Function at 0x452d6a
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca02b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xad8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x984], 0xbdde
mov dword [ebp - 0x980], 0xbdde
mov dword [ebp - 0x97c], 0xbdde
mov dword [ebp - 0x978], 0xbdde
mov dword [ebp - 0xb8], 0xfffffffa
mov dword [ebp - 0x754], 0xf33f
mov dword [ebp - 0x750], 0xf33f
mov dword [ebp - 0x74c], 0xf33f
mov dword [ebp - 0x748], 0xf33f
mov dword [ebp - 0x94c], 0x24307a32
mov dword [ebp - 0x1e4], 0
jmp 0x452e0c
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 4
jge 0x452e28
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x9d8], 0xfffffff6
jmp 0x452dff
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x452e52
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0xb8], 0
jmp 0x452e6b
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x453108
push 2
lea ecx, [ebp - 0x668]
call fcn.00450d2f
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x190], 0
jmp 0x452ea8
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x452eca
push dword [ebp - 0x190]
lea ecx, [ebp - 0x668]
call fcn.00450e1d
mov dword [eax], 0x4ccb63e8
jmp 0x452e9b
mov dword [ebp - 0x2ec], 0x7c9f
mov dword [ebp - 0x59c], str.yuu_asvxf_hrdhvu_eoij_fyzkcznvx_mimp_bxoku_aud_yay_wgzejd_fxfflfni_wrzvszlk
cmp dword [ebp - 0x2ec], 0x7d47
jle 0x452fc1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
and dword [ebp - 0xc8], 0
jmp 0x452f0e
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x49de
jge 0x452fc1
and dword [ebp - 0xc0], 0
jmp 0x452f34
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3e7c
jge 0x452fbc
and dword [ebp - 0x1ec], 0
jmp 0x452f56
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xdd3
jge 0x452fb7
mov ecx, dword [ebp - 0xc0]
add ecx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0xc8]
sar eax, cl
cdq
mov dword [ebp - 0x5b4], eax
mov dword [ebp - 0x5b0], edx
push dword [ebp - 0x5b0]
push dword [ebp - 0x5b4]
lea ecx, [ebp - 0xa34]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0xa34]
call fcn.00450c05
jmp 0x452f49
jmp 0x452f27
jmp 0x452f01
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x452fdf
push 0x2564
push 0x1c1a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
and dword [ebp - 4], 0
cmp dword [ebp - 0x2ec], 0x7aac
jge 0x452ffb
push dword [ebp - 0x59c]
call fcn.004b40b7
pop ecx
jmp 0x453017
or dword [ebp - 4], 0xffffffff
jmp 0x453021
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x96c], eax
push 0
lea ecx, [ebp - 0x668]
call fcn.00450e1d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x754], 1
je 0x453056
mov dword [ebp - 0x520], 1
jmp 0x45305d
and dword [ebp - 0x520], 0
push 0
lea ecx, [ebp - 0x668]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x520]
jne 0x453080
mov dword [ebp - 0x528], 1
jmp 0x453087
and dword [ebp - 0x528], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x754]
imul eax, dword [ebp - 0x528]
test eax, eax
jne 0x4530ba
push 0
lea ecx, [ebp - 0x668]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4530ba
and dword [ebp - 0x298], 0
jmp 0x4530c4
mov dword [ebp - 0x298], 1
mov eax, dword [ebp - 0x530]
cmp dword [ebp - 0x298], eax
jne 0x4530de
mov dword [ebp - 0x50c], 1
jmp 0x4530e5
and dword [ebp - 0x50c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x50c]
mov dword [ebp + eax - 0x9d8], ecx
lea ecx, [ebp - 0x668]
call fcn.00450e01
jmp 0x452e5e
push 1
lea ecx, [ebp - 0x6b8]
call fcn.00450d2f
mov dword [ebp - 0x998], 0xbdde
mov dword [ebp - 0x994], 0xbdde
mov dword [ebp - 0x990], 0xbdde
mov dword [ebp - 0x98c], 0xbdde
mov dword [ebp - 0xd0], 0xfffffffa
mov dword [ebp - 0x73c], 0xf33f
mov dword [ebp - 0x738], 0xf33f
mov dword [ebp - 0x734], 0xf33f
mov dword [ebp - 0x730], 0xf33f
mov dword [ebp - 0x85c], 0x24307a32
mov dword [ebp - 0x198], 0
jmp 0x453192
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x4531ae
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xa10], 0xfffffff6
jmp 0x453185
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x4531d8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0xd0], 0
jmp 0x4531f1
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x453355
push 2
lea ecx, [ebp - 0x678]
call fcn.00450d2f
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x1f4], 0
jmp 0x45322e
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x453250
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0x678]
call fcn.00450e1d
mov dword [eax], 0x4ccb63e8
jmp 0x453221
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x45326e
push 0x2564
push 0x1c1a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x934], eax
push 0
lea ecx, [ebp - 0x678]
call fcn.00450e1d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x73c], 1
je 0x4532a3
mov dword [ebp - 0x290], 1
jmp 0x4532aa
and dword [ebp - 0x290], 0
push 0
lea ecx, [ebp - 0x678]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x290]
jne 0x4532cd
mov dword [ebp - 0x2a4], 1
jmp 0x4532d4
and dword [ebp - 0x2a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x73c]
imul eax, dword [ebp - 0x2a4]
test eax, eax
jne 0x453307
push 0
lea ecx, [ebp - 0x678]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x453307
and dword [ebp - 0x2a0], 0
jmp 0x453311
mov dword [ebp - 0x2a0], 1
mov eax, dword [ebp - 0x488]
cmp dword [ebp - 0x2a0], eax
jne 0x45332b
mov dword [ebp - 0x3e8], 1
jmp 0x453332
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp + eax - 0xa10], ecx
lea ecx, [ebp - 0x678]
call fcn.00450e01
jmp 0x4531e4
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x4e0], 0xfffffff9
mov dword [ebp - 0x400], 0xffffffff
mov dword [ebp - 0x26c], 0xb6046e74
mov dword [ebp - 0x490], 0x9172ddb7
push 4
lea ecx, [ebp - 0x688]
call fcn.00450d2f
mov dword [ebp - 0x220], 0x80bfe737
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x3f8], 0xffffffff
mov dword [ebp - 0x408], 0xdbfd
mov dword [ebp - 0xd8], 0
jmp 0x4533df
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x453401
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x688]
call fcn.00450e1d
mov dword [eax], 1
jmp 0x4533d2
mov eax, 0x4ad744d0
test eax, eax
je 0x453542
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x220]
dec ecx
mov dword [ebp - 0x220], ecx
cmp eax, 0x14
jge 0x453447
cmp dword [ebp - 0x84], 0
je 0x453447
mov dword [ebp - 0x580], 1
jmp 0x45344e
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x95c], eax
or eax, 0xffffffff
cmp eax, 0x50714ba0
jb 0x453482
mov eax, 0x64e62b50
test eax, eax
jne 0x453482
and dword [ebp - 0x2a8], 0
jmp 0x45348c
mov dword [ebp - 0x2a8], 1
push 2
lea ecx, [ebp - 0x688]
call fcn.00450e1d
mov ecx, dword [ebp - 0x2a8]
cmp ecx, dword [eax]
jle 0x4534af
mov dword [ebp - 0x51c], 1
jmp 0x4534b6
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x4e0]
add eax, dword [ebp - 0x51c]
cmp dword [ebp - 0x84], eax
jle 0x4534d6
mov dword [ebp - 0x2b0], 1
jmp 0x4534dd
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0x2b0], eax
je 0x4534f7
mov dword [ebp - 0x3f0], 1
jmp 0x4534fe
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x3f0]
jne 0x45351e
cmp dword [ebp - 0x26c], 0
jne 0x45351e
and dword [ebp - 0x2b8], 0
jmp 0x453528
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0x2b8]
sub eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x84], eax
jg 0x45355c
mov dword [ebp - 0x2c0], 1
jmp 0x453563
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x86c], eax
push 2
lea ecx, [ebp - 0x688]
call fcn.00450e1d
push 2
lea ecx, [ebp - 0x688]
call fcn.00450e1d
mov dword [eax], 1
xor eax, eax
inc eax
cmp eax, 0xfffd
ja 0x4535b1
mov dword [ebp - 0x2c8], 1
jmp 0x4535b8
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0x4e0]
jge 0x4535d8
mov dword [ebp - 0x2d0], 1
jmp 0x4535df
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x2d0], eax
je 0x4535f9
mov dword [ebp - 0x2d8], 1
jmp 0x453600
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x2d8], eax
jne 0x45361a
mov dword [ebp - 0x498], 1
jmp 0x453621
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
lea ecx, [ebp - 0x688]
call fcn.00450e01
mov dword [ebp - 0x1a0], 0
jmp 0x45365e
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x453680
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x6b8]
call fcn.00450e1d
mov dword [eax], 0x91a049fe
jmp 0x453651
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x5a0], 0xfffffff7
mov dword [ebp - 0xe0], 0
jmp 0x4536aa
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x4536c6
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x7f0], 0xa8eac8b
jmp 0x45369d
mov dword [ebp - 0x34], 0
jmp 0x4536d6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x4536f2
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x4536f0
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
jmp 0x4536cf
mov dword [ebp - 0x34], 0x11
jmp 0x453702
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x14
jl 0x453af6
mov dword [ebp - 0x4a0], 0xa4d9a54e
mov dword [ebp - 0x1fc], 0
jmp 0x45372f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x45374b
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x8c], 0xfffffff9
jmp 0x453722
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8c], 0
jmp 0x453779
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0xfffffff9
jle 0x453af1
mov dword [ebp - 0x5c], 0x836b16b4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x5c], 0
jmp 0x4537aa
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x453aec
mov dword [ebp - 0x2e8], 0x6001
mov dword [ebp - 0x57c], str.zavovxld_ijxncn_befybnhp_vpt_bgu_lezegkeeq_vpvbtsu_tet
cmp dword [ebp - 0x2e8], 0x6029
jle 0x4538d6
and dword [ebp - 0x204], 0
jmp 0x4537ee
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x4f3d
jge 0x4538d6
and dword [ebp - 0xe8], 0
jmp 0x453814
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xf1e
jge 0x4538d1
and dword [ebp - 0x1a8], 0
jmp 0x45383a
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x7edf
jge 0x4538cc
and dword [ebp - 0xf0], 0
jmp 0x453860
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x55e4
jge 0x4538c7
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0xf0]
sar eax, cl
or eax, dword [ebp - 0x204]
cdq
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], edx
push dword [ebp - 0x5bc]
push dword [ebp - 0x5c0]
lea ecx, [ebp - 0xa58]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0xa58]
call fcn.00450c05
jmp 0x453853
jmp 0x45382d
jmp 0x453807
jmp 0x4537e1
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2e8], 0x5ed7
jge 0x4538f5
push dword [ebp - 0x57c]
call fcn.004b40b7
pop ecx
jmp 0x453911
or dword [ebp - 4], 0xffffffff
jmp 0x45391b
mov dword [ebp - 0x308], 0xfffffff8
mov dword [ebp - 0xf8], 0
jmp 0x45393e
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x45395a
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x518], 1
jmp 0x453931
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x518], 0
jmp 0x453988
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x518]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x518], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x518], 3
jg 0x453ae7
mov dword [ebp - 0x5a8], 0xdba1dd79
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x7f0], 0
jne 0x4539c0
xor eax, eax
jne 0x4539c0
and dword [ebp - 0x508], 0
jmp 0x4539ca
mov dword [ebp - 0x508], 1
cmp dword [ebp - 0x508], 0xffffffff
jl 0x4539df
mov dword [ebp - 0x2f0], 1
jmp 0x4539e6
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x2f0], eax
je 0x453a07
mov dword [ebp - 0x410], 1
jmp 0x453a0e
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7f0]
cmp dword [ebp - 0x410], eax
jg 0x453a2f
mov dword [ebp - 0x2f8], 1
jmp 0x453a36
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x4a0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp eax, dword [ebp - 0x4a0]
je 0x453a63
mov dword [ebp - 0x300], 1
jmp 0x453a6a
and dword [ebp - 0x300], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x518]
cmp dword [ebp - 0x300], eax
jne 0x453a8b
mov dword [ebp - 0x418], 1
jmp 0x453a92
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x7f0]
cmp eax, dword [ebp - 0x418]
jle 0x453ab0
mov dword [ebp - 0x578], 1
jmp 0x453ab7
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x7f0]
add eax, 0x3a7e
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x308], 0xfffffff6
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x5a8], eax
jmp 0x45396d
jmp 0x4537a3
jmp 0x45375e
jmp 0x4536fb
push 0
lea ecx, [ebp - 0x6b8]
call fcn.00450e1d
and dword [eax], 0
jmp 0x453b2c
push 0
lea ecx, [ebp - 0x6b8]
call fcn.00450e1d
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4e8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6b8]
call fcn.00450e1d
cmp dword [eax], 6
jl 0x455265
mov dword [ebp - 0x230], 0x58ed
push 2
lea ecx, [ebp - 0x720]
call fcn.00450d2f
mov dword [ebp - 0x1b0], 0x6c9cd49f
mov dword [ebp - 0x268], 0
push 2
lea ecx, [ebp - 0x7b0]
call fcn.00450d2f
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x430], 0x6095dbc2
mov dword [ebp - 0x94], 0xfc167656
mov dword [ebp - 0x4b0], 0x13ed423c
mov dword [ebp - 0x630], 1
mov dword [ebp - 0x3c], 0
jmp 0x453bbc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x453bd8
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x720]
call fcn.00450e1d
mov dword [eax], 0x87a7525d
jmp 0x453bb5
mov dword [ebp - 0x3c], 0
jmp 0x453be8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x453c04
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x7b0]
call fcn.00450e1d
mov dword [eax], 0x7e815f84
jmp 0x453be1
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x310], eax
push 1
lea ecx, [ebp - 0x720]
call fcn.00450e1d
mov ecx, dword [ebp - 0x310]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x310], eax
jle 0x453c3f
mov dword [ebp - 0x318], 1
jmp 0x453c46
and dword [ebp - 0x318], 0
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x420], eax
push 1
lea ecx, [ebp - 0x7b0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x420]
mov dword [eax], ecx
mov eax, dword [ebp - 0x420]
neg eax
cmp eax, dword [ebp - 0x1b0]
jg 0x453c94
mov dword [ebp - 0x4a8], 1
jmp 0x453c9b
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x318]
cmp eax, dword [ebp - 0x4a8]
jle 0x453cb5
mov dword [ebp - 0x320], 1
jmp 0x453cbc
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xfffffffb
je 0x453cd1
mov dword [ebp - 0x428], 1
jmp 0x453cd8
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0x49cec79e
jl 0x453cf9
cmp dword [ebp - 0x268], 0
je 0x453cf9
mov dword [ebp - 0x328], 1
jmp 0x453d00
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 0x886255d5
jae 0x453d18
mov dword [ebp - 0x52c], 1
jmp 0x453d1f
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x52c], eax
jl 0x453d39
mov dword [ebp - 0x330], 1
jmp 0x453d40
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0
je 0x453d6e
push 1
lea ecx, [ebp - 0x720]
call fcn.00450e1d
xor eax, eax
add eax, 0xffff1ef7
cmp eax, dword [ebp - 0x1b0]
jne 0x453d89
mov dword [ebp - 0x338], 1
jmp 0x453d90
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x4b0], eax
je 0x453dc2
mov dword [ebp - 0x340], 1
jmp 0x453dc9
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x98], 0
jmp 0x453dee
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xffffffee
je 0x453e39
mov dword [ebp - 0x94], 0
jmp 0x453e10
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x453e37
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x453e35
push 0x20f6
push 0xfe9
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x453e03
jmp 0x453de1
lea ecx, [ebp - 0x7b0]
call fcn.00450e01
lea ecx, [ebp - 0x720]
call fcn.00450e01
mov dword [ebp - 0x20], 0x5052061f
mov dword [ebp - 0x28], 0x31eb2391
mov dword [ebp - 0x90], 0xfffffffa
mov dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x20], 1
jb 0x453e8c
mov dword [ebp - 0x438], 1
jmp 0x453e93
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x438], eax
jl 0x453eaa
mov dword [ebp - 0x348], 1
jmp 0x453eb1
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x348], eax
jg 0x453ec8
mov dword [ebp - 0x4f0], 1
jmp 0x453ecf
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
inc eax
inc eax
cmp eax, dword [ebp - 0x20]
je 0x453ee8
mov dword [ebp - 0x350], 1
jmp 0x453eef
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x20]
jle 0x453f0c
cmp dword [ebp - 0x20], 0
jne 0x453f0c
and dword [ebp - 0x440], 0
jmp 0x453f16
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x453f97
mov dword [ebp - 0x874], 0xfffffff8
mov dword [ebp - 0x4b8], 0x7511ecbf
imul eax, dword [ebp - 0x20], 0
imul eax, dword [ebp - 0x4b8]
cmp eax, dword [ebp - 0x20]
jg 0x453f58
cmp dword [ebp - 0x28], 0
jne 0x453f58
and dword [ebp - 0x358], 0
jmp 0x453f62
mov dword [ebp - 0x358], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x358], eax
jne 0x453f79
mov dword [ebp - 0x360], 1
jmp 0x453f80
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x4b8]
add eax, dword [ebp - 0x360]
mov dword [ebp - 0x90], eax
jmp 0x45408b
mov dword [ebp - 0x448], 0x3481
mov dword [ebp - 0x638], str.ocfzhbp_wekpb_gqmr_howfenqwp_lwt_yyoaghn
cmp dword [ebp - 0x448], 0x35e2
jle 0x45402e
and dword [ebp - 0x100], 0
jmp 0x453fcd
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x237c
jge 0x45402e
and dword [ebp - 0x20c], 0
jmp 0x453fef
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x12da
jge 0x45402c
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x20c]
cdq
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5c8], edx
push dword [ebp - 0x5c8]
push dword [ebp - 0x5cc]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x453fe2
jmp 0x453fc0
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x454042
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x448], 0x3336
jge 0x454065
mov edx, dword [ebp - 0x638]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x454081
or dword [ebp - 4], 0xffffffff
jmp 0x45408b
cmp dword [ebp - 0x90], 0
jne 0x454124
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x20], 0
jne 0x4540c3
cmp dword [ebp - 0x28], 0
jne 0x4540c3
cmp dword [ebp - 0x28], 0
jne 0x4540c3
push 2
pop eax
test eax, eax
jne 0x4540c3
and dword [ebp - 0x368], 0
jmp 0x4540cd
mov dword [ebp - 0x368], 1
cmp dword [ebp - 0x368], 0xfffd
jb 0x4540e5
mov dword [ebp - 0x510], 1
jmp 0x4540ec
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x510]
je 0x454103
mov dword [ebp - 0x370], 1
jmp 0x45410a
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x370]
cmp eax, dword [ebp - 0x90]
jg 0x454124
and dword [ebp - 0x450], 0
jmp 0x45412e
mov dword [ebp - 0x450], 1
cmp dword [ebp - 0x450], 6
jne 0x454143
mov dword [ebp - 0x378], 1
jmp 0x45414a
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x20]
jl 0x454167
mov dword [ebp - 0x4c0], 1
jmp 0x45416e
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x777f
jne 0x454186
mov dword [ebp - 0x380], 1
jmp 0x45418d
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x7924
jle 0x4541b1
mov dword [ebp - 0x458], 1
jmp 0x4541b8
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x458]
cmp eax, 1
jge 0x4541d2
mov dword [ebp - 0x388], 1
jmp 0x4541d9
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xfffffffc
jle 0x4541ee
mov dword [ebp - 0x4f8], 1
jmp 0x4541f5
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x128], 0xed080c17
push 2
lea ecx, [ebp - 0x6a8]
call fcn.00450d2f
push 2
lea ecx, [ebp - 0x7bc]
call fcn.00450d2f
mov dword [ebp - 0x648], 0xa1a4d63a
push 4
lea ecx, [ebp - 0x7c8]
call fcn.00450d2f
mov dword [ebp - 0x800], 1
mov dword [ebp - 0x7fc], 1
mov dword [ebp - 0x7f8], 1
mov dword [ebp - 0x7f4], 1
mov dword [ebp - 0xac], 0x9d3388a0
mov dword [ebp - 0x87c], 0xc895
mov dword [ebp - 0x900], 0x97689278
mov dword [ebp - 0x14], 0
jmp 0x454299
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4542b2
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6a8]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x454292
mov dword [ebp - 0x14], 0
jmp 0x4542c2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4542de
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7bc]
call fcn.00450e1d
mov dword [eax], 9
jmp 0x4542bb
mov dword [ebp - 0x14], 0
jmp 0x4542ee
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x45430a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7c8]
call fcn.00450e1d
mov dword [eax], 1
jmp 0x4542e7
mov dword [ebp - 0x14], 0
jmp 0x45431a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x454330
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8a0], 0x8d247f69
jmp 0x454313
push 1
lea ecx, [ebp - 0x6a8]
call fcn.00450e1d
mov dword [eax], 0xffffffea
jmp 0x454369
push 1
lea ecx, [ebp - 0x6a8]
call fcn.00450e1d
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x390]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x6a8]
call fcn.00450e1d
cmp dword [eax], 0xfffffff4
je 0x454806
mov dword [ebp - 0x2c], 0xe2c0d37a
mov dword [ebp - 0x650], 0xfffffffe
push 3
lea ecx, [ebp - 0x698]
call fcn.00450d2f
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x460], 0x819b53b3
mov dword [ebp - 0x108], 0
jmp 0x4543ca
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x4543e9
push dword [ebp - 0x108]
lea ecx, [ebp - 0x698]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x4543bd
mov dword [ebp - 0x2c], 1
jmp 0x4543f9
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x4547f6
mov dword [ebp - 0x478], 0xffffffff
mov dword [ebp - 0x884], 0x1bf07968
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x658], 2
push 3
lea ecx, [ebp - 0x568]
call fcn.00450d2f
mov dword [ebp - 0x904], 0x19c36c1
mov dword [ebp - 0x88c], 0x1d4b4ea6
mov dword [ebp - 0x470], 0xffffffff
mov dword [ebp - 0x110], 0
jmp 0x45446f
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x454491
push dword [ebp - 0x110]
lea ecx, [ebp - 0x568]
call fcn.00450e1d
mov dword [eax], 0x7af9ca3e
jmp 0x454462
cmp dword [ebp - 0x460], 0
je 0x4544ff
push 2
lea ecx, [ebp - 0x568]
call fcn.00450e1d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0x470], eax
jl 0x4544ce
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x4544ce
and dword [ebp - 0x250], 0
jmp 0x4544d8
mov dword [ebp - 0x250], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax - 0x800], ecx
cmp dword [ebp - 0x250], 0
je 0x4544ff
mov dword [ebp - 0x398], 1
jmp 0x454506
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0x78c2ba28
jg 0x45451e
mov dword [ebp - 0x4c8], 1
jmp 0x454525
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x4c8]
jne 0x454541
xor eax, eax
inc eax
jne 0x454541
and dword [ebp - 0x3a0], 0
jmp 0x45454b
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3a0], eax
je 0x454562
mov dword [ebp - 0x238], 1
jmp 0x454569
and dword [ebp - 0x238], 0
push 1
lea ecx, [ebp - 0x7c8]
call fcn.00450e1d
mov ecx, dword [ebp - 0x238]
mov dword [eax], ecx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x7bc]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x238]
jle 0x4545a2
mov dword [ebp - 0x468], 1
jmp 0x4545a9
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0
jae 0x4545be
mov dword [ebp - 0x3a8], 1
jmp 0x4545c5
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0xaac4e246
jbe 0x4545e9
mov dword [ebp - 0x3b0], 1
jmp 0x4545f0
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x470]
sub eax, 6
mov dword [ebp - 0x3b8], eax
push 0
lea ecx, [ebp - 0x568]
call fcn.00450e1d
mov ecx, dword [ebp - 0x3b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x648], eax
push 2
lea ecx, [ebp - 0x698]
call fcn.00450e1d
push 2
lea ecx, [ebp - 0x698]
call fcn.00450e1d
cmp dword [eax], 0xe55e
jg 0x454688
cmp dword [ebp - 0x650], 0
je 0x454688
mov dword [ebp - 0x4d0], 1
jmp 0x45468f
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x4d0]
jge 0x4546a6
mov dword [ebp - 0x3c0], 1
jmp 0x4546ad
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x2c], eax
jg 0x4546d0
mov dword [ebp - 0x3c8], 1
jmp 0x4546d7
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x3c8], eax
jle 0x4546f8
mov dword [ebp - 0x500], 1
jmp 0x4546ff
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 9
jne 0x454714
mov dword [ebp - 0x3d0], 1
jmp 0x45471b
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0
jge 0x454730
mov dword [ebp - 0x480], 1
jmp 0x454737
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0x9de5
je 0x45474f
mov dword [ebp - 0x3d8], 1
jmp 0x454756
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x3d8], eax
jle 0x454770
mov dword [ebp - 0x4d8], 1
jmp 0x454777
and dword [ebp - 0x4d8], 0
push 2
lea ecx, [ebp - 0x568]
call fcn.00450e1d
mov esi, dword [ebp - 0x4d8]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x698]
call fcn.00450e1d
cmp esi, dword [eax]
jle 0x4547a9
mov dword [ebp - 0x3e0], 1
jmp 0x4547b0
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0x3e0], eax
jle 0x4547ca
mov dword [ebp - 0x294], 1
jmp 0x4547d1
and dword [ebp - 0x294], 0
push 0
lea ecx, [ebp - 0x568]
call fcn.00450e1d
mov ecx, dword [ebp - 0x294]
mov dword [eax], ecx
lea ecx, [ebp - 0x568]
call fcn.00450e01
jmp 0x4543f2
lea ecx, [ebp - 0x698]
call fcn.00450e01
jmp 0x454345
lea ecx, [ebp - 0x7c8]
call fcn.00450e01
lea ecx, [ebp - 0x7bc]
call fcn.00450e01
lea ecx, [ebp - 0x6a8]
call fcn.00450e01
mov dword [ebp - 0x68c], 0xfffffff7
push 4
lea ecx, [ebp - 0x8b8]
call fcn.00450d2f
mov dword [ebp - 0x114], 0
jmp 0x454857
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 4
jge 0x454879
push dword [ebp - 0x114]
lea ecx, [ebp - 0x8b8]
call fcn.00450e1d
mov dword [eax], 8
jmp 0x45484a
mov dword [ebp - 0x29c], 0x7ac2
mov dword [ebp - 0x6fc], str.qpeoozt_ddofxplxe_ayurrhzrk_yivn_uoss_oxqll
cmp dword [ebp - 0x29c], 0x7e8c
jle 0x454970
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
and dword [ebp - 0x120], 0
jmp 0x4548bd
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x321e
jge 0x454970
and dword [ebp - 0x118], 0
jmp 0x4548e3
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x349
jge 0x45496b
and dword [ebp - 0x214], 0
jmp 0x454905
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x1b58
jge 0x454966
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x214]
shl eax, cl
or eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x570], edx
push dword [ebp - 0x570]
push dword [ebp - 0x574]
lea ecx, [ebp - 0xa7c]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0xa7c]
call fcn.00450c05
jmp 0x4548f8
jmp 0x4548d6
jmp 0x4548b0
mov byte [ebp - 0x7c], 0
mov dword [ebp - 4], 6
cmp dword [ebp - 0x29c], 0x7976
jge 0x454993
push dword [ebp - 0x6fc]
call fcn.004b40b7
pop ecx
jmp 0x4549af
or dword [ebp - 4], 0xffffffff
jmp 0x4549b9
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x4549cf
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x4549e3
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
lea ecx, [ebp - 0x8b8]
call fcn.00450e01
mov dword [ebp - 0x21c], 0
jmp 0x454a07
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x454a23
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xad0], 0xf84b8114
jmp 0x4549fa
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x28c], 0x2304b25b
mov dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x240], 0
je 0x454a61
cmp dword [ebp - 0x240], 0
je 0x454a61
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x28c], eax
jmp 0x454a81
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x454a81
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x128], 0
jmp 0x454a9a
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x455255
mov byte [ebp - 0x68], 0
mov dword [ebp - 0x768], 0xfffffffb
mov dword [ebp - 0x764], 0xfffffffb
mov dword [ebp - 0x760], 0xfffffffb
mov dword [ebp - 0x75c], 0xfffffffb
lea ecx, [ebp - 0x261]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x758]
push eax
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp - 0xa00]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x278]
call fcn.00450ddb
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0x598], 0xffffffff
mov dword [ebp - 0x590], 0xffff
mov dword [ebp - 0x44], 0
jmp 0x454b36
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x454b4c
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x9a4], 0xeac8b13e
jmp 0x454b2f
mov dword [ebp - 0x44], 0
jmp 0x454b5c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x454b72
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x744], 0x57736d0c
jmp 0x454b55
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
and dword [eax], 0
jmp 0x454ba8
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2ac]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
cmp dword [eax], 2
jg 0x455016
push 1
lea ecx, [ebp - 0x284]
call fcn.00450d2f
push 3
lea ecx, [ebp - 0x78c]
call fcn.00450d2f
mov dword [ebp - 0x50], 0
jmp 0x454be8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x454c04
push dword [ebp - 0x50]
lea ecx, [ebp - 0x284]
call fcn.00450e1d
mov dword [eax], 0xc9ca3191
jmp 0x454be1
mov dword [ebp - 0x50], 0
jmp 0x454c14
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x454c2d
push dword [ebp - 0x50]
lea ecx, [ebp - 0x78c]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x454c0d
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x454c52
push 0x1dd7
push 0x2135
push 0
push 0x264b
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
cmp dword [ebp - 0x2d4], 0
je 0x454dcb
cmp dword [ebp - 0x598], 0
je 0x454c86
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
cmp dword [eax], 0
je 0x454c86
mov dword [ebp - 0x2b4], 1
jmp 0x454c8d
and dword [ebp - 0x2b4], 0
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
mov ecx, dword [ebp - 0x2b4]
cmp ecx, dword [eax]
jne 0x454cb0
mov dword [ebp - 0x2bc], 1
jmp 0x454cb7
and dword [ebp - 0x2bc], 0
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2bc]
je 0x454cda
mov dword [ebp - 0x2c4], 1
jmp 0x454ce1
and dword [ebp - 0x2c4], 0
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
mov eax, dword [eax]
lea eax, [ebp + eax*4 - 0x9a4]
mov dword [ebp - 0x2cc], eax
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
mov ecx, dword [ebp - 0x2cc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c4]
dec eax
mov ecx, dword [ebp - 0x2cc]
cmp dword [ecx], eax
jl 0x454d32
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
cmp dword [ebp - 0x2d4], 0
jne 0x454d4d
mov eax, 0x2af
test eax, eax
jne 0x454d4d
and dword [ebp - 0x2dc], 0
jmp 0x454d57
mov dword [ebp - 0x2dc], 1
cmp dword [ebp - 0x2dc], 0
je 0x454d6c
mov dword [ebp - 0x258], 1
jmp 0x454d73
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x744], ecx
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
mov esi, dword [ebp - 0x258]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x454dcb
mov byte [ebp - 0x64], 0
movzx eax, byte [ebp - 0x64]
test eax, eax
je 0x454dc6
push 0x1eaf
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
jmp 0x454ffb
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x1f8], 0
jmp 0x454dee
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x454e0a
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x920], 0xf51b4373
jmp 0x454de1
mov esi, dword [ebp - 0x224]
push 0
lea ecx, [ebp - 0x278]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x454e2d
mov dword [ebp - 0x2e4], 1
jmp 0x454e34
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0x514f
je 0x454e4c
mov dword [ebp - 0x304], 1
jmp 0x454e53
and dword [ebp - 0x304], 0
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x454f41
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x744]
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x454ea6
xor eax, eax
jne 0x454ea6
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x454ea6
and dword [ebp - 0x288], 0
jmp 0x454eb0
mov dword [ebp - 0x288], 1
push 1
lea ecx, [ebp - 0x278]
call fcn.00450e1d
mov ecx, dword [ebp - 0x288]
cmp ecx, dword [eax]
jl 0x454ed3
mov dword [ebp - 0x2f4], 1
jmp 0x454eda
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0xf0aeacb2
jb 0x454ef2
mov dword [ebp - 0x2fc], 1
jmp 0x454ef9
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x2fc], eax
jl 0x454f13
mov dword [ebp - 0x248], 1
jmp 0x454f1a
and dword [ebp - 0x248], 0
push 0
lea ecx, [ebp - 0x284]
call fcn.00450e1d
mov ecx, dword [ebp - 0x248]
mov dword [eax], ecx
cmp dword [ebp - 0x248], 0
jne 0x454f41
and dword [ebp - 0x30c], 0
jmp 0x454f4b
mov dword [ebp - 0x30c], 1
mov eax, dword [ebp - 0x304]
imul eax, dword [ebp - 0x30c]
cmp eax, 7
ja 0x454f69
mov dword [ebp - 0x314], 1
jmp 0x454f70
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x5ee87909
jg 0x454f88
mov dword [ebp - 0x31c], 1
jmp 0x454f8f
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x224], eax
mov esi, dword [ebp - 0x224]
push 1
lea ecx, [ebp - 0x78c]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x454fbe
mov dword [ebp - 0x324], 1
jmp 0x454fc5
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x920], ecx
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x454ffb
push 0
push 0x20b8
push 0x613
push 0x20a7
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
lea ecx, [ebp - 0x78c]
call fcn.00450e01
lea ecx, [ebp - 0x284]
call fcn.00450e01
jmp 0x454b84
lea ecx, [ebp - 0x278]
call fcn.00450e01
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x455250
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x36c], 0x549e
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x634], 1
mov dword [ebp - 0x374], 0x85ba5616
mov dword [ebp - 0x594], 0xffffffff
mov dword [ebp - 0x130], 0
jmp 0x45507f
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x45509b
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x9b0], 0xffffffff
jmp 0x455072
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x928], eax
imul eax, dword [ebp - 0x48], 9
cmp eax, dword [ebp - 0x48]
jge 0x4550c2
mov dword [ebp - 0x32c], 1
jmp 0x4550c9
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
sub eax, dword [ebp - 0x36c]
cmp eax, dword [ebp - 0x344]
jge 0x4550e9
mov dword [ebp - 0x334], 1
jmp 0x4550f0
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0x89f7
jge 0x455108
mov dword [ebp - 0x33c], 1
jmp 0x45510f
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
sub eax, dword [ebp - 0x344]
cmp eax, 0xffffffff
jne 0x45512c
mov dword [ebp - 0x34c], 1
jmp 0x455133
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34c], eax
jle 0x455142
xor eax, eax
jne 0x455150
or eax, 0xffffffff
jne 0x455150
and dword [ebp - 0x354], 0
jmp 0x45515a
mov dword [ebp - 0x354], 1
mov eax, dword [ebp - 0x354]
sub eax, dword [ebp - 0x634]
je 0x45517a
cmp dword [ebp - 0x48], 0
je 0x45517a
mov dword [ebp - 0x35c], 1
jmp 0x455181
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x35c], eax
jne 0x455198
mov dword [ebp - 0x364], 1
jmp 0x45519f
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x374], eax
jl 0x4551c5
mov dword [ebp - 0x22c], 1
jmp 0x4551cc
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0x9b0], ecx
mov eax, dword [ebp - 0x22c]
neg eax
cmp eax, dword [ebp - 0x48]
jne 0x4551f8
mov dword [ebp - 0x37c], 1
jmp 0x4551ff
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0x2c0d
jle 0x455217
mov dword [ebp - 0x384], 1
jmp 0x45521e
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x384]
jne 0x455235
mov dword [ebp - 0x38c], 1
jmp 0x45523c
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x594], eax
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
jmp 0x454a8d
cmp dword [ebp - 0x68c], 0
je 0x455260
jmp 0x455265
jmp 0x453b08
lea ecx, [ebp - 0x6b8]
call fcn.00450e01
push 1
lea ecx, [ebp - 0x6c8]
call fcn.00450d2f
mov dword [ebp - 0x1d8], 0
jmp 0x455296
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x4552b8
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x6c8]
call fcn.00450e1d
mov dword [eax], 0x91a049fe
jmp 0x455289
push 0
lea ecx, [ebp - 0x6c8]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4552ee
push 0
lea ecx, [ebp - 0x6c8]
call fcn.00450e1d
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6c8]
call fcn.00450e1d
cmp dword [eax], 6
jl 0x455395
mov dword [ebp - 0x218], 0xed080c17
mov dword [ebp - 0x56c], 0xfffffff7
mov dword [ebp - 0x138], 0
jmp 0x455331
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x45534d
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0xaac], 0xf84b8114
jmp 0x455324
mov dword [ebp - 0x218], 0
jmp 0x455366
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jg 0x455385
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x455383
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
jmp 0x455359
cmp dword [ebp - 0x56c], 0
je 0x455390
jmp 0x455395
jmp 0x4552ca
lea ecx, [ebp - 0x6c8]
call fcn.00450e01
mov dword [ebp - 0x60], 0x5540d7f8
mov dword [ebp - 0x60], 0x1b
jmp 0x4553b7
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff0
je 0x45547f
mov dword [ebp - 0x140], 0xdce9d05b
mov dword [ebp - 0x140], 0
jmp 0x4553e4
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xffffffed
je 0x45547a
mov dword [ebp - 0x1e0], 0xff82ff40
mov dword [ebp - 0x1e0], 0
jmp 0x455414
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jne 0x455475
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x45543b
push 0
push 0x1921
push 0x129d
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x455473
push 0x16d1
push 0x1225
push 0x2164
push 0xbb4
push 0x246e
push 0
push 0
push 0
push 0
push 0xe31
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x455407
jmp 0x4553d7
jmp 0x4553b0
mov dword [ebp - 0x60], 0xffffffe8
jmp 0x45548f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff4
jge 0x4555e4
mov dword [ebp - 0x200], 0x4f3d4e6
mov dword [ebp - 0x148], 0
jmp 0x4554bc
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 4
jge 0x4554d8
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x9e8], 0x94d03572
jmp 0x4554af
mov dword [ebp - 0x200], 0xfffffffd
jmp 0x4554f1
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x11
jg 0x4555cb
mov dword [ebp - 0x150], 0
jmp 0x455517
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x455533
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x554], 0x17059141
jmp 0x45550a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x554], 4
jmp 0x455561
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x554]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x554], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x554], 0xa
jg 0x4555b2
mov dword [ebp - 0x9c], 0xd303f024
mov dword [ebp - 0x9c], 3
jmp 0x455594
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x4555b0
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x9e8], 0
jmp 0x455587
jmp 0x455546
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x4555c6
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x4554e4
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x4555df
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x455488
mov dword [ebp - 0x58], 0x5540d7f8
mov dword [ebp - 0x58], 0x1b
jmp 0x4555fb
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff0
je 0x4560a7
mov dword [ebp - 0x170], 0xdce9d05b
mov dword [ebp - 0x24], 6
push 1
lea ecx, [ebp - 0x53c]
call fcn.00450d2f
mov dword [ebp - 0x64c], 0x4caa8e55
mov dword [ebp - 0x8cc], 0xffffffff
mov dword [ebp - 0x930], 9
mov dword [ebp - 0x5a4], 0xbe92e3f9
mov dword [ebp - 0x8dc], 6
mov dword [ebp - 0x6cc], 0x3de467b4
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x6ec], 0xedb6b7be
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x5ac], 0x870b1b9b
mov dword [ebp - 0x39c], 0x73e2
mov dword [ebp - 0x63c], str.kvfvxvq_sgfhlwoa_iyexfo_tgrsejun_plqbxyvx_riczaopm_lofbkz_tqp_inznaji
cmp dword [ebp - 0x39c], 0x74d8
jle 0x4557b6
and dword [ebp - 0x1e8], 0
jmp 0x4556cb
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x3cbd
jge 0x4557b6
and dword [ebp - 0x158], 0
jmp 0x4556f1
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4137
jge 0x4557b1
and dword [ebp - 0x210], 0
jmp 0x455717
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x8007
jge 0x4557ac
and dword [ebp - 0x160], 0
jmp 0x45573d
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x764a
jge 0x4557a7
mov eax, dword [ebp - 0x1e8]
cdq
idiv dword [ebp - 0x158]
mov ecx, dword [ebp - 0x210]
sar edx, cl
xor edx, dword [ebp - 0x160]
mov eax, edx
cdq
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], edx
push dword [ebp - 0x5dc]
push dword [ebp - 0x5e0]
lea ecx, [ebp - 0xaa0]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0xaa0]
call fcn.00450c05
jmp 0x455730
jmp 0x45570a
jmp 0x4556e4
jmp 0x4556be
mov dword [ebp - 0x1f0], 0
jmp 0x4557cf
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x4557f1
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x53c]
call fcn.00450e1d
mov dword [eax], 0x2a1836cc
jmp 0x4557c2
mov dword [ebp - 4], 8
cmp dword [ebp - 0x39c], 0x706c
jge 0x455810
push dword [ebp - 0x63c]
call fcn.004b40b7
pop ecx
jmp 0x45582c
or dword [ebp - 4], 0xffffffff
jmp 0x455836
mov dword [ebp - 0x24], 0
jmp 0x455846
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff2
jne 0x4558c5
push 2
lea ecx, [ebp - 0x7e0]
call fcn.00450d2f
mov dword [ebp - 0x168], 0
jmp 0x455872
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jge 0x455891
push dword [ebp - 0x168]
lea ecx, [ebp - 0x7e0]
call fcn.00450e1d
and dword [eax], 0
jmp 0x455865
push 0
lea ecx, [ebp - 0x7e0]
call fcn.00450e1d
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3a4]
mov dword [ecx], eax
lea ecx, [ebp - 0x7e0]
call fcn.00450e01
jmp 0x45583f
mov dword [ebp - 0x24], 0
jmp 0x4558d5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x455c38
push 3
lea ecx, [ebp - 0x6d8]
call fcn.00450d2f
mov dword [ebp - 0x8ec], 0xc9995890
mov dword [ebp - 0x940], 0x8939f5fa
mov dword [ebp - 0x8fc], 0xe6b6cd3
mov dword [ebp - 0x948], 0
mov dword [ebp - 0x950], 0xfffffffa
mov dword [ebp - 0x808], 0xee56e31b
mov dword [ebp - 0x5d0], 0xffffffff
mov dword [ebp - 0x5b8], 1
mov dword [ebp - 0x810], 0xffffffff
push 4
lea ecx, [ebp - 0x7a4]
call fcn.00450d2f
mov dword [ebp - 0x30], 0
jmp 0x455963
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x45597f
push dword [ebp - 0x30]
lea ecx, [ebp - 0x6d8]
call fcn.00450e1d
mov dword [eax], 0x83066c93
jmp 0x45595c
mov dword [ebp - 0x30], 0
jmp 0x45598f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x4559ab
push dword [ebp - 0x30]
lea ecx, [ebp - 0x7a4]
call fcn.00450e1d
mov dword [eax], 4
jmp 0x455988
push 1
lea ecx, [ebp - 0x6d8]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4559e1
push 1
lea ecx, [ebp - 0x6d8]
call fcn.00450e1d
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3ac]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x6d8]
call fcn.00450e1d
cmp dword [eax], 0
jg 0x455c01
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x208], 0
jmp 0x455a1a
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x455a36
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x5c4], 0xaa61fc2d
jmp 0x455a0d
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x6cc], eax
jne 0x455a50
mov dword [ebp - 0x3bc], 1
jmp 0x455a57
and dword [ebp - 0x3bc], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x53c]
call fcn.00450e1d
mov ecx, dword [ebp - 0x5ac]
cmp dword [eax], ecx
jge 0x455a82
push 9
pop eax
test eax, eax
je 0x455a82
mov dword [ebp - 0x644], 1
jmp 0x455a89
and dword [ebp - 0x644], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x53c]
call fcn.00450e1d
cmp dword [ebp - 0x3d4], 1
jg 0x455aac
mov dword [ebp - 0x3b4], 1
jmp 0x455ab3
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0x3bc], eax
jne 0x455ad3
mov dword [ebp - 0x3c4], 1
jmp 0x455ada
and dword [ebp - 0x3c4], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x53c]
call fcn.00450e1d
mov ecx, dword [ebp - 0x3c4]
add ecx, dword [eax]
jne 0x455b0e
push dword [ebp - 0x24]
lea ecx, [ebp - 0x53c]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x455b0e
and dword [ebp - 0x3cc], 0
jmp 0x455b18
mov dword [ebp - 0x3cc], 1
mov eax, dword [ebp - 0x69c]
cmp dword [ebp - 0x3cc], eax
jne 0x455b32
mov dword [ebp - 0x3dc], 1
jmp 0x455b39
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x3dc], eax
je 0x455b53
mov dword [ebp - 0x3e4], 1
jmp 0x455b5a
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp + eax - 0x5c4], ecx
mov esi, dword [ebp - 0x64c]
add esi, dword [ebp - 0x3e4]
push 1
lea ecx, [ebp - 0x7a4]
call fcn.00450e1d
sub esi, dword [eax]
add esi, dword [ebp - 0x3ec]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x53c]
call fcn.00450e1d
cmp dword [eax], esi
jne 0x455bc5
mov dword [ebp - 0x3f4], 1
jmp 0x455bcc
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
add eax, 7
cmp eax, dword [ebp - 0x5d0]
jle 0x455be9
mov dword [ebp - 0x3fc], 1
jmp 0x455bf0
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x6ec], eax
jmp 0x4559bd
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x455c1d
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
lea ecx, [ebp - 0x7a4]
call fcn.00450e01
lea ecx, [ebp - 0x6d8]
call fcn.00450e01
jmp 0x4558ce
lea ecx, [ebp - 0x53c]
call fcn.00450e01
mov dword [ebp - 0x170], 0
jmp 0x455c5c
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xffffffed
je 0x4560a2
mov dword [ebp - 0x404], 0xc2e
mov dword [ebp - 0x5d8], str.hurwqgj_evxl_svaysu_qsib_jfljpw_vic_ren
cmp dword [ebp - 0x404], 0xe29
jle 0x455d9b
and dword [ebp - 0x1d4], 0
jmp 0x455ca3
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x5021
jge 0x455d68
and dword [ebp - 0x1c4], 0
jmp 0x455cc9
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x19f9
jge 0x455d63
and dword [ebp - 0x178], 0
jmp 0x455cef
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x2e76
jge 0x455d5e
and dword [ebp - 0x180], 0
jmp 0x455d11
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x6c5e
jge 0x455d5c
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x1d4]
shl eax, cl
xor eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0x5e8], edx
push dword [ebp - 0x5e8]
push dword [ebp - 0x5ec]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x455d04
jmp 0x455ce2
jmp 0x455cbc
jmp 0x455c96
push 0x1bb3
push 0x193f
push 0x556
push 0x98a
push 0x20b6
push 0xf15
push 0x3e9
push 0x719
push 0x1b92
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x404], 0x86f
jge 0x455dbe
mov edx, dword [ebp - 0x5d8]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x455dda
or dword [ebp - 4], 0xffffffff
jmp 0x455de4
push 2
lea ecx, [ebp - 0x774]
call fcn.00450d2f
mov dword [ebp - 0x38], 0
jmp 0x455e01
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x455e17
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x88], 0
jmp 0x455dfa
mov dword [ebp - 0x38], 0
jmp 0x455e27
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x455e43
push dword [ebp - 0x38]
lea ecx, [ebp - 0x774]
call fcn.00450e1d
mov dword [eax], 0x405b4019
jmp 0x455e20
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88], 0
jmp 0x455e71
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x88], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0xffffffe4
jl 0x455fe7
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1dc], 0xfffffffc
jmp 0x455ea8
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xffffffee
jl 0x455fe2
mov dword [ebp - 0x188], 0x822e6e7f
mov dword [ebp - 0x4c], 0
jmp 0x455ecf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x455ee5
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x818], 0xffffffff
jmp 0x455ec8
mov dword [ebp - 0x4c], 0
jmp 0x455ef5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x455f0b
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x8ac], 0x55a6
jmp 0x455eee
mov dword [ebp - 0x188], 0
jmp 0x455f24
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jg 0x455fdd
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x820], 0xe26595ad
mov dword [ebp - 0xb0], 1
jmp 0x455f5e
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x455fd8
push 1
lea ecx, [ebp - 0x7d4]
call fcn.00450d2f
mov dword [ebp - 0xb4], 0
jmp 0x455f8d
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x455fac
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x7d4]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x455f80
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x8ac]
push 0
lea ecx, [ebp - 0x7d4]
call fcn.00450e1d
mov dword [eax], esi
lea ecx, [ebp - 0x7d4]
call fcn.00450e01
jmp 0x455f51
jmp 0x455f17
jmp 0x455e9b
jmp 0x455e56
push 0
lea ecx, [ebp - 0x774]
call fcn.00450e1d
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp + ecx - 0x88], eax
lea ecx, [ebp - 0x774]
call fcn.00450e01
mov dword [ebp - 0xbc], 0xff82ff40
mov dword [ebp - 0xbc], 0
jmp 0x45603c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jne 0x45609d
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x456063
push 0
push 0x1921
push 0x129d
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov byte [ebp - 0x63], 0
movzx eax, byte [ebp - 0x63]
test eax, eax
je 0x45609b
push 0x16d1
push 0x1225
push 0x2164
push 0xbb4
push 0x246e
push 0
push 0
push 0
push 0
push 0xe31
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x45602f
jmp 0x455c4f
jmp 0x4555f4
mov dword [ebp - 0x58], 0xffffffe8
jmp 0x4560b7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff4
jge 0x456453
mov dword [ebp - 0xec], 0x4f3d4e6
mov dword [ebp - 0x40c], 0x534b
mov dword [ebp - 0x654], str.dkcmrslcs_qovswknw_wcln_oep_zmss_adkgzb_ddag_ylftkttu_texselg_aino_zga_cpwk
cmp dword [ebp - 0x40c], 0x556f
jle 0x4561ed
and dword [ebp - 0xd4], 0
jmp 0x456105
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x78cc
jge 0x4561ed
and dword [ebp - 0xc4], 0
jmp 0x45612b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x3e43
jge 0x4561e8
and dword [ebp - 0xcc], 0
jmp 0x456151
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x6a45
jge 0x4561e3
and dword [ebp - 0xdc], 0
jmp 0x456177
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x743a
jge 0x4561de
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xcc]
sar eax, cl
and eax, dword [ebp - 0xd4]
and eax, dword [ebp - 0xdc]
cdq
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], edx
push dword [ebp - 0x5f4]
push dword [ebp - 0x5f8]
lea ecx, [ebp - 0xac4]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0xac4]
call fcn.00450c05
jmp 0x45616a
jmp 0x456144
jmp 0x45611e
jmp 0x4560f8
mov dword [ebp - 0xe4], 0
jmp 0x456206
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x456222
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x9f8], 0x94d03572
jmp 0x4561f9
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x40c], 0x5280
jge 0x456241
push dword [ebp - 0x654]
call fcn.004b40b7
pop ecx
jmp 0x45625d
or dword [ebp - 4], 0xffffffff
jmp 0x456267
mov dword [ebp - 0xec], 0xfffffffd
jmp 0x456280
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x11
jg 0x45635a
mov dword [ebp - 0xf4], 0
jmp 0x4562a6
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x4562c2
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x544], 0x17059141
jmp 0x456299
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x544], 4
jmp 0x4562f0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x544]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x544], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x544], 0xa
jg 0x456341
mov dword [ebp - 0xa4], 0xd303f024
mov dword [ebp - 0xa4], 3
jmp 0x456323
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x45633f
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x9f8], 0
jmp 0x456316
jmp 0x4562d5
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x456355
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x456273
mov dword [ebp - 0x414], 0x5616
mov dword [ebp - 0x5e4], str.tytbyqxe_jxmz_zdlyu_gdtkokmz_amw_mecqme_hwvuylvv
cmp dword [ebp - 0x414], 0x59ad
jle 0x4563f1
and dword [ebp - 0xfc], 0
jmp 0x456390
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x3345
jge 0x4563f1
and dword [ebp - 0x104], 0
jmp 0x4563b2
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x27ac
jge 0x4563ef
mov eax, dword [ebp - 0xfc]
and eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x604], eax
mov dword [ebp - 0x600], edx
push dword [ebp - 0x600]
push dword [ebp - 0x604]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4563a5
jmp 0x456383
mov byte [ebp - 0x65], 0
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x414], 0x5321
jge 0x456418
mov edx, dword [ebp - 0x5e4]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x456434
or dword [ebp - 4], 0xffffffff
jmp 0x45643e
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x45644e
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x4560b0
movzx eax, byte [0xacb540]
test eax, eax
je 0x456471
mov esi, 0x4cf650
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x4577bd
mov dword [ebp - 0x41c], 0x8094a188
mov dword [ebp - 0x828], 0x822cb3a3
mov dword [ebp - 0x830], 0xffffffff
mov dword [ebp - 0x424], 0x5b0e
mov dword [ebp - 0x10c], 0
jmp 0x4564b2
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x4564ce
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x9c8], 0
jmp 0x4564a5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c8]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
je 0x456596
mov dword [ebp - 0x838], 0xb0ceafd
mov dword [ebp - 0x840], 0x36f6dd8d
mov dword [ebp - 0x848], 0xffffffff
mov dword [ebp - 0x850], 0xca9d6923
mov dword [ebp - 0x858], 0x5cbcef05
mov dword [ebp - 0x860], 0xdda37bb0
push 2
lea ecx, [ebp - 0x8c8]
call fcn.00450d2f
mov dword [ebp - 0x868], 0xffffffff
mov dword [ebp - 0x11c], 0
jmp 0x45655a
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x45657c
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x8c8]
call fcn.00450e1d
mov dword [eax], 0xd9ddcef9
jmp 0x45654d
mov eax, dword [ebp - 0x424]
dec eax
mov dword [ebp - 0x424], eax
lea ecx, [ebp - 0x8c8]
call fcn.00450e01
jmp 0x4565af
mov byte [ebp - 0x80], 0
movzx eax, byte [ebp - 0x80]
test eax, eax
je 0x4565af
push 0
push 0xf42
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov dword [ebp - 0x870], 0x4cf650
mov dword [ebp - 0x878], 0x4cf654
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x42c], 0x2304b25b
mov dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x23c], 0
je 0x456601
cmp dword [ebp - 0x23c], 0
je 0x456601
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x42c], eax
jmp 0x456621
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x42c], eax
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x456621
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov byte [0xacb540], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x4cf6d0
mov dword [ebp - 0x474], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x4cf6d0
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x434], 0x8094a188
mov dword [ebp - 0x880], 0x822cb3a3
mov dword [ebp - 0x888], 0xffffffff
mov dword [ebp - 0x43c], 0x5b0e
mov dword [ebp - 0x124], 0
jmp 0x45668e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x4566aa
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x9bc], 0
jmp 0x456681
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9bc]
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0
je 0x456772
mov dword [ebp - 0x890], 0xb0ceafd
mov dword [ebp - 0x898], 0x36f6dd8d
mov dword [ebp - 0x8a4], 0xffffffff
mov dword [ebp - 0x958], 0xca9d6923
mov dword [ebp - 0x960], 0x5cbcef05
mov dword [ebp - 0x968], 0xdda37bb0
push 2
lea ecx, [ebp - 0x8d8]
call fcn.00450d2f
mov dword [ebp - 0x970], 0xffffffff
mov dword [ebp - 0x12c], 0
jmp 0x456736
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x456758
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x8d8]
call fcn.00450e1d
mov dword [eax], 0xd9ddcef9
jmp 0x456729
mov eax, dword [ebp - 0x43c]
dec eax
mov dword [ebp - 0x43c], eax
lea ecx, [ebp - 0x8d8]
call fcn.00450e01
jmp 0x45678b
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x45678b
push 0
push 0xf42
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov dword [ebp - 0xa0], 0x15252cb1
mov dword [ebp - 0x944], 7
push 3
lea ecx, [ebp - 0x72c]
call fcn.00450d2f
mov dword [ebp - 0x44c], 0xc3d0
mov dword [ebp - 0x54], 0
jmp 0x4567c6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x4567dc
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa88], 1
jmp 0x4567bf
mov dword [ebp - 0x54], 0
jmp 0x4567ec
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x456808
push dword [ebp - 0x54]
lea ecx, [ebp - 0x72c]
call fcn.00450e1d
mov dword [eax], 0x76c51653
jmp 0x4567e5
mov dword [ebp - 0x444], 0x5e69
mov dword [ebp - 0x5f0], str.qttlfk_sqghooplz_sdm_clyf_ffcsq_dmj
cmp dword [ebp - 0x444], 0x5fda
jle 0x4568f8
and dword [ebp - 0x144], 0
jmp 0x456842
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xdb1
jge 0x4568f8
and dword [ebp - 0x134], 0
jmp 0x456868
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x44dd
jge 0x4568f3
and dword [ebp - 0x13c], 0
jmp 0x45688a
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x23f2
jge 0x4568ee
mov eax, dword [ebp - 0x134]
cdq
idiv dword [ebp - 0x13c]
mov eax, dword [ebp - 0x144]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], edx
push dword [ebp - 0x60c]
push dword [ebp - 0x610]
lea ecx, [ebp - 0xae8]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0xae8]
call fcn.00450c05
jmp 0x45687d
jmp 0x45685b
jmp 0x456835
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x45690a
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x444], 0x5da8
jge 0x456929
push dword [ebp - 0x5f0]
call fcn.004b40b7
pop ecx
jmp 0x456945
or dword [ebp - 4], 0xffffffff
jmp 0x45694f
mov dword [ebp - 0xa0], 2
jmp 0x456968
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x456a81
mov dword [ebp - 0x65c], 0xfffffff6
mov dword [ebp - 0x80c], 0xdafbbd0a
mov dword [ebp - 0x5fc], 0x87c7ab89
mov dword [ebp - 0x14c], 0
jmp 0x4569ac
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x4569c8
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x6e8], 0xfffffff6
jmp 0x45699f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6e8], 0
jmp 0x4569f6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6e8], 2
jg 0x456a1f
mov dword [ebp - 0x908], 7
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
jmp 0x4569db
push 2
lea ecx, [ebp - 0x72c]
call fcn.00450e1d
mov esi, dword [ebp - 0x65c]
push 0
lea ecx, [ebp - 0x72c]
call fcn.00450e1d
imul esi, dword [eax]
cmp esi, dword [ebp - 0xa0]
jl 0x456a56
mov dword [ebp - 0x244], 1
jmp 0x456a5d
and dword [ebp - 0x244], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0x6e8], ecx
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x5fc], eax
jmp 0x45695b
lea ecx, [ebp - 0x72c]
call fcn.00450e01
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x454], 0x2304b25b
mov dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x24c], 0
je 0x456aca
cmp dword [ebp - 0x24c], 0
je 0x456aca
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x454], eax
jmp 0x456aea
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x454], eax
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x456aea
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov eax, dword [ebp - 0x474]
mov dword [0x4cf650], eax
mov dword [ebp - 0xa8], 0x15252cb1
mov dword [ebp - 0x814], 7
push 3
lea ecx, [ebp - 0x714]
call fcn.00450d2f
mov dword [ebp - 0x45c], 0xc3d0
mov dword [ebp - 0x40], 0
jmp 0x456b30
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x456b46
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xa40], 1
jmp 0x456b29
mov dword [ebp - 0x40], 0
jmp 0x456b56
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x456b72
push dword [ebp - 0x40]
lea ecx, [ebp - 0x714]
call fcn.00450e1d
mov dword [eax], 0x76c51653
jmp 0x456b4f
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x456b84
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0xa8], 2
jmp 0x456b9d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x456cb6
mov dword [ebp - 0x608], 0xfffffff6
mov dword [ebp - 0x964], 0xdafbbd0a
mov dword [ebp - 0x66c], 0x87c7ab89
mov dword [ebp - 0x154], 0
jmp 0x456be1
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x456bfd
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x6f8], 0xfffffff6
jmp 0x456bd4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6f8], 0
jmp 0x456c2b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6f8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6f8], 2
jg 0x456c54
mov dword [ebp - 0x81c], 7
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
jmp 0x456c10
push 2
lea ecx, [ebp - 0x714]
call fcn.00450e1d
mov esi, dword [ebp - 0x608]
push 0
lea ecx, [ebp - 0x714]
call fcn.00450e1d
imul esi, dword [eax]
cmp esi, dword [ebp - 0xa8]
jl 0x456c8b
mov dword [ebp - 0x254], 1
jmp 0x456c92
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0x6f8], ecx
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x66c], eax
jmp 0x456b90
lea ecx, [ebp - 0x714]
call fcn.00450e01
mov eax, dword [ebp - 0x25c]
mov dword [0x4cf654], eax
push 2
lea ecx, [ebp - 0x8e8]
call fcn.00450d2f
push 2
lea ecx, [ebp - 0x780]
call fcn.00450d2f
mov dword [ebp - 0x18], 0
jmp 0x456cf6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x456d0c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54c], 4
jmp 0x456cef
mov dword [ebp - 0x18], 0
jmp 0x456d1c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x456d38
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8e8]
call fcn.00450e1d
mov dword [eax], 0xa3b3f365
jmp 0x456d15
mov dword [ebp - 0x18], 0
jmp 0x456d48
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x456d64
push dword [ebp - 0x18]
lea ecx, [ebp - 0x780]
call fcn.00450e1d
mov dword [eax], 0x509e71b3
jmp 0x456d41
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54c], 0
jmp 0x456d92
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54c], 0xfffffffd
jle 0x456eed
push 1
lea ecx, [ebp - 0x708]
call fcn.00450d2f
mov dword [ebp - 0x910], 0x509978f3
mov dword [ebp - 0x824], 0xb055cc25
mov dword [ebp - 0x804], 0xb68dee21
mov dword [ebp - 0x82c], 1
mov dword [ebp - 0x918], 0x70a3267e
mov dword [ebp - 0x834], 0x18d9dce
mov dword [ebp - 0x15c], 0
jmp 0x456e08
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x456e2a
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x708]
call fcn.00450e1d
mov dword [eax], 0x22124f84
jmp 0x456dfb
push 0
lea ecx, [ebp - 0x708]
call fcn.00450e1d
mov dword [eax], 0x19
jmp 0x456e63
push 0
lea ecx, [ebp - 0x708]
call fcn.00450e1d
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x464]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x708]
call fcn.00450e1d
cmp dword [eax], 0
jle 0x456edd
mov dword [ebp - 0x974], 0x98764276
mov dword [ebp - 0x164], 0
jmp 0x456e98
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x456eb4
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xa64], 0xffffffff
jmp 0x456e8b
push 1
lea ecx, [ebp - 0x780]
call fcn.00450e1d
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x46c]
mov dword [ecx], eax
jmp 0x456e3f
lea ecx, [ebp - 0x708]
call fcn.00450e01
jmp 0x456d77
lea ecx, [ebp - 0x780]
call fcn.00450e01
lea ecx, [ebp - 0x8e8]
call fcn.00450e01
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x25c]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x474]
mov ecx, dword [eax + ecx]
call fcn.00452d21
mov dword [ebp - 0x6bc], eax
push 2
lea ecx, [ebp - 0x8f8]
call fcn.00450d2f
push 2
lea ecx, [ebp - 0x798]
call fcn.00450d2f
mov dword [ebp - 0x1c], 0
jmp 0x456f56
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x456f6c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x55c], 4
jmp 0x456f4f
mov dword [ebp - 0x1c], 0
jmp 0x456f7c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x456f98
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8f8]
call fcn.00450e1d
mov dword [eax], 0xa3b3f365
jmp 0x456f75
mov dword [ebp - 0x1c], 0
jmp 0x456fa8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x456fc4
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x798]
call fcn.00450e1d
mov dword [eax], 0x509e71b3
jmp 0x456fa1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x55c], 0
jmp 0x456ff2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x55c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x55c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x55c], 0xfffffffd
jle 0x45714d
push 1
lea ecx, [ebp - 0x58c]
call fcn.00450d2f
mov dword [ebp - 0x83c], 0x509978f3
mov dword [ebp - 0x924], 0xb055cc25
mov dword [ebp - 0x844], 0xb68dee21
mov dword [ebp - 0x954], 1
mov dword [ebp - 0x84c], 0x70a3267e
mov dword [ebp - 0x92c], 0x18d9dce
mov dword [ebp - 0x16c], 0
jmp 0x457068
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x45708a
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x58c]
call fcn.00450e1d
mov dword [eax], 0x22124f84
jmp 0x45705b
push 0
lea ecx, [ebp - 0x58c]
call fcn.00450e1d
mov dword [eax], 0x19
jmp 0x4570c3
push 0
lea ecx, [ebp - 0x58c]
call fcn.00450e1d
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x47c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x58c]
call fcn.00450e1d
cmp dword [eax], 0
jle 0x45713d
mov dword [ebp - 0x854], 0x98764276
mov dword [ebp - 0x174], 0
jmp 0x4570f8
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x457114
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xa1c], 0xffffffff
jmp 0x4570eb
push 1
lea ecx, [ebp - 0x798]
call fcn.00450e1d
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x484]
mov dword [ecx], eax
jmp 0x45709f
lea ecx, [ebp - 0x58c]
call fcn.00450e01
jmp 0x456fd7
lea ecx, [ebp - 0x798]
call fcn.00450e01
lea ecx, [ebp - 0x8f8]
call fcn.00450e01
push 1
lea ecx, [ebp - 0x1d0]
call fcn.00450d2f
mov dword [ebp - 0x17c], 0
jmp 0x457189
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x4571a8
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
and dword [eax], 0
jmp 0x45717c
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x4571cb
push 0x184c
push 0
push 0x2ec
push 0x1845
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4571e9
mov dword [ebp - 0x4ac], 1
jmp 0x4571f0
and dword [ebp - 0x4ac], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
cmp dword [eax], 0
je 0x4572b5
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
cmp dword [eax], 0xbce008fb
jae 0x457234
mov dword [ebp - 0x48c], 1
jmp 0x45723b
and dword [ebp - 0x48c], 0
mov esi, dword [ebp - 0x48c]
sub esi, 0x44cf
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
cmp esi, dword [eax]
jne 0x457264
mov dword [ebp - 0x494], 1
jmp 0x45726b
and dword [ebp - 0x494], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [eax]
jl 0x45728e
mov dword [ebp - 0x49c], 1
jmp 0x457295
and dword [ebp - 0x49c], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x49c]
add ecx, dword [eax]
je 0x4572b5
and dword [ebp - 0x4a4], 0
jmp 0x4572bf
mov dword [ebp - 0x4a4], 1
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x4a4]
cmp ecx, dword [eax]
jg 0x4572e2
mov dword [ebp - 0x614], 1
jmp 0x4572e9
and dword [ebp - 0x614], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
cmp dword [ebp - 0x4ac], 1
jae 0x457318
mov dword [ebp - 0x4b4], 1
jmp 0x45731f
and dword [ebp - 0x4b4], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4b4]
jl 0x457342
mov dword [ebp - 0x4bc], 1
jmp 0x457349
and dword [ebp - 0x4bc], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x4bc]
mov dword [eax], ecx
lea ecx, [ebp - 0x1d0]
call fcn.00450e01
push dword [ebp - 0x25c]
mov edx, 0x4cf67c
mov ecx, dword [ebp - 0x6bc]
call fcn.00452d2d
pop ecx
push 1
lea ecx, [ebp - 0x1c0]
call fcn.00450d2f
mov dword [ebp - 0x184], 0
jmp 0x4573a6
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x4573c5
push dword [ebp - 0x184]
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
and dword [eax], 0
jmp 0x457399
mov dword [ebp - 0x4cc], 0x72ea
mov dword [ebp - 0x67c], str.dfqo_qlsfg_fptwgzyw_oldl_ofurar_lvkro_tbt_lczakt_ccdz_ffvtkohp_xydif_qilimkdyn
cmp dword [ebp - 0x4cc], 0x75b9
jle 0x45745f
and dword [ebp - 0x18c], 0
jmp 0x4573fb
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x67ab
jge 0x45745f
and dword [ebp - 0x194], 0
jmp 0x45741d
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x3842
jge 0x45745d
mov eax, dword [ebp - 0x18c]
cdq
idiv dword [ebp - 0x194]
mov eax, edx
cdq
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
push dword [ebp - 0x618]
push dword [ebp - 0x61c]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x457410
jmp 0x4573ee
mov dword [ebp - 0x4c4], 0x1bca
mov dword [ebp - 0x620], str.zki_kbdnbkg_khal_mnxsywkl_twoklkm
cmp dword [ebp - 0x4c4], 0x1ce7
jle 0x45755c
and dword [ebp - 0x1b4], 0
jmp 0x457499
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x942
jge 0x45755c
and dword [ebp - 0x1ac], 0
jmp 0x4574bf
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x62e6
jge 0x457557
and dword [ebp - 0x19c], 0
jmp 0x4574e5
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x29be
jge 0x457552
and dword [ebp - 0x1a4], 0
jmp 0x457507
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x5f5e
jge 0x457550
mov eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0x1a4]
and eax, dword [ebp - 0x1ac]
xor eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], edx
push dword [ebp - 0x624]
push dword [ebp - 0x628]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4574fa
jmp 0x4574d8
jmp 0x4574b2
jmp 0x45748c
mov byte [ebp - 0x6d], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x4c4], 0x1879
jge 0x457583
mov edx, dword [ebp - 0x620]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x45759f
or dword [ebp - 4], 0xffffffff
jmp 0x4575a9
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x4575c8
push 0x184c
push 0
push 0x2ec
push 0x1845
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x4cc], 0x721e
jge 0x4575eb
mov edx, dword [ebp - 0x67c]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x457607
or dword [ebp - 4], 0xffffffff
jmp 0x457611
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x45762f
mov dword [ebp - 0x4f4], 1
jmp 0x457636
and dword [ebp - 0x4f4], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
cmp dword [eax], 0
je 0x4576fb
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
cmp dword [eax], 0xbce008fb
jae 0x45767a
mov dword [ebp - 0x4d4], 1
jmp 0x457681
and dword [ebp - 0x4d4], 0
mov esi, dword [ebp - 0x4d4]
sub esi, 0x44cf
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
cmp esi, dword [eax]
jne 0x4576aa
mov dword [ebp - 0x4dc], 1
jmp 0x4576b1
and dword [ebp - 0x4dc], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [eax]
jl 0x4576d4
mov dword [ebp - 0x4e4], 1
jmp 0x4576db
and dword [ebp - 0x4e4], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x4e4]
add ecx, dword [eax]
je 0x4576fb
and dword [ebp - 0x4ec], 0
jmp 0x457705
mov dword [ebp - 0x4ec], 1
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x4ec]
cmp ecx, dword [eax]
jg 0x457728
mov dword [ebp - 0x62c], 1
jmp 0x45772f
and dword [ebp - 0x62c], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
cmp dword [ebp - 0x4f4], 1
jae 0x45775e
mov dword [ebp - 0x4fc], 1
jmp 0x457765
and dword [ebp - 0x4fc], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4fc]
jl 0x457788
mov dword [ebp - 0x504], 1
jmp 0x45778f
and dword [ebp - 0x504], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x504]
mov dword [eax], ecx
lea ecx, [ebp - 0x1c0]
call fcn.00450e01
mov esi, 0x4cf650
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret