Function at 0x450b5b
Capabilities:
Accept command line arguments
Check os version
Create directory
Delete registry key
Delete registry value
Extract resource via kernel32 functions
Get disk information
Get geographical location
Get graphical window text
Get system information on windows
Identify system language via api
Modify service
Query environment variable
Query or enumerate registry key
Read .ini file
Set environment variable
Set registry value
Set thread local storage value
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4594
call fcn.004c8a80
mov dword [ebp - 0x3a0], 0xada439be
mov dword [ebp - 0xd90], 0
jmp 0x450b8b
mov eax, dword [ebp - 0xd90]
inc eax
mov dword [ebp - 0xd90], eax
cmp dword [ebp - 0xd90], 4
jge 0x450ba7
mov eax, dword [ebp - 0xd90]
mov dword [ebp + eax*4 - 0x33b4], 4
jmp 0x450b7e
mov dword [ebp - 0x3a0], 3
jmp 0x450bc0
mov eax, dword [ebp - 0x3a0]
dec eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0
jl 0x450ce4
mov dword [ebp - 0x34f4], 0x33582f80
mov dword [ebp - 0x34f0], 0x33582f80
mov dword [ebp - 0x34ec], 0x33582f80
mov dword [ebp - 0x34e8], 0x33582f80
mov dword [ebp - 0xd98], 0
jmp 0x450c0e
mov eax, dword [ebp - 0xd98]
inc eax
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0xd98], 3
jge 0x450c2a
mov eax, dword [ebp - 0xd98]
mov dword [ebp + eax*4 - 0x2fe4], 0x4cdb8faa
jmp 0x450c01
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2fe4], 0
jmp 0x450c58
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2fe4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2fe4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2fe4], 3
jg 0x450cc5
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp + eax*4 - 0x33b4], 0
je 0x450c85
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x33b4], 0
or eax, 0xffffffff
je 0x450ca6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fe4], 0
je 0x450ca6
mov dword [ebp - 0x1380], 1
jmp 0x450cad
and dword [ebp - 0x1380], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1380]
mov dword [ebp + eax - 0x34f4], ecx
jmp 0x450c3d
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [ebp - 0x3a0]
mov eax, dword [ebp + eax*4 - 0x33b4]
mov dword [ebp + ecx*4 - 0x33b4], eax
jmp 0x450bb3
mov dword [ebp - 0x790], 0x3342eb9
mov dword [ebp - 0x28ec], 0x9acd4098
mov dword [ebp - 0x2db8], 7
mov dword [ebp - 0x2700], 0x48e01afe
mov dword [ebp - 0xb04], 0xdc630de2
mov dword [ebp - 0x2da8], 0x1495dd68
mov dword [ebp - 0x864], 1
mov dword [ebp - 0x200], 0
jmp 0x450d43
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x450d5f
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x40d8], 0x7b7e80d6
jmp 0x450d36
mov dword [ebp - 0x200], 0
jmp 0x450d78
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x450d94
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xfc4], 0xfffffff7
jmp 0x450d6b
mov dword [ebp - 0x790], 0
jmp 0x450dad
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0x13
jne 0x4511b0
mov dword [ebp - 0xfcc], 0xffffffff
mov dword [ebp - 0x6b4], 0xfffffff7
mov dword [ebp - 0x3654], 0xffffffff
mov dword [ebp - 0x2dc0], 0xae2718b9
mov dword [ebp - 0x878], 0xffffffff
mov dword [ebp - 0xe04], 0xfea44e0c
mov dword [ebp - 0xfb4], 0x49cf94a2
mov dword [ebp - 0x16c], 0
jmp 0x450e19
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x450e35
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x3c1c], 0xf76ec751
jmp 0x450e0c
mov dword [ebp - 0x16c], 0
jmp 0x450e4e
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x450e6a
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xfbc], 0xffffffff
jmp 0x450e41
mov eax, dword [ebp - 0xe04]
dec eax
mov dword [ebp - 0xe04], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfbc]
cmp dword [ebp - 0xe04], eax
jle 0x450e98
mov dword [ebp - 0x26a8], 1
jmp 0x450e9f
and dword [ebp - 0x26a8], 0
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x28ec]
cmp eax, dword [ebp - 0x26a8]
je 0x450ebf
mov dword [ebp - 0x26c0], 1
jmp 0x450ec6
and dword [ebp - 0x26c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2da8]
cmp dword [ebp + eax - 0xfc4], ecx
jge 0x450ef7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfbc], 0
je 0x450ef7
mov dword [ebp - 0x26b0], 1
jmp 0x450efe
and dword [ebp - 0x26b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc4]
cmp dword [ebp - 0x26b0], eax
je 0x450f1f
mov dword [ebp - 0x2db0], 1
jmp 0x450f26
and dword [ebp - 0x2db0], 0
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x3610], eax
cmp dword [ebp - 0xfcc], 2
je 0x450f47
mov dword [ebp - 0x26b8], 1
jmp 0x450f4e
and dword [ebp - 0x26b8], 0
mov eax, dword [ebp - 0x26b8]
mov dword [ebp - 0xfb4], eax
cmp dword [ebp - 0xfb4], 0
je 0x450f81
cmp dword [ebp - 0x2db8], 0
je 0x450f81
cmp dword [ebp - 0xfb4], 0
je 0x450f81
mov dword [ebp - 0x26c8], 1
jmp 0x450f88
and dword [ebp - 0x26c8], 0
mov eax, dword [ebp - 0x26c0]
cmp eax, dword [ebp - 0x26c8]
je 0x450fa2
mov dword [ebp - 0x26d8], 1
jmp 0x450fa9
and dword [ebp - 0x26d8], 0
mov eax, dword [ebp - 0xfcc]
mov dword [ebp - 0x26d0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26d0]
mov dword [ebp + eax - 0x3c1c], ecx
mov eax, dword [ebp - 0x26d0]
cmp eax, dword [ebp - 0x26d8]
je 0x450fe2
mov dword [ebp - 0x26e0], 1
jmp 0x450fe9
and dword [ebp - 0x26e0], 0
cmp dword [ebp - 0x26e0], 0
jg 0x450ffe
mov dword [ebp - 0x26e8], 1
jmp 0x451005
and dword [ebp - 0x26e8], 0
cmp dword [ebp - 0x26e8], 0xfffffffd
jbe 0x45101a
mov dword [ebp - 0x26f0], 1
jmp 0x451021
and dword [ebp - 0x26f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfbc]
add eax, dword [ebp - 0x26f0]
je 0x451052
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfc4], 0
je 0x451052
mov dword [ebp - 0x26f8], 1
jmp 0x451059
and dword [ebp - 0x26f8], 0
mov eax, dword [ebp - 0x2700]
add eax, dword [ebp - 0x26f8]
je 0x4510a1
mov dword [ebp - 0x864], 0
jmp 0x451080
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 3
jge 0x45109c
mov eax, dword [ebp - 0x864]
mov dword [ebp + eax*4 - 0x3c1c], 0xffffffff
jmp 0x451073
jmp 0x45112b
mov dword [ebp - 0x6b4], 0
jmp 0x4510ba
mov eax, dword [ebp - 0x6b4]
dec eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 0xffffffe2
jle 0x45112b
mov dword [ebp - 0x878], 0x14
jmp 0x4510dc
mov eax, dword [ebp - 0x878]
dec eax
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0xffffffeb
jg 0x451129
mov dword [ebp - 0xb04], 0xb
jmp 0x4510fe
mov eax, dword [ebp - 0xb04]
inc eax
mov dword [ebp - 0xb04], eax
cmp dword [ebp - 0xb04], 0x1b
je 0x451127
mov byte [ebp - 0x3a9], 0
movzx eax, byte [ebp - 0x3a9]
test eax, eax
je 0x451125
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
jmp 0x4510f1
jmp 0x4510cf
jmp 0x4510ad
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40d8]
cmp dword [ebp - 0x2700], eax
je 0x45114c
mov dword [ebp - 0x2708], 1
jmp 0x451153
and dword [ebp - 0x2708], 0
cmp dword [ebp - 0x2708], 0x8f1d
jle 0x45116b
mov dword [ebp - 0x2710], 1
jmp 0x451172
and dword [ebp - 0x2710], 0
mov eax, dword [ebp - 0x2dc0]
sub eax, dword [ebp - 0xfcc]
cmp eax, dword [ebp - 0x2710]
jg 0x451192
mov dword [ebp - 0x2718], 1
jmp 0x451199
and dword [ebp - 0x2718], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2718]
mov dword [ebp + eax - 0x40d8], ecx
jmp 0x450da0
mov dword [ebp - 0x78c], 0xb3ae3556
mov dword [ebp - 0x354], 0x111738ab
mov dword [ebp - 0x78c], 0
jmp 0x4511dd
mov eax, dword [ebp - 0x78c]
inc eax
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x78c], 1
jne 0x45154b
mov dword [ebp - 0x224], 0
jmp 0x451203
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x45121f
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x2848], 0x8d52
jmp 0x4511f6
mov dword [ebp - 0x224], 0
jmp 0x451238
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x451254
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x41bc], 2
jmp 0x45122b
mov dword [ebp - 0x354], 0x73eb905d
mov dword [ebp - 0x354], 1
jmp 0x451277
mov eax, dword [ebp - 0x354]
dec eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
jl 0x451546
mov dword [ebp - 0x2e4], 0x45625132
mov dword [ebp - 0xfdc], 1
mov dword [ebp - 0x2e4], 1
jmp 0x4512b1
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jl 0x45152f
mov dword [ebp - 0x3a8], 0xd66a0756
mov dword [ebp - 0xfd4], 0xffff
mov dword [ebp - 0xb0c], 0xfffffffa
mov dword [ebp - 0x3a8], 0
jmp 0x4512f5
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 1
jg 0x4514f6
cmp dword [ebp - 0x2e4], 0
jne 0x45131b
push 7
pop eax
test eax, eax
jne 0x45131b
and dword [ebp - 0x2720], 0
jmp 0x451325
mov dword [ebp - 0x2720], 1
mov eax, dword [ebp - 0xfd4]
dec eax
mov dword [ebp - 0xfd4], eax
mov dword [ebp - 0xfdc], 0xffffffff
mov eax, dword [ebp - 0x2720]
sub eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0xfdc]
sub ecx, eax
mov eax, dword [ebp - 0xfd4]
imul eax, ecx
test eax, eax
jne 0x451378
cmp dword [ebp - 0x2e4], 0
jne 0x451378
cmp dword [ebp - 0xfdc], 0
jne 0x451378
and dword [ebp - 0x2728], 0
jmp 0x451382
mov dword [ebp - 0x2728], 1
cmp dword [ebp - 0x2728], 0x91a8
je 0x45139a
mov dword [ebp - 0x2730], 1
jmp 0x4513a1
and dword [ebp - 0x2730], 0
cmp dword [ebp - 0x2730], 1
je 0x4513b6
mov dword [ebp - 0x2738], 1
jmp 0x4513bd
and dword [ebp - 0x2738], 0
imul eax, dword [ebp - 0x2738], 0x53fd
cmp eax, dword [ebp - 0x2e4]
jl 0x4513db
mov dword [ebp - 0xffc], 1
jmp 0x4513e2
and dword [ebp - 0xffc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xffc]
mov dword [ebp + eax - 0x41bc], ecx
mov eax, dword [ebp - 0x3a8]
mov eax, dword [ebp + eax*4 - 0x2848]
add eax, dword [ebp - 0xffc]
cmp eax, dword [ebp - 0x354]
jge 0x45141c
mov dword [ebp - 0x2740], 1
jmp 0x451423
and dword [ebp - 0x2740], 0
mov eax, dword [ebp - 0x3a8]
mov eax, dword [ebp + eax*4 - 0x2848]
shl eax, 2
cmp eax, dword [ebp - 0x2740]
jle 0x451447
mov dword [ebp - 0x2748], 1
jmp 0x45144e
and dword [ebp - 0x2748], 0
cmp dword [ebp - 0x2748], 0x7c77
jl 0x4514ac
mov dword [ebp - 0x880], 0
jmp 0x451473
mov eax, dword [ebp - 0x880]
inc eax
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 3
jge 0x45148f
mov eax, dword [ebp - 0x880]
mov dword [ebp + eax*4 - 0x3c2c], 0xf5291260
jmp 0x451466
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c2c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c2c], eax
jmp 0x4514f1
mov dword [ebp - 0xb0c], 1
jmp 0x4514c5
mov eax, dword [ebp - 0xb0c]
dec eax
mov dword [ebp - 0xb0c], eax
cmp dword [ebp - 0xb0c], 0
jl 0x4514f1
mov byte [ebp - 0x530], 0
movzx eax, byte [ebp - 0x530]
test eax, eax
je 0x4514ef
push 0
push 0x8ef
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
jmp 0x4514b8
jmp 0x4512e8
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
cmp dword [ebp + eax - 0x2848], ecx
jne 0x451517
mov dword [ebp - 0x2750], 1
jmp 0x45151e
and dword [ebp - 0x2750], 0
mov eax, dword [ebp - 0x2750]
mov dword [ebp - 0x3a8], eax
jmp 0x4512a4
mov eax, dword [ebp - 0x354]
cmp dword [ebp + eax*4 - 0x2848], 0
je 0x451541
jmp 0x451546
jmp 0x45126a
jmp 0x4511d0
mov dword [ebp - 0x354], 0x314648a5
mov dword [ebp - 0x3474], 0x928c176b
mov dword [ebp - 0x3470], 0x928c176b
mov dword [ebp - 0x346c], 0x928c176b
mov dword [ebp - 0x3468], 0x928c176b
mov dword [ebp - 0x888], 0xfffffffb
mov dword [ebp - 0x888], 3
jmp 0x4515a0
mov eax, dword [ebp - 0x888]
dec eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0
jl 0x451646
mov dword [ebp - 0xb14], 0
jmp 0x4515c6
mov eax, dword [ebp - 0xb14]
inc eax
mov dword [ebp - 0xb14], eax
cmp dword [ebp - 0xb14], 1
jge 0x4515e2
mov eax, dword [ebp - 0xb14]
mov dword [ebp + eax*4 - 0x890], 0
jmp 0x4515b9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x890], 0
jmp 0x451610
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x890]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x890], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x890], 3
jg 0x451641
mov byte [ebp - 0x4c1], 0
movzx eax, byte [ebp - 0x4c1]
test eax, eax
je 0x45163f
push 0x200a
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x4515f5
jmp 0x451593
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3474], 0
mov dword [ebp - 0x3c8], 0xada439be
mov dword [ebp - 0x6bc], 0x3bd6525
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x34], 0
jmp 0x451685
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x45169b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1134], 0xfffffff8
jmp 0x45167e
mov dword [ebp - 0x34], 0
jmp 0x4516ab
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4516c1
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x33d4], 0
jmp 0x4516a4
mov dword [ebp - 0x34], 0
jmp 0x4516d1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x4516e7
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x105c], 0xfad5
jmp 0x4516ca
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x33d4]
mov dword [ebp - 0x3618], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1134], 0x4320e32c
push 0xfffffffffffffffe
pop eax
sub eax, 0x4320e32c
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x33d4]
mov dword [ebp - 0x2758], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2758]
mov dword [ebp + eax - 0x33d4], ecx
mov eax, dword [ebp - 0x2758]
mov dword [ebp - 0x6bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1134]
mov dword [ebp - 0x174], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
neg eax
add eax, 5
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x105c]
jle 0x451786
mov dword [ebp - 0x2760], 1
jmp 0x45178d
and dword [ebp - 0x2760], 0
imul eax, dword [ebp - 0x2760], 0x17f4
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x105c]
je 0x451900
mov eax, 0xffff
test eax, eax
je 0x451900
mov dword [ebp - 0x1004], 0x4fa72d50
mov dword [ebp - 0x2dd0], 0xa7967268
mov dword [ebp - 0x2dd8], 0x79d62bf
mov dword [ebp - 0x2de0], 0xffffffff
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1004]
cmp dword [ebp + eax - 0x1134], ecx
je 0x451800
mov dword [ebp - 0x2768], 1
jmp 0x451807
and dword [ebp - 0x2768], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
cmp dword [ebp - 0x2768], eax
jg 0x451838
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1134], 0
je 0x451838
mov dword [ebp - 0x2770], 1
jmp 0x45183f
and dword [ebp - 0x2770], 0
mov eax, dword [ebp - 0x1004]
mov dword [ebp - 0x3620], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
mov dword [ebp - 0x3628], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
mov dword [ebp - 0x3630], eax
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x33d4], 1
xor eax, eax
inc eax
neg eax
add eax, dword [ebp - 0x2770]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x105c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1134]
sub eax, dword [ebp - 0x1004]
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 0xffffffff
jb 0x4518c9
mov dword [ebp - 0x2dc8], 1
jmp 0x4518d0
and dword [ebp - 0x2dc8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1134]
mov dword [ebp - 0x3638], eax
mov eax, dword [ebp - 0x2dd0]
mov dword [ebp - 0x3640], eax
mov eax, dword [ebp - 0x2dd8]
mov dword [ebp - 0x2de0], eax
jmp 0x451b57
mov dword [ebp - 0x2ec], 0x68d270c1
mov dword [ebp - 0x118], 2
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x3648], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x118], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1134]
cmp dword [ebp - 0x118], eax
jle 0x45194d
mov dword [ebp - 0x2778], 1
jmp 0x451954
and dword [ebp - 0x2778], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
add eax, dword [ebp - 0x2778]
imul eax, eax, 0xfffffffb
cmp dword [ebp - 0x2ec], eax
jg 0x45197e
mov dword [ebp - 0x2de8], 1
jmp 0x451985
and dword [ebp - 0x2de8], 0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x3650], eax
mov dword [ebp - 0x174], 0x546153b7
cmp dword [ebp - 0x118], 0
je 0x4519e0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x3658], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x3660], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
sub eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x118], eax
jne 0x4519e0
and dword [ebp - 0x2780], 0
jmp 0x4519ea
mov dword [ebp - 0x2780], 1
mov eax, dword [ebp - 0x2ec]
imul eax, dword [ebp - 0x2780]
cmp eax, 0xffff
jae 0x451a0a
mov dword [ebp - 0x2788], 1
jmp 0x451a11
and dword [ebp - 0x2788], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
cmp eax, dword [ebp - 0x2788]
jle 0x451a32
mov dword [ebp - 0x2790], 1
jmp 0x451a39
and dword [ebp - 0x2790], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x2790]
cmp eax, dword [ebp - 0x6bc]
jg 0x451a56
mov dword [ebp - 0x27d8], 1
jmp 0x451a5d
and dword [ebp - 0x27d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1134]
cmp dword [ebp - 0x27d8], eax
jl 0x451aba
mov eax, 0xedb9cc51
test eax, eax
je 0x451aba
mov dword [ebp - 0x27e0], 0x28f0e43d
mov eax, dword [ebp - 0x27e0]
dec eax
mov dword [ebp - 0x27e0], eax
mov byte [ebp - 0x532], 0
movzx eax, byte [ebp - 0x532]
test eax, eax
je 0x451ab5
push 0
push 0
push 0x1a94
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
jmp 0x451b57
mov dword [ebp - 0x118], 0
jmp 0x451ad3
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xfffffff0
jne 0x451b57
mov dword [ebp - 0x2ec], 0
jmp 0x451af5
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x24
jle 0x451b52
mov byte [ebp - 0x4c9], 0
movzx eax, byte [ebp - 0x4c9]
test eax, eax
je 0x451b1a
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov dword [ebp - 0x174], 2
jmp 0x451b33
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jl 0x451b50
mov eax, dword [ebp - 0x174]
cmp dword [ebp + eax*4 - 0x1134], 0
je 0x451b4e
jmp 0x451b50
jmp 0x451b26
jmp 0x451ae8
jmp 0x451ac6
mov dword [ebp - 0x540], 1
mov dword [ebp - 0xb1c], 0
jmp 0x451b7a
mov eax, dword [ebp - 0xb1c]
inc eax
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0xb1c], 1
jge 0x451b96
mov eax, dword [ebp - 0xb1c]
mov dword [ebp + eax*4 - 0x334], 0xc0ae9714
jmp 0x451b6d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x334], 0
jmp 0x451bc4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x334], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0xb
jl 0x451d5d
mov dword [ebp - 0x3b0], 0x4aa0d722
mov dword [ebp - 0x2df8], 5
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3668], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x3670], eax
mov eax, 0xa017779a
test eax, eax
je 0x451c22
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0
jne 0x451c42
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x451c42
and dword [ebp - 0x27e8], 0
jmp 0x451c4c
mov dword [ebp - 0x27e8], 1
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x27e8], eax
jge 0x451c66
mov dword [ebp - 0x27f0], 1
jmp 0x451c6d
and dword [ebp - 0x27f0], 0
mov eax, dword [ebp - 0x27f0]
sub eax, dword [ebp - 0x3b0]
je 0x451c87
mov dword [ebp - 0x27f8], 1
jmp 0x451c8e
and dword [ebp - 0x27f8], 0
mov eax, dword [ebp - 0x3b0]
add eax, dword [ebp - 0x27f8]
cmp eax, dword [ebp - 0x3b0]
jle 0x451cae
mov dword [ebp - 0x2574], 1
jmp 0x451cb5
and dword [ebp - 0x2574], 0
cmp dword [ebp - 0x2574], 0
jb 0x451cca
mov dword [ebp - 0x2548], 1
jmp 0x451cd1
and dword [ebp - 0x2548], 0
imul eax, dword [ebp - 0x2548], 0xffffffff
imul eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0
je 0x451d03
cmp dword [ebp - 0x3b0], 0
je 0x451d03
mov dword [ebp - 0x1168], 1
jmp 0x451d0a
and dword [ebp - 0x1168], 0
cmp dword [ebp - 0x1168], 0x217c7128
jg 0x451d22
mov dword [ebp - 0x2550], 1
jmp 0x451d29
and dword [ebp - 0x2550], 0
cmp dword [ebp - 0x2550], 6
jb 0x451d3e
mov dword [ebp - 0x2df0], 1
jmp 0x451d45
and dword [ebp - 0x2df0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x2df8], eax
jmp 0x451ba9
mov dword [ebp - 0x540], 0
jmp 0x451d76
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0
jg 0x451da2
mov byte [ebp - 0x534], 0
movzx eax, byte [ebp - 0x534]
test eax, eax
je 0x451da0
push 0x1076
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
jmp 0x451d69
mov dword [ebp - 0x898], 0
jmp 0x451dbb
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 4
jge 0x451dd7
mov eax, dword [ebp - 0x898]
mov dword [ebp + eax*4 - 0x3414], 4
jmp 0x451dae
mov dword [ebp - 0x3c8], 3
jmp 0x451df0
mov eax, dword [ebp - 0x3c8]
dec eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
jl 0x453140
mov dword [ebp - 0x2560], 0xf75d
mov dword [ebp - 0x2e00], 0x23498e64
mov dword [ebp - 0x1170], 1
mov dword [ebp - 0x3678], 0xc7a8cf1d
mov dword [ebp - 0xb24], 0
jmp 0x451e3e
mov eax, dword [ebp - 0xb24]
inc eax
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0xb24], 4
jge 0x451e5a
mov eax, dword [ebp - 0xb24]
mov dword [ebp + eax*4 - 0x43fc], 0x7d711e7b
jmp 0x451e31
cmp dword [ebp - 0x2560], 0
je 0x451fc2
mov dword [ebp - 0xb2c], 0xffffffff
mov dword [ebp - 0x104c], 0xfff6
mov dword [ebp - 0x8a0], 0
jmp 0x451e94
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 3
jge 0x451eb0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp + eax*4 - 0x335c], 0xd1ad67a4
jmp 0x451e87
mov eax, dword [ebp - 0x1170]
mov dword [ebp - 0x3680], eax
cmp dword [ebp - 0x1170], 0
je 0x451ecc
cmp dword [ebp - 0x2e00], 0
mov eax, dword [ebp - 0xb2c]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x335c]
cmp eax, dword [ebp - 0xb2c]
jg 0x451ef4
mov dword [ebp - 0x2558], 1
jmp 0x451efb
and dword [ebp - 0x2558], 0
mov eax, dword [ebp - 0x104c]
inc eax
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0xb2c]
add eax, dword [ebp - 0x2558]
cmp dword [ebp - 0x104c], eax
jg 0x451f35
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x43fc], 0
jne 0x451f35
and dword [ebp - 0x1178], 0
jmp 0x451f3f
mov dword [ebp - 0x1178], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x335c]
add eax, dword [ebp - 0x1178]
cmp dword [ebp - 0x2560], eax
je 0x451f66
mov dword [ebp - 0x1180], 1
jmp 0x451f6d
and dword [ebp - 0x1180], 0
mov eax, dword [ebp - 0xb2c]
cmp eax, dword [ebp - 0x1180]
jg 0x451f87
mov dword [ebp - 0x2568], 1
jmp 0x451f8e
and dword [ebp - 0x2568], 0
cmp dword [ebp - 0x2568], 0x5dc6
jne 0x451fa6
mov dword [ebp - 0x1188], 1
jmp 0x451fad
and dword [ebp - 0x1188], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1188]
mov dword [ebp + eax - 0x335c], ecx
jmp 0x451fda
mov byte [ebp - 0x4d1], 0
movzx eax, byte [ebp - 0x4d1]
test eax, eax
je 0x451fda
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x3494], 0x33582f80
mov dword [ebp - 0x3490], 0x33582f80
mov dword [ebp - 0x348c], 0x33582f80
mov dword [ebp - 0x3488], 0x33582f80
mov dword [ebp - 0x34d4], 0xf112
mov dword [ebp - 0x34d0], 0xf112
mov dword [ebp - 0x34cc], 0xf112
mov dword [ebp - 0x34c8], 0xf112
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x830], 0
jmp 0x45204d
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 3
jg 0x452089
mov byte [ebp - 0x536], 0
movzx eax, byte [ebp - 0x536]
test eax, eax
je 0x452075
push 0x9d2
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x830]
cmp dword [ebp + eax*4 - 0x34d4], 0
je 0x452087
jmp 0x452040
jmp 0x452040
mov byte [ebp - 0x4d9], 0
movzx eax, byte [ebp - 0x4d9]
test eax, eax
je 0x4520af
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
mov dword [ebp - 0x70], 0x3f4f46db
mov dword [ebp - 0x6c4], 7
mov dword [ebp - 0x548], 0xefc72fa5
mov dword [ebp - 0x2e08], 0xc012777f
mov dword [ebp - 0x5c], 0
jmp 0x4520e4
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x4520fa
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xde0], 0xffffffff
jmp 0x4520dd
mov dword [ebp - 0x5c], 0
jmp 0x45210a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x452120
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x3208], 0x7b38eb16
jmp 0x452103
mov dword [ebp - 0x5c], 0
jmp 0x452130
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x452146
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x41d4], 0xc5bff904
jmp 0x452129
mov dword [ebp - 0x70], 2
jmp 0x452156
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x452298
mov dword [ebp - 0x103c], 0xffffffff
mov dword [ebp - 0xe0c], 0x1ce3cb5a
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0xde0]
mov dword [ebp - 0x3688], eax
mov eax, 0x6ba47c9d
cmp eax, 0xac12265e
je 0x45219c
mov dword [ebp - 0x1190], 1
jmp 0x4521a3
and dword [ebp - 0x1190], 0
mov dword [ebp - 0x103c], 0xde0980db
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0xde0], 0
jne 0x4521c1
cmp dword [ebp - 0x103c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xde0]
cmp dword [ebp - 0x103c], eax
jle 0x4521e2
mov dword [ebp - 0x25b8], 1
jmp 0x4521e9
and dword [ebp - 0x25b8], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x25b8]
sub ecx, dword [ebp + eax*4 - 0xde0]
cmp dword [ebp - 0x1190], ecx
jl 0x45220d
mov dword [ebp - 0x25c0], 1
jmp 0x452214
and dword [ebp - 0x25c0], 0
mov eax, dword [ebp - 0x25c0]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x3690], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0xde0]
mov dword [ebp - 0x3698], eax
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x36a0], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0xde0]
mov dword [ebp - 0x36a8], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x36b0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp + eax - 0xde0]
mov dword [ebp + ecx*4 - 0xde0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3208], 0x380ee91b
mov dword [ebp - 0x6c4], 0x380ee91b
jmp 0x45214f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3208], 0
je 0x452436
or eax, 0xffffffff
je 0x4522c6
cmp dword [ebp - 0x548], 0
je 0x4522c6
mov dword [ebp - 0x1198], 1
jmp 0x4522cd
and dword [ebp - 0x1198], 0
cmp dword [ebp - 0x1198], 0x5af849fb
je 0x4522e5
mov dword [ebp - 0x25c8], 1
jmp 0x4522ec
and dword [ebp - 0x25c8], 0
mov eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x25c8]
jne 0x452316
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3208], 0
je 0x452316
mov dword [ebp - 0x11a0], 1
jmp 0x45231d
and dword [ebp - 0x11a0], 0
cmp dword [ebp - 0x11a0], 2
jb 0x452332
mov dword [ebp - 0x25d0], 1
jmp 0x452339
and dword [ebp - 0x25d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xde0]
cmp dword [ebp - 0x25d0], eax
jge 0x452359
mov dword [ebp - 0xf7c], 1
jmp 0x452360
and dword [ebp - 0xf7c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf7c]
mov dword [ebp + eax - 0x3208], ecx
cmp dword [ebp - 0xf7c], 0
je 0x452391
mov eax, 0x57ee
test eax, eax
je 0x452391
mov dword [ebp - 0x11a8], 1
jmp 0x452398
and dword [ebp - 0x11a8], 0
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0x11a8], eax
je 0x4523b3
xor eax, eax
jne 0x4523b3
and dword [ebp - 0x25d8], 0
jmp 0x4523bd
mov dword [ebp - 0x25d8], 1
cmp dword [ebp - 0x25d8], 0x5407
jne 0x4523d5
mov dword [ebp - 0x11b0], 1
jmp 0x4523dc
and dword [ebp - 0x11b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xde0]
add eax, dword [ebp - 0x11b0]
mov dword [ebp - 0x70], eax
je 0x45240f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xde0], 0
je 0x45240f
mov dword [ebp - 0x25e0], 1
jmp 0x452416
and dword [ebp - 0x25e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xde0]
cmp dword [ebp - 0x25e0], eax
jl 0x452436
mov dword [ebp - 0x11b8], 1
jmp 0x45243d
and dword [ebp - 0x11b8], 0
imul eax, dword [ebp - 0x11b8], 0xfffffff9
test eax, eax
jne 0x45245a
cmp dword [ebp - 0x548], 0
jne 0x45245a
and dword [ebp - 0x25e8], 0
jmp 0x452464
mov dword [ebp - 0x25e8], 1
mov eax, dword [ebp - 0x6c4]
cmp dword [ebp - 0x25e8], eax
jl 0x45247e
mov dword [ebp - 0x11c0], 1
jmp 0x452485
and dword [ebp - 0x11c0], 0
cmp dword [ebp - 0x11c0], 0xfffffff9
jl 0x45249a
mov dword [ebp - 0x25f0], 1
jmp 0x4524a1
and dword [ebp - 0x25f0], 0
mov eax, dword [ebp - 0x25f0]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x36b8], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x36c0], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x11c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11c8]
mov dword [ebp + eax - 0x41d4], ecx
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0x11c8], eax
jge 0x4524fe
mov dword [ebp - 0x25f8], 1
jmp 0x452505
and dword [ebp - 0x25f8], 0
mov eax, dword [ebp - 0x25f8]
mov dword [ebp - 0x2e08], eax
mov dword [ebp - 0x8a8], 0
jmp 0x45252a
mov eax, dword [ebp - 0x8a8]
inc eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 3
jge 0x452546
mov eax, dword [ebp - 0x8a8]
mov dword [ebp + eax*4 - 0x2ff4], 0x4cdb8faa
jmp 0x45251d
mov dword [ebp - 0xe00], 6
mov dword [ebp - 0xdfc], 6
mov dword [ebp - 0xdf8], 6
mov dword [ebp - 0xdf4], 6
mov dword [ebp - 0x5f8], 1
mov dword [ebp - 0x11e0], 0
mov dword [ebp - 0xe14], 0
mov dword [ebp - 0xb34], 0
jmp 0x4525a5
mov eax, dword [ebp - 0xb34]
inc eax
mov dword [ebp - 0xb34], eax
cmp dword [ebp - 0xb34], 4
jge 0x4525c1
mov eax, dword [ebp - 0xb34]
mov dword [ebp + eax*4 - 0x4058], 0xffffffff
jmp 0x452598
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe00]
mov dword [ebp - 0x36c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe00]
mov dword [ebp - 0x36d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe00], 0
jle 0x452603
mov dword [ebp - 0x11d0], 1
jmp 0x45260a
and dword [ebp - 0x11d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe00]
imul eax, dword [ebp - 0x11d0]
test eax, eax
jne 0x45263a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe00], 0
jne 0x45263a
and dword [ebp - 0x2600], 0
jmp 0x452644
mov dword [ebp - 0x2600], 1
cmp dword [ebp - 0x2600], 0xfffffffd
jne 0x452659
mov dword [ebp - 0x2608], 1
jmp 0x452660
and dword [ebp - 0x2608], 0
mov dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x11d8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x11d8]
mov dword [ebp + eax - 0x4058], ecx
mov eax, dword [ebp - 0x11d8]
mov dword [ebp - 0x11e0], eax
imul eax, dword [ebp - 0x2608], 0xcf7d
cmp dword [ebp - 0x11e0], eax
jle 0x4526b2
mov dword [ebp - 0x2610], 1
jmp 0x4526b9
and dword [ebp - 0x2610], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2610]
sub ecx, dword [ebp + eax - 0xe00]
push 4
pop eax
shl eax, 1
imul ecx, dword [ebp + eax - 0xe00]
push 4
pop eax
shl eax, 1
cmp ecx, dword [ebp + eax - 0xe00]
jl 0x4526f3
mov dword [ebp - 0x11e8], 1
jmp 0x4526fa
and dword [ebp - 0x11e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe00]
cmp dword [ebp - 0x11e8], eax
jl 0x45271b
mov dword [ebp - 0x2618], 1
jmp 0x452722
and dword [ebp - 0x2618], 0
cmp dword [ebp - 0x2618], 0xde81
jle 0x452740
cmp dword [ebp - 0xe14], 0
jne 0x452740
and dword [ebp - 0x11f0], 0
jmp 0x45274a
mov dword [ebp - 0x11f0], 1
mov eax, dword [ebp - 0xe14]
cmp dword [ebp - 0x11f0], eax
jle 0x452764
mov dword [ebp - 0x2620], 1
jmp 0x45276b
and dword [ebp - 0x2620], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe00]
cmp dword [ebp - 0x2620], eax
je 0x45278c
mov dword [ebp - 0x11f8], 1
jmp 0x452793
and dword [ebp - 0x11f8], 0
cmp dword [ebp - 0x11f8], 1
jne 0x4527a9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4058], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xe00], 0xb430
cmp eax, 9
jbe 0x4527cb
mov dword [ebp - 0x2628], 1
jmp 0x4527d2
and dword [ebp - 0x2628], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe00]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe00]
sub ecx, dword [ebp - 0x2628]
imul eax, ecx
test eax, eax
jne 0x45280b
mov eax, 0xc8f9611c
test eax, eax
jne 0x45280b
and dword [ebp - 0x1200], 0
jmp 0x452815
mov dword [ebp - 0x1200], 1
mov eax, dword [ebp - 0x1200]
mov dword [ebp - 0xe14], eax
mov dword [ebp - 0x5f8], 3
jmp 0x45283a
mov eax, dword [ebp - 0x5f8]
dec eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0
jl 0x452861
mov byte [ebp - 0x538], 0
movzx eax, byte [ebp - 0x538]
test eax, eax
je 0x45285f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x45282d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2ff4], 0
jmp 0x45288f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ff4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ff4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ff4], 3
jg 0x452e6e
mov dword [ebp - 0x18], 0xe76f5020
mov dword [ebp - 0xf54], 0xffffffff
mov dword [ebp - 0x36d8], 8
mov dword [ebp - 0x2ac], 0
jmp 0x4528d7
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 4
jge 0x4528f3
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x2890], 0xfffffffe
jmp 0x4528ca
mov dword [ebp - 0x2ac], 0
jmp 0x45290c
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x452928
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x2858], 0xfffffff8
jmp 0x4528ff
mov dword [ebp - 0x18], 0
jmp 0x452938
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x452add
mov dword [ebp - 0x1208], 1
mov dword [ebp - 0x2630], 4
mov dword [ebp - 0x8b0], 0
jmp 0x45296f
mov eax, dword [ebp - 0x8b0]
inc eax
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 1
jge 0x45298b
mov eax, dword [ebp - 0x8b0]
mov dword [ebp + eax*4 - 0x2e10], 0xffff
jmp 0x452962
mov byte [ebp - 0x4e1], 0
movzx eax, byte [ebp - 0x4e1]
test eax, eax
je 0x4529a5
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x2890], 0
je 0x4529ef
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2890]
mov dword [ebp - 0x1208], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2890]
mov dword [ebp - 0x2630], eax
mov eax, dword [ebp - 0x2630]
cmp dword [ebp - 0x1208], eax
jge 0x4529ef
and dword [ebp - 0x1218], 0
jmp 0x4529f9
mov dword [ebp - 0x1218], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x2890]
cmp dword [ebp - 0x18], eax
jg 0x452a14
mov dword [ebp - 0x2638], 1
jmp 0x452a1b
and dword [ebp - 0x2638], 0
mov eax, dword [ebp - 0x2638]
dec eax
cmp eax, 0xcc4b
jle 0x452a35
mov dword [ebp - 0x1210], 1
jmp 0x452a3c
and dword [ebp - 0x1210], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1210]
jge 0x452a53
mov dword [ebp - 0x2640], 1
jmp 0x452a5a
and dword [ebp - 0x2640], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x2890]
cmp dword [ebp - 0x2640], eax
je 0x452a78
mov dword [ebp - 0x2648], 1
jmp 0x452a7f
and dword [ebp - 0x2648], 0
mov eax, dword [ebp - 0x1218]
cmp eax, dword [ebp - 0x2648]
jle 0x452a99
mov dword [ebp - 0x1220], 1
jmp 0x452aa0
and dword [ebp - 0x1220], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x2890]
cmp dword [ebp - 0x1220], eax
jge 0x452abe
mov dword [ebp - 0x2650], 1
jmp 0x452ac5
and dword [ebp - 0x2650], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2650]
mov dword [ebp + eax - 0x2e10], ecx
jmp 0x452931
mov dword [ebp - 0x18], 0
jmp 0x452aed
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xb
jge 0x452cbf
mov dword [ebp - 0x550], 0x3c3d2146
mov dword [ebp - 0x2e18], 0xffffffff
mov eax, dword [ebp - 0x550]
neg eax
je 0x452b99
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x36e0], eax
mov eax, dword [ebp - 0xf54]
add eax, dword [ebp - 0x550]
sub eax, dword [ebp - 0x550]
jne 0x452b4b
mov eax, 0x8a88acc1
test eax, eax
jne 0x452b4b
and dword [ebp - 0x1228], 0
jmp 0x452b55
mov dword [ebp - 0x1228], 1
mov eax, dword [ebp - 0x1228]
add eax, 0x2ddfdaf0
cmp eax, dword [ebp - 0x18]
jne 0x452b71
mov dword [ebp - 0x2658], 1
jmp 0x452b78
and dword [ebp - 0x2658], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2658]
sub ecx, dword [ebp + eax - 0x2890]
je 0x452b99
mov dword [ebp - 0x1230], 1
jmp 0x452ba0
and dword [ebp - 0x1230], 0
mov eax, dword [ebp - 0x1230]
add eax, 0x4595a2e7
mov dword [ebp - 0xf54], eax
mov eax, dword [ebp - 0xf54]
sub eax, 0xe128
je 0x452bd3
cmp dword [ebp - 0x550], 0
je 0x452bd3
mov dword [ebp - 0x2660], 1
jmp 0x452bda
and dword [ebp - 0x2660], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2890]
cmp dword [ebp - 0x2660], eax
jg 0x452bfb
mov dword [ebp - 0x1238], 1
jmp 0x452c02
and dword [ebp - 0x1238], 0
mov eax, dword [ebp - 0x550]
cmp eax, dword [ebp - 0x1238]
jg 0x452c1c
mov dword [ebp - 0xe1c], 1
jmp 0x452c23
and dword [ebp - 0xe1c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe1c]
mov dword [ebp + eax - 0x2858], ecx
cmp dword [ebp - 0xe1c], 0
jne 0x452c68
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2858], 0
jne 0x452c68
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2890], 0
jne 0x452c68
and dword [ebp - 0x2668], 0
jmp 0x452c72
mov dword [ebp - 0x2668], 1
mov eax, dword [ebp - 0x2668]
mov dword [ebp - 0x2e18], eax
cmp dword [ebp - 0x18], 1
jle 0x452c9d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2858], 0
jne 0x452c9d
and dword [ebp - 0x1240], 0
jmp 0x452ca7
mov dword [ebp - 0x1240], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1240]
mov dword [ebp + eax - 0x2858], ecx
jmp 0x452ae6
mov dword [ebp - 0x3b8], 1
mov dword [ebp - 0xb3c], 0
jmp 0x452ce2
mov eax, dword [ebp - 0xb3c]
inc eax
mov dword [ebp - 0xb3c], eax
cmp dword [ebp - 0xb3c], 4
jge 0x452cfe
mov eax, dword [ebp - 0xb3c]
mov dword [ebp + eax*4 - 0x40b8], 0x29b
jmp 0x452cd5
mov dword [ebp - 0x3b8], 0x4e2db58e
mov dword [ebp - 0x3b8], 0
jmp 0x452d21
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 3
jg 0x452e11
mov dword [ebp - 0x8b8], 0xffffffff
mov dword [ebp - 0x8b8], 3
jmp 0x452d51
mov eax, dword [ebp - 0x8b8]
dec eax
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 0
jl 0x452e0c
mov dword [ebp - 0xb44], 0
jmp 0x452d77
mov eax, dword [ebp - 0xb44]
inc eax
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 4
jge 0x452d93
mov eax, dword [ebp - 0xb44]
mov dword [ebp + eax*4 - 0x33f4], 0xfffffffe
jmp 0x452d6a
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x33f4], 3
jmp 0x452dc1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x33f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x33f4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x33f4], 0
jl 0x452e07
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x3b8]
mov eax, dword [ebp + eax*4 - 0x40b8]
mov dword [ebp + ecx*4 - 0x40b8], eax
mov byte [ebp - 0x53a], 0
movzx eax, byte [ebp - 0x53a]
test eax, eax
je 0x452e05
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
jmp 0x452da6
jmp 0x452d44
jmp 0x452d14
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp + eax*4 - 0x3414], 0
je 0x452e2e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3414], 0
or eax, 0xffffffff
je 0x452e4f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ff4], 0
je 0x452e4f
mov dword [ebp - 0x2670], 1
jmp 0x452e56
and dword [ebp - 0x2670], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2670]
mov dword [ebp + eax - 0x3494], ecx
jmp 0x452874
mov dword [ebp - 0x3c0], 0xfffffff7
mov dword [ebp - 0xe0], 0xa2fafd11
mov dword [ebp - 0x3c0], 0
jmp 0x452e9b
mov eax, dword [ebp - 0x3c0]
dec eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0xfffffffe
je 0x4530f2
mov dword [ebp - 0x2e20], 0x6158d32f
mov dword [ebp - 0x650], 0xad3b3152
mov dword [ebp - 0x558], 0xfffffff6
mov dword [ebp - 0x8c0], 0
jmp 0x452edf
mov eax, dword [ebp - 0x8c0]
inc eax
mov dword [ebp - 0x8c0], eax
cmp dword [ebp - 0x8c0], 3
jge 0x452efb
mov eax, dword [ebp - 0x8c0]
mov dword [ebp + eax*4 - 0x3c3c], 0
jmp 0x452ed2
mov eax, dword [ebp - 0x2e20]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x453062
mov dword [ebp - 0x798], 0xa9f8d19c
mov dword [ebp - 0xb4c], 0xfffffff7
mov byte [ebp - 0x4e3], 0
movzx eax, byte [ebp - 0x4e3]
test eax, eax
je 0x452f55
push 0
push 0x2529
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
cmp dword [ebp - 0xe0], 0
jne 0x452f68
cmp dword [ebp - 0x798], 0x9a20
mov eax, dword [ebp - 0x650]
cmp dword [ebp - 0x798], eax
jge 0x452f88
mov eax, 0xffff
test eax, eax
jne 0x452f88
and dword [ebp - 0x1248], 0
jmp 0x452f92
mov dword [ebp - 0x1248], 1
mov eax, dword [ebp - 0x1248]
mov dword [ebp - 0xb4c], eax
mov eax, dword [ebp - 0xb4c]
add eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0xe0]
jle 0x452fc7
cmp dword [ebp - 0xb4c], 0
je 0x452fc7
mov dword [ebp - 0x2678], 1
jmp 0x452fce
and dword [ebp - 0x2678], 0
mov eax, dword [ebp - 0x798]
cmp dword [ebp - 0x2678], eax
jle 0x452fe8
mov dword [ebp - 0x1250], 1
jmp 0x452fef
and dword [ebp - 0x1250], 0
cmp dword [ebp - 0x1250], 7
jge 0x453004
mov dword [ebp - 0x2e28], 1
jmp 0x45300b
and dword [ebp - 0x2e28], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x36e8], eax
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0xe0], eax
jge 0x45303d
mov dword [ebp - 0x2680], 1
jmp 0x453044
and dword [ebp - 0x2680], 0
mov eax, dword [ebp - 0x2680]
sub eax, dword [ebp - 0x558]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c3c], eax
jmp 0x4530ed
mov dword [ebp - 0x650], 0xffffffe7
jmp 0x45307b
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0x11
jne 0x4530ed
mov dword [ebp - 0x558], 0
jmp 0x45309d
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 3
jge 0x4530b9
mov eax, dword [ebp - 0x558]
mov dword [ebp + eax*4 - 0x3c3c], 0xfffffffd
jmp 0x453090
mov byte [ebp - 0x50f], 0
movzx eax, byte [ebp - 0x50f]
test eax, eax
je 0x4530eb
push 0
push 0x1207
push 0x7b8
push 0
push 0x466
push 0x1d8a
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x45306e
jmp 0x452e8e
mov dword [ebp - 0xe0], 0
jmp 0x45310b
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xffffffed
jle 0x453121
cmp dword [ebp - 0x3c0], 0
je 0x45311f
jmp 0x453121
jmp 0x4530fe
mov eax, dword [ebp - 0x3c8]
mov ecx, dword [ebp - 0x3c8]
mov eax, dword [ebp + eax*4 - 0x3414]
mov dword [ebp + ecx*4 - 0x3414], eax
jmp 0x451de3
mov dword [ebp - 0x2f4], 0x7fe64fd9
mov dword [ebp - 0x2e30], 0xc10977a1
mov dword [ebp - 0x8c8], 0
jmp 0x45316d
mov eax, dword [ebp - 0x8c8]
inc eax
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 4
jge 0x453189
mov eax, dword [ebp - 0x8c8]
mov dword [ebp + eax*4 - 0x4504], 0
jmp 0x453160
xor eax, eax
inc eax
je 0x453197
cmp dword [ebp - 0x2f4], 0
jne 0x4531a9
cmp dword [ebp - 0x2f4], 0
jne 0x4531a9
and dword [ebp - 0x1258], 0
jmp 0x4531b3
mov dword [ebp - 0x1258], 1
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2e30]
cmp dword [ebp - 0x2f4], eax
jne 0x4531d9
mov dword [ebp - 0x2688], 1
jmp 0x4531e0
and dword [ebp - 0x2688], 0
mov eax, 0x185299da
sub eax, dword [ebp - 0x2688]
je 0x4532e9
mov dword [ebp - 0x600], 0
mov dword [ebp - 0x600], 0xfffffffe
cmp dword [ebp - 0x600], 0
je 0x45325a
mov dword [ebp - 0x600], 0
jmp 0x453227
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 3
jg 0x453255
mov byte [ebp - 0x4e5], 0
movzx eax, byte [ebp - 0x4e5]
test eax, eax
je 0x453253
push 0x2248
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
jmp 0x45321a
jmp 0x4532e7
mov dword [ebp - 0x2e38], 0xdfddae9
mov dword [ebp - 0xb54], 0
jmp 0x45327d
mov eax, dword [ebp - 0xb54]
inc eax
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0xb54], 2
jge 0x453299
mov eax, dword [ebp - 0xb54]
mov dword [ebp + eax*4 - 0x37fc], 5
jmp 0x453270
mov dword [ebp - 0x2f4], 0
jmp 0x4532b2
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 3
je 0x4532e7
mov dword [ebp - 0x1260], 0x12894ff5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x37fc]
mov dword [ebp - 0x2e38], eax
mov eax, dword [ebp - 0x1260]
dec eax
mov dword [ebp - 0x1260], eax
jmp 0x4532a5
jmp 0x45330d
mov byte [ebp - 0x525], 0
movzx eax, byte [ebp - 0x525]
test eax, eax
je 0x45330d
push 0x1ae5
push 0x2488
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov dword [ebp - 0x138], 0xb9f9b31
mov dword [ebp - 0x560], 0
mov dword [ebp - 0x2e48], 0xd6158f87
mov dword [ebp - 0x36f0], 0x94fe874d
mov dword [ebp - 0x138], 0xffffffee
jmp 0x45334e
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xffffffec
jle 0x4535c6
mov dword [ebp - 0xe8], 0xf1bf506e
mov dword [ebp - 0x1274], 0xffffffff
mov dword [ebp - 0xe8], 0xffffffe6
jmp 0x453388
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 9
jne 0x4533c0
mov dword [ebp - 0xf84], 0xe932
mov eax, dword [ebp - 0xf84]
dec eax
mov dword [ebp - 0xf84], eax
mov eax, dword [ebp - 0xf84]
mov dword [ebp - 0x36f8], eax
mov dword [ebp - 0x560], 0xfffffff7
jmp 0x45337b
cmp dword [ebp - 0x138], 0
jne 0x4533db
cmp dword [ebp - 0xe8], 0
jne 0x4533db
and dword [ebp - 0x2690], 0
jmp 0x4533e5
mov dword [ebp - 0x2690], 1
mov eax, dword [ebp - 0x560]
cmp dword [ebp - 0x2690], eax
jle 0x4533ff
mov dword [ebp - 0x2698], 1
jmp 0x453406
and dword [ebp - 0x2698], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3700], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3708], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x138], eax
jne 0x453450
cmp dword [ebp - 0x1274], 0
jne 0x453450
cmp dword [ebp - 0x138], 0
jne 0x453450
cmp dword [ebp - 0x138], 0
jne 0x453450
and dword [ebp - 0x1268], 0
jmp 0x45345a
mov dword [ebp - 0x1268], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x1268], eax
jge 0x453474
mov dword [ebp - 0x26a0], 1
jmp 0x45347b
and dword [ebp - 0x26a0], 0
mov eax, dword [ebp - 0x2698]
cmp eax, dword [ebp - 0x26a0]
jge 0x453495
mov dword [ebp - 0x1d50], 1
jmp 0x45349c
and dword [ebp - 0x1d50], 0
mov eax, dword [ebp - 0x1274]
cmp dword [ebp - 0x1d50], eax
jle 0x4534b6
mov dword [ebp - 0x127c], 1
jmp 0x4534bd
and dword [ebp - 0x127c], 0
cmp dword [ebp - 0x127c], 0xfbf
jl 0x4534d5
mov dword [ebp - 0x1d54], 1
jmp 0x4534dc
and dword [ebp - 0x1d54], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x1d54]
jg 0x4534f6
mov dword [ebp - 0x1284], 1
jmp 0x4534fd
and dword [ebp - 0x1284], 0
mov eax, dword [ebp - 0x560]
cmp dword [ebp - 0x1284], eax
jne 0x45351e
push 4
pop eax
test eax, eax
jne 0x45351e
mov dword [ebp - 0x2e40], 1
jmp 0x453525
and dword [ebp - 0x2e40], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3710], eax
cmp dword [ebp - 0x560], 0
jb 0x453546
mov dword [ebp - 0x22bc], 1
jmp 0x45354d
and dword [ebp - 0x22bc], 0
cmp dword [ebp - 0x22bc], 0x6658
jne 0x453565
mov dword [ebp - 0x128c], 1
jmp 0x45356c
and dword [ebp - 0x128c], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x128c], eax
jg 0x453586
mov dword [ebp - 0x1d5c], 1
jmp 0x45358d
and dword [ebp - 0x1d5c], 0
mov eax, dword [ebp - 0x1d5c]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 1
jle 0x4535ae
mov dword [ebp - 0x1294], 1
jmp 0x4535b5
and dword [ebp - 0x1294], 0
mov eax, dword [ebp - 0x1294]
mov dword [ebp - 0x2e48], eax
jmp 0x453341
mov dword [ebp - 0x12a4], 0xf75d
mov dword [ebp - 0x2f1c], 0x23498e64
mov dword [ebp - 0x25b0], 1
mov dword [ebp - 0x3718], 0xc7a8cf1d
mov dword [ebp - 0x8d0], 0
jmp 0x453607
mov eax, dword [ebp - 0x8d0]
inc eax
mov dword [ebp - 0x8d0], eax
cmp dword [ebp - 0x8d0], 4
jge 0x453623
mov eax, dword [ebp - 0x8d0]
mov dword [ebp + eax*4 - 0x43ac], 0x7d711e7b
jmp 0x4535fa
cmp dword [ebp - 0x12a4], 0
je 0x45378b
mov dword [ebp - 0x8d8], 0xffffffff
mov dword [ebp - 0xe24], 0xfff6
mov dword [ebp - 0xb5c], 0
jmp 0x45365d
mov eax, dword [ebp - 0xb5c]
inc eax
mov dword [ebp - 0xb5c], eax
cmp dword [ebp - 0xb5c], 3
jge 0x453679
mov eax, dword [ebp - 0xb5c]
mov dword [ebp + eax*4 - 0x3374], 0xd1ad67a4
jmp 0x453650
mov eax, dword [ebp - 0x25b0]
mov dword [ebp - 0x3720], eax
cmp dword [ebp - 0x25b0], 0
je 0x453695
cmp dword [ebp - 0x2f1c], 0
mov eax, dword [ebp - 0x8d8]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x3374]
cmp eax, dword [ebp - 0x8d8]
jg 0x4536bd
mov dword [ebp - 0x129c], 1
jmp 0x4536c4
and dword [ebp - 0x129c], 0
mov eax, dword [ebp - 0xe24]
inc eax
mov dword [ebp - 0xe24], eax
mov eax, dword [ebp - 0x8d8]
add eax, dword [ebp - 0x129c]
cmp dword [ebp - 0xe24], eax
jg 0x4536fe
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x43ac], 0
jne 0x4536fe
and dword [ebp - 0x1d64], 0
jmp 0x453708
mov dword [ebp - 0x1d64], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3374]
add eax, dword [ebp - 0x1d64]
cmp dword [ebp - 0x12a4], eax
je 0x45372f
mov dword [ebp - 0x22c4], 1
jmp 0x453736
and dword [ebp - 0x22c4], 0
mov eax, dword [ebp - 0x8d8]
cmp eax, dword [ebp - 0x22c4]
jg 0x453750
mov dword [ebp - 0x12ac], 1
jmp 0x453757
and dword [ebp - 0x12ac], 0
cmp dword [ebp - 0x12ac], 0x5dc6
jne 0x45376f
mov dword [ebp - 0x1d6c], 1
jmp 0x453776
and dword [ebp - 0x1d6c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d6c]
mov dword [ebp + eax - 0x3374], ecx
jmp 0x4537a3
mov byte [ebp - 0x4e7], 0
movzx eax, byte [ebp - 0x4e7]
test eax, eax
je 0x4537a3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0xf8c], 8
mov dword [ebp - 0x2578], 5
mov dword [ebp - 0xe2c], 0x4543beb7
mov dword [ebp - 0xf5c], 0xec79cf18
mov dword [ebp - 0xb64], 0xfffffffe
mov dword [ebp - 0xe34], 0x1d89e177
mov dword [ebp - 0x2f34], 0xf314d41b
mov dword [ebp - 0x3c], 0
jmp 0x4537f9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x45380f
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x3248], 0x734f094
jmp 0x4537f2
mov dword [ebp - 0x3c], 0
jmp 0x45381f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x453835
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x41ec], 0x1d91
jmp 0x453818
mov dword [ebp - 0x3c], 0
jmp 0x453845
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x45385b
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x4204], 0x48968f25
jmp 0x45383e
mov eax, dword [ebp - 0xb64]
dec eax
mov dword [ebp - 0xb64], eax
jne 0x453899
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3248]
mov dword [ebp - 0x12b4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x12b4]
mov dword [ebp + eax - 0x3248], ecx
cmp dword [ebp - 0x12b4], 0
je 0x4538ba
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0x2578], eax
cmp dword [ebp - 0x2578], 0
je 0x4538ba
mov dword [ebp - 0x12c4], 1
jmp 0x4538c1
and dword [ebp - 0x12c4], 0
xor eax, eax
jne 0x4538d7
cmp dword [ebp - 0xf5c], 0
jne 0x4538d7
and dword [ebp - 0x12bc], 0
jmp 0x4538e1
mov dword [ebp - 0x12bc], 1
mov eax, dword [ebp - 0x12bc]
mov dword [ebp - 0xf5c], eax
cmp dword [ebp - 0xf5c], 0
je 0x45390b
cmp dword [ebp - 0xe2c], 0
je 0x45390b
mov dword [ebp - 0x2f24], 1
jmp 0x453912
and dword [ebp - 0x2f24], 0
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x3728], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x41ec]
cmp dword [ebp - 0xf8c], eax
jge 0x45393f
mov dword [ebp - 0x2f2c], 1
jmp 0x453946
and dword [ebp - 0x2f2c], 0
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0x3730], eax
mov eax, dword [ebp - 0xe2c]
imul eax, dword [ebp - 0x2f34]
cmp eax, 0xfffffff7
jl 0x453970
mov dword [ebp - 0x2f3c], 1
jmp 0x453977
and dword [ebp - 0x2f3c], 0
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0x3738], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4204], 0x3610
jne 0x4539a1
mov dword [ebp - 0x1d74], 1
jmp 0x4539a8
and dword [ebp - 0x1d74], 0
imul eax, dword [ebp - 0x1d74], 0
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0x12c4]
sub eax, dword [ebp - 0xf8c]
mov dword [ebp - 0xe34], eax
mov dword [ebp - 0x284], 0xedb5cabf
mov dword [ebp - 0xb6c], 0x9e57ad95
mov dword [ebp - 0x2f44], 0xb90f9986
mov dword [ebp - 0x8e0], 0
jmp 0x4539fe
mov eax, dword [ebp - 0x8e0]
inc eax
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x8e0], 2
jge 0x453a1a
mov eax, dword [ebp - 0x8e0]
mov dword [ebp + eax*4 - 0x3258], 0x4e2d
jmp 0x4539f1
mov dword [ebp - 0xb6c], 1
jmp 0x453a33
mov eax, dword [ebp - 0xb6c]
dec eax
mov dword [ebp - 0xb6c], eax
cmp dword [ebp - 0xb6c], 0
jl 0x453b00
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x12cc], 0xa5202749
mov dword [ebp - 0x374], 1
jmp 0x453a6d
mov eax, dword [ebp - 0x374]
dec eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jl 0x453afb
mov dword [ebp - 0x22cc], 0
mov dword [ebp - 0x1d7c], 1
mov eax, dword [ebp - 0x374]
mov eax, dword [ebp + eax*4 - 0x3258]
mov dword [ebp - 0x3740], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x22cc], eax
mov eax, dword [ebp - 0x374]
mov eax, dword [ebp + eax*4 - 0x3258]
mov dword [ebp - 0x12cc], eax
mov eax, dword [ebp - 0x22cc]
neg eax
add eax, dword [ebp - 0x12cc]
mov dword [ebp - 0x1d7c], eax
mov eax, dword [ebp - 0x1d7c]
mov dword [ebp - 0x3748], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x3750], eax
mov dword [ebp - 0x2f44], 4
jmp 0x453a60
jmp 0x453a26
mov byte [ebp - 0x511], 0
movzx eax, byte [ebp - 0x511]
test eax, eax
je 0x453b28
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0x1d84], 0xfffffffe
mov dword [ebp - 0x12e4], 0x28f6c74a
mov dword [ebp - 0x2f54], 0xcd4431fa
mov dword [ebp - 0x2f5c], 0xd393e75c
mov byte [ebp - 0x4e9], 0
movzx eax, byte [ebp - 0x4e9]
test eax, eax
je 0x453b81
push 0
push 0
push 0xa3d
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x17c], eax
jg 0x453b9b
mov dword [ebp - 0x1d8c], 1
jmp 0x453ba2
and dword [ebp - 0x1d8c], 0
cmp dword [ebp - 0x17c], 1
jb 0x453bb7
mov dword [ebp - 0x12d4], 1
jmp 0x453bbe
and dword [ebp - 0x12d4], 0
cmp dword [ebp - 0x12d4], 0xb984
jg 0x453bd6
mov dword [ebp - 0x278c], 1
jmp 0x453bdd
and dword [ebp - 0x278c], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x278c], eax
jg 0x453bf7
mov dword [ebp - 0x2f4c], 1
jmp 0x453bfe
and dword [ebp - 0x2f4c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x3758], eax
cmp dword [ebp - 0x17c], 0
je 0x453c28
cmp dword [ebp - 0x17c], 0
je 0x453c28
mov dword [ebp - 0x12dc], 1
jmp 0x453c2f
and dword [ebp - 0x12dc], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x12dc], eax
jl 0x453c49
mov dword [ebp - 0x22d4], 1
jmp 0x453c50
and dword [ebp - 0x22d4], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1d84], eax
mov eax, dword [ebp - 0x1d84]
mov dword [ebp - 0x12e4], eax
mov eax, dword [ebp - 0x12e4]
cmp eax, dword [ebp - 0x22d4]
jg 0x453c82
mov dword [ebp - 0x12ec], 1
jmp 0x453c89
and dword [ebp - 0x12ec], 0
mov eax, dword [ebp - 0x2f54]
cmp dword [ebp - 0x12ec], eax
jle 0x453ca3
mov dword [ebp - 0x12f4], 1
jmp 0x453caa
and dword [ebp - 0x12f4], 0
mov eax, dword [ebp - 0x1d8c]
cmp eax, dword [ebp - 0x12f4]
jge 0x453cc4
mov dword [ebp - 0x257c], 1
jmp 0x453ccb
and dword [ebp - 0x257c], 0
mov eax, dword [ebp - 0x257c]
mov dword [ebp - 0x2f5c], eax
mov dword [ebp - 0x918], 0
mov dword [ebp - 0x3760], 0xffff
mov byte [ebp - 0x535], 0
movzx eax, byte [ebp - 0x535]
test eax, eax
je 0x453d0a
push 0x35e
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov byte [ebp - 0x4eb], 0
movzx eax, byte [ebp - 0x4eb]
test eax, eax
je 0x453d24
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x1324], 0x8bd85027
mov dword [ebp - 0x3768], 0xffff
mov byte [ebp - 0x513], 0
movzx eax, byte [ebp - 0x513]
test eax, eax
je 0x453d57
push 0x35e
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov byte [ebp - 0x4ed], 0
movzx eax, byte [ebp - 0x4ed]
test eax, eax
je 0x453d71
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x1334], 0
mov dword [ebp - 0x8e8], 5
mov dword [ebp - 0x12fc], 0xd37ad43
mov dword [ebp - 0x8e8], 9
jmp 0x453da8
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0x17
je 0x453dfd
mov dword [ebp - 0x2f64], 0xbecc
mov dword [ebp - 0x2f6c], 0
mov eax, dword [ebp - 0x2f64]
mov dword [ebp - 0x12fc], eax
mov eax, dword [ebp - 0x12fc]
mov dword [ebp - 0x2f6c], eax
mov byte [ebp - 0x527], 0
movzx eax, byte [ebp - 0x527]
test eax, eax
je 0x453dfb
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
jmp 0x453d9b
mov dword [ebp - 0x1344], 0xf7626a9d
mov dword [ebp - 0xb74], 5
mov dword [ebp - 0x1d94], 0xd37ad43
mov dword [ebp - 0xb74], 9
jmp 0x453e34
mov eax, dword [ebp - 0xb74]
inc eax
mov dword [ebp - 0xb74], eax
cmp dword [ebp - 0xb74], 0x17
je 0x453e89
mov dword [ebp - 0x2f74], 0xbecc
mov dword [ebp - 0x2f7c], 0
mov eax, dword [ebp - 0x2f74]
mov dword [ebp - 0x1d94], eax
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x2f7c], eax
mov byte [ebp - 0x4ef], 0
movzx eax, byte [ebp - 0x4ef]
test eax, eax
je 0x453e87
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
jmp 0x453e27
mov dword [ebp - 0x608], 0xffffffff
mov dword [ebp - 0x3770], 0x5d6c05ba
mov byte [ebp - 0x515], 0
movzx eax, byte [ebp - 0x515]
test eax, eax
je 0x453ebd
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov byte [ebp - 0x4f1], 0
movzx eax, byte [ebp - 0x4f1]
test eax, eax
je 0x453ee3
push 0x244a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
mov dword [ebp - 0x2314], 0
mov dword [ebp - 0x1304], 0xe55459ee
mov dword [ebp - 0x22dc], 0x5357f451
mov dword [ebp - 0x2f8c], 0x5fec46bc
mov dword [ebp - 0x22c], 0
jmp 0x453f24
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x453f40
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xda4], 0xfffffff9
jmp 0x453f17
mov dword [ebp - 0x22c], 0
jmp 0x453f59
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x453f75
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x3808], 0x28f3b8c1
jmp 0x453f4c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xda4], 0x10
jmp 0x453fa3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xda4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xda4], 0x1b
je 0x454100
mov dword [ebp - 0x3d0], 0x8a94b2ab
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3778], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda4]
mov dword [ebp - 0x1304], eax
mov eax, dword [ebp - 0x1304]
mov dword [ebp - 0x22dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda4]
cmp eax, dword [ebp - 0x22dc]
jge 0x45400d
mov dword [ebp - 0x1314], 1
jmp 0x454014
and dword [ebp - 0x1314], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda4]
mov dword [ebp - 0x3780], eax
cmp dword [ebp - 0x3d0], 0
je 0x45404c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xda4], 0
je 0x45404c
mov dword [ebp - 0x130c], 1
jmp 0x454053
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x130c], eax
je 0x45406d
mov dword [ebp - 0x1d9c], 1
jmp 0x454074
and dword [ebp - 0x1d9c], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x1d9c], eax
jl 0x45408e
mov dword [ebp - 0xf64], 1
jmp 0x454095
and dword [ebp - 0xf64], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf64]
mov dword [ebp + eax - 0x3808], ecx
mov eax, dword [ebp - 0x3d0]
imul eax, dword [ebp - 0xf64]
cmp dword [ebp - 0x1314], eax
jne 0x4540c9
mov dword [ebp - 0x2f84], 1
jmp 0x4540d0
and dword [ebp - 0x2f84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda4]
mov dword [ebp - 0x3788], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3790], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x2f8c], eax
jmp 0x453f88
mov dword [ebp - 0x8f0], 0xea5d6c05
mov dword [ebp - 0x3798], 0xb4074dd
mov dword [ebp - 0x37a0], 0x6f5a9c4c
mov byte [ebp - 0x531], 0
movzx eax, byte [ebp - 0x531]
test eax, eax
je 0x454138
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x8f0], 0xfffffff8
jmp 0x454151
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 0x19
jle 0x4541ac
mov dword [ebp - 0xb7c], 0
jmp 0x454173
mov eax, dword [ebp - 0xb7c]
inc eax
mov dword [ebp - 0xb7c], eax
cmp dword [ebp - 0xb7c], 4
jge 0x45418f
mov eax, dword [ebp - 0xb7c]
mov dword [ebp + eax*4 - 0x4078], 1
jmp 0x454166
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4078]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x4078], eax
jmp 0x454144
mov dword [ebp - 0x8f8], 0
jmp 0x4541c5
mov eax, dword [ebp - 0x8f8]
inc eax
mov dword [ebp - 0x8f8], eax
cmp dword [ebp - 0x8f8], 1
jge 0x4541e1
mov eax, dword [ebp - 0x8f8]
mov dword [ebp + eax*4 - 0x13fc], 1
jmp 0x4541b8
mov dword [ebp - 0x6cc], 0x3ae35568
mov dword [ebp - 0x2fa4], 0x8d7cbae8
mov dword [ebp - 0x6cc], 0
jmp 0x45420e
mov eax, dword [ebp - 0x6cc]
dec eax
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0xfffffff2
jg 0x45435a
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x2f94], 0
mov dword [ebp - 0xb84], 0
jmp 0x454248
mov eax, dword [ebp - 0xb84]
inc eax
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 2
jge 0x454264
mov eax, dword [ebp - 0xb84]
mov dword [ebp + eax*4 - 0x3220], 0x73eb905d
jmp 0x45423b
mov dword [ebp - 0x568], 1
jmp 0x45427d
mov eax, dword [ebp - 0x568]
dec eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0
jl 0x454349
mov dword [ebp - 0x690], 2
cmp dword [ebp - 0x568], 0
jne 0x454338
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3220], 0
jne 0x4542c3
cmp dword [ebp - 0x690], 0
jne 0x4542c3
and dword [ebp - 0x26ac], 0
jmp 0x4542cd
mov dword [ebp - 0x26ac], 1
cmp dword [ebp - 0x26ac], 0
je 0x4542eb
cmp dword [ebp - 0x6cc], 0
je 0x4542eb
mov dword [ebp - 0x131c], 1
jmp 0x4542f2
and dword [ebp - 0x131c], 0
mov eax, dword [ebp - 0x2f94]
cmp dword [ebp - 0x131c], eax
jle 0x45430c
mov dword [ebp - 0x2f9c], 1
jmp 0x454313
and dword [ebp - 0x2f9c], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x37a8], eax
mov eax, dword [ebp - 0x690]
mov ecx, dword [ebp - 0x690]
push 4
pop edx
imul edx, edx, 0
sub ecx, dword [ebp + edx - 0x3220]
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x690], eax
jmp 0x454270
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x2fa4], eax
jmp 0x454201
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x918], eax
imul eax, dword [ebp - 0x918], 0x466b
test eax, eax
jne 0x454386
cmp dword [ebp - 0x918], 0
jne 0x454386
and dword [ebp - 0x2fac], 0
jmp 0x454390
mov dword [ebp - 0x2fac], 1
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x37b0], eax
push 5
pop eax
test eax, eax
jne 0x4543af
mov dword [ebp - 0x1da4], 1
jmp 0x4543b6
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x1da4]
mov dword [ebp - 0x1324], eax
cmp dword [ebp - 0x1324], 0xfffffffd
jne 0x4543d7
mov dword [ebp - 0x22e4], 1
jmp 0x4543de
and dword [ebp - 0x22e4], 0
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x22e4]
cmp dword [ebp - 0x284], eax
jne 0x4543fe
mov dword [ebp - 0x132c], 1
jmp 0x454405
and dword [ebp - 0x132c], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x132c], eax
jle 0x45441f
mov dword [ebp - 0x1dac], 1
jmp 0x454426
and dword [ebp - 0x1dac], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x2584], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2584]
mov dword [ebp + eax - 0x13fc], ecx
mov eax, dword [ebp - 0x1dac]
mov dword [ebp - 0x1334], eax
mov eax, dword [ebp - 0x1334]
cmp dword [ebp - 0x2584], eax
jge 0x45446b
mov dword [ebp - 0x133c], 1
jmp 0x454472
and dword [ebp - 0x133c], 0
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x133c]
add eax, dword [ebp - 0x284]
cmp eax, 2
je 0x454495
mov dword [ebp - 0x1db4], 1
jmp 0x45449c
and dword [ebp - 0x1db4], 0
mov eax, dword [ebp - 0x1db4]
mov dword [ebp - 0x1344], eax
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x1344], eax
jge 0x4544c2
mov dword [ebp - 0x22ec], 1
jmp 0x4544c9
and dword [ebp - 0x22ec], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x22ec], eax
jle 0x4544e3
mov dword [ebp - 0x134c], 1
jmp 0x4544ea
and dword [ebp - 0x134c], 0
mov eax, dword [ebp - 0x134c]
mov dword [ebp - 0x2314], eax
mov dword [ebp - 0x2fc], 0xffffffff
mov dword [ebp - 0x800], 0x67fa5c62
mov dword [ebp - 0x258c], 0xffffffff
mov dword [ebp - 0x37b8], 0xcc80fc3a
mov dword [ebp - 0x37c0], 0xbfb66feb
mov dword [ebp - 0x1354], 2
mov dword [ebp - 0x900], 0
jmp 0x45454b
mov eax, dword [ebp - 0x900]
inc eax
mov dword [ebp - 0x900], eax
cmp dword [ebp - 0x900], 2
jge 0x454567
mov eax, dword [ebp - 0x900]
mov dword [ebp + eax*4 - 0x2e54], 0x7862
jmp 0x45453e
mov dword [ebp - 0x2fc], 0
jmp 0x454580
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jg 0x45459e
mov eax, dword [ebp - 0x2fc]
mov eax, dword [ebp + eax*4 - 0x2e54]
mov dword [ebp - 0x800], eax
jmp 0x454573
mov dword [ebp - 0x800], 0
jmp 0x4545b7
mov eax, dword [ebp - 0x800]
inc eax
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x800], 2
jl 0x45478a
mov dword [ebp - 0xe3c], 0xffffffff
mov dword [ebp - 0x2fc4], 0xdc5336de
mov dword [ebp - 0x2fbc], 0xdd78f4f8
mov dword [ebp - 0x1dcc], 0xdf9c7750
mov dword [ebp - 0x135c], 1
mov dword [ebp - 0x1364], 0x4f5ac3d6
mov dword [ebp - 0x1dbc], 0x36be856d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e54], 0
je 0x45470c
mov eax, dword [ebp - 0x1dbc]
dec eax
mov dword [ebp - 0x1dbc], eax
mov eax, dword [ebp - 0x258c]
mov dword [ebp - 0x37c8], eax
cmp dword [ebp - 0x2fc], 0x6b5cfda6
jne 0x454655
cmp dword [ebp - 0x1354], 0
jne 0x454655
and dword [ebp - 0x2fb4], 0
jmp 0x45465f
mov dword [ebp - 0x2fb4], 1
mov eax, dword [ebp - 0x1354]
mov dword [ebp - 0x37d0], eax
mov eax, 0xa9ef
cmp eax, 2
jl 0x454681
mov dword [ebp - 0x2744], 1
jmp 0x454688
and dword [ebp - 0x2744], 0
mov eax, dword [ebp - 0x2744]
mov dword [ebp - 0x135c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e54]
cmp dword [ebp - 0x135c], eax
jl 0x4546b5
mov dword [ebp - 0x1dc4], 1
jmp 0x4546bc
and dword [ebp - 0x1dc4], 0
mov eax, dword [ebp - 0x1dc4]
mov dword [ebp - 0x1364], eax
mov eax, dword [ebp - 0x2fbc]
cmp dword [ebp - 0x1364], eax
jl 0x4546e2
mov dword [ebp - 0x22f4], 1
jmp 0x4546e9
and dword [ebp - 0x22f4], 0
mov eax, dword [ebp - 0x2fc4]
cmp dword [ebp - 0x22f4], eax
je 0x454700
cmp dword [ebp - 0x1dcc], 0
je 0x45470c
mov dword [ebp - 0x136c], 1
jmp 0x454713
and dword [ebp - 0x136c], 0
mov eax, dword [ebp - 0xe3c]
cmp eax, dword [ebp - 0x136c]
jg 0x45472d
mov dword [ebp - 0x2fcc], 1
jmp 0x454734
and dword [ebp - 0x2fcc], 0
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0x37d8], eax
cmp dword [ebp - 0x1dcc], 0
jne 0x454759
push 9
pop eax
test eax, eax
jne 0x454759
and dword [ebp - 0x1374], 0
jmp 0x454763
mov dword [ebp - 0x1374], 1
mov eax, dword [ebp - 0x1374]
mov dword [ebp - 0xe3c], eax
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x258c], eax
jmp 0x4545aa
mov dword [ebp - 0x608], 0
jmp 0x4547a3
cmp dword [ebp - 0x608], 0x11
jl 0x4550b4
mov dword [ebp - 0x22fc], 0x6f9b2cfb
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x658], 0xa3cfce2
mov dword [ebp - 0x3d8], 0x24307a32
mov dword [ebp - 0x184], 0x3494abc2
mov dword [ebp - 0x3034], 0
mov dword [ebp - 0x28b0], 0xffffffff
mov dword [ebp - 0x28ac], 0xffffffff
mov dword [ebp - 0x28a8], 0xffffffff
mov dword [ebp - 0x28a4], 0xffffffff
mov dword [ebp - 0x30b0], 0
mov dword [ebp - 0x30ac], 0
mov dword [ebp - 0x30a8], 0
mov dword [ebp - 0x30a4], 0
mov dword [ebp - 0x13a4], 0x585f
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x37e0], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x120], eax
jge 0x45486c
mov dword [ebp - 0x137c], 1
jmp 0x454873
and dword [ebp - 0x137c], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0x137c], eax
jge 0x45488d
mov dword [ebp - 0x2fd4], 1
jmp 0x454894
and dword [ebp - 0x2fd4], 0
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x37e8], eax
cmp dword [ebp - 0x3d8], 0xfff6
jb 0x4548b8
mov dword [ebp - 0x1dd4], 1
jmp 0x4548bf
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0x3d8]
imul eax, dword [ebp - 0x1dd4]
cmp dword [ebp - 0x22fc], eax
je 0x4548e0
mov dword [ebp - 0x1384], 1
jmp 0x4548e7
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x1384], eax
je 0x454901
mov dword [ebp - 0x302c], 1
jmp 0x454908
and dword [ebp - 0x302c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x37f0], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x3ab4], eax
mov eax, dword [ebp - 0x22fc]
add eax, dword [ebp - 0x658]
mov dword [ebp - 0x3034], eax
mov dword [ebp - 0x3d8], 0
jmp 0x45494b
cmp dword [ebp - 0x3d8], 3
jg 0x454cc2
mov dword [ebp - 0x7a0], 0x68ec0ae9
mov dword [ebp - 0x6dc], 1
mov dword [ebp - 0xba4], 0
jmp 0x4550e1
mov eax, dword [ebp - 0xba4]
inc eax
mov dword [ebp - 0xba4], eax
cmp dword [ebp - 0xba4], 2
jge 0x4550fd
mov eax, dword [ebp - 0xba4]
mov dword [ebp + eax*4 - 0x2e60], 0x41fc9a57
jmp 0x4550d4
mov dword [ebp - 0x7a0], 0xffffffef
jmp 0x455116
cmp dword [ebp - 0x7a0], 2
jge 0x4552e3
mov dword [ebp - 0x920], 0xf5cd53bc
mov dword [ebp - 0xf94], 0x431fadac
mov dword [ebp - 0x3074], 0x29a275ff
mov dword [ebp - 0x158], 0
jmp 0x45515a
cmp dword [ebp - 0x158], 3
jge 0x455176
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x3c4c], 0xfffffff9
jmp 0x45514d
mov dword [ebp - 0x158], 0
jmp 0x45518f
mov dword [ebp - 0x6dc], 1
jmp 0x4552fc
cmp dword [ebp - 0x6dc], 0
jl 0x455321
mov byte [ebp - 0x517], 0
movzx eax, byte [ebp - 0x517]
test eax, eax
je 0x45531f
mov dword [ebp - 0x858], 0
mov dword [ebp - 0x1e1c], 3
mov dword [ebp - 0x308c], 0xffff
mov dword [ebp - 0x1414], 0x80254f8d
mov dword [ebp - 0x309c], 0xfffffffc
cmp dword [ebp - 0x858], 0
je 0x455378