Function at 0x45d370
Capabilities:
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49ed61
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x318
mov eax, dword [0x4d7200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2fc], esi
mov eax, dword [esi + 0xbc]
lea ecx, [esi + 0x2e8]
cmp eax, 0xffffffff
jne 0x45d3cc
mov eax, dword [ecx]
mov edx, dword [esi + 0x2e4]
test edx, edx
je 0x45f66f
cmp eax, 1
jl 0x45f66f
cmp eax, dword [ecx]
jg 0x45f66f
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x45f66f
cmp dword [edx + eax*8], 0xf
jne 0x45f66f
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x328], eax
test eax, eax
js 0x45f66f
push ecx
push dword [esi + 0xd8]
lea ecx, [esi + 0x2a8]
call fcn.00416520
mov edi, eax
lea ecx, [esi + 0x2a8]
test edi, edi
jns 0x45d45a
push ecx
push 0x1c2
push 0x96
push ecx
push 0
push 0x4c93b8
jmp 0x45f688
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x20], 1
mov dword [ebp - 4], 0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x2c], 1
push 4
push edi
mov byte [ebp - 4], 1
push dword [esi + 0xd8]
call fcn.00416470
xor esi, esi
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x30], esi
mov edx, 1
test eax, eax
jne 0x45d4ef
mov byte [ebp - 0x2c], al
xor ecx, ecx
mov eax, edx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x300], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x34], eax
test eax, eax
je 0x45f612
test esi, esi
jne 0x45d510
cmp word [eax], si
je 0x45d50b
inc esi
cmp word [eax + esi*2], 0
jne 0x45d503
mov dword [ebp - 0x30], esi
test esi, esi
jle 0x45f612
push eax
mov byte [ebp - 0x2c], 1
call fcn.0048e06c
add esp, 4
mov dword [ebp - 0x318], eax
cmp eax, 1
jl 0x45f616
push 0
push edi
mov edi, dword [ebp - 0x2fc]
push dword [edi + 0xd8]
lea ecx, [edi + 0x2a8]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x45d5a0
test eax, eax
je 0x45d562
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45d598
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45d585
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45d5b7
test eax, eax
je 0x45d5ad
push eax
call fcn.00489ed3
add esp, 4
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], 0
push 0
push 1
push 1
push 0
push 0x4c1b00
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x20], 1
lea esi, [edi + 0x2a8]
call fcn.004025a0
test eax, eax
je 0x45d5f4
push ecx
push 0x1c2
push 0x96
push esi
push 0
push 0x4c9440
mov ecx, edi
jmp 0x45f635
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x48], xmm0
push ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
movaps xmm0, xmmword [0x4cd010]
push 0
push dword [edi + 0x54]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0xd
push dword [edi + 0x44]
mov dword [ebp - 0x3c], 0
push esi
call fcn.00417480
push dword [edi + 0x4d8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x45d64d
mov edi, dword [edi + 0x4d8]
jmp 0x45d64f
xor edi, edi
push 0x268
lea eax, [ebp - 0x2c0]
push 0
push eax
call fcn.0048b9e0
mov esi, dword [ebp - 0x2fc]
add esp, 0xc
mov word [ebp - 0x288], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov byte [ebp - 0x1a8], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c0]
push 1
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
call fcn.00417000
push ecx
push edi
push 0xffffffffffffffff
push SysReAllocString
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xf0
push 0x23a
add esi, 0x22c
lea eax, [ebp - 0x2c0]
push 0x4c94a8
cmovne eax, esi
lea ecx, [ebp - 0x2c0]
push 0x4c3cf8
mov dword [ebp - 0x100], eax
call fcn.0040bf80
push ecx
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0xf0
push 0x23a
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 5
call fcn.004167f0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x304], eax
test edi, edi
je 0x45d781
mov edi, dword [ebp - 0x2fc]
xor esi, esi
add edi, 0x2f8
mov eax, dword [edi]
test eax, eax
je 0x45d75f
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x45d75f
inc esi
add edi, 4
cmp esi, 0x30
jl 0x45d743
jmp 0x45d781
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x304]
mov dword [ecx + esi*4 + 0x2f8], eax
inc esi
cmp esi, dword [ecx + 0x2f4]
jle 0x45d781
mov dword [ecx + 0x2f4], esi
movsd xmm0, qword [0x4cc778]
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xffffff
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0x2bc
mov byte [ebp - 0x144], 1
mov byte [ebp - 0x102], 0
nop
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x45d7c0
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x142]
push 0x20
push eax
call fcn.0048d183
add esp, 0x10
mov dword [ebp - 0xd0], 0x1400
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x45d869
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x1c
push 0x230
push 5
and eax, 1
push 5
shl eax, 0x11
add eax, 0x50000300
push eax
push 0x4c94d0
push 0x4c018c
push 0
call edi
test eax, eax
je 0x45d869
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cce60]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
movsd xmm0, qword [0x4cc768]
xor eax, eax
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0x190
mov byte [ebp - 0x144], 1
mov byte [ebp - 0x102], 0
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x45d893
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x142]
push 0x20
push eax
call fcn.0048d183
add esp, 0x10
mov dword [ebp - 0xd0], 0x400
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45d936
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xe6
push 0x4b
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c8898
push 0x4c018c
push 0
call edi
test eax, eax
je 0x45d936
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb80]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov eax, dword [ebp - 0x300]
push eax
call fcn.00489ed3
add esp, 4
mov byte [ebp - 0x2c], 0
xor esi, esi
nop dword [eax + eax]
inc esi
cmp word [esi*2 + 0x4c88e8], 0
jne 0x45d950
xor ecx, ecx
mov dword [ebp - 0x30], esi
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x34], eax
test esi, esi
jle 0x45d9a9
mov edi, 0x4c88e8
mov ecx, eax
sub edi, eax
mov edx, esi
nop dword [eax]
mov ax, word [ecx + edi]
lea ecx, [ecx + 2]
mov word [ecx - 2], ax
sub edx, 1
jne 0x45d990
mov eax, dword [ebp - 0x34]
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
sub esp, 0x10
mov byte [ebp - 0x2c], 1
xor ecx, ecx
mov word [eax + esi*2], cx
lea ecx, [ebp - 0x2c0]
push 0x5a
push 0x48
push 0xff
push eax
call fcn.00411c70
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x308], eax
call fcn.00416d40
test al, al
je 0x45da46
mov ecx, dword [ebp - 0x280]
movzx eax, byte [ebp - 0x78]
inc ecx
push 0
push dword [ebp - 0x1a4]
and eax, 1
push ecx
push dword [ebp - 0x8c]
shl eax, 0x11
push 0x12
push 0x32
push 0x4b
push 0x17c
add eax, 0x50000100
push eax
push 0x4c891c
push 0x4c018c
push 0
call edi
test eax, eax
je 0x45da46
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc940]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
jne 0x45da64
mov dword [ebp - 0x314], 0
jmp 0x45dae0
test byte [ebp - 0x78], 1
mov eax, 0x50020080
push 0
push dword [ebp - 0x1a4]
mov ecx, 0x50000080
cmovne ecx, eax
mov eax, dword [ebp - 0x280]
inc eax
or ecx, 0x10000
push eax
push dword [ebp - 0x8c]
push 0x14
push 0x78
push 0x49
push 0x1ae
push ecx
push 0
push 0x4c0220
push 0x200
call edi
test eax, eax
jne 0x45dab7
mov dword [ebp - 0x314], eax
jmp 0x45dae0
push eax
push 0xc
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccca0]
mov dword [ebp - 0x314], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
cmp dword [ebp - 0x90], 0
je 0x45db6c
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45db6c
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xe6
push 0x78
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50010003
push eax
push 0x4c9500
push 0x4c019c
push 0
call edi
test eax, eax
je 0x45db6c
push eax
push 4
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
mov esi, eax
movaps xmm0, xmmword [0x4ccb90]
mov dword [ebp - 0x320], esi
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x45db76
mov dword [ebp - 0x320], 0
sub esp, 8
lea ecx, [ebp - 0x2c0]
push 0x4c9548
push 0xffffffffffffffff
call fcn.00415120
lea ecx, [ebp - 0x34]
call fcn.0041e330
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x300], eax
test eax, eax
jne 0x45dbbb
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x300], eax
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov word [eax], cx
sub esp, 0x10
mov byte [ebp - 0x2c], 1
lea ecx, [ebp - 0x2c0]
push 0x5a
push 0x75
push 0xff
push eax
call fcn.00411c70
push 0x40
push 0xffffffffffffffff
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x304], eax
call fcn.00414360
cmp dword [ebp - 0x90], 0
je 0x45dc78
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45dc78
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x64
push 0x78
and eax, 1
push 0x17c
shl eax, 0x11
add eax, 0x50010003
push eax
push 0x4c8974
push 0x4c019c
push 0
call edi
test eax, eax
je 0x45dc78
push eax
push 4
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
mov esi, eax
movaps xmm0, xmmword [0x4cca10]
mov dword [ebp - 0x31c], esi
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x45dc82
mov dword [ebp - 0x31c], 0
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45dcfa
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x212
push 0xa0
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c95b8
push 0x4c018c
push 0
call edi
test eax, eax
je 0x45dcfa
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccc30]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45dd6f
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x32
push 0xcd
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9638
push 0x4c018c
push 0
call edi
test eax, eax
je 0x45dd6f
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc960]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45dde4
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x64
push 0xcd
and eax, 1
push 0x46
shl eax, 0x11
add eax, 0x50010009
push eax
push 0x4c9644
push 0x4c019c
push 0
call edi
test eax, eax
je 0x45dde4
push eax
push 0x15
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cca30]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x2c0]
call fcn.00414360
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
jne 0x45de11
mov dword [ebp - 0x2c4], 0
jmp 0x45de88
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x64
push 0xcd
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50010009
push eax
push 0x4c9664
push 0x4c019c
push 0
call edi
test eax, eax
jne 0x45de5f
mov dword [ebp - 0x2c4], eax
jmp 0x45de88
push eax
push 0x15
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4cca40]
mov dword [ebp - 0x2c4], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
cmp dword [ebp - 0x90], 0
je 0x45df11
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45df11
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x1e
push 0x64
push 0xc8
and eax, 1
push 0x136
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c033c
push 0x4c019c
push 0
call edi
test eax, eax
je 0x45df11
push eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
mov esi, eax
movaps xmm0, xmmword [0x4cceb0]
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x45df13
xor esi, esi
sub esp, 8
mov dword [ebp - 0x324], esi
lea ecx, [ebp - 0x2c0]
push 0x4c4258
push 0xffffffffffffffff
call fcn.00415120
cmp dword [ebp - 0x90], 0
je 0x45dfb7
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x45dfb7
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x20
push 0x78
push 0xc8
and eax, 1
push 0x1ae
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c9680
push 0x4c019c
push 0
call edi
test eax, eax
je 0x45dfb7
push eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
mov edi, eax
movaps xmm0, xmmword [0x4ccf30]
lea edx, [edi + edi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x45dfb9
xor edi, edi
sub esp, 8
mov dword [ebp - 0x310], edi
lea ecx, [ebp - 0x2c0]
push 0x4c9698
push 0xffffffffffffffff
call fcn.00415120
mov eax, 0x1b
mov byte [ebp - 0x1c], 1
mov word [ebp - 0x1a], ax
mov eax, dword [ebp - 0x7c]
mov word [ebp - 0x18], si
test eax, eax
je 0x45dff3
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
push 1
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
xor ecx, ecx
cmp eax, 0xffffffff
push 1
cmove eax, ecx
lea ecx, [ebp - 0x2c0]
push 1
mov dword [ebp - 0x7c], eax
call fcn.0040db40
mov esi, dword [ebp - 0x2fc]
mov ecx, esi
push 0
call fcn.004284d0
test eax, eax
je 0x45e268
mov eax, dword [esi + 0x22c]
cmp eax, 0xfffffffa
je 0x45e341
lea ecx, [ebp - 0x2c0]
cmp dword [esi + 0x25c], ecx
jne 0x45e251
cmp eax, dword [ebp - 0x324]
je 0x45e341
mov ecx, dword [ebp - 0x320]
cmp eax, ecx
jne 0x45e09b
push 4
push ecx
lea ecx, [ebp - 0x2c0]
call fcn.00415560
test eax, eax
mov ecx, 0x40
mov eax, 0x20
cmovne ecx, eax
push ecx
push dword [ebp - 0x304]
lea ecx, [ebp - 0x2c0]
call fcn.00414360
jmp 0x45e251
cmp eax, 0xffffffbf
jne 0x45e1f5
mov ecx, dword [ebp - 0x308]
cmp dword [esi + 0x238], ecx
jne 0x45e1f5
push ecx
lea ecx, [ebp - 0x2c0]
call fcn.00415800
mov edi, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30c], edi
test edi, edi
jne 0x45e125
test eax, eax
je 0x45e0de
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45e114
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45e101
xor ecx, ecx
mov word [edx + eax*2], cx
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x30c], edi
jmp 0x45e13c
test eax, eax
je 0x45e132
push eax
call fcn.00489ed3
add esp, 4
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x20], 1
cmp edi, 0x4c80b4
jne 0x45e14f
mov cl, 1
jmp 0x45e1d2
test edi, edi
je 0x45e1d0
mov esi, 0x4c80b4
nop dword [eax]
movzx eax, word [edi]
mov ecx, eax
test ax, ax
jne 0x45e179
cmp word [esi], ax
jne 0x45e17e
mov esi, dword [ebp - 0x2fc]
mov cl, 1
jmp 0x45e1d2
cmp ax, word [esi]
je 0x45e1bc
xor edx, edx
cmp dx, ax
jne 0x45e189
xor edi, edi
jmp 0x45e195
push ecx
call fcn.0048e154
add esp, 4
movzx edi, ax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x45e1a5
xor eax, eax
jmp 0x45e1b1
push ecx
call fcn.0048e154
add esp, 4
movzx eax, ax
cmp di, ax
jne 0x45e1ca
mov edi, dword [ebp - 0x30c]
add edi, 2
add esi, 2
mov dword [ebp - 0x30c], edi
jmp 0x45e160
mov esi, dword [ebp - 0x2fc]
xor cl, cl
test cl, cl
mov eax, 0x48
mov ecx, 0x20
cmovne eax, ecx
lea ecx, [ebp - 0x2c0]
push eax
push dword [ebp - 0x31c]
call fcn.00414360
jmp 0x45e251
cmp eax, edi
jne 0x45e251
push 1
push 0
lea ecx, [ebp - 0x2c0]
call fcn.0040db40
nop dword [eax + eax]
push 1
mov ecx, esi
call fcn.004284d0
test eax, eax
jne 0x45e210
push ecx
push 0x1c2
push 0x96
lea eax, [esi + 0x2a8]
mov ecx, esi
push eax
push 1
push 0x4c96d0
call fcn.00432b40
cmp eax, 1
je 0x45e268
push 1
push 5
lea ecx, [ebp - 0x2c0]
call fcn.0040db40
push 0
mov ecx, esi
call fcn.004284d0
mov edi, dword [ebp - 0x310]
test eax, eax
jne 0x45e030
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2ec], 0
mov byte [ebp - 0x2e4], 1
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2e0], 0
mov byte [ebp - 0x2d8], 1
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2d4], 0
mov byte [ebp - 0x2cc], 1
mov dword [ebp - 0x2c8], 0x100
push 3
push dword [ebp - 0x328]
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0x2a8]
push dword [esi + 0xbc]
mov dword [ebp - 0x2f8], esi
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x45e349
test eax, eax
je 0x45e2fc
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45e333
nop
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45e320
xor ecx, ecx
mov word [edx + eax*2], cx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
jmp 0x45e35e
or edi, 0xffffffff
jmp 0x45f1a4
test eax, eax
je 0x45e356
push eax
call fcn.00489ed3
add esp, 4
xor eax, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 1
test esi, esi
je 0x45e38e
test eax, eax
jne 0x45e37d
cmp word [esi], ax
je 0x45e378
nop
inc eax
cmp word [esi + eax*2], 0
jne 0x45e370
mov dword [ebp - 0x24], eax
test eax, eax
jle 0x45e38e
push esi
mov byte [ebp - 0x20], 1
call fcn.0048e06c
add esp, 4
jmp 0x45e394
mov byte [ebp - 0x20], 0
xor eax, eax
push dword [ebp - 0x308]
mov edi, dword [ebp - 0x318]
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edi
call fcn.00415800
mov esi, eax
mov eax, dword [ebp - 0x2ec]
test esi, esi
jne 0x45e421
test eax, eax
je 0x45e3d0
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x2e4], 0
mov dword [ebp - 0x2e8], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x2e8]
xor ecx, ecx
mov dword [ebp - 0x2ec], edx
test eax, eax
jle 0x45e419
nop
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x2ec]
cmp ecx, eax
jl 0x45e400
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45e43e
test eax, eax
je 0x45e42e
push eax
call fcn.00489ed3
add esp, 4
mov dword [ebp - 0x2ec], esi
mov dword [ebp - 0x2e8], 0
push dword [ebp - 0x314]
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 0x2e4], 1
call fcn.00415800
mov esi, eax
test esi, esi
jne 0x45e46a
push eax
lea ecx, [ebp - 0x2e0]
call fcn.00401860
jmp 0x45e494
mov eax, dword [ebp - 0x2e0]
test eax, eax
je 0x45e47d
push eax
call fcn.00489ed3
add esp, 4
mov dword [ebp - 0x2e0], esi
mov dword [ebp - 0x2dc], 0
mov byte [ebp - 0x2d8], 1
push 4
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x2c0]
call fcn.00415560
movzx ecx, byte [ebp - 0x2c5]
test eax, eax
mov eax, 1
cmovne ecx, eax
push 4
push dword [ebp - 0x320]
mov byte [ebp - 0x2c5], cl
lea ecx, [ebp - 0x2c0]
call fcn.00415560
test eax, eax
je 0x45e577
push dword [ebp - 0x304]
lea ecx, [ebp - 0x2c0]
call fcn.00415800
mov esi, eax
mov eax, dword [ebp - 0x2d4]
test esi, esi
jne 0x45e553
test eax, eax
je 0x45e503
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x2cc], 0
mov dword [ebp - 0x2d0], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x2d0]
xor ecx, ecx
mov dword [ebp - 0x2d4], edx
test eax, eax
jle 0x45e54b
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x2d4]
cmp ecx, eax
jl 0x45e532
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45e570
test eax, eax
je 0x45e560
push eax
call fcn.00489ed3
add esp, 4
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2d0], 0
mov byte [ebp - 0x2cc], 1
push 4
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0x2c0]
call fcn.00415560
movzx ecx, byte [ebp - 0x2c8]
test eax, eax
mov eax, 1
cmovne ecx, eax
mov byte [ebp - 0x2c8], cl
lea ecx, [ebp - 0x2c0]
call fcn.0040c540
push edi
lea ecx, [ebp - 0x34]
call fcn.00401e50
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x304], esi
test esi, esi
jne 0x45e5e0
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x304], esi
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0x20], 1
mov dword [ebp - 0x300], eax
test eax, eax
jne 0x45e60c
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x300], eax
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov word [eax], cx
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x2c], 1
call fcn.00401e50
mov edx, dword [ebp - 0x300]
mov edi, eax
mov dword [ebp - 0x314], edi
xor ecx, ecx
mov dword [ebp - 0x308], 0x4c439c
mov dword [ebp - 0x318], edx
mov eax, dword [edi]
mov dword [ebp - 0x30c], eax
mov dword [edi], 0
mov byte [edi + 8], 0
mov dword [edi + 4], 0
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x4c9730], 0
jne 0x45e660
test edx, edx
je 0x45e681
xor eax, eax
cmp word [edx], ax
je 0x45e67f
inc eax
cmp word [edx + eax*2], 0
jne 0x45e677
add ecx, eax
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c8390], 0
jne 0x45e683
add ecx, eax
test esi, esi
je 0x45e6aa
xor eax, eax
cmp word [esi], ax
je 0x45e6a8
nop dword [eax]
inc eax
cmp word [esi + eax*2], 0
jne 0x45e6a0
add ecx, eax
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c439c], 0
jne 0x45e6b0
add ecx, eax
mov edx, 2
mov dword [ebp - 0x310], ecx
lea eax, [ecx + 1]
xor ecx, ecx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edi, dword [edi]
add esp, 4
mov dword [ebp - 0x2c4], eax
mov edx, eax
test edi, edi
je 0x45e711
movzx ecx, word [edi]
test cx, cx
je 0x45e711
sub edi, eax
nop dword [eax + eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x45e700
mov edi, 0x4c9730
mov ecx, 0x50
sub edi, edx
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x45e720
mov eax, dword [ebp - 0x300]
test eax, eax
je 0x45e761
movzx eax, word [eax]
mov ecx, eax
test ax, ax
je 0x45e761
mov esi, dword [ebp - 0x318]
nop dword [eax + eax]
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x45e750
mov eax, 0x20
mov esi, 0x4c8390
nop dword [eax + eax]
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x45e770
mov esi, dword [ebp - 0x304]
test esi, esi
je 0x45e7a6
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x45e7a6
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x45e795
mov eax, 0x2e
nop dword [eax + eax]
mov word [edx], ax
lea edx, [edx + 2]
mov eax, dword [ebp - 0x308]
add eax, 2
mov dword [ebp - 0x308], eax
movzx eax, word [eax]
test ax, ax
jne 0x45e7b0
mov esi, dword [ebp - 0x314]
xor eax, eax
mov word [edx], ax
mov eax, dword [esi]
test eax, eax
je 0x45e7e7
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2c4]
mov dword [esi], eax
mov eax, dword [ebp - 0x310]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x30c]
mov byte [esi + 8], 1
test eax, eax
je 0x45e80f
push eax
call fcn.00489ed3
add esp, 4
mov edx, dword [ebp - 0x28]
test edx, edx
jne 0x45e82e
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edi, dword [ebp - 0x2fc]
sub esp, 8
mov byte [ebp - 0x20], 1
push 0
push 0xffffffffffffffb0
sub esp, 0x10
lea eax, [edi + 0x2a8]
lea ecx, [edi + 0x5b0]
push eax
push edx
call fcn.004192c0
mov ecx, eax
call fcn.0041a070
mov ecx, eax
call fcn.0041a580
push 0
push 0
lea eax, [ebp - 0x2f8]
push eax
push 0x46fe80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
or eax, 0xffffffff
test esi, esi
cmove esi, eax
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x2c4], esi
mov byte [ebp - 4], 0xb
test esi, esi
je 0x45e8f2
cmp esi, eax
je 0x45e8f2
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0
push esi
call edi
cmp eax, 0x102
jne 0x45e8ec
mov ecx, dword [ebp - 0x2fc]
push 0
call fcn.004284d0
mov ecx, dword [ebp - 0x2fc]
cmp dword [ecx], 0
jne 0x45e8a5
cmp dword [ecx + 0x22c], 0xfffffffa
jne 0x45e8a5
push 0x4c2750
mov dword [ecx], 1
lea ecx, [ecx + 0x5b0]
push 0xffffffffffffffb0
call fcn.0041a070
jmp 0x45e8a5
mov edi, dword [ebp - 0x2fc]
mov eax, dword [edi + 0x510]
cmp eax, 0xffffffff
je 0x45e91c
test eax, eax
je 0x45e91c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x510], 0xffffffff
mov dword [edi + 0x514], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
sub esp, 8
lea ecx, [edi + 0x130]
call fcn.0041b0e0
sub esp, 8
lea ecx, [edi + 0x168]
call fcn.0041b0e0
sub esp, 8
lea ecx, [edi + 0x1a0]
call fcn.0041b0e0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x45e968
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
test eax, eax
jne 0x45e9e2
mov byte [ebp - 0x20], al
inc eax
cmp word [eax*2 + 0x4c9778], 0
jne 0x45e980
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45e9d7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4c9778]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45e9c0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45f088
cmp eax, 0xfffffffd
jne 0x45ea52
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c97e0], 0
jne 0x45e9f1
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45e9d7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4c97e0]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ea30
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45f088
cmp eax, 0xfffffffc
jne 0x45eac2
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9830], 0
jne 0x45ea61
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45e9d7
nop dword [eax]
mov ax, word [ecx*2 + 0x4c9830]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45eaa0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45f088
cmp dword [edi], 0
je 0x45eb32
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c8d40], 0
jne 0x45ead1
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45e9d7
nop dword [eax]
mov ax, word [ecx*2 + 0x4c8d40]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45eb10
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45f088
cmp eax, 1
jne 0x45eb9c
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4cc490], 0
jne 0x45eb41
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax]
mov ax, word [ecx*2 + 0x4cc490]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45eb80
jmp 0x45ef87
cmp eax, 2
jne 0x45ec0c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc4c4], 0
jne 0x45ebb0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc4c4]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ebf0
jmp 0x45ef87
cmp eax, 3
jne 0x45ec7c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc4ec], 0
jne 0x45ec20
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc4ec]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ec60
jmp 0x45ef87
cmp eax, 4
jne 0x45ecec
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc518], 0
jne 0x45ec90
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc518]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ecd0
jmp 0x45ef87
cmp eax, 5
jne 0x45ed5c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc53c], 0
jne 0x45ed00
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc53c]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ed40
jmp 0x45ef87
cmp eax, 6
jne 0x45edcc
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc564], 0
jne 0x45ed70
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc564]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45edb0
jmp 0x45ef87
cmp eax, 0x1001
jne 0x45ee3c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc590], 0
jne 0x45ede0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc590]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ee20
jmp 0x45ef87
cmp eax, 0x9c41
jne 0x45eeac
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc5b8], 0
jne 0x45ee50
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc5b8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ee90
jmp 0x45ef87
cmp eax, 0x9c42
jne 0x45ef1c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc5d8], 0
jne 0x45eec0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc5d8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ef00
jmp 0x45ef87
cmp eax, 0x9c44
jne 0x45f219
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc650], 0
jne 0x45ef30
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45ef87
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4cc650]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45ef70
xor ecx, ecx
mov word [edx + eax*2], cx
mov byte [ebp - 0x20], 1
cmp dword [ebp - 0x28], ecx
jne 0x45efab
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
mov edi, 2
cmp dword [ebp - 0x24], 0
mov byte [ebp - 0x20], 0
jne 0x45efde
xor ecx, ecx
cmp dword [ebp - 0x28], ecx
je 0x45efdb
mov eax, dword [ebp - 0x28]
cmp word [eax], cx
je 0x45efdb
nop dword [eax]
mov eax, dword [ebp - 0x28]
inc ecx
cmp word [eax + ecx*2], 0
jne 0x45efd0
mov dword [ebp - 0x24], ecx
xor ecx, ecx
inc ecx
cmp word [ecx*2 + 0x4c9bf8], 0
jne 0x45efe0
mov eax, dword [ebp - 0x24]
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x308], eax
inc eax
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, dword [ebp - 0x28]
mov esi, 0x4c9bf8
add esp, 4
mov dword [ebp - 0x304], eax
mov ecx, eax
mov edi, 0x54
sub esi, eax
mov word [ecx], di
add ecx, 2
movzx eax, word [ecx + esi]
mov edi, eax
test ax, ax
jne 0x45f023
cmp dword [ebp - 0x28], 0
mov esi, dword [ebp - 0x318]
je 0x45f061
movzx eax, word [edx]
mov edi, eax
test ax, ax
je 0x45f061
nop word [eax + eax]
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x45f050
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x45f076
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x28], 0
mov byte [ebp - 0x20], 1
jne 0x45f0a7
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
mov edi, dword [ebp - 0x28]
mov byte [ebp - 0x20], 1
test edi, edi
jne 0x45f0c7
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
push 0
push 0x4c2b50
push ecx
push edi
mov edi, dword [ebp - 0x2fc]
push dword [ebp - 0x28]
mov byte [ebp - 0x20], 1
push 0x64
lea ecx, [edi + 0x5b0]
call fcn.0041a070
mov ecx, eax
call fcn.00419f00
mov ecx, eax
call fcn.0041a380
push 0
mov ecx, edi
call fcn.004284d0
test eax, eax
je 0x45f13e
nop dword [eax]
mov ecx, dword [edi + 0x22c]
cmp ecx, 0xfffffffa
je 0x45f13e
lea eax, [edi + 0x628]
cmp dword [edi + 0x25c], eax
jne 0x45f131
cmp ecx, dword [edi + 0x5b8]
je 0x45f13e
push 0
mov ecx, edi
call fcn.004284d0
test eax, eax
jne 0x45f110
push dword [ebp - 0x328]
mov ecx, edi
call fcn.0042cd20
lea ecx, [edi + 0x5b0]
call fcn.00419810
mov edi, 1
cmp esi, 0xffffffff
je 0x45f16b
test esi, esi
je 0x45f16b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x2d4]
test eax, eax
je 0x45f17e
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e0]
test eax, eax
je 0x45f191
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2ec]
test eax, eax
je 0x45f1a4
push eax
call fcn.00489ed3
add esp, 4
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0xc
call fcn.0040c540
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x45f1c6
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x1b0]
test eax, eax
je 0x45f1d9
push eax
call fcn.00489ed3
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x58]
test ecx, ecx
je 0x45f203
test esi, esi
je 0x45f63d
push dword [ebp - 0x40]
lea eax, [ebp - 0x58]
push dword [ebp - 0x50]
push eax
call fcn.0040c930
call fcn.00403550
test esi, esi
je 0x45f63d
push esi
call fcn.00489ed3
add esp, 4
jmp 0x45f63d
cmp eax, 0x9c52
jne 0x45f292
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4c9198], 0
jne 0x45f230
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4c9198]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f270
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa41a
jne 0x45f302
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c98c0], 0
jne 0x45f2a3
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c98c0]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f2e0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7f8
jne 0x45f372
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9940], 0
jne 0x45f313
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c9940]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f350
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7f9
jne 0x45f3e2
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9990], 0
jne 0x45f383
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c9990]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f3c0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7fa
jne 0x45f452
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c99e8], 0
jne 0x45f3f3
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c99e8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f430
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7fb
jne 0x45f4c2
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9a38], 0
jne 0x45f463
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c9a38]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f4a0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7fc
jne 0x45f532
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9a88], 0
jne 0x45f4d3
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c9a88]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f510
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7fd
jne 0x45f5a2
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9ae0], 0
jne 0x45f543
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop
mov ax, word [ecx*2 + 0x4c9ae0]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f580
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
cmp eax, 0xa7fe
jne 0x45efab
mov byte [ebp - 0x20], 0
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c9b70], 0
jne 0x45f5b3
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edi, 2
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x45f597
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4c9b70]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x45f5f0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x45efb0
mov byte [ebp - 0x2c], 0
push ecx
mov ecx, dword [ebp - 0x2fc]
push 0x1c2
push 0x96
lea eax, [ecx + 0x2a8]
push eax
push 0
push 0x4c93b8
call fcn.00432b40
or edi, 0xffffffff
mov eax, dword [ebp - 0x300]
test eax, eax
je 0x45f654
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x45f668
push eax
call fcn.00489ed3
add esp, 4
mov eax, edi
jmp 0x45f692
push ecx
push 0x1c2
push 0x96
lea eax, [esi + 0x2a8]
push eax
push 0
push 0x4c3bf0
mov ecx, esi
call fcn.00432b40
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00489ec5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret