Function at 0x450e52
Capabilities:
Create directory
Get file attributes
Modify service
Query environment variable
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x18a0
call fcn.004aa220
push esi
push edi
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x278], 0xfffffffd
mov dword [ebp - 0xeb4], 0xf78d7cba
mov dword [ebp - 0xfec], 0x7d6446bd
cmp dword [ebp - 0x20c], 0
je 0x450ea7
cmp dword [ebp - 0x20c], 0
je 0x450ea7
mov dword [ebp - 0xce8], 1
jmp 0x450eae
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
ja 0x4510a6
mov dword [ebp - 0x1cc], 0x3c61
mov dword [ebp - 0xee8], 0x72c02a30
mov dword [ebp - 0x94], 0
jmp 0x450ef4
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x450f10
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x17c8], 9
jmp 0x450ee7
mov dword [ebp - 0x94], 0
jmp 0x450f29
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x450f45
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x17ec], 1
jmp 0x450f1c
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x16f4], eax
cmp dword [ebp - 0x1cc], 0
jne 0x450ffe
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x17c8], 0xfbc9fa8b
mov eax, 0xfbc9fa8b
neg eax
sub eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x1cc]
je 0x450f99
cmp dword [ebp - 0x20c], 0
je 0x450f99
mov dword [ebp - 0xea4], 1
jmp 0x450fa0
and dword [ebp - 0xea4], 0
cmp dword [ebp - 0xea4], 0
jg 0x450fb5
mov dword [ebp - 0xeac], 1
jmp 0x450fbc
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x16b8], eax
mov eax, dword [ebp - 0xeac]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1568], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xeb4], eax
cmp dword [ebp - 0xeb4], 0
jne 0x450ffe
and dword [ebp - 0xebc], 0
jmp 0x451008
mov dword [ebp - 0xebc], 1
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0xee8], eax
cmp dword [ebp - 0xee8], 0xd3e9
jl 0x45102c
mov dword [ebp - 0xef0], 1
jmp 0x451033
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0xef0], eax
jne 0x45104d
mov dword [ebp - 0xef8], 1
jmp 0x451054
and dword [ebp - 0xef8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x17ec]
cmp dword [ebp - 0xef8], eax
jg 0x451075
mov dword [ebp - 0xf00], 1
jmp 0x45107c
and dword [ebp - 0xf00], 0
cmp dword [ebp - 0xf00], 1
jae 0x451091
mov dword [ebp - 0xf08], 1
jmp 0x451098
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0xf08]
mov dword [ebp - 0xfec], eax
jmp 0x4510be
mov byte [ebp - 0x176], 0
movzx eax, byte [ebp - 0x176]
test eax, eax
je 0x4510be
call dword [sym.imp.GDI32.dll_GdiFlush]
push 2
lea ecx, [ebp - 0x11b0]
call fcn.0041257d
mov dword [ebp - 0x1d4], 0x5379a1d1
mov dword [ebp - 0xaa0], 0x2c160ec2
push 4
lea ecx, [ebp - 0x12d4]
call fcn.0041257d
mov dword [ebp - 0x560], 3
mov dword [ebp - 0x30], 0
jmp 0x451106
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x45111c
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x84], 0xf5872d9e
jmp 0x4510ff
mov dword [ebp - 0x30], 0
jmp 0x45112c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x451148
push dword [ebp - 0x30]
lea ecx, [ebp - 0x11b0]
call fcn.0041261e
mov dword [eax], 0xf390f3bd
jmp 0x451125
mov dword [ebp - 0x30], 0
jmp 0x451158
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x451174
push dword [ebp - 0x30]
lea ecx, [ebp - 0x12d4]
call fcn.0041261e
mov dword [eax], 0x26ffea1e
jmp 0x451151
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x4511a2
push 0x1555
push 0x24d1
push 0x10a9
push 0x1419
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
mov dword [ebp - 0x16c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
mov dword [ebp - 0x1570], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x84], 0x42c7
je 0x4511e7
mov dword [ebp - 0xf10], 1
jmp 0x4511ee
and dword [ebp - 0xf10], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x84]
imul esi, dword [ebp - 0xf10]
push 1
lea ecx, [ebp - 0x11b0]
call fcn.0041261e
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x11b0]
call fcn.0041261e
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x84]
cmp dword [eax], ecx
jge 0x45123b
mov dword [ebp - 0xf18], 1
jmp 0x451242
and dword [ebp - 0xf18], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xf18], eax
jg 0x451263
mov dword [ebp - 0xf20], 1
jmp 0x45126a
and dword [ebp - 0xf20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xf20], eax
jne 0x45128b
mov dword [ebp - 0xf28], 1
jmp 0x451292
and dword [ebp - 0xf28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
imul eax, dword [ebp - 0xf28]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x84]
je 0x4512d3
push 1
lea ecx, [ebp - 0x11b0]
call fcn.0041261e
cmp dword [eax], 0
je 0x4512d3
mov dword [ebp - 0xc68], 1
jmp 0x4512da
and dword [ebp - 0xc68], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc68]
sub ecx, dword [ebp + eax - 0x84]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x84]
jne 0x451308
mov dword [ebp - 0xa68], 1
jmp 0x45130f
and dword [ebp - 0xa68], 0
cmp dword [ebp - 0xa68], 0x6658d83f
jne 0x451327
mov dword [ebp - 0x528], 1
jmp 0x45132e
and dword [ebp - 0x528], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x528], eax
jle 0x45134f
mov dword [ebp - 0xa70], 1
jmp 0x451356
and dword [ebp - 0xa70], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xa70], eax
jl 0x451377
mov dword [ebp - 0x530], 1
jmp 0x45137e
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x530], eax
jge 0x45139f
mov dword [ebp - 0xa78], 1
jmp 0x4513a6
and dword [ebp - 0xa78], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xa78], eax
jge 0x4513c7
mov dword [ebp - 0x538], 1
jmp 0x4513ce
and dword [ebp - 0x538], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp eax, dword [ebp - 0x538]
je 0x4513f1
xor eax, eax
inc eax
jne 0x4513f1
and dword [ebp - 0xa80], 0
jmp 0x4513fb
mov dword [ebp - 0xa80], 1
cmp dword [ebp - 0xa80], 0xb441
jne 0x451413
mov dword [ebp - 0x540], 1
jmp 0x45141a
and dword [ebp - 0x540], 0
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x540], 0xfffffff6
cmp dword [ebp + eax - 0x84], ecx
jne 0x451445
cmp dword [ebp - 0x1d4], 0
je 0x451445
mov dword [ebp - 0xa88], 1
jmp 0x45144c
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0xa88]
sub eax, dword [ebp - 0x1d4]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x84]
mov dword [ebp - 0x548], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x548]
mov dword [ebp + eax - 0x84], ecx
cmp dword [ebp - 0x548], 0
je 0x45149c
mov eax, 0x7d3d8e1c
test eax, eax
je 0x45149c
mov dword [ebp - 0xa90], 1
jmp 0x4514a3
and dword [ebp - 0xa90], 0
cmp dword [ebp - 0xa90], 0xffff
je 0x4514cb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x84], 0
je 0x4514cb
mov dword [ebp - 0x550], 1
jmp 0x4514d2
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
sub eax, 0x860c
cmp eax, dword [ebp - 0x1d4]
jg 0x4514f1
mov dword [ebp - 0xa98], 1
jmp 0x4514f8
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x16a0], eax
mov eax, 0xf65ce17c
cmp eax, 0xfffffff7
jb 0x451536
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
je 0x451536
mov dword [ebp - 0x558], 1
jmp 0x45153d
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xaa0], eax
mov esi, dword [ebp - 0xaa0]
inc esi
inc esi
push 0
lea ecx, [ebp - 0x12d4]
call fcn.0041261e
cmp esi, dword [eax]
jl 0x45156e
mov dword [ebp - 0x10d0], 1
jmp 0x451575
and dword [ebp - 0x10d0], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x1578], eax
mov esi, dword [ebp - 0x560]
push 3
lea ecx, [ebp - 0x12d4]
call fcn.0041261e
mov dword [eax], esi
lea ecx, [ebp - 0x12d4]
call fcn.00412619
lea ecx, [ebp - 0x11b0]
call fcn.00412619
push 3
lea ecx, [ebp - 0x11c0]
call fcn.0041257d
mov dword [ebp - 0x1dc], 0x39beb064
mov dword [ebp - 0x184], 0x55950707
mov dword [ebp - 0x330], 0
jmp 0x4515e6
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jge 0x451608
push dword [ebp - 0x330]
lea ecx, [ebp - 0x11c0]
call fcn.0041261e
mov dword [eax], 0xbbca6318
jmp 0x4515d9
mov byte [ebp - 0x173], 0
movzx eax, byte [ebp - 0x173]
test eax, eax
je 0x451620
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 0x1dc], 2
jmp 0x451639
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jl 0x45177e
push 3
lea ecx, [ebp - 0x1438]
call fcn.0041257d
mov dword [ebp - 0x280], 0
jmp 0x45166c
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x45168b
push dword [ebp - 0x280]
lea ecx, [ebp - 0x1438]
call fcn.0041261e
or dword [eax], 0xffffffff
jmp 0x45165f
push 0
lea ecx, [ebp - 0x1438]
call fcn.0041261e
mov dword [eax], 0xdb8faaae
mov dword [ebp - 0x184], 0xdb8faaae
mov dword [ebp - 0x184], 2
jmp 0x4516c1
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x45176e
mov dword [ebp - 0x22c], 0x18e418a5
mov dword [ebp - 0x22c], 2
jmp 0x4516f1
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x451769
mov dword [ebp - 0x388], 1
mov dword [ebp - 0x388], 2
jmp 0x45171d
mov eax, dword [ebp - 0x388]
dec eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0
jl 0x451764
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x11c0]
call fcn.0041261e
push dword [ebp - 0x184]
lea ecx, [ebp - 0x11c0]
call fcn.0041261e
mov esi, 0x9f3faa32
sub esi, dword [eax]
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x11c0]
call fcn.0041261e
mov dword [eax], esi
jmp 0x451710
jmp 0x4516e4
jmp 0x4516b4
lea ecx, [ebp - 0x1438]
call fcn.00412619
jmp 0x45162c
lea ecx, [ebp - 0x11c0]
call fcn.00412619
mov dword [ebp - 0x1f4], 1
push 2
lea ecx, [ebp - 0x4cc]
call fcn.0041257d
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x288], 0
jmp 0x4517c0
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x4517e2
push dword [ebp - 0x288]
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
mov dword [eax], 7
jmp 0x4517b3
mov dword [ebp - 0x74], 1
jmp 0x4517f2
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x4519be
mov dword [ebp - 0x4a8], 0x8e2294bb
mov dword [ebp - 0x10e8], 0x89063530
mov dword [ebp - 0x338], 0
jmp 0x451829
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 4
jge 0x451845
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x1878], 0x9d2e819d
jmp 0x45181c
cmp dword [ebp - 0x74], 0xffffffff
jl 0x451857
mov dword [ebp - 0xaa8], 1
jmp 0x45185e
and dword [ebp - 0xaa8], 0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
mov ecx, dword [ebp - 0xaa8]
cmp ecx, dword [eax]
jg 0x451882
mov dword [ebp - 0x10d8], 1
jmp 0x451889
and dword [ebp - 0x10d8], 0
push 0
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
mov esi, eax
push 1
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
imul eax, dword [eax], 0xfbf6
cmp dword [esi], eax
jl 0x4518bb
mov dword [ebp - 0x568], 1
jmp 0x4518c2
and dword [ebp - 0x568], 0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
mov ecx, dword [ebp - 0x568]
cmp ecx, dword [eax]
jge 0x4518e6
mov dword [ebp - 0x10e0], 1
jmp 0x4518ed
and dword [ebp - 0x10e0], 0
push 0
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
push dword [ebp - 0x74]
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
cmp dword [ebp - 0x74], 9
jbe 0x45191a
mov dword [ebp - 0xab0], 1
jmp 0x451921
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x570], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x570]
mov dword [ebp + eax - 0x1878], ecx
push 0
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
mov ecx, dword [ebp - 0x570]
imul ecx, dword [eax]
sub ecx, dword [ebp - 0x74]
je 0x45197b
cmp dword [ebp - 0x4a8], 0
je 0x45197b
mov dword [ebp - 0xab8], 1
jmp 0x451982
and dword [ebp - 0xab8], 0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x4cc]
call fcn.0041261e
mov eax, dword [eax]
cmp eax, dword [ebp - 0xab8]
jle 0x4519a6
mov dword [ebp - 0x578], 1
jmp 0x4519ad
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x10e8], eax
jmp 0x4517eb
lea ecx, [ebp - 0x4cc]
call fcn.00412619
mov dword [ebp - 0x358], 0xfffffffd
mov dword [ebp - 0xec], 0xfffffffe
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x1400], 0xfcc013ce
mov dword [ebp - 0x13fc], 0xfcc013ce
mov dword [ebp - 0x13f8], 0xfcc013ce
mov dword [ebp - 0x13f4], 0xfcc013ce
lea ecx, [ebp - 0x485]
call fcn.00401745
push eax
lea eax, [ebp - 0x13f0]
push eax
lea eax, [ebp - 0x1400]
push eax
lea ecx, [ebp - 0x1830]
call fcn.0041262d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4d8]
call fcn.004125f3
mov dword [ebp - 0x474], 0xfffffffa
mov dword [ebp - 0x1118], 0xa133a5b7
mov dword [ebp - 0x290], 0
jmp 0x451a71
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jge 0x451a8d
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x1734], 0
jmp 0x451a64
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0xec], 0
jmp 0x451ab2
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 8
je 0x451f99
mov dword [ebp - 0x114], 0x1591
mov dword [ebp - 0x298], 0x6d5d64f6
mov dword [ebp - 0x5b0], 0xffffffff
mov dword [ebp - 0x1100], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x214], eax
je 0x451b01
mov dword [ebp - 0xac0], 1
jmp 0x451b08
and dword [ebp - 0xac0], 0
cmp dword [ebp - 0xac0], 0xd19f
jg 0x451b20
mov dword [ebp - 0x580], 1
jmp 0x451b27
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0xfffffff9
jle 0x451b3c
mov dword [ebp - 0xac8], 1
jmp 0x451b43
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xac8], eax
jne 0x451b5d
mov dword [ebp - 0x588], 1
jmp 0x451b64
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0x333e
jg 0x451b8b
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
cmp dword [eax], 0
jne 0x451b8b
and dword [ebp - 0xad0], 0
jmp 0x451b95
mov dword [ebp - 0xad0], 1
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0xad0]
jge 0x451baf
mov dword [ebp - 0x590], 1
jmp 0x451bb6
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0xdd61fb9a
jbe 0x451be0
mov dword [ebp - 0xad8], 1
jmp 0x451be7
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xad8], eax
jne 0x451c01
mov dword [ebp - 0x598], 1
jmp 0x451c08
and dword [ebp - 0x598], 0
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
mov ecx, dword [ebp - 0x598]
sub ecx, dword [eax]
je 0x451c3d
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
cmp dword [eax], 0
je 0x451c3d
mov dword [ebp - 0xae0], 1
jmp 0x451c44
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xae0], eax
je 0x451c5e
mov dword [ebp - 0x5a0], 1
jmp 0x451c65
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x114]
jg 0x451c85
mov dword [ebp - 0xae8], 1
jmp 0x451c8c
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xae8], eax
jl 0x451ca6
mov dword [ebp - 0x10f0], 1
jmp 0x451cad
and dword [ebp - 0x10f0], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1710], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1734], 0xffffffff
jl 0x451cd5
mov dword [ebp - 0x5a8], 1
jmp 0x451cdc
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 8
je 0x451cf1
mov dword [ebp - 0xaf0], 1
jmp 0x451cf8
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x5b0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp + eax - 0x1734], ecx
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
cmp dword [eax], 0
je 0x451d47
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
cmp dword [eax], 0
je 0x451d47
mov dword [ebp - 0xaf8], 1
jmp 0x451d4e
and dword [ebp - 0xaf8], 0
push 1
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
mov ecx, dword [ebp - 0xaf8]
cmp ecx, dword [eax]
je 0x451d7a
cmp dword [ebp - 0x114], 0
je 0x451d7a
mov dword [ebp - 0x5b8], 1
jmp 0x451d81
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x5b8]
jg 0x451dac
mov dword [ebp - 0x10f8], 0xb42b8ffd
cmp dword [ebp - 0x10f8], 0
je 0x451da7
jmp 0x451f99
jmp 0x451f94
mov dword [ebp - 0x404], 1
push 4
lea ecx, [ebp - 0x1450]
call fcn.0041257d
mov dword [ebp - 0x1108], 0xa5cd
mov dword [ebp - 0x3cc], 0
jmp 0x451de6
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 4
jge 0x451e08
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x1450]
call fcn.0041261e
mov dword [eax], 1
jmp 0x451dd9
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1580], eax
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x404], eax
jne 0x451e2e
mov dword [ebp - 0xb00], 1
jmp 0x451e35
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0xb00], eax
jge 0x451e55
cmp dword [ebp - 0x214], 0
jne 0x451e55
and dword [ebp - 0x5c0], 0
jmp 0x451e5f
mov dword [ebp - 0x5c0], 1
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
mov ecx, dword [ebp - 0x5c0]
add ecx, dword [eax]
cmp ecx, 0xccf75bae
jb 0x451e88
mov dword [ebp - 0xb08], 1
jmp 0x451e8f
and dword [ebp - 0xb08], 0
push 2
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
mov ecx, dword [ebp - 0xb08]
cmp ecx, dword [eax]
jg 0x451eb8
cmp dword [ebp - 0x474], 0
jne 0x451eb8
and dword [ebp - 0x5c8], 0
jmp 0x451ec2
mov dword [ebp - 0x5c8], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1734]
cmp dword [ebp - 0x5c8], eax
jle 0x451ee3
mov dword [ebp - 0xb10], 1
jmp 0x451eea
and dword [ebp - 0xb10], 0
imul esi, dword [ebp - 0xb10], 0xffffffff
push 2
lea ecx, [ebp - 0x1450]
call fcn.0041261e
mov dword [eax], esi
cmp dword [ebp - 0x298], 0
cmp dword [ebp - 0x1100], 0x2f7f1c74
je 0x451f1f
mov dword [ebp - 0x5d0], 1
jmp 0x451f26
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x1108]
add eax, dword [ebp - 0x5d0]
je 0x451f45
or eax, 0xffffffff
je 0x451f45
mov dword [ebp - 0x1110], 1
jmp 0x451f4c
and dword [ebp - 0x1110], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x16a8], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x1588], eax
mov esi, dword [ebp - 0x474]
push 0
lea ecx, [ebp - 0x4d8]
call fcn.0041261e
mov eax, dword [eax]
neg eax
imul eax, eax, 0x226f
sub esi, eax
mov dword [ebp - 0x1118], esi
lea ecx, [ebp - 0x1450]
call fcn.00412619
jmp 0x451aa5
lea ecx, [ebp - 0x4d8]
call fcn.00412619
mov dword [ebp - 0x718], 0xf78d7cba
mov dword [ebp - 0x2a0], 0x9e57ad95
mov dword [ebp - 0x340], 0
jmp 0x451fd1
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x451fed
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0xb18], 0xc204e2db
jmp 0x451fc4
mov dword [ebp - 0x2a0], 0
jmp 0x452006
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jl 0x452029
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x452027
call dword [sym.imp.USER32.dll_CreateMenu]
jmp 0x451ff9
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0xb18]
mov dword [ebp + ecx - 0xb18], eax
mov dword [ebp - 0x1260], 0x7d6446bd
mov dword [ebp - 0x50], 0x6de713a
mov dword [ebp - 0x1120], 0xffffffff
mov dword [ebp - 0x394], 0
jmp 0x452077
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 2
jge 0x452093
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0xec8], 0xffffffff
jmp 0x45206a
mov dword [ebp - 0x50], 0
jmp 0x4520a3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x452107
mov dword [ebp - 0x2a8], 0x83111738
mov dword [ebp - 0x2a8], 1
jmp 0x4520cc
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jl 0x452105
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0xec8]
mov dword [ebp + ecx*4 - 0xec8], eax
mov byte [ebp - 0x175], 0
movzx eax, byte [ebp - 0x175]
test eax, eax
je 0x452103
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x4520bf
jmp 0x45209c
xor eax, eax
inc eax
je 0x452187
cmp dword [ebp - 0x50], 0
jne 0x452124
mov eax, 0xc28cae2f
test eax, eax
jne 0x452124
and dword [ebp - 0x5d8], 0
jmp 0x45212e
mov dword [ebp - 0x5d8], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x5d8], eax
je 0x45214b
cmp dword [ebp - 0x50], 0
je 0x45214b
mov dword [ebp - 0xb20], 1
jmp 0x452152
and dword [ebp - 0xb20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec8]
cmp eax, dword [ebp - 0xb20]
jg 0x452175
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec8], 0
cmp dword [ebp - 0x50], 0
je 0x452187
mov dword [ebp - 0x5e0], 1
jmp 0x45218e
and dword [ebp - 0x5e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec8]
sub eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1120]
imul ecx, dword [ebp - 0x5e0]
add eax, ecx
cmp eax, 0x4f78
jl 0x4521c0
mov dword [ebp - 0xb28], 1
jmp 0x4521c7
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xb28], eax
je 0x4521de
mov dword [ebp - 0x5e8], 1
jmp 0x4521e5
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0xfffffff7
je 0x4521fa
mov dword [ebp - 0xb30], 1
jmp 0x452201
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x1f4], 0
je 0x452228
cmp dword [ebp - 0x1f4], 0
je 0x452228
mov dword [ebp - 0x5f0], 1
jmp 0x45222f
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x1e4], 0x102071b1
mov dword [ebp - 0x7c], 0xffffffff
cmp dword [ebp - 0x1e4], 0
je 0x452261
mov dword [ebp - 0x7c], 0
jmp 0x4523a8
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x1344], 0x3b2b74c3
mov dword [ebp - 0x1340], 0x3b2b74c3
mov dword [ebp - 0x133c], 0x3b2b74c3
mov dword [ebp - 0x1338], 0x3b2b74c3
mov dword [ebp - 0x1e4], 0x1c
jmp 0x4522ac
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x39
jl 0x452353
mov dword [ebp - 0x7c], 0
jmp 0x4522c9
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff8
jg 0x452328
mov dword [ebp - 0x348], 0x61bab593
mov dword [ebp - 0x348], 0
jmp 0x4522f2
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0xffffffe8
jg 0x452326
mov byte [ebp - 0x11a], 0
movzx eax, byte [ebp - 0x11a]
test eax, eax
je 0x452317
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
jmp 0x4522e5
jmp 0x4522c2
mov dword [ebp - 0x7c], 0
jmp 0x452338
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x45234e
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x1344], 0x552bf338
jmp 0x452331
jmp 0x45229f
mov dword [ebp - 0x1bc], 0xffffffe2
jmp 0x45236c
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x14
jg 0x4523a8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1344], 0
je 0x452387
jmp 0x4523a8
mov byte [ebp - 0x11c], 0
movzx eax, byte [ebp - 0x11c]
test eax, eax
je 0x4523a6
push 0x81c
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
jmp 0x45235f
cmp dword [ebp - 0x358], 0
ja 0x4537b2
mov dword [ebp - 0x40c], 0xffffffff
and dword [ebp - 0x13d8], 0
and dword [ebp - 0x13d4], 0
and dword [ebp - 0x13d0], 0
and dword [ebp - 0x13cc], 0
lea ecx, [ebp - 0x4a1]
call fcn.00401745
push eax
lea eax, [ebp - 0x13c8]
push eax
lea eax, [ebp - 0x13d8]
push eax
lea ecx, [ebp - 0x1840]
call fcn.0041262d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x145c]
call fcn.004125f3
mov dword [ebp - 0x2b0], 0x7f28
mov dword [ebp - 0xb58], 1
mov dword [ebp - 0x618], 0x1f997ec5
mov dword [ebp - 0xb70], 0x81b27067
mov dword [ebp - 0x1138], 0x50eb6ba8
mov dword [ebp - 0x40], 0
jmp 0x452452
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x452468
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x24c], 0xd41e5596
jmp 0x45244b
mov dword [ebp - 0x40], 0
jmp 0x452478
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x45248e
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1764], 0xffffffff
jmp 0x452471
mov dword [ebp - 0x40], 0
jmp 0x45249e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x4524b4
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x14bc], 1
jmp 0x452497
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0x40c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24c], 0
je 0x45265b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x24c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x24c]
cmp eax, 0xfffffffb
jne 0x452507
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0xb38], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb38]
mov dword [ebp + eax - 0x1764], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
cmp dword [ebp - 0xb38], eax
jle 0x45254e
mov dword [ebp - 0x5f8], 1
jmp 0x452555
and dword [ebp - 0x5f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24c]
cmp dword [ebp - 0x5f8], eax
jge 0x452576
mov dword [ebp - 0x1128], 1
jmp 0x45257d
and dword [ebp - 0x1128], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x1130], eax
push 3
lea ecx, [ebp - 0x145c]
call fcn.0041261e
mov ecx, dword [ebp - 0x1130]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x2b0], eax
jge 0x4525cb
mov dword [ebp - 0xb40], 1
jmp 0x4525d2
and dword [ebp - 0xb40], 0
cmp dword [ebp - 0xb40], 0xf57b17b4
jb 0x4525ea
mov dword [ebp - 0x600], 1
jmp 0x4525f1
and dword [ebp - 0x600], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24c]
cmp dword [ebp - 0x600], eax
jge 0x452612
mov dword [ebp - 0xb48], 1
jmp 0x452619
and dword [ebp - 0xb48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14bc]
cmp dword [ebp - 0xb48], eax
jle 0x45263a
mov dword [ebp - 0x608], 1
jmp 0x452641
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x608], eax
jl 0x45265b
mov dword [ebp - 0xb50], 1
jmp 0x452662
and dword [ebp - 0xb50], 0
cmp dword [ebp - 0xb50], 1
jne 0x452677
mov dword [ebp - 0x610], 1
jmp 0x45267e
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x176c], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x15cc], eax
push 3
lea ecx, [ebp - 0x145c]
call fcn.0041261e
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x14bc]
cmp dword [eax], ecx
jl 0x4526e1
mov eax, 0xda3bb1d4
test eax, eax
je 0x4526e1
mov dword [ebp - 0xb60], 1
jmp 0x4526e8
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0xfffffff9
jl 0x452703
mov eax, 0xd01cd43a
test eax, eax
jne 0x452703
and dword [ebp - 0x620], 0
jmp 0x45270d
mov dword [ebp - 0x620], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
cmp dword [ebp - 0x620], eax
je 0x45272e
mov dword [ebp - 0xb68], 1
jmp 0x452735
and dword [ebp - 0xb68], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb68]
sub ecx, dword [ebp + eax - 0x24c]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x24c]
jge 0x452763
mov dword [ebp - 0x628], 1
jmp 0x45276a
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0xb70], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x24c]
cmp eax, dword [ebp - 0xb70]
jl 0x452796
mov dword [ebp - 0x630], 1
jmp 0x45279d
and dword [ebp - 0x630], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x24c]
cmp dword [ebp - 0x630], eax
jle 0x4527bd
mov dword [ebp - 0xb78], 1
jmp 0x4527c4
and dword [ebp - 0xb78], 0
cmp dword [ebp - 0xb78], 0
jae 0x4527d9
mov dword [ebp - 0x638], 1
jmp 0x4527e0
and dword [ebp - 0x638], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x24c]
imul eax, dword [ebp - 0x638]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x14bc]
cmp eax, 8
jl 0x452812
mov dword [ebp - 0xb80], 1
jmp 0x452819
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x1138], eax
lea ecx, [ebp - 0x145c]
call fcn.00412619
mov dword [ebp - 0x21c], 0x3c61
mov dword [ebp - 0x16d8], 9
mov dword [ebp - 0x15d4], 0x2971c1e
mov dword [ebp - 0x1738], 0xffffffff
mov dword [ebp - 0x15dc], 0xffffffff
mov dword [ebp - 0x16e0], 0xffffffff
mov dword [ebp - 0x640], 0xf75d
mov dword [ebp - 0xa4], 0
jmp 0x45288f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x4528ab
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x15e4], 0
jmp 0x452882
mov dword [ebp - 0xa4], 0
jmp 0x4528c4
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x4528e0
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1838], 0xac54c975
jmp 0x4528b7
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x452917
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1cc8
push 0x7d9
push 0x6fc
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x2b8], 0x67e307b5
mov dword [ebp - 0x1178], 0
mov dword [ebp - 0x3bc], 0xffffffff
push 3
lea ecx, [ebp - 0xf38]
call fcn.0041257d
mov dword [ebp - 0x690], 0xfe831e34
mov dword [ebp - 0x39c], 0xeeff
mov dword [ebp - 0x6a8], 0x73439d6f
mov dword [ebp - 0x38], 0
jmp 0x45297d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x452993
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xc8], 1
jmp 0x452976
mov dword [ebp - 0x38], 0
jmp 0x4529a3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x4529b9
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x240], 0x4dde9ab
jmp 0x45299c
mov dword [ebp - 0x38], 0
jmp 0x4529c9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4529e2
push dword [ebp - 0x38]
lea ecx, [ebp - 0xf38]
call fcn.0041261e
and dword [eax], 0
jmp 0x4529c2
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1140], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
mov dword [ebp - 0x1148], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x240], eax
mov eax, dword [ebp - 0x1140]
cmp eax, dword [ebp - 0x1148]
jl 0x452a36
mov dword [ebp - 0xb88], 1
jmp 0x452a3d
and dword [ebp - 0xb88], 0
imul eax, dword [ebp - 0xb88], 0xfbe5
cmp eax, 0x9968
jge 0x452a5a
mov dword [ebp - 0xb90], 1
jmp 0x452a61
and dword [ebp - 0xb90], 0
cmp dword [ebp - 0x2b8], 0
je 0x452a86
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
je 0x452a86
mov dword [ebp - 0x648], 1
jmp 0x452a8d
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0xcd9796a
jne 0x452aa5
mov dword [ebp - 0x650], 1
jmp 0x452aac
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0xb90]
sub eax, dword [ebp - 0x650]
cmp eax, 0xfffb
ja 0x452acb
mov dword [ebp - 0xb98], 1
jmp 0x452ad2
and dword [ebp - 0xb98], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0xb98], eax
jg 0x452af3
mov dword [ebp - 0x658], 1
jmp 0x452afa
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x658]
mov dword [ebp + eax - 0xc8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x3bc], eax
jg 0x452b2e
mov dword [ebp - 0xba0], 1
jmp 0x452b35
and dword [ebp - 0xba0], 0
push 0
lea ecx, [ebp - 0xf38]
call fcn.0041261e
mov eax, dword [eax]
add eax, dword [ebp - 0xba0]
cmp eax, 0x4356e3f0
jle 0x452b5d
mov dword [ebp - 0x660], 1
jmp 0x452b64
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x660]
jle 0x452b7e
mov dword [ebp - 0x1150], 1
jmp 0x452b85
and dword [ebp - 0x1150], 0
cmp dword [ebp - 0x3bc], 1
jl 0x452b9a
mov dword [ebp - 0xba8], 1
jmp 0x452ba1
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0xba8], 0xbfb41ce0
jbe 0x452bb9
mov dword [ebp - 0x668], 1
jmp 0x452bc0
and dword [ebp - 0x668], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
cmp eax, dword [ebp - 0x668]
jle 0x452be1
mov dword [ebp - 0xbb0], 1
jmp 0x452be8
and dword [ebp - 0xbb0], 0
cmp dword [ebp - 0xbb0], 0xf7d6
je 0x452c00
mov dword [ebp - 0x670], 1
jmp 0x452c07
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x670], eax
jne 0x452c21
mov dword [ebp - 0xbb8], 1
jmp 0x452c28
and dword [ebp - 0xbb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
cmp dword [ebp - 0xbb8], eax
jne 0x452c58
push 0
lea ecx, [ebp - 0xf38]
call fcn.0041261e
cmp dword [eax], 0
jne 0x452c58
and dword [ebp - 0x678], 0
jmp 0x452c62
mov dword [ebp - 0x678], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x678], eax
jle 0x452c83
mov dword [ebp - 0x1158], 1
jmp 0x452c8a
and dword [ebp - 0x1158], 0
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x1750], eax
push 0
lea ecx, [ebp - 0xf38]
call fcn.0041261e
cmp dword [ebp - 0x690], 0
je 0x452e7c
mov dword [ebp - 0xbc8], 0x33e235bd
mov dword [ebp - 0xbe0], 0xf9d9
mov dword [ebp - 0xbe8], 0x714a8a5a
mov dword [ebp - 0x1170], 0
mov dword [ebp - 0x15ec], 4
mov esi, dword [ebp - 0xbc8]
push 0
lea ecx, [ebp - 0xf38]
call fcn.0041261e
cmp esi, dword [eax]
jge 0x452d05
mov dword [ebp - 0xbc0], 1
jmp 0x452d0c
and dword [ebp - 0xbc0], 0
cmp dword [ebp - 0xbc0], 0x211a
je 0x452d24
mov dword [ebp - 0x680], 1
jmp 0x452d2b
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x680]
jne 0x452d45
mov dword [ebp - 0x688], 1
jmp 0x452d4c
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0xbc8]
cmp dword [ebp - 0x688], eax
jne 0x452d66
mov dword [ebp - 0xbd0], 1
jmp 0x452d6d
and dword [ebp - 0xbd0], 0
cmp dword [ebp - 0xbd0], 0
jae 0x452d82
mov dword [ebp - 0x1160], 1
jmp 0x452d89
and dword [ebp - 0x1160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
mov dword [ebp - 0x16e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x690], eax
jg 0x452dbd
mov dword [ebp - 0x1168], 1
jmp 0x452dc4
and dword [ebp - 0x1168], 0
push 0
lea ecx, [ebp - 0xf38]
call fcn.0041261e
imul esi, dword [ebp - 0xbe0], 0
push 0
lea ecx, [ebp - 0xf38]
call fcn.0041261e
cmp esi, dword [eax]
jg 0x452dfe
mov eax, 0xf0cd
test eax, eax
je 0x452dfe
mov dword [ebp - 0xbd8], 1
jmp 0x452e05
and dword [ebp - 0xbd8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp eax, dword [ebp - 0xbd8]
jge 0x452e26
mov dword [ebp - 0x698], 1
jmp 0x452e2d
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 0
je 0x452e4b
cmp dword [ebp - 0xbe0], 0
je 0x452e4b
mov dword [ebp - 0x6a0], 1
jmp 0x452e52
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0x1170], eax
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
jmp 0x453022
mov dword [ebp - 0x2c0], 0x7bd5
mov dword [ebp - 0x1b0], 0
push 2
lea ecx, [ebp - 0x12ec]
call fcn.0041257d
mov dword [ebp - 0x350], 0
jmp 0x452eb6
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jge 0x452ed8
push dword [ebp - 0x350]
lea ecx, [ebp - 0x12ec]
call fcn.0041261e
mov dword [eax], 0xfffffffa
jmp 0x452ea9
cmp dword [ebp - 0x2c0], 0
je 0x452ef6
cmp dword [ebp - 0x2c0], 0
je 0x452ef6
mov dword [ebp - 0xbf8], 1
jmp 0x452efd
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x1178], eax
jne 0x452f17
mov dword [ebp - 0xbf0], 1
jmp 0x452f1e
and dword [ebp - 0xbf0], 0
cmp dword [ebp - 0xbf0], 0xfffffff9
jl 0x452f33
mov dword [ebp - 0x6b0], 1
jmp 0x452f3a
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x6b0], eax
je 0x452f54
mov dword [ebp - 0xc00], 1
jmp 0x452f5b
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x6b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6b8]
mov dword [ebp + eax - 0xc8], ecx
mov eax, dword [ebp - 0x6b8]
cmp eax, dword [ebp - 0xc00]
jge 0x452fa0
mov dword [ebp - 0x6c0], 1
jmp 0x452fa7
and dword [ebp - 0x6c0], 0
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0041261e
mov ecx, dword [ebp - 0x6c0]
mov dword [eax], ecx
mov dword [ebp - 0x39c], 0
jmp 0x452fd5
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 5
jle 0x453017
mov dword [ebp - 0x1b0], 0
jmp 0x452ff7
mov eax, dword [ebp - 0x1b0]
dec eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
jl 0x453015
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0041261e
mov dword [eax], 0x1f29c70a
jmp 0x452fea
jmp 0x452fc8
lea ecx, [ebp - 0x12ec]
call fcn.00412619
lea ecx, [ebp - 0xf38]
call fcn.00412619
mov dword [ebp - 0x720], 0x72c02a30
mov dword [ebp - 0x1ec], 0x39b6
mov dword [ebp - 0xc08], 0x39e3cf95
mov dword [ebp - 0x1180], 0x277ebd00
mov byte [ebp - 0x120], 0
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x453074
push 0x338
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
cmp dword [ebp - 0x1ec], 0
je 0x4531aa
mov dword [ebp - 0x6e0], 0
mov dword [ebp - 0x6d8], 0xc01e6e2b
mov dword [ebp - 0x1188], 0
mov dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x6e0]
cmp dword [ebp - 0xc08], eax
jle 0x4530c9
cmp dword [ebp - 0x6d8], 0
jne 0x4530c9
and dword [ebp - 0x6c8], 0
jmp 0x4530d3
mov dword [ebp - 0x6c8], 1
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x15f4], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x174c], eax
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x1ec], eax
jne 0x453105
mov dword [ebp - 0xc10], 1
jmp 0x45310c
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x6c8]
imul eax, dword [ebp - 0xc10]
test eax, eax
je 0x453132
cmp dword [ebp - 0x1180], 0
je 0x453132
mov dword [ebp - 0x6d0], 1
jmp 0x453139
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0xde9a
jg 0x453151
mov dword [ebp - 0xc18], 1
jmp 0x453158
and dword [ebp - 0xc18], 0
cmp dword [ebp - 0xc18], 0xfffffff7
jg 0x45316d
mov dword [ebp - 0xc20], 1
jmp 0x453174
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x6d8]
imul eax, dword [ebp - 0xc20]
cmp eax, dword [ebp - 0x6e0]
jle 0x453195
mov dword [ebp - 0xc28], 1
jmp 0x45319c
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x1188], eax
jmp 0x4531c9
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x122]
test eax, eax
je 0x4531c9
push 0
push 0xf06
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0xac], 0
jmp 0x4531e2
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x4531fe
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x181c], 9
jmp 0x4531d5
mov dword [ebp - 0x15fc], 0x13638ecf
mov dword [ebp - 0x16f0], 0x9aed23b6
mov dword [ebp - 0x6e8], 0xffff
mov dword [ebp - 0x98], 0
jmp 0x453235
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x453251
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1850], 0
jmp 0x453228
mov dword [ebp - 0x98], 0
jmp 0x45326a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x453286
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1868], 0x53072226
jmp 0x45325d
mov byte [ebp - 0x124], 0
movzx eax, byte [ebp - 0x124]
test eax, eax
je 0x4532a5
push 0x2478
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0xac], 0
jmp 0x4532cb
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x4532e7
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x17d4], 1
jmp 0x4532be
mov dword [ebp - 0x6c], 0x24a8c6a5
push 3
lea ecx, [ebp - 0x518]
call fcn.0041257d
push 1
lea ecx, [ebp - 0x11d0]
call fcn.0041257d
mov dword [ebp - 0xd0], 0
jmp 0x453321
cmp dword [ebp - 0xd0], 3
jge 0x453343
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x518]
call fcn.0041261e
mov dword [eax], 1
jmp 0x453314
mov dword [ebp - 0xd0], 0
jmp 0x45335c
mov dword [ebp - 0xfc], 0xac204e2
mov dword [ebp - 0x10c0], 0xffffffff
mov byte [ebp - 0x126], 0
movzx eax, byte [ebp - 0x126]
test eax, eax
je 0x4537ec
push 0
push 0xe77
push 0
push 0x14b6
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov dword [ebp - 0xfc], 0
jmp 0x453805
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffffd
jg 0x453c30
mov dword [ebp - 0x60], 0x90197f0a
push 3
lea ecx, [ebp - 0x12f8]
call fcn.0041257d
push 2
lea ecx, [ebp - 0x1304]
call fcn.0041257d
mov dword [ebp - 0x10c8], 0xe95
mov dword [ebp - 0x28], 0
jmp 0x45384d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x453863
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x11e0], 0
jmp 0x453846
mov dword [ebp - 0x28], 0
jmp 0x453873
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x45388f
push dword [ebp - 0x28]
lea ecx, [ebp - 0x12f8]
call fcn.0041261e
mov dword [eax], 0x9fa18394
jmp 0x45386c
mov dword [ebp - 0x28], 0
jmp 0x45389f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4538bb
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1304]
call fcn.0041261e
mov dword [eax], 0x4ad8a0f8
jmp 0x453898
mov dword [ebp - 0x60], 0
jmp 0x4538cb
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x453c15
mov dword [ebp - 0x58], 9
mov dword [ebp - 0x58], 0
jmp 0x4538ec
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jg 0x453c10
mov dword [ebp - 0x4bc], 0xb90f9986
mov dword [ebp - 0x758], 0x76e8d2ca
mov dword [ebp - 0x770], 0xfffffffc
mov dword [ebp - 0x2d0], 0
jmp 0x45392d
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 1
jge 0x453949
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0x750], 0x6bb2
jmp 0x453920
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1614], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
je 0x453966
mov dword [ebp - 0xc7c], 1
jmp 0x45396d
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0x4bc]
imul eax, dword [ebp - 0xc7c]
cmp eax, 0xc910
jl 0x45398d
mov dword [ebp - 0x738], 1
jmp 0x453994
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x738], eax
jge 0x4539ae
mov dword [ebp - 0xc84], 1
jmp 0x4539b5
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0xc84]
jl 0x4539cc
mov dword [ebp - 0x740], 1
jmp 0x4539d3
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x11e0]
sub eax, dword [ebp - 0x740]
cmp eax, 0xffff
jbe 0x4539f1
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x453a03
cmp dword [ebp - 0x60], 0
je 0x453a03
mov dword [ebp - 0xc8c], 1
jmp 0x453a0a
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
sub eax, 0x63b0
jne 0x453a29
mov eax, 0x1fc8
test eax, eax
jne 0x453a29
and dword [ebp - 0x748], 0
jmp 0x453a33
mov dword [ebp - 0x748], 1
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x748]
mov dword [ebp + eax*4 - 0x11e0], ecx
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x11e0], 0xfffffff8
cmp dword [ebp - 0x4bc], 0
je 0x453abb
push 0
lea ecx, [ebp - 0x12f8]
call fcn.0041261e
cmp dword [eax], 0
je 0x453abb
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x11e0], 0xd997
push 1
lea ecx, [ebp - 0x1304]
call fcn.0041261e
mov dword [eax], 0xd997
mov eax, dword [ebp - 0x58]
add eax, 0xd997
imul eax, eax, 0xfffffffc
cmp eax, dword [ebp - 0x58]
jne 0x453aaf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x750], 0
je 0x453abb
mov dword [ebp - 0xc94], 1
jmp 0x453ac2
and dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0xc94]
sub eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x758]
cmp dword [ebp - 0xfc], eax
jge 0x453aeb
cmp dword [ebp - 0x60], 0
je 0x453aeb
mov dword [ebp - 0xc9c], 1
jmp 0x453af2
and dword [ebp - 0xc9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x750]
add eax, dword [ebp - 0xc9c]
cmp eax, dword [ebp - 0x758]
jg 0x453b19
mov dword [ebp - 0xca4], 1
jmp 0x453b20
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xca4], eax
jl 0x453b37
mov dword [ebp - 0x760], 1
jmp 0x453b3e
and dword [ebp - 0x760], 0
push 0
lea ecx, [ebp - 0x12f8]
call fcn.0041261e
mov ecx, dword [ebp - 0x760]
cmp ecx, dword [eax]
je 0x453b62
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x11e0], 0
je 0x453b74
cmp dword [ebp - 0x58], 0
je 0x453b74
mov dword [ebp - 0xcac], 1
jmp 0x453b7b
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xcac], eax
jne 0x453b92
mov dword [ebp - 0x768], 1
jmp 0x453b99
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0xd2dc
jne 0x453bb1
mov dword [ebp - 0xcb4], 1
jmp 0x453bb8
and dword [ebp - 0xcb4], 0
mov eax, dword [ebp - 0xcb4]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
add eax, 0xfff8
cmp eax, dword [ebp - 0x10c8]
je 0x453bde
cmp dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x175c], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x1624], eax
push 1
lea ecx, [ebp - 0x1304]
call fcn.0041261e
mov eax, dword [eax]
mov dword [ebp - 0x10c0], eax
jmp 0x4538e5
jmp 0x4538c4
lea ecx, [ebp - 0x1304]
call fcn.00412619
lea ecx, [ebp - 0x12f8]
call fcn.00412619
jmp 0x4537f8
mov byte [ebp - 0x12c], 0
mov dword [ebp - 0x3dc], 3
mov dword [ebp - 0x3dc], 0x17
jmp 0x453c5a
mov eax, dword [ebp - 0x3dc]
dec eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 1
jg 0x453d61
mov dword [ebp - 0x360], 0xef20fe6e
push 1
lea ecx, [ebp - 0x1620]
call fcn.0041257d
mov dword [ebp - 0x2d8], 0
jmp 0x453c97
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 1
jge 0x453cb9
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x1620]
call fcn.0041261e
mov dword [eax], 0xfffffff7
jmp 0x453c8a
mov dword [ebp - 0x360], 8
jmp 0x453cd2
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x1a
jg 0x453d28
mov dword [ebp - 0x2e0], 0x3f9e923e
mov dword [ebp - 0x2e0], 0
jmp 0x453cfe
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jl 0x453d26
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x453d24
push 0x7cc
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
jmp 0x453cf1
jmp 0x453cc5
mov byte [ebp - 0x12a], 0
movzx eax, byte [ebp - 0x12a]
test eax, eax
je 0x453d51
push 0x17d3
push 0xb45
push 0
push 0x252b
call dword [sym.imp.USER32.dll_CreateCaret]
lea ecx, [ebp - 0x1620]
call fcn.00412619
jmp 0x453c4d
movzx eax, byte [ebp - 0x12c]
test eax, eax
je 0x453f98
push 4
lea ecx, [ebp - 0x11f0]
call fcn.0041257d
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x1058], 1
mov dword [ebp - 0x1700], 0xffffffff
push 2
lea ecx, [ebp - 0x1420]
call fcn.0041257d
mov dword [ebp - 0xd8], 0
jmp 0x453dbe
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x453de0
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x11f0]
call fcn.0041261e
mov dword [eax], 0xf75dcec3
jmp 0x453db1
mov dword [ebp - 0xd8], 0
jmp 0x453df9
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x453e1b
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x1420]
call fcn.0041261e
mov dword [eax], 1
jmp 0x453dec
mov dword [ebp - 0x68], 3
jmp 0x453e2b
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x453f3b
mov dword [ebp - 0x1634], 0x3498e64e
mov dword [ebp - 0x1758], 0x8f4727ca
mov dword [ebp - 0x3a4], 0
jmp 0x453e62
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x453e7e
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0xcbc], 0xffffffff
jmp 0x453e55
push dword [ebp - 0x68]
lea ecx, [ebp - 0x11f0]
call fcn.0041261e
cmp dword [eax], 1
ja 0x453e9d
mov dword [ebp - 0x780], 1
jmp 0x453ea4
and dword [ebp - 0x780], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
dec eax
mov dword [ebp - 0x778], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x778]
mov dword [ebp + eax - 0xcbc], ecx
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1058]
cmp dword [ebp - 0x778], eax
jl 0x453ee8
mov dword [ebp - 0xcc4], 1
jmp 0x453eef
and dword [ebp - 0xcc4], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x11f0]
call fcn.0041261e
mov eax, dword [eax]
cmp eax, dword [ebp - 0xcc4]
jg 0x453f13
mov dword [ebp - 0xccc], 1
jmp 0x453f1a
and dword [ebp - 0xccc], 0
mov esi, dword [ebp - 0x780]
add esi, dword [ebp - 0xccc]
push dword [ebp - 0x68]
lea ecx, [ebp - 0x11f0]
call fcn.0041261e
mov dword [eax], esi
jmp 0x453e24
mov dword [ebp - 0x68], 0xfffffff6
jmp 0x453f4b
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff4
je 0x453f7c
mov dword [ebp - 0x1040], 1
push 0
lea ecx, [ebp - 0x1420]
call fcn.0041261e
cmp dword [eax], 0
je 0x453f6f
jmp 0x453f7c
cmp dword [ebp - 0x1040], 0
je 0x453f7a
jmp 0x453f44
jmp 0x453f44
lea ecx, [ebp - 0x1420]
call fcn.00412619
lea ecx, [ebp - 0x11f0]
call fcn.00412619
call dword [sym.imp.GDI32.dll_GdiFlush]
mov dword [ebp - 0x234], 0xfffffffa
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x7a8], 1
mov dword [ebp - 0x7b8], 0xffffffff
mov dword [ebp - 0x7c0], 0xf20bab1f
mov dword [ebp - 0x1508], 0xfffffff7
mov dword [ebp - 0x2e8], 0
jmp 0x453fed
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 2
jge 0x454009
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x1334], 0x42c8
jmp 0x453fe0
mov dword [ebp - 0x234], 0xffffffea
jmp 0x454022
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xfffffff6
jle 0x45437f
and dword [ebp - 0x139c], 0
and dword [ebp - 0x1398], 0
and dword [ebp - 0x1394], 0
and dword [ebp - 0x1390], 0
lea ecx, [ebp - 0x475]
call fcn.00401745
push eax
lea eax, [ebp - 0x138c]
push eax
lea eax, [ebp - 0x139c]
push eax
lea ecx, [ebp - 0x1880]
call fcn.0041262d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4e4]
call fcn.004125f3
mov dword [ebp - 0x414], 0xf36a5b5c
mov dword [ebp - 0x41c], 1
mov dword [ebp - 0xce4], 0x8dd2ac30
mov dword [ebp - 0x110c], 1
push 1
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
push 1
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
cmp dword [eax], 0xffffffff
jbe 0x4540db
mov dword [ebp - 0x788], 1
jmp 0x4540e2
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x788], eax
jle 0x4540fc
mov dword [ebp - 0xcd4], 1
jmp 0x454103
and dword [ebp - 0xcd4], 0
mov dword [ebp - 0x414], 7
mov eax, dword [ebp - 0x414]
add eax, dword [ebp - 0xcd4]
cmp eax, 9
jge 0x454130
cmp dword [ebp - 0x41c], 0
jne 0x454130
and dword [ebp - 0x790], 0
jmp 0x45413a
mov dword [ebp - 0x790], 1
push 1
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
mov ecx, dword [ebp - 0x790]
cmp ecx, dword [eax]
jle 0x45415d
mov dword [ebp - 0xcdc], 1
jmp 0x454164
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xcdc], eax
jg 0x454182
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x454182
and dword [ebp - 0x798], 0
jmp 0x45418c
mov dword [ebp - 0x798], 1
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0xce4], eax
cmp dword [ebp - 0xce4], 0
je 0x4541b4
push 4
pop eax
test eax, eax
je 0x4541b4
mov dword [ebp - 0x7a0], 1
jmp 0x4541bb
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0xbab72157
jbe 0x4541d3
mov dword [ebp - 0xcec], 1
jmp 0x4541da
and dword [ebp - 0xcec], 0
imul eax, dword [ebp - 0xcec], 0x1cd1
cmp eax, 0xc6dc
jl 0x4541f7
mov dword [ebp - 0xcf4], 1
jmp 0x4541fe
and dword [ebp - 0xcf4], 0
push 0
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
mov eax, dword [eax]
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
add eax, dword [ebp - 0xcf4]
cmp eax, dword [ebp - 0x41c]
jg 0x454233
mov dword [ebp - 0x7b0], 1
jmp 0x45423a
and dword [ebp - 0x7b0], 0
push 3
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
mov ecx, dword [ebp - 0x7b0]
cmp ecx, dword [eax]
jle 0x454266
mov eax, 0x2932
test eax, eax
je 0x454266
mov dword [ebp - 0xcfc], 1
jmp 0x45426d
and dword [ebp - 0xcfc], 0
mov eax, dword [ebp - 0xcfc]
mov dword [ebp - 0x7b8], eax
cmp dword [ebp - 0x7b8], 1
je 0x45428e
mov dword [ebp - 0xd04], 1
jmp 0x454295
and dword [ebp - 0xd04], 0
mov eax, dword [ebp - 0xd04]
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 0
jne 0x4542b7
push 1
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
mov esi, dword [ebp - 0x414]
push 2
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
cmp esi, dword [eax]
jge 0x4542e3
mov eax, 0x3931
test eax, eax
je 0x4542e3
mov dword [ebp - 0xd0c], 1
jmp 0x4542ea
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0xd0c], eax
jne 0x454304
mov dword [ebp - 0x47c], 1
jmp 0x45430b
and dword [ebp - 0x47c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x47c]
mov dword [ebp + eax - 0x1334], ecx
push 1
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
mov esi, dword [ebp - 0x47c]
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x4e4]
call fcn.0041261e
cmp dword [eax], esi
jl 0x454355
xor eax, eax
inc eax
je 0x454355
mov dword [ebp - 0x7c8], 1
jmp 0x45435c
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x41c]
imul eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x110c], eax
lea ecx, [ebp - 0x4e4]
call fcn.00412619
jmp 0x454015
mov dword [ebp - 0x10c], 0
jmp 0x454398
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x4543b4
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x1334], 0xadcf
jmp 0x45438b
mov dword [ebp - 0x368], 0xe0a8eac8
mov dword [ebp - 0x368], 0x17
jmp 0x4543d7
mov eax, dword [ebp - 0x368]
dec eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0xffffffed
jge 0x454401
mov byte [ebp - 0x12e], 0
movzx eax, byte [ebp - 0x12e]
test eax, eax
je 0x4543ff
push 0x876
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x4543ca
mov byte [ebp - 0x130], 0
movzx eax, byte [ebp - 0x130]
test eax, eax
je 0x454427
push 0
push 0xcc5
push 0
push 0x1918
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x7d8], 0x2f1fcc10
mov dword [ebp - 0x2f0], 0
jmp 0x454454
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 2
jge 0x454470
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x1594], 1
jmp 0x454447
mov dword [ebp - 0x13c], 0
jmp 0x454489
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xffffffff
jg 0x45463e
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x104], 3
mov byte [ebp - 0x132], 0
movzx eax, byte [ebp - 0x132]
test eax, eax
je 0x4544c9
push 0
push 0x2133
call dword [sym.imp.USER32.dll_BeginPaint]
mov eax, 0x8929f6d1
test eax, eax
je 0x4545c3
mov dword [ebp - 0x4b0], 0xdec4
cmp dword [ebp - 0x4b0], 1
jne 0x4544f5
mov dword [ebp - 0xd24], 1
jmp 0x4544fc
and dword [ebp - 0xd24], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1594], 0xfffffff7
mov eax, 0x7e3b
add eax, 0xfffffff7
je 0x45452c
cmp dword [ebp - 0x104], 0
je 0x45452c
mov dword [ebp - 0xd14], 1
jmp 0x454533
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0xd14]
sub eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x104]
cmp eax, 0xd5fec46b
jb 0x454559
mov dword [ebp - 0x7d0], 1
jmp 0x454560
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x7d0], eax
jle 0x454583
cmp dword [ebp - 0x104], 0
je 0x454583
mov dword [ebp - 0xd1c], 1
jmp 0x45458a
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xd1c]
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d8]
cmp dword [ebp - 0xd24], eax
jne 0x4545b0
mov dword [ebp - 0x1014], 1
jmp 0x4545b7
and dword [ebp - 0x1014], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x150c], eax
cmp dword [ebp - 0x4b0], 0xffffffff
je 0x4545d8
mov dword [ebp - 0x7e0], 1
jmp 0x4545df
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
sub eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x13c]
jg 0x4545ff
mov dword [ebp - 0xd2c], 1
jmp 0x454606
and dword [ebp - 0xd2c], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0xd2c], eax
jne 0x454620
mov dword [ebp - 0x7e8], 1
jmp 0x454627
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x104], eax
jmp 0x45447c
mov dword [ebp - 0x1d0], 0xfffffffa
mov dword [ebp - 0x2f8], 0x67e307b5
mov dword [ebp - 0x1034], 0
mov dword [ebp - 0x3c4], 0xffffffff
push 3
lea ecx, [ebp - 0xf48]
call fcn.0041257d
mov dword [ebp - 0x838], 0xfe831e34
mov dword [ebp - 0x3ac], 0xeeff
mov dword [ebp - 0x850], 0x73439d6f
mov dword [ebp - 0x2c], 0
jmp 0x4546a1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x4546b7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xbc], 1
jmp 0x45469a
mov dword [ebp - 0x2c], 0
jmp 0x4546c7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x4546dd
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1fc], 0x4dde9ab
jmp 0x4546c0
mov dword [ebp - 0x2c], 0
jmp 0x4546ed
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x454706
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf48]
call fcn.0041261e
and dword [eax], 0
jmp 0x4546e6
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x118c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1fc]
mov dword [ebp - 0x101c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1fc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1fc], eax
mov eax, dword [ebp - 0x118c]
cmp eax, dword [ebp - 0x101c]
jl 0x45475a
mov dword [ebp - 0xd34], 1
jmp 0x454761
and dword [ebp - 0xd34], 0
imul eax, dword [ebp - 0xd34], 0xfbe5
cmp eax, 0x9968
jge 0x45477e
mov dword [ebp - 0xd3c], 1
jmp 0x454785
and dword [ebp - 0xd3c], 0
cmp dword [ebp - 0x2f8], 0
je 0x4547aa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc], 0
je 0x4547aa
mov dword [ebp - 0x7f0], 1
jmp 0x4547b1
and dword [ebp - 0x7f0], 0
cmp dword [ebp - 0x7f0], 0xcd9796a
jne 0x4547c9
mov dword [ebp - 0x7f8], 1
jmp 0x4547d0
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xd3c]
sub eax, dword [ebp - 0x7f8]
cmp eax, 0xfffb
ja 0x4547ef
mov dword [ebp - 0xd44], 1
jmp 0x4547f6
and dword [ebp - 0xd44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp dword [ebp - 0xd44], eax
jg 0x454817
mov dword [ebp - 0x800], 1
jmp 0x45481e
and dword [ebp - 0x800], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x800]
mov dword [ebp + eax - 0xbc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp dword [ebp - 0x3c4], eax
jg 0x454852
mov dword [ebp - 0xd4c], 1
jmp 0x454859
and dword [ebp - 0xd4c], 0
push 0
lea ecx, [ebp - 0xf48]
call fcn.0041261e
mov eax, dword [eax]
add eax, dword [ebp - 0xd4c]
cmp eax, 0x4356e3f0
jle 0x454881
mov dword [ebp - 0x808], 1
jmp 0x454888
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x808]
jle 0x4548a2
mov dword [ebp - 0x1114], 1
jmp 0x4548a9
and dword [ebp - 0x1114], 0
cmp dword [ebp - 0x3c4], 1
jl 0x4548be
mov dword [ebp - 0xd54], 1
jmp 0x4548c5
and dword [ebp - 0xd54], 0
cmp dword [ebp - 0xd54], 0xbfb41ce0
jbe 0x4548dd
mov dword [ebp - 0x810], 1
jmp 0x4548e4
and dword [ebp - 0x810], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1fc]
cmp eax, dword [ebp - 0x810]
jle 0x454905
mov dword [ebp - 0xd5c], 1
jmp 0x45490c
and dword [ebp - 0xd5c], 0
cmp dword [ebp - 0xd5c], 0xf7d6
je 0x454924
mov dword [ebp - 0x818], 1
jmp 0x45492b
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x818], eax
jne 0x454945
mov dword [ebp - 0xd64], 1
jmp 0x45494c
and dword [ebp - 0xd64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1fc]
cmp dword [ebp - 0xd64], eax
jne 0x45497c
push 0
lea ecx, [ebp - 0xf48]
call fcn.0041261e
cmp dword [eax], 0
jne 0x45497c
and dword [ebp - 0x820], 0
jmp 0x454986
mov dword [ebp - 0x820], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp dword [ebp - 0x820], eax
jle 0x4549a7
mov dword [ebp - 0x1024], 1
jmp 0x4549ae
and dword [ebp - 0x1024], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x1514], eax
push 0
lea ecx, [ebp - 0xf48]
call fcn.0041261e
cmp dword [ebp - 0x838], 0
je 0x454ba0
mov dword [ebp - 0xd74], 0x33e235bd
mov dword [ebp - 0xd8c], 0xf9d9
mov dword [ebp - 0xd94], 0x714a8a5a
mov dword [ebp - 0x111c], 0
mov dword [ebp - 0x151c], 4
mov esi, dword [ebp - 0xd74]
push 0
lea ecx, [ebp - 0xf48]
call fcn.0041261e
cmp esi, dword [eax]
jge 0x454a29
mov dword [ebp - 0xd6c], 1
jmp 0x454a30
and dword [ebp - 0xd6c], 0
cmp dword [ebp - 0xd6c], 0x211a
je 0x454a48
mov dword [ebp - 0x828], 1
jmp 0x454a4f
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x828]
jne 0x454a69
mov dword [ebp - 0x830], 1
jmp 0x454a70
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0xd74]
cmp dword [ebp - 0x830], eax
jne 0x454a8a
mov dword [ebp - 0xd7c], 1
jmp 0x454a91
and dword [ebp - 0xd7c], 0
cmp dword [ebp - 0xd7c], 0
jae 0x454aa6
mov dword [ebp - 0x11f4], 1
jmp 0x454aad
and dword [ebp - 0x11f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
mov dword [ebp - 0x1524], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp dword [ebp - 0x838], eax
jg 0x454ae1
mov dword [ebp - 0x102c], 1
jmp 0x454ae8
and dword [ebp - 0x102c], 0
push 0
lea ecx, [ebp - 0xf48]
call fcn.0041261e
imul esi, dword [ebp - 0xd8c], 0
push 0
lea ecx, [ebp - 0xf48]
call fcn.0041261e
cmp esi, dword [eax]
jg 0x454b22
mov eax, 0xf0cd
test eax, eax
je 0x454b22
mov dword [ebp - 0xd84], 1
jmp 0x454b29
and dword [ebp - 0xd84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp eax, dword [ebp - 0xd84]
jge 0x454b4a
mov dword [ebp - 0x840], 1
jmp 0x454b51
and dword [ebp - 0x840], 0
cmp dword [ebp - 0x840], 0
je 0x454b6f
cmp dword [ebp - 0xd8c], 0
je 0x454b6f
mov dword [ebp - 0x848], 1
jmp 0x454b76
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0x111c], eax
mov eax, dword [ebp - 0x850]
inc eax
mov dword [ebp - 0x850], eax
jmp 0x454d46
mov dword [ebp - 0x300], 0x7bd5
mov dword [ebp - 0x190], 0
push 2
lea ecx, [ebp - 0x131c]
call fcn.0041257d
mov dword [ebp - 0x370], 0
jmp 0x454bda
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x454bfc
push dword [ebp - 0x370]
lea ecx, [ebp - 0x131c]
call fcn.0041261e
mov dword [eax], 0xfffffffa
jmp 0x454bcd
cmp dword [ebp - 0x300], 0
je 0x454c1a
cmp dword [ebp - 0x300], 0
je 0x454c1a
mov dword [ebp - 0xda4], 1
jmp 0x454c21
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x1034], eax
jne 0x454c3b
mov dword [ebp - 0xd9c], 1
jmp 0x454c42
and dword [ebp - 0xd9c], 0
cmp dword [ebp - 0xd9c], 0xfffffff9
jl 0x454c57
mov dword [ebp - 0x858], 1
jmp 0x454c5e
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x858], eax
je 0x454c78
mov dword [ebp - 0xdac], 1
jmp 0x454c7f
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x860], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x860]
mov dword [ebp + eax - 0xbc], ecx
mov eax, dword [ebp - 0x860]
cmp eax, dword [ebp - 0xdac]
jge 0x454cc4
mov dword [ebp - 0x868], 1
jmp 0x454ccb
and dword [ebp - 0x868], 0
push 1
lea ecx, [ebp - 0x131c]
call fcn.0041261e
mov ecx, dword [ebp - 0x868]
mov dword [eax], ecx
mov dword [ebp - 0x3ac], 0
jmp 0x454cf9
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 5
jle 0x454d3b
mov dword [ebp - 0x190], 0
jmp 0x454d1b
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x454d39
push 1
lea ecx, [ebp - 0x131c]
call fcn.0041261e
mov dword [eax], 0x1f29c70a
jmp 0x454d0e
jmp 0x454cec
lea ecx, [ebp - 0x131c]
call fcn.00412619
lea ecx, [ebp - 0xf48]
call fcn.00412619
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x70], 0x41e55969
mov dword [ebp - 0x870], 0x17b4d2c2
mov dword [ebp - 0x308], 0xfffffffe
mov dword [ebp - 0x484], 6
mov dword [ebp - 0x890], 0x126315bf
mov dword [ebp - 0x424], 0x1081b270
mov dword [ebp - 0x144], 0xfffffff9
mov dword [ebp - 0x103c], 0xfffffff9
mov dword [ebp - 0xe0], 0
jmp 0x454dc1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x454ddd
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0xfe8], 0xfffffffa
jmp 0x454db4
mov dword [ebp - 0xe0], 0
jmp 0x454df6
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x454e12
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x17e0], 0x52f093d7
jmp 0x454de9
mov dword [ebp - 0x70], 0
jmp 0x454e22
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x454e38
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xfe8], 0
jmp 0x454e1b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfe8], 0
je 0x45507f
mov eax, 0xf3b06d9e
test eax, eax
je 0x454e7e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x17e0], 0xfffc
mov eax, 0xfffc
cmp eax, 0xf5ff
jle 0x454e7e
mov dword [ebp - 0xdb4], 1
jmp 0x454e85
and dword [ebp - 0xdb4], 0
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x870], eax
jle 0x454ea8
mov dword [ebp - 0xdbc], 1
jmp 0x454eaf
and dword [ebp - 0xdbc], 0
cmp dword [ebp - 0xdbc], 0x299fa9ef
jne 0x454ec7
mov dword [ebp - 0x878], 1
jmp 0x454ece
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x878]
neg eax
cmp eax, dword [ebp - 0x308]
je 0x454eea
mov dword [ebp - 0xdc4], 1
jmp 0x454ef1
and dword [ebp - 0xdc4], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0xdc4]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
jg 0x454f19
mov dword [ebp - 0x880], 1
jmp 0x454f20
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x880]
sub eax, dword [ebp - 0x308]
cmp dword [ebp - 0x70], eax
je 0x454f3d
mov dword [ebp - 0xdcc], 1
jmp 0x454f44
and dword [ebp - 0xdcc], 0
cmp dword [ebp - 0xdcc], 0x32da
jg 0x454f5c
mov dword [ebp - 0x888], 1
jmp 0x454f63
and dword [ebp - 0x888], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x888]
sub ecx, dword [ebp + eax - 0xfe8]
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0xd01c
jge 0x454f94
mov eax, 0x3a1e
test eax, eax
jne 0x454f94
and dword [ebp - 0xdd4], 0
jmp 0x454f9e
mov dword [ebp - 0xdd4], 1
mov eax, dword [ebp - 0xdd4]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xfe8]
test eax, eax
jle 0x454fd0
mov dword [ebp - 0xddc], 1
jmp 0x454fd7
and dword [ebp - 0xddc], 0
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x424], eax
jne 0x455006
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0xdec]
neg eax
jne 0x4550a2
cmp dword [ebp - 0x484], 0
jne 0x4550a2
and dword [ebp - 0x8a8], 0
jmp 0x4550ac
mov dword [ebp - 0x8a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfe8]
cmp dword [ebp - 0x8a8], eax
jle 0x4550cd
mov dword [ebp - 0xdf4], 1
jmp 0x4550d4
and dword [ebp - 0xdf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfe8]
cmp dword [ebp - 0xdf4], eax
jge 0x4550f5
mov dword [ebp - 0x1194], 1
jmp 0x4550fc
and dword [ebp - 0x1194], 0
cmp dword [ebp - 0x144], 0x2408
jge 0x455114
mov dword [ebp - 0x8b0], 1
jmp 0x45511b
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x8b0], eax
jle 0x455135
mov dword [ebp - 0xdfc], 1
jmp 0x45513c
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0xdfc]
sub eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x144]
jge 0x45515c
mov dword [ebp - 0x8b8], 1
jmp 0x455163
and dword [ebp - 0x8b8], 0
imul eax, dword [ebp - 0x8b8], 0xff24
add eax, 9
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xfe8]
jg 0x45518b
mov dword [ebp - 0xe04], 1
jmp 0x455192
and dword [ebp - 0xe04], 0
cmp dword [ebp - 0xe04], 1
jbe 0x4551a7
mov dword [ebp - 0x8c0], 1
jmp 0x4551ae
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x8c0], eax
je 0x4551c8
mov dword [ebp - 0xe0c], 1
jmp 0x4551cf
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x103c], eax
mov dword [ebp - 0x51c], 1
mov dword [ebp - 0x1280], 1
mov dword [ebp - 0x127c], 1
mov dword [ebp - 0x1278], 1
mov dword [ebp - 0x1274], 1
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x8e8], 0xb0d1
mov dword [ebp - 0x104c], 0xfffffffb
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x310], 7
mov dword [ebp - 0x8e0], 0x3e91cb64
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1280]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf0], 3
jmp 0x455275