0x428107
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x428398
mov dword [ebp - 0x30c], 0xeadd5d
mov byte [ebp - 0x60], 0
movzx eax, byte [ebp - 0x60]
test eax, eax
je 0x428135
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov eax, dword [ebp - 0x45c]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x400]
cmp eax, 0xfffffffe
jg 0x42815a
mov dword [ebp - 0x2f4], 1
jmp 0x428161
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0x356e
jl 0x42817e
xor eax, eax
inc eax
je 0x42817e
mov dword [ebp - 0x2fc], 1
jmp 0x428185
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x2fc], eax
jle 0x42819c
mov dword [ebp - 0x304], 1
jmp 0x4281a3
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0xfffffffa
jge 0x4281c4
mov dword [ebp - 0x138], 1
jmp 0x4281cb
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 4
jle 0x4281e0
mov dword [ebp - 0x140], 1
jmp 0x4281e7
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x140]
jle 0x4281fe
mov dword [ebp - 0x464], 1
jmp 0x428205
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x400]
mov dword [ebp - 0x5ac], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp + ecx*4 - 0x400]
cmp dword [ebp + eax - 0x400], ecx
jle 0x42823a
mov dword [ebp - 0x148], 1
jmp 0x428241
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x400]
cmp dword [ebp - 0x148], eax
jne 0x42825f
mov dword [ebp - 0x150], 1
jmp 0x428266
and dword [ebp - 0x150], 0
imul eax, dword [ebp - 0x150], 0xff06
cmp eax, 0x7f039d3c
je 0x428283
mov dword [ebp - 0x158], 1
jmp 0x42828a
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x624b
je 0x4282a2
mov dword [ebp - 0x160], 1
jmp 0x4282a9
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
inc eax
cmp eax, dword [ebp - 0x46c]
jle 0x4282c4
mov dword [ebp - 0x168], 1
jmp 0x4282cb
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x400]
cmp eax, dword [ebp - 0x168]
je 0x4282e9
mov dword [ebp - 0x170], 1
jmp 0x4282f0
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x400]
imul eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0x400]
jge 0x428319
mov dword [ebp - 0x178], 1
jmp 0x428320
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
add eax, 7
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0x400]
jne 0x428341
mov dword [ebp - 0x180], 1
jmp 0x428348
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0
jbe 0x42835d
mov dword [ebp - 0x188], 1
jmp 0x428364
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0xfffffff9
jne 0x428379
mov dword [ebp - 0x190], 1
jmp 0x428380
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x400], ecx
jmp 0x428100
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x484], eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa0], 0
jmp 0x4283c4
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x4283e0
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x644], 0x3245f1db
jmp 0x4283b7
mov dword [ebp - 0xa8], 0
jmp 0x4283f9
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffe7
jl 0x4284b8
mov dword [ebp - 0xb0], 0xc0d37ad4
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x42843c
push 0
push 0x1411
push 0x2453
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
mov dword [ebp - 0xb0], 0
jmp 0x428455
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jg 0x4284b3
mov dword [ebp - 0xb8], 0x7909b792
mov dword [ebp - 0xb8], 0
jmp 0x428481
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jg 0x4284b1
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x4284af
push 0x42a
push 0xb2f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x428474
jmp 0x428448
jmp 0x4283ec
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x48c], eax
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x474], 8
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x110], 0x921e124d
mov dword [ebp - 0x1a8], 0
push 3
lea ecx, [ebp - 0x560]
call fcn.004011bf
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x1d8], 0xfffffffa
mov dword [ebp - 0x654], 0xcb314b81
mov dword [ebp - 0x650], 0xcb314b81
mov dword [ebp - 0x64c], 0xcb314b81
mov dword [ebp - 0x648], 0xcb314b81
mov dword [ebp - 0xc0], 0
jmp 0x428555
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x428574
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x560]
call fcn.004012ad
or dword [eax], 0xffffffff
jmp 0x428548
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x110], 0
je 0x4285a6
xor eax, eax
je 0x4285a6
mov dword [ebp - 0x1a0], 1
jmp 0x4285ad
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x27213ec7
je 0x4285da
cmp dword [ebp - 0x1b0], 0
je 0x4285da
mov dword [ebp - 0x1b8], 1
jmp 0x4285e1
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0xfffffffa
jg 0x4285f6
mov dword [ebp - 0x1c0], 1
jmp 0x4285fd
and dword [ebp - 0x1c0], 0
imul eax, dword [ebp - 0x1c0], 0xffff
inc eax
cmp eax, dword [ebp - 0x474]
jle 0x42861c
mov dword [ebp - 0x1c8], 1
jmp 0x428623
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 1
jne 0x428638
mov dword [ebp - 0x1d0], 1
jmp 0x42863f
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
neg eax
mov dword [ebp - 0x110], eax
mov esi, dword [ebp - 0x110]
push 0
lea ecx, [ebp - 0x560]
call fcn.004012ad
mov dword [eax], esi
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
lea ecx, [ebp - 0x560]
call fcn.00401291
mov dword [ebp - 0x118], 0xa2d3
mov dword [ebp - 0x47c], 0xa1a8f1ed
mov dword [ebp - 0x5bc], 0xd4782549
mov dword [ebp - 0x630], 0xbc23cea
mov dword [ebp - 0x5c4], 1
mov dword [ebp - 0x620], 0x96f37d43
mov dword [ebp - 0x5d4], 0xb0c3e5f8
mov dword [ebp - 0x1f0], 0x36511f0b
mov dword [ebp - 0x40], 0
jmp 0x4286da
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x4286f0
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x69c], 0xfffffff8
jmp 0x4286d3
mov dword [ebp - 0x40], 0
jmp 0x428700
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x428716
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x6a8], 0xfa9d
jmp 0x4286f9
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x118], eax
jne 0x428739
cmp dword [ebp - 0x118], 0
je 0x428739
mov dword [ebp - 0x1e0], 1
jmp 0x428740
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
dec eax
cmp eax, 0xfffffffd
jg 0x428758
mov dword [ebp - 0x1e8], 1
jmp 0x42875f
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
push dword [ebp - 0x484]
push 0x4a64
push dword [ebp - 0x48c]
push 0x6b0b
push 1
call fcn.00425bf5
add esp, 0x14
pop esi
mov esp, ebp
pop ebp
ret