Function at 0x401663
Capabilities:
Delete file
Parse pe header
Set environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1648
call fcn.00496ae0
push esi
push edi
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x498], 0xf6b
mov dword [ebp - 0x298], 0xf8cd3bed
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x4a8], 0xb370cc32
mov dword [ebp - 0x118], 0
jmp 0x4016ba
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x4016d6
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x1278], 0xfffffffb
jmp 0x4016ad
mov dword [ebp - 0x118], 0
jmp 0x4016ef
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x40170b
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x15e8], 0x395830af
jmp 0x4016e2
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1300], eax
mov eax, 0xbdac842f
test eax, eax
jne 0x401735
cmp dword [ebp - 0x2c], 0
jne 0x401735
and dword [ebp - 0x788], 0
jmp 0x40173f
mov dword [ebp - 0x788], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x788], eax
jge 0x401756
mov dword [ebp - 0x4a0], 1
jmp 0x40175d
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp + eax - 0x1278], ecx
cmp dword [ebp - 0x4a0], 0
jne 0x401798
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1278], 0
jne 0x401798
cmp dword [ebp - 0x2c], 0
jne 0x401798
and dword [ebp - 0xdd8], 0
jmp 0x4017a2
mov dword [ebp - 0xdd8], 1
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0xde0], eax
mov byte [ebp - 0xa2], 0x5c
mov eax, dword [ebp - 0xe10]
mov dword [ebp - 0x11c4], eax
mov al, byte [ebp - 0xa2]
mov byte [ebp - 0x87], al
mov byte [ebp - 0x24a], 0xd
mov byte [ebp - 0x24c], 0xe
movzx eax, byte [ebp - 0x24a]
movzx ecx, byte [ebp - 0x87]
imul eax, ecx
mov ecx, dword [ebp - 0x11c4]
add ecx, eax
movzx eax, byte [ebp - 0x24c]
movzx edx, byte [ebp - 0x87]
imul eax, edx
sub ecx, eax
imul ecx, dword [ebp - 0xde0]
mov dword [ebp - 0x11d8], ecx
movzx eax, byte [ebp - 0xa2]
mov ecx, dword [ebp - 0xde0]
imul ecx, eax
mov dword [ebp - 0xc34], ecx
mov byte [ebp - 0x24e], 0xf2
mov byte [ebp - 0x254], 0xf3
mov eax, dword [ebp - 0x11d8]
mov dword [ebp - 0x11e0], eax
movzx eax, byte [ebp - 0x24e]
imul eax, dword [ebp - 0xc34]
mov dword [ebp - 0xde8], eax
mov byte [ebp - 0x250], 0xc4
mov byte [ebp - 0x252], 0xc5
cmp dword [ebp - 0x2c], 0
jne 0x4018e5
movzx eax, byte [ebp - 0x250]
imul eax, dword [ebp - 0xde8]
mov ecx, dword [ebp - 0x11e0]
add ecx, eax
movzx eax, byte [ebp - 0x252]
imul eax, dword [ebp - 0xde8]
sub ecx, eax
movzx eax, byte [ebp - 0x254]
imul eax, dword [ebp - 0xc34]
add ecx, eax
mov dword [ebp - 0x498], ecx
cmp dword [ebp - 0x498], 4
jbe 0x4018bd
mov dword [ebp - 0x5cc], 1
jmp 0x4018c4
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
jne 0x4018e5
mov dword [ebp - 0x11e8], 1
jmp 0x4018ec
and dword [ebp - 0x11e8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x13dc], eax
mov eax, 0xd764ce34
test eax, eax
jne 0x40190c
or eax, 0xffffffff
jne 0x40190c
and dword [ebp - 0xcb8], 0
jmp 0x401916
mov dword [ebp - 0xcb8], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xcb8], eax
jge 0x40192d
mov dword [ebp - 0x11f0], 1
jmp 0x401934
and dword [ebp - 0x11f0], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x13e4], eax
mov eax, 0xacd4a797
test eax, eax
jne 0x401952
mov dword [ebp - 0x5d4], 1
jmp 0x401959
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x5d4], eax
je 0x401980
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1278], 0
jne 0x401980
and dword [ebp - 0xcc0], 0
jmp 0x40198a
mov dword [ebp - 0xcc0], 1
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xcc0]
jg 0x4019a1
mov dword [ebp - 0x5dc], 1
jmp 0x4019a8
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
sub eax, 0x65f5
jne 0x4019c1
mov dword [ebp - 0xcc8], 1
jmp 0x4019c8
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xcc8]
jle 0x4019df
mov dword [ebp - 0x5e4], 1
jmp 0x4019e6
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x298], 0
jmp 0x401a0b
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0xd
jle 0x401d61
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x614], 1
mov byte [ebp - 0x256], 0
movzx eax, byte [ebp - 0x256]
test eax, eax
je 0x401a46
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x2c], eax
je 0x401a5d
mov dword [ebp - 0xcd0], 1
jmp 0x401a64
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x5ec], eax
mov byte [ebp - 0x258], 0x8d
mov byte [ebp - 0x25a], 0x8e
movzx eax, byte [ebp - 0x258]
imul eax, dword [ebp - 0x5ec]
mov ecx, dword [ebp - 0x11f8]
sub ecx, eax
mov dword [ebp - 0x1168], ecx
movzx eax, byte [ebp - 0x25a]
imul eax, dword [ebp - 0x5ec]
mov dword [ebp - 0xcd8], eax
mov byte [ebp - 0x25c], 0x1d
mov byte [ebp - 0x25e], 0x1e
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0
je 0x401b17
movzx eax, byte [ebp - 0x25c]
imul eax, dword [ebp - 0xcd8]
mov ecx, dword [ebp - 0x1168]
sub ecx, eax
movzx eax, byte [ebp - 0x25e]
imul eax, dword [ebp - 0xcd8]
add ecx, eax
cmp dword [ebp - 0x490], ecx
jle 0x401b17
mov dword [ebp - 0x5f4], 1
jmp 0x401b1e
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x5f4], eax
je 0x401b38
mov dword [ebp - 0xce0], 1
jmp 0x401b3f
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0x498]
cmp dword [ebp - 0xce0], eax
jle 0x401b59
mov dword [ebp - 0x5fc], 1
jmp 0x401b60
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0xfffffff6
jl 0x401b75
mov dword [ebp - 0xce8], 1
jmp 0x401b7c
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0x10d8], eax
mov dword [ebp - 0x604], 0xe8d55003
mov byte [ebp - 0x260], 0xf6
mov byte [ebp - 0x262], 0xf7
mov eax, dword [ebp - 0x10d8]
mov dword [ebp - 0xe1c], eax
movzx eax, byte [ebp - 0x260]
imul eax, dword [ebp - 0x604]
mov dword [ebp - 0xcf0], eax
mov byte [ebp - 0x264], 0x68
mov byte [ebp - 0x266], 0x69
mov al, byte [ebp - 0x262]
mov byte [ebp - 0x268], al
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x60c], eax
mov byte [ebp - 0xa4], 0x2a
movzx eax, byte [ebp - 0x264]
imul eax, dword [ebp - 0xcf0]
mov ecx, dword [ebp - 0xe1c]
sub ecx, eax
movzx eax, byte [ebp - 0x266]
imul eax, dword [ebp - 0xcf0]
add ecx, eax
movzx eax, byte [ebp - 0x268]
movzx edx, byte [ebp - 0xa4]
sub eax, edx
imul eax, dword [ebp - 0x60c]
movzx edx, byte [ebp - 0xa4]
mov esi, dword [ebp - 0x60c]
imul esi, edx
add eax, esi
sub ecx, eax
cmp ecx, dword [ebp - 0x348]
jl 0x401c52
mov dword [ebp - 0xcf8], 1
jmp 0x401c59
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x614], eax
jg 0x401c7f
mov dword [ebp - 0xd00], 1
jmp 0x401c86
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xd00], eax
jle 0x401c9d
mov dword [ebp - 0x61c], 1
jmp 0x401ca4
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x490]
cmp eax, dword [ebp - 0x61c]
jl 0x401cbe
mov dword [ebp - 0xd08], 1
jmp 0x401cc5
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0xd08]
neg eax
mov dword [ebp - 0x624], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x624]
mov dword [ebp + eax - 0x1278], ecx
mov eax, dword [ebp - 0x498]
cmp dword [ebp - 0x624], eax
jle 0x401cff
mov dword [ebp - 0xd10], 1
jmp 0x401d06
and dword [ebp - 0xd10], 0
cmp dword [ebp - 0xd10], 0xddf34ffd
jne 0x401d1e
mov dword [ebp - 0x62c], 1
jmp 0x401d25
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
shl eax, 2
cmp eax, dword [ebp - 0x348]
jge 0x401d42
mov dword [ebp - 0xd18], 1
jmp 0x401d49
and dword [ebp - 0xd18], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd18]
mov dword [ebp + eax - 0x15e8], ecx
jmp 0x4019fe
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x488], 0xf6b
mov dword [ebp - 0x2a0], 0xf8cd3bed
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x4b8], 0xb370cc32
mov dword [ebp - 0x108], 0
jmp 0x401da9
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x401dc5
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x126c], 0xfffffffb
jmp 0x401d9c
mov dword [ebp - 0x108], 0
jmp 0x401dde
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x401dfa
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1600], 0x395830af
jmp 0x401dd1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10e0], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x13ec], eax
mov eax, 0xbdac842f
test eax, eax
jne 0x401e24
cmp dword [ebp - 0x30], 0
jne 0x401e24
and dword [ebp - 0x634], 0
jmp 0x401e2e
mov dword [ebp - 0x634], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x634], eax
jge 0x401e45
mov dword [ebp - 0x4b0], 1
jmp 0x401e4c
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp + eax - 0x126c], ecx
cmp dword [ebp - 0x4b0], 0
jne 0x401e87
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x126c], 0
jne 0x401e87
cmp dword [ebp - 0x30], 0
jne 0x401e87
and dword [ebp - 0xd20], 0
jmp 0x401e91
mov dword [ebp - 0xd20], 1
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0xd28], eax
mov byte [ebp - 0xa8], 0xc5
movzx eax, byte [ebp - 0xa8]
mov ecx, dword [ebp - 0x10e0]
sub ecx, eax
mov dword [ebp - 0xe24], ecx
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0x63c], eax
mov byte [ebp - 0xa6], 0x8d
movzx eax, byte [ebp - 0xa6]
mov ecx, dword [ebp - 0xe24]
sub ecx, eax
imul ecx, dword [ebp - 0x63c]
movzx eax, byte [ebp - 0xa6]
mov edx, dword [ebp - 0x63c]
imul edx, eax
add ecx, edx
mov dword [ebp - 0xe2c], ecx
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0x10e8], eax
mov al, byte [ebp - 0xa8]
mov byte [ebp - 0xaa], al
mov byte [ebp - 0xac], 0x98
movzx eax, byte [ebp - 0xac]
mov ecx, dword [ebp - 0x10e8]
sub ecx, eax
movzx eax, byte [ebp - 0xaa]
imul ecx, eax
movzx eax, byte [ebp - 0xaa]
movzx edx, byte [ebp - 0xac]
imul eax, edx
add ecx, eax
mov dword [ebp - 0x644], ecx
mov byte [ebp - 0x26a], 0xd7
mov byte [ebp - 0x26c], 0xd8
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x10f0], eax
movzx eax, byte [ebp - 0x26a]
imul eax, dword [ebp - 0x644]
mov dword [ebp - 0xd30], eax
mov byte [ebp - 0x26e], 0x6a
mov byte [ebp - 0x270], 0x6b
mov al, byte [ebp - 0x26c]
mov byte [ebp - 0x272], al
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x64c], eax
mov byte [ebp - 0xae], 0xa8
cmp dword [ebp - 0x30], 0
jne 0x402044
movzx eax, byte [ebp - 0x26e]
imul eax, dword [ebp - 0xd30]
mov ecx, dword [ebp - 0x10f0]
add ecx, eax
movzx eax, byte [ebp - 0x270]
imul eax, dword [ebp - 0xd30]
sub ecx, eax
movzx eax, byte [ebp - 0x272]
movzx edx, byte [ebp - 0xae]
sub eax, edx
imul eax, dword [ebp - 0x64c]
movzx edx, byte [ebp - 0xae]
mov esi, dword [ebp - 0x64c]
imul esi, edx
add eax, esi
add ecx, eax
mov dword [ebp - 0x488], ecx
cmp dword [ebp - 0x488], 4
jbe 0x40201c
mov dword [ebp - 0xd38], 1
jmp 0x402023
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jne 0x402044
mov dword [ebp - 0xe34], 1
jmp 0x40204b
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x13f4], eax
mov eax, 0xd764ce34
test eax, eax
jne 0x40206b
or eax, 0xffffffff
jne 0x40206b
and dword [ebp - 0x654], 0
jmp 0x402075
mov dword [ebp - 0x654], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x654], eax
jge 0x40208c
mov dword [ebp - 0x10f8], 1
jmp 0x402093
and dword [ebp - 0x10f8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x13fc], eax
mov eax, 0xacd4a797
test eax, eax
jne 0x4020b1
mov dword [ebp - 0xd40], 1
jmp 0x4020b8
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0xd40], eax
je 0x4020df
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x126c], 0
jne 0x4020df
and dword [ebp - 0x65c], 0
jmp 0x4020e9
mov dword [ebp - 0x65c], 1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x65c]
jg 0x402100
mov dword [ebp - 0xd48], 1
jmp 0x402107
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0xd48]
sub eax, 0x65f5
jne 0x402120
mov dword [ebp - 0x664], 1
jmp 0x402127
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x664]
jle 0x40213e
mov dword [ebp - 0xd50], 1
jmp 0x402145
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0xd50]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x2a0], 0
jmp 0x40216a
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xd
jle 0x4024b8
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0xd80], 1
mov byte [ebp - 0x274], 0
movzx eax, byte [ebp - 0x274]
test eax, eax
je 0x4021a5
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x30], eax
je 0x4021bc
mov dword [ebp - 0x66c], 1
jmp 0x4021c3
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0xe3c], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0xd58], eax
mov byte [ebp - 0x276], 0xa3
mov byte [ebp - 0x278], 0xa4
mov al, byte [ebp - 0x276]
mov byte [ebp - 0x27a], al
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0x674], eax
mov byte [ebp - 0xb0], 0x7a
mov al, byte [ebp - 0x278]
mov byte [ebp - 0x27c], al
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0xd60], eax
mov byte [ebp - 0xb2], 0xb9
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0
je 0x4022ac
movzx eax, byte [ebp - 0x27a]
movzx ecx, byte [ebp - 0xb0]
sub eax, ecx
imul eax, dword [ebp - 0x674]
movzx ecx, byte [ebp - 0xb0]
mov edx, dword [ebp - 0x674]
imul edx, ecx
add eax, edx
mov ecx, dword [ebp - 0xe3c]
sub ecx, eax
movzx eax, byte [ebp - 0x27c]
movzx edx, byte [ebp - 0xb2]
sub eax, edx
imul eax, dword [ebp - 0xd60]
movzx edx, byte [ebp - 0xb2]
mov esi, dword [ebp - 0xd60]
imul esi, edx
add eax, esi
add ecx, eax
cmp dword [ebp - 0x414], ecx
jle 0x4022ac
mov dword [ebp - 0x67c], 1
jmp 0x4022b3
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x67c], eax
je 0x4022cd
mov dword [ebp - 0xd68], 1
jmp 0x4022d4
and dword [ebp - 0xd68], 0
mov eax, dword [ebp - 0x488]
cmp dword [ebp - 0xd68], eax
jle 0x4022ee
mov dword [ebp - 0x684], 1
jmp 0x4022f5
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0xfffffff6
jl 0x40230a
mov dword [ebp - 0xd70], 1
jmp 0x402311
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0xd70]
mov dword [ebp - 0x1100], eax
mov dword [ebp - 0x68c], 0xe8d55003
mov byte [ebp - 0x280], 0x5c
mov byte [ebp - 0x27e], 0x5d
mov al, byte [ebp - 0x27e]
mov byte [ebp - 0x282], al
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0xd78], eax
mov byte [ebp - 0xb4], 0xf5
movzx eax, byte [ebp - 0x280]
imul eax, dword [ebp - 0x68c]
mov ecx, dword [ebp - 0x1100]
add ecx, eax
movzx eax, byte [ebp - 0x282]
movzx edx, byte [ebp - 0xb4]
sub eax, edx
imul eax, dword [ebp - 0xd78]
movzx edx, byte [ebp - 0xb4]
mov esi, dword [ebp - 0xd78]
imul esi, edx
add eax, esi
sub ecx, eax
cmp ecx, dword [ebp - 0x36c]
jl 0x4023a9
mov dword [ebp - 0x694], 1
jmp 0x4023b0
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0xd80], eax
jg 0x4023d6
mov dword [ebp - 0x69c], 1
jmp 0x4023dd
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x69c], eax
jle 0x4023f4
mov dword [ebp - 0xd88], 1
jmp 0x4023fb
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0x414]
cmp eax, dword [ebp - 0xd88]
jl 0x402415
mov dword [ebp - 0x6a4], 1
jmp 0x40241c
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
neg eax
mov dword [ebp - 0xd90], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xd90]
mov dword [ebp + eax - 0x126c], ecx
mov eax, dword [ebp - 0x488]
cmp dword [ebp - 0xd90], eax
jle 0x402456
mov dword [ebp - 0x6ac], 1
jmp 0x40245d
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x6ac], 0xddf34ffd
jne 0x402475
mov dword [ebp - 0xd98], 1
jmp 0x40247c
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0xd98]
shl eax, 2
cmp eax, dword [ebp - 0x36c]
jge 0x402499
mov dword [ebp - 0x6b4], 1
jmp 0x4024a0
and dword [ebp - 0x6b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp + eax - 0x1600], ecx
jmp 0x40215d
mov dword [ebp - 0xec], 5
mov dword [ebp - 0xe44], 0
mov dword [ebp - 0x494], 0
jmp 0x4024e5
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 1
jge 0x402501
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x344], 0xc2e0cf57
jmp 0x4024d8
mov byte [ebp - 0x284], 0
movzx eax, byte [ebp - 0x284]
test eax, eax
je 0x40251d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0xec], 0
jmp 0x402536
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jg 0x402961
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0x4c8], 0x3526c715
mov dword [ebp - 0x1108], 1
mov eax, dword [ebp - 0xec]
cmp dword [ebp + eax*4 - 0x344], 0
je 0x4026d2
mov dword [ebp - 0x374], 2
mov dword [ebp - 0x1404], 0xfffffffd
mov dword [ebp - 0x374], 0
jmp 0x4025a2
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jg 0x4026ae
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x344]
mov dword [ebp - 0x140c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x344]
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
jne 0x4025ea
mov dword [ebp - 0xda0], 1
jmp 0x4025f1
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0xda0]
mov dword [ebp - 0x1414], eax
mov byte [ebp - 0x499], 0x8b
mov byte [ebp - 0x519], 0x8c
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x344]
inc eax
jne 0x40262d
cmp dword [ebp - 0x4c0], 0
jne 0x40262d
and dword [ebp - 0x6bc], 0
jmp 0x402637
mov dword [ebp - 0x6bc], 1
cmp dword [ebp - 0x6bc], 0x7a14
jne 0x40264f
mov dword [ebp - 0xda8], 1
jmp 0x402656
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0x4c8]
cmp dword [ebp - 0xda8], eax
jge 0x402670
mov dword [ebp - 0x6c4], 1
jmp 0x402677
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x6c4]
neg eax
je 0x402696
cmp dword [ebp - 0x374], 0
je 0x402696
mov dword [ebp - 0xdb0], 1
jmp 0x40269d
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0xe44], eax
jmp 0x402595
mov byte [ebp - 0x286], 0
movzx eax, byte [ebp - 0x286]
test eax, eax
je 0x4026cd
push 0
push 0x458
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x40295c
mov dword [ebp - 0xe5c], 0
mov dword [ebp - 0x39c], 0
jmp 0x4026f5
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 2
jge 0x402711
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0x1428], 0xffffffff
jmp 0x4026e8
cmp dword [ebp - 0x1108], 0
je 0x402736
mov eax, dword [ebp - 0xec]
cmp dword [ebp + eax*4 - 0x344], 0
jne 0x402736
mov dword [ebp - 0x6cc], 1
jmp 0x40273d
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x344]
cmp dword [ebp - 0x4c8], eax
je 0x402764
cmp dword [ebp - 0x4c8], 0
jne 0x402764
and dword [ebp - 0xdb8], 0
jmp 0x40276e
mov dword [ebp - 0xdb8], 1
mov eax, dword [ebp - 0x6cc]
cmp eax, dword [ebp - 0xdb8]
jle 0x402788
mov dword [ebp - 0x6d4], 1
jmp 0x40278f
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x1110], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1428]
mov dword [ebp - 0xdc0], eax
mov byte [ebp - 0x28a], 0x34
mov byte [ebp - 0x288], 0x35
mov al, byte [ebp - 0x288]
mov byte [ebp - 0x28c], al
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0x6dc], eax
mov byte [ebp - 0xb6], 0x57
mov al, byte [ebp - 0x28a]
mov byte [ebp - 0x28e], al
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0xdc8], eax
mov byte [ebp - 0xb8], 0x4b
movzx eax, byte [ebp - 0x28c]
movzx ecx, byte [ebp - 0xb6]
sub eax, ecx
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0xdd0], eax
mov byte [ebp - 0x8f], 0x62
mov al, byte [ebp - 0x28e]
mov byte [ebp - 0x290], al
mov al, byte [ebp - 0xb8]
mov byte [ebp - 0x33], al
mov byte [ebp - 0x195], 0xac
mov byte [ebp - 0x13f], 0xad
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x1118], eax
mov al, byte [ebp - 0xb6]
mov byte [ebp - 0x37], al
mov byte [ebp - 0xe1], 0x71
mov eax, dword [ebp - 0xdc8]
mov dword [ebp - 0xe4c], eax
mov al, byte [ebp - 0xb8]
mov byte [ebp - 0xc1], al
mov byte [ebp - 0x35], 0xb8
cmp dword [ebp - 0xec], 0
jne 0x402946
movzx eax, byte [ebp - 0x290]
movzx ecx, byte [ebp - 0x195]
movzx edx, byte [ebp - 0x33]
imul ecx, edx
add eax, ecx
movzx ecx, byte [ebp - 0x13f]
movzx edx, byte [ebp - 0x33]
imul ecx, edx
sub eax, ecx
imul eax, dword [ebp - 0xdc8]
movzx ecx, byte [ebp - 0x35]
mov edx, dword [ebp - 0xe4c]
sub edx, ecx
movzx ecx, byte [ebp - 0xc1]
imul edx, ecx
movzx ecx, byte [ebp - 0xc1]
movzx esi, byte [ebp - 0x35]
imul ecx, esi
add edx, ecx
add eax, edx
mov ecx, dword [ebp - 0x1110]
add ecx, eax
movzx eax, byte [ebp - 0x8f]
mov edx, dword [ebp - 0xe54]
sub edx, eax
imul edx, dword [ebp - 0xdd0]
movzx eax, byte [ebp - 0x8f]
mov esi, dword [ebp - 0xdd0]
imul esi, eax
add edx, esi
movzx eax, byte [ebp - 0xe1]
mov esi, dword [ebp - 0x1118]
sub esi, eax
movzx eax, byte [ebp - 0x37]
imul esi, eax
movzx eax, byte [ebp - 0x37]
movzx edi, byte [ebp - 0xe1]
imul eax, edi
add esi, eax
add edx, esi
sub ecx, edx
jne 0x402946
and dword [ebp - 0x6e8], 0
jmp 0x402950
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0xe5c], eax
jmp 0x402529
mov dword [ebp - 0x350], 0xffffffff
mov dword [ebp - 0x41c], 0
jmp 0x402984
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 2
jge 0x4029a0
mov eax, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x12d0], 0xfffffff8
jmp 0x402977
mov byte [ebp - 0x1f4], 0
movzx eax, byte [ebp - 0x1f4]
test eax, eax
je 0x4029ba
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x350], 1
jmp 0x4029d3
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
jl 0x402b0d
mov dword [ebp - 0x3a4], 0
jmp 0x4029f9
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 4
jge 0x402a15
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x12c8], 0x137b1891
jmp 0x4029ec
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x402a44
push 0
push 0x219e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x12c8], 1
jmp 0x402a6f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12c8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x12c8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x12c8], 0
jl 0x402b08
mov eax, dword [ebp - 0x350]
cmp dword [ebp + eax*4 - 0x12d0], 0
je 0x402aac
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12c8]
cmp dword [ebp + eax*4 - 0x12d0], 0
je 0x402aaa
jmp 0x402b08
jmp 0x402b03
mov dword [ebp - 0x45c], 0xffffffff
mov dword [ebp - 0x45c], 1
jmp 0x402acf
mov eax, dword [ebp - 0x45c]
dec eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0
jl 0x402b03
mov byte [ebp - 0x192], 0
movzx eax, byte [ebp - 0x192]
test eax, eax
je 0x402b01
push 0x1b31
push 0x685
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
jmp 0x402ac2
jmp 0x402a56
jmp 0x4029c6
mov dword [ebp - 0xf8], 5
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x3ac], 0
jmp 0x402b3a
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 1
jge 0x402b56
mov eax, dword [ebp - 0x3ac]
mov dword [ebp + eax*4 - 0x324], 0xc2e0cf57
jmp 0x402b2d
mov byte [ebp - 0x143], 0
movzx eax, byte [ebp - 0x143]
test eax, eax
je 0x402b72
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0xf8], 0
jmp 0x402b8b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jg 0x402ee7
mov dword [ebp - 0x4d0], 0xffffffff
mov dword [ebp - 0x4d8], 0x3526c715
mov dword [ebp - 0xe6c], 1
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0x324], 0
je 0x402da8
mov dword [ebp - 0x370], 2
mov dword [ebp - 0x141c], 0xfffffffd
mov dword [ebp - 0x370], 0
jmp 0x402bf7
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jg 0x402d84
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x324]
mov dword [ebp - 0x14b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x324]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
jne 0x402c3f
mov dword [ebp - 0xa70], 1
jmp 0x402c46
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0x14c0], eax
mov byte [ebp - 0x579], 0x17
mov byte [ebp - 0x521], 0x18
mov dword [ebp - 0x1120], 1
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x324]
mov dword [ebp - 0x6f0], eax
mov byte [ebp - 0x1f8], 0x74
mov byte [ebp - 0x145], 0x75
movzx eax, byte [ebp - 0x1f8]
imul eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x1120]
sub ecx, eax
mov dword [ebp - 0xe64], ecx
movzx eax, byte [ebp - 0x145]
imul eax, dword [ebp - 0x6f0]
mov dword [ebp - 0xc38], eax
mov byte [ebp - 0x1fa], 0x8f
mov byte [ebp - 0x147], 0x90
movzx eax, byte [ebp - 0x1fa]
imul eax, dword [ebp - 0xc38]
mov ecx, dword [ebp - 0xe64]
sub ecx, eax
movzx eax, byte [ebp - 0x147]
imul eax, dword [ebp - 0xc38]
add ecx, eax
jne 0x402d03
cmp dword [ebp - 0x4d0], 0
jne 0x402d03
and dword [ebp - 0x6f8], 0
jmp 0x402d0d
mov dword [ebp - 0x6f8], 1
cmp dword [ebp - 0x6f8], 0x7a14
jne 0x402d25
mov dword [ebp - 0xa78], 1
jmp 0x402d2c
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x4d8]
cmp dword [ebp - 0xa78], eax
jge 0x402d46
mov dword [ebp - 0x700], 1
jmp 0x402d4d
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
neg eax
je 0x402d6c
cmp dword [ebp - 0x370], 0
je 0x402d6c
mov dword [ebp - 0xd7c], 1
jmp 0x402d73
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0xd7c]
mov dword [ebp - 0x1128], eax
jmp 0x402bea
mov byte [ebp - 0x1fc], 0
movzx eax, byte [ebp - 0x1fc]
test eax, eax
je 0x402da3
push 0
push 0x458
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x402ee2
mov dword [ebp - 0xe74], 0
mov dword [ebp - 0x424], 0
jmp 0x402dcb
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 2
jge 0x402de7
mov eax, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0x1434], 0xffffffff
jmp 0x402dbe
cmp dword [ebp - 0xe6c], 0
je 0x402e0c
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0x324], 0
jne 0x402e0c
mov dword [ebp - 0x708], 1
jmp 0x402e13
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x324]
cmp dword [ebp - 0x4d8], eax
je 0x402e3a
cmp dword [ebp - 0x4d8], 0
jne 0x402e3a
and dword [ebp - 0xa80], 0
jmp 0x402e44
mov dword [ebp - 0xa80], 1
mov eax, dword [ebp - 0x708]
cmp eax, dword [ebp - 0xa80]
jle 0x402e5e
mov dword [ebp - 0x710], 1
jmp 0x402e65
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x1130], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1434]
mov dword [ebp - 0xc3c], eax
mov byte [ebp - 0x149], 0x53
mov byte [ebp - 0x1fe], 0x54
cmp dword [ebp - 0xf8], 0
jne 0x402ecc
movzx eax, byte [ebp - 0x149]
imul eax, dword [ebp - 0xc3c]
mov ecx, dword [ebp - 0x1130]
add ecx, eax
movzx eax, byte [ebp - 0x1fe]
imul eax, dword [ebp - 0xc3c]
sub ecx, eax
jne 0x402ecc
and dword [ebp - 0x718], 0
jmp 0x402ed6
mov dword [ebp - 0x718], 1
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0xe74], eax
jmp 0x402b7e
mov dword [ebp - 0x310], 0xa66fe7d8
mov dword [ebp - 0x3b4], 0
jmp 0x402f0a
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 2
jge 0x402f26
mov eax, dword [ebp - 0x3b4]
mov dword [ebp + eax*4 - 0x1298], 2
jmp 0x402efd
mov dword [ebp - 0x310], 0
jmp 0x402f3f
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jg 0x402f8e
mov dword [ebp - 0xa88], 1
mov dword [ebp - 0x1138], 0xfffffffc
mov dword [ebp - 0xa88], 0x25b3b9da
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0x1138], eax
mov eax, dword [ebp - 0x310]
mov ecx, dword [ebp - 0x310]
mov eax, dword [ebp + eax*4 - 0x1298]
mov dword [ebp + ecx*4 - 0x1298], eax
jmp 0x402f32
mov dword [ebp - 0x110], 0x4102
mov dword [ebp - 0x12c], 0
jmp 0x402fb1
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x402fcd
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x2f8], 0xeb2391cb
jmp 0x402fa4
mov dword [ebp - 0x12c], 0
jmp 0x402fe6
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x403002
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x3bc], 0x972c40a9
jmp 0x402fd9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x14c8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x14d0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2f8], 0
je 0x403051
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2f8], 0
je 0x403051
mov dword [ebp - 0x720], 1
jmp 0x403058
and dword [ebp - 0x720], 0
cmp dword [ebp - 0x720], 0xfff7
jb 0x403070
mov dword [ebp - 0xd14], 1
jmp 0x403077
and dword [ebp - 0xd14], 0
cmp dword [ebp - 0xd14], 0xfffffffc
ja 0x40308c
mov dword [ebp - 0x728], 1
jmp 0x403093
and dword [ebp - 0x728], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x728], eax
jge 0x4030b3
mov dword [ebp - 0x4e0], 1
jmp 0x4030ba
and dword [ebp - 0x4e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp + eax - 0x3bc], ecx
cmp dword [ebp - 0x4e0], 0
je 0x403102
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f8], 0
je 0x403102
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3bc], 0
je 0x403102
mov dword [ebp - 0xa90], 1
jmp 0x403109
and dword [ebp - 0xa90], 0
cmp dword [ebp - 0xa90], 0x3380ee91
jg 0x403121
mov dword [ebp - 0x730], 1
jmp 0x403128
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x67b3
jge 0x403140
mov dword [ebp - 0xc44], 1
jmp 0x403147
and dword [ebp - 0xc44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2f8]
add eax, dword [ebp - 0xc44]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2f8]
jg 0x403174
mov dword [ebp - 0x738], 1
jmp 0x40317b
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 0x1940c9ba
jg 0x403193
mov dword [ebp - 0xa98], 1
jmp 0x40319a
and dword [ebp - 0xa98], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
cmp eax, dword [ebp - 0xa98]
jl 0x4031ba
mov dword [ebp - 0x740], 1
jmp 0x4031c1
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x110], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x110], eax
jl 0x4031ee
mov dword [ebp - 0xdb4], 1
jmp 0x4031f5
and dword [ebp - 0xdb4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0xdb4], eax
jne 0x403215
mov dword [ebp - 0xe7c], 1
jmp 0x40321c
and dword [ebp - 0xe7c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x14d8], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2f8]
cmp dword [ebp + eax - 0x2f8], ecx
jne 0x403254
mov dword [ebp - 0x1140], 1
jmp 0x40325b
and dword [ebp - 0x1140], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x14e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3bc], 0
je 0x403293
cmp dword [ebp - 0x110], 0
je 0x403293
mov dword [ebp - 0x748], 1
jmp 0x40329a
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xe84], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x750], eax
mov byte [ebp - 0x39], 0x79
mov eax, dword [ebp - 0xe84]
mov dword [ebp - 0x1148], eax
mov al, byte [ebp - 0x39]
mov byte [ebp - 0x91], al
mov byte [ebp - 0x14b], 0x5d
mov byte [ebp - 0x200], 0x5e
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0xe8c], eax
mov al, byte [ebp - 0x39]
mov byte [ebp - 0x93], al
mov byte [ebp - 0x3f], 0x85
mov eax, dword [ebp - 0x1148]
mov dword [ebp - 0x1150], eax
movzx eax, byte [ebp - 0x14b]
movzx ecx, byte [ebp - 0x91]
imul eax, ecx
mov dword [ebp - 0xaa0], eax
mov byte [ebp - 0x14d], 0x26
mov byte [ebp - 0x202], 0x27
mov eax, dword [ebp - 0xe8c]
mov dword [ebp - 0xe94], eax
mov al, byte [ebp - 0x3f]
mov byte [ebp - 0x3d], al
mov byte [ebp - 0x204], 0xaa
mov byte [ebp - 0x151], 0xab
mov al, byte [ebp - 0x200]
mov byte [ebp - 0x14f], al
mov al, byte [ebp - 0x91]
mov byte [ebp - 0x3b], al
mov byte [ebp - 0xc9], 0xd4
movzx eax, byte [ebp - 0x14d]
imul eax, dword [ebp - 0xaa0]
mov ecx, dword [ebp - 0x1150]
sub ecx, eax
movzx eax, byte [ebp - 0x202]
imul eax, dword [ebp - 0xaa0]
add ecx, eax
movzx eax, byte [ebp - 0x14f]
movzx edx, byte [ebp - 0xc9]
sub eax, edx
movzx edx, byte [ebp - 0x3b]
imul eax, edx
movzx edx, byte [ebp - 0x3b]
movzx esi, byte [ebp - 0xc9]
imul edx, esi
add eax, edx
sub ecx, eax
imul ecx, dword [ebp - 0x750]
movzx eax, byte [ebp - 0x204]
movzx edx, byte [ebp - 0x3d]
imul eax, edx
mov edx, dword [ebp - 0xe94]
add edx, eax
movzx eax, byte [ebp - 0x151]
movzx esi, byte [ebp - 0x3d]
imul eax, esi
sub edx, eax
movzx eax, byte [ebp - 0x93]
imul edx, eax
movzx eax, byte [ebp - 0x93]
movzx esi, byte [ebp - 0x3f]
imul eax, esi
add edx, eax
add ecx, edx
cmp ecx, 6
jge 0x40340e
mov dword [ebp - 0xc4c], 1
jmp 0x403415
and dword [ebp - 0xc4c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0xc4c], eax
jge 0x403435
mov dword [ebp - 0x1158], 1
jmp 0x40343c
and dword [ebp - 0x1158], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x14e8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x14f0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x110], eax
je 0x4037ab
mov dword [ebp - 0x358], 0xfffffffc
mov dword [ebp - 0x110], 3
jmp 0x40349b
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x35
jne 0x403791
mov dword [ebp - 0xeac], 1
mov dword [ebp - 0x47c], 0
jmp 0x4034cb
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 2
jge 0x4034e7
mov eax, dword [ebp - 0x47c]
mov dword [ebp + eax*4 - 0x1440], 0xfffffff8
jmp 0x4034be
mov dword [ebp - 0x358], 0
mov dword [ebp - 0xea4], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1440], 0
jne 0x40351d
mov eax, 0xa3ce
test eax, eax
jne 0x40351d
and dword [ebp - 0x758], 0
jmp 0x403527
mov dword [ebp - 0x758], 1
cmp dword [ebp - 0x758], 0xffffffff
je 0x40353c
mov dword [ebp - 0xaa8], 1
jmp 0x403543
and dword [ebp - 0xaa8], 0
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0x760], eax
mov byte [ebp - 0x206], 0x22
mov byte [ebp - 0x153], 0x23
mov al, byte [ebp - 0x206]
mov byte [ebp - 0x155], al
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x768], eax
mov byte [ebp - 0x41], 0xcc
mov al, byte [ebp - 0x153]
mov byte [ebp - 0x208], al
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0xd1c], eax
mov byte [ebp - 0xe3], 0x91
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x1160], eax
mov al, byte [ebp - 0x41]
mov byte [ebp - 0x43], al
mov byte [ebp - 0xd1], 0x58
movzx eax, byte [ebp - 0x208]
movzx ecx, byte [ebp - 0xe3]
sub eax, ecx
imul eax, dword [ebp - 0xd1c]
mov dword [ebp - 0x117c], eax
movzx eax, byte [ebp - 0xe3]
mov ecx, dword [ebp - 0xd1c]
imul ecx, eax
mov dword [ebp - 0x770], ecx
mov byte [ebp - 0x20a], 0x70
mov byte [ebp - 0x157], 0x71
movzx eax, byte [ebp - 0x155]
movzx ecx, byte [ebp - 0x41]
sub eax, ecx
mov dword [ebp - 0xe9c], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0xab0], eax
mov byte [ebp - 0x95], 0xe9
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x1500], eax
movzx eax, byte [ebp - 0x95]
mov ecx, dword [ebp - 0xe9c]
sub ecx, eax
imul ecx, dword [ebp - 0xab0]
movzx eax, byte [ebp - 0x95]
mov edx, dword [ebp - 0xab0]
imul edx, eax
add ecx, edx
movzx eax, byte [ebp - 0xd1]
mov edx, dword [ebp - 0x1160]
sub edx, eax
movzx eax, byte [ebp - 0x43]
imul edx, eax
movzx eax, byte [ebp - 0x43]
movzx esi, byte [ebp - 0xd1]
imul eax, esi
add edx, eax
add ecx, edx
mov eax, dword [ebp - 0xea4]
sub eax, ecx
movzx ecx, byte [ebp - 0x20a]
imul ecx, dword [ebp - 0x770]
mov edx, dword [ebp - 0x117c]
sub edx, ecx
movzx ecx, byte [ebp - 0x157]
imul ecx, dword [ebp - 0x770]
add edx, ecx
add eax, edx
je 0x4036c7
cmp dword [ebp - 0xeac], 0
je 0x4036c7
mov dword [ebp - 0x1184], 1
jmp 0x4036ce
and dword [ebp - 0x1184], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x1508], eax
mov eax, dword [ebp - 0x358]
sub eax, 6
imul eax, eax, 0x767e
imul eax, eax, 0x24a0
cmp dword [ebp - 0x358], eax
je 0x403709
mov dword [ebp - 0xc54], 1
jmp 0x403710
and dword [ebp - 0xc54], 0
cmp dword [ebp - 0xc54], 0
jl 0x403725
mov dword [ebp - 0x778], 1
jmp 0x40372c
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 0x2e0a
jne 0x403744
mov dword [ebp - 0xab8], 1
jmp 0x40374b
and dword [ebp - 0xab8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0xab8], eax
jle 0x40376c
mov dword [ebp - 0x780], 1
jmp 0x403773
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x358]
add eax, dword [ebp - 0x780]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3bc], eax
jmp 0x40348e
mov byte [ebp - 0x20c], 0
movzx eax, byte [ebp - 0x20c]
test eax, eax
je 0x4037a9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x4037c5
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x4037c5
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x368], 0xffffffff
mov dword [ebp - 0x42c], 0
jmp 0x4037e8
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 2
jge 0x403804
mov eax, dword [ebp - 0x42c]
mov dword [ebp + eax*4 - 0x12a0], 0xfffffff8
jmp 0x4037db
mov byte [ebp - 0x20e], 0
movzx eax, byte [ebp - 0x20e]
test eax, eax
je 0x40381e
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x368], 1
jmp 0x403837
mov eax, dword [ebp - 0x368]
dec eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
jl 0x403971
mov dword [ebp - 0x3c4], 0
jmp 0x40385d
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 4
jge 0x403879
mov eax, dword [ebp - 0x3c4]
mov dword [ebp + eax*4 - 0x1288], 0x137b1891
jmp 0x403850
mov byte [ebp - 0x15b], 0
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x4038a8
push 0
push 0x219e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1288], 1
jmp 0x4038d3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1288]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1288], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1288], 0
jl 0x40396c
mov eax, dword [ebp - 0x368]
cmp dword [ebp + eax*4 - 0x12a0], 0
je 0x403910
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1288]
cmp dword [ebp + eax*4 - 0x12a0], 0
je 0x40390e
jmp 0x40396c
jmp 0x403967
mov dword [ebp - 0x464], 0xffffffff
mov dword [ebp - 0x464], 1
jmp 0x403933
mov eax, dword [ebp - 0x464]
dec eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
jl 0x403967
mov byte [ebp - 0x210], 0
movzx eax, byte [ebp - 0x210]
test eax, eax
je 0x403965
push 0x1b31
push 0x685
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
jmp 0x403926
jmp 0x4038ba
jmp 0x40382a
mov dword [ebp - 0x434], 0xda115252
mov dword [ebp - 0x3cc], 0
jmp 0x403994
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 1
jge 0x4039b0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0xd84], 0xffffffff
jmp 0x403987
mov dword [ebp - 0x434], 0
jmp 0x4039c9
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0
jg 0x403a1c
mov dword [ebp - 0x32c], 0xffffffff
mov dword [ebp - 0x32c], 0
jmp 0x4039f5
mov eax, dword [ebp - 0x32c]
dec eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jl 0x403a1a
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x32c]
mov eax, dword [ebp + eax*4 - 0xd84]
mov dword [ebp + ecx*4 - 0xd84], eax
jmp 0x4039e8
jmp 0x4039bc
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x403a34
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0xeb4], 0x49c638
mov dword [ebp - 0xac0], 7
mov byte [ebp - 0x212], 0xf6
mov byte [ebp - 0x214], 0xf7
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0x118c], eax
mov al, byte [ebp - 0x212]
mov byte [ebp - 0x15f], al
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0x5c4], eax
mov byte [ebp - 0x45], 0xe9
movzx eax, byte [ebp - 0x15f]
movzx ecx, byte [ebp - 0x45]
sub eax, ecx
imul eax, dword [ebp - 0x5c4]
movzx ecx, byte [ebp - 0x45]
mov edx, dword [ebp - 0x5c4]
imul edx, ecx
add eax, edx
mov dword [ebp - 0x790], eax
mov byte [ebp - 0x161], 0xda
mov byte [ebp - 0x216], 0xdb
mov al, byte [ebp - 0x214]
mov byte [ebp - 0x163], al
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0xc5c], eax
mov byte [ebp - 0x97], 0x37
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0xec4], eax
mov al, byte [ebp - 0x97]
mov byte [ebp - 0x49], al
mov byte [ebp - 0x99], 0x1c
mov eax, dword [ebp - 0x118c]
mov dword [ebp - 0xebc], eax
movzx eax, byte [ebp - 0x161]
imul eax, dword [ebp - 0x790]
mov dword [ebp - 0x798], eax
mov byte [ebp - 0x218], 0xf9
mov byte [ebp - 0x165], 0xfa
mov al, byte [ebp - 0x216]
mov byte [ebp - 0x21a], al
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0xac8], eax
mov byte [ebp - 0x47], 0x92
movzx eax, byte [ebp - 0x163]
movzx ecx, byte [ebp - 0x97]
sub eax, ecx
mov dword [ebp - 0x1194], eax
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 0xe5], 0x8e
mov eax, dword [0xa94b14]
and eax, 1
jne 0x403c28
mov eax, dword [0xa94b14]
or eax, 1
mov dword [0xa94b14], eax
movzx eax, byte [ebp - 0x218]
imul eax, dword [ebp - 0x798]
shl eax, 2
mov ecx, dword [ebp - 0xebc]
sub ecx, eax
movzx eax, byte [ebp - 0x165]
imul eax, dword [ebp - 0x798]
lea eax, [ecx + eax*4]
movzx ecx, byte [ebp - 0x21a]
movzx edx, byte [ebp - 0x47]
sub ecx, edx
imul ecx, dword [ebp - 0xac8]
movzx edx, byte [ebp - 0x47]
mov esi, dword [ebp - 0xac8]
imul esi, edx
add ecx, esi
shl ecx, 2
sub eax, ecx
movzx ecx, byte [ebp - 0xe5]
mov edx, dword [ebp - 0x1194]
sub edx, ecx
imul edx, dword [ebp - 0x7a0]
movzx ecx, byte [ebp - 0xe5]
mov esi, dword [ebp - 0x7a0]
imul esi, ecx
add edx, esi
movzx ecx, byte [ebp - 0x99]
mov esi, dword [ebp - 0xec4]
sub esi, ecx
movzx ecx, byte [ebp - 0x49]
imul esi, ecx
movzx ecx, byte [ebp - 0x49]
movzx edi, byte [ebp - 0x99]
imul ecx, edi
add esi, ecx
add edx, esi
lea eax, [eax + edx*4]
mov dword [0xa94a5c], eax
mov dword [ebp - 0x308], 0xa66fe7d8
mov dword [ebp - 0x3d4], 0
jmp 0x403c4b
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 2
jge 0x403c67
mov eax, dword [ebp - 0x3d4]
mov dword [ebp + eax*4 - 0x12a8], 2
jmp 0x403c3e
mov dword [ebp - 0x308], 0
jmp 0x403c80
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jg 0x403ccf
mov dword [ebp - 0xd24], 1
mov dword [ebp - 0x119c], 0xfffffffc
mov dword [ebp - 0xd24], 0x25b3b9da
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0x119c], eax
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x308]
mov eax, dword [ebp + eax*4 - 0x12a8]
mov dword [ebp + ecx*4 - 0x12a8], eax
jmp 0x403c73
mov dword [ebp - 0x10], 0x3fcb50bf
mov dword [ebp - 0x11a4], 0
mov dword [ebp - 0x43c], 0xfffffffc
mov dword [ebp - 0x12fc], 0x2c9ea21f
mov dword [ebp - 0x12f8], 0x2c9ea21f
mov dword [ebp - 0x12f4], 0x2c9ea21f
mov dword [ebp - 0x12f0], 0x2c9ea21f
mov dword [ebp - 0x128], 0
jmp 0x403d2b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x403d47
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x380], 0xa8eac8b1
jmp 0x403d1e
mov dword [ebp - 0x128], 0
jmp 0x403d60
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x403d7c
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x12b0], 0x5996fd0f
jmp 0x403d53
mov byte [ebp - 0x167], 0
movzx eax, byte [ebp - 0x167]
test eax, eax
je 0x403d98
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [ebp - 0x10], 0
jmp 0x403da8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x40463e
mov dword [ebp - 0xf0], 0x8876942a
mov dword [ebp - 0x7d0], 0x19043831
mov dword [ebp - 0x10c0], 0x31a3a4aa
mov dword [ebp - 0x4f0], 0x2350c165
mov dword [ebp - 0x48c], 0
jmp 0x403df3
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 3
jge 0x403e0f
mov eax, dword [ebp - 0x48c]
mov dword [ebp + eax*4 - 0x1208], 0
jmp 0x403de6
mov dword [ebp - 0xf0], 2
jmp 0x403e28
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x404446
mov dword [ebp - 0xeec], 3
mov dword [ebp - 0xb00], 0x15c87e17
mov dword [ebp - 0x3dc], 0
jmp 0x403e62
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 1
jge 0x403e7e
mov eax, dword [ebp - 0x3dc]
mov dword [ebp + eax*4 - 0xed4], 0xc97de2e5
jmp 0x403e55
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1510], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x380], 0
jne 0x403ea9
cmp dword [ebp - 0xf0], 0
jne 0x403ea9
and dword [ebp - 0x4e8], 0
jmp 0x403eb3
mov dword [ebp - 0x4e8], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp + eax - 0x12b0], ecx
mov eax, dword [ebp - 0x4e8]
sub eax, 0x1786f696
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x380]
jne 0x403ee9
mov dword [ebp - 0x7a8], 1
jmp 0x403ef0
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
imul eax, dword [ebp - 0x7a8]
test eax, eax
jne 0x403f14
cmp dword [ebp - 0x10], 0
jne 0x403f14
and dword [ebp - 0xad0], 0
jmp 0x403f1e
mov dword [ebp - 0xad0], 1
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0xecc], eax
mov dword [ebp - 0x7b0], 0x51b4373c
mov byte [ebp - 0x21c], 0x32
mov byte [ebp - 0x169], 0x33
movzx eax, byte [ebp - 0x21c]
imul eax, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0xecc]
sub ecx, eax
movzx eax, byte [ebp - 0x169]
imul eax, dword [ebp - 0x7b0]
add ecx, eax
jne 0x403f8b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x380], 0
jne 0x403f8b
mov eax, 0xf5e1
test eax, eax
jne 0x403f8b
and dword [ebp - 0xc64], 0
jmp 0x403f95
mov dword [ebp - 0xc64], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
cmp dword [ebp - 0xc64], eax
jne 0x403fb3
mov dword [ebp - 0x7b8], 1
jmp 0x403fba
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x11a4], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1208], 0x56979f9f
mov eax, 0xe0cd1ad7
add eax, 0x56979f9f
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0xad8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xad8]
mov dword [ebp + eax - 0xed4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0xad8], eax
jg 0x404027
mov dword [ebp - 0x7c0], 1
jmp 0x40402e
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x11ac], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xddc], eax
mov byte [ebp - 0x21e], 0x64
mov byte [ebp - 0x16b], 0x65
movzx eax, byte [ebp - 0x21e]
imul eax, dword [ebp - 0xddc]
mov ecx, dword [ebp - 0x11ac]
add ecx, eax
movzx eax, byte [ebp - 0x16b]
imul eax, dword [ebp - 0xddc]
sub ecx, eax
jne 0x404095
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1208], 0
jne 0x404095
and dword [ebp - 0x7c8], 0
jmp 0x40409f
mov dword [ebp - 0x7c8], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x7c8], eax
jge 0x4040b6
mov dword [ebp - 0xae0], 1
jmp 0x4040bd
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
cmp eax, dword [ebp - 0x7d0]
jge 0x4040e7
mov dword [ebp - 0xc6c], 1
jmp 0x4040ee
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0xedc], eax
mov dword [ebp - 0xae8], 1
mov byte [ebp - 0x220], 0xf9
mov byte [ebp - 0x222], 0xfa
mov eax, dword [ebp - 0xedc]
mov dword [ebp - 0x11b4], eax
mov al, byte [ebp - 0x220]
mov byte [ebp - 0x16d], al
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0x7d8], eax
mov byte [ebp - 0x4b], 0xa9
movzx eax, byte [ebp - 0x16d]
movzx ecx, byte [ebp - 0x4b]
sub eax, ecx
imul eax, dword [ebp - 0x7d8]
movzx ecx, byte [ebp - 0x4b]
mov edx, dword [ebp - 0x7d8]
imul edx, ecx
add eax, edx
mov dword [ebp - 0xd2c], eax
mov byte [ebp - 0x224], 0xaf
mov byte [ebp - 0x226], 0xb0
mov al, byte [ebp - 0x222]
mov byte [ebp - 0x16f], al
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0x7e8], eax
mov byte [ebp - 0xdc], 0xa6
mov al, byte [ebp - 0x16f]
mov byte [ebp - 0x173], al
mov al, byte [ebp - 0xdc]
mov byte [ebp - 0x9b], al
mov byte [ebp - 0x228], 0x52
mov byte [ebp - 0x175], 0x53
mov al, byte [ebp - 0x224]
mov byte [ebp - 0x171], al
mov eax, dword [ebp - 0xd2c]
mov dword [ebp - 0x7e0], eax
mov byte [ebp - 0x4d], 0x5a
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x11bc], eax
mov al, byte [ebp - 0xdc]
mov byte [ebp - 0x4f], al
mov byte [ebp - 0xd4], 0x15
movzx eax, byte [ebp - 0x171]
movzx ecx, byte [ebp - 0x4d]
sub eax, ecx
imul eax, dword [ebp - 0x7e0]
movzx ecx, byte [ebp - 0x4d]
mov edx, dword [ebp - 0x7e0]
imul edx, ecx
add eax, edx
mov ecx, dword [ebp - 0x11b4]
add ecx, eax
movzx eax, byte [ebp - 0x226]
imul eax, dword [ebp - 0xd2c]
sub ecx, eax
movzx eax, byte [ebp - 0x173]
movzx edx, byte [ebp - 0x228]
movzx esi, byte [ebp - 0x9b]
imul edx, esi
add eax, edx
movzx edx, byte [ebp - 0x175]
movzx esi, byte [ebp - 0x9b]
imul edx, esi
sub eax, edx
imul eax, dword [ebp - 0x7e8]
movzx edx, byte [ebp - 0xd4]
mov esi, dword [ebp - 0x11bc]
sub esi, edx
movzx edx, byte [ebp - 0x4f]
imul esi, edx
movzx edx, byte [ebp - 0x4f]
movzx edi, byte [ebp - 0xd4]
imul edx, edi
add esi, edx
add eax, esi
add ecx, eax
cmp ecx, dword [ebp - 0xf0]
je 0x40429b
mov dword [ebp - 0xee8], 1
jmp 0x4042a2
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1518], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xeec]
cmp dword [ebp + eax - 0x380], ecx
je 0x4042cc
mov dword [ebp - 0xaf0], 1
jmp 0x4042d3
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xaf0]
jle 0x4042ea
mov dword [ebp - 0x7f0], 1
jmp 0x4042f1
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0xb00]
cmp dword [ebp - 0x7f0], eax
jl 0x40430b
mov dword [ebp - 0xc74], 1
jmp 0x404312
and dword [ebp - 0xc74], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0xc74], eax
jne 0x404333
mov dword [ebp - 0x7f8], 1
jmp 0x40433a
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x7f8], eax
jne 0x404354
mov dword [ebp - 0xaf8], 1
jmp 0x40435b
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
cmp eax, dword [ebp - 0xaf8]
jle 0x404379
mov dword [ebp - 0x800], 1
jmp 0x404380
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x10c0], eax
mov dword [ebp - 0x4f0], 0x5184bf4d
cmp dword [ebp - 0x4f0], 0
jge 0x4043ab
mov dword [ebp - 0xd8c], 1
jmp 0x4043b2
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xd8c], eax
jne 0x4043c9
mov dword [ebp - 0x808], 1
jmp 0x4043d0
and dword [ebp - 0x808], 0
cmp dword [ebp - 0x808], 0xeb13e27c
jbe 0x4043e8
mov dword [ebp - 0xef4], 1
jmp 0x4043ef
and dword [ebp - 0xef4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
mov dword [ebp - 0x1520], eax
mov eax, 0x4ffa
imul eax, eax, 0xffff
cmp eax, dword [ebp - 0xf0]
je 0x404421
mov dword [ebp - 0x810], 1
jmp 0x404428
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0xb00]
add eax, dword [ebp - 0x810]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x12fc], eax
jmp 0x403e1b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1208]
mov dword [ebp - 0x1568], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1570], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x12b0]
cmp dword [ebp + eax - 0x380], ecx
jne 0x40448d
mov dword [ebp - 0xc7c], 1
jmp 0x404494
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x10a4], eax
mov dword [ebp - 0x818], 0x18f8
mov byte [ebp - 0x22a], 0x44
mov byte [ebp - 0x177], 0x45
movzx eax, byte [ebp - 0x22a]
imul eax, dword [ebp - 0x818]
mov ecx, dword [ebp - 0x10a4]
sub ecx, eax
mov dword [ebp - 0xefc], ecx
movzx eax, byte [ebp - 0x177]
imul eax, dword [ebp - 0x818]
mov dword [ebp - 0xb08], eax
mov byte [ebp - 0x22c], 0x73
mov byte [ebp - 0x179], 0x74
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
mov dword [ebp - 0x1578], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1208]
mov dword [ebp - 0x1580], eax
movzx eax, byte [ebp - 0x22c]
imul eax, dword [ebp - 0xb08]
mov ecx, dword [ebp - 0xefc]
sub ecx, eax
movzx eax, byte [ebp - 0x179]
imul eax, dword [ebp - 0xb08]
lea eax, [ecx + eax + 0x9ffd]
cmp eax, 0x2e27
jge 0x40455d
mov eax, 0xc99cc0f7
test eax, eax
jne 0x40455d
and dword [ebp - 0x820], 0
jmp 0x404567
mov dword [ebp - 0x820], 1
cmp dword [ebp - 0x820], 0xc55279c8
ja 0x40457f
mov dword [ebp - 0xd34], 1
jmp 0x404586
and dword [ebp - 0xd34], 0
cmp dword [ebp - 0xd34], 0
jg 0x40459b
mov dword [ebp - 0x828], 1
jmp 0x4045a2
and dword [ebp - 0x828], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1208]
cmp dword [ebp - 0x828], eax
jle 0x4045c3
mov dword [ebp - 0xb10], 1
jmp 0x4045ca
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb10], eax
jge 0x4045e1
mov dword [ebp - 0x830], 1
jmp 0x4045e8
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0x43c], eax
jl 0x40460e
mov dword [ebp - 0x1174], 1
jmp 0x404615
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
mov dword [ebp - 0x1588], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x380]
mov dword [ebp + ecx*4 - 0x380], eax
jmp 0x403da1
movzx eax, byte [0xa94a60]
test eax, eax
je 0x40465c
mov esi, 0xa94a54
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x40b255
mov dword [ebp - 0x2b8], 0xfffffff6
mov dword [ebp - 0x2b0], 0x5a95
mov dword [ebp - 0x3ec], 0x8ee41b66
mov dword [ebp - 0xf04], 0xf9f36173
mov dword [ebp - 0x159c], 0xaec51ac0
mov dword [ebp - 0x3e4], 0
jmp 0x4046a7
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 4
jge 0x4046c3
mov eax, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0x15b0], 0xfffffffc
jmp 0x40469a
mov dword [ebp - 0x2b8], 2
jmp 0x4046dc
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xc
jne 0x404c51
mov dword [ebp - 0x10ac], 1
mov dword [ebp - 0x2a8], 8
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0xf14], eax
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0x11c0], eax
cmp dword [ebp - 0x10ac], 0x8ea38884
jbe 0x404739
mov dword [ebp - 0xc84], 1
jmp 0x404740
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0xf0c], eax
mov dword [ebp - 0x838], 0x2749
mov byte [ebp - 0x51], 9
movzx eax, byte [ebp - 0x51]
mov ecx, dword [ebp - 0xf0c]
sub ecx, eax
imul ecx, dword [ebp - 0x838]
movzx eax, byte [ebp - 0x51]
mov edx, dword [ebp - 0x838]
imul edx, eax
add ecx, edx
mov dword [ebp - 0xb18], ecx
mov byte [ebp - 0x22e], 0x6e
mov byte [ebp - 0x17b], 0x6f
mov al, byte [ebp - 0x22e]
mov byte [ebp - 0x230], al
mov eax, dword [ebp - 0xb18]
mov dword [ebp - 0x840], eax
mov byte [ebp - 0x9d], 0x65
mov al, byte [ebp - 0x17b]
mov byte [ebp - 0x17d], al
mov eax, dword [ebp - 0xb18]
mov dword [ebp - 0xdbc], eax
mov byte [ebp - 0x53], 0xa0
movzx eax, byte [ebp - 0x230]
movzx ecx, byte [ebp - 0x9d]
sub eax, ecx
imul eax, dword [ebp - 0x840]
movzx ecx, byte [ebp - 0x9d]
mov edx, dword [ebp - 0x840]
imul edx, ecx
add eax, edx
mov ecx, dword [ebp - 0x11c0]
add ecx, eax
movzx eax, byte [ebp - 0x17d]
movzx edx, byte [ebp - 0x53]
sub eax, edx
imul eax, dword [ebp - 0xdbc]
movzx edx, byte [ebp - 0x53]
mov esi, dword [ebp - 0xdbc]
imul esi, edx
add eax, esi
sub ecx, eax
mov dword [ebp - 0x848], ecx
mov byte [ebp - 0x17f], 0xb2
mov byte [ebp - 0x232], 0xb3
mov al, byte [ebp - 0x232]
mov byte [ebp - 0x236], al
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x850], eax
mov byte [ebp - 0x55], 0xf4
mov eax, dword [ebp - 0xf14]
mov dword [ebp - 0x10b4], eax
mov al, byte [ebp - 0x17f]
mov byte [ebp - 0x234], al
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0xb20], eax
mov byte [ebp - 0xe4], 0x99
movzx eax, byte [ebp - 0x234]
movzx ecx, byte [ebp - 0xe4]
sub eax, ecx
imul eax, dword [ebp - 0xb20]
movzx ecx, byte [ebp - 0xe4]
mov edx, dword [ebp - 0xb20]
imul edx, ecx
add eax, edx
mov dword [ebp - 0xc8c], eax
mov byte [ebp - 0x181], 0x3d
mov byte [ebp - 0x183], 0x3e
mov eax, dword [ebp - 0x10b4]
mov dword [ebp - 0xf1c], eax
movzx eax, byte [ebp - 0x181]
imul eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x858], eax
mov byte [ebp - 0x238], 0xea
mov byte [ebp - 0x185], 0xeb
movzx eax, byte [ebp - 0x236]
movzx ecx, byte [ebp - 0x55]
sub eax, ecx
imul eax, dword [ebp - 0x850]
mov dword [ebp - 0x1170], eax
movzx eax, byte [ebp - 0x55]
mov ecx, dword [ebp - 0x850]
imul ecx, eax
mov dword [ebp - 0x860], ecx
mov byte [ebp - 0x187], 0x71
mov byte [ebp - 0x23c], 0x72
mov al, byte [ebp - 0x183]
mov byte [ebp - 0x23a], al
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0xb28], eax
mov byte [ebp - 0x9f], 0x85
mov al, byte [ebp - 0x238]
mov byte [ebp - 0x5a9], al
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x1308], eax
mov eax, dword [ebp - 0xf1c]
mov dword [ebp - 0x1468], eax
mov al, byte [ebp - 0x185]
mov byte [ebp - 0x529], al
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x1310], eax
mov al, byte [ebp - 0x23a]
mov byte [ebp - 0x581], al
mov al, byte [ebp - 0x9f]
mov byte [ebp - 0x531], al
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0x151c], eax
mov al, byte [ebp - 0x9f]
mov byte [ebp - 0x5bb], al
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0x1318], eax
mov al, byte [ebp - 0x187]
mov byte [ebp - 0x49a], al
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x1474], eax
mov eax, dword [ebp - 0x1170]
mov dword [ebp - 0x1320], eax
mov al, byte [ebp - 0x23c]
mov byte [ebp - 0x5ba], al
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jae 0x404c37
mov dword [ebp - 0xf24], 8
mov dword [ebp - 0xd3c], 1
mov byte [ebp - 0x189], 0
movzx eax, byte [ebp - 0x189]
test eax, eax
je 0x404a3c
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [ebp - 0x2a8], 0
jmp 0x404a55
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 3
jg 0x404c35
mov dword [ebp - 0x46c], 0
jmp 0x404a7b
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 3
jge 0x404a97
mov eax, dword [ebp - 0x46c]
mov dword [ebp + eax*4 - 0x160c], 0xfffffff7
jmp 0x404a6e
mov dword [ebp - 0x2b0], 0
jmp 0x404ab0
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jg 0x404c30
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0xf2c], eax
mov dword [ebp - 0xd3c], 0xffffffff
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0x868], eax
mov byte [ebp - 0x23e], 0xf5
mov byte [ebp - 0x18b], 0xf6
mov al, byte [ebp - 0x23e]
mov byte [ebp - 0x240], al
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xb30], eax
mov byte [ebp - 0x57], 0x7c
mov al, byte [ebp - 0x18b]
mov byte [ebp - 0x18d], al
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xc94], eax
mov byte [ebp - 0x59], 0xb6
movzx eax, byte [ebp - 0x240]
movzx ecx, byte [ebp - 0x57]
sub eax, ecx
imul eax, dword [ebp - 0xb30]
mov dword [ebp - 0x10bc], eax
movzx eax, byte [ebp - 0x57]
mov ecx, dword [ebp - 0xb30]
imul ecx, eax
mov dword [ebp - 0x870], ecx
mov byte [ebp - 0x242], 0x9e
mov byte [ebp - 0x18f], 0x9f
mov al, byte [ebp - 0x18d]
mov byte [ebp - 0x244], al
mov al, byte [ebp - 0x59]
mov byte [ebp - 0xd6], al
mov byte [ebp - 0x191], 0x1c
mov byte [ebp - 0x246], 0x1d
mov eax, dword [ebp - 0x2a8]
movzx ecx, byte [ebp - 0x242]
imul ecx, dword [ebp - 0x870]
mov edx, dword [ebp - 0x10bc]
sub edx, ecx
movzx ecx, byte [ebp - 0x18f]
imul ecx, dword [ebp - 0x870]
add edx, ecx
mov ecx, dword [ebp - 0xf2c]
sub ecx, edx
movzx edx, byte [ebp - 0x244]
movzx esi, byte [ebp - 0x191]
movzx edi, byte [ebp - 0xd6]
imul esi, edi
add edx, esi
movzx esi, byte [ebp - 0x246]
movzx edi, byte [ebp - 0xd6]
imul esi, edi
sub edx, esi
imul edx, dword [ebp - 0xc94]
movzx esi, byte [ebp - 0x59]
mov edi, dword [ebp - 0xc94]
imul edi, esi
add edx, edi
add ecx, edx
cmp dword [ebp + eax*4 - 0x15b0], ecx
jg 0x404c11
mov dword [ebp - 0x878], 1
jmp 0x404c18
and dword [ebp - 0x878], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x878]
mov dword [ebp + eax - 0x160c], ecx
jmp 0x404aa3
jmp 0x404a48
jmp 0x404c4c
mov dword [ebp - 0x120c], 0xa6c65b0b
cmp dword [ebp - 0x120c], 0
je 0x404c4c
jmp 0x404c51
jmp 0x4046cf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15b0]
mov dword [ebp - 0xf34], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x890], eax
mov byte [ebp - 0x5d], 0xa1
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x10c4], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x880], eax
mov byte [ebp - 0x248], 0xde
mov byte [ebp - 0x1b4], 0xdf
movzx eax, byte [ebp - 0x5d]
mov ecx, dword [ebp - 0xf34]
sub ecx, eax
mov dword [ebp - 0x1178], ecx
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0xb40], eax
mov byte [ebp - 0xde], 6
mov eax, dword [ebp - 0x10c4]
mov dword [ebp - 0xf3c], eax
mov al, byte [ebp - 0x248]
mov byte [ebp - 0x1f6], al
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0xb38], eax
mov byte [ebp - 0xa1], 0x21
movzx eax, byte [ebp - 0x1f6]
movzx ecx, byte [ebp - 0xa1]
sub eax, ecx
imul eax, dword [ebp - 0xb38]
movzx ecx, byte [ebp - 0xa1]
mov edx, dword [ebp - 0xb38]
imul edx, ecx
add eax, edx
mov dword [ebp - 0xd94], eax
mov byte [ebp - 0x21d], 0x38
mov byte [ebp - 0x197], 0x39
mov al, byte [ebp - 0x1b4]
mov byte [ebp - 0x261], al
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x888], eax
mov byte [ebp - 0x5b], 0x29
movzx eax, byte [ebp - 0x21d]
imul eax, dword [ebp - 0xd94]
mov ecx, dword [ebp - 0xf3c]
add ecx, eax
movzx eax, byte [ebp - 0x197]
imul eax, dword [ebp - 0xd94]
sub ecx, eax
mov dword [ebp - 0xf4c], ecx
movzx eax, byte [ebp - 0x261]
movzx ecx, byte [ebp - 0x5b]
sub eax, ecx
imul eax, dword [ebp - 0x888]
movzx ecx, byte [ebp - 0x5b]
mov edx, dword [ebp - 0x888]
imul edx, ecx
add eax, edx
mov dword [ebp - 0xb48], eax
mov byte [ebp - 0x19b], 0xda
mov byte [ebp - 0x283], 0xdb
movzx eax, byte [ebp - 0xde]
mov ecx, dword [ebp - 0x1178]
sub ecx, eax
imul ecx, dword [ebp - 0xb40]
mov dword [ebp - 0xf44], ecx
movzx eax, byte [ebp - 0xde]
mov ecx, dword [ebp - 0xb40]
imul ecx, eax
mov dword [ebp - 0xc9c], ecx
mov byte [ebp - 0x199], 0x58
mov byte [ebp - 0x21f], 0x59
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x10cc], eax
mov al, byte [ebp - 0x5d]
mov byte [ebp - 0xa3], al
mov byte [ebp - 0x5f], 0x51
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15b0]
mov dword [ebp - 0x1328], eax
movzx eax, byte [ebp - 0x199]
imul eax, dword [ebp - 0xc9c]
mov ecx, dword [ebp - 0xf44]
sub ecx, eax
movzx eax, byte [ebp - 0x21f]
imul eax, dword [ebp - 0xc9c]
add ecx, eax
movzx eax, byte [ebp - 0x5f]
mov edx, dword [ebp - 0x10cc]
sub edx, eax
movzx eax, byte [ebp - 0xa3]
imul edx, eax
movzx eax, byte [ebp - 0xa3]
movzx esi, byte [ebp - 0x5f]
imul eax, esi
add edx, eax
add ecx, edx
cmp ecx, 0xfffffff7
ja 0x404e71
mov dword [ebp - 0x898], 1
jmp 0x404e78
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0x3ec], eax
movzx eax, byte [ebp - 0x19b]
imul eax, dword [ebp - 0xb48]
mov ecx, dword [ebp - 0xf4c]
sub ecx, eax
movzx eax, byte [ebp - 0x283]
imul eax, dword [ebp - 0xb48]
add ecx, eax
cmp ecx, dword [ebp - 0x2b8]
jle 0x404ebe
mov dword [ebp - 0x8a0], 1
jmp 0x404ec5
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x130], 0x4102
mov dword [ebp - 0x100], 0
jmp 0x404ef4
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x404f10
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x2ec], 0xeb2391cb
jmp 0x404ee7
mov dword [ebp - 0x100], 0
jmp 0x404f29
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x404f45
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x3f4], 0x972c40a9
jmp 0x404f1c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x1480], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2ec], 0
je 0x404f82
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2ec], 0
je 0x404f82
mov dword [ebp - 0xd44], 1
jmp 0x404f89
and dword [ebp - 0xd44], 0
cmp dword [ebp - 0xd44], 0xfff7
jb 0x404fa1
mov dword [ebp - 0x8a8], 1
jmp 0x404fa8
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0xfffffffc
ja 0x404fbd
mov dword [ebp - 0xb50], 1
jmp 0x404fc4
and dword [ebp - 0xb50], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0xb50], eax
jge 0x404fe4
mov dword [ebp - 0x4f8], 1
jmp 0x404feb
and dword [ebp - 0x4f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4f8]
mov dword [ebp + eax - 0x3f4], ecx
cmp dword [ebp - 0x4f8], 0
je 0x405033
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ec], 0
je 0x405033
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f4], 0
je 0x405033
mov dword [ebp - 0x8b0], 1
jmp 0x40503a
and dword [ebp - 0x8b0], 0
cmp dword [ebp - 0x8b0], 0x3380ee91
jg 0x405052
mov dword [ebp - 0xca4], 1
jmp 0x405059
and dword [ebp - 0xca4], 0
cmp dword [ebp - 0xca4], 0x67b3
jge 0x405071
mov dword [ebp - 0x8b8], 1
jmp 0x405078
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x11c8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x8c0], eax
mov byte [ebp - 0x19d], 0x36
mov byte [ebp - 0x263], 0x37
mov eax, dword [ebp - 0x11c8]
mov dword [ebp - 0xf54], eax
movzx eax, byte [ebp - 0x19d]
imul eax, dword [ebp - 0x8c0]
mov dword [ebp - 0xb58], eax
mov byte [ebp - 0x221], 0x9e
mov byte [ebp - 0x19f], 0x9f
movzx eax, byte [ebp - 0x221]
imul eax, dword [ebp - 0xb58]
mov ecx, dword [ebp - 0xf54]
add ecx, eax
movzx eax, byte [ebp - 0x19f]
imul eax, dword [ebp - 0xb58]
sub ecx, eax
mov dword [ebp - 0x10d4], ecx
movzx eax, byte [ebp - 0x263]
imul eax, dword [ebp - 0x8c0]
mov dword [ebp - 0xdd4], eax
mov byte [ebp - 0x1a1], 0x39
mov byte [ebp - 0x223], 0x3a
movzx eax, byte [ebp - 0x1a1]
imul eax, dword [ebp - 0xdd4]
mov ecx, dword [ebp - 0x10d4]
sub ecx, eax
mov dword [ebp - 0xf5c], ecx
movzx eax, byte [ebp - 0x223]
imul eax, dword [ebp - 0xdd4]
mov dword [ebp - 0x8c8], eax
mov byte [ebp - 0x1a3], 0xc7
mov byte [ebp - 0x2d9], 0xc8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x1330], eax
movzx eax, byte [ebp - 0x1a3]
imul eax, dword [ebp - 0x8c8]
mov ecx, dword [ebp - 0xf5c]
sub ecx, eax
movzx eax, byte [ebp - 0x2d9]
imul eax, dword [ebp - 0x8c8]
add ecx, eax
push 4
pop eax
shl eax, 1
cmp ecx, dword [ebp + eax - 0x2ec]
jg 0x4051b1
mov dword [ebp - 0xb60], 1
jmp 0x4051b8
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0x1940c9ba
jg 0x4051d0
mov dword [ebp - 0x8d0], 1
jmp 0x4051d7
and dword [ebp - 0x8d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
cmp eax, dword [ebp - 0x8d0]
jl 0x4051f7
mov dword [ebp - 0xcac], 1
jmp 0x4051fe
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0x130], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x130], eax
jl 0x40522b
mov dword [ebp - 0x8d8], 1
jmp 0x405232
and dword [ebp - 0x8d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x8d8], eax
jne 0x405252
mov dword [ebp - 0x1180], 1
jmp 0x405259
and dword [ebp - 0x1180], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x149c], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2ec]
cmp dword [ebp + eax - 0x2ec], ecx
jne 0x405291
mov dword [ebp - 0xf64], 1
jmp 0x405298
and dword [ebp - 0xf64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x1338], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f4], 0
je 0x4052d0
cmp dword [ebp - 0x130], 0
je 0x4052d0
mov dword [ebp - 0xb68], 1
jmp 0x4052d7
and dword [ebp - 0xb68], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
imul eax, dword [ebp - 0xb68]
cmp eax, 6
jge 0x4052fb
mov dword [ebp - 0x8e0], 1
jmp 0x405302
and dword [ebp - 0x8e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x8e0], eax
jge 0x405322
mov dword [ebp - 0x10dc], 1
jmp 0x405329
and dword [ebp - 0x10dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x148c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0x1340], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x130], eax
je 0x4056c2
mov dword [ebp - 0x360], 0xfffffffc
mov dword [ebp - 0x130], 3
jmp 0x405388
cmp dword [ebp - 0x130], 0x35
jne 0x4056a8
mov dword [ebp - 0x11f4], 1
mov dword [ebp - 0x444], 0
jmp 0x4053b8
cmp dword [ebp - 0x444], 2
jge 0x4053d4
mov byte [ebp - 0x1a9], 0
movzx eax, byte [ebp - 0x1a9]
test eax, eax
je 0x4056c0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x4056dc
mov byte [ebp - 0x227], 0
movzx eax, byte [ebp - 0x227]
test eax, eax
je 0x4056dc
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x1350], 0xa94a54
mov dword [ebp - 4], 0xdbc37078
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x134], 0xdb39523d
mov dword [ebp - 0x484], 0
jmp 0x40571a
cmp dword [ebp - 0x484], 2
jge 0x405736
mov eax, dword [ebp - 0x484]
mov dword [ebp + eax*4 - 0x1458], 0x43232af7
jmp 0x40570d
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10ec], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14a8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1358], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14b0], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x918], eax
mov byte [ebp - 0x1ab], 0x49
mov byte [ebp - 0x285], 0x4a
movzx eax, byte [ebp - 0x1ab]
imul eax, dword [ebp - 0x918]
mov ecx, dword [ebp - 0x10ec]
add ecx, eax
movzx eax, byte [ebp - 0x285]
imul eax, dword [ebp - 0x918]
sub ecx, eax
jne 0x40579d
pop edi
pop esi
mov esp, ebp
pop ebp
ret