Function at 0x42ca60
Capabilities:
Accept command line arguments
Get common file path
Get disk information
Get disk size
Get file attributes
Get geographical location
Get memory capacity
Log keystrokes
Log keystrokes via polling
Query environment variable
Resume thread
Set thread local storage value
Start service
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2154
call fcn.00482a10
push esi
push edi
mov dword [ebp - 0x244], 0xffffffff
mov byte [ebp - 0x236], 0
movzx eax, byte [ebp - 0x236]
test eax, eax
je 0x42ca97
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov dword [ebp - 0x244], 0
jmp 0x42cab0
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xfffffff0
jne 0x42cc54
mov dword [ebp - 0x15a4], 0xfffffff6
mov dword [ebp - 0x15b4], 0xffffffff
mov dword [ebp - 0x350], 0
jmp 0x42caea
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x42cb06
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x11c], 0
jmp 0x42cadd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x11c], 0
jmp 0x42cb34
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x11c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0x19
jl 0x42cc4f
mov dword [ebp - 0x1430], 0xffffffff
mov eax, dword [ebp - 0x1430]
cmp dword [ebp - 0x15a4], eax
jl 0x42cb6c
mov dword [ebp - 0x15ac], 1
jmp 0x42cb73
and dword [ebp - 0x15ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x244]
cmp dword [ebp + eax - 0x11c], ecx
jle 0x42cb94
mov dword [ebp - 0x1328], 1
jmp 0x42cb9b
and dword [ebp - 0x1328], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp eax, dword [ebp - 0x1328]
jne 0x42cbc5
mov eax, 0x8586fd5d
test eax, eax
je 0x42cbc5
mov dword [ebp - 0x123c], 1
jmp 0x42cbcc
and dword [ebp - 0x123c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x123c], eax
jge 0x42cbed
mov dword [ebp - 0x1244], 1
jmp 0x42cbf4
and dword [ebp - 0x1244], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x1244], eax
jg 0x42cc15
mov dword [ebp - 0x1264], 1
jmp 0x42cc1c
and dword [ebp - 0x1264], 0
cmp dword [ebp - 0x1264], 0
jle 0x42cc31
mov dword [ebp - 0x126c], 1
jmp 0x42cc38
and dword [ebp - 0x126c], 0
mov eax, dword [ebp - 0x126c]
sub eax, dword [ebp - 0x244]
mov dword [ebp - 0x15b4], eax
jmp 0x42cb19
jmp 0x42caa3
mov dword [ebp - 0x308], 0x1928c176
mov dword [ebp - 0x308], 0
jmp 0x42cc77
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0xa
jl 0x42ccf2
cmp dword [ebp - 0x308], 0
je 0x42ccd3
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x450], 6
jmp 0x42ccac
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0xb
je 0x42ccd1
mov byte [ebp - 0x1d5], 0
movzx eax, byte [ebp - 0x1d5]
test eax, eax
je 0x42cccf
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x42cc9f
jmp 0x42cced
mov byte [ebp - 0x162], 0
movzx eax, byte [ebp - 0x162]
test eax, eax
je 0x42cced
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x42cc6a
push 1
lea ecx, [ebp - 0x544]
call fcn.004013fc
mov dword [ebp - 0x2e0], 0xfffffffe
mov dword [ebp - 0x458], 0xfffffff7
mov dword [ebp - 0x2a8], 0xffffffff
mov dword [ebp - 0x358], 0
jmp 0x42cd36
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 1
jge 0x42cd58
push dword [ebp - 0x358]
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov dword [eax], 0x7bc75286
jmp 0x42cd29
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov eax, dword [eax]
mov dword [ebp - 0x2e0], eax
mov esi, dword [ebp - 0x2e0]
add esi, 0x8067
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
cmp dword [eax], esi
jne 0x42cd96
mov dword [ebp - 0x1294], 1
jmp 0x42cd9d
and dword [ebp - 0x1294], 0
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
cmp dword [eax], 0
je 0x42ce16
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov esi, eax
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x42cddd
mov dword [ebp - 0x1274], 1
jmp 0x42cde4
and dword [ebp - 0x1274], 0
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov esi, dword [ebp - 0x1274]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
cmp esi, dword [eax]
jle 0x42ce16
mov dword [ebp - 0x127c], 1
jmp 0x42ce1d
and dword [ebp - 0x127c], 0
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov ecx, dword [ebp - 0x127c]
cmp ecx, dword [eax]
jle 0x42ce40
mov dword [ebp - 0x1284], 1
jmp 0x42ce47
and dword [ebp - 0x1284], 0
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov ecx, dword [ebp - 0x1284]
cmp ecx, dword [eax]
jle 0x42ce6a
mov dword [ebp - 0x128c], 1
jmp 0x42ce71
and dword [ebp - 0x128c], 0
mov eax, dword [ebp - 0x128c]
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0
ja 0x42ce92
mov dword [ebp - 0x129c], 1
jmp 0x42ce99
and dword [ebp - 0x129c], 0
mov eax, dword [ebp - 0x1294]
cmp eax, dword [ebp - 0x129c]
jge 0x42d04a
push 3
lea ecx, [ebp - 0x19cc]
call fcn.004013fc
mov dword [ebp - 0x4d0], 0
jmp 0x42ced1
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 3
jge 0x42cef3
push dword [ebp - 0x4d0]
lea ecx, [ebp - 0x19cc]
call fcn.004014ea
mov dword [eax], 0x8b9ba5e0
jmp 0x42cec4
mov byte [ebp - 0x160], 0
movzx eax, byte [ebp - 0x160]
test eax, eax
je 0x42cf0b
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
imul eax, dword [ebp - 0x2a8], 0x3c1d
test eax, eax
je 0x42d020
mov dword [ebp - 0x6e8], 4
mov dword [ebp - 0x15bc], 1
mov dword [ebp - 0x2a8], 0xfffffff6
jmp 0x42cf4a
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xffffffed
je 0x42d01e
cmp dword [ebp - 0x6e8], 0
jne 0x42cfe4
mov dword [ebp - 0x6e8], 0xb969b42c
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x12a4], eax
push 1
lea ecx, [ebp - 0x19cc]
call fcn.004014ea
mov ecx, dword [ebp - 0x12a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6e8]
cmp eax, dword [ebp - 0x12a4]
jle 0x42cfa9
mov dword [ebp - 0x12ac], 1
jmp 0x42cfb0
and dword [ebp - 0x12ac], 0
cmp dword [ebp - 0x12ac], 0x4cb4
jg 0x42cfc8
mov dword [ebp - 0x12b4], 1
jmp 0x42cfcf
and dword [ebp - 0x12b4], 0
cmp dword [ebp - 0x12b4], 0x12c005d9
jg 0x42cfe4
and dword [ebp - 0x12bc], 0
jmp 0x42cfee
mov dword [ebp - 0x12bc], 1
cmp dword [ebp - 0x12bc], 0x78c9dffb
jne 0x42d006
mov dword [ebp - 0x12c4], 1
jmp 0x42d00d
and dword [ebp - 0x12c4], 0
mov eax, dword [ebp - 0x12c4]
mov dword [ebp - 0x15bc], eax
jmp 0x42cf3d
jmp 0x42d03a
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x42d03a
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea ecx, [ebp - 0x19cc]
call fcn.004014ce
jmp 0x42d1e5
push 3
lea ecx, [ebp - 0x1420]
call fcn.004013fc
mov dword [ebp - 0x5ac], 0x9097d93c
mov dword [ebp - 0x360], 0
jmp 0x42d07a
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 3
jge 0x42d09c
push dword [ebp - 0x360]
lea ecx, [ebp - 0x1420]
call fcn.004014ea
mov dword [eax], 0x4ce10b49
jmp 0x42d06d
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
cmp dword [eax], 0
jne 0x42d164
push 1
lea ecx, [ebp - 0x1420]
call fcn.004014ea
cmp dword [eax], 0xa25a
jge 0x42d0d3
mov dword [ebp - 0x12cc], 1
jmp 0x42d0da
and dword [ebp - 0x12cc], 0
mov eax, dword [ebp - 0x12cc]
mov dword [ebp - 0x5ac], eax
mov esi, dword [ebp - 0x5ac]
sub esi, dword [ebp - 0x2e0]
push 0
lea ecx, [ebp - 0x1420]
call fcn.004014ea
cmp esi, dword [eax]
je 0x42d10f
mov dword [ebp - 0x15ec], 1
jmp 0x42d116
and dword [ebp - 0x15ec], 0
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
mov esi, dword [ebp - 0x2e0]
push 0
lea ecx, [ebp - 0x544]
call fcn.004014ea
cmp esi, dword [eax]
jle 0x42d146
mov dword [ebp - 0x12d4], 1
jmp 0x42d14d
and dword [ebp - 0x12d4], 0
push 0
lea ecx, [ebp - 0x1420]
call fcn.004014ea
mov eax, dword [eax]
cmp eax, dword [ebp - 0x12d4]
jge 0x42d179
cmp dword [ebp - 0x5ac], 0
je 0x42d179
mov dword [ebp - 0x12dc], 1
jmp 0x42d180
and dword [ebp - 0x12dc], 0
imul eax, dword [ebp - 0x12dc], 0xf89c
cmp eax, 0x628a
jne 0x42d19d
mov dword [ebp - 0x968], 1
jmp 0x42d1a4
and dword [ebp - 0x968], 0
push 2
lea ecx, [ebp - 0x1420]
call fcn.004014ea
mov ecx, dword [ebp - 0x968]
cmp ecx, dword [eax]
jne 0x42d1c7
mov dword [ebp - 0x1054], 1
jmp 0x42d1ce
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0x1054]
mov dword [ebp - 0x2a8], eax
lea ecx, [ebp - 0x1420]
call fcn.004014ce
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x2e0], eax
lea ecx, [ebp - 0x544]
call fcn.004014ce
mov dword [ebp - 0x25c], 0xffffffff
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x254], 0xe6aa1654
mov dword [ebp - 0x2cc], 0xf0ebf903
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x798], 0xcaa5d732
push 1
lea ecx, [ebp - 0x1354]
call fcn.004013fc
mov dword [ebp - 0x368], 0
jmp 0x42d25b
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x42d27d
push dword [ebp - 0x368]
lea ecx, [ebp - 0x1354]
call fcn.004014ea
mov dword [eax], 7
jmp 0x42d24e
cmp dword [ebp - 0x68], 0x1c1ec2db
je 0x42d292
mov dword [ebp - 0x7a0], 1
jmp 0x42d299
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
je 0x42d2f6
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1eac], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1eb8], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x1cf8], eax
cmp dword [ebp - 0x68], 0xaf8716b5
ja 0x42d2f6
mov dword [ebp - 0x790], 1
jmp 0x42d2fd
and dword [ebp - 0x790], 0
imul eax, dword [ebp - 0x790], 0xf25d
cmp eax, 0x58efa97
jl 0x42d31a
mov dword [ebp - 0x15f4], 1
jmp 0x42d321
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
je 0x42d335
mov dword [ebp - 0x105c], 1
jmp 0x42d33c
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x105c]
mov dword [ebp - 0x798], eax
imul eax, dword [ebp - 0x798], 0
cmp eax, dword [ebp - 0x68]
jge 0x42d367
mov dword [ebp - 0x1064], 1
jmp 0x42d36e
and dword [ebp - 0x1064], 0
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x1064]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x7a0], 0
jl 0x42d395
mov dword [ebp - 0x106c], 1
jmp 0x42d39c
and dword [ebp - 0x106c], 0
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x2cc], 0
jmp 0x42d3be
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xfffffff2
jg 0x42d56d
mov dword [ebp - 0x510], 0xc1979116
push 0
lea ecx, [ebp - 0x1354]
call fcn.004014ea
cmp dword [eax], 0
je 0x42d4fe
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x1ec0], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1ae0], eax
mov eax, 0x6fe5
cmp eax, 1
ja 0x42d419
mov dword [ebp - 0x7a8], 1
jmp 0x42d420
and dword [ebp - 0x7a8], 0
push 0
lea ecx, [ebp - 0x1354]
call fcn.004014ea
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7a8]
jne 0x42d443
mov dword [ebp - 0x1074], 1
jmp 0x42d44a
and dword [ebp - 0x1074], 0
push 0
lea ecx, [ebp - 0x1354]
call fcn.004014ea
mov ecx, dword [ebp - 0x1074]
cmp ecx, dword [eax]
jl 0x42d46d
mov dword [ebp - 0x15fc], 1
jmp 0x42d474
and dword [ebp - 0x15fc], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1ae8], eax
push 0
lea ecx, [ebp - 0x1354]
call fcn.004014ea
cmp dword [eax], 0
ja 0x42d49b
mov dword [ebp - 0x7b0], 1
jmp 0x42d4a2
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x510]
cmp dword [ebp - 0x7b0], eax
je 0x42d4bc
mov dword [ebp - 0x107c], 1
jmp 0x42d4c3
and dword [ebp - 0x107c], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x107c], eax
jle 0x42d4dd
mov dword [ebp - 0x7b8], 1
jmp 0x42d4e4
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x510]
cmp eax, dword [ebp - 0x7b8]
jle 0x42d4fe
mov dword [ebp - 0x1084], 1
jmp 0x42d505
and dword [ebp - 0x1084], 0
cmp dword [ebp - 0x1084], 0x1ffd
jne 0x42d51d
mov dword [ebp - 0x7c0], 1
jmp 0x42d524
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x8c], 0
jmp 0x42d549
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x42d568
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x1354]
call fcn.004014ea
and dword [eax], 0
jmp 0x42d53c
jmp 0x42d3b1
lea ecx, [ebp - 0x1354]
call fcn.004014ce
mov dword [ebp - 0x1604], 8
mov dword [ebp - 0x1af0], 1
mov dword [ebp - 0x118], 0
jmp 0x42d5a5
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x42d5c1
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x2038], 0x34504cd4
jmp 0x42d598
mov dword [ebp - 0x118], 0
jmp 0x42d5da
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x42d5f6
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x1830], 0xa473eb90
jmp 0x42d5cd
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x2038]
mov dword [ebp + ecx - 0x1830], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1830]
mov dword [ebp - 0x1604], eax
mov byte [ebp - 0x166], 0
mov dword [ebp - 0x6c], 0xfffffffb
mov dword [ebp - 0x5c], 0x23a266d2
mov dword [ebp - 0x1b4], 0xffffffff
mov dword [ebp - 0x370], 0
jmp 0x42d65a
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 1
jge 0x42d676
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x162c], 0x80ce5fa5
jmp 0x42d64d
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
je 0x42d68a
mov dword [ebp - 0x108c], 1
jmp 0x42d691
and dword [ebp - 0x108c], 0
cmp dword [ebp - 0x108c], 1
jne 0x42d6a6
mov dword [ebp - 0x7c8], 1
jmp 0x42d6ad
and dword [ebp - 0x7c8], 0
cmp dword [ebp - 0x7c8], 4
jb 0x42d6c2
mov dword [ebp - 0x7d0], 1
jmp 0x42d6c9
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
je 0x42d6e0
cmp dword [ebp - 0x5c], 0
jne 0x42d6e0
and dword [ebp - 0x1094], 0
jmp 0x42d6ea
mov dword [ebp - 0x1094], 1
mov eax, dword [ebp - 0x1094]
sub eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x7d0]
lea eax, [ecx + eax - 0x1085]
test eax, eax
je 0x42db0e
mov dword [ebp - 0x4d8], 0xf1912530
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x460], 0
jmp 0x42d736
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 3
jge 0x42d752
mov eax, dword [ebp - 0x460]
mov dword [ebp + eax*4 - 0x1390], 3
jmp 0x42d729
cmp dword [ebp - 0x4d8], 0
jne 0x42d87b
cmp dword [ebp - 0x4d8], 0
je 0x42d786
mov eax, dword [ebp - 0x74]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x1390]
je 0x42d786
mov dword [ebp - 0x109c], 1
jmp 0x42d78d
and dword [ebp - 0x109c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x109c], eax
jne 0x42d7a4
mov dword [ebp - 0x7d8], 1
jmp 0x42d7ab
and dword [ebp - 0x7d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1390]
cmp dword [ebp - 0x7d8], eax
je 0x42d7cc
mov dword [ebp - 0x10a4], 1
jmp 0x42d7d3
and dword [ebp - 0x10a4], 0
cmp dword [ebp - 0x10a4], 0x674fa72d
jne 0x42d7eb
mov dword [ebp - 0x7e0], 1
jmp 0x42d7f2
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x7e0], eax
jl 0x42d809
mov dword [ebp - 0x10ac], 1
jmp 0x42d810
and dword [ebp - 0x10ac], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x10ac], eax
je 0x42d827
mov dword [ebp - 0x7e8], 1
jmp 0x42d82e
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 1
jae 0x42d843
mov dword [ebp - 0x160c], 1
jmp 0x42d84a
and dword [ebp - 0x160c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1390]
mov dword [ebp - 0x1af8], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1b00], eax
cmp dword [ebp - 0x4d8], 0xb05e
jle 0x42d87b
and dword [ebp - 0x10b4], 0
jmp 0x42d885
mov dword [ebp - 0x10b4], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x10b4], eax
jl 0x42d89c
mov dword [ebp - 0x7f0], 1
jmp 0x42d8a3
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x5c], 0
jmp 0x42d8bc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x42db09
mov dword [ebp - 0x66c], 0x798564db
push 3
lea ecx, [ebp - 0x17c8]
call fcn.004013fc
mov dword [ebp - 0x378], 0
jmp 0x42d8f6
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 3
jge 0x42d915
push dword [ebp - 0x378]
lea ecx, [ebp - 0x17c8]
call fcn.004014ea
and dword [eax], 0
jmp 0x42d8e9
mov dword [ebp - 0x74], 2
jmp 0x42d925
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x42daf9
mov dword [ebp - 0x10bc], 0
mov dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x1b1c], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x66c]
cmp dword [ebp - 0x10bc], eax
jge 0x42d975
mov dword [ebp - 0x7f8], 1
jmp 0x42d97c
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x7f8]
jg 0x42d993
mov dword [ebp - 0x10c4], 1
jmp 0x42d99a
and dword [ebp - 0x10c4], 0
mov eax, dword [ebp - 0x10c4]
mov dword [ebp - 0x800], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1390]
cmp dword [ebp - 0x800], eax
jl 0x42d9c7
mov dword [ebp - 0x10cc], 1
jmp 0x42d9ce
and dword [ebp - 0x10cc], 0
cmp dword [ebp - 0x10cc], 0xfff8
je 0x42d9e6
mov dword [ebp - 0x808], 1
jmp 0x42d9ed
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x808], eax
jge 0x42da07
mov dword [ebp - 0x10d4], 1
jmp 0x42da0e
and dword [ebp - 0x10d4], 0
cmp dword [ebp - 0x10d4], 0xfef6f1ac
ja 0x42da26
mov dword [ebp - 0x810], 1
jmp 0x42da2d
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x810], eax
jle 0x42da44
mov dword [ebp - 0x1614], 1
jmp 0x42da4b
and dword [ebp - 0x1614], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1b24], eax
mov eax, dword [ebp - 0x74]
imul ecx, dword [ebp - 0x1b4], 0x825d
cmp dword [ebp + eax*4 - 0x1390], ecx
jne 0x42da76
mov dword [ebp - 0x161c], 1
jmp 0x42da7d
and dword [ebp - 0x161c], 0
cmp dword [ebp - 0x1b4], 0
jne 0x42da8f
mov eax, 0x628f0fc5
test eax, eax
je 0x42da9a
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x1390], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x66c]
cmp dword [ebp + eax - 0x1390], ecx
jge 0x42dabb
mov dword [ebp - 0x5b4], 1
jmp 0x42dac2
and dword [ebp - 0x5b4], 0
push 2
lea ecx, [ebp - 0x17c8]
call fcn.004014ea
mov ecx, dword [ebp - 0x5b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x6c], eax
push 2
lea ecx, [ebp - 0x17c8]
call fcn.004014ea
cmp dword [eax], 0
je 0x42daf4
jmp 0x42daf9
jmp 0x42d91e
lea ecx, [ebp - 0x17c8]
call fcn.004014ce
jmp 0x42d8b5
jmp 0x42dc4f
mov dword [ebp - 0x10e4], 0x7787
mov dword [ebp - 0x818], 0x759721cb
mov byte [ebp - 0x22d], 0
movzx eax, byte [ebp - 0x22d]
test eax, eax
je 0x42db42
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov dword [ebp - 0x1b4], 0
jmp 0x42db5b
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xffffffed
jl 0x42dc4f
cmp dword [ebp - 0x5c], 0
jne 0x42db7a
mov dword [ebp - 0x1624], 1
jmp 0x42db81
and dword [ebp - 0x1624], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1b2c], eax
cmp dword [ebp - 0x10e4], 0x1a33
jne 0x42dba2
mov dword [ebp - 0x10dc], 1
jmp 0x42dba9
and dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x10dc]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0
jne 0x42dbc3
xor eax, eax
inc eax
je 0x42dbd5
cmp dword [ebp - 0x6c], 0
je 0x42dbd5
mov dword [ebp - 0x820], 1
jmp 0x42dbdc
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x10e4]
cmp dword [ebp - 0x820], eax
jne 0x42dbf6
mov dword [ebp - 0x10ec], 1
jmp 0x42dbfd
and dword [ebp - 0x10ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10ec]
mov dword [ebp + eax - 0x162c], ecx
mov byte [ebp - 0x164], 0
movzx eax, byte [ebp - 0x164]
test eax, eax
je 0x42dc4a
push 0xb99
push 0xe5e
push 0x1b4f
push 0xf2e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
jmp 0x42db4e
mov byte [ebp - 0x1a2], 0
movzx eax, byte [ebp - 0x1a2]
test eax, eax
je 0x42dc70
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
movzx eax, byte [ebp - 0x166]
test eax, eax
je 0x42dc87
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov dword [ebp - 0x380], 0x76820624
mov dword [ebp - 0x828], 0xffffffff
mov dword [ebp - 0x1b34], 0x279c4185
mov dword [ebp - 0x380], 1
jmp 0x42dcbe
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 7
je 0x42dd19
mov dword [ebp - 0x468], 0x71d976ff
mov dword [ebp - 0x468], 0xf
jmp 0x42dcea
mov eax, dword [ebp - 0x468]
dec eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0xffffffe8
jge 0x42dd17
mov byte [ebp - 0x1dd], 0
movzx eax, byte [ebp - 0x1dd]
test eax, eax
je 0x42dd15
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x42dcdd
jmp 0x42dcb1
mov eax, dword [ebp - 0x828]
inc eax
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x25c], 0
jmp 0x42dd3f
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0xfffffff0
jne 0x42f07c
mov dword [ebp - 0x4c], 0xde19d29b
push 4
lea ecx, [ebp - 0x13c0]
call fcn.004013fc
mov dword [ebp - 0x320], 0xc72b752b
mov dword [ebp - 0x20], 0
jmp 0x42dd7a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x42dd90
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x12ec], 2
jmp 0x42dd73
mov dword [ebp - 0x20], 0
jmp 0x42dda0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x42ddb6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1a8c], 1
jmp 0x42dd99
mov dword [ebp - 0x20], 0
jmp 0x42ddc6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x42dde2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x13c0]
call fcn.004014ea
mov dword [eax], 0xfffffffb
jmp 0x42ddbf
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x42de06
push 0xdc0
push 0x2044
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov dword [ebp - 0x4c], 2
jmp 0x42de16
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x42e069
mov dword [ebp - 0x10f4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12ec]
mov dword [ebp - 0x1b3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12ec]
mov dword [ebp - 0x1b44], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8c]
mov dword [ebp - 0x1b4c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a8c], 0xb5d1cb6a
jb 0x42de84
xor eax, eax
inc eax
je 0x42de84
mov dword [ebp - 0x1634], 1
jmp 0x42de8b
and dword [ebp - 0x1634], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x12ec], 0
je 0x42dec6
push 3
lea ecx, [ebp - 0x13c0]
call fcn.004014ea
cmp dword [eax], 0
je 0x42dec6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8c], 0
je 0x42dec6
mov dword [ebp - 0x830], 1
jmp 0x42decd
and dword [ebp - 0x830], 0
mov dword [ebp - 0x10f4], 0x7ccc8959
mov eax, dword [ebp - 0x10f4]
sub eax, dword [ebp - 0x830]
mov ecx, dword [ebp - 0x4c]
cmp eax, dword [ebp + ecx*4 - 0x12ec]
jg 0x42defb
mov dword [ebp - 0x10fc], 1
jmp 0x42df02
and dword [ebp - 0x10fc], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x12ec]
cmp dword [ebp - 0x10fc], eax
jle 0x42df20
mov dword [ebp - 0x838], 1
jmp 0x42df27
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x838], eax
jg 0x42df3e
mov dword [ebp - 0x1104], 1
jmp 0x42df45
and dword [ebp - 0x1104], 0
mov esi, dword [ebp - 0x1104]
sub esi, 6
push 3
lea ecx, [ebp - 0x13c0]
call fcn.004014ea
imul esi, dword [eax]
cmp esi, dword [ebp - 0x4c]
jl 0x42df6f
mov dword [ebp - 0x840], 1
jmp 0x42df76
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x12ec]
cmp eax, dword [ebp - 0x840]
jg 0x42df94
mov dword [ebp - 0x110c], 1
jmp 0x42df9b
and dword [ebp - 0x110c], 0
push 3
lea ecx, [ebp - 0x13c0]
call fcn.004014ea
mov ecx, dword [ebp - 0x110c]
cmp ecx, dword [eax]
jl 0x42dfbe
mov dword [ebp - 0x848], 1
jmp 0x42dfc5
and dword [ebp - 0x848], 0
push 3
lea ecx, [ebp - 0x13c0]
call fcn.004014ea
mov ecx, dword [ebp - 0x848]
cmp ecx, dword [eax]
jle 0x42dff0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12ec]
mov dword [ebp - 0x320], eax
jmp 0x42e052
mov byte [ebp - 0x1a4], 0
movzx eax, byte [ebp - 0x1a4]
test eax, eax
je 0x42e00a
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [ebp - 0x320], 0
jmp 0x42e023
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 2
jg 0x42e052
mov byte [ebp - 0x16a], 0
movzx eax, byte [ebp - 0x16a]
test eax, eax
je 0x42e050
push 0x1611
push 0x2641
push 0
call dword [sym.imp.USER32.dll_InflateRect]
jmp 0x42e016
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x12ec], 0
je 0x42e064
jmp 0x42de0f
jmp 0x42de0f
lea ecx, [ebp - 0x13c0]
call fcn.004014ce
mov dword [ebp - 0x13c], 0x34fda0e6
mov dword [ebp - 0x1114], 0
push 2
lea ecx, [ebp - 0x199c]
call fcn.004013fc
mov dword [ebp - 0x163c], 0
mov dword [ebp - 0x388], 0
jmp 0x42e0b8
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 2
jge 0x42e0da
push dword [ebp - 0x388]
lea ecx, [ebp - 0x199c]
call fcn.004014ea
mov dword [eax], 0x836b16b4
jmp 0x42e0ab
cmp dword [ebp - 0x13c], 0xca4f
jl 0x42e153
mov dword [ebp - 0x530], 0
jmp 0x42e0ff
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 3
jge 0x42e11b
mov eax, dword [ebp - 0x530]
mov dword [ebp + eax*4 - 0x1f90], 7
jmp 0x42e0f2
mov dword [ebp - 0x13c], 0
jmp 0x42e134
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jg 0x42e151
mov eax, dword [ebp - 0x13c]
cmp dword [ebp + eax*4 - 0x1f90], 0
je 0x42e14f
jmp 0x42e151
jmp 0x42e127
jmp 0x42e174
mov byte [ebp - 0x20d], 0
movzx eax, byte [ebp - 0x20d]
test eax, eax
je 0x42e174
push 0
push 0x1228
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1114], eax
mov eax, dword [ebp - 0x1114]
mov dword [ebp - 0x850], eax
push 1
lea ecx, [ebp - 0x199c]
call fcn.004014ea
mov ecx, dword [ebp - 0x850]
mov dword [eax], ecx
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x850], eax
jne 0x42e1bb
mov dword [ebp - 0x111c], 1
jmp 0x42e1c2
and dword [ebp - 0x111c], 0
mov eax, dword [ebp - 0x111c]
mov dword [ebp - 0x163c], eax
lea ecx, [ebp - 0x199c]
call fcn.004014ce
mov dword [ebp - 0x16a4], 0xfffffff6
mov dword [ebp - 0x1c4], 0x26bdde0b
mov dword [ebp - 0x1bc], 0xb8fa48a2
mov dword [ebp - 0x5bc], 0xfffd
mov dword [ebp - 0x674], 0x31eaa473
mov dword [ebp - 0x390], 0
jmp 0x42e224
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 3
jge 0x42e240
mov eax, dword [ebp - 0x390]
mov dword [ebp + eax*4 - 0x754], 0x7a329ef
jmp 0x42e217
mov dword [ebp - 0x1c4], 0
jmp 0x42e259
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xffffffef
jge 0x42e4c8
mov dword [ebp - 0x6c8], 0x6318d581
mov dword [ebp - 0x164c], 0x1720348f
mov dword [ebp - 0x1b54], 0xfffffff9
mov dword [ebp - 0x1b5c], 0x8e10e5e5
mov dword [ebp - 0x1644], 0xbc248910
push 2
lea ecx, [ebp - 0x171c]
call fcn.004013fc
mov dword [ebp - 0x1654], 0
mov dword [ebp - 0x470], 0
jmp 0x42e2c8
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 2
jge 0x42e2e7
push dword [ebp - 0x470]
lea ecx, [ebp - 0x171c]
call fcn.004014ea
and dword [eax], 0
jmp 0x42e2bb
cmp dword [ebp - 0x6c8], 0
je 0x42e300
lea ecx, [ebp - 0x171c]
call fcn.004014ce
jmp 0x42e4c8
push 8
pop eax
test eax, eax
je 0x42e4a0
cmp dword [ebp - 0x6c8], 0
jne 0x42e320
mov dword [ebp - 0x112c], 1
jmp 0x42e327
and dword [ebp - 0x112c], 0
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
imul eax, dword [ebp - 0x1bc], 0xffffffff
cmp eax, 0x992db756
jae 0x42e34e
mov dword [ebp - 0x858], 1
jmp 0x42e355
and dword [ebp - 0x858], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x858]
imul ecx, dword [ebp + eax - 0x754]
mov dword [ebp - 0x1124], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1124]
mov dword [ebp + eax - 0x754], ecx
push 1
lea ecx, [ebp - 0x171c]
call fcn.004014ea
mov ecx, dword [ebp - 0x1124]
cmp ecx, dword [eax]
jl 0x42e3a5
mov dword [ebp - 0x860], 1
jmp 0x42e3ac
and dword [ebp - 0x860], 0
push 1
lea ecx, [ebp - 0x171c]
call fcn.004014ea
mov ecx, dword [ebp - 0x860]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x754]
mov dword [ebp - 0x1b64], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x112c], eax
jg 0x42e3f3
or eax, 0xffffffff
je 0x42e3f3
mov dword [ebp - 0x868], 1
jmp 0x42e3fa
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x1644], eax
cmp dword [ebp - 0x164c], 0xfffffff7
jg 0x42e41b
mov dword [ebp - 0x1134], 1
jmp 0x42e422
and dword [ebp - 0x1134], 0
imul eax, dword [ebp - 0x1134], 0x8642
test eax, eax
jne 0x42e439
cmp dword [ebp - 0x1654], 0
je 0x42e455
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x754], 0
je 0x42e455
mov dword [ebp - 0x870], 1
jmp 0x42e45c
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
neg eax
xor ecx, ecx
sub ecx, eax
je 0x42e47f
cmp dword [ebp - 0x6c8], 0
je 0x42e47f
mov dword [ebp - 0x113c], 1
jmp 0x42e486
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x113c], eax
jge 0x42e4a0
mov dword [ebp - 0x878], 1
jmp 0x42e4a7
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x878]
sub eax, 0x55d48264
mov dword [ebp - 0x5bc], eax
lea ecx, [ebp - 0x171c]
call fcn.004014ce
jmp 0x42e24c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x754], 1
ja 0x42e4e4
mov dword [ebp - 0x880], 1
jmp 0x42e4eb
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x674]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x754]
imul eax, eax, 0xa716
cmp eax, 0xe9140de1
je 0x42e516
mov dword [ebp - 0x1144], 1
jmp 0x42e51d
and dword [ebp - 0x1144], 0
cmp dword [ebp - 0x1144], 0
jg 0x42e532
mov dword [ebp - 0x114c], 1
jmp 0x42e539
and dword [ebp - 0x114c], 0
mov eax, dword [ebp - 0x880]
imul eax, dword [ebp - 0x114c]
cmp dword [ebp - 0x5bc], eax
jl 0x42e55a
mov dword [ebp - 0x888], 1
jmp 0x42e561
and dword [ebp - 0x888], 0
imul eax, dword [ebp - 0x888], 0x4b1f
test eax, eax
je 0x42e7d9
mov dword [ebp - 0x1174], 0x4961
mov dword [ebp - 0x1664], 0xcbfc796d
mov dword [ebp - 0x166c], 5
mov dword [ebp - 0x1bc], 0xfffffff8
jmp 0x42e5aa
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 9
jle 0x42e7d7
mov dword [ebp - 0x294], 6
mov dword [ebp - 0x8a8], 0x316a37a5
mov dword [ebp - 0x5c4], 0x8b7cb4d6
cmp dword [ebp - 0x674], 0
jne 0x42e7b5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x754]
cmp dword [ebp - 0x5bc], eax
jle 0x42e603
mov dword [ebp - 0x115c], 1
jmp 0x42e60a
and dword [ebp - 0x115c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x754]
cmp dword [ebp - 0x294], eax
jle 0x42e62b
mov dword [ebp - 0x1154], 1
jmp 0x42e632
and dword [ebp - 0x1154], 0
mov eax, dword [ebp - 0x1174]
cmp dword [ebp - 0x1c4], eax
je 0x42e652
mov eax, 0xb66f
test eax, eax
jne 0x42e652
and dword [ebp - 0x165c], 0
jmp 0x42e65c
mov dword [ebp - 0x165c], 1
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1b6c], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1b74], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1b7c], eax
cmp dword [ebp - 0x674], 0xffffffff
jle 0x42e695
mov dword [ebp - 0x890], 1
jmp 0x42e69c
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x294]
add eax, 0x45bd2804
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x115c], eax
jl 0x42e6d3
mov dword [ebp - 0x898], 1
jmp 0x42e6da
and dword [ebp - 0x898], 0
cmp dword [ebp - 0x898], 0x2819
jl 0x42e6f2
mov dword [ebp - 0x1164], 1
jmp 0x42e6f9
and dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0x1664]
cmp dword [ebp - 0x1164], eax
jle 0x42e713
mov dword [ebp - 0x8a0], 1
jmp 0x42e71a
and dword [ebp - 0x8a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x754]
mov ecx, dword [ebp - 0x8a0]
sub ecx, dword [ebp - 0x166c]
add eax, ecx
cmp eax, 0xc51c80f8
jae 0x42e748
mov dword [ebp - 0x116c], 1
jmp 0x42e74f
and dword [ebp - 0x116c], 0
mov eax, dword [ebp - 0x294]
add eax, dword [ebp - 0x116c]
je 0x42e772
cmp dword [ebp - 0x8a8], 0
je 0x42e772
mov dword [ebp - 0x1674], 1
jmp 0x42e779
and dword [ebp - 0x1674], 0
cmp dword [ebp - 0x5c4], 0
jne 0x42e794
cmp dword [ebp - 0x1174], 0
jne 0x42e794
and dword [ebp - 0x8b0], 0
jmp 0x42e79e
mov dword [ebp - 0x8b0], 1
imul eax, dword [ebp - 0x8b0], 0xffd6
test eax, eax
jne 0x42e7b5
and dword [ebp - 0x117c], 0
jmp 0x42e7bf
mov dword [ebp - 0x117c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x117c]
mov dword [ebp + eax - 0x754], ecx
jmp 0x42e59d
jmp 0x42e7f5
mov byte [ebp - 0x16c], 0
movzx eax, byte [ebp - 0x16c]
test eax, eax
je 0x42e7f5
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
mov dword [ebp - 0x16b4], 0xffffffff
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x8b8], 8
mov dword [ebp - 0x40], 0xfffffffb
jmp 0x42e820
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe7
jne 0x42ea13
mov dword [ebp - 0x2e8], 0xfffffff8
mov dword [ebp - 0x398], 0
jmp 0x42e84d
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 1
jge 0x42e869
mov eax, dword [ebp - 0x398]
mov dword [ebp + eax*4 - 0x730], 0xfffffffd
jmp 0x42e840
cmp dword [ebp - 0x40], 0
je 0x42e947
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x8b8]
add eax, dword [ebp - 0x40]
cmp eax, 0x5954e3f1
jge 0x42e898
mov dword [ebp - 0x1184], 1
jmp 0x42e89f
and dword [ebp - 0x1184], 0
cmp dword [ebp - 0x1184], 0x1c09
jne 0x42e8b7
mov dword [ebp - 0x8c0], 1
jmp 0x42e8be
and dword [ebp - 0x8c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
neg eax
imul ecx, dword [ebp - 0x8c0], 0x21dd
add eax, ecx
cmp dword [ebp - 0x40], eax
jge 0x42e8ea
mov dword [ebp - 0x118c], 1
jmp 0x42e8f1
and dword [ebp - 0x118c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x118c], eax
jge 0x42e908
mov dword [ebp - 0x8c8], 1
jmp 0x42e90f
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x8c8], eax
jge 0x42e929
mov dword [ebp - 0x1194], 1
jmp 0x42e930
and dword [ebp - 0x1194], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1194], eax
jge 0x42e947
mov dword [ebp - 0x8d0], 1
jmp 0x42e94e
and dword [ebp - 0x8d0], 0
cmp dword [ebp - 0x8d0], 1
jle 0x42e963
mov dword [ebp - 0x167c], 1
jmp 0x42e96a
and dword [ebp - 0x167c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
mov dword [ebp - 0x1b84], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x730], 0
je 0x42e9ef
mov dword [ebp - 0x1684], 0
cmp dword [ebp - 0x1684], 0
je 0x42e9aa
cmp dword [ebp - 0x40], 0
je 0x42e9a8
jmp 0x42ea13
jmp 0x42e9ed
mov dword [ebp - 0x2e8], 0
jmp 0x42e9c3
mov eax, dword [ebp - 0x2e8]
dec eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
jl 0x42e9ed
mov byte [ebp - 0x1a6], 0
movzx eax, byte [ebp - 0x1a6]
test eax, eax
je 0x42e9eb
push 0
push 0x2c6
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x42e9b6
jmp 0x42ea0e
mov byte [ebp - 0x16e], 0
movzx eax, byte [ebp - 0x16e]
test eax, eax
je 0x42ea0e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x42e819
mov dword [ebp - 0x4e0], 0
jmp 0x42ea2c
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 1
jge 0x42ea48
mov eax, dword [ebp - 0x4e0]
mov dword [ebp + eax*4 - 0x14c], 0
jmp 0x42ea1f
mov dword [ebp - 0x3a0], 0x1f7e2799
mov dword [ebp - 0x3a0], 0xfffffffe
jmp 0x42ea6b
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0xd
jge 0x42eaaa
mov byte [ebp - 0x1e5], 0
movzx eax, byte [ebp - 0x1e5]
test eax, eax
je 0x42ea8e
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x170], 0
movzx eax, byte [ebp - 0x170]
test eax, eax
je 0x42eaa8
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x42ea5e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14c], 0
jmp 0x42ead8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 0x19
jl 0x42f077
mov dword [ebp - 0x70], 0x32a27689
mov dword [ebp - 0x478], 0
jmp 0x42eb0c
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 4
jge 0x42eb28
mov eax, dword [ebp - 0x478]
mov dword [ebp + eax*4 - 0x17a8], 0x1353
jmp 0x42eaff
mov dword [ebp - 0x70], 0
jmp 0x42eb38
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x42ed01
mov dword [ebp - 0x12c], 0x5010f7a7
mov dword [ebp - 0x12c], 3
jmp 0x42eb65
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x42ecfc
mov dword [ebp - 0x1694], 7
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1b8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17a8]
cmp dword [ebp - 0x12c], eax
jl 0x42eba9
mov dword [ebp - 0x168c], 1
jmp 0x42ebb0
and dword [ebp - 0x168c], 0
push 0xfffffffffffffff9
pop eax
cmp eax, 7
je 0x42ebcd
cmp dword [ebp - 0x12c], 0
je 0x42ebcd
mov dword [ebp - 0x119c], 1
jmp 0x42ebd4
and dword [ebp - 0x119c], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x17a8]
cmp dword [ebp - 0x119c], eax
jg 0x42ebf2
mov dword [ebp - 0x8d8], 1
jmp 0x42ebf9
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x8d8], eax
jle 0x42ec13
mov dword [ebp - 0x11a4], 1
jmp 0x42ec1a
and dword [ebp - 0x11a4], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x17a8]
cmp eax, dword [ebp - 0x11a4]
jge 0x42ec38
mov dword [ebp - 0x8e0], 1
jmp 0x42ec3f
and dword [ebp - 0x8e0], 0
cmp dword [ebp - 0x8e0], 0x4c26
jg 0x42ec57
mov dword [ebp - 0x11ac], 1
jmp 0x42ec5e
and dword [ebp - 0x11ac], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x17a8]
add eax, dword [ebp - 0x11ac]
mov ecx, dword [ebp - 0x70]
cmp eax, dword [ebp + ecx*4 - 0x17a8]
jle 0x42ec86
mov dword [ebp - 0x8e8], 1
jmp 0x42ec8d
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0xfffffff9
jg 0x42eca2
mov dword [ebp - 0x11b4], 1
jmp 0x42eca9
and dword [ebp - 0x11b4], 0
cmp dword [ebp - 0x11b4], 1
jl 0x42ecbe
mov dword [ebp - 0x8f0], 1
jmp 0x42ecc5
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x8f0]
inc ecx
cmp dword [ebp + eax*4 - 0x17a8], ecx
je 0x42ece4
mov dword [ebp - 0x11bc], 1
jmp 0x42eceb
and dword [ebp - 0x11bc], 0
mov eax, dword [ebp - 0x11bc]
mov dword [ebp - 0x1694], eax
jmp 0x42eb58
jmp 0x42eb31
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17a8]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x169c], 0xffffffff
mov dword [ebp - 0x310], 0x87df2f4a
mov dword [ebp - 0x94], 0
jmp 0x42ed3e
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x42ed5a
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x20f0], 0x6801fc3e
jmp 0x42ed31
mov dword [ebp - 0x94], 0
jmp 0x42ed73
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x42ed8f
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1b94], 0xd26ec17e
jmp 0x42ed66
mov dword [ebp - 0x310], 0xcff0ea75
mov dword [ebp - 0x310], 7
jmp 0x42edb2
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x15
jge 0x42ef7a
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x1b9c], 4
mov dword [ebp - 0x1ba4], 9
push 3
lea ecx, [ebp - 0x1d7c]
call fcn.004013fc
mov dword [ebp - 0x3a8], 0
jmp 0x42ee03
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 3
jge 0x42ee25
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x1d7c]
call fcn.004014ea
mov dword [eax], 0x407858f9
jmp 0x42edf6
mov dword [ebp - 0x518], 2
jmp 0x42ee3e
mov eax, dword [ebp - 0x518]
dec eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
jl 0x42ef4e
mov dword [ebp - 0x1bac], 0x7d373ee7
mov dword [ebp - 0x1bb4], 0x4ffd8143
mov dword [ebp - 0x1bbc], 0xb5e4
mov dword [ebp - 0x3b0], 0xde574131
mov dword [ebp - 0x1bc4], 0
mov dword [ebp - 0x8f8], 0x46b51f0e
mov dword [ebp - 0xf4], 0
jmp 0x42eea0
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x42eebc
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x1bcc], 0x874b28e
jmp 0x42ee93
mov dword [ebp - 0xf4], 0
jmp 0x42eed5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x42eef1
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x20a0], 0x5537c57f
jmp 0x42eec8
mov eax, dword [ebp - 0x8f8]
dec eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x3b0], 0
jmp 0x42ef17
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 2
jg 0x42ef49
mov byte [ebp - 0x1a8], 0
movzx eax, byte [ebp - 0x1a8]
test eax, eax
je 0x42ef47
push 0x2682
push 0x74b
push 0x1983
call dword [sym.imp.KERNEL32.dll_MulDiv]
jmp 0x42ef0a
jmp 0x42ee31
mov byte [ebp - 0x172], 0
movzx eax, byte [ebp - 0x172]
test eax, eax
je 0x42ef6a
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
lea ecx, [ebp - 0x1d7c]
call fcn.004014ce
jmp 0x42eda5
mov eax, dword [ebp - 0x169c]
cmp dword [ebp - 0x16a4], eax
jl 0x42ef94
mov dword [ebp - 0x16ac], 1
jmp 0x42ef9b
and dword [ebp - 0x16ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25c]
cmp dword [ebp + eax - 0x14c], ecx
jle 0x42efbc
mov dword [ebp - 0x11c4], 1
jmp 0x42efc3
and dword [ebp - 0x11c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp eax, dword [ebp - 0x11c4]
jne 0x42efed
mov eax, 0x8586fd5d
test eax, eax
je 0x42efed
mov dword [ebp - 0x900], 1
jmp 0x42eff4
and dword [ebp - 0x900], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp - 0x900], eax
jge 0x42f015
mov dword [ebp - 0x11cc], 1
jmp 0x42f01c
and dword [ebp - 0x11cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp - 0x11cc], eax
jg 0x42f03d
mov dword [ebp - 0x908], 1
jmp 0x42f044
and dword [ebp - 0x908], 0
cmp dword [ebp - 0x908], 0
jle 0x42f059
mov dword [ebp - 0x11d4], 1
jmp 0x42f060
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0x11d4]
sub eax, dword [ebp - 0x25c]
mov dword [ebp - 0x16b4], eax
jmp 0x42eabd
jmp 0x42dd32
mov dword [ebp - 0x5cc], 0x2972
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x1cc], 0xfffffff6
mov dword [ebp - 0x11ec], 0xcf041577
mov dword [ebp - 0x16c4], 0xef7d2668
push 2
lea ecx, [ebp - 0x1d8c]
call fcn.004013fc
mov dword [ebp - 0x480], 0
jmp 0x42f0d4
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 2
jge 0x42f0f6
push dword [ebp - 0x480]
lea ecx, [ebp - 0x1d8c]
call fcn.004014ea
mov dword [eax], 6
jmp 0x42f0c7
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x1bd4], eax
mov eax, 0x7597
test eax, eax
je 0x42f139
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x1bdc], eax
mov eax, dword [ebp - 0x5cc]
add eax, 0xfff7
jne 0x42f12d
cmp dword [ebp - 0x2b4], 0
je 0x42f139
mov dword [ebp - 0x16bc], 1
jmp 0x42f140
and dword [ebp - 0x16bc], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x1be4], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x5cc], eax
jne 0x42f166
mov dword [ebp - 0x910], 1
jmp 0x42f16d
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x910], eax
je 0x42f187
mov dword [ebp - 0x11dc], 1
jmp 0x42f18e
and dword [ebp - 0x11dc], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x11dc], eax
jge 0x42f1a8
mov dword [ebp - 0x918], 1
jmp 0x42f1af
and dword [ebp - 0x918], 0
cmp dword [ebp - 0x918], 0x8ecb302a
jb 0x42f1c7
mov dword [ebp - 0x11e4], 1
jmp 0x42f1ce
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x2b4]
imul eax, dword [ebp - 0x11e4]
cmp eax, dword [ebp - 0x1cc]
jg 0x42f1ef
mov dword [ebp - 0x920], 1
jmp 0x42f1f6
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x11ec], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x11ec], eax
je 0x42f21c
mov dword [ebp - 0x928], 1
jmp 0x42f223
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x16c4], eax
mov dword [ebp - 0x1cc], 0
jmp 0x42f248
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jg 0x42f272
mov byte [ebp - 0x225], 0
movzx eax, byte [ebp - 0x225]
test eax, eax
je 0x42f270
push 0x1e7
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x42f23b
lea ecx, [ebp - 0x1d8c]
call fcn.004014ce
mov dword [ebp - 0x1bec], 0xfd41e559
mov byte [ebp - 0x174], 0
movzx eax, byte [ebp - 0x174]
test eax, eax
je 0x42f2a5
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
mov byte [ebp - 0x1aa], 0
movzx eax, byte [ebp - 0x1aa]
test eax, eax
je 0x42f2c9
push 0x150c
push 0x127d
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x930], 0x36745799
mov dword [ebp - 0x264], 0xe360de57
mov dword [ebp - 0x4e8], 9
mov dword [ebp - 0x940], 1
mov dword [ebp - 0x120c], 0x57f39cee
mov dword [ebp - 0x16d4], 0xdc0f1fa6
push 2
lea ecx, [ebp - 0x1d9c]
call fcn.004013fc
mov dword [ebp - 0x3b8], 0
jmp 0x42f335
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 2
jge 0x42f357
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x1d9c]
call fcn.004014ea
mov dword [eax], 0x781b5f7a
jmp 0x42f328
cmp dword [ebp - 0x29c], 0
jg 0x42f36c
mov dword [ebp - 0x11f4], 1
jmp 0x42f373
and dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x11f4]
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x930], 0
je 0x42f394
mov dword [ebp - 0x11fc], 1
jmp 0x42f39b
and dword [ebp - 0x11fc], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x11fc], eax
jne 0x42f3b5
mov dword [ebp - 0x938], 1
jmp 0x42f3bc
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x938], eax
je 0x42f3d6
mov dword [ebp - 0x1204], 1
jmp 0x42f3dd
and dword [ebp - 0x1204], 0
mov eax, dword [ebp - 0x1204]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0x264]
mov dword [ebp - 0x940], eax
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x120c], eax
imul eax, dword [ebp - 0x120c], 0x809b
cmp eax, 0xf7bd
jge 0x42f424
mov dword [ebp - 0x948], 1
jmp 0x42f42b
and dword [ebp - 0x948], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x948], eax
jl 0x42f445
mov dword [ebp - 0x1214], 1
jmp 0x42f44c
and dword [ebp - 0x1214], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x1214], eax
jle 0x42f466
mov dword [ebp - 0x950], 1
jmp 0x42f46d
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x264]
add eax, dword [ebp - 0x950]
cmp eax, dword [ebp - 0x264]
jg 0x42f48d
mov dword [ebp - 0x121c], 1
jmp 0x42f494
and dword [ebp - 0x121c], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x121c], eax
jg 0x42f4ae
mov dword [ebp - 0x16cc], 1
jmp 0x42f4b5
and dword [ebp - 0x16cc], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x1bf4], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x1bfc], eax
cmp dword [ebp - 0x4e8], 0
jne 0x42f4e8
mov eax, 0x49cff29c
test eax, eax
jne 0x42f4e8
and dword [ebp - 0x958], 0
jmp 0x42f4f2
mov dword [ebp - 0x958], 1
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x958]
jg 0x42f512
cmp dword [ebp - 0x4e8], 0
jne 0x42f512
and dword [ebp - 0x1224], 0
jmp 0x42f51c
mov dword [ebp - 0x1224], 1
mov eax, dword [ebp - 0x1224]
mov dword [ebp - 0x16d4], eax
lea ecx, [ebp - 0x1d9c]
call fcn.004014ce
mov dword [ebp - 0x684], 0x2972
mov dword [ebp - 0x1c04], 0xc6a53d06
mov dword [ebp - 0x1c0c], 0x16df251d
mov dword [ebp - 0x1c14], 0xfffffffb
mov dword [ebp - 0x1c1c], 0x82a1836c
push 1
lea ecx, [ebp - 0x1dac]
call fcn.004013fc
mov dword [ebp - 0x26c], 0xc03809d0
mov dword [ebp - 0x9c], 0
jmp 0x42f595
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x42f5b7
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1dac]
call fcn.004014ea
mov dword [eax], 1
jmp 0x42f588
mov dword [ebp - 0x9c], 0
jmp 0x42f5d0
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x42f5ec
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x20c0], 0xffffffff
jmp 0x42f5c3
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x26c], 0
jmp 0x42f612
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x27
jne 0x42f66d
mov byte [ebp - 0x176], 0
movzx eax, byte [ebp - 0x176]
test eax, eax
je 0x42f639
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov byte [ebp - 0x1ed], 0
movzx eax, byte [ebp - 0x1ed]
test eax, eax
je 0x42f66b
push 0
push 0x16a9
push 0x1449
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x42f605
lea ecx, [ebp - 0x1dac]
call fcn.004014ce
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x1840], 0xb4e1a362
mov dword [ebp - 0x183c], 0xb4e1a362
mov dword [ebp - 0x1838], 0xb4e1a362
mov dword [ebp - 0x1834], 0xb4e1a362
mov dword [ebp - 0x2c4], 0xf98a59c1
mov dword [ebp - 0x1c24], 1
mov byte [ebp - 0x178], 0
movzx eax, byte [ebp - 0x178]
test eax, eax
je 0x42f6e0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0x2c4], 3
jmp 0x42f6f9
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jl 0x42f94e
mov dword [ebp - 0x3c0], 2
mov byte [ebp - 0x1ac], 0
movzx eax, byte [ebp - 0x1ac]
test eax, eax
je 0x42f72f
push 0
push 0x10e5
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x3c0], 0
jmp 0x42f748
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 3
jg 0x42f949
mov dword [ebp - 0x2f0], 0xfffffff7
push 3
lea ecx, [ebp - 0x19e4]
call fcn.004013fc
mov dword [ebp - 0x488], 0
jmp 0x42f785
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 3
jge 0x42f7a7
push dword [ebp - 0x488]
lea ecx, [ebp - 0x19e4]
call fcn.004014ea
mov dword [eax], 0x658edfe0
jmp 0x42f778
cmp dword [ebp - 0x2c4], 0
je 0x42f7c0
lea ecx, [ebp - 0x19e4]
call fcn.004014ce
jmp 0x42f949
mov dword [ebp - 0x2f0], 0
jmp 0x42f7d9
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 3
jg 0x42f939
mov dword [ebp - 0x3c8], 5
push 4
lea ecx, [ebp - 0x1a44]
call fcn.004013fc
mov dword [ebp - 0x114], 0
jmp 0x42f816
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x42f832
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x20cc], 0x501874da
jmp 0x42f809
mov dword [ebp - 0x114], 0
jmp 0x42f84b
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 4
jge 0x42f86d
push dword [ebp - 0x114]
lea ecx, [ebp - 0x1a44]
call fcn.004014ea
mov dword [eax], 0xffff
jmp 0x42f83e
mov dword [ebp - 0x3c8], 0
jmp 0x42f886
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 3
jg 0x42f929
mov dword [ebp - 0x1c2c], 0x9cf13e13
mov dword [ebp - 0x1c34], 0xfffffffb
mov dword [ebp - 0x1c3c], 6
mov dword [ebp - 0x548], 0
jmp 0x42f8ca
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 2
jge 0x42f8e6
mov eax, dword [ebp - 0x548]
mov dword [ebp + eax*4 - 0x20a8], 0x92758e92
jmp 0x42f8bd
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x2c4]
mov eax, dword [ebp + eax*4 - 0x1840]
mov dword [ebp + ecx*4 - 0x1840], eax
push 1
lea ecx, [ebp - 0x1a44]
call fcn.004014ea
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x960]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x960]
mov dword [ecx], eax
jmp 0x42f879
lea ecx, [ebp - 0x1a44]
call fcn.004014ce
jmp 0x42f7cc
lea ecx, [ebp - 0x19e4]
call fcn.004014ce
jmp 0x42f73b
jmp 0x42f6ec
mov dword [ebp - 0x1d4], 0xfffffff6
push 3
lea ecx, [ebp - 0x774]
call fcn.004013fc
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x970], 0x14b58e17
mov dword [ebp - 0x1234], 0
mov dword [ebp - 0x16ec], 1
mov dword [ebp - 0x3d0], 0
jmp 0x42f9a3
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 3
jge 0x42f9c5
push dword [ebp - 0x3d0]
lea ecx, [ebp - 0x774]
call fcn.004014ea
mov dword [eax], 0xfffffffa
jmp 0x42f996
mov dword [ebp - 0x38], 0
jmp 0x42f9d5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x42fb65
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.004014ea
cmp dword [eax], 0
je 0x42fadc
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.004014ea
cmp dword [eax], 1
jl 0x42fa15
mov dword [ebp - 0x122c], 1
jmp 0x42fa1c
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0x122c]
inc eax
mov dword [ebp - 0x1234], eax
mov eax, 0x1355
test eax, eax
jne 0x42fa44
cmp dword [ebp - 0x1234], 0
jne 0x42fa44
and dword [ebp - 0x10f8], 0
jmp 0x42fa4e
mov dword [ebp - 0x10f8], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x10f8], eax
je 0x42fa78
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.004014ea
cmp dword [eax], 0
je 0x42fa78
mov dword [ebp - 0xe78], 1
jmp 0x42fa7f
and dword [ebp - 0xe78], 0
mov dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x970]
cmp eax, dword [ebp - 0xe78]
jg 0x42faa3
mov dword [ebp - 0x16dc], 1
jmp 0x42faaa
and dword [ebp - 0x16dc], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.004014ea
cmp dword [eax], 0
je 0x42fadc
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.004014ea
cmp dword [eax], 0
je 0x42fadc
mov dword [ebp - 0x16e4], 1
jmp 0x42fae3
and dword [ebp - 0x16e4], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.004014ea
mov ecx, dword [ebp - 0x38]
cmp dword [eax], ecx
jge 0x42fb04
mov dword [ebp - 0x978], 1
jmp 0x42fb0b
and dword [ebp - 0x978], 0
cmp dword [ebp - 0x978], 0xfaaa
je 0x42fb23
mov dword [ebp - 0x1338], 1
jmp 0x42fb2a
and dword [ebp - 0x1338], 0
push 1
lea ecx, [ebp - 0x774]
call fcn.004014ea
mov ecx, dword [ebp - 0x1338]
sub ecx, dword [eax]
jne 0x42fb4d
mov dword [ebp - 0x980], 1
jmp 0x42fb54
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x16ec], eax
jmp 0x42f9ce
lea ecx, [ebp - 0x774]
call fcn.004014ce
mov dword [ebp - 0xad0], 0xcf041577
mov dword [ebp - 0x2c], 0x2971c1ec
mov dword [ebp - 0xc], 0xb8114768
push 3
lea ecx, [ebp - 0x1810]
call fcn.004013fc
mov dword [ebp - 0x2a4], 0xf4d21fd0
mov dword [ebp - 0x490], 0
jmp 0x42fbb8
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 3
jge 0x42fbda
push dword [ebp - 0x490]
lea ecx, [ebp - 0x1810]
call fcn.004014ea
mov dword [eax], 1
jmp 0x42fbab
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x42fbee
mov dword [ebp - 0xe80], 1
jmp 0x42fbf5
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0xe80]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x2c], 0xd
jmp 0x42fc0e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x2e
jne 0x430413
mov dword [ebp - 0x1788], 9
mov dword [ebp - 0xa4], 0
jmp 0x42fc3b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x42fc57
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x6f4], 0xffffffff
jmp 0x42fc2e
mov dword [ebp - 0xa4], 0
jmp 0x42fc70
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x42fc8c
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1378], 0x396434d1
jmp 0x42fc63
mov dword [ebp - 0xc], 2
jmp 0x42fc9c
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x43013c
mov dword [ebp - 0x67c], 0
mov dword [ebp - 0xe88], 0xe264
push 3
lea ecx, [ebp - 0x1a14]
call fcn.004013fc
push 1
lea ecx, [ebp - 0x13a8]
call fcn.004013fc
mov dword [ebp - 0x17bc], 1
mov dword [ebp - 0xfc], 0
jmp 0x42fcf7
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x42fd19
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x1a14]
call fcn.004014ea
mov dword [eax], 0xfa7bb34e
jmp 0x42fcea
mov dword [ebp - 0xfc], 0
jmp 0x42fd32
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x42fd51
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x13a8]
call fcn.004014ea
and dword [eax], 0
jmp 0x42fd25
mov byte [ebp - 0x17a], 0
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x42fd72
push 0xb96
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, 0xee21afa9
test eax, eax
je 0x4300e3
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x6f4]
mov dword [ebp - 0x1c44], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x1c4c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x6f4]
mov dword [ebp - 0x1c54], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x1c5c], eax
push 2
pop eax
cmp eax, 0x75df1563
jl 0x42fdd6
mov dword [ebp - 0x16f4], 1
jmp 0x42fddd
and dword [ebp - 0x16f4], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6f4]
mov dword [ebp - 0x1c6c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f4]
cmp dword [ebp - 0x2c], eax
jne 0x42fe16
mov dword [ebp - 0x988], 1
jmp 0x42fe1d
and dword [ebp - 0x988], 0
cmp dword [ebp - 0x988], 0xd47cdd53
jae 0x42fe35
mov dword [ebp - 0x5d4], 1
jmp 0x42fe3c
and dword [ebp - 0x5d4], 0
push 1
lea ecx, [ebp - 0x1810]
call fcn.004014ea
mov ecx, dword [ebp - 0x5d4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x5d4], eax
jge 0x42fe68
mov dword [ebp - 0x1100], 1
jmp 0x42fe6f
and dword [ebp - 0x1100], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1100]
cmp eax, 0xb405
jge 0x42fe8b
mov dword [ebp - 0x990], 1
jmp 0x42fe92
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0xe88]
cmp dword [ebp - 0x990], eax
jle 0x42feac
mov dword [ebp - 0x998], 1
jmp 0x42feb3
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0xe88]
cmp dword [ebp - 0x998], eax
jl 0x42fecd
mov dword [ebp - 0x1240], 1
jmp 0x42fed4
and dword [ebp - 0x1240], 0
cmp dword [ebp - 0x1240], 0x3aabdc9a
jle 0x42feec
mov dword [ebp - 0x16fc], 1
jmp 0x42fef3
and dword [ebp - 0x16fc], 0
push 2
lea ecx, [ebp - 0x1a14]
call fcn.004014ea
mov dword [eax], 0x6910c334
mov eax, 0x6910c334
sub eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x2c]
jg 0x42ff1f
mov dword [ebp - 0x9a0], 1
jmp 0x42ff26
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x6f4]
add eax, dword [ebp - 0x9a0]
je 0x42ff51
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x6f4], 0
je 0x42ff51
mov dword [ebp - 0x1704], 1
jmp 0x42ff58
and dword [ebp - 0x1704], 0
push 0
lea ecx, [ebp - 0x13a8]
call fcn.004014ea
mov esi, dword [eax]
sub esi, 0x3fd53956
imul esi, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0x13a8]
call fcn.004014ea
cmp esi, dword [eax]
jge 0x42ff8e
mov dword [ebp - 0xe90], 1
jmp 0x42ff95
and dword [ebp - 0xe90], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6f4]
cmp dword [ebp - 0xe90], eax
je 0x42ffb6
mov dword [ebp - 0x9a8], 1
jmp 0x42ffbd
and dword [ebp - 0x9a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6f4]
cmp dword [ebp - 0x9a8], eax
jle 0x42ffde
mov dword [ebp - 0x1108], 1
jmp 0x42ffe5
and dword [ebp - 0x1108], 0
cmp dword [ebp - 0x1108], 0x1d2cf1a5
jle 0x42fffd
mov dword [ebp - 0x9b0], 1
jmp 0x430004
and dword [ebp - 0x9b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6f4]
add eax, dword [ebp - 0x9b0]
cmp eax, 0xa6c34309
je 0x43002a
mov dword [ebp - 0xe98], 1
jmp 0x430031
and dword [ebp - 0xe98], 0
push 0
lea ecx, [ebp - 0x13a8]
call fcn.004014ea
mov ecx, dword [ebp - 0xe98]
cmp ecx, dword [eax]
je 0x430054
mov dword [ebp - 0x9b8], 1
jmp 0x43005b
and dword [ebp - 0x9b8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1378]
imul eax, dword [ebp - 0x9b8]
test eax, eax
jne 0x43007e
mov dword [ebp - 0x170c], 1
jmp 0x430085
and dword [ebp - 0x170c], 0
cmp dword [ebp - 0x2a4], 0
jne 0x4300a6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1378], 0
jne 0x4300a6
and dword [ebp - 0x12f0], 0
jmp 0x4300b0
mov dword [ebp - 0x12f0], 1
cmp dword [ebp - 0x12f0], 1
jge 0x4300c5
mov dword [ebp - 0x9c0], 1
jmp 0x4300cc
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x9c0], eax
jg 0x4300e3
mov dword [ebp - 0xea0], 1
jmp 0x4300ea
and dword [ebp - 0xea0], 0
cmp dword [ebp - 0xea0], 2
jge 0x4300ff
mov dword [ebp - 0x9c8], 1
jmp 0x430106
and dword [ebp - 0x9c8], 0
push 0
lea ecx, [ebp - 0x13a8]
call fcn.004014ea
mov ecx, dword [ebp - 0x9c8]
sub ecx, dword [eax]
mov dword [ebp - 0x17bc], ecx
lea ecx, [ebp - 0x13a8]
call fcn.004014ce
lea ecx, [ebp - 0x1a14]
call fcn.004014ce
jmp 0x42fc95
mov dword [ebp - 0x2a4], 0xffffffec
jmp 0x430155
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x35
jne 0x43040e
mov dword [ebp - 0x274], 0
mov byte [ebp - 0x215], 0
movzx eax, byte [ebp - 0x215]
test eax, eax
je 0x430186
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0xc], 0xfffffff8
jmp 0x430196
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x18
jl 0x430409
mov dword [ebp - 0x134], 8
mov dword [ebp - 0xeb8], 1
cmp dword [ebp - 0x134], 0
je 0x4301c2
jmp 0x430409
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1378], 0
jne 0x43032b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6f4], 0
jne 0x4301f7
cmp dword [ebp - 0x274], 0
jne 0x4301f7
and dword [ebp - 0x159c], 0
jmp 0x430201
mov dword [ebp - 0x159c], 1
mov eax, 0xfff6
cmp eax, 0xfffc
je 0x430219
mov dword [ebp - 0x1110], 1
jmp 0x430220
and dword [ebp - 0x1110], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x1110], eax
je 0x430240
cmp dword [ebp - 0x134], 0
jne 0x430240
and dword [ebp - 0xea8], 0
jmp 0x43024a
mov dword [ebp - 0xea8], 1
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x9d0], eax
push 1
lea ecx, [ebp - 0x1810]
call fcn.004014ea
mov ecx, dword [ebp - 0x9d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9d0]
add eax, dword [ebp - 0xea8]
cmp eax, 9
jle 0x430288
mov dword [ebp - 0x9d8], 1
jmp 0x43028f
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x9d8], eax
jge 0x4302a9
mov dword [ebp - 0x14dc], 1
jmp 0x4302b0
and dword [ebp - 0x14dc], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c74], eax
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x134], eax
jne 0x4302d6
mov dword [ebp - 0x1248], 1
jmp 0x4302dd
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x1248]
neg eax
imul eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x134]
jge 0x430300
mov dword [ebp - 0x1440], 1
jmp 0x430307
and dword [ebp - 0x1440], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f4]
mov dword [ebp - 0x1c7c], eax
cmp dword [ebp - 0x274], 0
jne 0x43032b
and dword [ebp - 0x9e0], 0
jmp 0x430335
mov dword [ebp - 0x9e0], 1
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x9e0], eax
je 0x43034f
mov dword [ebp - 0xeb0], 1
jmp 0x430356
and dword [ebp - 0xeb0], 0
imul eax, dword [ebp - 0xeb0], 0
cmp eax, dword [ebp - 0x2c]
jle 0x43036e
mov dword [ebp - 0x9e8], 1
jmp 0x430375
and dword [ebp - 0x9e8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9e8]
sub ecx, dword [ebp + eax - 0x1378]
je 0x43039e
cmp dword [ebp - 0x134], 0
je 0x43039e
mov dword [ebp - 0x1118], 1
jmp 0x4303a5
and dword [ebp - 0x1118], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x1118], eax
je 0x4303bf
mov dword [ebp - 0x9f0], 1
jmp 0x4303c6
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x9f0]
mov dword [ebp - 0xeb8], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1378]
add ecx, dword [ebp - 0xeb8]
add ecx, dword [ebp + eax - 0x1378]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1378]
add eax, ecx
mov dword [ebp - 0x1788], eax
jmp 0x43018f
jmp 0x430148
jmp 0x42fc07
lea ecx, [ebp - 0x1810]
call fcn.004014ce
mov dword [ebp - 0x1478], 0xef7d2668
mov dword [ebp - 0x3d8], 0xdf1f
mov dword [ebp - 0x1600], 0x6c37fc05
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x1c84], eax
or eax, 0xffffffff
je 0x430473
mov byte [ebp - 0x17c], 0
movzx eax, byte [ebp - 0x17c]
test eax, eax
je 0x43046e
push 0
push 0x2174
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x430576
mov dword [ebp - 0x1448], 8
mov dword [ebp - 0x6d0], 0x31fbf685
cmp dword [ebp - 0x3d8], 0x9695
jge 0x43049f
mov dword [ebp - 0x9f8], 1
jmp 0x4304a6
and dword [ebp - 0x9f8], 0
cmp dword [ebp - 0x9f8], 0x1e468a07
jg 0x4304be
mov dword [ebp - 0x1340], 1
jmp 0x4304c5
and dword [ebp - 0x1340], 0
mov eax, dword [ebp - 0x1448]
neg eax
add eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x1340]
je 0x4304e7
mov dword [ebp - 0xa00], 1
jmp 0x4304ee
and dword [ebp - 0xa00], 0
cmp dword [ebp - 0xa00], 0x94a61bf0
je 0x430506
mov dword [ebp - 0xec0], 1
jmp 0x43050d
and dword [ebp - 0xec0], 0
mov eax, dword [ebp - 0x3d8]
imul eax, dword [ebp - 0xec0]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
add eax, 0xb792
neg eax
je 0x430544
cmp dword [ebp - 0x6d0], 0
je 0x430544
mov dword [ebp - 0xa08], 1
jmp 0x43054b
and dword [ebp - 0xa08], 0
cmp dword [ebp - 0xa08], 0x2c0d37ad
je 0x430563
mov dword [ebp - 0x1120], 1
jmp 0x43056a
and dword [ebp - 0x1120], 0
mov eax, dword [ebp - 0x1120]
mov dword [ebp - 0x1600], eax
push 2
lea ecx, [ebp - 0x1dcc]
call fcn.004013fc
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x5dc], 0xfffffff8
mov dword [ebp - 0x1610], 0xffffffff
mov dword [ebp - 0xb4], 0x25b0d6b1
mov dword [ebp - 0x1954], 0x7b27f969
mov dword [ebp - 0x1950], 0x7b27f969
mov dword [ebp - 0x194c], 0x7b27f969
mov dword [ebp - 0x1948], 0x7b27f969
lea ecx, [ebp - 0x5a1]
call fcn.004014f9
push eax
lea eax, [ebp - 0x1944]
push eax
lea eax, [ebp - 0x1954]
push eax
lea ecx, [ebp - 0x2028]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x554]
call fcn.004014a8
mov dword [ebp - 0xa78], 0xfffffffd
mov dword [ebp - 0xac], 0
jmp 0x430628
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x430644
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1fc0], 0x38a8812e
jmp 0x43061b
mov dword [ebp - 0xac], 0
jmp 0x43065d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x430679
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1fd8], 0x53ceb4b6
jmp 0x430650
cmp dword [ebp - 0x10], 0
je 0x43075f
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x430697
mov dword [ebp - 0x1450], 1
jmp 0x43069e
and dword [ebp - 0x1450], 0
cmp dword [ebp - 0x10], 0
jne 0x430718
mov eax, dword [ebp - 0x10]
add eax, 0xfa31
jne 0x4306b4
cmp dword [ebp - 0x10], 0
je 0x4306c6
cmp dword [ebp - 0x10], 0
je 0x4306c6
mov dword [ebp - 0x16d0], 1
jmp 0x4306cd
and dword [ebp - 0x16d0], 0
xor eax, eax
jne 0x4306e0
cmp dword [ebp - 0x10], 0
jne 0x4306e0
and dword [ebp - 0xa10], 0
jmp 0x4306ea
mov dword [ebp - 0xa10], 1
cmp dword [ebp - 0xa10], 0
jg 0x4306ff
mov dword [ebp - 0xec8], 1
jmp 0x430706
and dword [ebp - 0xec8], 0
cmp dword [ebp - 0xec8], 0xfffffff6
jne 0x430718
and dword [ebp - 0x1458], 0
jmp 0x430722
mov dword [ebp - 0x1458], 1
mov eax, 0xffff
test eax, eax
jne 0x43073a
cmp dword [ebp - 0x10], 0
jne 0x43073a
and dword [ebp - 0xa18], 0
jmp 0x430744
mov dword [ebp - 0xa18], 1
cmp dword [ebp - 0xa18], 0
je 0x43075f
cmp dword [ebp - 0x10], 0
je 0x43075f
mov dword [ebp - 0x1254], 1
jmp 0x430766
and dword [ebp - 0x1254], 0
cmp dword [ebp - 0x1254], 0x9271
jne 0x43077e
mov dword [ebp - 0xa20], 1
jmp 0x430785
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xa20], eax
jne 0x43079c
mov dword [ebp - 0xed0], 1
jmp 0x4307a3
and dword [ebp - 0xed0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xed0], eax
je 0x430852
mov dword [ebp - 0x1460], 8
mov dword [ebp - 0x1608], 0x69a3
cmp dword [ebp - 0x1608], 1
jne 0x4307db
mov dword [ebp - 0xa28], 1
jmp 0x4307e2
and dword [ebp - 0xa28], 0
cmp dword [ebp - 0xa28], 0
ja 0x4307f7
mov dword [ebp - 0x1128], 1
jmp 0x4307fe
and dword [ebp - 0x1128], 0
mov eax, dword [ebp - 0x1460]
cmp dword [ebp - 0x1128], eax
jge 0x430818
mov dword [ebp - 0xa30], 1
jmp 0x43081f
and dword [ebp - 0xa30], 0
cmp dword [ebp - 0xa30], 4
jne 0x430834
mov dword [ebp - 0xed8], 1
jmp 0x43083b
and dword [ebp - 0xed8], 0
mov eax, dword [ebp - 0x5dc]
add eax, dword [ebp - 0xed8]
mov dword [ebp - 0xb4], eax
jmp 0x430bf6
mov dword [ebp - 0x330], 0xfffffffc
mov dword [ebp - 0xa40], 0
push 3
lea ecx, [ebp - 0x13d8]
call fcn.004013fc
mov dword [ebp - 0x1ad8], 8
mov dword [ebp - 0x1ad4], 8
mov dword [ebp - 0x1ad0], 8
mov dword [ebp - 0x1acc], 8
mov dword [ebp - 0x1468], 4
mov dword [ebp - 0x10c], 0
jmp 0x4308be
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jge 0x4308da
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x1aa8], 0xf6c0
jmp 0x4308b1
mov dword [ebp - 0x10c], 0
jmp 0x4308f3
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x430915
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x13d8]
call fcn.004014ea
mov dword [eax], 0xa655
jmp 0x4308e6
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x430a07
cmp dword [ebp - 0x330], 0
je 0x430930
cmp dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1aa8], 0xf7c9
jle 0x430954
cmp dword [ebp - 0x330], 0
jne 0x430954
and dword [ebp - 0xa38], 0
jmp 0x43095e
mov dword [ebp - 0xa38], 1
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xa38], eax
jl 0x430978
mov dword [ebp - 0x1300], 1
jmp 0x43097f
and dword [ebp - 0x1300], 0
mov eax, dword [ebp - 0x1300]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xa40]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x1aa8]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x1c8c], eax
push 0
lea ecx, [ebp - 0x13d8]
call fcn.004014ea
mov esi, eax
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x4309dd
mov dword [ebp - 0xee0], 1
jmp 0x4309e4
and dword [ebp - 0xee0], 0
push 0
lea ecx, [ebp - 0x13d8]
call fcn.004014ea
mov ecx, dword [ebp - 0xee0]
cmp ecx, dword [eax]
je 0x430a07
mov dword [ebp - 0xa48], 1
jmp 0x430a0e
and dword [ebp - 0xa48], 0
cmp dword [ebp - 0xa48], 0x7aac
jne 0x430a26
mov dword [ebp - 0x1130], 1
jmp 0x430a2d
and dword [ebp - 0x1130], 0
cmp dword [ebp - 0x1130], 0x18a3
je 0x430a45
mov dword [ebp - 0xa50], 1
jmp 0x430a4c
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0xb4], eax
mov esi, dword [ebp - 0xb4]
push 0
lea ecx, [ebp - 0x13d8]
call fcn.004014ea
cmp esi, dword [eax]
jle 0x430a7b
mov dword [ebp - 0xee8], 1
jmp 0x430a82
and dword [ebp - 0xee8], 0
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
mov ecx, dword [ebp - 0xee8]
cmp ecx, dword [eax]
jne 0x430aa5
mov dword [ebp - 0xa58], 1
jmp 0x430aac
and dword [ebp - 0xa58], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1aa8]
cmp dword [ebp - 0xa58], eax
jne 0x430acc
mov dword [ebp - 0x1260], 1
jmp 0x430ad3
and dword [ebp - 0x1260], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp - 0x1260]
sub esi, dword [ebp + eax - 0x1aa8]
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
cmp esi, dword [eax]
jne 0x430b02
mov dword [ebp - 0xa60], 1
jmp 0x430b09
and dword [ebp - 0xa60], 0
push 2
lea ecx, [ebp - 0x554]
call fcn.004014ea
mov ecx, dword [ebp - 0xa60]
sub ecx, dword [eax]
cmp ecx, 0x7675e6d9
jge 0x430b32
mov dword [ebp - 0xef0], 1
jmp 0x430b39
and dword [ebp - 0xef0], 0
cmp dword [ebp - 0xef0], 0x3f19
jne 0x430b51
mov dword [ebp - 0x1760], 1
jmp 0x430b58
and dword [ebp - 0x1760], 0
push 1
lea ecx, [ebp - 0x554]
call fcn.004014ea
cmp dword [ebp - 0xa78], 0
jne 0x430b89
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
cmp dword [eax], 0
jne 0x430b89
and dword [ebp - 0xa68], 0
jmp 0x430b93
mov dword [ebp - 0xa68], 1
push 1
lea ecx, [ebp - 0x13d8]
call fcn.004014ea
mov ecx, dword [ebp - 0xa68]
imul ecx, dword [eax]
mov dword [ebp - 0x1138], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1138]
mov dword [ebp + eax - 0x1ad8], ecx
mov eax, dword [ebp - 0x1138]
mov dword [ebp - 0x1468], eax
mov byte [ebp - 0x1ae], 0
movzx eax, byte [ebp - 0x1ae]
test eax, eax
je 0x430beb
push 0x182e
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x13d8]
call fcn.004014ce
mov dword [ebp - 0xb4], 5
cmp dword [ebp - 0xb4], 0
je 0x430d90
mov esi, dword [ebp - 0xb4]
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
add esi, dword [eax]
cmp esi, dword [ebp - 0x1610]
jle 0x430c36
mov dword [ebp - 0xa70], 1
jmp 0x430c3d
and dword [ebp - 0xa70], 0
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
mov eax, dword [eax]
inc eax
cmp eax, dword [ebp - 0xa70]
jle 0x430c64
cmp dword [ebp - 0x10], 0
jne 0x430c64
and dword [ebp - 0x1470], 0
jmp 0x430c6e
mov dword [ebp - 0x1470], 1
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x5dc], eax
jge 0x430c9f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc0], 0
jne 0x430c9f
and dword [ebp - 0xef8], 0
jmp 0x430ca9
mov dword [ebp - 0xef8], 1
push 0
lea ecx, [ebp - 0x554]
call fcn.004014ea
mov eax, dword [eax]
cmp eax, dword [ebp - 0xef8]
jl 0x430ccc
mov dword [ebp - 0x1348], 1
jmp 0x430cd3
and dword [ebp - 0x1348], 0
mov eax, dword [ebp - 0xa78]
cmp dword [ebp - 0x1348], eax
jg 0x430ced
and dword [ebp - 0x1140], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1140]
mov dword [ebp + eax - 0x1fd8], ecx
lea ecx, [ebp - 0x554]
call fcn.004014ce
mov dword [ebp - 0x3e0], 0xfffffff7
mov dword [ebp - 0x1c94], 0xed23b618
mov dword [ebp - 0x1c9c], 0x30722263
mov dword [ebp - 0x4f0], 0
jmp 0x430deb
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 3
jge 0x430e07
mov eax, dword [ebp - 0x4f0]
mov dword [ebp + eax*4 - 0x20d8], 0xfffffffd
jmp 0x430dde
mov dword [ebp - 0x3e0], 0
jmp 0x430e20
cmp dword [ebp - 0x3e0], 2
jg 0x430e42
mov dword [ebp - 0xa90], 0xfffffffc
mov eax, dword [ebp - 0xa90]
inc eax
mov dword [ebp - 0xa90], eax
jmp 0x430e13
mov byte [ebp - 0x17e], 0
movzx eax, byte [ebp - 0x17e]
test eax, eax
je 0x430e63