Function at 0x522000
Capabilities:
Allocate thread local storage
Check mutex on windows
Create process on windows
Encrypt data using speck
Identify system language via api
Log keystrokes via polling

Disassembly:
push 0x36130
push 0
push 0x4e8c1c
call fcn.00401510
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x4e8c20], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4e8c1c], eax
mov eax, 0x4da6e4
mov dword [0x4e8c90], eax
call fcn.004014e6
call fcn.00417f30
call fcn.00417a5e
call fcn.00417770
call fcn.00415970
call fcn.0041560a
call fcn.004154a0
call fcn.00414bb4
call fcn.0041427c
call fcn.00413cd1
call fcn.00413621
call fcn.00413318
call fcn.00412b4a
call fcn.00412690
call fcn.004124ef
call fcn.00412120
call fcn.004117ab
call fcn.00411453
call fcn.00410848
call fcn.004101ec
call fcn.0040a887
call fcn.00405fc0
call fcn.00405e62
call fcn.00404e93
call fcn.00404c71
call fcn.004044c1
call fcn.00403d87
call fcn.004037c8
call fcn.0040188b
push 7
push 0x4da690
lea eax, [0x51ed24]
push eax
push 0x5e
call fcn.004141ea
push 7
xor eax, eax
push eax
lea eax, [0x51ed2c]
push eax
push 8
call fcn.004141ea
push 0x51eca4
push 0x4da5d8
push 8
push 6
push 4
call fcn.004131d4
mov eax, 0x200
push eax
lea eax, [0x51ed44]
push eax
push 0x4da5d8
push 8
push 4
call fcn.004126b0
mov eax, 0x200
push eax
lea eax, [0x51ed48]
push eax
push 0x4da5d8
push 8
push 4
call fcn.004126b0
mov eax, str.user32.dll
push eax
push 0
call fcn.00404cf2
and eax, eax
je 0x5221b6
mov eax, 0x4d8260
push eax
push 0
call fcn.00404c98
mov dword [0x4e8ce8], eax
mov eax, str.ShutdownBlockReasonDestroy
push eax
push 0
call fcn.00404c98
mov dword [0x4e8c60], eax
push 0
call fcn.00404c24
call fcn.0040166a
mov dword [0x4e8d24], eax
call fcn.0040166a
mov dword [0x4e8da4], eax
call fcn.0040166a
mov dword [0x4e8d7c], eax
call fcn.0040166a
mov dword [0x4e8c8c], eax
call fcn.0040166a
mov dword [0x4e8cb4], eax
call fcn.0040166a
mov dword [0x4e8d54], eax
mov eax, str.WM_ACTIVATEOLDINST_VM
push eax
call sub.USER32.dll_RegisterWindowMessageW
mov dword [0x4e8d74], eax
mov eax, str.WM_DEACTIVATEOLDINST_VM
push eax
call sub.USER32.dll_RegisterWindowMessageW
mov dword [0x4e8cec], eax
push 0x51ecac
push 0x4da5d8
push 8
push 7
push 4
call fcn.004131d4
push 7
push 0x4da6a8
lea eax, [0x51ed34]
push eax
push 0x14
call fcn.004141ea
push 7
push 0x4da608
lea eax, [0x51ed3c]
push eax
push 0x60
call fcn.004141ea
push 0x51ecb4
push 0x4da678
push 7
push 6
push 0x18
call fcn.004131d4
push 0x51ecbc
push 0
push 7
push 0x64
push 0x510
call fcn.004131d4
push 0x51ecc4
push 0
push 0xd
push 0x20
push 8
call fcn.004131d4
push 0x51eccc
push 0x4da5e0
push 7
push 8
push 0x45e
call fcn.004131d4
push 0x51ecd4
push 0x4da6dc
push 7
push 0x20
push 0x450
call fcn.004131d4
push dword [0x51ecd4]
call fcn.004131c6
inc eax
push 0x51ecdc
push 0
push 5
push eax
push 4
call fcn.004131d4
push 0x51ece4
push 0x4da5d8
push 8
push 0x65
push 4
call fcn.004131d4
push 0x51ecec
push 0
push 5
push 0x20
push 4
call fcn.004131d4
push 0x51ecf4
push 0
push 7
push 4
push 0x20
call fcn.004131d4
push 0x51ecfc
push 0
push 7
push 0x91
push 0x20
call fcn.004131d4
jmp 0x5223a8
mov ebp, dword [0x51ecec]
mov dword [ebp], 0
mov dword [ebp + 4], 0x800000
mov dword [ebp + 8], 0x8000
mov dword [ebp + 0xc], 0x808000
mov dword [ebp + 0x10], 0x80
mov dword [ebp + 0x14], 0xee82ee
mov dword [ebp + 0x18], 0x8080
mov dword [ebp + 0x1c], 0xc0c0c0
mov dword [ebp + 0x20], 0x808080
mov dword [ebp + 0x24], 0xff0000
mov dword [ebp + 0x28], 0x80ff80
mov dword [ebp + 0x2c], 0xffff00
mov dword [ebp + 0x30], 0xff
mov dword [ebp + 0x34], 0xffc0c0
mov dword [ebp + 0x38], 0xffff
mov dword [ebp + 0x3c], 0xffffff
mov dword [ebp + 0x40], 0xff00ff
mov dword [ebp + 0x44], 0x96bacd
mov dword [ebp + 0x48], 0x5757ff
mov dword [ebp + 0x4c], 0x64b2ff
mov dword [ebp + 0x50], 0xddbbc7
mov dword [ebp + 0x54], 0xaee4e4
mov dword [ebp + 0x58], 0xc0e0ff
mov dword [ebp + 0x5c], 0xc0ffc0
mov dword [ebp + 0x60], 0xffcbff
mov dword [ebp + 0x64], 0xffcc99
mov dword [ebp + 0x68], 0xa08040
mov dword [ebp + 0x6c], 0xdc8080
mov dword [ebp + 0x70], 0xc080ff
mov dword [ebp + 0x74], 0x80ff
mov dword [ebp + 0x78], 0x60a8c0
mov dword [ebp + 0x7c], 0x408040
push 0x51ed04
push 0
push 9
push 4
push 4
call fcn.004131d4
mov ebp, dword [0x51ed04]
mov dword [ebp + 4], 0
mov dword [ebp + 8], 0
mov dword [ebp + 0xc], 0
push 0x51ed0c
push 0
push 5
push 0x371
push 4
call fcn.004131d4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 4
mov dword [ebp + 0x30], 0xa
mov dword [ebp + 0x34], 0xc
mov dword [ebp + 0x38], 0
mov dword [ebp + 0x3c], 0xa
mov dword [ebp + 0x58], 0
mov dword [ebp + 0x5c], 0
mov dword [ebp + 0x60], 0
mov dword [ebp + 0x64], 0
mov dword [ebp + 0x68], 0xffffffff
mov dword [ebp + 0x6c], 0
mov dword [ebp + 0x70], 0
mov dword [ebp + 0x74], 0
mov dword [ebp + 0x78], 0
mov dword [ebp + 0x7c], 0
mov dword [ebp + 0x80], 0
mov dword [ebp + 0x84], 0
mov dword [ebp + 0x88], 0
mov dword [ebp + 0x8c], 0
mov dword [ebp + 0x90], 0
mov dword [ebp + 0x94], 0
mov dword [ebp + 0x98], 0
mov dword [ebp + 0x9c], 0
mov dword [ebp + 0xa0], 0
mov dword [ebp + 0xa4], 0x64
mov dword [ebp + 0xa8], 0
mov dword [ebp + 0xac], 0
mov dword [ebp + 0xb0], 0
mov dword [ebp + 0xb4], 1
mov dword [ebp + 0xb8], 0
mov dword [ebp + 0xbc], 0
mov dword [ebp + 0xc0], 0
mov dword [ebp + 0xc4], 0
mov dword [ebp + 0xc8], 8
mov dword [ebp + 0xcc], 0x50
mov dword [ebp + 0xd0], 0
mov dword [ebp + 0xd4], 0
mov dword [ebp + 0xd8], 0
mov dword [ebp + 0xdc], 0x1f3
mov dword [ebp + 0xe0], 0
mov dword [ebp + 0xe4], 0xffffffff
mov dword [ebp + 0xe8], 0
mov dword [ebp + 0xec], 0x258
mov dword [ebp + 0xf0], 0xa
mov dword [ebp + 0xf4], 0
mov dword [ebp + 0xf8], 3
mov dword [ebp + 0xfc], 0
mov dword [ebp + 0x100], 0
mov dword [ebp + 0x104], 1
mov dword [ebp + 0x108], 1
mov dword [ebp + 0x10c], 1
mov dword [ebp + 0x110], 0
mov dword [ebp + 0x114], 0
mov dword [ebp + 0x118], 1
mov dword [ebp + 0x11c], 1
mov dword [ebp + 0x120], 1
mov dword [ebp + 0x124], 1
mov dword [ebp + 0x128], 0
mov dword [ebp + 0x12c], 0
mov dword [ebp + 0x130], 0
mov dword [ebp + 0x134], 0
mov dword [ebp + 0x138], 0
mov dword [ebp + 0x13c], 0
mov dword [ebp + 0x140], 0
mov dword [ebp + 0x144], 0
mov dword [ebp + 0x148], 0
mov dword [ebp + 0x14c], 0
mov dword [ebp + 0x150], 1
mov dword [ebp + 0x154], 1
mov dword [ebp + 0x158], 0
mov dword [ebp + 0x15c], 0
mov dword [ebp + 0x160], 0
mov dword [ebp + 0x164], 0
mov dword [ebp + 0x168], 0
mov dword [ebp + 0x16c], 0
mov dword [ebp + 0x170], 0
mov dword [ebp + 0x174], 0
mov dword [ebp + 0x178], 0
mov dword [ebp + 0x17c], 0
mov dword [ebp + 0x180], 0
mov dword [ebp + 0x184], 0
mov dword [ebp + 0x188], 0
mov dword [ebp + 0x18c], 0
mov dword [ebp + 0x190], 0
mov dword [ebp + 0x198], 0
mov dword [ebp + 0x19c], 0
mov dword [ebp + 0x1a0], 0
mov dword [ebp + 0x1a4], 0
mov dword [ebp + 0x1a8], 0
mov dword [ebp + 0x1ac], 0
mov dword [ebp + 0x1b0], 0
mov dword [ebp + 0x1b4], 0
mov dword [ebp + 0x1b8], 0
mov dword [ebp + 0x1bc], 0
mov dword [ebp + 0x1c0], 0
mov dword [ebp + 0x1e4], 0
mov dword [ebp + 0x1e8], 0
mov dword [ebp + 0x1ec], 0
mov dword [ebp + 0x1f0], 0x80
mov dword [ebp + 0x1f4], 0
mov dword [ebp + 0x20c], 0
mov dword [ebp + 0x210], 0
mov dword [ebp + 0x214], 0
mov dword [ebp + 0x218], 0x80
mov dword [ebp + 0x234], 0
mov dword [ebp + 0x238], 0xffffffff
mov dword [ebp + 0x23c], 0
mov dword [ebp + 0x240], 0
mov dword [ebp + 0x244], 0
mov dword [ebp + 0x248], 0
mov dword [ebp + 0x24c], 0
mov dword [ebp + 0x250], 0
mov dword [ebp + 0x254], 0
mov dword [ebp + 0x258], 0
mov dword [ebp + 0x25c], 0
mov dword [ebp + 0x260], 0
mov dword [ebp + 0x264], 0
mov dword [ebp + 0x268], 0
mov dword [ebp + 0x26c], 0
mov dword [ebp + 0x270], 0
mov dword [ebp + 0x274], 0
mov dword [ebp + 0x278], 0
mov dword [ebp + 0x27c], 0
mov dword [ebp + 0x280], 0
mov dword [ebp + 0x284], 0
mov dword [ebp + 0x288], 0
mov dword [ebp + 0x28c], 0
mov dword [ebp + 0x290], 0
mov dword [ebp + 0x294], 0xfffffffe
mov dword [ebp + 0x298], 0
mov dword [ebp + 0x29c], 0
mov dword [ebp + 0x2a0], 0
mov dword [ebp + 0x2a4], 0
mov dword [ebp + 0x2a8], 0
mov dword [ebp + 0x2f4], 0xffffffff
mov dword [ebp + 0x2f8], 0x320
mov eax, dword [ebp + 0x2f8]
mov dword [ebp + 0x2fc], eax
mov eax, dword [ebp + 0x2f8]
mov dword [ebp + 0x300], eax
mov dword [ebp + 0x304], 0xa
mov dword [ebp + 0x30c], 0
mov dword [ebp + 0x310], 0
mov dword [ebp + 0x314], 0
mov dword [ebp + 0x318], 0
mov dword [ebp + 0x31c], 0
mov dword [ebp + 0x320], 1
push 0
call fcn.00410281
push eax
pop dword [ebp + 0x328]
mov ebx, dword [ebp + 0x328]
cmp ebx, 0x90
jle 0x522aa2
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x328], 0x90
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x32c], 1
mov dword [ebp + 0x330], 1
mov dword [ebp + 0x334], 2
mov dword [ebp + 0x338], 0x70
mov dword [ebp + 0x33c], 0x36e
mov dword [ebp + 0x340], 0x1a4
mov dword [ebp + 0x344], 0
mov dword [ebp + 0x348], 0
mov dword [ebp + 0x34c], 0xffffffff
mov dword [ebp + 0x350], 0xffffffff
mov dword [ebp + 0x354], 0
mov dword [ebp + 0x358], 0x190
mov dword [ebp + 0x35c], 0
mov dword [ebp + 0x360], 0
mov dword [ebp + 0x364], 0
mov dword [ebp + 0x368], 0
mov dword [ebp + 0x36c], 0
mov dword [ebp + 0x370], 0
mov dword [ebp + 0x374], 0
mov dword [ebp + 0x398], 0
mov dword [ebp + 0x39c], 0
mov dword [ebp + 0x3a0], 0
mov dword [ebp + 0x3a8], 0
mov dword [ebp + 0x3c0], 0
mov dword [ebp + 0x3c4], 0
mov dword [ebp + 0x3c8], 0
mov dword [ebp + 0x3d0], 0
mov dword [ebp + 0x41c], 0
mov dword [ebp + 0x420], 0
mov dword [ebp + 0x424], 0
mov dword [ebp + 0x428], 0
mov dword [ebp + 0x42c], 0
mov dword [ebp + 0x430], 0
mov dword [ebp + 0x434], 0
mov dword [ebp + 0x438], 0xc80
mov dword [ebp + 0x43c], 0x400
mov dword [ebp + 0x440], 0x3c
mov dword [ebp + 0x444], 0
mov dword [ebp + 0x448], 0
mov dword [ebp + 0x44c], 0
mov dword [ebp + 0x450], 0x1388
mov dword [ebp + 0x458], 0
mov dword [ebp + 0x45c], 0xa
mov dword [ebp + 0x460], 0x19
mov dword [ebp + 0x464], 0
mov dword [ebp + 0x468], 0
mov dword [ebp + 0x46c], 0
mov dword [ebp + 0x470], 0
mov dword [ebp + 0x474], 0
mov dword [ebp + 0x478], 0
mov dword [ebp + 0x47c], 0xf0f0f0
mov dword [ebp + 0x480], 0x64
mov dword [ebp + 0x484], 1
mov dword [ebp + 0x488], 0
mov dword [ebp + 0x48c], 0
mov dword [ebp + 0x490], 0
mov dword [ebp + 0x494], 7
mov dword [ebp + 0x498], 0
mov dword [ebp + 0x49c], 0
mov dword [ebp + 0x4a0], 0
mov dword [ebp + 0x4a4], 0
mov dword [ebp + 0x4a8], 0xffffffff
mov dword [ebp + 0x4ac], 0xffffffff
mov dword [ebp + 0x4b0], 0
mov dword [ebp + 0x4b4], 0x3c14dc
mov dword [ebp + 0x4b8], 0xcc3399
mov dword [ebp + 0x4bc], 0xcc6600
mov dword [ebp + 0x4c0], 0x9966
mov dword [ebp + 0x4c4], 0x80ff
mov dword [ebp + 0x4c8], 0x6699
mov dword [ebp + 0x4cc], 0x808040
mov dword [ebp + 0x4d0], 0x408000
mov ebp, dword [0x51ecec]
push dword [ebp + 0x68]
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc80]
mov ebp, dword [0x51ecec]
push dword [ebp + 0x6c]
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc84]
mov ebp, dword [0x51ecec]
push dword [ebp + 0x70]
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc88]
mov ebp, dword [0x51ecec]
push dword [ebp + 0x74]
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc8c]
mov ebp, dword [0x51ecec]
push dword [ebp + 0x78]
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc90]
mov ebp, dword [0x51ecec]
push dword [ebp + 0x7c]
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc94]
push 0x51ed14
push 0
push 0xd
push 0x97
push 8
call fcn.004131d4
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x58]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x60]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x68]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x70]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x78]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x80]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x88]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x90]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x98]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0xf0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0xf8]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x100]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x108]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x110]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x118]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x140]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x148]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x150]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x158]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x190]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x198]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x1a0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x1e0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x1e8]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x1f0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x1f8]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x200]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x238]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x240]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x248]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x250]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x280]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x2d0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x2d8]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x328]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x330]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x338]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x340]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x348]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x350]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x358]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x378]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x380]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x388]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x390]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x398]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x3a0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x3b8]
mov dword [eax + 4], 0
mov dword [eax], 0
call fcn.00412bca
push edx
push eax
call fcn.00412eb9
cdq
push edx
push eax
lea eax, [ebp + 0x3c0]
pop dword [eax]
pop dword [eax + 4]
call fcn.00412bca
push edx
push eax
call fcn.00412edf
cdq
push edx
push eax
lea eax, [ebp + 0x3c8]
pop dword [eax]
pop dword [eax + 4]
lea eax, [ebp + 0x3d0]
mov dword [eax + 4], 0xffffffff
mov dword [eax], 0xffffffff
call fcn.00412bca
push edx
push eax
call fcn.00412eb9
cdq
push edx
push eax
lea eax, [ebp + 0x3d8]
pop dword [eax]
pop dword [eax + 4]
lea eax, [ebp + 0x3e0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x3e8]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x3f0]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x3f8]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x400]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x408]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x410]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x418]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x420]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x428]
mov dword [eax + 4], 0xffffffff
mov dword [eax], 0xffffffff
lea eax, [ebp + 0x430]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x438]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x440]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x448]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x450]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x458]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x460]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x468]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x470]
mov dword [eax + 4], 0
mov dword [eax], 0
lea eax, [ebp + 0x478]
mov dword [eax + 4], 0
mov dword [eax], 0
mov ebp, dword [0x51ecb4]
mov dword [ebp], 1
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.00403db6
call fcn.004011f2
add dword [esp], edx
call fcn.00411e45
mov ebp, dword [0x51ecb4]
lea eax, [ebp + 8]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.00403db6
call fcn.004011f2
add dword [esp], edx
call fcn.00411e57
mov ebp, dword [0x51ecb4]
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
mov edx, 0x4d5e80
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.00412bca
push edx
push eax
mov eax, str._yyyy_mm
push eax
call fcn.00412e9c
pop eax
mov edx, str..log
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 8]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 4
call fcn.00411ee5
mov edx, str.Ventural_
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0x10]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x18
mov edx, str.Venmon.ini
lea ecx, [ebp + 8]
call fcn.004011b8
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x18
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x48
mov edx, str.VM_Ping.json
lea ecx, [ebp + 8]
call fcn.004011b8
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x48
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x60
mov edx, str.VM_Saga.json
lea ecx, [ebp + 8]
call fcn.004011b8
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x60
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
push 0x51ed1c
push 0x4da5d8
push 8
push 0x76
push 4
call fcn.004131d4
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x28]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x2c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x30]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x34]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x38]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x3c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x40]
call fcn.004011b8
mov edx, 0x4d7b66
lea ecx, [ebp + 0x44]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x48]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x4c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x50]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x54]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x58]
call fcn.004011b8
mov edx, str..PhysicalDrive0
lea ecx, [ebp + 0x5c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x64]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x68]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x6c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x78]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x7c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x80]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x84]
call fcn.004011b8
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 4
call fcn.00411ee5
lea eax, [ebp + 0x88]
push eax
call fcn.00417d00
mov edx, 0x4d302e
lea ecx, [ebp + 0x8c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x90]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x94]
call fcn.004011b8
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x98]
push eax
call fcn.00417d00
mov edx, 0x4d302e
lea ecx, [ebp + 0x9c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xa0]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xa4]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xa8]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xac]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xb0]
call fcn.004011b8
mov edx, 0x4d3028
lea ecx, [ebp + 0xb4]
call fcn.004011b8
mov edx, 0x4d9240
lea ecx, [ebp + 0xb8]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xbc]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xc0]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xc4]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xc8]
call fcn.004011b8
mov edx, str.CurrentClockSpeed
lea ecx, [ebp + 0xcc]
call fcn.004011b8
mov edx, 0x4d91e8
lea ecx, [ebp + 0xd0]
call fcn.004011b8
mov edx, str.L2CacheSize
lea ecx, [ebp + 0xd4]
call fcn.004011b8
mov edx, 0x4d6528
lea ecx, [ebp + 0xd8]
call fcn.004011b8
mov edx, str.Manufacturer
lea ecx, [ebp + 0xdc]
call fcn.004011b8
mov edx, str.MaxClockSpeed
lea ecx, [ebp + 0xe0]
call fcn.004011b8
mov edx, 0x4d5350
lea ecx, [ebp + 0xe4]
call fcn.004011b8
mov edx, str.NumberOfCores
lea ecx, [ebp + 0xe8]
call fcn.004011b8
mov edx, str.NumberOfEnabledCore
lea ecx, [ebp + 0xec]
call fcn.004011b8
mov edx, str.NumberOfLogicalProcessors
lea ecx, [ebp + 0xf0]
call fcn.004011b8
mov edx, str.ProcessorId
lea ecx, [ebp + 0xf4]
call fcn.004011b8
mov edx, str.Speed_in_HZ
lea ecx, [ebp + 0xf8]
call fcn.004011b8
mov edx, str.__Avg
lea ecx, [ebp + 0xfc]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x110]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x114]
call fcn.004011b8
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.004101fb
call fcn.004011f2
add dword [esp], edx
call fcn.00417440
lea eax, [ebp + 0x118]
push eax
call fcn.00417d00
mov edx, 0x4d302e
lea ecx, [ebp + 0x11c]
call fcn.004011b8
mov edx, str.Battery_Status
lea ecx, [ebp + 0x120]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x124]
call fcn.004011b8
mov edx, str.1_2_3_5_10_15_20_25_30_45_60_120_180_240_300_0
lea ecx, [ebp + 0x128]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x12c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x130]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x134]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x138]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x13c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x140]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x144]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x148]
call fcn.004011b8
mov edx, str.1_2_3_4_5_10_15_20_30_60_120_180_240_300_600_900
lea ecx, [ebp + 0x14c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x150]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x154]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x158]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x15c]
call fcn.004011b8
mov edx, str.Phys_Page_CPU_Batt_Uptime_Idle_R_W_Ping_________X_
lea ecx, [ebp + 0x160]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x164]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x168]
call fcn.004011b8
mov edx, str.Unknown_Quadro_Tesla_NVS_GRID_GeForce_Titan
lea ecx, [ebp + 0x16c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x170]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x174]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x178]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x17c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x180]
call fcn.004011b8
mov edx, str.1_2_3_7_10_14_20_30_45_60_90_120_180_365
lea ecx, [ebp + 0x184]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x188]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x18c]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x190]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x194]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0x1d4]
call fcn.004011b8
mov ebp, 0x4da704
push ebp
push 0x6d
call fcn.00413a47
mov ebp, 0x4dab82
push ebp
push 0x79
call fcn.00413a47
push 0
push 0x20
push 0x10
push 0x10
push 0x6e
call fcn.00413a5e
and eax, eax
je 0x523b8b
push 0x6e
call fcn.00413da2
push eax
call fcn.00413801
and eax, eax
je 0x523b8b
mov eax, 1
jmp 0x523b8d
xor eax, eax
and eax, eax
je 0x523bd2
push 0xffffff
push 0x10
push 0x10
push 0
push 0
call fcn.00413470
push 0
push 0xe
push 0xe
push 1
push 1
call fcn.00413470
call fcn.00413866
push 0
push 0x20
push 0x10
push 0x10
push 0x6f
call fcn.00413a5e
and eax, eax
je 0x523c0f
push 0x6f
call fcn.00413da2
push eax
call fcn.00413801
and eax, eax
je 0x523c0f
mov eax, 1
jmp 0x523c11
xor eax, eax
and eax, eax
je 0x523c92
push 0xffffff
push 0x10
push 0x10
push 0
push 0
call fcn.00413470
push 0
push 0xe
push 0xe
push 1
push 1
call fcn.00413470
push 0x808000
push 0xe
push 7
push 1
push 8
call fcn.00413470
push 0xffff00
push 0xc
push 5
push 2
push 9
call fcn.00413470
call fcn.00413866
push 0
push 0x20
push 0x10
push 0x10
push 0x70
call fcn.00413a5e
and eax, eax
je 0x523ccf
push 0x70
call fcn.00413da2
push eax
call fcn.00413801
and eax, eax
je 0x523ccf
mov eax, 1
jmp 0x523cd1
xor eax, eax
and eax, eax
je 0x523d52
push 0xffffff
push 0x10
push 0x10
push 0
push 0
call fcn.00413470
push 0
push 0xe
push 0xe
push 1
push 1
call fcn.00413470
push 0x80
push 0xe
push 7
push 1
push 1
call fcn.00413470
push 0xff
push 0xc
push 5
push 2
push 2
call fcn.00413470
call fcn.00413866
push 0
push 0x20
push 0x10
push 0x10
push 0x71
call fcn.00413a5e
and eax, eax
je 0x523d8f
push 0x71
call fcn.00413da2
push eax
call fcn.00413801
and eax, eax
je 0x523d8f
mov eax, 1
jmp 0x523d91
xor eax, eax
and eax, eax
je 0x523e34
push 0xffffff
push 0x10
push 0x10
push 0
push 0
call fcn.00413470
push 0x80
push 0xe
push 7
push 1
push 1
call fcn.00413470
push 0xff
push 0xc
push 5
push 2
push 2
call fcn.00413470
push 0x808000
push 0xe
push 7
push 1
push 8
call fcn.00413470
push 0xffff00
push 0xc
push 5
push 2
push 9
call fcn.00413470
call fcn.00413866
call fcn.00403d46
and eax, eax
je 0x523ff8
mov dword [0x4e8cc4], 1
jmp 0x523e4d
call fcn.00403d46
cmp eax, dword [0x4e8cc4]
jl 0x523ec0
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 0x64]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.00403cee
call fcn.004011f2
add dword [esp], edx
call fcn.00415de0
pop eax
mov edx, 0x4d3342
push edx
call fcn.00417eb0
lea eax, [ebp + 0x64]
push eax
call fcn.00417d00
inc dword [0x4e8cc4]
jno 0x523e4d
mov eax, str.shutdown
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x64]
call fcn.004159e0
and eax, eax
je 0x523f01
push 0
push 0
push dword [0x4e8cec]
push 0xffff
call sub.USER32.dll_PostMessageW
push 0x1f4
call fcn.004102d0
jmp 0x52b45d
mov eax, str.restart
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x64]
call fcn.004159e0
and eax, eax
je 0x523ff8
push 0
push 0
push dword [0x4e8cec]
push 0xffff
call sub.USER32.dll_PostMessageW
mov eax, str.VenMon
push eax
push 1
push 0
call sub.KERNEL32.dll_CreateMutexW
cdq
push edx
push eax
pop dword [0x4e8c3c]
pop dword [0x4e8c40]
push 0x3a98
mov eax, dword [0x4e8c3c]
push eax
call sub.KERNEL32.dll_WaitForSingleObject
cdq
push edx
push eax
pop dword [0x4e8c4c]
pop dword [0x4e8c50]
push dword [0x4e8c50]
push dword [0x4e8c4c]
pop ebx
pop edi
cmp ebx, 0
jne 0x523f92
cmp edi, 0
je 0x523f96
xor eax, eax
jmp 0x523f9b
mov eax, 1
or eax, eax
jne 0x523fc9
push dword [0x4e8c50]
push dword [0x4e8c4c]
pop ebx
pop edi
cmp ebx, 0x80
jne 0x523fba
cmp edi, 0
je 0x523fbe
xor eax, eax
jmp 0x523fc3
mov eax, 1
or eax, eax
jne 0x523fc9
jmp 0x523fd0
mov eax, 1
jmp 0x523fd2
xor eax, eax
and eax, eax
je 0x523ff8
mov eax, dword [0x4e8c3c]
push eax
call sub.KERNEL32.dll_ReleaseMutex
mov eax, dword [0x4e8c3c]
push eax
call sub.KERNEL32.dll_CloseHandle
push 0x3e8
call fcn.004102d0
jmp 0x523ff8
mov eax, str.VenMon
push eax
push 1
push 0
call sub.KERNEL32.dll_CreateMutexW
cdq
push edx
push eax
pop dword [0x4e8c3c]
pop dword [0x4e8c40]
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
cmp ebx, 0xb7
jne 0x524181
push 1
mov eax, 0x4d7544
push eax
push 0x46
push 0x12c
push 0
push 0
push 0x64
call fcn.00410d57
push 0x64
call fcn.00411299
push eax
call fcn.0040fffa
push 0xa
mov eax, str.Arial
push eax
push 0xd0
call fcn.00417b5c
push 0xd0
call fcn.004179f5
push eax
push 0xffffffff
call fcn.0040f5c6
call sub.KERNEL32.dll_GetUserDefaultLangID
mov ebx, eax
and ebx, 0x3ff
push ebx
mov ebx, 7
cmp ebx, dword [esp]
jne 0x5240d5
push 1
mov eax, str.Programm_l
push eax
push 0x32
push 0x122
push 0xf
push 0
push 0
call fcn.0040faaa
jmp 0x5240fe
push 1
mov eax, str.Program_is_already_running._r_nOpening_current_program.
push eax
push 0x32
push 0x122
push 0xf
push 0
push 0
call fcn.0040faaa
pop eax
push 0x1388
push 0
push 0x64
call fcn.00410769
push 0
push 0
push dword [0x4e8d74]
push 0xffff
call sub.USER32.dll_PostMessageW
push 0x32
call fcn.004102d0
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x14c], 0
je 0x524155
push 0x37
push 0x3e8
call sub.KERNEL32.dll_Beep
push 0xfa
call fcn.004110ea
mov dword [0x4e8d48], eax
mov ebx, dword [0x4e8d48]
cmp ebx, 0x3336
jne 0x524155
push 0x64
call fcn.004107ab
jmp 0x52b45d
mov eax, str.powrprof.dll
push eax
push 0x6b
call fcn.00404cf2
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x378]
pop dword [eax]
pop dword [eax + 4]
mov eax, 0x4d7aa4
push eax
push 0x6c
call fcn.00404cf2
cdq
push edx
push eax
lea eax, [ebp + 0x380]
pop dword [eax]
pop dword [eax + 4]
mov eax, str.iphlpapi.dll
push eax
push 0x77
call fcn.00404cf2
cdq
push edx
push eax
lea eax, [ebp + 0x388]
pop dword [eax]
pop dword [eax + 4]
call fcn.0053b51c
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x390]
pop dword [eax]
pop dword [eax + 4]
mov eax, 0x4d52f8
push eax
push pe_nt_image_headers32
call fcn.00404cf2
cdq
push edx
push eax
lea eax, [ebp + 0x398]
pop dword [eax]
pop dword [eax + 4]
push 0x7a
call fcn.00537e4a
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x3a0]
pop dword [eax]
pop dword [eax + 4]
mov eax, str.PdhLookupPerfNameByIndexW
push eax
push pe_nt_image_headers32
call fcn.00404c98
mov dword [0x4e8d98], eax
call fcn.0055d8bf
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x34]
imul ebx, ebx, 7
mov dword [ebp + 0x174], ebx
mov dword [ebp + 0x178], 0xea
push 4
call sub.USER32.dll_GetSystemMetrics
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x27c]
push 0x10
push 8
mov eax, str.Microsoft_Sans_Serif
push eax
push 0xcf
call fcn.00417aab
push 0x110
push 0xa
mov eax, str.Arial
push eax
push 0xd0
call fcn.00417aab
push 0x10
push 9
mov eax, 0x4d83e4
push eax
push 0xd1
call fcn.00417aab
push 0x10
push 0xa
mov eax, str.Tahoma
push eax
push 0xd4
call fcn.00417aab
push 0x210
push 0xc
mov eax, str.Tahoma
push eax
push 0xd5
call fcn.00417aab
push 0xcf
call fcn.004179f5
push eax
push 0xffffffff
call fcn.0040f5c6
push 0
mov eax, str.Venmon_v2.35_x86_553.12528__C_2004_2024
push eax
push dword [ebp + 0x174]
push dword [ebp + 0x178]
mov ebx, dword [ebp + 0x16c]
sub ebx, dword [ebp + 0x178]
add ebx, 0xffffffce
push ebx
mov ebx, dword [ebp + 0x170]
sub ebx, dword [ebp + 0x178]
add ebx, 0xfffffff9
push ebx
push 0x64
call fcn.00410d57
push 0
push 0x64
call fcn.00410f7d
mov eax, 0x4d302e
push eax
push dword [ebp + 0x174]
push dword [ebp + 0x178]
push 1
push 1
push 0
call fcn.0040fa8a
push 0
push 2
push 0
call fcn.0040f57e
push 0xc0c0c0
push 1
push 0
call fcn.0040f57e
push 0xd1
call fcn.004179f5
push eax
push 0
call fcn.0040f5c6
call sub.KERNEL32.dll_GetUserDefaultLangID
mov ebx, eax
and ebx, 0x3ff
push ebx
mov ebx, 9
cmp ebx, dword [esp]
jne 0x52440a
mov eax, str.1_Language:_English
push eax
push 0
call fcn.0040f6d4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x320], 1
jmp 0x5244ae
mov ebx, 7
cmp ebx, dword [esp]
jne 0x524436
mov eax, str.1_Sprache:_deutsche
push eax
push 0
call fcn.0040f6d4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x320], 2
jmp 0x5244ae
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x524462
mov eax, str.1_La_langue:_fran
push eax
push 0
call fcn.0040f6d4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x320], 3
jmp 0x5244ae
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x52448e
mov eax, str.1_Idioma:_Espa
push eax
push 0
call fcn.0040f6d4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x320], 4
jmp 0x5244ae
mov eax, str.1_Unknown_Language
push eax
push 0
call fcn.0040f6d4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x320], 0
pop eax
mov eax, 0x4df2d0
mov dword [0x4e8c90], eax
mov ebp, dword [0x51ed0c]
mov eax, dword [0x4e8c90]
mov eax, dword [eax]
mov dword [ebp + 8], eax
add dword [0x4e8c90], 4
mov ebp, dword [0x51ed1c]
lea ecx, [ebp + 4]
mov edx, dword [0x4e8c90]
call fcn.004011b8
add dword [0x4e8c90], eax
push dword [ebp + 4]
mov edx, 0x4d879e
pop ecx
call fcn.00401230
je 0x5244ff
jmp 0x524968
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 1
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.00416080
call fcn.00417fd0
mov edx, 0x4d3730
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x524577
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 1
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.00416080
call fcn.00417fd0
mov edx, 0x4d3756
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x524577
jmp 0x52457e
mov eax, 1
jmp 0x524580
xor eax, eax
and eax, eax
je 0x5245e3
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
mov ebx, eax
dec ebx
push ebx
push dword [ebp + 4]
call fcn.00416a80
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
push dword [ebp + 0xc]
push dword [0x51ed48]
call fcn.00412660
mov ebp, eax
push dword [ebp]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x5245e1
push 0x2710
call fcn.004102d0
jmp 0x524613
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x524613
push 0x2710
call fcn.004102d0
mov dword [0x4e8cc4], 2
jmp 0x52461f
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 8]
cmp eax, dword [0x4e8cc4]
jl 0x524679
mov ebx, dword [ebp + 0x320]
cmp ebx, dword [ebp + 8]
jne 0x524657
mov ebp, dword [0x51ed1c]
lea ecx, [ebp + 8]
mov edx, dword [0x4e8c90]
call fcn.004011b8
add dword [0x4e8c90], eax
jmp 0x524671
mov ebp, dword [0x51ed1c]
lea ecx, [ebp + 0xc]
mov edx, dword [0x4e8c90]
call fcn.004011b8
add dword [0x4e8c90], eax
inc dword [0x4e8cc4]
jno 0x52461f
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 1
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.00416080
call fcn.00417fd0
mov edx, 0x4d3730
call fcn.00401210
mov ecx, eax
call fcn.00401230
je 0x5247a2
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
mov ebx, eax
dec ebx
push ebx
push dword [ebp + 4]
call fcn.00416a80
lea eax, [ebp + 4]
push eax
call fcn.00417d00
push dword [ebp + 8]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x52470e
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x320]
cmp ebx, 1
je 0x52470e
jmp 0x524715
mov eax, 1
jmp 0x524717
xor eax, eax
and eax, eax
je 0x52475d
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
push eax
push dword [ebp + 4]
call fcn.00415f50
push dword [ebp + 4]
push dword [0x51ed48]
call fcn.00412660
mov ebp, eax
lea eax, [ebp]
push eax
call fcn.00417d00
jmp 0x52479d
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
push eax
push dword [ebp + 8]
call fcn.00415f50
push dword [ebp + 4]
push dword [0x51ed48]
call fcn.00412660
mov ebp, eax
lea eax, [ebp]
push eax
call fcn.00417d00
jmp 0x524963
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 1
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.00416080
call fcn.00417fd0
mov edx, 0x4d3756
call fcn.00401210
mov ecx, eax
call fcn.00401230
je 0x5248cb
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
mov ebx, eax
dec ebx
push ebx
push dword [ebp + 4]
call fcn.00416a80
lea eax, [ebp + 4]
push eax
call fcn.00417d00
push dword [ebp + 8]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x524837
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x320]
cmp ebx, 1
je 0x524837
jmp 0x52483e
mov eax, 1
jmp 0x524840
xor eax, eax
and eax, eax
je 0x524886
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
push eax
push dword [ebp + 4]
call fcn.00416370
push dword [ebp + 4]
push dword [0x51ed48]
call fcn.00412660
mov ebp, eax
lea eax, [ebp]
push eax
call fcn.00417d00
jmp 0x5248c6
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 4]
call fcn.004160f0
push eax
push dword [ebp + 8]
call fcn.00416370
push dword [ebp + 4]
push dword [0x51ed48]
call fcn.00412660
mov ebp, eax
lea eax, [ebp]
push eax
call fcn.00417d00
jmp 0x524963
mov ebp, dword [0x51ed1c]
push dword [ebp + 8]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x5248f4
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x320]
cmp ebx, 1
je 0x5248f4
jmp 0x5248fb
mov eax, 1
jmp 0x5248fd
xor eax, eax
and eax, eax
je 0x524933
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 4]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
push dword [ebp + 4]
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
lea eax, [ebp]
push eax
call fcn.00417d00
jmp 0x524963
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 8]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
push dword [ebp + 4]
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
lea eax, [ebp]
push eax
call fcn.00417d00
jmp 0x5244d0
mov eax, 0x4d3362
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x18
lea eax, [ebp + 0x14]
push eax
call fcn.00417d00
mov eax, 0x4d6734
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x48
lea eax, [ebp + 0x14]
push eax
call fcn.00417d00
mov eax, 0x4d5b9c
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x60
lea eax, [ebp + 0x14]
push eax
call fcn.00417d00
mov eax, 0x4d92ae
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0x14]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov dword [ebp + 8], 0
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 4]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 8]
call fcn.004011b8
mov edx, 0x4d302e
lea ecx, [ebp + 0xc]
call fcn.004011b8
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0054f64a
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0xc8]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0
call fcn.0040ae5c
mov edx, str._r_n2_OS:
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0x1b
mov edx, dword [ebp + 0xc8]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, 0x4d3342
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x280]
cdq
push edx
push eax
call fcn.00416b50
pop eax
call fcn.004011f2
add dword [esp], edx
call fcn.00416080
pop eax
call fcn.00417fd0
push 0
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0
call fcn.0040ae5c
mov edx, str._r_n3_
push edx
call fcn.00417eb0
mov eax, 0x4d68d4
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
call fcn.00566ceb
mov dword [0x4e8cc4], 0
jmp 0x524bc1
push dword [0x51ecfc]
call fcn.004131c6
cmp eax, dword [0x4e8cc4]
jl 0x524c03
mov ebx, dword [0x4e8cc4]
mov ebp, dword [0x51ed0c]
add ebx, dword [ebp + 0x358]
push ebx
mov ebx, dword [0x4e8cc4]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
pop dword [ebp]
inc dword [0x4e8cc4]
jno 0x524bc1
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0055c774
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x2c]
push eax
call fcn.00417d00
mov edx, dword [ebp + 0x2c]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
lea eax, [ebp + 0x28]
push eax
call fcn.00417d00
mov edx, dword [ebp + 0x2c]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
lea eax, [ebp + 0x30]
push eax
call fcn.00417d00
push dword [ebp + 0x2c]
call fcn.004160f0
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x80]
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ecb4]
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x18
mov edx, dword [ebp + 8]
push edx
call fcn.00417eb0
call fcn.004011f2
add dword [esp], edx
call fcn.00544a5c
call fcn.00401220
mov ebx, eax
cmp ebx, 1
jne 0x524cd1
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x100], 1
mov dword [ebp + 0xfc], 1
jmp 0x524e3e
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x88]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x524e05
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 0x88]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, dword [ebp + 0xb8]
push edx
call fcn.00417eb0
mov edx, 0x4d39f8
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x18
mov edx, dword [ebp + 8]
push edx
call fcn.00417eb0
call fcn.004011f2
add dword [esp], edx
call fcn.00544a5c
call fcn.00401220
mov ebx, eax
cmp ebx, 1
jne 0x524d67
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x100], 1
jmp 0x524e03
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 2
mov ebp, dword [0x51ecb4]
push dword [ebp + 0xc]
call fcn.00416080
call fcn.00417fd0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 2
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x88]
call fcn.00416080
call fcn.00401210
mov edx, eax
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x524e03
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xfc], 1
mov ebp, dword [0x51ecb4]
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
jmp 0x524e3e
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xfc], 1
mov ebp, dword [0x51ecb4]
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
push 0x65
call fcn.004109d6
mov ebx, eax
and ebx, ebx
jne 0x524ecd
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0
call fcn.0040ae5c
mov edx, str._r_n4_
push edx
call fcn.00417eb0
mov eax, 0x4d41d0
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
push 0x44098000
push 0x44480000
push 0
push 0
call fcn.0055d92c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0xfc]
cmp ebx, 1
jne 0x524f24
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d39f8
push eax
mov ebp, dword [0x51ecb4]
push dword [ebp + 0xc]
call fcn.00416390
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x88]
push eax
call fcn.00417d00
mov edx, 0x4d302e
lea ecx, [ebp + 0xb8]
call fcn.004011b8
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x130], 0
je 0x524f5a
mov ebp, dword [0x51ecb4]
add ebp, 0x30
push dword [ebp + 0xc]
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0x10]
pop ecx
call fcn.00401230
je 0x524f5a
mov eax, 1
jmp 0x524f5c
xor eax, eax
and eax, eax
je 0x524f71
mov ebp, dword [0x51ed1c]
push dword [ebp + 0xb8]
call fcn.00537942
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 0x88]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, dword [ebp + 0xb8]
push edx
call fcn.00417eb0
mov edx, 0x4d39f8
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x18
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x18
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x48
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x18
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x60
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x184]
cmp ebx, 1
jge 0x525036
push 0x65
call fcn.00411373
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x184]
jmp 0x525076
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x184]
mov edi, dword [ebp + 0x170]
push 0x65
call fcn.004112fc
sub edi, eax
cmp ebx, edi
jle 0x525076
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x170]
push 0x65
call fcn.004112fc
sub ebx, eax
mov dword [ebp + 0x184], ebx
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x188]
cmp ebx, 1
jge 0x5250a0
push 0x65
call fcn.004113e0
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x188]
jmp 0x5250e0
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x188]
mov edi, dword [ebp + 0x16c]
push 0x65
call fcn.0041128b
sub edi, eax
cmp ebx, edi
jle 0x5250e0
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x16c]
push 0x65
call fcn.0041128b
sub ebx, eax
mov dword [ebp + 0x188], ebx
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x184]
push 0x65
call fcn.00411373
cmp ebx, eax
jne 0x525116
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x188]
push 0x65
call fcn.004113e0
cmp ebx, eax
jne 0x525116
jmp 0x52511d
mov eax, 1
jmp 0x52511f
xor eax, eax
and eax, eax
je 0x525149
push 0xffff0001
push 0xffff0001
mov ebp, dword [0x51ed0c]
push dword [ebp + 0x188]
push dword [ebp + 0x184]
push 0x65
call fcn.00410d7a
push 1
call fcn.00563ca6
call fcn.00545f29
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0054e94a
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x90]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x98]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x114]
cmp ebx, 1
jne 0x5251da
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xdc], 0x270e
mov ebp, dword [0x51ed1c]
mov edx, 0x4d3342
lea ecx, [ebp + 0xb4]
call fcn.004011b8
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x134], 0
je 0x525216
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x154], 0
je 0x525207
mov ebp, dword [0x51ed0c]
mov dword [ebp + 4], 0x10cb0000
jmp 0x525214
mov ebp, dword [0x51ed0c]
mov dword [ebp + 4], 0x20cb0000
jmp 0x525223
mov ebp, dword [0x51ed0c]
mov dword [ebp + 4], 0xcb0000
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0
call fcn.0040ae5c
mov edx, str._r_n6_
push edx
call fcn.00417eb0
mov eax, 0x4d6190
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 0x88]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, dword [ebp + 0xb8]
push edx
call fcn.00417eb0
mov edx, 0x4d39f8
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x60
mov edx, dword [ebp + 8]
push edx
call fcn.00417eb0
call fcn.004011f2
add dword [esp], edx
call fcn.00535a9b
call fcn.00401220
push 0
call fcn.0040a812
push 0x64
call fcn.004107ab
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
and ebx, ebx
je 0x525329
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
add ebx, dword [ebp + 0x178]
add ebx, 7
cmp ebx, dword [ebp + 0x170]
jg 0x525329
jmp 0x525330
mov eax, 1
jmp 0x525332
xor eax, eax
and eax, eax
je 0x525351
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x170]
sub ebx, dword [ebp + 0x178]
add ebx, 0xfffffff9
mov dword [ebp + 0x17c], ebx
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
and ebx, ebx
je 0x52537d
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
add ebx, dword [ebp + 0x174]
cmp ebx, dword [ebp + 0x170]
jg 0x52537d
jmp 0x525384
mov eax, 1
jmp 0x525386
xor eax, eax
and eax, eax
je 0x5253a8
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x16c]
sub ebx, dword [ebp + 0x178]
sub ebx, dword [ebp + 0x174]
mov dword [ebp + 0x180], ebx
mov ebp, dword [0x51ed0c]
push dword [ebp + 4]
mov eax, str.Venmon_v2.35_x86_553.12528__C_2004_2024
push eax
push dword [ebp + 0x174]
push dword [ebp + 0x178]
push dword [ebp + 0x180]
push dword [ebp + 0x17c]
push 0x64
call fcn.00410d57
mov eax, dword [ebp + 0x30]
cdq
push edx
push eax
call fcn.00537edf
call fcn.0053c20d
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov edx, str.Venmon_v
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d3342
push eax
push 1
mov eax, str.2.35_x86_553.12528
push eax
call fcn.00417220
pop eax
mov edx, 0x4d3342
push edx
call fcn.00417eb0
mov eax, 0x4d41c0
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0x81
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0055cc8d
call fcn.00401220
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov edx, str.Venmon_v
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d3342
push eax
push 1
mov eax, str.2.35_x86_553.12528
push eax
call fcn.00417220
pop eax
mov edx, 0x4d3342
push edx
call fcn.00417eb0
mov eax, 0x4d41c0
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0x82
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0055cc8d
call fcn.00401220
call fcn.0053e8fe
call fcn.0054e2ad
call fcn.00543e8d
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 1
push edx
call fcn.00417fa0
pop edx
push eax
push 0x24
call fcn.00545e23
call fcn.004011f2
add dword [esp], edx
call fcn.00416080
call fcn.004011f2
add dword [esp], edx
call fcn.004159a0
call fcn.00401220
mov ebx, eax
add ebx, 0xffffffc0
push ebx
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xf8]
mov eax, 0x4d3432
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp]
push eax
call fcn.00417d00
mov eax, 0x4d958e
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp + 4]
push eax
call fcn.00417d00
mov eax, 0x4d56e0
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp + 8]
push eax
call fcn.00417d00
mov eax, 0x4d7398
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov eax, 0x4d4282
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp + 0x10]
push eax
call fcn.00417d00
mov eax, 0x4d617c
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp + 0x14]
push eax
call fcn.00417d00
mov eax, 0x4d4d3a
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecac]
lea eax, [ebp + 0x18]
push eax
call fcn.00417d00
call fcn.0052b4dc
call fcn.0052f83b
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x390]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x5256f4
cmp edi, 0
jne 0x5256f4
xor eax, eax
jmp 0x5256f9
mov eax, 1
or eax, eax
je 0x525702
call fcn.00535e72
call fcn.0055c1eb
call fcn.00545a45
call fcn.00538da8
push 0
lea eax, [0x547076]
push eax
call fcn.00401778
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x330]
pop dword [eax]
pop dword [eax + 4]
push 0
lea eax, [0x5649ea]
push eax
call fcn.00401778
cdq
push edx
push eax
lea eax, [ebp + 0x338]
pop dword [eax]
pop dword [eax + 4]
push 0
lea eax, [0x531508]
push eax
call fcn.00401778
cdq
push edx
push eax
lea eax, [ebp + 0x340]
pop dword [eax]
pop dword [eax + 4]
push 0
lea eax, [0x557fd8]
push eax
call fcn.00401778
cdq
push edx
push eax
lea eax, [ebp + 0x348]
pop dword [eax]
pop dword [eax + 4]
push 0
lea eax, [0x550b4b]
push eax
call fcn.00401778
cdq
push edx
push eax
lea eax, [ebp + 0x358]
pop dword [eax]
pop dword [eax + 4]
push 0x18
mov eax, dword [ebp + 0x330]
push eax
call fcn.00401935
push 0x14
mov eax, dword [ebp + 0x338]
push eax
call fcn.00401935
push 0x10
mov eax, dword [ebp + 0x340]
push eax
call fcn.00401935
push 0x16
mov eax, dword [ebp + 0x348]
push eax
call fcn.00401935
push 0x10
mov eax, dword [ebp + 0x358]
push eax
call fcn.00401935
lea eax, [ebp + 0x390]
push dword [eax + 4]
push dword [eax]
pop ebx
pop edi
cmp ebx, 0
jne 0x525822
cmp edi, 0
jne 0x525822
xor eax, eax
jmp 0x525827
mov eax, 1
or eax, eax
je 0x525861
push 0
lea eax, [0x552489]
push eax
call fcn.00401778
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x328]
pop dword [eax]
pop dword [eax + 4]
push 0x10
mov eax, dword [ebp + 0x328]
push eax
call fcn.00401935
push 1
push 0x64
lea eax, [0x5384f2]
push eax
call fcn.00410f29
call fcn.0056331b
push 0x131
push 0x74
push 0x64
call fcn.0041066c
push 0x132
push 0x75
push 0x64
call fcn.0041066c
push 0x142
push 0x2006b
push 0x64
call fcn.0041066c
push 0x143
push 0x2006d
push 0x64
call fcn.0041066c
push 0x144
push 0x20030
push 0x64
call fcn.0041066c
push 0x138
push 0x20026
push 0x64
call fcn.0041066c
push 0x139
push 0x20028
push 0x64
call fcn.0041066c
push 0x13a
push 0x20025
push 0x64
call fcn.0041066c
push 0x13b
push 0x20027
push 0x64
call fcn.0041066c
push 0x13c
push 0x10026
push 0x64
call fcn.0041066c
push 0x13d
push 0x10028
push 0x64
call fcn.0041066c
push 0x13e
push 0x10025
push 0x64
call fcn.0041066c
push 0x13f
push 0x10027
push 0x64
call fcn.0041066c
push 0x131
push 0x74
push 0x65
call fcn.0041066c
push 0x132
push 0x75
push 0x65
call fcn.0041066c
push 0x142
push 0x2006b
push 0x65
call fcn.0041066c
push 0x143
push 0x2006d
push 0x65
call fcn.0041066c
push 0x144
push 0x20030
push 0x65
call fcn.0041066c
push 0x138
push 0x20026
push 0x65
call fcn.0041066c
push 0x139
push 0x20028
push 0x65
call fcn.0041066c
push 0x13a
push 0x20025
push 0x65
call fcn.0041066c
push 0x13b
push 0x20027
push 0x65
call fcn.0041066c
push 0x13c
push 0x10026
push 0x65
call fcn.0041066c
push 0x13d
push 0x10028
push 0x65
call fcn.0041066c
push 0x13e
push 0x10025
push 0x65
call fcn.0041066c
push 0x13f
push 0x10027
push 0x65
call fcn.0041066c
push 0x133
push 0x20043
push 0x65
call fcn.0041066c
push 0x145
push 0x20046
push 0x65
call fcn.0041066c
push 0x134
push 0x20053
push 0x65
call fcn.0041066c
push 0x135
push 0x20009
push 0x65
call fcn.0041066c
push 0x136
push 0x30009
push 0x65
call fcn.0041066c
push 0x137
push 0x20049
push 0x65
call fcn.0041066c
push 0x141
push 0x20058
push 0x65
call fcn.0041066c
push 0x140
push 0xd
push 0x65
call fcn.0041066c
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x150], 0
je 0x525c5e
push 0x6d
call fcn.00413d03
push eax
push 0x64
call fcn.00411299
push eax
push 0x72
call fcn.004115e3
mov eax, 0x4d7544
push eax
push 0x72
call fcn.00411896
push 0x72
call fcn.004117de
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xac]
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jle 0x525c5e
push dword [0x4e8c48]
push dword [0x4e8c44]
pop ebx
pop edi
cmp ebx, 0
jne 0x525ba4
cmp edi, 0
je 0x525ba8
xor eax, eax
jmp 0x525bad
mov eax, 1
or eax, eax
je 0x525c5e
push 0
push 0
push 3
push 0
push 0
push 0
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x5c]
call sub.KERNEL32.dll_CreateFileW
cdq
push edx
push eax
pop dword [0x4e8c44]
pop dword [0x4e8c48]
push dword [0x4e8c48]
push dword [0x4e8c44]
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x525c08
cmp edi, 0xffffffff
je 0x525c0c
xor eax, eax
jmp 0x525c11
mov eax, 1
or eax, eax
je 0x525c25
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x110], 0xffffffff
push dword [0x4e8c48]
push dword [0x4e8c44]
pop ebx
pop edi
cmp ebx, 0
jne 0x525c3d
cmp edi, 0
je 0x525c41
xor eax, eax
jmp 0x525c46
mov eax, 1
or eax, eax
je 0x525c5e
mov dword [0x4e8c44], 1
mov dword [0x4e8c48], 0
call fcn.00411215
mov dword [0x4e8d48], eax
mov ebx, dword [0x4e8d48]
cmp ebx, 0x202
jne 0x525c85
mov dword [0x4e8d48], 0
jmp 0x52b443
push dword [0x4e8d48]
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x526ffd
call fcn.0041245b
push eax
mov ebx, 0x131
cmp ebx, dword [esp]
jne 0x525e85
call fcn.0041246d
push eax
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x525cdc
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xbc], 1
mov dword [ebp + 0x1bc], 1
jmp 0x525e7f
mov ebx, 0x65
cmp ebx, dword [esp]
jne 0x525e7f
push 0x7f
call fcn.0040ae27
push edx
push eax
push 0
push 0
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525d0d
cmp edi, dword [esp + 4]
je 0x525d11
xor eax, eax
jmp 0x525d16
mov eax, 1
or eax, eax
je 0x525d4e
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0054f64a
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0xc8]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x240], 1
jmp 0x525e7c
push 0
push 2
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525d65
cmp edi, dword [esp + 4]
je 0x525d69
xor eax, eax
jmp 0x525d6e
mov eax, 1
or eax, eax
je 0x525d87
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x30c], 1
jmp 0x525e7c
push 0
push 3
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525d9e
cmp edi, dword [esp + 4]
je 0x525da2
xor eax, eax
jmp 0x525da7
mov eax, 1
or eax, eax
je 0x525dc0
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xbc], 1
jmp 0x525e7c
push 0
push 4
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525dd7
cmp edi, dword [esp + 4]
je 0x525ddb
xor eax, eax
jmp 0x525de0
mov eax, 1
or eax, eax
je 0x525df9
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x1bc], 1
jmp 0x525e7c
push 0
push 5
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525e10
cmp edi, dword [esp + 4]
je 0x525e14
xor eax, eax
jmp 0x525e19
mov eax, 1
or eax, eax
je 0x525e48
push dword [0x51ed3c]
call fcn.00414392
mov ebx, eax
and ebx, ebx
jle 0x525e46
call fcn.00412bca
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x410]
pop dword [eax]
pop dword [eax + 4]
jmp 0x525e7c
push 0
push 6
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525e5f
cmp edi, dword [esp + 4]
je 0x525e63
xor eax, eax
jmp 0x525e68
mov eax, 1
or eax, eax
je 0x525e7c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x290], 1
add esp, 8
pop eax
jmp 0x526ff7
mov ebx, 0x132
cmp ebx, dword [esp]
jne 0x526076
call fcn.0041246d
push eax
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x525ec2
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xbc], 1
mov dword [ebp + 0xc0], 1
jmp 0x526070
mov ebx, 0x65
cmp ebx, dword [esp]
jne 0x526070
push 0x7f
call fcn.0040ae27
push edx
push eax
push 0
push 0
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525ef3
cmp edi, dword [esp + 4]
je 0x525ef7
xor eax, eax
jmp 0x525efc
mov eax, 1
or eax, eax
je 0x525f15
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x244], 1
jmp 0x52606d
push 0
push 2
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525f2c
cmp edi, dword [esp + 4]
je 0x525f30
xor eax, eax
jmp 0x525f35
mov eax, 1
or eax, eax
je 0x525f5d
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x310]
xor ebx, 1
mov dword [ebp + 0x310], ebx
mov dword [ebp + 0x30c], 1
jmp 0x52606d
push 0
push 4
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525f74
cmp edi, dword [esp + 4]
je 0x525f78
xor eax, eax
jmp 0x525f7d
mov eax, 1
or eax, eax
je 0x525fa0
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x1bc], 1
mov dword [ebp + 0x1c0], 1
jmp 0x52606d
push 0
push 5
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x525fb7
cmp edi, dword [esp + 4]
je 0x525fbb
xor eax, eax
jmp 0x525fc0
mov eax, 1
or eax, eax
je 0x526039
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x48c], 0
call fcn.00543e8d
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, str..com_www.
push eax
mov eax, 0x4d3342
push eax
mov eax, str.www.ventural_google_youtube_facebook_yahoo_wikipedia_instagram_reddit_ask_ea_microsoft_t_mobile_gmail_amazon_pandora_bestbuy_adobe_aliexpress_zillow_hulu_mlb_baidu_imdb_pinterest_tripadvisor_nytimes_linkedin_espn_cnn_homedepot_etsy_wordpress_target_forbes_foxnews_weather_craigslist.org
push eax
call fcn.00416a60
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push 0
lea eax, [0x53bc67]
push eax
call fcn.00401778
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x348]
pop dword [eax]
pop dword [eax + 4]
jmp 0x52606d
push 0
push 6
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x526050
cmp edi, dword [esp + 4]
je 0x526054
xor eax, eax
jmp 0x526059
mov eax, 1
or eax, eax
je 0x52606d
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x28c], 1
add esp, 8
pop eax
jmp 0x526ff7
mov ebx, 0x133
cmp ebx, dword [esp]
jne 0x526233
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x50]
call fcn.004011b8
push 0x7f
call fcn.0040ae27
push edx
push eax
push 0
push 0
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5260ba
cmp edi, dword [esp + 4]
je 0x5260be
xor eax, eax
jmp 0x5260c3
mov eax, 1
or eax, eax
je 0x5260d9
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 0
jmp 0x52622b
push 0
push 1
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5260f0
cmp edi, dword [esp + 4]
je 0x5260f4
xor eax, eax
jmp 0x5260f9
mov eax, 1
or eax, eax
je 0x52610f
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 1
jmp 0x52622b
push 0
push 2
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x526126
cmp edi, dword [esp + 4]
je 0x52612a
xor eax, eax
jmp 0x52612f
mov eax, 1
or eax, eax
je 0x526145
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 2
jmp 0x52622b
push 0
push 3
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x52615c
cmp edi, dword [esp + 4]
je 0x526160
xor eax, eax
jmp 0x526165
mov eax, 1
or eax, eax
je 0x52617b
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 3
jmp 0x52622b
push 0
push 4
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x526192
cmp edi, dword [esp + 4]
je 0x526196
xor eax, eax
jmp 0x52619b
mov eax, 1
or eax, eax
je 0x5261ae
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 4
jmp 0x52622b
push 0
push 5
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5261c5
cmp edi, dword [esp + 4]
je 0x5261c9
xor eax, eax
jmp 0x5261ce
mov eax, 1
or eax, eax
je 0x5261e1
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 5
jmp 0x52622b
push 0
push 7
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5261f8
cmp edi, dword [esp + 4]
je 0x5261fc
xor eax, eax
jmp 0x526201
mov eax, 1
or eax, eax
je 0x526207
jmp 0x52622b
push 0
push 8
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x52621e
cmp edi, dword [esp + 4]
je 0x526222
xor eax, eax
jmp 0x526227
mov eax, 1
or eax, eax
je 0x52622b
add esp, 8
jmp 0x526ff7
mov ebx, 0x141
cmp ebx, dword [esp]
jne 0x5263b9
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x50]
call fcn.004011b8
push 0x7f
call fcn.0040ae27
push edx
push eax
push 0
push 0
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x526277
cmp edi, dword [esp + 4]
je 0x52627b
xor eax, eax
jmp 0x526280
mov eax, 1
or eax, eax
je 0x526289
jmp 0x5263b1
push 0
push 1
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5262a0
cmp edi, dword [esp + 4]
je 0x5262a4
xor eax, eax
jmp 0x5262a9
mov eax, 1
or eax, eax
je 0x5262b2
jmp 0x5263b1
push 0
push 2
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5262c9
cmp edi, dword [esp + 4]
je 0x5262cd
xor eax, eax
jmp 0x5262d2
mov eax, 1
or eax, eax
je 0x5262db
jmp 0x5263b1
push 0
push 3
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5262f2
cmp edi, dword [esp + 4]
je 0x5262f6
xor eax, eax
jmp 0x5262fb
mov eax, 1
or eax, eax
je 0x526304
jmp 0x5263b1
push 0
push 4
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x52631b
cmp edi, dword [esp + 4]
je 0x52631f
xor eax, eax
jmp 0x526324
mov eax, 1
or eax, eax
je 0x52632d
jmp 0x5263b1
push 0
push 5
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x526344
cmp edi, dword [esp + 4]
je 0x526348
xor eax, eax
jmp 0x52634d
mov eax, 1
or eax, eax
je 0x526367
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x68], 5
mov dword [ebp + 0x70], 1
jmp 0x5263b1
push 0
push 7
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x52637e
cmp edi, dword [esp + 4]
je 0x526382
xor eax, eax
jmp 0x526387
mov eax, 1
or eax, eax
je 0x52638d
jmp 0x5263b1
push 0
push 8
pop ebx
pop edi
cmp ebx, dword [esp]
jne 0x5263a4
cmp edi, dword [esp + 4]
je 0x5263a8
xor eax, eax
jmp 0x5263ad
mov eax, 1
or eax, eax
je 0x5263b1
add esp, 8
jmp 0x526ff7
mov ebx, 0x134
cmp ebx, dword [esp]
jne 0x526460
mov dword [0x4e8cc0], 0x12d
jmp 0x5263d3
mov eax, 0x18f
cmp eax, dword [0x4e8cc0]
jl 0x52645b
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ed0c]
shl ebx, 2
mov ebx, dword [ebp + ebx]
and ebx, ebx
jle 0x52644d
push 1
push dword [0x4e8cc0]
call fcn.0055501e
mov dword [0x4e8cf4], eax
cmp dword [0x4e8cf4], 0
je 0x52641c
push 1
jmp 0x526421
push 0
mov edx, 1
jmp 0x52642a
pop eax
xor eax, edx
and eax, eax
je 0x526438
mov eax, 1
jmp 0x52643a
xor eax, eax
push eax
push 1
push dword [0x4e8cc0]
call fcn.00538889
jmp 0x52644f
jmp 0x52645b
inc dword [0x4e8cc0]
jno 0x5263d3
jmp 0x526ff7
mov ebx, 0x135
cmp ebx, dword [esp]
jne 0x5264c7
push 0x7f
call fcn.0040ae27
push edx
push eax
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
mov dword [0x4e8cc0], eax
mov ebx, dword [0x4e8cc0]
cmp ebx, 8
jle 0x52649b
mov dword [0x4e8cc0], 0
mov eax, dword [0x4e8cc0]
cdq
push edx
push eax
push 0x7f
call fcn.0040f698
push 0
push 1
push dword [0x4e8cc0]
call fcn.0052e6de
jmp 0x526ff7
mov ebx, 0x136
cmp ebx, dword [esp]
jne 0x52652d
push 0x7f
call fcn.0040ae27
push edx
push eax
add dword [esp], 0xffffffff
adc dword [esp + 4], 0xffffffff
pop eax
pop edx
mov dword [0x4e8cc0], eax
mov ebx, dword [0x4e8cc0]
and ebx, ebx
jge 0x526501
mov dword [0x4e8cc0], 8
mov eax, dword [0x4e8cc0]
cdq
push edx
push eax
push 0x7f
call fcn.0040f698
push 0
push 1
push dword [0x4e8cc0]
call fcn.0052e6de
jmp 0x526ff7
mov ebx, 0x137
cmp ebx, dword [esp]
jne 0x5267c8
mov dword [0x4e8cc0], 0x12d
jmp 0x526547
mov eax, 0x18f
cmp eax, dword [0x4e8cc0]
jl 0x526653
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ed0c]
shl ebx, 2
mov ebx, dword [ebp + ebx]
and ebx, ebx
jle 0x526645
push 2
push dword [0x4e8cc0]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 2
push dword [0x4e8cc0]
call fcn.00538889
push 3
push dword [0x4e8cc0]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 3
push dword [0x4e8cc0]
call fcn.00538889
push 4
push dword [0x4e8cc0]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 4
push dword [0x4e8cc0]
call fcn.00538889
push 5
push dword [0x4e8cc0]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 5
push dword [0x4e8cc0]
call fcn.00538889
jmp 0x526647
jmp 0x526653
inc dword [0x4e8cc0]
jno 0x526547
mov dword [0x4e8cc0], 0
jmp 0x52665f
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x350]
cmp eax, dword [0x4e8cc0]
jl 0x5267c3
push 2
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 2
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.00538889
push 3
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 3
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.00538889
push 4
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 4
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.00538889
push 5
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.0055501e
mov dword [0x4e8cf4], eax
mov ebx, dword [0x4e8cf4]
neg ebx
add ebx, 0xffffff
push ebx
push 5
mov ebx, dword [0x4e8cc0]
mov ebp, dword [0x51ecfc]
shl ebx, 5
add ebp, ebx
push dword [ebp]
call fcn.00538889
inc dword [0x4e8cc0]
jno 0x52665f
jmp 0x526ff7
mov ebx, 0x138
cmp ebx, dword [esp]
jne 0x526819
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
and ebx, ebx
jle 0x526814
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
dec ebx
mov dword [ebp + 0x180], ebx
push 0xffff0001
push 0xffff0001
push dword [ebp + 0x180]
push 0xffff0001
push 0x64
call fcn.00410d7a
jmp 0x526ff7
mov ebx, 0x139
cmp ebx, dword [esp]
jne 0x52687d
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
mov edi, dword [ebp + 0x16c]
sub edi, dword [ebp + 0x174]
cmp ebx, edi
jge 0x526873
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
inc ebx
mov dword [ebp + 0x180], ebx
push 0xffff0001
push 0xffff0001
push dword [ebp + 0x180]
push 0xffff0001
push 0x64
call fcn.00410d7a
jmp 0x526878
call fcn.0055d8bf
jmp 0x526ff7
mov ebx, 0x13a
cmp ebx, dword [esp]
jne 0x5268ce
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
and ebx, ebx
jle 0x5268c9
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
dec ebx
mov dword [ebp + 0x17c], ebx
push 0xffff0001
push 0xffff0001
push 0xffff0001
push dword [ebp + 0x17c]
push 0x64
call fcn.00410d7a
jmp 0x526ff7
mov ebx, 0x13b
cmp ebx, dword [esp]
jne 0x526932
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
mov edi, dword [ebp + 0x170]
sub edi, dword [ebp + 0x178]
cmp ebx, edi
jge 0x526928
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
inc ebx
mov dword [ebp + 0x17c], ebx
push 0xffff0001
push 0xffff0001
push 0xffff0001
push dword [ebp + 0x17c]
push 0x64
call fcn.00410d7a
jmp 0x52692d
call fcn.0055d8bf
jmp 0x526ff7
mov ebx, 0x13c
cmp ebx, dword [esp]
jne 0x5269a5
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
and ebx, ebx
jle 0x5269a0
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
add ebx, 0xfffffff6
mov dword [ebp + 0x180], ebx
mov ebx, dword [ebp + 0x180]
and ebx, ebx
jge 0x52697b
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x180], 0
push 0xffff0001
push 0xffff0001
mov ebp, dword [0x51ed0c]
push dword [ebp + 0x180]
push 0xffff0001
push 0x64
call fcn.00410d7a
jmp 0x526ff7
mov ebx, 0x13d
cmp ebx, dword [esp]
jne 0x526a43
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
mov edi, dword [ebp + 0x16c]
sub edi, dword [ebp + 0x174]
cmp ebx, edi
jge 0x526a39
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x180]
add ebx, 0xa
mov dword [ebp + 0x180], ebx
mov ebx, dword [ebp + 0x180]
mov edi, dword [ebp + 0x16c]
sub edi, dword [ebp + 0x174]
cmp ebx, edi
jle 0x526a12
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x16c]
sub ebx, dword [ebp + 0x174]
mov dword [ebp + 0x180], ebx
push 0xffff0001
push 0xffff0001
mov ebp, dword [0x51ed0c]
push dword [ebp + 0x180]
push 0xffff0001
push 0x64
call fcn.00410d7a
jmp 0x526a3e
call fcn.0055d8bf
jmp 0x526ff7
mov ebx, 0x13e
cmp ebx, dword [esp]
jne 0x526ab6
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
and ebx, ebx
jle 0x526ab1
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
add ebx, 0xfffffff6
mov dword [ebp + 0x17c], ebx
mov ebx, dword [ebp + 0x17c]
and ebx, ebx
jge 0x526a8c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x17c], 0
push 0xffff0001
push 0xffff0001
push 0xffff0001
mov ebp, dword [0x51ed0c]
push dword [ebp + 0x17c]
push 0x64
call fcn.00410d7a
jmp 0x526ff7
mov ebx, 0x13f
cmp ebx, dword [esp]
jne 0x526b54
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
mov edi, dword [ebp + 0x170]
sub edi, dword [ebp + 0x178]
cmp ebx, edi
jge 0x526b4a
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x17c]
add ebx, 0xa
mov dword [ebp + 0x17c], ebx
mov ebx, dword [ebp + 0x17c]
mov edi, dword [ebp + 0x170]
sub edi, dword [ebp + 0x178]
cmp ebx, edi
jle 0x526b23
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x170]
sub ebx, dword [ebp + 0x178]
mov dword [ebp + 0x17c], ebx
push 0xffff0001
push 0xffff0001
push 0xffff0001
mov ebp, dword [0x51ed0c]
push dword [ebp + 0x17c]
push 0x64
call fcn.00410d7a
jmp 0x526b4f
call fcn.0055d8bf
jmp 0x526ff7
mov ebx, 0x140
cmp ebx, dword [esp]
jne 0x526ece
push 0x7f
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp ebx, 5
jne 0x526b7a
cmp edi, 0
je 0x526b7e
xor eax, eax
jmp 0x526b83
mov eax, 1
or eax, eax
je 0x526d7e
push 0xde
call fcn.0040bf1b
and eax, eax
je 0x526c98
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xde
call fcn.0040ae5c
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
mov edx, dword [ebp + 0x150]
xor ecx, ecx
call fcn.00401230
jne 0x526c93
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, str.https:__
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x150]
call fcn.004166e0
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, str.http:__
push eax
push dword [ebp + 0x150]
call fcn.004166e0
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d34ac
push eax
push 1
push dword [ebp + 0x150]
call fcn.00417220
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push 0
lea eax, [0x53bc67]
push eax
call fcn.00401778
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x348]
pop dword [eax]
pop dword [eax + 4]
jmp 0x526d79
push 0xdf
call fcn.0040bf1b
and eax, eax
je 0x526d79
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xdf
call fcn.0040ae5c
call fcn.00417fd0
mov edx, str.0.0.0.0
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x526d79
push 0xdf
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x458]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe1
call fcn.0040ae5c
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x154]
push eax
call fcn.00417d00
push dword [ebp + 0x154]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d91e8
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
call fcn.00415de0
call fcn.00401210
mov edx, eax
pop ecx
call fcn.00401230
je 0x526d79
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x154]
call fcn.004011b8
jmp 0x526ec9
push 0x7f
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp ebx, 6
jne 0x526d96
cmp edi, 0
je 0x526d9a
xor eax, eax
jmp 0x526d9f
mov eax, 1
or eax, eax
je 0x526ec9
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x188]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe2
call fcn.0040ae5c
call fcn.004011f2
add dword [esp], edx
call fcn.00417440
call fcn.00401210
mov edx, eax
pop ecx
call fcn.00401230
jne 0x526e0e
push 0xca
call fcn.0040bf1b
and eax, eax
je 0x526e0e
mov eax, 1
jmp 0x526e10
xor eax, eax
and eax, eax
je 0x526ec9
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe2
call fcn.0040ae5c
call fcn.004011f2
add dword [esp], edx
call fcn.00417440
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x188]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x298]
and ebx, ebx
jne 0x526e91
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x188]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x526e91
mov eax, 1
jmp 0x526e93
xor eax, eax
and eax, eax
je 0x526ea9
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x298], 0xffffffff
jmp 0x526ec9
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x298]
and ebx, ebx
jle 0x526ec9
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x298], 0xffffffff
jmp 0x526ff7
mov ebx, 0x142
cmp ebx, dword [esp]
jne 0x526eff
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x30]
cmp ebx, 0x1a
jge 0x526efa
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x30]
inc ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x6c], 1
jmp 0x526ff7
mov ebx, 0x143
cmp ebx, dword [esp]
jne 0x526f30
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x30]
cmp ebx, 0xa
jle 0x526f2b
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x30]
dec ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x6c], 1
jmp 0x526ff7
mov ebx, 0x144
cmp ebx, dword [esp]
jne 0x526f61
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x30]
cmp ebx, 0xa
jle 0x526f5c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x30], 0xa
mov dword [ebp + 0x6c], 1
jmp 0x526ff7
mov ebx, 0x145
cmp ebx, dword [esp]
jne 0x526ff7
push 0x7f
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp ebx, 5
jne 0x526f87
cmp edi, 0
je 0x526f8b
xor eax, eax
jmp 0x526f90
mov eax, 1
or eax, eax
je 0x526fc8
push 0xde
call fcn.0040bf1b
and eax, eax
je 0x526fae
push 0xde
call fcn.0040f514
jmp 0x526fc6
push 0xdf
call fcn.0040bf1b
and eax, eax
je 0x526fc6
push 0xdf
call fcn.0040f514
jmp 0x526ff7
push 0x7f
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp ebx, 6
jne 0x526fe0
cmp edi, 0
je 0x526fe4
xor eax, eax
jmp 0x526fe9
mov eax, 1
or eax, eax
je 0x526ff7
push 0xe2
call fcn.0040f514
pop eax
jmp 0x52b442
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x52acfb
call fcn.0041245b
push eax
mov ebx, 0x69
cmp ebx, dword [esp]
jne 0x52763c
call fcn.00412464
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x5275d0
push 2
push 0x69
call fcn.0040ad85
push edx
push eax
mov ebp, dword [0x51ed04]
fild qword [esp]
add esp, 8
fdiv dword [ebp + 4]
push eax
fistp dword [esp]
call fcn.00412845
mov ebx, eax
add ebx, 0xffffffe2
push ebx
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x250]
push 3
push 0x69
call fcn.0040ad85
push edx
push eax
mov eax, dword [ebp + 0x34]
cdq
push edx
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call section..text
mov dword [esp], eax
mov dword [esp + 4], edx
mov ebx, dword [esp]
add esp, 8
mov eax, ebx
push eax
call fcn.00412882
mov ebx, eax
inc ebx
mov dword [ebp + 0x254], ebx
push dword [ebp + 0x254]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x527258
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0x92d0
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0x92d0
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x52711b
push 0
push 0
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x527253
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xbb50
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xbb50
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x52717d
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x154], 0
je 0x527169
push 1
push 0x64
call fcn.004108e5
jmp 0x527178
push 0x20000000
push 0x64
call fcn.00410fda
jmp 0x527253
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xc060
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xc060
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x5271d4
push 0
push 7
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x527253
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xc570
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xc570
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x527253
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x160], 0
je 0x52724b
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x4e8cc0], eax
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
jne 0x527241
push 1
push 0x64
call fcn.004108e5
jmp 0x527249
add esp, 0x10
jmp 0x52b458
jmp 0x527253
add esp, 0x10
jmp 0x52b458
jmp 0x5275cf
mov ebx, 2
cmp ebx, dword [esp]
jne 0x527317
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0x97e0
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0x97e0
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x5272bd
push 0
push 1
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x527312
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0x9cf0
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0x9cf0
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x527312
push 0
push 0
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5275cf
mov ebx, 3
cmp ebx, dword [esp]
jne 0x5273d6
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xa200
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xa200
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x52737c
push 0
push 0
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5273d1
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xa710
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xa710
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x5273d1
push 0
push 0
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5275cf
mov ebx, 4
cmp ebx, dword [esp]
jne 0x5274d2
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xb640
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xb640
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x527478
mov ebp, dword [0x51ecbc]
add ebp, 0xb640
lea edx, [ebp + 0xc8]
push edx
call fcn.00417fa0
pop edx
push eax
push 0x3c
push edx
call fcn.00417e50
call fcn.00417fd0
mov edx, 0x4d302e
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x527476
push 0
push 5
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5274cd
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x250]
mov ebp, dword [0x51ecbc]
add ebp, 0xb130
mov edi, dword [ebp + 0x10]
mov ebp, dword [0x51ecbc]
add ebp, 0xb130
add edi, dword [ebp + 0x18]
cmp ebx, edi
jge 0x5274cd
push 0
push 3
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5275cf
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x2c]
inc ebx
cmp ebx, dword [esp]
jg 0x5275cf
mov ebx, 0x51
cmp ebx, dword [esp]
jl 0x5275cf
cmp dword [ebp + 0x314], 0
je 0x527517
mov ebx, dword [ebp + 0x254]
mov edi, dword [ebp + 0x2c]
add edi, dword [ebp + 0x314]
inc edi
cmp ebx, edi
jge 0x527517
mov eax, 1
jmp 0x527519
xor eax, eax
and eax, eax
je 0x527549
push 0
push 2
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5275cf
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x19c], 0
je 0x527579
mov ebx, dword [ebp + 0x254]
mov edi, dword [ebp + 0x2c]
add edi, dword [ebp + 0x314]
add edi, dword [ebp + 0x19c]
inc edi
cmp ebx, edi
jge 0x527579
mov eax, 1
jmp 0x52757b
xor eax, eax
and eax, eax
je 0x5275a8
push 0
push 4
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
jmp 0x5275cf
push 0
push 3
push 0x7f
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x258]
inc ebx
mov dword [ebp + 0x258], ebx
pop eax
pop eax
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x258], 0
je 0x527637
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x258], 0
push 0
push 1
push 0x7f
call fcn.0040ae27
push eax
call fcn.0052e6de
push 0
push 0x65
call fcn.004108e5
push 1
push 0x65
call fcn.004110a3
push 0
push 0x65
call fcn.004110a3
jmp 0x52acf5
mov ebx, 0x7f
cmp ebx, dword [esp]
jne 0x527665
push 1
push 1
push 0x7f
call fcn.0040ae27
push eax
call fcn.0052e6de
jmp 0x52acf5
mov ebx, 0xa7
cmp ebx, dword [esp]
jne 0x527716
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x104]
xor ebx, 1
mov dword [ebp + 0x104], ebx
mov ebx, dword [ebp + 0x104]
and ebx, ebx
jle 0x5276a8
push 0
push 1
push 0xa7
call fcn.0040f698
jmp 0x5276e2
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x104]
and ebx, ebx
jge 0x5276ce
push 0xffffffff
push 0xffffffff
push 0xa7
call fcn.0040f698
jmp 0x5276e2
push 0
push 0
push 0xa7
call fcn.0040f698
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x104], 0
je 0x527702
push 1
push 0x64
call fcn.004110a3
jmp 0x527711
push 0
push 0x64
call fcn.004110a3
jmp 0x52acf5
mov ebx, 0xa9
cmp ebx, dword [esp]
jne 0x527799
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x108]
xor ebx, 1
mov dword [ebp + 0x108], ebx
mov ebx, dword [ebp + 0x108]
and ebx, ebx
jle 0x527755
push 0
push 1
push 0xa9
call fcn.0040f698
jmp 0x52778f
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x108]
and ebx, ebx
jge 0x52777b
push 0xffffffff
push 0xffffffff
push 0xa9
call fcn.0040f698
jmp 0x52778f
push 0
push 0
push 0xa9
call fcn.0040f698
call fcn.00545f29
jmp 0x52acf5
mov ebx, 0xb9
cmp ebx, dword [esp]
jne 0x527817
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x10c]
xor ebx, 1
mov dword [ebp + 0x10c], ebx
mov ebx, dword [ebp + 0x10c]
and ebx, ebx
jle 0x5277d8
push 0
push 1
push 0xb9
call fcn.0040f698
jmp 0x527812
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x10c]
and ebx, ebx
jge 0x5277fe
push 0xffffffff
push 0xffffffff
push 0xb9
call fcn.0040f698
jmp 0x527812
push 0
push 0
push 0xb9
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xb8
cmp ebx, dword [esp]
jne 0x527a2e
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
xor ebx, 1
mov dword [ebp + 0x110], ebx
push 0x72
call fcn.004117de
mov ebx, eax
and ebx, ebx
jne 0x52785c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x110], 0
jmp 0x5278b7
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
cmp ebx, 1
jge 0x5278b7
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x234]
cmp ebx, 0x6d
je 0x52788c
mov ebx, dword [ebp + 0x38]
and ebx, ebx
jne 0x52788c
mov eax, 1
jmp 0x52788e
xor eax, eax
and eax, eax
je 0x5278b7
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x234], 0x6d
push 0x6d
call fcn.00413d03
push eax
push 0x72
call fcn.00411706
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jle 0x5278dd
push 0
push 1
push 0xb8
call fcn.0040f698
jmp 0x527917
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jge 0x527903
push 0xffffffff
push 0xffffffff
push 0xb8
call fcn.0040f698
jmp 0x527917
push 0
push 0
push 0xb8
call fcn.0040f698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jle 0x527937
cmp dword [ebp + 0x150], 0
je 0x527937
mov eax, 1
jmp 0x527939
xor eax, eax
and eax, eax
je 0x52794d
cmp dword [ebp + 0xac], 0
je 0x52794d
mov eax, 1
jmp 0x52794f
xor eax, eax
and eax, eax
je 0x527a29
push dword [0x4e8c48]
push dword [0x4e8c44]
pop ebx
pop edi
cmp ebx, 0
jne 0x52796f
cmp edi, 0
je 0x527973
xor eax, eax
jmp 0x527978
mov eax, 1
or eax, eax
je 0x527a29
push 0
push 0
push 3
push 0
push 0
push 0
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x5c]
call sub.KERNEL32.dll_CreateFileW
cdq
push edx
push eax
pop dword [0x4e8c44]
pop dword [0x4e8c48]
push dword [0x4e8c48]
push dword [0x4e8c44]
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x5279d3
cmp edi, 0xffffffff
je 0x5279d7
xor eax, eax
jmp 0x5279dc
mov eax, 1
or eax, eax
je 0x5279f0
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x110], 0xffffffff
push dword [0x4e8c48]
push dword [0x4e8c44]
pop ebx
pop edi
cmp ebx, 0
jne 0x527a08
cmp edi, 0
je 0x527a0c
xor eax, eax
jmp 0x527a11
mov eax, 1
or eax, eax
je 0x527a29
mov dword [0x4e8c44], 1
mov dword [0x4e8c48], 0
jmp 0x52acf5
mov ebx, 0xb5
cmp ebx, dword [esp]
jne 0x527aaa
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x114]
xor ebx, 1
mov dword [ebp + 0x114], ebx
mov ebx, dword [ebp + 0x114]
and ebx, ebx
jne 0x527a7f
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xdc], 0x1f3
mov ebp, dword [0x51ed1c]
mov edx, 0x4d3028
lea ecx, [ebp + 0xb4]
call fcn.004011b8
jmp 0x527aa5
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xdc], 0x270e
mov ebp, dword [0x51ed1c]
mov edx, 0x4d3342
lea ecx, [ebp + 0xb4]
call fcn.004011b8
jmp 0x52acf5
mov ebx, 0xaa
cmp ebx, dword [esp]
jne 0x527b28
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x118]
xor ebx, 1
mov dword [ebp + 0x118], ebx
mov ebx, dword [ebp + 0x118]
and ebx, ebx
jle 0x527ae9
push 0
push 1
push 0xaa
call fcn.0040f698
jmp 0x527b23
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x118]
and ebx, ebx
jge 0x527b0f
push 0xffffffff
push 0xffffffff
push 0xaa
call fcn.0040f698
jmp 0x527b23
push 0
push 0
push 0xaa
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xab
cmp ebx, dword [esp]
jne 0x527ba6
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x11c]
xor ebx, 1
mov dword [ebp + 0x11c], ebx
mov ebx, dword [ebp + 0x11c]
and ebx, ebx
jle 0x527b67
push 0
push 1
push 0xab
call fcn.0040f698
jmp 0x527ba1
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x11c]
and ebx, ebx
jge 0x527b8d
push 0xffffffff
push 0xffffffff
push 0xab
call fcn.0040f698
jmp 0x527ba1
push 0
push 0
push 0xab
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xac
cmp ebx, dword [esp]
jne 0x527c24
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x120]
xor ebx, 1
mov dword [ebp + 0x120], ebx
mov ebx, dword [ebp + 0x120]
and ebx, ebx
jle 0x527be5
push 0
push 1
push 0xac
call fcn.0040f698
jmp 0x527c1f
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x120]
and ebx, ebx
jge 0x527c0b
push 0xffffffff
push 0xffffffff
push 0xac
call fcn.0040f698
jmp 0x527c1f
push 0
push 0
push 0xac
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xad
cmp ebx, dword [esp]
jne 0x527ca2
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x124]
xor ebx, 1
mov dword [ebp + 0x124], ebx
mov ebx, dword [ebp + 0x124]
and ebx, ebx
jle 0x527c63
push 0
push 1
push 0xad
call fcn.0040f698
jmp 0x527c9d
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x124]
and ebx, ebx
jge 0x527c89
push 0xffffffff
push 0xffffffff
push 0xad
call fcn.0040f698
jmp 0x527c9d
push 0
push 0
push 0xad
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xae
cmp ebx, dword [esp]
jne 0x527d25
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x128]
xor ebx, 1
mov dword [ebp + 0x128], ebx
mov ebx, dword [ebp + 0x128]
and ebx, ebx
jle 0x527ce1
push 0
push 1
push 0xae
call fcn.0040f698
jmp 0x527d1b
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x128]
and ebx, ebx
jge 0x527d07
push 0xffffffff
push 0xffffffff
push 0xae
call fcn.0040f698
jmp 0x527d1b
push 0
push 0
push 0xae
call fcn.0040f698
call fcn.0056331b
jmp 0x52acf5
mov ebx, 0xa8
cmp ebx, dword [esp]
jne 0x527db8
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x130]
xor ebx, 1
mov dword [ebp + 0x130], ebx
cmp dword [ebp + 0x130], 0
je 0x527d78
mov ebp, dword [0x51ecb4]
add ebp, 0x30
push dword [ebp + 0xc]
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0x10]
pop ecx
call fcn.00401230
je 0x527d78
mov eax, 1
jmp 0x527d7a
xor eax, eax
and eax, eax
je 0x527d8f
mov ebp, dword [0x51ed1c]
push dword [ebp + 0xb8]
call fcn.00537942
call fcn.0056331b
push 0
call fcn.00563ca6
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x130]
and ebx, ebx
jne 0x527db3
call fcn.0053bdb6
jmp 0x52acf5
mov ebx, 0xb0
cmp ebx, dword [esp]
jne 0x527e36
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x134]
xor ebx, 1
mov dword [ebp + 0x134], ebx
mov ebx, dword [ebp + 0x134]
and ebx, ebx
jle 0x527df7
push 0
push 1
push 0xb0
call fcn.0040f698
jmp 0x527e31
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x134]
and ebx, ebx
jge 0x527e1d
push 0xffffffff
push 0xffffffff
push 0xb0
call fcn.0040f698
jmp 0x527e31
push 0
push 0
push 0xb0
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xbc
cmp ebx, dword [esp]
jne 0x527ef3
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x13c]
xor ebx, 1
mov dword [ebp + 0x13c], ebx
cmp dword [ebp + 0x13c], 0
je 0x527e73
push 0
push 0xf0
call fcn.00408698
jmp 0x527e82
push 1
push 0xf0
call fcn.00408698
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x13c], 0
je 0x527ecf
push 2
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0xc8]
imul ebx, ebx, 0xff
imul ebx, ebx, 0xa
mov eax, ebx
mov ecx, 0x64
cdq
idiv ecx
mov ebx, eax
push ebx
push 0
push 0x64
call fcn.00411299
push eax
call sub.USER32.dll_SetLayeredWindowAttributes
jmp 0x527eee
push 2
push 0xff
push 0
push 0x64
call fcn.00411299
push eax
call sub.USER32.dll_SetLayeredWindowAttributes
jmp 0x52acf5
mov ebx, 0xb1
cmp ebx, dword [esp]
jne 0x527f71
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x140]
xor ebx, 1
mov dword [ebp + 0x140], ebx
mov ebx, dword [ebp + 0x140]
and ebx, ebx
jle 0x527f32
push 0
push 1
push 0xb1
call fcn.0040f698
jmp 0x527f6c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x140]
and ebx, ebx
jge 0x527f58
push 0xffffffff
push 0xffffffff
push 0xb1
call fcn.0040f698
jmp 0x527f6c
push 0
push 0
push 0xb1
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xb3
cmp ebx, dword [esp]
jne 0x527fef
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x144]
xor ebx, 1
mov dword [ebp + 0x144], ebx
mov ebx, dword [ebp + 0x144]
and ebx, ebx
jle 0x527fb0
push 0
push 1
push 0xb3
call fcn.0040f698
jmp 0x527fea
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x144]
and ebx, ebx
jge 0x527fd6
push 0xffffffff
push 0xffffffff
push 0xb3
call fcn.0040f698
jmp 0x527fea
push 0
push 0
push 0xb3
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xb6
cmp ebx, dword [esp]
jne 0x52808f
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x14c]
xor ebx, 1
mov dword [ebp + 0x14c], ebx
mov ebx, dword [ebp + 0x134]
and ebx, ebx
jle 0x528032
push 0
push 1
push 0xb0
call fcn.0040f698
jmp 0x52806c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x134]
and ebx, ebx
jge 0x528058
push 0xffffffff
push 0xffffffff
push 0xb0
call fcn.0040f698
jmp 0x52806c
push 0
push 0
push 0xb0
call fcn.0040f698
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x14c], 0
je 0x52808a
push 0x37
push 0x3e8
call sub.KERNEL32.dll_Beep
jmp 0x52acf5
mov ebx, 0xb7
cmp ebx, dword [esp]
jne 0x52823a
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x150]
xor ebx, 1
mov dword [ebp + 0x150], ebx
mov ebx, dword [ebp + 0x150]
and ebx, ebx
jle 0x5280d2
push 0
push 1
push 0xb7
call fcn.0040f698
jmp 0x52810c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x150]
and ebx, ebx
jge 0x5280f8
push 0xffffffff
push 0xffffffff
push 0xb7
call fcn.0040f698
jmp 0x52810c
push 0
push 0
push 0xb7
call fcn.0040f698
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x150], 0
je 0x52819a
push 0x6d
call fcn.00413d03
push eax
push 0x64
call fcn.00411299
push eax
push 0x72
call fcn.004115e3
mov eax, 0x4d7544
push eax
push 0x72
call fcn.00411896
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x234]
cmp ebx, 0x6d
je 0x52816a
mov ebx, dword [ebp + 0x38]
and ebx, ebx
jne 0x52816a
mov eax, 1
jmp 0x52816c
xor eax, eax
and eax, eax
je 0x528195
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x234], 0x6d
push 0x6d
call fcn.00413d03
push eax
push 0x72
call fcn.00411706
jmp 0x52821e
push 0x72
call fcn.004117f0
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jle 0x52821e
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x110], 0
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jle 0x5281e4
push 0
push 1
push 0xb8
call fcn.0040f698
jmp 0x52821e
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x110]
and ebx, ebx
jge 0x52820a
push 0xffffffff
push 0xffffffff
push 0xb8
call fcn.0040f698
jmp 0x52821e
push 0
push 0
push 0xb8
call fcn.0040f698
push 0x72
call fcn.004117de
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xac]
jmp 0x52acf5
mov ebx, 0xbb
cmp ebx, dword [esp]
jne 0x5282b8
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x154]
xor ebx, 1
mov dword [ebp + 0x154], ebx
mov ebx, dword [ebp + 0x154]
and ebx, ebx
jle 0x528279
push 0
push 1
push 0xbb
call fcn.0040f698
jmp 0x5282b3
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x154]
and ebx, ebx
jge 0x52829f
push 0xffffffff
push 0xffffffff
push 0xbb
call fcn.0040f698
jmp 0x5282b3
push 0
push 0
push 0xbb
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xbd
cmp ebx, dword [esp]
jne 0x52837e
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0xd4]
cmp ebx, dword [ebp + 0x15c]
jne 0x5282fb
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x15c]
xor ebx, 1
mov dword [ebp + 0x15c], ebx
call fcn.0053c20d
call fcn.00538da8
jmp 0x528319
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x14c], 0
je 0x528319
push 0x37
push 0x3e8
call sub.KERNEL32.dll_Beep
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x15c]
and ebx, ebx
jle 0x52833f
push 0
push 1
push 0xbd
call fcn.0040f698
jmp 0x528379
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x15c]
and ebx, ebx
jge 0x528365
push 0xffffffff
push 0xffffffff
push 0xbd
call fcn.0040f698
jmp 0x528379
push 0
push 0
push 0xbd
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xba
cmp ebx, dword [esp]
jne 0x5283fc
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x160]
xor ebx, 1
mov dword [ebp + 0x160], ebx
mov ebx, dword [ebp + 0x160]
and ebx, ebx
jle 0x5283bd
push 0
push 1
push 0xba
call fcn.0040f698
jmp 0x5283f7
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x160]
and ebx, ebx
jge 0x5283e3
push 0xffffffff
push 0xffffffff
push 0xba
call fcn.0040f698
jmp 0x5283f7
push 0
push 0
push 0xba
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xaf
cmp ebx, dword [esp]
jne 0x52847a
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x164]
xor ebx, 1
mov dword [ebp + 0x164], ebx
mov ebx, dword [ebp + 0x164]
and ebx, ebx
jle 0x52843b
push 0
push 1
push 0xaf
call fcn.0040f698
jmp 0x528475
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x164]
and ebx, ebx
jge 0x528461
push 0xffffffff
push 0xffffffff
push 0xaf
call fcn.0040f698
jmp 0x528475
push 0
push 0
push 0xaf
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xb4
cmp ebx, dword [esp]
jne 0x5284f8
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x148]
xor ebx, 1
mov dword [ebp + 0x148], ebx
mov ebx, dword [ebp + 0x148]
and ebx, ebx
jle 0x5284b9
push 0
push 1
push 0xb4
call fcn.0040f698
jmp 0x5284f3
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x148]
and ebx, ebx
jge 0x5284df
push 0xffffffff
push 0xffffffff
push 0xb4
call fcn.0040f698
jmp 0x5284f3
push 0
push 0
push 0xb4
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xb2
cmp ebx, dword [esp]
jne 0x528576
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x158]
xor ebx, 1
mov dword [ebp + 0x158], ebx
mov ebx, dword [ebp + 0x158]
and ebx, ebx
jle 0x528537
push 0
push 1
push 0xb2
call fcn.0040f698
jmp 0x528571
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x158]
and ebx, ebx
jge 0x52855d
push 0xffffffff
push 0xffffffff
push 0xb2
call fcn.0040f698
jmp 0x528571
push 0
push 0
push 0xb2
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0x94
cmp ebx, dword [esp]
jne 0x528638
push 0xcd
call fcn.0040bf1b
and eax, eax
je 0x5285bb
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xcd
call fcn.0040ae5c
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x78]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x78]
call fcn.0052e626
and eax, eax
je 0x528613
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 0x78]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
mov ebp, dword [0x51ecb4]
add ebp, 0x30
push dword [ebp + 0xc]
push 0xdd
call fcn.0040f6d4
call fcn.0056331b
jmp 0x528633
mov eax, 0x4d9fec
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
push 0xdd
call fcn.0040f6d4
jmp 0x52acf5
mov ebx, 0xcd
cmp ebx, dword [esp]
jne 0x528670
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xcd
call fcn.0040ae5c
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x78]
push eax
call fcn.00417d00
jmp 0x52acf5
mov ebx, 0xce
cmp ebx, dword [esp]
jne 0x52887b
jmp 0x528770
push 0xce
call fcn.0040bf1b
and eax, eax
je 0x52878a
push 0xce
call fcn.0040a812
jmp 0x52878a
push 0xcc
call fcn.0040dccc
push 0xcf
call fcn.004179f5
push eax
push 0xffffffff
call fcn.0040f5c6
push 0x51
mov ebp, dword [0x51ecb4]
add ebp, 0x30
push dword [ebp + 0xc]
mov ebp, dword [0x51ed04]
fld dword [ebp + 8]
fmul dword [0x4da1e8]
push eax
fistp dword [esp]
fld dword [ebp + 8]
fmul dword [0x4da27c]
push eax
fistp dword [esp]
push 0
push 0
push 0xcd
call fcn.004086c3
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed1c]
mov edx, dword [ebp + 0x60]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, 0x4d7ad2
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0xcd
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
push 0
push 0xdd
call fcn.00408698
push 0
push 0x94
call fcn.00408698
push 0
push 0x95
call fcn.00408698
push 0
push 0x96
call fcn.00408698
call fcn.00407910
jmp 0x52acf5
mov ebx, 0xdd
cmp ebx, dword [esp]
jne 0x52888a
jmp 0x52acf5
mov ebx, 0x91
cmp ebx, dword [esp]
jne 0x528955
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0
mov eax, 0x4d790c
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, str.__.ini__.ini
push edx
call fcn.00417eb0
call fcn.00417fd0
mov eax, str.Venmon.ini
push eax
mov eax, 0x4d62dc
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
call fcn.004011f2
add dword [esp + 8], edx
call fcn.00403b4b
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x80]
push eax
call fcn.00417d00
push dword [ebp + 0x80]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x528950
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x80]
call fcn.00544a5c
push 0
call fcn.00563ca6
call fcn.00545f29
jmp 0x52acf5
mov ebx, 0x90
cmp ebx, dword [esp]
jne 0x528aaf
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0
mov eax, 0x4d790c
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, str.__.ini__.ini
push edx
call fcn.00417eb0
call fcn.00417fd0
mov eax, str.Venmon.ini
push eax
mov eax, 0x4d64ea
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
call fcn.004011f2
add dword [esp + 8], edx
call fcn.00403b6e
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x84]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0054e94a
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x94]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push 0x18f
push 0x12d
call fcn.0054588e
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0xac]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x350]
add ebx, 0x190
push ebx
push 0x190
call fcn.0054588e
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0xb0]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0053d63e
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0xc0]
push eax
call fcn.00417d00
push dword [ebp + 0x84]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x528aaa
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x84]
call fcn.00554bde
jmp 0x52acf5
mov ebx, 0x95
cmp ebx, dword [esp]
je 0x528ac7
mov ebx, 0x96
cmp ebx, dword [esp]
jne 0x528bb7
call fcn.0041245b
mov ebx, eax
cmp ebx, 0x95
jne 0x528b04
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0x10]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
jmp 0x528b3c
call fcn.0041245b
mov ebx, eax
cmp ebx, 0x96
jne 0x528b3c
mov ebp, dword [0x51ecb4]
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov ebp, dword [0x51ecb4]
add ebp, 0x30
lea eax, [ebp + 0xc]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ecb4]
add ebp, 0x30
mov edx, dword [ebp + 0xc]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417eb0
mov edx, 0x4d7ad2
push edx
call fcn.00417eb0
call fcn.00417fd0
push 0xcd
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
mov ebp, dword [0x51ecb4]
add ebp, 0x30
push dword [ebp + 0xc]
push 0xdd
call fcn.0040f6d4
mov ebp, dword [0x51ed1c]
push dword [ebp + 0xb8]
call fcn.00537942
call fcn.0056331b
jmp 0x52acf5
mov ebx, 0x92
cmp ebx, dword [esp]
jne 0x528bdd
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0xd0], 1
mov dword [ebp + 0x38], 1
jmp 0x52acf5
mov ebx, 0x93
cmp ebx, dword [esp]
jne 0x528c62
push 1
push 0x65
call fcn.004108e5
call fcn.00537a37
mov ebp, dword [0x51ed1c]
push dword [ebp + 0xc4]
call fcn.0041201e
push edx
call fcn.00417fa0
pop edx
push eax
push 0
mov eax, 0x4d302e
push eax
mov eax, str.restart_norepair
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.00403db6
call fcn.00417fd0
mov eax, str.RunAS
push eax
push 0
call fcn.004011f2
add dword [esp + 8], edx
call sub.SHELL32.dll_ShellExecuteW
call fcn.00401220
jmp 0x52acf5
mov ebx, 0xf0
cmp ebx, dword [esp]
jne 0x528ce1
push 0xf0
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xc8]
mov ebx, dword [ebp + 0xc8]
imul ebx, ebx, 0xa
cmp ebx, dword [ebp + 0xcc]
je 0x528cdc
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0xc8]
imul ebx, ebx, 0xa
mov dword [ebp + 0xcc], ebx
push 2
mov ebx, dword [ebp + 0xcc]
imul ebx, ebx, 0xff
mov eax, ebx
mov ecx, 0x64
cdq
idiv ecx
mov ebx, eax
push ebx
push 0
push 0x64
call fcn.00411299
push eax
call sub.USER32.dll_SetLayeredWindowAttributes
jmp 0x52acf5
mov ebx, 0xf1
cmp ebx, dword [esp]
je 0x528cf5
mov ebx, 0xf2
cmp ebx, dword [esp]
jne 0x528cff
call fcn.0053a732
jmp 0x52acf5
mov ebx, 0x97
cmp ebx, dword [esp]
jne 0x528f51
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, 0x8000
and ebx, ebx
jne 0x528f3c
push 0xe0
call fcn.0040bf1b
and eax, eax
je 0x528d4c
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x48c]
mov dword [ebp + 0x444], eax
jmp 0x528f3a
push 0xde
call fcn.0040bf1b
and eax, eax
je 0x528e59
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xde
call fcn.0040ae5c
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
mov edx, dword [ebp + 0x150]
xor ecx, ecx
call fcn.00401230
jne 0x528e54
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, str.https:__
push eax
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x150]
call fcn.004166e0
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, str.http:__
push eax
push dword [ebp + 0x150]
call fcn.004166e0
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d34ac
push eax
push 1
push dword [ebp + 0x150]
call fcn.00417220
lea eax, [ebp + 0x150]
push eax
call fcn.00417d00
push 0
lea eax, [0x53bc67]
push eax
call fcn.00401778
cdq
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x348]
pop dword [eax]
pop dword [eax + 4]
jmp 0x528f3a
push 0xdf
call fcn.0040bf1b
and eax, eax
je 0x528f3a
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xdf
call fcn.0040ae5c
call fcn.00417fd0
mov edx, str.0.0.0.0
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x528f3a
push 0xdf
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x458]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe1
call fcn.0040ae5c
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x154]
push eax
call fcn.00417d00
push dword [ebp + 0x154]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d91e8
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
call fcn.00415de0
call fcn.00401210
mov edx, eax
pop ecx
call fcn.00401230
je 0x528f3a
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x154]
call fcn.004011b8
jmp 0x528f4c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x490], 1
jmp 0x52acf5
mov ebx, 0x98
cmp ebx, dword [esp]
jne 0x528fba
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, 0x8000
and ebx, ebx
jne 0x528f94
push dword [0x51ed3c]
call fcn.00414392
mov ebx, eax
and ebx, ebx
jle 0x528f92
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x474], 1
jmp 0x528fb5
push dword [0x51ed3c]
call fcn.00414392
mov ebx, eax
and ebx, ebx
jle 0x528fb5
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x474], 0xffffffff
jmp 0x52acf5
mov ebx, 0x9a
cmp ebx, dword [esp]
jne 0x529023
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, 0x8000
and ebx, ebx
jne 0x528ffd
push dword [0x51ed3c]
call fcn.00414392
mov ebx, eax
and ebx, ebx
jle 0x528ffb
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x478], 1
jmp 0x52901e
push dword [0x51ed3c]
call fcn.00414392
mov ebx, eax
and ebx, ebx
jle 0x52901e
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x478], 0xffffffff
jmp 0x52acf5
mov ebx, 0x99
cmp ebx, dword [esp]
jne 0x52905b
push dword [0x51ed3c]
call fcn.00414392
mov ebx, eax
and ebx, ebx
jle 0x529056
call fcn.00412bca
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x410]
pop dword [eax]
pop dword [eax + 4]
jmp 0x52acf5
mov ebx, 0xde
cmp ebx, dword [esp]
jne 0x52906a
jmp 0x52acf5
mov ebx, 0xdf
cmp ebx, dword [esp]
jne 0x529152
push 0xe0
call fcn.0040bf1b
and eax, eax
je 0x52914d
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x48c]
cmp ebx, 2
je 0x5290ae
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x48c]
cmp ebx, 3
je 0x5290ae
jmp 0x5290b5
mov eax, 1
jmp 0x5290b7
xor eax, eax
and eax, eax
je 0x52914d
push 0xdf
call fcn.0040ae27
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x2d0]
pop dword [eax]
pop dword [eax + 4]
push 0xe0
call fcn.0040ae27
push edx
push eax
lea eax, [ebp + 0x2d8]
pop dword [eax]
pop dword [eax + 4]
push 3
mov eax, dword [ebp + 0x2d8]
push eax
call fcn.004060a0
push eax
push 2
mov eax, dword [ebp + 0x2d0]
push eax
call fcn.004060a0
push eax
push 1
mov eax, dword [ebp + 0x2d0]
push eax
call fcn.004060a0
push eax
push 0
mov eax, dword [ebp + 0x2d0]
push eax
call fcn.004060a0
push eax
call fcn.00406153
cdq
push edx
push eax
push 0xe0
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xe0
cmp ebx, dword [esp]
jne 0x529228
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x48c]
cmp ebx, 2
je 0x529184
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x48c]
cmp ebx, 3
je 0x529184
jmp 0x52918b
mov eax, 1
jmp 0x52918d
xor eax, eax
and eax, eax
je 0x529223
push 0xdf
call fcn.0040ae27
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x2d0]
pop dword [eax]
pop dword [eax + 4]
push 0xe0
call fcn.0040ae27
push edx
push eax
lea eax, [ebp + 0x2d8]
pop dword [eax]
pop dword [eax + 4]
push 3
mov eax, dword [ebp + 0x2d0]
push eax
call fcn.004060a0
push eax
push 2
mov eax, dword [ebp + 0x2d8]
push eax
call fcn.004060a0
push eax
push 1
mov eax, dword [ebp + 0x2d8]
push eax
call fcn.004060a0
push eax
push 0
mov eax, dword [ebp + 0x2d8]
push eax
call fcn.004060a0
push eax
call fcn.00406153
cdq
push edx
push eax
push 0xdf
call fcn.0040f698
jmp 0x52acf5
mov ebx, 0xe1
cmp ebx, dword [esp]
jne 0x529237
jmp 0x52acf5
mov ebx, 0xc6
cmp ebx, dword [esp]
jne 0x529267
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x480], 0
push 0xc6
call fcn.0040ae27
push eax
pop dword [ebp + 0x484]
jmp 0x52acf5
mov ebx, 0xc5
cmp ebx, dword [esp]
jne 0x52933a
push 0xc5
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x44c]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, 0x4d3462
push eax
mov ebx, dword [ebp + 0x44c]
inc ebx
push ebx
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x14c]
call fcn.00417220
call fcn.004011f2
add dword [esp], edx
call fcn.00417560
call fcn.00401220
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x440]
call fcn.00412bca
push edx
push eax
mov ebp, dword [0x51ed14]
lea eax, [ebp + 0x410]
pop dword [eax]
pop dword [eax + 4]
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x440]
cmp ebx, 2
jge 0x529325
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x440]
imul ebx, ebx, 0x3e8
mov dword [ebp + 0x450], ebx
jmp 0x529335
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x450], 0x9c4
jmp 0x52acf5
mov ebx, 0xdc
cmp ebx, dword [esp]
jne 0x529349
jmp 0x52acf5
mov ebx, 0xa1
cmp ebx, dword [esp]
jne 0x5294b2
call fcn.00412464
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x5294ac
push 2
push 0xa1
call fcn.0040ad85
push edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x494]
cdq
push edx
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call section..text
mov dword [esp], eax
mov dword [esp + 4], edx
pop eax
pop edx
mov dword [ebp + 0x498], eax
mov ebx, dword [ebp + 0x498]
cmp ebx, 0xc
jge 0x5293c4
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 1
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x26
jge 0x5293ea
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 2
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x2e
jge 0x529410
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 3
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x33
jge 0x529433
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 4
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x38
jge 0x529456
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 5
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x3f
jge 0x529479
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 6
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x4d
jge 0x52949c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x49c], 7
jmp 0x52949c
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x498], 0
pop eax
jmp 0x52acf5
mov ebx, 0xa0
cmp ebx, dword [esp]
jne 0x5299a5
call fcn.00412464
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x5295ec
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x464]
and ebx, ebx
jne 0x5295e7
push 3
push 0xa0
call fcn.0040ad85
push edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x45c]
cdq
push edx
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call section..text
mov dword [esp], eax
mov dword [esp + 4], edx
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
mov dword [ebp + 0x430], eax
mov ebx, dword [ebp + 0x430]
push dword [0x51ed3c]
call fcn.00414392
cmp ebx, eax
jle 0x529544
jmp 0x5295d7
push 2
push 0xa0
call fcn.0040ad85
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x488]
mov ebx, dword [ebp + 0x488]
cmp ebx, dword [ebp + 0x468]
jge 0x52958c
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x430]
mov dword [ebp + 0x464], eax
mov dword [ebp + 0x488], 0
jmp 0x5295d7
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x488]
mov edi, dword [ebp + 0x468]
add edi, dword [ebp + 0x46c]
dec edi
cmp ebx, edi
jle 0x5295c5
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x464], 0
mov dword [ebp + 0x488], 0
jmp 0x5295d7
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x430]
mov dword [ebp + 0x464], eax
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x430], 0
jmp 0x52999f
mov ebx, 1
cmp ebx, dword [esp]
jne 0x529715
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x470]
and ebx, ebx
jne 0x529710
push 3
push 0xa0
call fcn.0040ad85
push edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x45c]
cdq
push edx
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call section..text
mov dword [esp], eax
mov dword [esp + 4], edx
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
mov dword [ebp + 0x430], eax
mov ebx, dword [ebp + 0x430]
push dword [0x51ed3c]
call fcn.00414392
cmp ebx, eax
jle 0x52966d
jmp 0x529700
push 2
push 0xa0
call fcn.0040ad85
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x488]
mov ebx, dword [ebp + 0x488]
cmp ebx, dword [ebp + 0x468]
jge 0x5296b5
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x430]
mov dword [ebp + 0x470], eax
mov dword [ebp + 0x488], 0
jmp 0x529700
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x488]
mov edi, dword [ebp + 0x468]
add edi, dword [ebp + 0x46c]
dec edi
cmp ebx, edi
jle 0x5296ee
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x470], 0
mov dword [ebp + 0x488], 0
jmp 0x529700
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x430]
mov dword [ebp + 0x470], eax
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x430], 0
jmp 0x52999f
mov ebx, 0x1000a
cmp ebx, dword [esp]
jne 0x5297cf
push 8
call fcn.0041245b
push eax
call fcn.0040ad85
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x529747
jl 0x529743
cmp ebx, 0
ja 0x529747
xor eax, eax
jmp 0x52974c
mov eax, 1
or eax, eax
je 0x52978e
push 4
push 0xdc
call fcn.0040ad85
push edx
push eax
push 5
push 0xdc
call fcn.0040ad85
push edx
pop edx
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
push edx
push eax
push 4
push 0xdc
call fcn.0040f54f
jmp 0x5297ca
push 4
push 0xdc
call fcn.0040ad85
push edx
push eax
push 5
push 0xdc
call fcn.0040ad85
push edx
pop edx
add dword [esp], eax
adc dword [esp + 4], edx
pop eax
pop edx
push edx
push eax
push 4
push 0xdc
call fcn.0040f54f
jmp 0x52999f
mov ebx, 0x10003
cmp ebx, dword [esp]
jne 0x52999f
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x470]
and ebx, ebx
jne 0x5297fe
mov ebx, dword [ebp + 0x464]
and ebx, ebx
jne 0x5297fe
mov eax, 1
jmp 0x529800
xor eax, eax
and eax, eax
je 0x529815
mov ebx, dword [ebp + 0x430]
and ebx, ebx
jne 0x529815
mov eax, 1
jmp 0x529817
xor eax, eax
and eax, eax
je 0x52982c
mov ebx, dword [ebp + 0x428]
and ebx, ebx
jne 0x52982c
mov eax, 1
jmp 0x52982e
xor eax, eax
and eax, eax
je 0x52999f
push 3
push 0xa0
call fcn.0040ad85
push edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x45c]
cdq
push edx
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call section..text
mov dword [esp], eax
mov dword [esp + 4], edx
add dword [esp], 1
adc dword [esp + 4], 0
pop eax
pop edx
mov dword [ebp + 0x430], eax
mov ebx, dword [ebp + 0x430]
push dword [0x51ed3c]
call fcn.00414392
cmp ebx, eax
jle 0x529895
jmp 0x52998f
push 2
push 0xa0
call fcn.0040ad85
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x488]
mov ebx, dword [ebp + 0x488]
cmp ebx, dword [ebp + 0x468]
jge 0x529944
push 2
push 0xa0
call fcn.0040ad85
push edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x494]
cdq
push edx
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call section..text
mov dword [esp], eax
mov dword [esp + 4], edx
pop eax
pop edx
mov dword [ebp + 0x498], eax
mov ebx, dword [ebp + 0x498]
cmp ebx, 0x3e
jle 0x529928
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x430]
mov dword [ebp + 0x428], eax
mov dword [ebp + 0x488], 0
jmp 0x529942
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x428], 0
mov dword [ebp + 0x488], 0
jmp 0x52998f
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x488]
mov edi, dword [ebp + 0x468]
add edi, dword [ebp + 0x46c]
dec edi
cmp ebx, edi
jle 0x52997d
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x428], 0
mov dword [ebp + 0x488], 0
jmp 0x52998f
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x430]
mov dword [ebp + 0x428], eax
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x430], 0
pop eax
jmp 0x52acf5
mov ebx, 0xa2
cmp ebx, dword [esp]
jne 0x5299b4
jmp 0x52acf5
mov ebx, 0xc8
cmp ebx, dword [esp]
jne 0x529a58
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x8c]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xc8
call fcn.0040ae27
push eax
push 0xc8
call fcn.0040ae11
call fcn.00401210
mov edx, eax
pop ecx
call fcn.00401230
jne 0x529a53
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xc8
call fcn.0040ae27
push eax
push 0xc8
call fcn.0040ae11
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x8c]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x290], 1
push 0xff0000
call fcn.005574dc
jmp 0x52acf5
mov ebx, 0xc9
cmp ebx, dword [esp]
jne 0x529a88
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x290], 1
push 0xc9
call fcn.0040ae27
push eax
pop dword [ebp + 0x2a0]
jmp 0x52acf5
mov ebx, 0xca
cmp ebx, dword [esp]
jne 0x529aa7
push 0xca
call fcn.0040ae27
push eax
call fcn.00544755
jmp 0x52acf5
mov ebx, 0x8d
cmp ebx, dword [esp]
jne 0x529af4
push 0x8d
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x529acf
jg 0x529acb
cmp ebx, 0
jb 0x529acf
xor eax, eax
jmp 0x529ad4
mov eax, 1
or eax, eax
jne 0x529aef
push 0x8d
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x294]
jmp 0x52acf5
mov ebx, 0x8e
cmp ebx, dword [esp]
jne 0x529b41
push 0x8e
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x529b1c
jg 0x529b18
cmp ebx, 0
jb 0x529b1c
xor eax, eax
jmp 0x529b21
mov eax, 1
or eax, eax
jne 0x529b3c
push 0x8e
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x294]
jmp 0x52acf5
mov ebx, 0x9b
cmp ebx, dword [esp]
jne 0x529c5b
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x188]
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe2
call fcn.0040ae5c
call fcn.004011f2
add dword [esp], edx
call fcn.00417440
call fcn.00401210
mov edx, eax
pop ecx
call fcn.00401230
jne 0x529c56
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe2
call fcn.0040ae5c
call fcn.004011f2
add dword [esp], edx
call fcn.00417440
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x188]
push eax
call fcn.00417d00
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x298]
and ebx, ebx
jne 0x529c1e
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x188]
mov edx, 0x4d302e
pop ecx
call fcn.00401230
jne 0x529c1e
mov eax, 1
jmp 0x529c20
xor eax, eax
and eax, eax
je 0x529c36
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x298], 0xffffffff
jmp 0x529c56
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x298]
and ebx, ebx
jle 0x529c56
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x298], 0xffffffff
jmp 0x52acf5
mov ebx, 0x9c
cmp ebx, dword [esp]
jne 0x529d43
mov eax, 0x4d302e
push eax
push 0xe2
call fcn.0040f6d4
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x188]
call fcn.004011b8
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x298]
and ebx, ebx
jle 0x529cc1
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x298]
and ebx, ebx
jle 0x529cbf
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x298], 0xffffffff
jmp 0x529d3e
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, 0x8000
cmp ebx, 0x8000
jne 0x529d3e
push 0xffffffff
push 0xffffffff
push 0xc8
call fcn.0040f698
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x8c]
call fcn.004011b8
push 0xff0000
call fcn.005574dc
push 0x8d
call fcn.004078ed
push dword [0x51ed24]
call fcn.00414058
push 0x8f
call fcn.004078ed
mov eax, 0x4d302e
push eax
push 0xe6
call fcn.0040f6d4
jmp 0x52acf5
mov ebx, 0xe2
cmp ebx, dword [esp]
jne 0x529d9c
push 0xa6
call fcn.0040bf1b
and eax, eax
je 0x529d97
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xe2
call fcn.0040ae5c
call fcn.00417fd0
mov edx, 0x4d302e
call fcn.00401210
mov ecx, eax
call fcn.00401230
jne 0x529d97
push 0xa6
call fcn.0040a812
jmp 0x52acf5
mov ebx, 0xea
cmp ebx, dword [esp]
jne 0x529ddf
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xea
call fcn.0040ae5c
call fcn.004011f2
add dword [esp], edx
call fcn.00404396
call fcn.00401220
jmp 0x52acf5
mov ebx, 0xeb
cmp ebx, dword [esp]
jne 0x529e22
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 0xeb
call fcn.0040ae5c
call fcn.004011f2
add dword [esp], edx
call fcn.00404396
call fcn.00401220
jmp 0x52acf5
mov ebx, 0x9d
cmp ebx, dword [esp]
jne 0x529e51
call fcn.00412464
push eax
mov ebx, 0x3338
cmp ebx, dword [esp]
je 0x529e46
mov ebx, 2
cmp ebx, dword [esp]
jne 0x529e4b
call fcn.0056331b
pop eax
jmp 0x52acf5
mov ebx, 0xa4
cmp ebx, dword [esp]
jne 0x529eac
call fcn.00412464
push eax
mov ebx, 0x3338
cmp ebx, dword [esp]
je 0x529e75
mov ebx, 2
cmp ebx, dword [esp]
jne 0x529ea6
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.0054f64a
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0xc8]
push eax
call fcn.00417d00
push edx
call fcn.00417fa0
pop edx
push eax
call fcn.00556ac0
call fcn.00401220
pop eax
jmp 0x52acf5
mov ebx, 0x9e
cmp ebx, dword [esp]
je 0x529eca
mov ebx, 0x9f
cmp ebx, dword [esp]
je 0x529eca
mov ebx, 0xd8
cmp ebx, dword [esp]
jne 0x529ecf
jmp 0x52acf5
mov ebx, 0xa3
cmp ebx, dword [esp]
jne 0x529fd1
call fcn.00412464
push eax
mov ebx, 0x10003
cmp ebx, dword [esp]
jne 0x529fcb
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x274]
call fcn.0041245b
cmp ebx, eax
jne 0x529f44
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x278]
push 2
call fcn.0041245b
push eax
call fcn.0040ad85
mov ecx, ebx
sar ecx, 0x1f
push ecx
push ebx
push edx
pop edx
pop ebx
pop edi
cmp ebx, eax
jne 0x529f39
cmp edi, edx
jne 0x529f39
xor eax, eax
jmp 0x529f3e
mov eax, 1
or eax, eax
jne 0x529f44
jmp 0x529f4b
mov eax, 1
jmp 0x529f4d
xor eax, eax
and eax, eax
je 0x529fcb
call fcn.0041245b
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x274]
push 2
push dword [ebp + 0x274]
call fcn.0040ad85
push eax
pop dword [ebp + 0x278]
push edx
call fcn.00417fa0
pop edx
push eax
push 0x14
push edx
call fcn.00417fa0
pop edx
push eax
push dword [ebp + 0x318]
push dword [ebp + 0x274]
call fcn.0040abb3
push eax
call fcn.004127fd
mov ebx, eax
sub ebx, dword [ebp + 0x278]
push ebx
push 0xa3
call fcn.00546cb3
call fcn.004011f2
add dword [esp], edx
call fcn.00556594
call fcn.00401220
pop eax
jmp 0x52acf5
mov ebx, 0x12d
cmp ebx, dword [esp]
jg 0x529fe5
mov ebx, 0x18f
cmp ebx, dword [esp]
jge 0x52a02f
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x358]
cmp ebx, dword [esp]
jg 0x52a00e
mov ebx, dword [ebp + 0x358]
push dword [0x51ecfc]
call fcn.004131c6
add ebx, eax
cmp ebx, dword [esp]
jge 0x52a02f
mov ebx, dword [ebp + 0x2f8]
cmp ebx, dword [esp]
jg 0x52a37a
mov ebx, dword [ebp + 0x2f8]
add ebx, 0x50
cmp ebx, dword [esp]
jl 0x52a37a
call fcn.00412464
push eax
mov ebx, 0x10003
cmp ebx, dword [esp]
jne 0x52a135
push dword [0x4e8d7c]
call dword [0x51ed78]
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x274]
call fcn.0041245b
cmp ebx, eax
jne 0x52a0a2
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x278]
push 2
call fcn.0041245b
push eax
call fcn.0040ad85
mov ecx, ebx
sar ecx, 0x1f
push ecx
push ebx
push edx
pop edx
pop ebx
pop edi
cmp ebx, eax
jne 0x52a097
cmp edi, edx
jne 0x52a097
xor eax, eax
jmp 0x52a09c
mov eax, 1
or eax, eax
jne 0x52a0a2
jmp 0x52a0a9
mov eax, 1
jmp 0x52a0ab
xor eax, eax
and eax, eax
je 0x52a124
call fcn.0041245b
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x274]
push 2
push dword [ebp + 0x274]
call fcn.0040ad85
push eax
pop dword [ebp + 0x278]
push edx
call fcn.00417fa0
pop edx
push eax
push 0x14
push edx
call fcn.00417fa0
pop edx
push eax
push dword [ebp + 0x274]
call fcn.0040abb3
push eax
call fcn.004127fd
mov ebx, eax
sub ebx, dword [ebp + 0x278]
push ebx
push dword [ebp + 0x274]
call fcn.0053cc07
call fcn.004011f2
add dword [esp], edx
call fcn.00556594
call fcn.00401220
push dword [0x4e8d7c]
call dword [0x51ed7c]
jmp 0x52a374
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x52a141
jmp 0x52a374
mov ebx, 2
cmp ebx, dword [esp]
jne 0x52a150
jmp 0x52a374
mov ebx, 3
cmp ebx, dword [esp]
jne 0x52a15f
jmp 0x52a374
mov ebx, 1
cmp ebx, dword [esp]
jne 0x52a374
call fcn.0041245b
mov ebx, eax
mov ebp, dword [0x51ed0c]
cmp ebx, dword [ebp + 0x2f8]
jl 0x52a19d
call fcn.0041245b
mov ebx, eax
mov edi, dword [ebp + 0x2f8]
add edi, 0x50
cmp ebx, edi
jg 0x52a19d
xor eax, eax
and eax, eax
je 0x52a1d0
pop eax
jmp 0x52acf5
mov ebx, 0xc0
cmp ebx, dword [esp]
jne 0x52a3a0
push 0xc0
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x2f4]
jmp 0x52acf5
mov ebx, 0xbe
cmp ebx, dword [esp]
jne 0x52a49d
push 0xbe
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x1e8]
mov ebx, dword [ebp + 0x1e8]
and ebx, ebx
jle 0x52a472
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 1
mov ebp, dword [0x51ed0c]
push dword [ebp + 0x1e8]
mov ebp, dword [0x51ed1c]
push dword [ebp + 0x9c]
call fcn.00416120
call fcn.004011f2
add dword [esp], edx
call fcn.004159a0
call fcn.00401220
mov ebx, eax
add ebx, 0xffffffc0
push ebx
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x1ec]
mov ebx, dword [ebp + 0x1ec]
mov ebp, dword [0x51ecbc]
imul ebx, ebx, 0x510
add ebp, ebx
lea edx, [ebp + 0x2a0]
push edx
call fcn.00417fa0
pop edx
push eax
push 0x10
push edx
call fcn.00417e50
mov ebp, dword [0x51ed1c]
lea eax, [ebp + 0x144]
push eax
call fcn.00417d00
jmp 0x52a498
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x1ec], 0xffffffff
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x144]
call fcn.004011b8
jmp 0x52acf5
mov ebx, 0xbf
cmp ebx, dword [esp]
jne 0x52a4c3
push 0xbf
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x1f4]
jmp 0x52acf5
mov ebx, 0xc2
cmp ebx, dword [esp]
jne 0x52a60d
push 0xc2
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x210]
mov ebx, dword [ebp + 0x210]
and ebx, ebx
jle 0x52a5e2
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push 3
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x210]
imul ebx, ebx, 3
add ebx, 0xfffffffe
push ebx
mov ebp, dword [0x51ed1c]
push dword [ebp + 0xa0]
call fcn.00416120
call fcn.004011f2
add dword [esp], edx
call fcn.00417560
call fcn.00401220
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x214]
mov dword [0x4e8c70], 1
jmp 0x52a562
push dword [0x51ecd4]
call fcn.004131c6
cmp eax, dword [0x4e8c70]
jl 0x52a5e0
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x214]
mov edi, dword [0x4e8c70]
mov ebp, dword [0x51ecd4]
imul edi, edi, 0x450
add ebp, edi
cmp ebx, dword [ebp]
jne 0x52a5d8
jmp 0x52a608
mov ebp, dword [0x51ed0c]
mov dword [ebp + 0x214], 0xffffffff
mov ebp, dword [0x51ed1c]
mov edx, 0x4d302e
lea ecx, [ebp + 0x148]
call fcn.004011b8
jmp 0x52acf5
mov ebx, 0xc3
cmp ebx, dword [esp]
jne 0x52a633
push 0xc3
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x138]
jmp 0x52acf5
mov ebx, 0xc4
cmp ebx, dword [esp]
jne 0x52a65e
push 0xc4
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x48c]
call fcn.00543e8d
jmp 0x52acf5
mov ebx, 0xc7
cmp ebx, dword [esp]
jne 0x52ab1b
push 0xc7
call fcn.0040ae27
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0xe0]
push dword [ebp + 0xe0]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x52a6f0
mov ebx, 0xc1
cmp ebx, dword [esp]
jne 0x52abbc
pop eax
jmp 0x52b442
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x52af9e
call fcn.0041246d
push eax
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x52ad6f
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x160], 0
je 0x52ad62
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x4e8cc0], eax
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
jne 0x52ad58
push 1
push 0x64
call fcn.004108e5
jmp 0x52ad60
add esp, 8
jmp 0x52b458
jmp 0x52ad6a
add esp, 8
jmp 0x52b458
jmp 0x52af98
mov ebx, 0x65
cmp ebx, dword [esp]
jne 0x52af98
push 1
push 0x65
call fcn.004108e5
push 0xcd
call fcn.0040bf1b
and eax, eax
je 0x52af91
push 0xcd
call fcn.0040bf1b
and eax, eax
je 0x52adb8
push 0xcd
call fcn.0040a812
jmp 0x52adb8
push 0xcc
call fcn.0040dccc
push 0xd3
call fcn.004179f5
push eax
push 0xffffffff
call fcn.0040f5c6
push 0x800000
mov eax, 0x4d67fc
push eax
push dword [0x51ed44]
call fcn.00412660
mov ebp, eax
push dword [ebp]
mov ebp, dword [0x51ed04]
fld dword [ebp + 8]
fmul dword [0x4da1e8]
push eax
fistp dword [esp]
fld dword [ebp + 8]
fmul dword [0x4da27c]
push eax
fistp dword [esp]
push 0
push 0
push 0xce
call fcn.0040620b
push 1
push 0xdd
call fcn.00408698
push 1
push 0x94
call fcn.00408698
push 1
push 0x95
call fcn.00408698
push 1
push 0x96
call fcn.00408698
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0x130]
and ebx, ebx
jne 0x52ae81
push 1
push 0xce
call fcn.00408698
call fcn.00407910
jmp 0x52af91
call fcn.00537a37
jmp 0x52af98
pop eax
jmp 0x52b442
mov ebx, 0x3334
cmp ebx, dword [esp]
jne 0x52b054
call fcn.0041246d
push eax
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x52b04e
push 0
push 0x64
call fcn.00410fda
push 0
push 0x65
call fcn.004108e5
call fcn.00538da8
push 0x7f
call fcn.0040ae27
push edx
push eax
pop ebx
pop edi
cmp ebx, 7
jne 0x52affb
cmp edi, 0
je 0x52afff
xor eax, eax
jmp 0x52b004
mov eax, 1
or eax, eax
je 0x52b030
push 0
push 0
push 0x7f
call fcn.0040f698
push 0
push 7
push 0x7f
call fcn.0040f698
push 1
push 0x65
call fcn.004110a3
push 0
push 0x65
call fcn.004110a3
pop eax
jmp 0x52b442
mov ebx, 0x3333
cmp ebx, dword [esp]
jne 0x52b0be
call fcn.0041246d
push eax
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x52b09f
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x154], 0
je 0x52b08e
push 1
push 0x64
call fcn.004108e5
jmp 0x52b09d
push 0x20000000
push 0x64
call fcn.00410fda
jmp 0x52b0b8
mov ebx, 0x65
cmp ebx, dword [esp]
jne 0x52b0b8
push 1
push 0x65
call fcn.004108e5
pop eax
jmp 0x52b442
mov ebx, 0x332e
cmp ebx, dword [esp]
jne 0x52b1a4
call fcn.00412464
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x52b110
mov ebp, dword [0x51ed0c]
cmp dword [ebp + 0x10c], 0
je 0x52b10b
push 0
push 0x64
call fcn.004108e5
push 0
push 0x64
call fcn.00410fda
call fcn.00538da8
jmp 0x52b19e
mov ebx, 2
cmp ebx, dword [esp]
jne 0x52b13f
push 0
push 0x64
call fcn.004108e5
push 0
push 0x64
call fcn.00410fda
call fcn.00538da8
jmp 0x52b19e
mov ebx, 1
cmp ebx, dword [esp]
jne 0x52b19e
push 0
push 0x65
call fcn.004108e5
push 0
push 0
push 0x7f
call fcn.0040f698
push 0
push 7
push 0x7f
call fcn.0040f698
push 1
push 0x65
call fcn.004110a3
push 0
push 0x65
call fcn.004110a3
pop eax
jmp 0x52b442
mov ebx, 0x333d
cmp ebx, dword [esp]
jne 0x52b442
call fcn.0041246d
push eax
mov ebx, 0x64
cmp ebx, dword [esp]
jne 0x52b2ff
push 0x64
call fcn.00411373
mov ebx, eax
cmp ebx, 0xffffffff
jle 0x52b1ef
push 0x64
call fcn.004113e0
mov ebx, eax
cmp ebx, 0xffffffff
jle 0x52b1ef
mov eax, 1
jmp 0x52b1f1
xor eax, eax
and eax, eax
je 0x52b2fa
push 0x64
call fcn.00411373
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x17c]
push 0x64
call fcn.004113e0
push eax
pop dword [ebp + 0x180]
push 0xe9
call fcn.0040bf1b
and eax, eax
je 0x52b2fa
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x184]
cdq
push edx
push eax
call fcn.00416b50
mov edx, 0x4d825a
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, dword [ebp + 0x188]
cdq
push edx
push eax
call fcn.00416b50
pop eax
mov edx, 0x4d8a94
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, dword [ebp + 0x17c]
cdq
push edx
push eax
call fcn.00416b50
pop eax
mov edx, 0x4d825a
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, dword [ebp + 0x180]
cdq
push edx
push eax
call fcn.00416b50
pop eax
call fcn.00417fd0
push 0xe9
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
jmp 0x52b441
mov ebx, 0x65
cmp ebx, dword [esp]
jne 0x52b441
push 0x65
call fcn.00411373
mov ebx, eax
cmp ebx, 0xffffffff
jle 0x52b336
push 0x65
call fcn.004113e0
mov ebx, eax
cmp ebx, 0xffffffff
jle 0x52b336
mov eax, 1
jmp 0x52b338
xor eax, eax
and eax, eax
je 0x52b441
push 0x65
call fcn.00411373
push eax
mov ebp, dword [0x51ed0c]
pop dword [ebp + 0x184]
push 0x65
call fcn.004113e0
push eax
pop dword [ebp + 0x188]
push 0xe9
call fcn.0040bf1b
and eax, eax
je 0x52b441
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov ebp, dword [0x51ed0c]
mov eax, dword [ebp + 0x184]
cdq
push edx
push eax
call fcn.00416b50
mov edx, 0x4d825a
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, dword [ebp + 0x188]
cdq
push edx
push eax
call fcn.00416b50
pop eax
mov edx, 0x4d8a94
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, dword [ebp + 0x17c]
cdq
push edx
push eax
call fcn.00416b50
pop eax
mov edx, 0x4d825a
push edx
call fcn.00417eb0
push edx
call fcn.00417fa0
pop edx
push eax
push edx
call fcn.00417fa0
pop edx
push eax
mov eax, dword [ebp + 0x180]
cdq
push edx
push eax
call fcn.00416b50
pop eax
call fcn.00417fd0
push 0xe9
call fcn.004011f2
add dword [esp + 4], edx
call fcn.0040f6d4
call fcn.00401220
pop eax
pop eax
mov ebp, dword [0x51ed0c]
mov ebx, dword [ebp + 0xd0]
cmp ebx, 1
jne 0x525c5e
call fcn.00545ffe
push 0
call 0x52b47c
call fcn.00417f60
push dword [0x4e8c1c]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00401897
call fcn.004043ad
call fcn.00404c65
call fcn.00404e87
call fcn.00405f94
call fcn.0040a92b
call sub.ole32.dll_OleUninitialize
call fcn.00410825
call fcn.004117d2
call fcn.00411ca1
call fcn.00412110
call fcn.004125c4
call fcn.00412bb9
call fcn.00413cc5
call fcn.00414bda
call fcn.00415990
call fcn.00417a52
call fcn.00417ce9
call fcn.00417760
ret