Function at 0x4407f0
Capabilities:
Accept command line arguments
Check for time delay via queryperformancecounter
Create directory
Create pipe
Delete file
Parse pe header
Query or enumerate registry key
Set environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x23ac
call fcn.00496ae0
and dword [ebp - 0xc0], 0
mov dword [ebp - 0x84], 0xfffffff9
mov dword [ebp - 0x640], 0xf6b
mov dword [ebp - 0x1e8], 0xf8cd3bed
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x79c], 0xb370cc32
mov dword [ebp - 0xfc], 0
jmp 0x44084f
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x44086b
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x1b40], 0xfffffffb
jmp 0x440842
mov dword [ebp - 0xfc], 0
jmp 0x440884
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x4408a0
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x2268], 0x395830af
jmp 0x440877
cmp dword [ebp - 0x84], 0
jne 0x440997
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1fec], eax
mov eax, 0xbdac842f
test eax, eax
jne 0x4408d4
cmp dword [ebp - 0x84], 0
jne 0x4408d4
and dword [ebp - 0x156c], 0
jmp 0x4408de
mov dword [ebp - 0x156c], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x156c], eax
jge 0x4408f8
mov dword [ebp - 0x688], 1
jmp 0x4408ff
and dword [ebp - 0x688], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x688]
mov dword [ebp + eax - 0x1b40], ecx
cmp dword [ebp - 0x688], 0
jne 0x44093d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b40], 0
jne 0x44093d
cmp dword [ebp - 0x84], 0
jne 0x44093d
and dword [ebp - 0x1570], 0
jmp 0x440947
mov dword [ebp - 0x1570], 1
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x1570]
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 4
jbe 0x44096f
mov dword [ebp - 0x1578], 1
jmp 0x440976
and dword [ebp - 0x1578], 0
mov eax, dword [ebp - 0x1578]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jne 0x440997
mov dword [ebp - 0x16c8], 1
jmp 0x44099e
and dword [ebp - 0x16c8], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x2188], eax
mov eax, 0xd764ce34
test eax, eax
jne 0x4409c1
or eax, 0xffffffff
jne 0x4409c1
and dword [ebp - 0x1580], 0
jmp 0x4409cb
mov dword [ebp - 0x1580], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x1580], eax
jge 0x4409e5
mov dword [ebp - 0x1800], 1
jmp 0x4409ec
and dword [ebp - 0x1800], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1fbc], eax
mov eax, 0xacd4a797
test eax, eax
jne 0x440a0d
mov dword [ebp - 0x1588], 1
jmp 0x440a14
and dword [ebp - 0x1588], 0
mov eax, dword [ebp - 0x638]
cmp dword [ebp - 0x1588], eax
je 0x440a3b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b40], 0
jne 0x440a3b
and dword [ebp - 0x1590], 0
jmp 0x440a45
mov dword [ebp - 0x1590], 1
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x1590]
jg 0x440a5f
mov dword [ebp - 0x1598], 1
jmp 0x440a66
and dword [ebp - 0x1598], 0
mov eax, dword [ebp - 0x1598]
sub eax, 0x65f5
jne 0x440a7f
mov dword [ebp - 0x15a0], 1
jmp 0x440a86
and dword [ebp - 0x15a0], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x15a0]
jle 0x440aa0
mov dword [ebp - 0x15a8], 1
jmp 0x440aa7
and dword [ebp - 0x15a8], 0
mov eax, dword [ebp - 0x15a8]
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0x1e8], 0
jmp 0x440acc
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xd
jle 0x440cf3
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x11c0], 1
mov byte [ebp - 0x247], 0
movzx eax, byte [ebp - 0x247]
test eax, eax
je 0x440b07
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 0
je 0x440b5d
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x84], eax
je 0x440b36
mov dword [ebp - 0x15b0], 1
jmp 0x440b3d
and dword [ebp - 0x15b0], 0
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x15b0]
cmp dword [ebp - 0x638], eax
jle 0x440b5d
mov dword [ebp - 0x15b8], 1
jmp 0x440b64
and dword [ebp - 0x15b8], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x15b8], eax
je 0x440b7e
mov dword [ebp - 0x15c0], 1
jmp 0x440b85
and dword [ebp - 0x15c0], 0
mov eax, dword [ebp - 0x640]
cmp dword [ebp - 0x15c0], eax
jle 0x440b9f
mov dword [ebp - 0x15c8], 1
jmp 0x440ba6
and dword [ebp - 0x15c8], 0
cmp dword [ebp - 0x15c8], 0xfffffff6
jl 0x440bbb
mov dword [ebp - 0x15d0], 1
jmp 0x440bc2
and dword [ebp - 0x15d0], 0
mov eax, dword [ebp - 0x15d0]
add eax, 0x172aaffd
cmp eax, dword [ebp - 0x31c]
jl 0x440be1
mov dword [ebp - 0xbdc], 1
jmp 0x440be8
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0xbdc]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x11c0], eax
jg 0x440c0e
mov dword [ebp - 0x834], 1
jmp 0x440c15
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x834], eax
jle 0x440c2f
mov dword [ebp - 0x11c8], 1
jmp 0x440c36
and dword [ebp - 0x11c8], 0
mov eax, dword [ebp - 0x638]
cmp eax, dword [ebp - 0x11c8]
jl 0x440c50
mov dword [ebp - 0x83c], 1
jmp 0x440c57
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x83c]
neg eax
mov dword [ebp - 0x11d0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x11d0]
mov dword [ebp + eax - 0x1b40], ecx
mov eax, dword [ebp - 0x640]
cmp dword [ebp - 0x11d0], eax
jle 0x440c91
mov dword [ebp - 0x844], 1
jmp 0x440c98
and dword [ebp - 0x844], 0
cmp dword [ebp - 0x844], 0xddf34ffd
jne 0x440cb0
mov dword [ebp - 0x11d8], 1
jmp 0x440cb7
and dword [ebp - 0x11d8], 0
mov eax, dword [ebp - 0x11d8]
shl eax, 2
cmp eax, dword [ebp - 0x31c]
jge 0x440cd4
mov dword [ebp - 0x84c], 1
jmp 0x440cdb
and dword [ebp - 0x84c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x84c]
mov dword [ebp + eax - 0x2268], ecx
jmp 0x440abf
mov dword [ebp - 0x650], 1
mov dword [ebp - 0x268], 7
mov dword [ebp - 0x1808], 2
mov dword [ebp - 0x1810], 0x5f43260
mov dword [ebp - 0x648], 0
jmp 0x440d34
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 2
jge 0x440d50
mov eax, dword [ebp - 0x648]
mov dword [ebp + eax*4 - 0x1e1c], 0x26bdde0b
jmp 0x440d27
mov dword [ebp - 0x650], 1
jmp 0x440d69
mov eax, dword [ebp - 0x650]
dec eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0
jl 0x440f2a
mov dword [ebp - 0x3e0], 0
jmp 0x440d8f
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 1
jge 0x440dab
mov eax, dword [ebp - 0x3e0]
mov dword [ebp + eax*4 - 0x864], 0x97341720
jmp 0x440d82
mov dword [ebp - 0x268], 0x6210b999
mov dword [ebp - 0x268], 0
jmp 0x440dce
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jg 0x440f25
mov dword [ebp - 0x380], 0x5b7f37c0
mov dword [ebp - 0x11e0], 0xb9e9d60a
mov dword [ebp - 0x380], 0
jmp 0x440e08
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jg 0x440f20
mov dword [ebp - 0x11e8], 0x7a329ef
mov dword [ebp - 0x7a4], 1
mov byte [ebp - 0x219], 0
movzx eax, byte [ebp - 0x219]
test eax, eax
je 0x440e41
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x11e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x864]
cmp dword [ebp - 0x11e0], eax
jle 0x440e6e
mov dword [ebp - 0x854], 1
jmp 0x440e75
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x7a4], eax
je 0x440e8f
mov dword [ebp - 0x85c], 1
jmp 0x440e96
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x11e8], eax
mov eax, 0xfce2949f
sub eax, dword [ebp - 0x11e8]
cmp eax, dword [ebp - 0x85c]
jle 0x440ec1
mov dword [ebp - 0x11f0], 1
jmp 0x440ec8
and dword [ebp - 0x11f0], 0
mov eax, dword [ebp - 0x11f0]
mov dword [ebp - 0x1808], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x864]
cmp dword [ebp + eax - 0x1e1c], ecx
je 0x440efc
mov dword [ebp - 0x11f8], 1
jmp 0x440f03
and dword [ebp - 0x11f8], 0
mov eax, dword [ebp - 0x11f8]
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1810], eax
jmp 0x440dfb
jmp 0x440dc1
jmp 0x440d5c
mov dword [ebp - 0x74], 0xfffffff9
mov dword [ebp - 0x664], 0x2fe22364
mov dword [ebp - 0xe8], 0
jmp 0x440f54
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 4
jge 0x440f70
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x239c], 0xffffffff
jmp 0x440f47
mov dword [ebp - 0xe8], 0
jmp 0x440f89
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x440fa5
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1d04], 0x4dfbd6c3
jmp 0x440f7c
mov dword [ebp - 0x664], 0
jmp 0x440fbe
mov eax, dword [ebp - 0x664]
inc eax
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 3
jg 0x440ff7
mov dword [ebp - 0x1818], 0x73d2d672
mov byte [ebp - 0x1db], 0
movzx eax, byte [ebp - 0x1db]
test eax, eax
je 0x440feb
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x1818], 0x260417be
jmp 0x440fb1
mov dword [ebp - 0x66c], 0xe0648261
mov byte [ebp - 0x1b3], 0
movzx eax, byte [ebp - 0x1b3]
test eax, eax
je 0x44102c
push 0
push 0x1a3e
push 0x795
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov dword [ebp - 0x66c], 3
jmp 0x441045
mov eax, dword [ebp - 0x66c]
dec eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0xfffffffa
jle 0x44108e
mov byte [ebp - 0x1b2], 0
movzx eax, byte [ebp - 0x1b2]
test eax, eax
je 0x441072
push 0x2488
push 0x2234
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov byte [ebp - 0x1b6], 0
movzx eax, byte [ebp - 0x1b6]
test eax, eax
je 0x44108c
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x441038
mov dword [ebp - 0x580], 0xf6b
mov dword [ebp - 0x674], 0xccb03629
mov dword [ebp - 0x318], 0xffffffff
mov dword [ebp - 0x1d08], 0
mov dword [ebp - 0x168], 0
jmp 0x4410cf
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x4410eb
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x1634], 6
jmp 0x4410c2
mov dword [ebp - 0x168], 0
jmp 0x441104
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x441120
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x824], 0xfffffff8
jmp 0x4410f7
mov byte [ebp - 0x1b8], 0
movzx eax, byte [ebp - 0x1b8]
test eax, eax
je 0x44113c
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x824], 0
jmp 0x44116a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x824]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x824], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x824], 2
jg 0x4412d3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x824]
mov eax, dword [ebp + eax*4 - 0x1634]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 0
je 0x441285
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x824]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x824]
mov ecx, dword [ebp + ecx*4 - 0x1634]
cmp dword [ebp + eax*4 - 0x1634], ecx
jg 0x4411db
mov dword [ebp - 0x86c], 1
jmp 0x4411e2
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0xcd9d
jle 0x4411fa
mov dword [ebp - 0x1820], 1
jmp 0x441201
and dword [ebp - 0x1820], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x824]
mov eax, dword [ebp + eax*4 - 0x1634]
mov dword [ebp - 0x1d10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1634]
mov dword [ebp - 0x1d18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x824]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x824]
cmp dword [ebp + eax*4 - 0x1634], ecx
jge 0x44125d
mov dword [ebp - 0x1200], 1
jmp 0x441264
and dword [ebp - 0x1200], 0
mov eax, dword [ebp - 0x1200]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 8
ja 0x441285
mov dword [ebp - 0x874], 1
jmp 0x44128c
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x318], 0
jmp 0x4412b1
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jg 0x4412ce
mov eax, dword [ebp - 0x318]
cmp dword [ebp + eax*4 - 0x1634], 0
je 0x4412cc
jmp 0x4412ce
jmp 0x4412a4
jmp 0x44114f
mov dword [ebp - 0x1f8], 0xf8cd3bed
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x7ac], 0xf9b2cfb6
mov dword [ebp - 0x1d20], 0xfffffff7
mov dword [ebp - 0x1830], 0x6e82
mov dword [ebp - 0x1d28], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x44131f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x441335
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x20a4], 0xfffffff9
jmp 0x441318
mov dword [ebp - 0x28], 0
jmp 0x441345
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x44135b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1828], 0xee973417
jmp 0x44133e
mov dword [ebp - 0x28], 0
jmp 0x44136b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x441381
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x237c], 0x1fb8
jmp 0x441364
mov dword [ebp - 0x28], 0
jmp 0x441391
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x4413a7
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x67c], 0xfffffff7
jmp 0x44138a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20a4], 0
je 0x4413ff
cmp dword [ebp - 0x7ac], 0
je 0x4413f8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x67c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x67c]
inc ecx
push 4
pop edx
imul edx, edx, 0
mov dword [ebp + edx - 0x67c], ecx
test eax, eax
je 0x4413f8
mov dword [ebp - 0x1208], 1
jmp 0x4413ff
and dword [ebp - 0x1208], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1828], 0x3b3bbbb5
mov eax, 0x3b3bbbb5
test eax, eax
je 0x441435
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x67c], 0
je 0x441435
mov dword [ebp - 0x87c], 1
jmp 0x44143c
and dword [ebp - 0x87c], 0
cmp dword [ebp - 0x87c], 2
jge 0x441451
mov dword [ebp - 0x1210], 1
jmp 0x441458
and dword [ebp - 0x1210], 0
mov eax, dword [ebp - 0x7ac]
cmp eax, dword [ebp - 0x1210]
jne 0x441472
mov dword [ebp - 0x884], 1
jmp 0x441479
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x884]
dec eax
cmp eax, dword [ebp - 0x1830]
jle 0x441494
mov dword [ebp - 0x1218], 1
jmp 0x44149b
and dword [ebp - 0x1218], 0
mov eax, dword [ebp - 0x7ac]
cmp eax, dword [ebp - 0x1218]
jge 0x4414b9
push 4
pop eax
test eax, eax
jne 0x4414b9
and dword [ebp - 0x88c], 0
jmp 0x4414c3
mov dword [ebp - 0x88c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x88c]
mov dword [ebp + eax - 0x20a4], ecx
mov dword [ebp - 0x808], 0xb370cc32
mov dword [ebp - 0x8b4], 0x70ade216
mov dword [ebp - 0x1d30], 0x8974b666
mov dword [ebp - 0x1250], 1
mov dword [ebp - 0x7d8], 0xd9a924c0
mov dword [ebp - 0x1d38], 0xffffffff
mov dword [ebp - 0x1d40], 0xa095a979
mov dword [ebp - 0x1238], 0xb95ae64
mov dword [ebp - 0x1d48], 6
mov dword [ebp - 0x7b4], 1
mov dword [ebp - 0x1838], 0
mov dword [ebp - 0x1d50], 0xfc3a065
mov dword [ebp - 0x7e0], 0xcd908fbd
mov dword [ebp - 0x8c4], 0x7a847e08
mov dword [ebp - 0x678], 0
jmp 0x44157b
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 2
jge 0x441597
mov eax, dword [ebp - 0x678]
mov dword [ebp + eax*4 - 0x187c], 0xfffffffe
jmp 0x44156e
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x1d58], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x187c]
mov ecx, dword [ebp - 0x1238]
lea eax, [eax + ecx + 0xefd9]
add eax, dword [ebp - 0x7d8]
cmp eax, dword [ebp - 0x1250]
jge 0x4415de
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x4415de
mov dword [ebp - 0x1220], 1
jmp 0x4415e5
and dword [ebp - 0x1220], 0
mov eax, dword [ebp - 0x8b4]
add eax, dword [ebp - 0x1220]
neg eax
jne 0x441605
push 5
pop eax
test eax, eax
jne 0x441605
and dword [ebp - 0x894], 0
jmp 0x44160f
mov dword [ebp - 0x894], 1
cmp dword [ebp - 0x894], 0x206cbc8c
jne 0x441627
mov dword [ebp - 0x1228], 1
jmp 0x44162e
and dword [ebp - 0x1228], 0
mov eax, dword [ebp - 0x1838]
cmp dword [ebp - 0x1228], eax
jle 0x44164e
mov eax, 0x3958
test eax, eax
jne 0x44164e
and dword [ebp - 0x89c], 0
jmp 0x441658
mov dword [ebp - 0x89c], 1
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x7b4], 0xd3351f4a
je 0x44167c
mov dword [ebp - 0x1230], 1
jmp 0x441683
and dword [ebp - 0x1230], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x187c]
add eax, 0x315b
cmp eax, dword [ebp - 0x1230]
jge 0x4416a9
mov dword [ebp - 0x8a4], 1
jmp 0x4416b0
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x7d8]
cmp dword [ebp - 0x8a4], eax
je 0x4416ca
mov dword [ebp - 0x8ac], 1
jmp 0x4416d1
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x1238]
cmp dword [ebp - 0x8ac], eax
jl 0x4416eb
mov dword [ebp - 0x1240], 1
jmp 0x4416f2
and dword [ebp - 0x1240], 0
mov eax, dword [ebp - 0x7d8]
cmp dword [ebp - 0x1240], eax
jl 0x44171c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x187c], 0
je 0x44171c
mov dword [ebp - 0x1248], 1
jmp 0x441723
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x7e0]
dec eax
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x8b4]
add eax, dword [ebp - 0x7e0]
imul eax, dword [ebp - 0x1248]
cmp eax, 0x3adab8f5
jne 0x441756
mov dword [ebp - 0x8bc], 1
jmp 0x44175d
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x1250], eax
mov eax, dword [ebp - 0x8c4]
dec eax
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x1d60], 2
mov dword [ebp - 0x1258], 0x299
mov dword [ebp - 0xf0], 0
jmp 0x4417a3
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x4417bf
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x1654], 0
jmp 0x441796
mov dword [ebp - 0xf0], 0
jmp 0x4417d8
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x4417f4
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x2294], 0xfffffffd
jmp 0x4417cb
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1654], 0
jmp 0x441822
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1654]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1654], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1654], 0xd
jle 0x441883
mov dword [ebp - 0x4b4], 0xe2c0d37a
mov dword [ebp - 0x1840], 0xbc781ced
mov dword [ebp - 0x4b4], 0
jmp 0x44185f
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 1
jg 0x441881
mov dword [ebp - 0x1840], 0xe64f1479
mov eax, dword [ebp - 0x1258]
dec eax
mov dword [ebp - 0x1258], eax
jmp 0x441852
jmp 0x441807
mov dword [ebp - 0x130], 0
jmp 0x44189c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x4418b8
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x1b34], 0xfffffffb
jmp 0x44188f
mov dword [ebp - 0x130], 0
jmp 0x4418d1
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x4418ed
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x2208], 0x395830af
jmp 0x4418c4
cmp dword [ebp - 0x74], 0
jne 0x4419d2
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1d68], eax
mov eax, 0xbdac842f
test eax, eax
jne 0x441918
cmp dword [ebp - 0x74], 0
jne 0x441918
and dword [ebp - 0x8cc], 0
jmp 0x441922
mov dword [ebp - 0x8cc], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x8cc], eax
jge 0x441939
mov dword [ebp - 0x7e8], 1
jmp 0x441940
and dword [ebp - 0x7e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp + eax - 0x1b34], ecx
cmp dword [ebp - 0x7e8], 0
jne 0x44197b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b34], 0
jne 0x44197b
cmp dword [ebp - 0x74], 0
jne 0x44197b
and dword [ebp - 0x1260], 0
jmp 0x441985
mov dword [ebp - 0x1260], 1
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x1260]
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 4
jbe 0x4419aa
mov dword [ebp - 0x8d4], 1
jmp 0x4419b1
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jne 0x4419d2
mov dword [ebp - 0x1848], 1
jmp 0x4419d9
and dword [ebp - 0x1848], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1d70], eax
mov eax, 0xd764ce34
test eax, eax
jne 0x4419f9
or eax, 0xffffffff
jne 0x4419f9
and dword [ebp - 0x1268], 0
jmp 0x441a03
mov dword [ebp - 0x1268], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1268], eax
jge 0x441a1a
mov dword [ebp - 0x1850], 1
jmp 0x441a21
and dword [ebp - 0x1850], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1d78], eax
mov eax, 0xacd4a797
test eax, eax
jne 0x441a3f
mov dword [ebp - 0x8dc], 1
jmp 0x441a46
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x8dc], eax
je 0x441a6d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b34], 0
jne 0x441a6d
and dword [ebp - 0x1270], 0
jmp 0x441a77
mov dword [ebp - 0x1270], 1
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x1270]
jg 0x441a8e
mov dword [ebp - 0x8e4], 1
jmp 0x441a95
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
sub eax, 0x65f5
jne 0x441aae
mov dword [ebp - 0x1278], 1
jmp 0x441ab5
and dword [ebp - 0x1278], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x1278]
jle 0x441acc
mov dword [ebp - 0x8ec], 1
jmp 0x441ad3
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x1f8], 0
jmp 0x441af8
cmp dword [ebp - 0x1f8], 0xd
jle 0x442a71
mov dword [ebp - 0x270], 8
mov dword [ebp - 0x1acc], 0x3b6f
mov dword [ebp - 0x1ac8], 0x3b6f
mov dword [ebp - 0x1ac4], 0x3b6f
mov dword [ebp - 0x1ac0], 0x3b6f
mov dword [ebp - 0x1860], 7
mov dword [ebp - 0x270], 0xfffffff6
jmp 0x441b5a
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0xffffffff
jg 0x441cd0
mov dword [ebp - 0x1290], 0xfc39
mov dword [ebp - 0x1bcc], 3
mov dword [ebp - 0x1bc8], 3
mov dword [ebp - 0x1bc4], 3
mov dword [ebp - 0x1bc0], 3
mov dword [ebp - 0x1858], 0x26a9d9e1
mov eax, dword [ebp - 0x1290]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1acc]
cmp eax, 0x816f93bd
jb 0x441bc9
mov dword [ebp - 0x1280], 1
jmp 0x441bd0
and dword [ebp - 0x1280], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1acc]
imul eax, dword [ebp - 0x1280]
cmp dword [ebp - 0x270], eax
jne 0x441bf8
mov dword [ebp - 0x8f4], 1
jmp 0x441bff
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 7
jle 0x441c14
mov dword [ebp - 0x1288], 1
jmp 0x441c1b
and dword [ebp - 0x1288], 0
cmp dword [ebp - 0x1288], 0xffffffff
jle 0x441c3d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1acc], 0
jne 0x441c3d
and dword [ebp - 0x8fc], 0
jmp 0x441c47
mov dword [ebp - 0x8fc], 1
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x8fc]
jne 0x441c61
mov dword [ebp - 0x904], 1
jmp 0x441c68
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x1290]
sub eax, dword [ebp - 0x904]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1bcc]
je 0x441c8f
mov dword [ebp - 0x7f0], 1
jmp 0x441c96
and dword [ebp - 0x7f0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp + eax - 0x1bcc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1acc]
imul eax, dword [ebp - 0x7f0]
inc eax
imul eax, dword [ebp - 0x1858]
mov dword [ebp - 0x1860], eax
jmp 0x441b4d
mov dword [ebp - 0x3ac], 1
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x560], 0xfffffffd
mov dword [ebp - 0x7c], 0xc19583e3
mov dword [ebp - 0x178], 0x951fe511
mov dword [ebp - 0x193c], 1
mov dword [ebp - 0x2c], 0
jmp 0x441d16
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xc
jge 0x441d26
cmp dword [ebp - 0x2c], 0
je 0x441d24
jmp 0x441d26
jmp 0x441d0f
cmp dword [ebp - 0x2c], 1
jge 0x441d3e
cmp dword [ebp - 0x2c], 0
je 0x441d3e
mov dword [ebp - 0x1298], 1
jmp 0x441d45
and dword [ebp - 0x1298], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1298], eax
jne 0x441d5c
mov dword [ebp - 0x90c], 1
jmp 0x441d63
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x1d80], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d88], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x1d90], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x441da4
mov dword [ebp - 0x12a0], 1
jmp 0x441dab
and dword [ebp - 0x12a0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x12a0]
jl 0x441dc2
mov dword [ebp - 0x1868], 1
jmp 0x441dc9
and dword [ebp - 0x1868], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jge 0x441ddd
mov dword [ebp - 0x914], 1
jmp 0x441de4
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x61ac7eb2
jg 0x441e02
mov dword [ebp - 0x12a8], 1
jmp 0x441e09
and dword [ebp - 0x12a8], 0
imul eax, dword [ebp - 0x12a8], 0
cmp eax, dword [ebp - 0x7c]
jg 0x441e21
mov dword [ebp - 0x91c], 1
jmp 0x441e28
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x7c], eax
jne 0x441e48
mov dword [ebp - 0x12b0], 1
jmp 0x441e4f
and dword [ebp - 0x12b0], 0
mov eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0x12b0]
cmp eax, 0xffffffff
jle 0x441e73
cmp dword [ebp - 0x7c], 0
je 0x441e73
mov dword [ebp - 0x924], 1
jmp 0x441e7a
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x924], eax
jg 0x441e94
mov dword [ebp - 0x12b8], 1
jmp 0x441e9b
and dword [ebp - 0x12b8], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x12b8], eax
jle 0x441ebe
cmp dword [ebp - 0x560], 0
jne 0x441ebe
mov dword [ebp - 0x92c], 1
jmp 0x441ec5
and dword [ebp - 0x92c], 0
cmp dword [ebp - 0x92c], 0xccba
jle 0x441edd
mov dword [ebp - 0x12c0], 1
jmp 0x441ee4
and dword [ebp - 0x12c0], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x12c0], eax
jg 0x4421d7
mov dword [ebp - 0x1944], 0x3eb1
mov dword [ebp - 0x1cac], 0x4e60d2e6
mov dword [ebp - 0x1ca8], 0x4e60d2e6
mov dword [ebp - 0x1ca4], 0x4e60d2e6
mov dword [ebp - 0x1ca0], 0x4e60d2e6
mov dword [ebp - 0x3ec], 0
jmp 0x441f41
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 1
jge 0x441f5d
mov eax, dword [ebp - 0x3ec]
mov dword [ebp + eax*4 - 0x1f0], 0x14b7
jmp 0x441f34
mov dword [ebp - 0x7c], 0
jmp 0x441f6d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jg 0x4421d5
mov dword [ebp - 0x12c8], 0x35a02a90
mov dword [ebp - 0x12d8], 0x5bb54a03
mov dword [ebp - 0x1870], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x1f0], 0
test eax, eax
jne 0x442024
mov eax, dword [ebp - 0x7c]
mov ecx, 0xe0c8
sub ecx, dword [ebp + eax*4 - 0x1f0]
mov eax, dword [ebp - 0x7c]
cmp ecx, dword [ebp + eax*4 - 0x1f0]
jne 0x441fce
mov dword [ebp - 0x934], 1
jmp 0x441fd5
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x12c8], eax
cmp dword [ebp - 0x12c8], 0
je 0x442006
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f0], 0
je 0x442006
mov dword [ebp - 0x93c], 1
jmp 0x44200d
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x93c], eax
jle 0x442024
and dword [ebp - 0x12d0], 0
jmp 0x44202e
mov dword [ebp - 0x12d0], 1
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1f0]
cmp dword [ebp - 0x12d0], eax
jle 0x44204c
mov dword [ebp - 0x944], 1
jmp 0x442053
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x12d8], eax
cmp dword [ebp - 0x12d8], 0x762a
jge 0x442077
mov dword [ebp - 0x94c], 1
jmp 0x44207e
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xd142
jne 0x4420a2
mov dword [ebp - 0x12e0], 1
jmp 0x4420a9
and dword [ebp - 0x12e0], 0
mov eax, dword [ebp - 0x12e0]
inc eax
cmp eax, 0xc95c
jl 0x4420c3
mov dword [ebp - 0x954], 1
jmp 0x4420ca
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x1870]
cmp dword [ebp - 0x954], eax
jle 0x4420e4
mov dword [ebp - 0x12e8], 1
jmp 0x4420eb
and dword [ebp - 0x12e8], 0
cmp dword [ebp - 0x12e8], 0xa9ad
jle 0x442103
mov dword [ebp - 0x95c], 1
jmp 0x44210a
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1f0]
add eax, 4
cmp eax, dword [ebp - 0x95c]
jg 0x44212b
mov dword [ebp - 0x12f0], 1
jmp 0x442132
and dword [ebp - 0x12f0], 0
mov eax, dword [ebp - 0x12f0]
sub eax, dword [ebp - 0x193c]
cmp eax, dword [ebp - 0x1944]
jle 0x442152
mov dword [ebp - 0x964], 1
jmp 0x442159
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x964], eax
jne 0x442170
mov dword [ebp - 0x12f8], 1
jmp 0x442177
and dword [ebp - 0x12f8], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x12f8], eax
jg 0x44218e
mov dword [ebp - 0x96c], 1
jmp 0x442195
and dword [ebp - 0x96c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp - 0x96c], eax
jle 0x4421b6
mov dword [ebp - 0x1300], 1
jmp 0x4421bd
and dword [ebp - 0x1300], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1300]
mov dword [ebp + eax - 0x1cac], ecx
jmp 0x441f66
jmp 0x442241
mov dword [ebp - 0x568], 0
jmp 0x4421f0
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 2
jge 0x44220c
mov eax, dword [ebp - 0x568]
mov dword [ebp + eax*4 - 0x1b54], 0x9c84d8bc
jmp 0x4421e3
mov byte [ebp - 0x1ba], 0
movzx eax, byte [ebp - 0x1ba]
test eax, eax
je 0x442226
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b54]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1b54], eax
mov dword [ebp - 0x9dc], 1
mov dword [ebp - 0x1d98], 0xa7bc
mov dword [ebp - 0x1da0], 0xffffffff
mov dword [ebp - 0xf8], 0
jmp 0x442278
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x442294
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x3f4], 0x4a8c6a53
jmp 0x44226b
mov dword [ebp - 0xf8], 0
jmp 0x4422ad
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 4
jge 0x4422c9
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x238c], 0x137b1891
jmp 0x4422a0
mov byte [ebp - 0x1bc], 0
movzx eax, byte [ebp - 0x1bc]
test eax, eax
je 0x4422e3
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3f4], 0x13
jmp 0x442311
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f4], 0x10
jl 0x4423d9
mov dword [ebp - 0x1da8], 0xd4782549
mov dword [ebp - 0x1db0], 0x9c1c73b0
mov dword [ebp - 0x974], 0xfffffffb
mov dword [ebp - 0x48], 0
jmp 0x442353
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x442369
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1db8], 0x3629aa8
jmp 0x44234c
mov dword [ebp - 0x48], 0
jmp 0x442379
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x44238f
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x194c], 0xfa1
jmp 0x442372
mov dword [ebp - 0x48], 0
jmp 0x44239f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x4423b5
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1dc0], 0xffffffff
jmp 0x442398
mov eax, dword [ebp - 0x974]
dec eax
mov dword [ebp - 0x974], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x194c], 0
je 0x4423d4
jmp 0x4423d9
jmp 0x4422f6
mov dword [ebp - 0x150], 0xac204e2
mov dword [ebp - 0x570], 0
jmp 0x4423fc
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 3
jge 0x442418
mov eax, dword [ebp - 0x570]
mov dword [ebp + eax*4 - 0x1c58], 0xbc42206d
jmp 0x4423ef
mov dword [ebp - 0x150], 0x1d
jmp 0x442431
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffff
jne 0x4424e0
mov dword [ebp - 0x304], 0xde9
mov dword [ebp - 0x97c], 0x6173948b
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x150], eax
je 0x442475
cmp dword [ebp - 0x304], 0
je 0x442475
mov dword [ebp - 0x1308], 1
jmp 0x44247c
and dword [ebp - 0x1308], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x1308], eax
jg 0x442491
cmp dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x97c], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x97c]
xor ecx, ecx
inc ecx
sub ecx, eax
sub ecx, 9
cmp ecx, dword [ebp - 0x304]
jl 0x4424c2
mov dword [ebp - 0x1310], 1
jmp 0x4424c9
and dword [ebp - 0x1310], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1310]
mov dword [ebp + eax - 0x1c58], ecx
jmp 0x442424
mov dword [ebp - 0x150], 0xffffffe3
jmp 0x4424f9
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffe5
jne 0x44253a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1c58], 0
jne 0x44251e
mov dword [ebp - 0x984], 1
jmp 0x442525
and dword [ebp - 0x984], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x984]
mov dword [ebp + eax - 0x1c58], ecx
jmp 0x4424ec
mov byte [ebp - 0x1be], 0
mov dword [ebp - 0x1dc8], 0x7e8e
mov dword [ebp - 0x800], 0xe2c0d37a
mov dword [ebp - 0x1dd0], 0xe468
mov dword [ebp - 0x9ac], 0xffffffff
mov dword [ebp - 0x100], 0xfffffff8
mov dword [ebp - 0x1964], 0x29e5e26c
mov dword [ebp - 0x1350], 0xcf720afd
mov dword [ebp - 0x196c], 3
mov dword [ebp - 0x1dd8], 1
mov dword [ebp - 0x3fc], 0
jmp 0x4425b4
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 3
jge 0x4425d0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp + eax*4 - 0x19d4], 0xaeef20fe
jmp 0x4425a7
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x100], 0
jmp 0x4425f6
cmp dword [ebp - 0x100], 2
jg 0x442878
mov dword [ebp - 0x1328], 0xffffffff
mov dword [ebp - 0x1330], 0x1183d964
mov dword [ebp - 0x7f8], 0x2d4e203d
mov dword [ebp - 0x578], 0
jmp 0x44263a
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 2
jge 0x442656
mov eax, dword [ebp - 0x578]
mov dword [ebp + eax*4 - 0x1bd4], 0x9e4e412c
jmp 0x44262d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19d4]
mov dword [ebp - 0x1954], eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x1954]
mov dword [ebp + eax*4 - 0x19d4], ecx
mov eax, dword [ebp - 0x100]
cmp dword [ebp + eax*4 - 0x19d4], 0
jne 0x44269d
mov eax, 0x81d4
test eax, eax
jne 0x44269d
and dword [ebp - 0x1318], 0
jmp 0x4426a7
mov dword [ebp - 0x1318], 1
cmp dword [ebp - 0x1318], 8
ja 0x4426bc
mov dword [ebp - 0x98c], 1
jmp 0x4426c3
and dword [ebp - 0x98c], 0
cmp dword [ebp - 0x98c], 0xfff9
jne 0x4426db
mov dword [ebp - 0x1320], 1
jmp 0x4426e2
and dword [ebp - 0x1320], 0
mov eax, dword [ebp - 0x800]
imul eax, dword [ebp - 0x1320]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x19d4]
jne 0x44270a
mov dword [ebp - 0x994], 1
jmp 0x442711
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
add eax, 0x638f
mov dword [ebp - 0x195c], eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x195c]
mov dword [ebp + eax*4 - 0x19d4], ecx
mov eax, dword [ebp - 0x1964]
mov dword [ebp - 0x1328], eax
cmp dword [ebp - 0x1328], 0xc6715623
ja 0x442759
mov dword [ebp - 0x99c], 1
jmp 0x442760
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x1330], eax
mov eax, dword [ebp - 0x1330]
imul eax, dword [ebp - 0x7f8]
add eax, dword [ebp - 0x9ac]
cmp eax, dword [ebp - 0x7f8]
jl 0x442793
mov dword [ebp - 0x9a4], 1
jmp 0x44279a
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x800]
cmp dword [ebp - 0x9a4], eax
jl 0x4427b4
mov dword [ebp - 0x1338], 1
jmp 0x4427bb
and dword [ebp - 0x1338], 0
mov eax, dword [ebp - 0x1338]
sub eax, dword [ebp - 0x7f8]
jne 0x4427d7
xor eax, eax
inc eax
jne 0x4427d7
and dword [ebp - 0x1340], 0
jmp 0x4427e1
mov dword [ebp - 0x1340], 1
mov eax, dword [ebp - 0x9ac]
cmp dword [ebp - 0x1340], eax
jg 0x4427fb
mov dword [ebp - 0x9b4], 1
jmp 0x442802
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x800]
cmp dword [ebp - 0x9b4], eax
jl 0x44282c
movzx eax, byte [ebp - 0x1be]
test eax, eax
je 0x44288b
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 0
je 0x4428de
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x74], eax
je 0x4428b7
mov dword [ebp - 0x9c4], 1
jmp 0x4428be
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x1f8]
add eax, dword [ebp - 0x9c4]
cmp dword [ebp - 0x404], eax
jle 0x4428de
mov dword [ebp - 0x1358], 1
jmp 0x4428e5
and dword [ebp - 0x1358], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x1358], eax
je 0x4428ff
mov dword [ebp - 0x9cc], 1
jmp 0x442906
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0x9cc], eax
jle 0x442920
mov dword [ebp - 0x1360], 1
jmp 0x442927
and dword [ebp - 0x1360], 0
cmp dword [ebp - 0x1360], 0xfffffff6
jl 0x44293c
mov dword [ebp - 0x9d4], 1
jmp 0x442943
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
add eax, 0x172aaffd
cmp eax, dword [ebp - 0x3ac]
jl 0x442962
mov dword [ebp - 0x1368], 1
jmp 0x442969
and dword [ebp - 0x1368], 0
mov eax, dword [ebp - 0x1368]
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x9dc], eax
jg 0x44298f
mov dword [ebp - 0x1370], 1
jmp 0x442996
and dword [ebp - 0x1370], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1370], eax
jle 0x4429ad
mov dword [ebp - 0x9e4], 1
jmp 0x4429b4
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x9e4]
jl 0x4429ce
mov dword [ebp - 0x1378], 1
jmp 0x4429d5
and dword [ebp - 0x1378], 0
mov eax, dword [ebp - 0x1378]
neg eax
mov dword [ebp - 0x9ec], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp + eax - 0x1b34], ecx
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0x9ec], eax
jle 0x442a0f
mov dword [ebp - 0x1380], 1
jmp 0x442a16
and dword [ebp - 0x1380], 0
cmp dword [ebp - 0x1380], 0xddf34ffd
jne 0x442a2e
mov dword [ebp - 0x9f4], 1
jmp 0x442a35
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
shl eax, 2
cmp eax, dword [ebp - 0x3ac]
jge 0x442a52
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x197c], 0
mov dword [ebp - 0x40c], 0
jmp 0x442a9e
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 1
jge 0x442aba
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0x414], 0xc2e0cf57
jmp 0x442a91
mov byte [ebp - 0x1c0], 0
movzx eax, byte [ebp - 0x1c0]
test eax, eax
je 0x442ad6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0x138], 0
jmp 0x442aef
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jg 0x442d32
mov dword [ebp - 0x1974], 0xffffffff
mov dword [ebp - 0x690], 0x3526c715
mov dword [ebp - 0x1984], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp + eax*4 - 0x414], 0
je 0x442c2f
mov dword [ebp - 0x39c], 2
mov dword [ebp - 0x1de0], 0xfffffffd
mov dword [ebp - 0x39c], 0
jmp 0x442b5b
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
jg 0x442c0b
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x414]
inc eax
jne 0x442b8a
cmp dword [ebp - 0x1974], 0
jne 0x442b8a
and dword [ebp - 0x9fc], 0
jmp 0x442b94
mov dword [ebp - 0x9fc], 1
cmp dword [ebp - 0x9fc], 0x7a14
jne 0x442bac
mov dword [ebp - 0x1390], 1
jmp 0x442bb3
and dword [ebp - 0x1390], 0
mov eax, dword [ebp - 0x690]
cmp dword [ebp - 0x1390], eax
jge 0x442bcd
mov dword [ebp - 0xa04], 1
jmp 0x442bd4
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xa04]
neg eax
je 0x442bf3
cmp dword [ebp - 0x39c], 0
je 0x442bf3
mov dword [ebp - 0x1398], 1
jmp 0x442bfa
and dword [ebp - 0x1398], 0
mov eax, dword [ebp - 0x1398]
mov dword [ebp - 0x197c], eax
jmp 0x442b4e
mov byte [ebp - 0x1c2], 0
movzx eax, byte [ebp - 0x1c2]
test eax, eax
je 0x442c2a
push 0
push 0x458
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x442d2d
mov dword [ebp - 0x198c], 0
mov dword [ebp - 0x588], 0
jmp 0x442c52
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 2
jge 0x442c6e
mov eax, dword [ebp - 0x588]
mov dword [ebp + eax*4 - 0x1e28], 0xffffffff
jmp 0x442c45
cmp dword [ebp - 0x138], 0
jne 0x442d17
cmp dword [ebp - 0x1984], 0
je 0x442ca0
mov eax, dword [ebp - 0x138]
cmp dword [ebp + eax*4 - 0x414], 0
jne 0x442ca0
mov dword [ebp - 0xa0c], 1
jmp 0x442ca7
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x414]
cmp dword [ebp - 0x690], eax
je 0x442cce
cmp dword [ebp - 0x690], 0
jne 0x442cce
and dword [ebp - 0x13a0], 0
jmp 0x442cd8
mov dword [ebp - 0x13a0], 1
mov eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0x13a0]
jle 0x442cf2
mov dword [ebp - 0xa14], 1
jmp 0x442cf9
and dword [ebp - 0xa14], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa14]
sub ecx, dword [ebp + eax - 0x1e28]
jne 0x442d17
and dword [ebp - 0x13a8], 0
jmp 0x442d21
mov dword [ebp - 0x13a8], 1
mov eax, dword [ebp - 0x13a8]
mov dword [ebp - 0x198c], eax
jmp 0x442ae2
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0x590], 0
jmp 0x442d55
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 2
jge 0x442d71
mov eax, dword [ebp - 0x590]
mov dword [ebp + eax*4 - 0x1b5c], 0xfffffff8
jmp 0x442d48
mov byte [ebp - 0x1c4], 0
movzx eax, byte [ebp - 0x1c4]
test eax, eax
je 0x442d8b
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x324], 1
jmp 0x442da4
mov eax, dword [ebp - 0x324]
dec eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jl 0x442ede
mov dword [ebp - 0x41c], 0
jmp 0x442dca
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 4
jge 0x442de6
mov eax, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x1be4], 0x137b1891
jmp 0x442dbd
mov byte [ebp - 0x1c6], 0
movzx eax, byte [ebp - 0x1c6]
test eax, eax
je 0x442e15
push 0
push 0x219e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1be4], 1
jmp 0x442e40
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1be4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1be4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1be4], 0
jl 0x442ed9
mov eax, dword [ebp - 0x324]
cmp dword [ebp + eax*4 - 0x1b5c], 0
je 0x442e7d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1be4]
cmp dword [ebp + eax*4 - 0x1b5c], 0
je 0x442e7b
jmp 0x442ed9
jmp 0x442ed4
mov dword [ebp - 0x598], 0xffffffff
mov dword [ebp - 0x598], 1
jmp 0x442ea0
mov eax, dword [ebp - 0x598]
dec eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jl 0x442ed4
mov byte [ebp - 0x1c8], 0
movzx eax, byte [ebp - 0x1c8]
test eax, eax
je 0x442ed2
push 0x1b31
push 0x685
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
jmp 0x442e93
jmp 0x442e27
jmp 0x442d97
mov dword [ebp - 0x7cc], 0x49fe387
mov dword [ebp - 0x7c8], 0x49fe387
mov dword [ebp - 0x7c4], 0x49fe387
mov dword [ebp - 0x7c0], 0x49fe387
mov dword [ebp - 0x300], 0xc2db2212
mov dword [ebp - 0x378], 0x68de
mov dword [ebp - 0x698], 0x64fda7ef
mov dword [ebp - 0x68], 0xfffffff9
mov dword [ebp - 0x108], 0
jmp 0x442f44
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x442f60
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1b64], 0x4edf6b3e
jmp 0x442f37
mov dword [ebp - 0x108], 0
jmp 0x442f79
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x442f95
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0xa34], 0x4edf0ebf
jmp 0x442f6c
mov dword [ebp - 0x300], 3
jmp 0x442fae
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0
jl 0x4430c2
mov dword [ebp - 0xa1c], 0xa2a3
mov dword [ebp - 0x1994], 1
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0x1de8], eax
mov eax, dword [ebp - 0xa1c]
cmp dword [ebp - 0x1994], eax
jge 0x442ff5
mov dword [ebp - 0x13b0], 1
jmp 0x442ffc
and dword [ebp - 0x13b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7cc]
cmp dword [ebp - 0x13b0], eax
jg 0x44301d
mov dword [ebp - 0xa24], 1
jmp 0x443024
and dword [ebp - 0xa24], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7cc]
add eax, dword [ebp - 0x378]
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x698]
cmp eax, dword [ebp - 0xa24]
jne 0x443056
mov dword [ebp - 0x7a8], 1
jmp 0x44305d
and dword [ebp - 0x7a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp + eax - 0x1b64], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7a8]
sub ecx, dword [ebp + eax - 0x7cc]
mov eax, dword [ebp - 0x300]
cmp dword [ebp + eax*4 - 0x7cc], ecx
jg 0x44309d
mov dword [ebp - 0x13b8], 1
jmp 0x4430a4
and dword [ebp - 0x13b8], 0
mov eax, dword [ebp - 0x13b8]
mov dword [ebp - 0x68], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
mov dword [ebp + eax - 0xa34], ecx
jmp 0x442fa1
mov dword [ebp - 0x378], 0
jmp 0x4430db
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x27
je 0x44324a
mov dword [ebp - 0x19bc], 0x96a450c1
mov dword [ebp - 0x68], 0
jmp 0x443102
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jg 0x443245
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x7cc]
mov dword [ebp - 0x1df0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b64]
add eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x68]
cmp eax, dword [ebp + ecx*4 - 0x7cc]
jl 0x443147
mov dword [ebp - 0xa2c], 1
jmp 0x44314e
and dword [ebp - 0xa2c], 0
cmp dword [ebp - 0xa2c], 0x9495
jl 0x443166
mov dword [ebp - 0x13c0], 1
jmp 0x44316d
and dword [ebp - 0x13c0], 0
mov eax, dword [ebp - 0x13c0]
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x7cc]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xa34]
mov ecx, dword [ebp - 0x68]
cmp eax, dword [ebp + ecx*4 - 0x7cc]
jl 0x4431a8
mov dword [ebp - 0x13c8], 1
jmp 0x4431af
and dword [ebp - 0x13c8], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x7cc]
cmp dword [ebp - 0x13c8], eax
jle 0x4431cd
mov dword [ebp - 0xa3c], 1
jmp 0x4431d4
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x19bc]
cmp dword [ebp - 0xa3c], eax
jg 0x4431ee
mov dword [ebp - 0x13d0], 1
jmp 0x4431f5
and dword [ebp - 0x13d0], 0
cmp dword [ebp - 0x13d0], 0x9116971d
jae 0x44320d
mov dword [ebp - 0xa44], 1
jmp 0x443214
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x7cc]
sub eax, dword [ebp - 0xa44]
mov ecx, dword [ebp - 0x68]
mov dword [ebp + ecx*4 - 0x7cc], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x7cc], 0
je 0x443240
jmp 0x4430fb
jmp 0x4430fb
jmp 0x4430ce
mov dword [ebp - 0x1df8], 0x7e8e
mov dword [ebp - 0x6a0], 0xe2c0d37a
mov dword [ebp - 0x1e00], 0xe468
mov dword [ebp - 0xa6c], 0xffffffff
mov dword [ebp - 0xd0], 0xfffffff8
mov dword [ebp - 0x1a90], 0x29e5e26c
mov dword [ebp - 0x1410], 0xcf720afd
mov dword [ebp - 0x1a98], 3
mov dword [ebp - 0x1e08], 1
mov dword [ebp - 0x424], 0
jmp 0x4432bd
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 3
jge 0x4432d9
mov eax, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0x19e4], 0xaeef20fe
jmp 0x4432b0
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd0], 0
jmp 0x4432ff
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jg 0x443581
mov dword [ebp - 0x13e8], 0xffffffff
mov dword [ebp - 0x13f0], 0x1183d964
mov dword [ebp - 0x750], 0x2d4e203d
mov dword [ebp - 0x5a0], 0
jmp 0x443343
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 2
jge 0x44335f
mov eax, dword [ebp - 0x5a0]
mov dword [ebp + eax*4 - 0x1b74], 0x9e4e412c
jmp 0x443336
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19e4]
mov dword [ebp - 0x19c4], eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x19c4]
mov dword [ebp + eax*4 - 0x19e4], ecx
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0x19e4], 0
jne 0x4433a6
mov eax, 0x81d4
test eax, eax
jne 0x4433a6
and dword [ebp - 0x13d8], 0
jmp 0x4433b0
mov dword [ebp - 0x13d8], 1
cmp dword [ebp - 0x13d8], 8
ja 0x4433c5
mov dword [ebp - 0xa4c], 1
jmp 0x4433cc
and dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 0xfff9
jne 0x4433e4
mov dword [ebp - 0x13e0], 1
jmp 0x4433eb
and dword [ebp - 0x13e0], 0
mov eax, dword [ebp - 0x6a0]
imul eax, dword [ebp - 0x13e0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x19e4]
jne 0x443413
mov dword [ebp - 0xa54], 1
jmp 0x44341a
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0xa54]
add eax, 0x638f
mov dword [ebp - 0x1a88], eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x1a88]
mov dword [ebp + eax*4 - 0x19e4], ecx
mov eax, dword [ebp - 0x1a90]
mov dword [ebp - 0x13e8], eax
cmp dword [ebp - 0x13e8], 0xc6715623
ja 0x443462
mov dword [ebp - 0xa5c], 1
jmp 0x443469
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0x13f0], eax
mov eax, dword [ebp - 0x13f0]
imul eax, dword [ebp - 0x750]
add eax, dword [ebp - 0xa6c]
cmp eax, dword [ebp - 0x750]
jl 0x44349c
mov dword [ebp - 0xa64], 1
jmp 0x4434a3
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x6a0]
cmp dword [ebp - 0xa64], eax
jl 0x4434bd
mov dword [ebp - 0x13f8], 1
jmp 0x4434c4
and dword [ebp - 0x13f8], 0
mov eax, dword [ebp - 0x13f8]
sub eax, dword [ebp - 0x750]
jne 0x4434e0
xor eax, eax
inc eax
jne 0x4434e0
and dword [ebp - 0x1400], 0
jmp 0x4434ea
mov dword [ebp - 0x1400], 1
mov eax, dword [ebp - 0xa6c]
cmp dword [ebp - 0x1400], eax
jg 0x443504
mov dword [ebp - 0xa74], 1
jmp 0x44350b
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x6a0]
cmp dword [ebp - 0xa74], eax
jl 0x443535
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b74], 0
je 0x443535
mov dword [ebp - 0x1408], 1
jmp 0x44353c
and dword [ebp - 0x1408], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b74]
cmp dword [ebp - 0x1408], eax
jge 0x44355d
mov dword [ebp - 0xa7c], 1
jmp 0x443564
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x1410], eax
mov eax, dword [ebp - 0x1410]
mov dword [ebp - 0x1a98], eax
jmp 0x4432f2
mov dword [ebp - 0x278], 0x94643cdf
mov dword [ebp - 0x42c], 0
jmp 0x4435a4
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 2
jge 0x4435c0
mov eax, dword [ebp - 0x42c]
mov dword [ebp + eax*4 - 0x1b84], 0x93b4
jmp 0x443597
mov dword [ebp - 0x278], 0
jmp 0x4435d9
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 1
jg 0x443608
mov eax, dword [ebp - 0x278]
cmp dword [ebp + eax*4 - 0x1b84], 0
je 0x4435f4
jmp 0x443608
mov eax, dword [ebp - 0x278]
cmp dword [ebp + eax*4 - 0x1b84], 0
je 0x443606
jmp 0x443608
jmp 0x4435cc
mov byte [ebp - 0x1ce], 0
movzx eax, byte [ebp - 0x1ce]
test eax, eax
je 0x443622
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [ebp - 0xe0], 5
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x5a8], 0
jmp 0x443656
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 2
jge 0x443672
mov eax, dword [ebp - 0x5a8]
mov dword [ebp + eax*4 - 0x310], 2
jmp 0x443649
cmp dword [ebp - 0x30], 0
je 0x44368e
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
add eax, 0x9d44
je 0x44368e
cmp dword [ebp - 0x30], 0
jne 0x4436a0
mov eax, 0xb0a3531f
test eax, eax
jne 0x4436a0
and dword [ebp - 0xa84], 0
jmp 0x4436aa
mov dword [ebp - 0xa84], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x310]
add eax, dword [ebp - 0xa84]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x310]
jne 0x4436d8
mov dword [ebp - 0x1418], 1
jmp 0x4436df
and dword [ebp - 0x1418], 0
mov eax, dword [ebp - 0x1418]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1e10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
cmp dword [ebp - 0x200], eax
jl 0x443715
mov dword [ebp - 0xa8c], 1
jmp 0x44371c
and dword [ebp - 0xa8c], 0
cmp dword [ebp - 0xa8c], 0
jl 0x443731
mov dword [ebp - 0x1420], 1
jmp 0x443738
and dword [ebp - 0x1420], 0
cmp dword [ebp - 0x1420], 0xffff
je 0x443750
mov dword [ebp - 0xa94], 1
jmp 0x443757
and dword [ebp - 0xa94], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa94]
mov dword [ebp + eax - 0x310], ecx
mov dword [ebp - 0x30], 1
jmp 0x44377a
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x44392f
mov dword [ebp - 0x32c], 0xc531364f
cmp dword [ebp - 0x200], 0
je 0x4437a3
mov dword [ebp - 0x1428], 1
jmp 0x4437aa
and dword [ebp - 0x1428], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
cmp dword [ebp - 0x1428], eax
je 0x4437cb
mov dword [ebp - 0xa9c], 1
jmp 0x4437d2
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xa9c]
sub ecx, dword [ebp + eax*4 - 0x310]
mov eax, dword [ebp - 0x30]
sub ecx, dword [ebp + eax*4 - 0x310]
cmp ecx, 0x54f8
jne 0x443800
mov dword [ebp - 0x1430], 1
jmp 0x443807
and dword [ebp - 0x1430], 0
cmp dword [ebp - 0x1430], 0
ja 0x44381c
mov dword [ebp - 0xaa4], 1
jmp 0x443823
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x30]
imul ecx, dword [ebp - 0xaa4], 0xffff
cmp dword [ebp + eax*4 - 0x310], ecx
jne 0x44384b
mov eax, 0xb9cb
test eax, eax
jne 0x44384b
and dword [ebp - 0x1438], 0
jmp 0x443855
mov dword [ebp - 0x1438], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x310]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x1438]
sub edx, dword [ebp + ecx*4 - 0x310]
add eax, edx
jne 0x443889
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x310], 0
jne 0x443889
and dword [ebp - 0xaac], 0
jmp 0x443893
mov dword [ebp - 0xaac], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x310]
imul eax, dword [ebp - 0xaac]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x310], eax
mov dword [ebp - 0x200], 0xffffffec
jmp 0x4438cd
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x44392a
mov dword [ebp - 0x32c], 0xf85024d8
mov dword [ebp - 0x32c], 0
jmp 0x4438f9
cmp dword [ebp - 0x32c], 1
jg 0x443928
mov byte [ebp - 0x1d0], 0
movzx eax, byte [ebp - 0x1d0]
test eax, eax
je 0x443926
push 0x2488
push 0x2234
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
jmp 0x4438ec
jmp 0x4438c0
jmp 0x443773
mov dword [ebp - 0x1714], 0
mov dword [ebp - 0xac], 0x4e064826
mov dword [ebp - 0x1aa8], 0xffffffff
mov dword [ebp - 0x434], 0
jmp 0x443966
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 2
jge 0x443982
mov eax, dword [ebp - 0x434]
mov dword [ebp + eax*4 - 0x1bb4], 0x2466
jmp 0x443959
mov dword [ebp - 0xac], 0xffffffed
jmp 0x44399b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xb
jge 0x4439be
mov byte [ebp - 0x1d2], 0
movzx eax, byte [ebp - 0x1d2]
test eax, eax
je 0x4439bc
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
jmp 0x44398e
cmp dword [ebp - 0xac], 0
jne 0x4439d3
mov dword [ebp - 0x1440], 1
jmp 0x4439da
and dword [ebp - 0x1440], 0
cmp dword [ebp - 0x1440], 0xfffffffc
jbe 0x4439fe
cmp dword [ebp - 0xac], 0
jne 0x4439fe
cmp dword [ebp - 0xac], 0
jne 0x4439fe
and dword [ebp - 0xab4], 0
jmp 0x443a08
mov dword [ebp - 0xab4], 1
cmp dword [ebp - 0xab4], 0xfffa
jne 0x443a20
mov dword [ebp - 0x1448], 1
jmp 0x443a27
and dword [ebp - 0x1448], 0
mov eax, 0xf3d3
sub eax, dword [ebp - 0x1448]
imul eax, dword [ebp - 0xac]
test eax, eax
jne 0x443a49
mov dword [ebp - 0x1aa0], 1
jmp 0x443a50
and dword [ebp - 0x1aa0], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1bb4]
cmp dword [ebp + eax - 0x1bb4], ecx
jne 0x443a78
mov dword [ebp - 0xabc], 1
jmp 0x443a7f
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x623b4709
jl 0x443aa3
mov dword [ebp - 0x1450], 1
jmp 0x443aaa
and dword [ebp - 0x1450], 0
mov eax, dword [ebp - 0x1450]
mov dword [ebp - 0x1aa8], eax
mov dword [ebp - 0x5b0], 0
jmp 0x443acf
cmp dword [ebp - 0x5b0], 1
jge 0x443aeb