Function at 0x42c533
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Delete file
Delete registry key
Get file attributes
Move file
Parse pe header
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x567193
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x4456c
call fcn.005374e0
push esi
push edi
lea ecx, [ebp - 0x410a0]
call fcn.004e70a0
mov dword [ebp - 4], 0
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x410a8], eax
mov ecx, dword [0x5be480]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 1
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x41750], edx
mov eax, dword [ebp - 0x41750]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x28]
mov dword [ebp - 0x41754], edx
mov eax, dword [ebp - 0x41754]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x24]
mov dword [ebp - 0x41758], edx
mov eax, dword [ebp - 0x41758]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x4175c], edx
mov eax, dword [ebp - 0x4175c]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x18]
mov dword [ebp - 0x41760], edx
mov eax, dword [ebp - 0x41760]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
mov byte [ebp - 4], 2
mov edx, dword [0x5c2d68]
mov dword [ebp - 0x41dac], edx
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x41b14], eax
push 0x208
lea ecx, [ebp - 0x41a40]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x41a40]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d39c
mov byte [ebp - 4], 3
push 0x5c
lea ecx, [ebp - 0x41ad8]
call fcn.0054a7e6
mov dword [ebp - 0x41c50], eax
mov eax, dword [ebp - 0x41c50]
add eax, 1
push eax
lea ecx, [ebp - 0x41b04]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a76e
mov byte [ebp - 4], 4
push 0x5abce8
lea edx, [ebp - 0x41b04]
push edx
lea eax, [ebp - 0x41c5c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x41d68], eax
mov ecx, dword [ebp - 0x41d68]
mov edx, dword [ecx]
mov dword [ebp - 0x41d6c], edx
mov eax, dword [ebp - 0x41d6c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x41c58], al
lea ecx, [ebp - 0x41c5c]
call fcn.0054d328
mov ecx, dword [ebp - 0x41c58]
and ecx, 0xff
test ecx, ecx
je 0x42c70e
mov edx, dword [ebp - 0x41b14]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x41c60], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
mov eax, dword [0x5be480]
mov dword [ebp - 0x4179c], eax
mov byte [ebp - 4], 5
mov ecx, dword [0x5be480]
mov dword [ebp - 0x41838], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552c60
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.005527dd
mov byte [ebp - 4], 8
lea edx, [ebp - 0x41c3c]
mov dword [ebp - 0x41d70], edx
mov eax, dword [ebp - 0x41d70]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
mov byte [ebp - 4], 9
mov dword [ebp - method.CFileException.virtual_0], vtable.CFileException.0
mov dword [ebp - 0x41c44], 0
mov dword [ebp - 0x41c40], 0xffffffff
push 0
lea ecx, [ebp - 0x41c3c]
call fcn.0054d4bf
mov byte [ebp - 4], 0xa
push 0x5abce8
lea edx, [ebp - 0x41b04]
push edx
lea eax, [ebp - 0x41c64]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x438c4], eax
mov ecx, dword [ebp - 0x438c4]
mov dword [ebp - 0x41d74], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x41d74]
mov eax, dword [edx]
mov dword [ebp - 0x41d78], eax
lea ecx, [ebp - 0x41c4c]
push ecx
push 0
mov edx, dword [ebp - 0x41d78]
push edx
lea ecx, [ebp - 0x41afc]
call fcn.00552d6e
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41c64]
call fcn.0054d328
lea eax, [ebp - 0x41838]
push eax
lea ecx, [ebp - 0x41afc]
call fcn.00552f53
test eax, eax
je 0x42c828
lea ecx, [ebp - 0x41838]
push ecx
lea ecx, [ebp - 0x4179c]
call fcn.0054d755
jmp 0x42c7fe
lea edx, [ebp - 0x41838]
push edx
lea ecx, [ebp - 0x4179c]
call fcn.0054d755
lea ecx, [ebp - 0x41afc]
call fcn.005530a6
lea ecx, [ebp - 0x41838]
call fcn.0054d2b0
lea ecx, [ebp - 0x4179c]
call fcn.0054acc3
lea ecx, [ebp - 0x4179c]
call fcn.0054abd2
push 0x5c2d6c
push 0x5a9614
lea ecx, [ebp - 0x4179c]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abce0
lea ecx, [ebp - 0x4179c]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abcdc
lea ecx, [ebp - 0x4179c]
call fcn.0054a4c8
mov eax, dword [ebp - 0x4179c]
mov ecx, dword [eax - 8]
mov dword [ebp - 0x41d7c], ecx
cmp dword [ebp - 0x41d7c], 0x78
jl 0x42c8d8
mov edx, dword [ebp - 0x4179c]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41d80], eax
cmp dword [ebp - 0x41d80], 0x82
jle 0x42c951
mov ecx, dword [ebp - 0x41b14]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x41c68], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
push 0x5abcd0
lea ecx, [ebp - 0x41b00]
call fcn.0054d39c
mov byte [ebp - 4], 0xc
push 0x5abbcc
lea ecx, [ebp - 0x41798]
call fcn.0054d39c
mov byte [ebp - 4], 0xd
mov edx, dword [0x5be480]
mov dword [ebp - 0x41c54], edx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f30
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f30
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f30
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f30
mov byte [ebp - 4], 0x12
push 0x10
lea eax, [ebp - 0x41798]
push eax
lea ecx, [ebp - 0x41c38]
call fcn.004035c7
push 0x10
lea ecx, [ebp - 0x41b00]
push ecx
lea ecx, [ebp - 0x41ad0]
call fcn.004035c7
push 0x10
lea edx, [ebp - 0x4179c]
push edx
lea ecx, [ebp - 0x41834]
call fcn.004035c7
lea eax, [ebp - 0x41c38]
push eax
lea ecx, [ebp - 0x41ad0]
push ecx
lea edx, [ebp - 0x41cf8]
push edx
lea ecx, [ebp - 0x41834]
call fcn.00403df7
mov dword [ebp - 0x438c8], eax
mov esi, dword [ebp - 0x438c8]
mov ecx, 0x24
lea edi, [ebp - 0x41ba4]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x41cf8]
call fcn.00401f71
push 0x10
lea eax, [ebp - 0x41c54]
push eax
lea ecx, [ebp - 0x41ba4]
call fcn.00403832
mov ecx, dword [ebp - 0x41c54]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x41d84], edx
mov eax, dword [ebp - 0x41d84]
and eax, 0x80000001
jns 0x42ca7a
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42cb65
mov ecx, dword [ebp - 0x41b14]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x41cfc], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
push ecx
mov ecx, esp
mov dword [ebp - 0x41d00], esp
lea edx, [ebp - 0x41c54]
push edx
call fcn.0054d095
mov dword [ebp - 0x438cc], eax
lea eax, [ebp - 0x41d04]
push eax
mov ecx, dword [ebp - 0x41b14]
call fcn.004c1480
mov dword [ebp - 0x438d0], eax
mov ecx, dword [ebp - 0x438d0]
mov dword [ebp - 0x438d4], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x438d4]
push edx
lea ecx, [ebp - 0x41838]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d04]
call fcn.0054d328
lea eax, [ebp - 0x41838]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 2
lea ecx, [ebp - 0x41d08]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a76e
mov dword [ebp - 0x438d8], eax
mov edx, dword [ebp - 0x438d8]
mov dword [ebp - 0x438dc], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x438dc]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d08]
call fcn.0054d328
push 0x5abbc4
mov ecx, dword [ebp - 0x41ad8]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41d88], eax
xor edx, edx
cmp dword [ebp - 0x41d88], 0
setne dl
and edx, 0xff
test edx, edx
je 0x42cd3c
mov eax, dword [ebp - 0x41b14]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x41d0c], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
lea ecx, [ebp - 0x41838]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 1
push 2
lea edx, [ebp - 0x41d10]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x438e0], eax
mov eax, dword [ebp - 0x438e0]
mov dword [ebp - 0x438e4], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x438e4]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d10]
call fcn.0054d328
push 0x5abbc0
mov edx, dword [ebp - 0x41ad8]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41d8c], eax
xor eax, eax
cmp dword [ebp - 0x41d8c], 0
setne al
and eax, 0xff
test eax, eax
je 0x42ceb0
mov ecx, dword [ebp - 0x41b14]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x41d14], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
lea edx, [ebp - 0x41838]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 1
push 7
lea eax, [ebp - 0x41d18]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x438e8], eax
mov ecx, dword [ebp - 0x438e8]
mov dword [ebp - 0x438ec], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x438ec]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d18]
call fcn.0054d328
push 0x5abbbc
mov eax, dword [ebp - 0x41ad8]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41d90], eax
xor ecx, ecx
cmp dword [ebp - 0x41d90], 0
setne cl
and ecx, 0xff
test ecx, ecx
je 0x42d025
mov edx, dword [ebp - 0x41b14]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x41d1c], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
lea eax, [ebp - 0x41838]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 1
push 0xa
lea ecx, [ebp - 0x41d20]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x438f0], eax
mov edx, dword [ebp - 0x438f0]
mov dword [ebp - 0x438f4], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x438f4]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d20]
call fcn.0054d328
push 0x5abbb8
mov ecx, dword [ebp - 0x41ad8]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41d94], eax
xor edx, edx
cmp dword [ebp - 0x41d94], 0
setne dl
and edx, 0xff
test edx, edx
je 0x42d19a
mov eax, dword [ebp - 0x41b14]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x41d24], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
lea ecx, [ebp - 0x41838]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 1
push 0xd
lea edx, [ebp - 0x41d28]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x438f8], eax
mov eax, dword [ebp - 0x438f8]
mov dword [ebp - 0x438fc], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x438fc]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d28]
call fcn.0054d328
push 0x5abcf8
mov edx, dword [ebp - 0x41ad8]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41d98], eax
xor eax, eax
cmp dword [ebp - 0x41d98], 0
setne al
and eax, 0xff
test eax, eax
je 0x42d30e
mov ecx, dword [ebp - 0x41b14]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x41d2c], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
mov dword [ebp - 0x41ae4], 0
mov dword [ebp - 0x41ae8], 0
mov dword [ebp - 0x41ae0], 0
lea edx, [ebp - 0x41838]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 4
push 3
lea eax, [ebp - 0x41d30]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x43900], eax
mov ecx, dword [ebp - 0x43900]
mov dword [ebp - 0x43904], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x43904]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d30]
call fcn.0054d328
mov eax, dword [ebp - 0x41ad8]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x41ae4], eax
lea ecx, [ebp - 0x41838]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 2
push 8
lea edx, [ebp - 0x41d34]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x43908], eax
mov eax, dword [ebp - 0x43908]
mov dword [ebp - 0x4390c], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x4390c]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d34]
call fcn.0054d328
mov edx, dword [ebp - 0x41ad8]
push edx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x41ae8], eax
lea eax, [ebp - 0x41838]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 2
push 0xb
lea ecx, [ebp - 0x41d38]
push ecx
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x43910], eax
mov edx, dword [ebp - 0x43910]
mov dword [ebp - 0x43914], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x43914]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d38]
call fcn.0054d328
mov ecx, dword [ebp - 0x41ad8]
push ecx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x41ae0], eax
push 0xffffffffffffffff
push 0
push 0
push 0
mov edx, dword [ebp - 0x41ae0]
push edx
mov eax, dword [ebp - 0x41ae8]
push eax
mov ecx, dword [ebp - 0x41ae4]
push ecx
lea ecx, [ebp - 0x41ad4]
call fcn.0054adfb
mov dword [ebp - 0x417a0], 0
push 0x34
push 0
lea edx, [ebp - 0x41794]
push edx
call fcn.005370b0
add esp, 0xc
push 0x208
lea eax, [ebp - 0x41a40]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x27
push 3
push 0
push 1
push SysReAllocStringLen
lea ecx, [ebp - 0x41a40]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x41ba8], eax
cmp dword [ebp - 0x41ba8], 0xffffffff
jne 0x42d5e2
mov dword [ebp - 0x41d3c], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
lea edx, [ebp - 0x41794]
push edx
mov eax, dword [ebp - 0x41ba8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [ebp - 0x41b0c], eax
mov ecx, dword [ebp - 0x41ba8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x41790]
mov dword [ebp - 0x417a0], edx
cmp dword [ebp - 0x417a0], 0
je 0x42d646
push 0xffffffffffffffff
mov eax, dword [ebp - 0x417a0]
push eax
lea ecx, [ebp - 0x41d40]
call fcn.0054ae93
mov dword [ebp - 0x41d9c], eax
mov ecx, dword [ebp - 0x41d9c]
mov edx, dword [ecx]
mov dword [ebp - 0x417a4], edx
push ecx
mov eax, esp
mov dword [ebp - 0x41d44], esp
push eax
call fcn.0054aedf
lea ecx, [ebp - 0x41d48]
push ecx
lea ecx, [ebp - 0x417a4]
call fcn.0043c2f0
mov dword [ebp - 0x41da0], eax
mov edx, dword [ebp - 0x41da0]
mov eax, dword [edx]
mov dword [ebp - 0x41b10], eax
mov eax, dword [ebp - 0x41b10]
cdq
mov ecx, 0x15180
idiv ecx
test eax, eax
jle 0x42d773
mov edx, dword [ebp - 0x41b14]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x41d4c], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
lea eax, [ebp - 0x41d50]
push eax
call fcn.0054aedf
mov dword [ebp - 0x41da4], eax
mov ecx, dword [ebp - 0x41da4]
mov edx, dword [ecx]
mov dword [ebp - 0x417a4], edx
push ecx
mov eax, esp
mov dword [ebp - 0x41d54], esp
mov dword [ebp - 0x41da8], eax
mov ecx, dword [ebp - 0x41da8]
mov edx, dword [ebp - 0x41ad4]
mov dword [ecx], edx
lea eax, [ebp - 0x41d58]
push eax
lea ecx, [ebp - 0x417a4]
call fcn.0043c2f0
mov dword [ebp - 0x43918], eax
mov ecx, dword [ebp - 0x43918]
mov edx, dword [ecx]
mov dword [ebp - 0x41b10], edx
mov eax, dword [ebp - 0x41b10]
cdq
mov ecx, 0x15180
idiv ecx
mov dword [ebp - 0x41b08], eax
mov dword [ebp - 0x41adc], 0
lea edx, [ebp - 0x41838]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
push 2
push 0xe
lea eax, [ebp - 0x41d5c]
push eax
lea ecx, [ebp - 0x41ad8]
call fcn.0054a65c
mov dword [ebp - 0x4391c], eax
mov ecx, dword [ebp - 0x4391c]
mov dword [ebp - 0x43920], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x43920]
push edx
lea ecx, [ebp - 0x41ad8]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41d5c]
call fcn.0054d328
mov eax, dword [ebp - 0x41ad8]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x41adc], eax
mov ecx, dword [ebp - 0x41adc]
imul ecx, ecx, 0x16d
cmp dword [ebp - 0x41b08], ecx
jg 0x42d889
cmp dword [ebp - 0x41b08], 0
jge 0x42d96b
mov edx, dword [ebp - 0x41b14]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x41d60], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
jmp 0x42da38
mov dword [ebp - 0x41d64], 1
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x41834]
call fcn.00401f71
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x41ba4]
call fcn.00401f71
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41ad0]
call fcn.00401f71
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x41c38]
call fcn.00401f71
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x41c54]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41798]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x41b00]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c4c]
call fcn.0043c2a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x41afc]
call fcn.00552d2b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x41838]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4179c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41b04]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41ad8]
call fcn.0054d328
mov dword [ebp - 0x410a4], 0
mov dword [ebp - 0x10], 0
mov eax, dword [0x5c2d68]
mov dword [ebp - 0x423e8], eax
call fcn.0055f60b
mov ecx, dword [eax + 4]
mov dword [ebp - 0x42160], ecx
push 0x208
lea edx, [ebp - 0x4208c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x4208c]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054d39c
mov byte [ebp - 4], 0x1d
push 0x5c
lea ecx, [ebp - 0x42124]
call fcn.0054a7e6
mov dword [ebp - 0x4229c], eax
mov ecx, dword [ebp - 0x4229c]
add ecx, 1
push ecx
lea edx, [ebp - 0x42150]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054a76e
mov byte [ebp - 4], 0x1e
push 0x5abce8
lea eax, [ebp - 0x42150]
push eax
lea ecx, [ebp - 0x422a8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x423ac], eax
mov edx, dword [ebp - 0x423ac]
mov eax, dword [edx]
mov dword [ebp - 0x423b0], eax
mov ecx, dword [ebp - 0x423b0]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x422a4], al
lea ecx, [ebp - 0x422a8]
call fcn.0054d328
mov edx, dword [ebp - 0x422a4]
and edx, 0xff
test edx, edx
je 0x42db67
mov eax, dword [ebp - 0x42160]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x422ac], 0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov ecx, dword [ebp - 0x422ac]
mov dword [ebp - 0x423ec], ecx
jmp 0x42ed63
mov edx, dword [0x5be480]
mov dword [ebp - 0x41de8], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [0x5be480]
mov dword [ebp - 0x41e84], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552c60
mov byte [ebp - 4], 0x21
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x42298]
call fcn.0043c340
mov byte [ebp - 4], 0x22
push 0x5abce8
lea ecx, [ebp - 0x42150]
push ecx
lea edx, [ebp - 0x422b0]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x43924], eax
mov eax, dword [ebp - 0x43924]
mov dword [ebp - 0x423b4], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x423b4]
mov edx, dword [ecx]
mov dword [ebp - 0x423b8], edx
lea eax, [ebp - 0x42298]
push eax
push 0
mov ecx, dword [ebp - 0x423b8]
push ecx
lea ecx, [ebp - 0x42148]
call fcn.00552d6e
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x422b0]
call fcn.0054d328
lea edx, [ebp - 0x41e84]
push edx
lea ecx, [ebp - 0x42148]
call fcn.00552f53
test eax, eax
je 0x42dc3a
lea eax, [ebp - 0x41e84]
push eax
lea ecx, [ebp - 0x41de8]
call fcn.0054d755
jmp 0x42dc10
lea ecx, [ebp - 0x41e84]
push ecx
lea ecx, [ebp - 0x41de8]
call fcn.0054d755
lea ecx, [ebp - 0x42148]
call fcn.005530a6
lea ecx, [ebp - 0x41e84]
call fcn.0054d2b0
lea ecx, [ebp - 0x41de8]
call fcn.0054acc3
lea ecx, [ebp - 0x41de8]
call fcn.0054abd2
push 0x5c2d6c
push 0x5a9614
lea ecx, [ebp - 0x41de8]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abce0
lea ecx, [ebp - 0x41de8]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abcdc
lea ecx, [ebp - 0x41de8]
call fcn.0054a4c8
mov edx, dword [ebp - 0x41de8]
mov eax, dword [edx - 8]
mov dword [ebp - 0x423bc], eax
cmp dword [ebp - 0x423bc], 0x78
jl 0x42dcee
mov ecx, dword [ebp - 0x41de8]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x423c0], edx
cmp dword [ebp - 0x423c0], 0x82
jle 0x42dd85
mov eax, dword [ebp - 0x42160]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x422b4], 0
mov byte [ebp - 4], 0x21
mov dword [ebp - method.CFileException.virtual_0], vtable.CFileException.0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x42288]
call fcn.0054d328
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov ecx, dword [ebp - 0x422b4]
mov dword [ebp - 0x423ec], ecx
jmp 0x42ed63
push 0x5abcd0
lea ecx, [ebp - 0x4214c]
call fcn.0054d39c
mov byte [ebp - 4], 0x25
push 0x5abbcc
lea ecx, [ebp - 0x41de4]
call fcn.0054d39c
mov byte [ebp - 4], 0x26
mov edx, dword [0x5be480]
mov dword [ebp - 0x422a0], edx
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f30
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f30
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f30
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f30
mov byte [ebp - 4], 0x2b
push 0x10
lea eax, [ebp - 0x41de4]
push eax
lea ecx, [ebp - 0x42284]
call fcn.004035c7
push 0x10
lea ecx, [ebp - 0x4214c]
push ecx
lea ecx, [ebp - 0x4211c]
call fcn.004035c7
push 0x10
lea edx, [ebp - 0x41de8]
push edx
lea ecx, [ebp - 0x41e80]
call fcn.004035c7
lea eax, [ebp - 0x42284]
push eax
lea ecx, [ebp - 0x4211c]
push ecx
lea edx, [ebp - 0x42344]
push edx
lea ecx, [ebp - 0x41e80]
call fcn.00403df7
mov dword [ebp - 0x43928], eax
mov esi, dword [ebp - 0x43928]
mov ecx, 0x24
lea edi, [ebp - 0x421f0]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x42344]
call fcn.00401f71
push 0x10
lea eax, [ebp - 0x422a0]
push eax
lea ecx, [ebp - 0x421f0]
call fcn.00403832
mov ecx, dword [ebp - 0x422a0]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x423c4], edx
mov eax, dword [ebp - 0x423c4]
and eax, 0x80000001
jns 0x42deae
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42dfa5
mov ecx, dword [ebp - 0x42160]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x42348], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov edx, dword [ebp - 0x42348]
mov dword [ebp - 0x423ec], edx
jmp 0x42ed63
push ecx
mov ecx, esp
mov dword [ebp - 0x4234c], esp
lea eax, [ebp - 0x422a0]
push eax
call fcn.0054d095
mov dword [ebp - 0x4392c], eax
lea ecx, [ebp - 0x42350]
push ecx
mov ecx, dword [ebp - 0x42160]
call fcn.004c1480
mov dword [ebp - 0x43930], eax
mov edx, dword [ebp - 0x43930]
mov dword [ebp - 0x43934], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x43934]
push eax
lea ecx, [ebp - 0x41e84]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x42350]
call fcn.0054d328
lea ecx, [ebp - 0x41e84]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 2
lea edx, [ebp - 0x42354]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054a76e
mov dword [ebp - 0x43938], eax
mov eax, dword [ebp - 0x43938]
mov dword [ebp - 0x4393c], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x4393c]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x42354]
call fcn.0054d328
push 0x5abbc4
mov edx, dword [ebp - 0x42124]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x423c8], eax
xor eax, eax
cmp dword [ebp - 0x423c8], 0
setne al
and eax, 0xff
test eax, eax
je 0x42e187
mov ecx, dword [ebp - 0x42160]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x42358], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov edx, dword [ebp - 0x42358]
mov dword [ebp - 0x423ec], edx
jmp 0x42ed63
lea eax, [ebp - 0x41e84]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 1
push 2
lea ecx, [ebp - 0x4235c]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43940], eax
mov edx, dword [ebp - 0x43940]
mov dword [ebp - 0x43944], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x43944]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4235c]
call fcn.0054d328
push 0x5abbc0
mov ecx, dword [ebp - 0x42124]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x423cc], eax
xor edx, edx
cmp dword [ebp - 0x423cc], 0
setne dl
and edx, 0xff
test edx, edx
je 0x42e308
mov eax, dword [ebp - 0x42160]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x42360], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov ecx, dword [ebp - 0x42360]
mov dword [ebp - 0x423ec], ecx
jmp 0x42ed63
lea edx, [ebp - 0x41e84]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 1
push 7
lea eax, [ebp - 0x42364]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43948], eax
mov ecx, dword [ebp - 0x43948]
mov dword [ebp - 0x4394c], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x4394c]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x42364]
call fcn.0054d328
push 0x5abbbc
mov eax, dword [ebp - 0x42124]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x423d0], eax
xor ecx, ecx
cmp dword [ebp - 0x423d0], 0
setne cl
and ecx, 0xff
test ecx, ecx
je 0x42e489
mov edx, dword [ebp - 0x42160]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x42368], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov eax, dword [ebp - 0x42368]
mov dword [ebp - 0x423ec], eax
jmp 0x42ed63
lea ecx, [ebp - 0x41e84]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 1
push 0xa
lea edx, [ebp - 0x4236c]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43950], eax
mov eax, dword [ebp - 0x43950]
mov dword [ebp - 0x43954], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x43954]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4236c]
call fcn.0054d328
push 0x5abbb8
mov edx, dword [ebp - 0x42124]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x423d4], eax
xor eax, eax
cmp dword [ebp - 0x423d4], 0
setne al
and eax, 0xff
test eax, eax
je 0x42e609
mov ecx, dword [ebp - 0x42160]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x42370], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov edx, dword [ebp - 0x42370]
mov dword [ebp - 0x423ec], edx
jmp 0x42ed63
mov dword [ebp - 0x42130], 0
mov dword [ebp - 0x42134], 0
mov dword [ebp - 0x4212c], 0
lea eax, [ebp - 0x41e84]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 4
push 3
lea ecx, [ebp - 0x42374]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43958], eax
mov edx, dword [ebp - 0x43958]
mov dword [ebp - 0x4395c], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x4395c]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x42374]
call fcn.0054d328
mov ecx, dword [ebp - 0x42124]
push ecx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42130], eax
lea edx, [ebp - 0x41e84]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 2
push 8
lea eax, [ebp - 0x42378]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43960], eax
mov ecx, dword [ebp - 0x43960]
mov dword [ebp - 0x43964], ecx
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x43964]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x42378]
call fcn.0054d328
mov eax, dword [ebp - 0x42124]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42134], eax
lea ecx, [ebp - 0x41e84]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 2
push 0xb
lea edx, [ebp - 0x4237c]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43968], eax
mov eax, dword [ebp - 0x43968]
mov dword [ebp - 0x4396c], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x4396c]
push ecx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4237c]
call fcn.0054d328
mov edx, dword [ebp - 0x42124]
push edx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x4212c], eax
push 0xffffffffffffffff
push 0
push 0
push 0
mov eax, dword [ebp - 0x4212c]
push eax
mov ecx, dword [ebp - 0x42134]
push ecx
mov edx, dword [ebp - 0x42130]
push edx
lea ecx, [ebp - 0x42120]
call fcn.0054adfb
mov dword [ebp - 0x41dec], 0
push 0x34
push 0
lea eax, [ebp - 0x41de0]
push eax
call fcn.005370b0
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x4208c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x27
push 3
push 0
push 1
push SysReAllocStringLen
lea edx, [ebp - 0x4208c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x421f4], eax
cmp dword [ebp - 0x421f4], 0xffffffff
jne 0x42e8e9
mov dword [ebp - 0x42380], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov eax, dword [ebp - 0x42380]
mov dword [ebp - 0x423ec], eax
jmp 0x42ed63
lea ecx, [ebp - 0x41de0]
push ecx
mov edx, dword [ebp - 0x421f4]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [ebp - 0x42158], eax
mov eax, dword [ebp - 0x421f4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x41ddc]
mov dword [ebp - 0x41dec], ecx
cmp dword [ebp - 0x41dec], 0
je 0x42e94d
push 0xffffffffffffffff
mov edx, dword [ebp - 0x41dec]
push edx
lea ecx, [ebp - 0x42384]
call fcn.0054ae93
mov dword [ebp - 0x423d8], eax
mov eax, dword [ebp - 0x423d8]
mov ecx, dword [eax]
mov dword [ebp - 0x41df0], ecx
push ecx
mov edx, esp
mov dword [ebp - 0x42388], esp
push edx
call fcn.0054aedf
lea eax, [ebp - 0x4238c]
push eax
lea ecx, [ebp - 0x41df0]
call fcn.0043c2f0
mov dword [ebp - 0x423dc], eax
mov ecx, dword [ebp - 0x423dc]
mov edx, dword [ecx]
mov dword [ebp - 0x4215c], edx
mov eax, dword [ebp - 0x4215c]
cdq
mov ecx, 0x15180
idiv ecx
test eax, eax
jle 0x42ea86
mov edx, dword [ebp - 0x42160]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x42390], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov eax, dword [ebp - 0x42390]
mov dword [ebp - 0x423ec], eax
jmp 0x42ed63
lea ecx, [ebp - 0x42394]
push ecx
call fcn.0054aedf
mov dword [ebp - 0x423e0], eax
mov edx, dword [ebp - 0x423e0]
mov eax, dword [edx]
mov dword [ebp - 0x41df0], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x42398], esp
mov dword [ebp - 0x423e4], ecx
mov edx, dword [ebp - 0x423e4]
mov eax, dword [ebp - 0x42120]
mov dword [edx], eax
lea ecx, [ebp - 0x4239c]
push ecx
lea ecx, [ebp - 0x41df0]
call fcn.0043c2f0
mov dword [ebp - 0x43970], eax
mov edx, dword [ebp - 0x43970]
mov eax, dword [edx]
mov dword [ebp - 0x4215c], eax
mov eax, dword [ebp - 0x4215c]
cdq
mov ecx, 0x15180
idiv ecx
mov dword [ebp - 0x42154], eax
mov dword [ebp - 0x42128], 0
lea edx, [ebp - 0x41e84]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
push 2
push 0xe
lea eax, [ebp - 0x423a0]
push eax
lea ecx, [ebp - 0x42124]
call fcn.0054a65c
mov dword [ebp - 0x43974], eax
mov ecx, dword [ebp - 0x43974]
mov dword [ebp - 0x43978], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x43978]
push edx
lea ecx, [ebp - 0x42124]
call fcn.0054d46f
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x423a0]
call fcn.0054d328
mov eax, dword [ebp - 0x42124]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42128], eax
mov ecx, dword [ebp - 0x42128]
imul ecx, ecx, 0x16d
cmp dword [ebp - 0x42154], ecx
jg 0x42eb9c
cmp dword [ebp - 0x42154], 0
jge 0x42ec8a
mov edx, dword [ebp - 0x42160]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x423a4], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov eax, dword [ebp - 0x423a4]
mov dword [ebp - 0x423ec], eax
jmp 0x42ed63
mov dword [ebp - 0x423a8], 1
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x41e80]
call fcn.00401f71
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x421f0]
call fcn.00401f71
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4211c]
call fcn.00401f71
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x42284]
call fcn.00401f71
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x422a0]
call fcn.0054d328
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x41de4]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4214c]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x42298]
call fcn.0043c2a0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x42148]
call fcn.00552d2b
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41e84]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41de8]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x42150]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42124]
call fcn.0054d328
mov ecx, dword [ebp - 0x423a8]
mov dword [ebp - 0x423ec], ecx
cmp dword [ebp - 0x423ec], 0
je 0x42f656
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x308]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x42ed9a
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x42f654
mov eax, dword [ebp - 0x410a4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x304]
add edx, eax
mov dword [ebp - 0x423f0], edx
mov eax, dword [ebp - 0x423f0]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x423f0]
add edx, 4
push edx
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov eax, dword [ebp - 0x423f0]
add eax, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov ecx, dword [ebp - 0x423f0]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov edx, dword [ebp - 0x423f0]
add edx, 0x10
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov eax, dword [ebp - 0x423f0]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x423f0]
add edx, 0x18
push edx
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aa568
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410b0], eax
mov ecx, dword [ebp - 0x410b0]
push ecx
lea edx, [ebp - 0x41130]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x4397c], eax
mov eax, dword [ebp - 0x4397c]
mov dword [ebp - 0x43980], eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x43980]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41130]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41134], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x43984], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43988], eax
mov eax, dword [ebp - 0x43988]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41138], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x4398c], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43990], eax
cmp dword [ebp - 0x43990], 0
je 0x42f64f
cmp dword [ebp - 0x30], 1
jne 0x42f4a6
push ecx
mov ecx, esp
mov dword [ebp - 0x4113c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43994], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43998], eax
cmp dword [ebp - 0x43998], 0
je 0x42f1fe
lea eax, [ebp - 0x20]
push eax
push 0x5aa56c
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa574
lea edx, [ebp - 0x28]
push edx
push 0x5aa57c
lea eax, [ebp - 0x41140]
push eax
call fcn.0054d641
mov dword [ebp - 0x4399c], eax
mov ecx, dword [ebp - 0x4399c]
mov dword [ebp - 0x439a0], ecx
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x439a0]
push edx
lea eax, [ebp - 0x41144]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x439a4], eax
mov ecx, dword [ebp - 0x439a4]
mov dword [ebp - 0x439a8], ecx
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x439a8]
push edx
lea eax, [ebp - 0x41148]
push eax
call fcn.0054d567
mov dword [ebp - 0x439ac], eax
mov ecx, dword [ebp - 0x439ac]
mov dword [ebp - 0x439b0], ecx
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x439b0]
push edx
lea eax, [ebp - 0x4114c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x439b4], eax
mov ecx, dword [ebp - 0x439b4]
mov dword [ebp - 0x439b8], ecx
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x439b8]
push edx
lea eax, [ebp - 0x41150]
push eax
call fcn.0054d567
mov dword [ebp - 0x423f4], eax
mov ecx, dword [ebp - 0x423f4]
mov edx, dword [ecx]
mov dword [ebp - 0x423f8], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x423fc], eax
mov ecx, dword [ebp - 0x423f8]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x423fc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41150]
call fcn.0054d328
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x4114c]
call fcn.0054d328
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x41148]
call fcn.0054d328
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x41144]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41140]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa59c
lea edx, [ebp - 0x24]
push edx
push 0x5aa5a4
lea eax, [ebp - 0x28]
push eax
push 0x5aa5ac
lea ecx, [ebp - 0x41154]
push ecx
call fcn.0054d641
mov dword [ebp - 0x439bc], eax
mov edx, dword [ebp - 0x439bc]
mov dword [ebp - 0x439c0], edx
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x439c0]
push eax
lea ecx, [ebp - 0x41158]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x439c4], eax
mov edx, dword [ebp - 0x439c4]
mov dword [ebp - 0x439c8], edx
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x439c8]
push eax
lea ecx, [ebp - 0x4115c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x439cc], eax
mov edx, dword [ebp - 0x439cc]
mov dword [ebp - 0x439d0], edx
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x439d0]
push eax
lea ecx, [ebp - 0x41160]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x439d4], eax
mov edx, dword [ebp - 0x439d4]
mov dword [ebp - 0x439d8], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x439d8]
push eax
lea ecx, [ebp - 0x41164]
push ecx
call fcn.0054d567
mov dword [ebp - 0x439dc], eax
mov edx, dword [ebp - 0x439dc]
mov dword [ebp - 0x42400], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x42400]
mov ecx, dword [eax]
mov dword [ebp - 0x42404], ecx
mov edx, dword [ebp - 0x42404]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x41164]
call fcn.0054d328
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x41160]
call fcn.0054d328
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x4115c]
call fcn.0054d328
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x41158]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41154]
call fcn.0054d328
jmp 0x42f4a1
lea eax, [ebp - 0x20]
push eax
push 0x5aa5cc
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa5d4
lea edx, [ebp - 0x28]
push edx
push 0x5aa5dc
lea eax, [ebp - 0x41168]
push eax
call fcn.0054d641
mov dword [ebp - 0x439e0], eax
mov ecx, dword [ebp - 0x439e0]
mov dword [ebp - 0x439e4], ecx
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x439e4]
push edx
lea eax, [ebp - 0x4116c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x439e8], eax
mov ecx, dword [ebp - 0x439e8]
mov dword [ebp - 0x439ec], ecx
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x439ec]
push edx
lea eax, [ebp - 0x41170]
push eax
call fcn.0054d567
mov dword [ebp - 0x439f0], eax
mov ecx, dword [ebp - 0x439f0]
mov dword [ebp - 0x439f4], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x439f4]
push edx
lea eax, [ebp - 0x41174]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x439f8], eax
mov ecx, dword [ebp - 0x439f8]
mov dword [ebp - 0x439fc], ecx
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x439fc]
push edx
lea eax, [ebp - 0x41178]
push eax
call fcn.0054d567
mov dword [ebp - 0x42408], eax
mov ecx, dword [ebp - 0x42408]
mov edx, dword [ecx]
mov dword [ebp - 0x4240c], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42410], eax
mov ecx, dword [ebp - 0x4240c]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42410]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41178]
call fcn.0054d328
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x41174]
call fcn.0054d328
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x41170]
call fcn.0054d328
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x4116c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41168]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa5fc
lea edx, [ebp - 0x24]
push edx
push 0x5aa604
lea eax, [ebp - 0x28]
push eax
push 0x5aa60c
lea ecx, [ebp - 0x4117c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43a00], eax
mov edx, dword [ebp - 0x43a00]
mov dword [ebp - 0x43a04], edx
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x43a04]
push eax
lea ecx, [ebp - 0x41180]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43a08], eax
mov edx, dword [ebp - 0x43a08]
mov dword [ebp - 0x43a0c], edx
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x43a0c]
push eax
lea ecx, [ebp - 0x41184]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43a10], eax
mov edx, dword [ebp - 0x43a10]
mov dword [ebp - 0x43a14], edx
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0x43a14]
push eax
lea ecx, [ebp - 0x41188]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43a18], eax
mov edx, dword [ebp - 0x43a18]
mov dword [ebp - 0x43a1c], edx
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x43a1c]
push eax
lea ecx, [ebp - 0x4118c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43a20], eax
mov edx, dword [ebp - 0x43a20]
mov dword [ebp - 0x42414], edx
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0x42414]
mov ecx, dword [eax]
mov dword [ebp - 0x42418], ecx
mov edx, dword [ebp - 0x42418]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x4118c]
call fcn.0054d328
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x41188]
call fcn.0054d328
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x41184]
call fcn.0054d328
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x41180]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4117c]
call fcn.0054d328
jmp 0x42f64f
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410b4], eax
cmp dword [ebp - 0x410b4], 0
jne 0x42f58e
lea edx, [ebp - 0x28]
push edx
push 0x5aa630
lea eax, [ebp - 0x41190]
push eax
call fcn.0054d641
mov dword [ebp - 0x4241c], eax
mov ecx, dword [ebp - 0x4241c]
mov edx, dword [ecx]
mov dword [ebp - 0x42420], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42424], eax
mov ecx, dword [ebp - 0x42420]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42424]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41190]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aa650
lea edx, [ebp - 0x41194]
push edx
call fcn.0054d641
mov dword [ebp - 0x43a24], eax
mov eax, dword [ebp - 0x43a24]
mov dword [ebp - 0x42428], eax
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x42428]
mov edx, dword [ecx]
mov dword [ebp - 0x4242c], edx
mov eax, dword [ebp - 0x4242c]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41194]
call fcn.0054d328
jmp 0x42f64f
lea ecx, [ebp - 0x28]
push ecx
push 0x5aa670
lea edx, [ebp - 0x41198]
push edx
call fcn.0054d641
mov dword [ebp - 0x42430], eax
mov eax, dword [ebp - 0x42430]
mov ecx, dword [eax]
mov dword [ebp - 0x42434], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x42438], edx
mov eax, dword [ebp - 0x42434]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x42438]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41198]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aa690
lea ecx, [ebp - 0x4119c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43a28], eax
mov edx, dword [ebp - 0x43a28]
mov dword [ebp - 0x4243c], edx
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0x4243c]
mov ecx, dword [eax]
mov dword [ebp - 0x42440], ecx
mov edx, dword [ebp - 0x42440]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4119c]
call fcn.0054d328
jmp 0x42ed8b
jmp 0x42f66b
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x300
call fcn.0043c920
mov eax, dword [0x5c2d68]
mov dword [ebp - 0x42a7c], eax
call fcn.0055f60b
mov ecx, dword [eax + 4]
mov dword [ebp - 0x427f4], ecx
push 0x208
lea edx, [ebp - 0x42720]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x42720]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054d39c
mov byte [ebp - 4], 0x4a
push 0x5c
lea ecx, [ebp - 0x427b8]
call fcn.0054a7e6
mov dword [ebp - 0x42930], eax
mov ecx, dword [ebp - 0x42930]
add ecx, 1
push ecx
lea edx, [ebp - 0x427e4]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054a76e
mov byte [ebp - 4], 0x4b
push 0x5abce8
lea eax, [ebp - 0x427e4]
push eax
lea ecx, [ebp - 0x4293c]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x42a40], eax
mov edx, dword [ebp - 0x42a40]
mov eax, dword [edx]
mov dword [ebp - 0x42a44], eax
mov ecx, dword [ebp - 0x42a44]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x42938], al
lea ecx, [ebp - 0x4293c]
call fcn.0054d328
mov edx, dword [ebp - 0x42938]
and edx, 0xff
test edx, edx
je 0x42f789
mov eax, dword [ebp - 0x427f4]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x42940], 0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov ecx, dword [ebp - 0x42940]
mov dword [ebp - 0x42a80], ecx
jmp 0x430985
mov edx, dword [0x5be480]
mov dword [ebp - 0x4247c], edx
mov byte [ebp - 4], 0x4c
mov eax, dword [0x5be480]
mov dword [ebp - 0x42518], eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552c60
mov byte [ebp - 4], 0x4e
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x4292c]
call fcn.0043c340
mov byte [ebp - 4], 0x4f
push 0x5abce8
lea ecx, [ebp - 0x427e4]
push ecx
lea edx, [ebp - 0x42944]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x43a2c], eax
mov eax, dword [ebp - 0x43a2c]
mov dword [ebp - 0x42a48], eax
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x42a48]
mov edx, dword [ecx]
mov dword [ebp - 0x42a4c], edx
lea eax, [ebp - 0x4292c]
push eax
push 0
mov ecx, dword [ebp - 0x42a4c]
push ecx
lea ecx, [ebp - 0x427dc]
call fcn.00552d6e
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x42944]
call fcn.0054d328
lea edx, [ebp - 0x42518]
push edx
lea ecx, [ebp - 0x427dc]
call fcn.00552f53
test eax, eax
je 0x42f85c
lea eax, [ebp - 0x42518]
push eax
lea ecx, [ebp - 0x4247c]
call fcn.0054d755
jmp 0x42f832
lea ecx, [ebp - 0x42518]
push ecx
lea ecx, [ebp - 0x4247c]
call fcn.0054d755
lea ecx, [ebp - 0x427dc]
call fcn.005530a6
lea ecx, [ebp - 0x42518]
call fcn.0054d2b0
lea ecx, [ebp - 0x4247c]
call fcn.0054acc3
lea ecx, [ebp - 0x4247c]
call fcn.0054abd2
push 0x5c2d6c
push 0x5a9614
lea ecx, [ebp - 0x4247c]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abce0
lea ecx, [ebp - 0x4247c]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abcdc
lea ecx, [ebp - 0x4247c]
call fcn.0054a4c8
mov edx, dword [ebp - 0x4247c]
mov eax, dword [edx - 8]
mov dword [ebp - 0x42a50], eax
cmp dword [ebp - 0x42a50], 0x78
jl 0x42f910
mov ecx, dword [ebp - 0x4247c]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x42a54], edx
cmp dword [ebp - 0x42a54], 0x82
jle 0x42f9a7
mov eax, dword [ebp - 0x427f4]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x42948], 0
mov byte [ebp - 4], 0x4e
mov dword [ebp - method.CFileException.virtual_0], vtable.CFileException.0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x4291c]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov ecx, dword [ebp - 0x42948]
mov dword [ebp - 0x42a80], ecx
jmp 0x430985
push 0x5abcd0
lea ecx, [ebp - 0x427e0]
call fcn.0054d39c
mov byte [ebp - 4], 0x52
push 0x5abbcc
lea ecx, [ebp - 0x42478]
call fcn.0054d39c
mov byte [ebp - 4], 0x53
mov edx, dword [0x5be480]
mov dword [ebp - 0x42934], edx
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f30
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f30
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f30
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f30
mov byte [ebp - 4], 0x58
push 0x10
lea eax, [ebp - 0x42478]
push eax
lea ecx, [ebp - 0x42918]
call fcn.004035c7
push 0x10
lea ecx, [ebp - 0x427e0]
push ecx
lea ecx, [ebp - 0x427b0]
call fcn.004035c7
push 0x10
lea edx, [ebp - 0x4247c]
push edx
lea ecx, [ebp - 0x42514]
call fcn.004035c7
lea eax, [ebp - 0x42918]
push eax
lea ecx, [ebp - 0x427b0]
push ecx
lea edx, [ebp - 0x429d8]
push edx
lea ecx, [ebp - 0x42514]
call fcn.00403df7
mov dword [ebp - 0x43a30], eax
mov esi, dword [ebp - 0x43a30]
mov ecx, 0x24
lea edi, [ebp - 0x42884]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x429d8]
call fcn.00401f71
push 0x10
lea eax, [ebp - 0x42934]
push eax
lea ecx, [ebp - 0x42884]
call fcn.00403832
mov ecx, dword [ebp - 0x42934]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x42a58], edx
mov eax, dword [ebp - 0x42a58]
and eax, 0x80000001
jns 0x42fad0
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x42fbc7
mov ecx, dword [ebp - 0x427f4]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x429dc], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov edx, dword [ebp - 0x429dc]
mov dword [ebp - 0x42a80], edx
jmp 0x430985
push ecx
mov ecx, esp
mov dword [ebp - 0x429e0], esp
lea eax, [ebp - 0x42934]
push eax
call fcn.0054d095
mov dword [ebp - 0x43a34], eax
lea ecx, [ebp - 0x429e4]
push ecx
mov ecx, dword [ebp - 0x427f4]
call fcn.004c1480
mov dword [ebp - 0x43a38], eax
mov edx, dword [ebp - 0x43a38]
mov dword [ebp - 0x43a3c], edx
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0x43a3c]
push eax
lea ecx, [ebp - 0x42518]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x429e4]
call fcn.0054d328
lea ecx, [ebp - 0x42518]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 2
lea edx, [ebp - 0x429e8]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054a76e
mov dword [ebp - 0x43a40], eax
mov eax, dword [ebp - 0x43a40]
mov dword [ebp - 0x43a44], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x43a44]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x429e8]
call fcn.0054d328
push 0x5abbc4
mov edx, dword [ebp - 0x427b8]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x42a5c], eax
xor eax, eax
cmp dword [ebp - 0x42a5c], 0
setne al
and eax, 0xff
test eax, eax
je 0x42fda9
mov ecx, dword [ebp - 0x427f4]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x429ec], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov edx, dword [ebp - 0x429ec]
mov dword [ebp - 0x42a80], edx
jmp 0x430985
lea eax, [ebp - 0x42518]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 1
push 2
lea ecx, [ebp - 0x429f0]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a48], eax
mov edx, dword [ebp - 0x43a48]
mov dword [ebp - 0x43a4c], edx
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0x43a4c]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x429f0]
call fcn.0054d328
push 0x5abbc0
mov ecx, dword [ebp - 0x427b8]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x42a60], eax
xor edx, edx
cmp dword [ebp - 0x42a60], 0
setne dl
and edx, 0xff
test edx, edx
je 0x42ff2a
mov eax, dword [ebp - 0x427f4]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x429f4], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov ecx, dword [ebp - 0x429f4]
mov dword [ebp - 0x42a80], ecx
jmp 0x430985
lea edx, [ebp - 0x42518]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 1
push 7
lea eax, [ebp - 0x429f8]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a50], eax
mov ecx, dword [ebp - 0x43a50]
mov dword [ebp - 0x43a54], ecx
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x43a54]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x429f8]
call fcn.0054d328
push 0x5abbbc
mov eax, dword [ebp - 0x427b8]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x42a64], eax
xor ecx, ecx
cmp dword [ebp - 0x42a64], 0
setne cl
and ecx, 0xff
test ecx, ecx
je 0x4300ab
mov edx, dword [ebp - 0x427f4]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x429fc], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov eax, dword [ebp - 0x429fc]
mov dword [ebp - 0x42a80], eax
jmp 0x430985
lea ecx, [ebp - 0x42518]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 1
push 0xa
lea edx, [ebp - 0x42a00]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a58], eax
mov eax, dword [ebp - 0x43a58]
mov dword [ebp - 0x43a5c], eax
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x43a5c]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x42a00]
call fcn.0054d328
push 0x5abbb8
mov edx, dword [ebp - 0x427b8]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x42a68], eax
xor eax, eax
cmp dword [ebp - 0x42a68], 0
setne al
and eax, 0xff
test eax, eax
je 0x43022b
mov ecx, dword [ebp - 0x427f4]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x42a04], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov edx, dword [ebp - 0x42a04]
mov dword [ebp - 0x42a80], edx
jmp 0x430985
mov dword [ebp - 0x427c4], 0
mov dword [ebp - 0x427c8], 0
mov dword [ebp - 0x427c0], 0
lea eax, [ebp - 0x42518]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 4
push 3
lea ecx, [ebp - 0x42a08]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a60], eax
mov edx, dword [ebp - 0x43a60]
mov dword [ebp - 0x43a64], edx
mov byte [ebp - 4], 0x5e
mov eax, dword [ebp - 0x43a64]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x42a08]
call fcn.0054d328
mov ecx, dword [ebp - 0x427b8]
push ecx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x427c4], eax
lea edx, [ebp - 0x42518]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 2
push 8
lea eax, [ebp - 0x42a0c]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a68], eax
mov ecx, dword [ebp - 0x43a68]
mov dword [ebp - 0x43a6c], ecx
mov byte [ebp - 4], 0x5f
mov edx, dword [ebp - 0x43a6c]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x42a0c]
call fcn.0054d328
mov eax, dword [ebp - 0x427b8]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x427c8], eax
lea ecx, [ebp - 0x42518]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 2
push 0xb
lea edx, [ebp - 0x42a10]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a70], eax
mov eax, dword [ebp - 0x43a70]
mov dword [ebp - 0x43a74], eax
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x43a74]
push ecx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x42a10]
call fcn.0054d328
mov edx, dword [ebp - 0x427b8]
push edx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x427c0], eax
push 0xffffffffffffffff
push 0
push 0
push 0
mov eax, dword [ebp - 0x427c0]
push eax
mov ecx, dword [ebp - 0x427c8]
push ecx
mov edx, dword [ebp - 0x427c4]
push edx
lea ecx, [ebp - 0x427b4]
call fcn.0054adfb
mov dword [ebp - 0x42480], 0
push 0x34
push 0
lea eax, [ebp - 0x42474]
push eax
call fcn.005370b0
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x42720]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x27
push 3
push 0
push 1
push SysReAllocStringLen
lea edx, [ebp - 0x42720]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x42888], eax
cmp dword [ebp - 0x42888], 0xffffffff
jne 0x43050b
mov dword [ebp - 0x42a14], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov eax, dword [ebp - 0x42a14]
mov dword [ebp - 0x42a80], eax
jmp 0x430985
lea ecx, [ebp - 0x42474]
push ecx
mov edx, dword [ebp - 0x42888]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [ebp - 0x427ec], eax
mov eax, dword [ebp - 0x42888]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x42470]
mov dword [ebp - 0x42480], ecx
cmp dword [ebp - 0x42480], 0
je 0x43056f
push 0xffffffffffffffff
mov edx, dword [ebp - 0x42480]
push edx
lea ecx, [ebp - 0x42a18]
call fcn.0054ae93
mov dword [ebp - 0x42a6c], eax
mov eax, dword [ebp - 0x42a6c]
mov ecx, dword [eax]
mov dword [ebp - 0x42484], ecx
push ecx
mov edx, esp
mov dword [ebp - 0x42a1c], esp
push edx
call fcn.0054aedf
lea eax, [ebp - 0x42a20]
push eax
lea ecx, [ebp - 0x42484]
call fcn.0043c2f0
mov dword [ebp - 0x42a70], eax
mov ecx, dword [ebp - 0x42a70]
mov edx, dword [ecx]
mov dword [ebp - 0x427f0], edx
mov eax, dword [ebp - 0x427f0]
cdq
mov ecx, 0x15180
idiv ecx
test eax, eax
jle 0x4306a8
mov edx, dword [ebp - 0x427f4]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x42a24], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov eax, dword [ebp - 0x42a24]
mov dword [ebp - 0x42a80], eax
jmp 0x430985
lea ecx, [ebp - 0x42a28]
push ecx
call fcn.0054aedf
mov dword [ebp - 0x42a74], eax
mov edx, dword [ebp - 0x42a74]
mov eax, dword [edx]
mov dword [ebp - 0x42484], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x42a2c], esp
mov dword [ebp - 0x42a78], ecx
mov edx, dword [ebp - 0x42a78]
mov eax, dword [ebp - 0x427b4]
mov dword [edx], eax
lea ecx, [ebp - 0x42a30]
push ecx
lea ecx, [ebp - 0x42484]
call fcn.0043c2f0
mov dword [ebp - 0x43a78], eax
mov edx, dword [ebp - 0x43a78]
mov eax, dword [edx]
mov dword [ebp - 0x427f0], eax
mov eax, dword [ebp - 0x427f0]
cdq
mov ecx, 0x15180
idiv ecx
mov dword [ebp - 0x427e8], eax
mov dword [ebp - 0x427bc], 0
lea edx, [ebp - 0x42518]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
push 2
push 0xe
lea eax, [ebp - 0x42a34]
push eax
lea ecx, [ebp - 0x427b8]
call fcn.0054a65c
mov dword [ebp - 0x43a7c], eax
mov ecx, dword [ebp - 0x43a7c]
mov dword [ebp - 0x43a80], ecx
mov byte [ebp - 4], 0x61
mov edx, dword [ebp - 0x43a80]
push edx
lea ecx, [ebp - 0x427b8]
call fcn.0054d46f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x42a34]
call fcn.0054d328
mov eax, dword [ebp - 0x427b8]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x427bc], eax
mov ecx, dword [ebp - 0x427bc]
imul ecx, ecx, 0x16d
cmp dword [ebp - 0x427e8], ecx
jg 0x4307be
cmp dword [ebp - 0x427e8], 0
jge 0x4308ac
mov edx, dword [ebp - 0x427f4]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x42a38], 0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov eax, dword [ebp - 0x42a38]
mov dword [ebp - 0x42a80], eax
jmp 0x430985
mov dword [ebp - 0x42a3c], 1
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x42514]
call fcn.00401f71
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x42884]
call fcn.00401f71
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x427b0]
call fcn.00401f71
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x42918]
call fcn.00401f71
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x42934]
call fcn.0054d328
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x42478]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x427e0]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4292c]
call fcn.0043c2a0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x427dc]
call fcn.00552d2b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x42518]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4247c]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x427e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x427b8]
call fcn.0054d328
mov ecx, dword [ebp - 0x42a3c]
mov dword [ebp - 0x42a80], ecx
cmp dword [ebp - 0x42a80], 0
je 0x431278
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x358]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x4309bc
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x431276
mov eax, dword [ebp - 0x410a4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x354]
add edx, eax
mov dword [ebp - 0x42a84], edx
mov eax, dword [ebp - 0x42a84]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x42a84]
add edx, 4
push edx
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov eax, dword [ebp - 0x42a84]
add eax, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov ecx, dword [ebp - 0x42a84]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov edx, dword [ebp - 0x42a84]
add edx, 0x10
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov eax, dword [ebp - 0x42a84]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x42a84]
add edx, 0x18
push edx
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aa6b4
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410b8], eax
mov ecx, dword [ebp - 0x410b8]
push ecx
lea edx, [ebp - 0x411a0]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43a84], eax
mov eax, dword [ebp - 0x43a84]
mov dword [ebp - 0x43a88], eax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x43a88]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411a0]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x411a4], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x43a8c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43a90], eax
mov eax, dword [ebp - 0x43a90]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x411a8], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43a94], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43a98], eax
cmp dword [ebp - 0x43a98], 0
je 0x431271
cmp dword [ebp - 0x30], 1
jne 0x4310c8
push ecx
mov ecx, esp
mov dword [ebp - 0x411ac], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43a9c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43aa0], eax
cmp dword [ebp - 0x43aa0], 0
je 0x430e20
lea eax, [ebp - 0x20]
push eax
push 0x5aa6b8
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa6c0
lea edx, [ebp - 0x28]
push edx
push 0x5aa6c8
lea eax, [ebp - 0x411b0]
push eax
call fcn.0054d641
mov dword [ebp - 0x43aa4], eax
mov ecx, dword [ebp - 0x43aa4]
mov dword [ebp - 0x43aa8], ecx
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0x43aa8]
push edx
lea eax, [ebp - 0x411b4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43aac], eax
mov ecx, dword [ebp - 0x43aac]
mov dword [ebp - 0x43ab0], ecx
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x43ab0]
push edx
lea eax, [ebp - 0x411b8]
push eax
call fcn.0054d567
mov dword [ebp - 0x43ab4], eax
mov ecx, dword [ebp - 0x43ab4]
mov dword [ebp - 0x43ab8], ecx
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x43ab8]
push edx
lea eax, [ebp - 0x411bc]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43abc], eax
mov ecx, dword [ebp - 0x43abc]
mov dword [ebp - 0x43ac0], ecx
mov byte [ebp - 4], 0x66
mov edx, dword [ebp - 0x43ac0]
push edx
lea eax, [ebp - 0x411c0]
push eax
call fcn.0054d567
mov dword [ebp - 0x42a88], eax
mov ecx, dword [ebp - 0x42a88]
mov edx, dword [ecx]
mov dword [ebp - 0x42a8c], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42a90], eax
mov ecx, dword [ebp - 0x42a8c]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42a90]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x411c0]
call fcn.0054d328
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x411bc]
call fcn.0054d328
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x411b8]
call fcn.0054d328
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x411b4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411b0]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa6e8
lea edx, [ebp - 0x24]
push edx
push 0x5aa6f0
lea eax, [ebp - 0x28]
push eax
push 0x5aa6f8
lea ecx, [ebp - 0x411c4]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43ac4], eax
mov edx, dword [ebp - 0x43ac4]
mov dword [ebp - 0x43ac8], edx
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x43ac8]
push eax
lea ecx, [ebp - 0x411c8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43acc], eax
mov edx, dword [ebp - 0x43acc]
mov dword [ebp - 0x43ad0], edx
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0x43ad0]
push eax
lea ecx, [ebp - 0x411cc]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43ad4], eax
mov edx, dword [ebp - 0x43ad4]
mov dword [ebp - 0x43ad8], edx
mov byte [ebp - 4], 0x69
mov eax, dword [ebp - 0x43ad8]
push eax
lea ecx, [ebp - 0x411d0]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43adc], eax
mov edx, dword [ebp - 0x43adc]
mov dword [ebp - 0x43ae0], edx
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0x43ae0]
push eax
lea ecx, [ebp - 0x411d4]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43ae4], eax
mov edx, dword [ebp - 0x43ae4]
mov dword [ebp - 0x42a94], edx
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0x42a94]
mov ecx, dword [eax]
mov dword [ebp - 0x42a98], ecx
mov edx, dword [ebp - 0x42a98]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x411d4]
call fcn.0054d328
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x411d0]
call fcn.0054d328
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x411cc]
call fcn.0054d328
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x411c8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411c4]
call fcn.0054d328
jmp 0x4310c3
lea eax, [ebp - 0x20]
push eax
push 0x5aa718
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa720
lea edx, [ebp - 0x28]
push edx
push 0x5aa728
lea eax, [ebp - 0x411d8]
push eax
call fcn.0054d641
mov dword [ebp - 0x43ae8], eax
mov ecx, dword [ebp - 0x43ae8]
mov dword [ebp - 0x43aec], ecx
mov byte [ebp - 4], 0x6c
mov edx, dword [ebp - 0x43aec]
push edx
lea eax, [ebp - 0x411dc]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43af0], eax
mov ecx, dword [ebp - 0x43af0]
mov dword [ebp - 0x43af4], ecx
mov byte [ebp - 4], 0x6d
mov edx, dword [ebp - 0x43af4]
push edx
lea eax, [ebp - 0x411e0]
push eax
call fcn.0054d567
mov dword [ebp - 0x43af8], eax
mov ecx, dword [ebp - 0x43af8]
mov dword [ebp - 0x43afc], ecx
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0x43afc]
push edx
lea eax, [ebp - 0x411e4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43b00], eax
mov ecx, dword [ebp - 0x43b00]
mov dword [ebp - 0x43b04], ecx
mov byte [ebp - 4], 0x6f
mov edx, dword [ebp - 0x43b04]
push edx
lea eax, [ebp - 0x411e8]
push eax
call fcn.0054d567
mov dword [ebp - 0x42a9c], eax
mov ecx, dword [ebp - 0x42a9c]
mov edx, dword [ecx]
mov dword [ebp - 0x42aa0], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42aa4], eax
mov ecx, dword [ebp - 0x42aa0]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42aa4]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x411e8]
call fcn.0054d328
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x411e4]
call fcn.0054d328
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x411e0]
call fcn.0054d328
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x411dc]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411d8]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa748
lea edx, [ebp - 0x24]
push edx
push 0x5aa750
lea eax, [ebp - 0x28]
push eax
push 0x5aa758
lea ecx, [ebp - 0x411ec]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43b08], eax
mov edx, dword [ebp - 0x43b08]
mov dword [ebp - 0x43b0c], edx
mov byte [ebp - 4], 0x70
mov eax, dword [ebp - 0x43b0c]
push eax
lea ecx, [ebp - 0x411f0]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43b10], eax
mov edx, dword [ebp - 0x43b10]
mov dword [ebp - 0x43b14], edx
mov byte [ebp - 4], 0x71
mov eax, dword [ebp - 0x43b14]
push eax
lea ecx, [ebp - 0x411f4]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43b18], eax
mov edx, dword [ebp - 0x43b18]
mov dword [ebp - 0x43b1c], edx
mov byte [ebp - 4], 0x72
mov eax, dword [ebp - 0x43b1c]
push eax
lea ecx, [ebp - 0x411f8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43b20], eax
mov edx, dword [ebp - 0x43b20]
mov dword [ebp - 0x43b24], edx
mov byte [ebp - 4], 0x73
mov eax, dword [ebp - 0x43b24]
push eax
lea ecx, [ebp - 0x411fc]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43b28], eax
mov edx, dword [ebp - 0x43b28]
mov dword [ebp - 0x42aa8], edx
mov byte [ebp - 4], 0x74
mov eax, dword [ebp - 0x42aa8]
mov ecx, dword [eax]
mov dword [ebp - 0x42aac], ecx
mov edx, dword [ebp - 0x42aac]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x411fc]
call fcn.0054d328
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x411f8]
call fcn.0054d328
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x411f4]
call fcn.0054d328
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x411f0]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x411ec]
call fcn.0054d328
jmp 0x431271
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410bc], eax
cmp dword [ebp - 0x410bc], 0
jne 0x4311b0
lea edx, [ebp - 0x28]
push edx
push 0x5aa77c
lea eax, [ebp - 0x41200]
push eax
call fcn.0054d641
mov dword [ebp - 0x42ab0], eax
mov ecx, dword [ebp - 0x42ab0]
mov edx, dword [ecx]
mov dword [ebp - 0x42ab4], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42ab8], eax
mov ecx, dword [ebp - 0x42ab4]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42ab8]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41200]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aa79c
lea edx, [ebp - 0x41204]
push edx
call fcn.0054d641
mov dword [ebp - 0x43b2c], eax
mov eax, dword [ebp - 0x43b2c]
mov dword [ebp - 0x42abc], eax
mov byte [ebp - 4], 0x75
mov ecx, dword [ebp - 0x42abc]
mov edx, dword [ecx]
mov dword [ebp - 0x42ac0], edx
mov eax, dword [ebp - 0x42ac0]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41204]
call fcn.0054d328
jmp 0x431271
lea ecx, [ebp - 0x28]
push ecx
push 0x5aa7bc
lea edx, [ebp - 0x41208]
push edx
call fcn.0054d641
mov dword [ebp - 0x42ac4], eax
mov eax, dword [ebp - 0x42ac4]
mov ecx, dword [eax]
mov dword [ebp - 0x42ac8], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x42acc], edx
mov eax, dword [ebp - 0x42ac8]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x42acc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41208]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aa7dc
lea ecx, [ebp - 0x4120c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43b30], eax
mov edx, dword [ebp - 0x43b30]
mov dword [ebp - 0x42ad0], edx
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0x42ad0]
mov ecx, dword [eax]
mov dword [ebp - 0x42ad4], ecx
mov edx, dword [ebp - 0x42ad4]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4120c]
call fcn.0054d328
jmp 0x4309ad
jmp 0x43128d
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x350
call fcn.0043c920
mov eax, dword [ebp - 0x410a8]
cmp dword [eax + 0x110], 0
jne 0x4312af
mov ecx, dword [ebp - 0x410a8]
cmp dword [ecx + 0x110], 0
jne 0x431b95
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x36c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x4312d9
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x431b93
mov eax, dword [ebp - 0x410a4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x368]
add edx, eax
mov dword [ebp - 0x42ad8], edx
mov eax, dword [ebp - 0x42ad8]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x42ad8]
add edx, 4
push edx
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov eax, dword [ebp - 0x42ad8]
add eax, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov ecx, dword [ebp - 0x42ad8]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov edx, dword [ebp - 0x42ad8]
add edx, 0x10
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov eax, dword [ebp - 0x42ad8]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x42ad8]
add edx, 0x18
push edx
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aa800
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410c0], eax
mov ecx, dword [ebp - 0x410c0]
push ecx
lea edx, [ebp - 0x41210]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43b34], eax
mov eax, dword [ebp - 0x43b34]
mov dword [ebp - 0x43b38], eax
mov byte [ebp - 4], 0x77
mov ecx, dword [ebp - 0x43b38]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41210]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41214], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x43b3c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43b40], eax
mov eax, dword [ebp - 0x43b40]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41218], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43b44], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43b48], eax
cmp dword [ebp - 0x43b48], 0
je 0x431b8e
cmp dword [ebp - 0x30], 1
jne 0x4319e5
push ecx
mov ecx, esp
mov dword [ebp - 0x4121c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43b4c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43b50], eax
cmp dword [ebp - 0x43b50], 0
je 0x43173d
lea eax, [ebp - 0x20]
push eax
push 0x5aa804
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa80c
lea edx, [ebp - 0x28]
push edx
push 0x5aa814
lea eax, [ebp - 0x41220]
push eax
call fcn.0054d641
mov dword [ebp - 0x43b54], eax
mov ecx, dword [ebp - 0x43b54]
mov dword [ebp - 0x43b58], ecx
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0x43b58]
push edx
lea eax, [ebp - 0x41224]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43b5c], eax
mov ecx, dword [ebp - 0x43b5c]
mov dword [ebp - 0x43b60], ecx
mov byte [ebp - 4], 0x79
mov edx, dword [ebp - 0x43b60]
push edx
lea eax, [ebp - 0x41228]
push eax
call fcn.0054d567
mov dword [ebp - 0x43b64], eax
mov ecx, dword [ebp - 0x43b64]
mov dword [ebp - 0x43b68], ecx
mov byte [ebp - 4], 0x7a
mov edx, dword [ebp - 0x43b68]
push edx
lea eax, [ebp - 0x4122c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43b6c], eax
mov ecx, dword [ebp - 0x43b6c]
mov dword [ebp - 0x43b70], ecx
mov byte [ebp - 4], 0x7b
mov edx, dword [ebp - 0x43b70]
push edx
lea eax, [ebp - 0x41230]
push eax
call fcn.0054d567
mov dword [ebp - 0x42adc], eax
mov ecx, dword [ebp - 0x42adc]
mov edx, dword [ecx]
mov dword [ebp - 0x42ae0], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42ae4], eax
mov ecx, dword [ebp - 0x42ae0]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42ae4]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41230]
call fcn.0054d328
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x4122c]
call fcn.0054d328
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x41228]
call fcn.0054d328
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x41224]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41220]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa834
lea edx, [ebp - 0x24]
push edx
push 0x5aa83c
lea eax, [ebp - 0x28]
push eax
push 0x5aa844
lea ecx, [ebp - 0x41234]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43b74], eax
mov edx, dword [ebp - 0x43b74]
mov dword [ebp - 0x43b78], edx
mov byte [ebp - 4], 0x7c
mov eax, dword [ebp - 0x43b78]
push eax
lea ecx, [ebp - 0x41238]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43b7c], eax
mov edx, dword [ebp - 0x43b7c]
mov dword [ebp - 0x43b80], edx
mov byte [ebp - 4], 0x7d
mov eax, dword [ebp - 0x43b80]
push eax
lea ecx, [ebp - 0x4123c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43b84], eax
mov edx, dword [ebp - 0x43b84]
mov dword [ebp - 0x43b88], edx
mov byte [ebp - 4], 0x7e
mov eax, dword [ebp - 0x43b88]
push eax
lea ecx, [ebp - 0x41240]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43b8c], eax
mov edx, dword [ebp - 0x43b8c]
mov dword [ebp - 0x43b90], edx
mov byte [ebp - 4], 0x7f
mov eax, dword [ebp - 0x43b90]
push eax
lea ecx, [ebp - 0x41244]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43b94], eax
mov edx, dword [ebp - 0x43b94]
mov dword [ebp - 0x42ae8], edx
mov byte [ebp - 4], 0x80
mov eax, dword [ebp - 0x42ae8]
mov ecx, dword [eax]
mov dword [ebp - 0x42aec], ecx
mov edx, dword [ebp - 0x42aec]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x41244]
call fcn.0054d328
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x41240]
call fcn.0054d328
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x4123c]
call fcn.0054d328
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x41238]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41234]
call fcn.0054d328
jmp 0x4319e0
lea eax, [ebp - 0x20]
push eax
push 0x5aa864
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa86c
lea edx, [ebp - 0x28]
push edx
push 0x5aa874
lea eax, [ebp - 0x41248]
push eax
call fcn.0054d641
mov dword [ebp - 0x43b98], eax
mov ecx, dword [ebp - 0x43b98]
mov dword [ebp - 0x43b9c], ecx
mov byte [ebp - 4], 0x81
mov edx, dword [ebp - 0x43b9c]
push edx
lea eax, [ebp - 0x4124c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43ba0], eax
mov ecx, dword [ebp - 0x43ba0]
mov dword [ebp - 0x43ba4], ecx
mov byte [ebp - 4], 0x82
mov edx, dword [ebp - 0x43ba4]
push edx
lea eax, [ebp - 0x41250]
push eax
call fcn.0054d567
mov dword [ebp - 0x43ba8], eax
mov ecx, dword [ebp - 0x43ba8]
mov dword [ebp - 0x43bac], ecx
mov byte [ebp - 4], 0x83
mov edx, dword [ebp - 0x43bac]
push edx
lea eax, [ebp - 0x41254]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43bb0], eax
mov ecx, dword [ebp - 0x43bb0]
mov dword [ebp - 0x43bb4], ecx
mov byte [ebp - 4], 0x84
mov edx, dword [ebp - 0x43bb4]
push edx
lea eax, [ebp - 0x41258]
push eax
call fcn.0054d567
mov dword [ebp - 0x42af0], eax
mov ecx, dword [ebp - 0x42af0]
mov edx, dword [ecx]
mov dword [ebp - 0x42af4], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42af8], eax
mov ecx, dword [ebp - 0x42af4]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42af8]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41258]
call fcn.0054d328
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x41254]
call fcn.0054d328
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x41250]
call fcn.0054d328
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x4124c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41248]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa894
lea edx, [ebp - 0x24]
push edx
push 0x5aa89c
lea eax, [ebp - 0x28]
push eax
push 0x5aa8a4
lea ecx, [ebp - 0x4125c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43bb8], eax
mov edx, dword [ebp - 0x43bb8]
mov dword [ebp - 0x43bbc], edx
mov byte [ebp - 4], 0x85
mov eax, dword [ebp - 0x43bbc]
push eax
lea ecx, [ebp - 0x41260]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43bc0], eax
mov edx, dword [ebp - 0x43bc0]
mov dword [ebp - 0x43bc4], edx
mov byte [ebp - 4], 0x86
mov eax, dword [ebp - 0x43bc4]
push eax
lea ecx, [ebp - 0x41264]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43bc8], eax
mov edx, dword [ebp - 0x43bc8]
mov dword [ebp - 0x43bcc], edx
mov byte [ebp - 4], 0x87
mov eax, dword [ebp - 0x43bcc]
push eax
lea ecx, [ebp - 0x41268]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43bd0], eax
mov edx, dword [ebp - 0x43bd0]
mov dword [ebp - 0x43bd4], edx
mov byte [ebp - 4], 0x88
mov eax, dword [ebp - 0x43bd4]
push eax
lea ecx, [ebp - 0x4126c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43bd8], eax
mov edx, dword [ebp - 0x43bd8]
mov dword [ebp - 0x42afc], edx
mov byte [ebp - 4], 0x89
mov eax, dword [ebp - 0x42afc]
mov ecx, dword [eax]
mov dword [ebp - 0x42b00], ecx
mov edx, dword [ebp - 0x42b00]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x4126c]
call fcn.0054d328
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x41268]
call fcn.0054d328
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x41264]
call fcn.0054d328
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x41260]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4125c]
call fcn.0054d328
jmp 0x431b8e
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410c4], eax
cmp dword [ebp - 0x410c4], 0
jne 0x431acd
lea edx, [ebp - 0x28]
push edx
push 0x5aa8c8
lea eax, [ebp - 0x41270]
push eax
call fcn.0054d641
mov dword [ebp - 0x42b04], eax
mov ecx, dword [ebp - 0x42b04]
mov edx, dword [ecx]
mov dword [ebp - 0x42b08], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42b0c], eax
mov ecx, dword [ebp - 0x42b08]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42b0c]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41270]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aa8e8
lea edx, [ebp - 0x41274]
push edx
call fcn.0054d641
mov dword [ebp - 0x43bdc], eax
mov eax, dword [ebp - 0x43bdc]
mov dword [ebp - 0x42b10], eax
mov byte [ebp - 4], 0x8a
mov ecx, dword [ebp - 0x42b10]
mov edx, dword [ecx]
mov dword [ebp - 0x42b14], edx
mov eax, dword [ebp - 0x42b14]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41274]
call fcn.0054d328
jmp 0x431b8e
lea ecx, [ebp - 0x28]
push ecx
push 0x5aa908
lea edx, [ebp - 0x41278]
push edx
call fcn.0054d641
mov dword [ebp - 0x42b18], eax
mov eax, dword [ebp - 0x42b18]
mov ecx, dword [eax]
mov dword [ebp - 0x42b1c], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x42b20], edx
mov eax, dword [ebp - 0x42b1c]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x42b20]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41278]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aa928
lea ecx, [ebp - 0x4127c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43be0], eax
mov edx, dword [ebp - 0x43be0]
mov dword [ebp - 0x42b24], edx
mov byte [ebp - 4], 0x8b
mov eax, dword [ebp - 0x42b24]
mov ecx, dword [eax]
mov dword [ebp - 0x42b28], ecx
mov edx, dword [ebp - 0x42b28]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4127c]
call fcn.0054d328
jmp 0x4312ca
jmp 0x431baa
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x364
call fcn.0043c920
mov eax, dword [ebp - 0x410a8]
mov ecx, dword [eax + 0x380]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x410a4], 0
jmp 0x431bd4
mov edx, dword [ebp - 0x410a4]
add edx, 1
mov dword [ebp - 0x410a4], edx
mov eax, dword [ebp - 0x410a4]
cmp eax, dword [ebp - 0x10]
jge 0x43248e
mov ecx, dword [ebp - 0x410a4]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x37c]
add eax, ecx
mov dword [ebp - 0x42b2c], eax
mov ecx, dword [ebp - 0x42b2c]
mov edx, dword [ecx]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x42b2c]
add eax, 4
push eax
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov ecx, dword [ebp - 0x42b2c]
add ecx, 8
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov edx, dword [ebp - 0x42b2c]
add edx, 0xc
push edx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov eax, dword [ebp - 0x42b2c]
add eax, 0x10
push eax
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov ecx, dword [ebp - 0x42b2c]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x42b2c]
add eax, 0x18
push eax
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aa94c
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410c8], eax
mov edx, dword [ebp - 0x410c8]
push edx
lea eax, [ebp - 0x41280]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43be4], eax
mov ecx, dword [ebp - 0x43be4]
mov dword [ebp - 0x43be8], ecx
mov byte [ebp - 4], 0x8c
mov edx, dword [ebp - 0x43be8]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41280]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41284], esp
lea eax, [ebp - 0x14]
push eax
call fcn.0054d095
mov dword [ebp - 0x43bec], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43bf0], eax
mov ecx, dword [ebp - 0x43bf0]
mov dword [ebp - 0x410ac], ecx
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41288], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43bf4], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43bf8], eax
cmp dword [ebp - 0x43bf8], 0
je 0x432489
cmp dword [ebp - 0x30], 1
jne 0x4322e0
push ecx
mov ecx, esp
mov dword [ebp - 0x4128c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43bfc], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43c00], eax
cmp dword [ebp - 0x43c00], 0
je 0x432038
lea eax, [ebp - 0x20]
push eax
push 0x5aa950
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa958
lea edx, [ebp - 0x28]
push edx
push 0x5aa960
lea eax, [ebp - 0x41290]
push eax
call fcn.0054d641
mov dword [ebp - 0x43c04], eax
mov ecx, dword [ebp - 0x43c04]
mov dword [ebp - 0x43c08], ecx
mov byte [ebp - 4], 0x8d
mov edx, dword [ebp - 0x43c08]
push edx
lea eax, [ebp - 0x41294]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43c0c], eax
mov ecx, dword [ebp - 0x43c0c]
mov dword [ebp - 0x43c10], ecx
mov byte [ebp - 4], 0x8e
mov edx, dword [ebp - 0x43c10]
push edx
lea eax, [ebp - 0x41298]
push eax
call fcn.0054d567
mov dword [ebp - 0x43c14], eax
mov ecx, dword [ebp - 0x43c14]
mov dword [ebp - 0x43c18], ecx
mov byte [ebp - 4], 0x8f
mov edx, dword [ebp - 0x43c18]
push edx
lea eax, [ebp - 0x4129c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43c1c], eax
mov ecx, dword [ebp - 0x43c1c]
mov dword [ebp - 0x43c20], ecx
mov byte [ebp - 4], 0x90
mov edx, dword [ebp - 0x43c20]
push edx
lea eax, [ebp - 0x412a0]
push eax
call fcn.0054d567
mov dword [ebp - 0x42b30], eax
mov ecx, dword [ebp - 0x42b30]
mov edx, dword [ecx]
mov dword [ebp - 0x42b34], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42b38], eax
mov ecx, dword [ebp - 0x42b34]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42b38]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x412a0]
call fcn.0054d328
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x4129c]
call fcn.0054d328
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x41298]
call fcn.0054d328
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x41294]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41290]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa980
lea edx, [ebp - 0x24]
push edx
push 0x5aa988
lea eax, [ebp - 0x28]
push eax
push 0x5aa990
lea ecx, [ebp - 0x412a4]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43c24], eax
mov edx, dword [ebp - 0x43c24]
mov dword [ebp - 0x43c28], edx
mov byte [ebp - 4], 0x91
mov eax, dword [ebp - 0x43c28]
push eax
lea ecx, [ebp - 0x412a8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43c2c], eax
mov edx, dword [ebp - 0x43c2c]
mov dword [ebp - 0x43c30], edx
mov byte [ebp - 4], 0x92
mov eax, dword [ebp - 0x43c30]
push eax
lea ecx, [ebp - 0x412ac]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43c34], eax
mov edx, dword [ebp - 0x43c34]
mov dword [ebp - 0x43c38], edx
mov byte [ebp - 4], 0x93
mov eax, dword [ebp - 0x43c38]
push eax
lea ecx, [ebp - 0x412b0]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43c3c], eax
mov edx, dword [ebp - 0x43c3c]
mov dword [ebp - 0x43c40], edx
mov byte [ebp - 4], 0x94
mov eax, dword [ebp - 0x43c40]
push eax
lea ecx, [ebp - 0x412b4]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43c44], eax
mov edx, dword [ebp - 0x43c44]
mov dword [ebp - 0x42b3c], edx
mov byte [ebp - 4], 0x95
mov eax, dword [ebp - 0x42b3c]
mov ecx, dword [eax]
mov dword [ebp - 0x42b40], ecx
mov edx, dword [ebp - 0x42b40]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x412b4]
call fcn.0054d328
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x412b0]
call fcn.0054d328
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x412ac]
call fcn.0054d328
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x412a8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412a4]
call fcn.0054d328
jmp 0x4322db
lea eax, [ebp - 0x20]
push eax
push 0x5aa9b0
lea ecx, [ebp - 0x24]
push ecx
push 0x5aa9b8
lea edx, [ebp - 0x28]
push edx
push 0x5aa9c0
lea eax, [ebp - 0x412b8]
push eax
call fcn.0054d641
mov dword [ebp - 0x43c48], eax
mov ecx, dword [ebp - 0x43c48]
mov dword [ebp - 0x43c4c], ecx
mov byte [ebp - 4], 0x96
mov edx, dword [ebp - 0x43c4c]
push edx
lea eax, [ebp - 0x412bc]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43c50], eax
mov ecx, dword [ebp - 0x43c50]
mov dword [ebp - 0x43c54], ecx
mov byte [ebp - 4], 0x97
mov edx, dword [ebp - 0x43c54]
push edx
lea eax, [ebp - 0x412c0]
push eax
call fcn.0054d567
mov dword [ebp - 0x43c58], eax
mov ecx, dword [ebp - 0x43c58]
mov dword [ebp - 0x43c5c], ecx
mov byte [ebp - 4], 0x98
mov edx, dword [ebp - 0x43c5c]
push edx
lea eax, [ebp - 0x412c4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43c60], eax
mov ecx, dword [ebp - 0x43c60]
mov dword [ebp - 0x43c64], ecx
mov byte [ebp - 4], 0x99
mov edx, dword [ebp - 0x43c64]
push edx
lea eax, [ebp - 0x412c8]
push eax
call fcn.0054d567
mov dword [ebp - 0x42b44], eax
mov ecx, dword [ebp - 0x42b44]
mov edx, dword [ecx]
mov dword [ebp - 0x42b48], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42b4c], eax
mov ecx, dword [ebp - 0x42b48]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42b4c]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x412c8]
call fcn.0054d328
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x412c4]
call fcn.0054d328
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x412c0]
call fcn.0054d328
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x412bc]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412b8]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aa9e0
lea edx, [ebp - 0x24]
push edx
push 0x5aa9e8
lea eax, [ebp - 0x28]
push eax
push 0x5aa9f0
lea ecx, [ebp - 0x412cc]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43c68], eax
mov edx, dword [ebp - 0x43c68]
mov dword [ebp - 0x43c6c], edx
mov byte [ebp - 4], 0x9a
mov eax, dword [ebp - 0x43c6c]
push eax
lea ecx, [ebp - 0x412d0]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43c70], eax
mov edx, dword [ebp - 0x43c70]
mov dword [ebp - 0x43c74], edx
mov byte [ebp - 4], 0x9b
mov eax, dword [ebp - 0x43c74]
push eax
lea ecx, [ebp - 0x412d4]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43c78], eax
mov edx, dword [ebp - 0x43c78]
mov dword [ebp - 0x43c7c], edx
mov byte [ebp - 4], 0x9c
mov eax, dword [ebp - 0x43c7c]
push eax
lea ecx, [ebp - 0x412d8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43c80], eax
mov edx, dword [ebp - 0x43c80]
mov dword [ebp - 0x43c84], edx
mov byte [ebp - 4], 0x9d
mov eax, dword [ebp - 0x43c84]
push eax
lea ecx, [ebp - 0x412dc]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43c88], eax
mov edx, dword [ebp - 0x43c88]
mov dword [ebp - 0x42b50], edx
mov byte [ebp - 4], 0x9e
mov eax, dword [ebp - 0x42b50]
mov ecx, dword [eax]
mov dword [ebp - 0x42b54], ecx
mov edx, dword [ebp - 0x42b54]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x412dc]
call fcn.0054d328
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x412d8]
call fcn.0054d328
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x412d4]
call fcn.0054d328
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x412d0]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412cc]
call fcn.0054d328
jmp 0x432489
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410cc], eax
cmp dword [ebp - 0x410cc], 0
jne 0x4323c8
lea edx, [ebp - 0x28]
push edx
push 0x5aaa14
lea eax, [ebp - 0x412e0]
push eax
call fcn.0054d641
mov dword [ebp - 0x42b58], eax
mov ecx, dword [ebp - 0x42b58]
mov edx, dword [ecx]
mov dword [ebp - 0x42b5c], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42b60], eax
mov ecx, dword [ebp - 0x42b5c]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42b60]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x412e0]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aaa34
lea edx, [ebp - 0x412e4]
push edx
call fcn.0054d641
mov dword [ebp - 0x43c8c], eax
mov eax, dword [ebp - 0x43c8c]
mov dword [ebp - 0x42b64], eax
mov byte [ebp - 4], 0x9f
mov ecx, dword [ebp - 0x42b64]
mov edx, dword [ecx]
mov dword [ebp - 0x42b68], edx
mov eax, dword [ebp - 0x42b68]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412e4]
call fcn.0054d328
jmp 0x432489
lea ecx, [ebp - 0x28]
push ecx
push 0x5aaa54
lea edx, [ebp - 0x412e8]
push edx
call fcn.0054d641
mov dword [ebp - 0x42b6c], eax
mov eax, dword [ebp - 0x42b6c]
mov ecx, dword [eax]
mov dword [ebp - 0x42b70], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x42b74], edx
mov eax, dword [ebp - 0x42b70]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x42b74]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x412e8]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aaa74
lea ecx, [ebp - 0x412ec]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43c90], eax
mov edx, dword [ebp - 0x43c90]
mov dword [ebp - 0x42b78], edx
mov byte [ebp - 4], 0xa0
mov eax, dword [ebp - 0x42b78]
mov ecx, dword [eax]
mov dword [ebp - 0x42b7c], ecx
mov edx, dword [ebp - 0x42b7c]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412ec]
call fcn.0054d328
jmp 0x431bc5
mov eax, dword [ebp - 0x410a8]
cmp dword [eax + 0x110], 0
jne 0x4324b0
mov ecx, dword [ebp - 0x410a8]
cmp dword [ecx + 0x110], 0
jne 0x432d96
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x31c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x4324da
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x432d94
mov eax, dword [ebp - 0x410a4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x318]
add edx, eax
mov dword [ebp - 0x42b80], edx
mov eax, dword [ebp - 0x42b80]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x42b80]
add edx, 4
push edx
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov eax, dword [ebp - 0x42b80]
add eax, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov ecx, dword [ebp - 0x42b80]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov edx, dword [ebp - 0x42b80]
add edx, 0x10
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov eax, dword [ebp - 0x42b80]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x42b80]
add edx, 0x18
push edx
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aaa98
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410d0], eax
mov ecx, dword [ebp - 0x410d0]
push ecx
lea edx, [ebp - 0x412f0]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43c94], eax
mov eax, dword [ebp - 0x43c94]
mov dword [ebp - 0x43c98], eax
mov byte [ebp - 4], 0xa1
mov ecx, dword [ebp - 0x43c98]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x412f0]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x412f4], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x43c9c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43ca0], eax
mov eax, dword [ebp - 0x43ca0]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x412f8], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43ca4], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43ca8], eax
cmp dword [ebp - 0x43ca8], 0
je 0x432d8f
cmp dword [ebp - 0x30], 1
jne 0x432be6
push ecx
mov ecx, esp
mov dword [ebp - 0x412fc], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43cac], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43cb0], eax
cmp dword [ebp - 0x43cb0], 0
je 0x43293e
lea eax, [ebp - 0x20]
push eax
push 0x5aaa9c
lea ecx, [ebp - 0x24]
push ecx
push 0x5aaaa4
lea edx, [ebp - 0x28]
push edx
push 0x5aaaac
lea eax, [ebp - 0x41300]
push eax
call fcn.0054d641
mov dword [ebp - 0x43cb4], eax
mov ecx, dword [ebp - 0x43cb4]
mov dword [ebp - 0x43cb8], ecx
mov byte [ebp - 4], 0xa2
mov edx, dword [ebp - 0x43cb8]
push edx
lea eax, [ebp - 0x41304]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43cbc], eax
mov ecx, dword [ebp - 0x43cbc]
mov dword [ebp - 0x43cc0], ecx
mov byte [ebp - 4], 0xa3
mov edx, dword [ebp - 0x43cc0]
push edx
lea eax, [ebp - 0x41308]
push eax
call fcn.0054d567
mov dword [ebp - 0x43cc4], eax
mov ecx, dword [ebp - 0x43cc4]
mov dword [ebp - 0x43cc8], ecx
mov byte [ebp - 4], 0xa4
mov edx, dword [ebp - 0x43cc8]
push edx
lea eax, [ebp - 0x4130c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43ccc], eax
mov ecx, dword [ebp - 0x43ccc]
mov dword [ebp - 0x43cd0], ecx
mov byte [ebp - 4], 0xa5
mov edx, dword [ebp - 0x43cd0]
push edx
lea eax, [ebp - 0x41310]
push eax
call fcn.0054d567
mov dword [ebp - 0x42b84], eax
mov ecx, dword [ebp - 0x42b84]
mov edx, dword [ecx]
mov dword [ebp - 0x42b88], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42b8c], eax
mov ecx, dword [ebp - 0x42b88]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42b8c]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41310]
call fcn.0054d328
mov byte [ebp - 4], 0xa4
lea ecx, [ebp - 0x4130c]
call fcn.0054d328
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x41308]
call fcn.0054d328
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x41304]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41300]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aaacc
lea edx, [ebp - 0x24]
push edx
push 0x5aaad4
lea eax, [ebp - 0x28]
push eax
push 0x5aaadc
lea ecx, [ebp - 0x41314]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43cd4], eax
mov edx, dword [ebp - 0x43cd4]
mov dword [ebp - 0x43cd8], edx
mov byte [ebp - 4], 0xa6
mov eax, dword [ebp - 0x43cd8]
push eax
lea ecx, [ebp - 0x41318]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43cdc], eax
mov edx, dword [ebp - 0x43cdc]
mov dword [ebp - 0x43ce0], edx
mov byte [ebp - 4], 0xa7
mov eax, dword [ebp - 0x43ce0]
push eax
lea ecx, [ebp - 0x4131c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43ce4], eax
mov edx, dword [ebp - 0x43ce4]
mov dword [ebp - 0x43ce8], edx
mov byte [ebp - 4], 0xa8
mov eax, dword [ebp - 0x43ce8]
push eax
lea ecx, [ebp - 0x41320]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43cec], eax
mov edx, dword [ebp - 0x43cec]
mov dword [ebp - 0x43cf0], edx
mov byte [ebp - 4], 0xa9
mov eax, dword [ebp - 0x43cf0]
push eax
lea ecx, [ebp - 0x41324]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43cf4], eax
mov edx, dword [ebp - 0x43cf4]
mov dword [ebp - 0x42b90], edx
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x42b90]
mov ecx, dword [eax]
mov dword [ebp - 0x42b94], ecx
mov edx, dword [ebp - 0x42b94]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x41324]
call fcn.0054d328
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x41320]
call fcn.0054d328
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x4131c]
call fcn.0054d328
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x41318]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41314]
call fcn.0054d328
jmp 0x432be1
lea eax, [ebp - 0x20]
push eax
push 0x5aaafc
lea ecx, [ebp - 0x24]
push ecx
push 0x5aab04
lea edx, [ebp - 0x28]
push edx
push 0x5aab0c
lea eax, [ebp - 0x41328]
push eax
call fcn.0054d641
mov dword [ebp - 0x43cf8], eax
mov ecx, dword [ebp - 0x43cf8]
mov dword [ebp - 0x43cfc], ecx
mov byte [ebp - 4], 0xab
mov edx, dword [ebp - 0x43cfc]
push edx
lea eax, [ebp - 0x4132c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43d00], eax
mov ecx, dword [ebp - 0x43d00]
mov dword [ebp - 0x43d04], ecx
mov byte [ebp - 4], 0xac
mov edx, dword [ebp - 0x43d04]
push edx
lea eax, [ebp - 0x41330]
push eax
call fcn.0054d567
mov dword [ebp - 0x43d08], eax
mov ecx, dword [ebp - 0x43d08]
mov dword [ebp - 0x43d0c], ecx
mov byte [ebp - 4], 0xad
mov edx, dword [ebp - 0x43d0c]
push edx
lea eax, [ebp - 0x41334]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43d10], eax
mov ecx, dword [ebp - 0x43d10]
mov dword [ebp - 0x43d14], ecx
mov byte [ebp - 4], 0xae
mov edx, dword [ebp - 0x43d14]
push edx
lea eax, [ebp - 0x41338]
push eax
call fcn.0054d567
mov dword [ebp - 0x42b98], eax
mov ecx, dword [ebp - 0x42b98]
mov edx, dword [ecx]
mov dword [ebp - 0x42b9c], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42ba0], eax
mov ecx, dword [ebp - 0x42b9c]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42ba0]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41338]
call fcn.0054d328
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x41334]
call fcn.0054d328
mov byte [ebp - 4], 0xac
lea ecx, [ebp - 0x41330]
call fcn.0054d328
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x4132c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41328]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aab2c
lea edx, [ebp - 0x24]
push edx
push 0x5aab34
lea eax, [ebp - 0x28]
push eax
push 0x5aab3c
lea ecx, [ebp - 0x4133c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43d18], eax
mov edx, dword [ebp - 0x43d18]
mov dword [ebp - 0x43d1c], edx
mov byte [ebp - 4], 0xaf
mov eax, dword [ebp - 0x43d1c]
push eax
lea ecx, [ebp - 0x41340]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43d20], eax
mov edx, dword [ebp - 0x43d20]
mov dword [ebp - 0x43d24], edx
mov byte [ebp - 4], 0xb0
mov eax, dword [ebp - 0x43d24]
push eax
lea ecx, [ebp - 0x41344]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43d28], eax
mov edx, dword [ebp - 0x43d28]
mov dword [ebp - 0x43d2c], edx
mov byte [ebp - 4], 0xb1
mov eax, dword [ebp - 0x43d2c]
push eax
lea ecx, [ebp - 0x41348]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43d30], eax
mov edx, dword [ebp - 0x43d30]
mov dword [ebp - 0x43d34], edx
mov byte [ebp - 4], 0xb2
mov eax, dword [ebp - 0x43d34]
push eax
lea ecx, [ebp - 0x4134c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43d38], eax
mov edx, dword [ebp - 0x43d38]
mov dword [ebp - 0x42ba4], edx
mov byte [ebp - 4], 0xb3
mov eax, dword [ebp - 0x42ba4]
mov ecx, dword [eax]
mov dword [ebp - 0x42ba8], ecx
mov edx, dword [ebp - 0x42ba8]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x4134c]
call fcn.0054d328
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x41348]
call fcn.0054d328
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x41344]
call fcn.0054d328
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x41340]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4133c]
call fcn.0054d328
jmp 0x432d8f
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410d4], eax
cmp dword [ebp - 0x410d4], 0
jne 0x432cce
lea edx, [ebp - 0x28]
push edx
push 0x5aab60
lea eax, [ebp - 0x41350]
push eax
call fcn.0054d641
mov dword [ebp - 0x42bac], eax
mov ecx, dword [ebp - 0x42bac]
mov edx, dword [ecx]
mov dword [ebp - 0x42bb0], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42bb4], eax
mov ecx, dword [ebp - 0x42bb0]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42bb4]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41350]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aab80
lea edx, [ebp - 0x41354]
push edx
call fcn.0054d641
mov dword [ebp - 0x43d3c], eax
mov eax, dword [ebp - 0x43d3c]
mov dword [ebp - 0x42bb8], eax
mov byte [ebp - 4], 0xb4
mov ecx, dword [ebp - 0x42bb8]
mov edx, dword [ecx]
mov dword [ebp - 0x42bbc], edx
mov eax, dword [ebp - 0x42bbc]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41354]
call fcn.0054d328
jmp 0x432d8f
lea ecx, [ebp - 0x28]
push ecx
push 0x5aaba0
lea edx, [ebp - 0x41358]
push edx
call fcn.0054d641
mov dword [ebp - 0x42bc0], eax
mov eax, dword [ebp - 0x42bc0]
mov ecx, dword [eax]
mov dword [ebp - 0x42bc4], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x42bc8], edx
mov eax, dword [ebp - 0x42bc4]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x42bc8]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41358]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aabc0
lea ecx, [ebp - 0x4135c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43d40], eax
mov edx, dword [ebp - 0x43d40]
mov dword [ebp - 0x42bcc], edx
mov byte [ebp - 4], 0xb5
mov eax, dword [ebp - 0x42bcc]
mov ecx, dword [eax]
mov dword [ebp - 0x42bd0], ecx
mov edx, dword [ebp - 0x42bd0]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4135c]
call fcn.0054d328
jmp 0x4324cb
jmp 0x432dab
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x314
call fcn.0043c920
mov eax, dword [ebp - 0x410a8]
cmp dword [eax + 0x110], 0
jne 0x432dcd
mov ecx, dword [ebp - 0x410a8]
cmp dword [ecx + 0x110], 0
jne 0x4336b3
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x394]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x432df7
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x4336b1
mov eax, dword [ebp - 0x410a4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x390]
add edx, eax
mov dword [ebp - 0x42bd4], edx
mov eax, dword [ebp - 0x42bd4]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x42bd4]
add edx, 4
push edx
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov eax, dword [ebp - 0x42bd4]
add eax, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov ecx, dword [ebp - 0x42bd4]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov edx, dword [ebp - 0x42bd4]
add edx, 0x10
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov eax, dword [ebp - 0x42bd4]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x42bd4]
add edx, 0x18
push edx
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aabe4
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410d8], eax
mov ecx, dword [ebp - 0x410d8]
push ecx
lea edx, [ebp - 0x41360]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43d44], eax
mov eax, dword [ebp - 0x43d44]
mov dword [ebp - 0x43d48], eax
mov byte [ebp - 4], 0xb6
mov ecx, dword [ebp - 0x43d48]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41360]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41364], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x43d4c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43d50], eax
mov eax, dword [ebp - 0x43d50]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41368], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43d54], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43d58], eax
cmp dword [ebp - 0x43d58], 0
je 0x4336ac
cmp dword [ebp - 0x30], 1
jne 0x433503
push ecx
mov ecx, esp
mov dword [ebp - 0x4136c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43d5c], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43d60], eax
cmp dword [ebp - 0x43d60], 0
je 0x43325b
lea eax, [ebp - 0x20]
push eax
push 0x5aabe8
lea ecx, [ebp - 0x24]
push ecx
push 0x5aabf0
lea edx, [ebp - 0x28]
push edx
push 0x5aabf8
lea eax, [ebp - 0x41370]
push eax
call fcn.0054d641
mov dword [ebp - 0x43d64], eax
mov ecx, dword [ebp - 0x43d64]
mov dword [ebp - 0x43d68], ecx
mov byte [ebp - 4], 0xb7
mov edx, dword [ebp - 0x43d68]
push edx
lea eax, [ebp - 0x41374]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43d6c], eax
mov ecx, dword [ebp - 0x43d6c]
mov dword [ebp - 0x43d70], ecx
mov byte [ebp - 4], 0xb8
mov edx, dword [ebp - 0x43d70]
push edx
lea eax, [ebp - 0x41378]
push eax
call fcn.0054d567
mov dword [ebp - 0x43d74], eax
mov ecx, dword [ebp - 0x43d74]
mov dword [ebp - 0x43d78], ecx
mov byte [ebp - 4], 0xb9
mov edx, dword [ebp - 0x43d78]
push edx
lea eax, [ebp - 0x4137c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43d7c], eax
mov ecx, dword [ebp - 0x43d7c]
mov dword [ebp - 0x43d80], ecx
mov byte [ebp - 4], 0xba
mov edx, dword [ebp - 0x43d80]
push edx
lea eax, [ebp - 0x41380]
push eax
call fcn.0054d567
mov dword [ebp - 0x42bd8], eax
mov ecx, dword [ebp - 0x42bd8]
mov edx, dword [ecx]
mov dword [ebp - 0x42bdc], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42be0], eax
mov ecx, dword [ebp - 0x42bdc]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42be0]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41380]
call fcn.0054d328
mov byte [ebp - 4], 0xb9
lea ecx, [ebp - 0x4137c]
call fcn.0054d328
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x41378]
call fcn.0054d328
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x41374]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41370]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aac18
lea edx, [ebp - 0x24]
push edx
push 0x5aac20
lea eax, [ebp - 0x28]
push eax
push 0x5aac28
lea ecx, [ebp - 0x41384]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43d84], eax
mov edx, dword [ebp - 0x43d84]
mov dword [ebp - 0x43d88], edx
mov byte [ebp - 4], 0xbb
mov eax, dword [ebp - 0x43d88]
push eax
lea ecx, [ebp - 0x41388]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43d8c], eax
mov edx, dword [ebp - 0x43d8c]
mov dword [ebp - 0x43d90], edx
mov byte [ebp - 4], 0xbc
mov eax, dword [ebp - 0x43d90]
push eax
lea ecx, [ebp - 0x4138c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43d94], eax
mov edx, dword [ebp - 0x43d94]
mov dword [ebp - 0x43d98], edx
mov byte [ebp - 4], 0xbd
mov eax, dword [ebp - 0x43d98]
push eax
lea ecx, [ebp - 0x41390]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43d9c], eax
mov edx, dword [ebp - 0x43d9c]
mov dword [ebp - 0x43da0], edx
mov byte [ebp - 4], 0xbe
mov eax, dword [ebp - 0x43da0]
push eax
lea ecx, [ebp - 0x41394]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43da4], eax
mov edx, dword [ebp - 0x43da4]
mov dword [ebp - 0x42be4], edx
mov byte [ebp - 4], 0xbf
mov eax, dword [ebp - 0x42be4]
mov ecx, dword [eax]
mov dword [ebp - 0x42be8], ecx
mov edx, dword [ebp - 0x42be8]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xbe
lea ecx, [ebp - 0x41394]
call fcn.0054d328
mov byte [ebp - 4], 0xbd
lea ecx, [ebp - 0x41390]
call fcn.0054d328
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0x4138c]
call fcn.0054d328
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x41388]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41384]
call fcn.0054d328
jmp 0x4334fe
lea eax, [ebp - 0x20]
push eax
push 0x5aac48
lea ecx, [ebp - 0x24]
push ecx
push 0x5aac50
lea edx, [ebp - 0x28]
push edx
push 0x5aac58
lea eax, [ebp - 0x41398]
push eax
call fcn.0054d641
mov dword [ebp - 0x43da8], eax
mov ecx, dword [ebp - 0x43da8]
mov dword [ebp - 0x43dac], ecx
mov byte [ebp - 4], 0xc0
mov edx, dword [ebp - 0x43dac]
push edx
lea eax, [ebp - 0x4139c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43db0], eax
mov ecx, dword [ebp - 0x43db0]
mov dword [ebp - 0x43db4], ecx
mov byte [ebp - 4], 0xc1
mov edx, dword [ebp - 0x43db4]
push edx
lea eax, [ebp - 0x413a0]
push eax
call fcn.0054d567
mov dword [ebp - 0x43db8], eax
mov ecx, dword [ebp - 0x43db8]
mov dword [ebp - 0x43dbc], ecx
mov byte [ebp - 4], 0xc2
mov edx, dword [ebp - 0x43dbc]
push edx
lea eax, [ebp - 0x413a4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43dc0], eax
mov ecx, dword [ebp - 0x43dc0]
mov dword [ebp - 0x43dc4], ecx
mov byte [ebp - 4], 0xc3
mov edx, dword [ebp - 0x43dc4]
push edx
lea eax, [ebp - 0x413a8]
push eax
call fcn.0054d567
mov dword [ebp - 0x42bec], eax
mov ecx, dword [ebp - 0x42bec]
mov edx, dword [ecx]
mov dword [ebp - 0x42bf0], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42bf4], eax
mov ecx, dword [ebp - 0x42bf0]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42bf4]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x413a8]
call fcn.0054d328
mov byte [ebp - 4], 0xc2
lea ecx, [ebp - 0x413a4]
call fcn.0054d328
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x413a0]
call fcn.0054d328
mov byte [ebp - 4], 0xc0
lea ecx, [ebp - 0x4139c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41398]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aac78
lea edx, [ebp - 0x24]
push edx
push 0x5aac80
lea eax, [ebp - 0x28]
push eax
push 0x5aac88
lea ecx, [ebp - 0x413ac]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43dc8], eax
mov edx, dword [ebp - 0x43dc8]
mov dword [ebp - 0x43dcc], edx
mov byte [ebp - 4], 0xc4
mov eax, dword [ebp - 0x43dcc]
push eax
lea ecx, [ebp - 0x413b0]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43dd0], eax
mov edx, dword [ebp - 0x43dd0]
mov dword [ebp - 0x43dd4], edx
mov byte [ebp - 4], 0xc5
mov eax, dword [ebp - 0x43dd4]
push eax
lea ecx, [ebp - 0x413b4]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43dd8], eax
mov edx, dword [ebp - 0x43dd8]
mov dword [ebp - 0x43ddc], edx
mov byte [ebp - 4], 0xc6
mov eax, dword [ebp - 0x43ddc]
push eax
lea ecx, [ebp - 0x413b8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43de0], eax
mov edx, dword [ebp - 0x43de0]
mov dword [ebp - 0x43de4], edx
mov byte [ebp - 4], 0xc7
mov eax, dword [ebp - 0x43de4]
push eax
lea ecx, [ebp - 0x413bc]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43de8], eax
mov edx, dword [ebp - 0x43de8]
mov dword [ebp - 0x42bf8], edx
mov byte [ebp - 4], 0xc8
mov eax, dword [ebp - 0x42bf8]
mov ecx, dword [eax]
mov dword [ebp - 0x42bfc], ecx
mov edx, dword [ebp - 0x42bfc]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xc7
lea ecx, [ebp - 0x413bc]
call fcn.0054d328
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x413b8]
call fcn.0054d328
mov byte [ebp - 4], 0xc5
lea ecx, [ebp - 0x413b4]
call fcn.0054d328
mov byte [ebp - 4], 0xc4
lea ecx, [ebp - 0x413b0]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x413ac]
call fcn.0054d328
jmp 0x4336ac
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410dc], eax
cmp dword [ebp - 0x410dc], 0
jne 0x4335eb
lea edx, [ebp - 0x28]
push edx
push 0x5aacac
lea eax, [ebp - 0x413c0]
push eax
call fcn.0054d641
mov dword [ebp - 0x42c00], eax
mov ecx, dword [ebp - 0x42c00]
mov edx, dword [ecx]
mov dword [ebp - 0x42c04], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x42c08], eax
mov ecx, dword [ebp - 0x42c04]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x42c08]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x413c0]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aaccc
lea edx, [ebp - 0x413c4]
push edx
call fcn.0054d641
mov dword [ebp - 0x43dec], eax
mov eax, dword [ebp - 0x43dec]
mov dword [ebp - 0x42c0c], eax
mov byte [ebp - 4], 0xc9
mov ecx, dword [ebp - 0x42c0c]
mov edx, dword [ecx]
mov dword [ebp - 0x42c10], edx
mov eax, dword [ebp - 0x42c10]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x413c4]
call fcn.0054d328
jmp 0x4336ac
lea ecx, [ebp - 0x28]
push ecx
push 0x5aacec
lea edx, [ebp - 0x413c8]
push edx
call fcn.0054d641
mov dword [ebp - 0x42c14], eax
mov eax, dword [ebp - 0x42c14]
mov ecx, dword [eax]
mov dword [ebp - 0x42c18], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x42c1c], edx
mov eax, dword [ebp - 0x42c18]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x42c1c]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x413c8]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aad0c
lea ecx, [ebp - 0x413cc]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43df0], eax
mov edx, dword [ebp - 0x43df0]
mov dword [ebp - 0x42c20], edx
mov byte [ebp - 4], 0xca
mov eax, dword [ebp - 0x42c20]
mov ecx, dword [eax]
mov dword [ebp - 0x42c24], ecx
mov edx, dword [ebp - 0x42c24]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x413cc]
call fcn.0054d328
jmp 0x432de8
jmp 0x4336c8
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x38c
call fcn.0043c920
mov eax, dword [0x5c2d68]
mov dword [ebp - 0x43264], eax
call fcn.0055f60b
mov ecx, dword [eax + 4]
mov dword [ebp - 0x42fd8], ecx
push 0x208
lea edx, [ebp - 0x42f04]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x42f04]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054d39c
mov byte [ebp - 4], 0xcb
push 0x5c
lea ecx, [ebp - 0x42f9c]
call fcn.0054a7e6
mov dword [ebp - 0x43114], eax
mov ecx, dword [ebp - 0x43114]
add ecx, 1
push ecx
lea edx, [ebp - 0x42fc8]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054a76e
mov byte [ebp - 4], 0xcc
push 0x5abce8
lea eax, [ebp - 0x42fc8]
push eax
lea ecx, [ebp - 0x43120]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43224], eax
mov edx, dword [ebp - 0x43224]
mov eax, dword [edx]
mov dword [ebp - 0x43228], eax
mov ecx, dword [ebp - 0x43228]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x4311c], al
lea ecx, [ebp - 0x43120]
call fcn.0054d328
mov edx, dword [ebp - 0x4311c]
and edx, 0xff
test edx, edx
je 0x4337e6
mov eax, dword [ebp - 0x42fd8]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x43124], 0
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov ecx, dword [ebp - 0x43124]
mov dword [ebp - 0x43268], ecx
jmp 0x434a16
mov edx, dword [0x5be480]
mov dword [ebp - 0x42c60], edx
mov byte [ebp - 4], 0xcd
mov eax, dword [0x5be480]
mov dword [ebp - 0x42cfc], eax
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552c60
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.005527dd
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x43100]
mov dword [ebp - 0x4322c], ecx
mov edx, dword [ebp - 0x4322c]
mov eax, dword [0x5be480]
mov dword [edx], eax
mov byte [ebp - 4], 0xd1
mov dword [ebp - method.CFileException.virtual_0], vtable.CFileException.0
mov dword [ebp - 0x43108], 0
mov dword [ebp - 0x43104], 0xffffffff
push 0
lea ecx, [ebp - 0x43100]
call fcn.0054d4bf
mov byte [ebp - 4], 0xd2
push 0x5abce8
lea ecx, [ebp - 0x42fc8]
push ecx
lea edx, [ebp - 0x43128]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x43df4], eax
mov eax, dword [ebp - 0x43df4]
mov dword [ebp - 0x43230], eax
mov byte [ebp - 4], 0xd3
mov ecx, dword [ebp - 0x43230]
mov edx, dword [ecx]
mov dword [ebp - 0x43234], edx
lea eax, [ebp - 0x43110]
push eax
push 0
mov ecx, dword [ebp - 0x43234]
push ecx
lea ecx, [ebp - 0x42fc0]
call fcn.00552d6e
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x43128]
call fcn.0054d328
lea edx, [ebp - 0x42cfc]
push edx
lea ecx, [ebp - 0x42fc0]
call fcn.00552f53
test eax, eax
je 0x4338ff
lea eax, [ebp - 0x42cfc]
push eax
lea ecx, [ebp - 0x42c60]
call fcn.0054d755
jmp 0x4338d5
lea ecx, [ebp - 0x42cfc]
push ecx
lea ecx, [ebp - 0x42c60]
call fcn.0054d755
lea ecx, [ebp - 0x42fc0]
call fcn.005530a6
lea ecx, [ebp - 0x42cfc]
call fcn.0054d2b0
lea ecx, [ebp - 0x42c60]
call fcn.0054acc3
lea ecx, [ebp - 0x42c60]
call fcn.0054abd2
push 0x5c2d6c
push 0x5a9614
lea ecx, [ebp - 0x42c60]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abce0
lea ecx, [ebp - 0x42c60]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abcdc
lea ecx, [ebp - 0x42c60]
call fcn.0054a4c8
mov edx, dword [ebp - 0x42c60]
mov eax, dword [edx - 8]
mov dword [ebp - 0x43238], eax
cmp dword [ebp - 0x43238], 0x78
jl 0x4339b3
mov ecx, dword [ebp - 0x42c60]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x4323c], edx
cmp dword [ebp - 0x4323c], 0x82
jle 0x433a38
mov eax, dword [ebp - 0x42fd8]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x4312c], 0
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov ecx, dword [ebp - 0x4312c]
mov dword [ebp - 0x43268], ecx
jmp 0x434a16
push 0x5abcd0
lea ecx, [ebp - 0x42fc4]
call fcn.0054d39c
mov byte [ebp - 4], 0xd4
push 0x5abbcc
lea ecx, [ebp - 0x42c5c]
call fcn.0054d39c
mov byte [ebp - 4], 0xd5
mov edx, dword [0x5be480]
mov dword [ebp - 0x43118], edx
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f30
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f30
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f30
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f30
mov byte [ebp - 4], 0xda
push 0x10
lea eax, [ebp - 0x42c5c]
push eax
lea ecx, [ebp - 0x430fc]
call fcn.004035c7
push 0x10
lea ecx, [ebp - 0x42fc4]
push ecx
lea ecx, [ebp - 0x42f94]
call fcn.004035c7
push 0x10
lea edx, [ebp - 0x42c60]
push edx
lea ecx, [ebp - 0x42cf8]
call fcn.004035c7
lea eax, [ebp - 0x430fc]
push eax
lea ecx, [ebp - 0x42f94]
push ecx
lea edx, [ebp - 0x431bc]
push edx
lea ecx, [ebp - 0x42cf8]
call fcn.00403df7
mov dword [ebp - 0x43df8], eax
mov esi, dword [ebp - 0x43df8]
mov ecx, 0x24
lea edi, [ebp - 0x43068]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x431bc]
call fcn.00401f71
push 0x10
lea eax, [ebp - 0x43118]
push eax
lea ecx, [ebp - 0x43068]
call fcn.00403832
mov ecx, dword [ebp - 0x43118]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x43240], edx
mov eax, dword [ebp - 0x43240]
and eax, 0x80000001
jns 0x433b61
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x433c58
mov ecx, dword [ebp - 0x42fd8]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x431c0], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov edx, dword [ebp - 0x431c0]
mov dword [ebp - 0x43268], edx
jmp 0x434a16
push ecx
mov ecx, esp
mov dword [ebp - 0x431c4], esp
lea eax, [ebp - 0x43118]
push eax
call fcn.0054d095
mov dword [ebp - 0x43dfc], eax
lea ecx, [ebp - 0x431c8]
push ecx
mov ecx, dword [ebp - 0x42fd8]
call fcn.004c1480
mov dword [ebp - 0x43e00], eax
mov edx, dword [ebp - 0x43e00]
mov dword [ebp - 0x43e04], edx
mov byte [ebp - 4], 0xdb
mov eax, dword [ebp - 0x43e04]
push eax
lea ecx, [ebp - 0x42cfc]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431c8]
call fcn.0054d328
lea ecx, [ebp - 0x42cfc]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 2
lea edx, [ebp - 0x431cc]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054a76e
mov dword [ebp - 0x43e08], eax
mov eax, dword [ebp - 0x43e08]
mov dword [ebp - 0x43e0c], eax
mov byte [ebp - 4], 0xdc
mov ecx, dword [ebp - 0x43e0c]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431cc]
call fcn.0054d328
push 0x5abbc4
mov edx, dword [ebp - 0x42f9c]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x43244], eax
xor eax, eax
cmp dword [ebp - 0x43244], 0
setne al
and eax, 0xff
test eax, eax
je 0x433e3a
mov ecx, dword [ebp - 0x42fd8]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x431d0], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov edx, dword [ebp - 0x431d0]
mov dword [ebp - 0x43268], edx
jmp 0x434a16
lea eax, [ebp - 0x42cfc]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 1
push 2
lea ecx, [ebp - 0x431d4]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e10], eax
mov edx, dword [ebp - 0x43e10]
mov dword [ebp - 0x43e14], edx
mov byte [ebp - 4], 0xdd
mov eax, dword [ebp - 0x43e14]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431d4]
call fcn.0054d328
push 0x5abbc0
mov ecx, dword [ebp - 0x42f9c]
push ecx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x43248], eax
xor edx, edx
cmp dword [ebp - 0x43248], 0
setne dl
and edx, 0xff
test edx, edx
je 0x433fbb
mov eax, dword [ebp - 0x42fd8]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x431d8], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov ecx, dword [ebp - 0x431d8]
mov dword [ebp - 0x43268], ecx
jmp 0x434a16
lea edx, [ebp - 0x42cfc]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 1
push 7
lea eax, [ebp - 0x431dc]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e18], eax
mov ecx, dword [ebp - 0x43e18]
mov dword [ebp - 0x43e1c], ecx
mov byte [ebp - 4], 0xde
mov edx, dword [ebp - 0x43e1c]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431dc]
call fcn.0054d328
push 0x5abbbc
mov eax, dword [ebp - 0x42f9c]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x4324c], eax
xor ecx, ecx
cmp dword [ebp - 0x4324c], 0
setne cl
and ecx, 0xff
test ecx, ecx
je 0x43413c
mov edx, dword [ebp - 0x42fd8]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x431e0], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov eax, dword [ebp - 0x431e0]
mov dword [ebp - 0x43268], eax
jmp 0x434a16
lea ecx, [ebp - 0x42cfc]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 1
push 0xa
lea edx, [ebp - 0x431e4]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e20], eax
mov eax, dword [ebp - 0x43e20]
mov dword [ebp - 0x43e24], eax
mov byte [ebp - 4], 0xdf
mov ecx, dword [ebp - 0x43e24]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431e4]
call fcn.0054d328
push 0x5abbb8
mov edx, dword [ebp - 0x42f9c]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x43250], eax
xor eax, eax
cmp dword [ebp - 0x43250], 0
setne al
and eax, 0xff
test eax, eax
je 0x4342bc
mov ecx, dword [ebp - 0x42fd8]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x431e8], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov edx, dword [ebp - 0x431e8]
mov dword [ebp - 0x43268], edx
jmp 0x434a16
mov dword [ebp - 0x42fa8], 0
mov dword [ebp - 0x42fac], 0
mov dword [ebp - 0x42fa4], 0
lea eax, [ebp - 0x42cfc]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 4
push 3
lea ecx, [ebp - 0x431ec]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e28], eax
mov edx, dword [ebp - 0x43e28]
mov dword [ebp - 0x43e2c], edx
mov byte [ebp - 4], 0xe0
mov eax, dword [ebp - 0x43e2c]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431ec]
call fcn.0054d328
mov ecx, dword [ebp - 0x42f9c]
push ecx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42fa8], eax
lea edx, [ebp - 0x42cfc]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 2
push 8
lea eax, [ebp - 0x431f0]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e30], eax
mov ecx, dword [ebp - 0x43e30]
mov dword [ebp - 0x43e34], ecx
mov byte [ebp - 4], 0xe1
mov edx, dword [ebp - 0x43e34]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431f0]
call fcn.0054d328
mov eax, dword [ebp - 0x42f9c]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42fac], eax
lea ecx, [ebp - 0x42cfc]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 2
push 0xb
lea edx, [ebp - 0x431f4]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e38], eax
mov eax, dword [ebp - 0x43e38]
mov dword [ebp - 0x43e3c], eax
mov byte [ebp - 4], 0xe2
mov ecx, dword [ebp - 0x43e3c]
push ecx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x431f4]
call fcn.0054d328
mov edx, dword [ebp - 0x42f9c]
push edx
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42fa4], eax
push 0xffffffffffffffff
push 0
push 0
push 0
mov eax, dword [ebp - 0x42fa4]
push eax
mov ecx, dword [ebp - 0x42fac]
push ecx
mov edx, dword [ebp - 0x42fa8]
push edx
lea ecx, [ebp - 0x42f98]
call fcn.0054adfb
mov dword [ebp - 0x42c64], 0
push 0x34
push 0
lea eax, [ebp - 0x42c58]
push eax
call fcn.005370b0
add esp, 0xc
push 0x208
lea ecx, [ebp - 0x42f04]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x27
push 3
push 0
push 1
push SysReAllocStringLen
lea edx, [ebp - 0x42f04]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4306c], eax
cmp dword [ebp - 0x4306c], 0xffffffff
jne 0x43459c
mov dword [ebp - 0x431f8], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov eax, dword [ebp - 0x431f8]
mov dword [ebp - 0x43268], eax
jmp 0x434a16
lea ecx, [ebp - 0x42c58]
push ecx
mov edx, dword [ebp - 0x4306c]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [ebp - 0x42fd0], eax
mov eax, dword [ebp - 0x4306c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x42c54]
mov dword [ebp - 0x42c64], ecx
cmp dword [ebp - 0x42c64], 0
je 0x434600
push 0xffffffffffffffff
mov edx, dword [ebp - 0x42c64]
push edx
lea ecx, [ebp - 0x431fc]
call fcn.0054ae93
mov dword [ebp - 0x43254], eax
mov eax, dword [ebp - 0x43254]
mov ecx, dword [eax]
mov dword [ebp - 0x42c68], ecx
push ecx
mov edx, esp
mov dword [ebp - 0x43200], esp
push edx
call fcn.0054aedf
lea eax, [ebp - 0x43204]
push eax
lea ecx, [ebp - 0x42c68]
call fcn.0043c2f0
mov dword [ebp - 0x43258], eax
mov ecx, dword [ebp - 0x43258]
mov edx, dword [ecx]
mov dword [ebp - 0x42fd4], edx
mov eax, dword [ebp - 0x42fd4]
cdq
mov ecx, 0x15180
idiv ecx
test eax, eax
jle 0x434739
mov edx, dword [ebp - 0x42fd8]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x43208], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov eax, dword [ebp - 0x43208]
mov dword [ebp - 0x43268], eax
jmp 0x434a16
lea ecx, [ebp - 0x4320c]
push ecx
call fcn.0054aedf
mov dword [ebp - 0x4325c], eax
mov edx, dword [ebp - 0x4325c]
mov eax, dword [edx]
mov dword [ebp - 0x42c68], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x43210], esp
mov dword [ebp - 0x43260], ecx
mov edx, dword [ebp - 0x43260]
mov eax, dword [ebp - 0x42f98]
mov dword [edx], eax
lea ecx, [ebp - 0x43214]
push ecx
lea ecx, [ebp - 0x42c68]
call fcn.0043c2f0
mov dword [ebp - 0x43e40], eax
mov edx, dword [ebp - 0x43e40]
mov eax, dword [edx]
mov dword [ebp - 0x42fd4], eax
mov eax, dword [ebp - 0x42fd4]
cdq
mov ecx, 0x15180
idiv ecx
mov dword [ebp - 0x42fcc], eax
mov dword [ebp - 0x42fa0], 0
lea edx, [ebp - 0x42cfc]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
push 2
push 0xe
lea eax, [ebp - 0x43218]
push eax
lea ecx, [ebp - 0x42f9c]
call fcn.0054a65c
mov dword [ebp - 0x43e44], eax
mov ecx, dword [ebp - 0x43e44]
mov dword [ebp - 0x43e48], ecx
mov byte [ebp - 4], 0xe3
mov edx, dword [ebp - 0x43e48]
push edx
lea ecx, [ebp - 0x42f9c]
call fcn.0054d46f
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x43218]
call fcn.0054d328
mov eax, dword [ebp - 0x42f9c]
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x42fa0], eax
mov ecx, dword [ebp - 0x42fa0]
imul ecx, ecx, 0x16d
cmp dword [ebp - 0x42fcc], ecx
jg 0x43484f
cmp dword [ebp - 0x42fcc], 0
jge 0x43493d
mov edx, dword [ebp - 0x42fd8]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x4321c], 0
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov eax, dword [ebp - 0x4321c]
mov dword [ebp - 0x43268], eax
jmp 0x434a16
mov dword [ebp - 0x43220], 1
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x42cf8]
call fcn.00401f71
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x43068]
call fcn.00401f71
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x42f94]
call fcn.00401f71
mov byte [ebp - 4], 0xd6
lea ecx, [ebp - 0x430fc]
call fcn.00401f71
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x43118]
call fcn.0054d328
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x42c5c]
call fcn.0054d328
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x42fc4]
call fcn.0054d328
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x43110]
call fcn.0043c2a0
mov byte [ebp - 4], 0xce
lea ecx, [ebp - 0x42fc0]
call fcn.00552d2b
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x42cfc]
call fcn.0054d328
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x42c60]
call fcn.0054d328
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x42fc8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x42f9c]
call fcn.0054d328
mov ecx, dword [ebp - 0x43220]
mov dword [ebp - 0x43268], ecx
cmp dword [ebp - 0x43268], 0
je 0x435309
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x344]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x434a4d
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x435307
mov eax, dword [ebp - 0x410a4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x340]
add edx, eax
mov dword [ebp - 0x4326c], edx
mov eax, dword [ebp - 0x4326c]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x4326c]
add edx, 4
push edx
lea ecx, [ebp - 0x2c]
call fcn.0054d46f
mov eax, dword [ebp - 0x4326c]
add eax, 8
push eax
lea ecx, [ebp - 0x28]
call fcn.0054d46f
mov ecx, dword [ebp - 0x4326c]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x24]
call fcn.0054d46f
mov edx, dword [ebp - 0x4326c]
add edx, 0x10
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
mov eax, dword [ebp - 0x4326c]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x4326c]
add edx, 0x18
push edx
lea ecx, [ebp - 0x18]
call fcn.0054d46f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aad30
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410e0], eax
mov ecx, dword [ebp - 0x410e0]
push ecx
lea edx, [ebp - 0x413d0]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43e4c], eax
mov eax, dword [ebp - 0x43e4c]
mov dword [ebp - 0x43e50], eax
mov byte [ebp - 4], 0xe4
mov ecx, dword [ebp - 0x43e50]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x413d0]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x413d4], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x43e54], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43e58], eax
mov eax, dword [ebp - 0x43e58]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x413d8], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43e5c], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43e60], eax
cmp dword [ebp - 0x43e60], 0
je 0x435302
cmp dword [ebp - 0x30], 1
jne 0x435159
push ecx
mov ecx, esp
mov dword [ebp - 0x413dc], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43e64], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43e68], eax
cmp dword [ebp - 0x43e68], 0
je 0x434eb1
lea eax, [ebp - 0x20]
push eax
push 0x5aad34
lea ecx, [ebp - 0x24]
push ecx
push 0x5aad3c
lea edx, [ebp - 0x28]
push edx
push 0x5aad44
lea eax, [ebp - 0x413e0]
push eax
call fcn.0054d641
mov dword [ebp - 0x43e6c], eax
mov ecx, dword [ebp - 0x43e6c]
mov dword [ebp - 0x43e70], ecx
mov byte [ebp - 4], 0xe5
mov edx, dword [ebp - 0x43e70]
push edx
lea eax, [ebp - 0x413e4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43e74], eax
mov ecx, dword [ebp - 0x43e74]
mov dword [ebp - 0x43e78], ecx
mov byte [ebp - 4], 0xe6
mov edx, dword [ebp - 0x43e78]
push edx
lea eax, [ebp - 0x413e8]
push eax
call fcn.0054d567
mov dword [ebp - 0x43e7c], eax
mov ecx, dword [ebp - 0x43e7c]
mov dword [ebp - 0x43e80], ecx
mov byte [ebp - 4], 0xe7
mov edx, dword [ebp - 0x43e80]
push edx
lea eax, [ebp - 0x413ec]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43e84], eax
mov ecx, dword [ebp - 0x43e84]
mov dword [ebp - 0x43e88], ecx
mov byte [ebp - 4], 0xe8
mov edx, dword [ebp - 0x43e88]
push edx
lea eax, [ebp - 0x413f0]
push eax
call fcn.0054d567
mov dword [ebp - 0x43270], eax
mov ecx, dword [ebp - 0x43270]
mov edx, dword [ecx]
mov dword [ebp - 0x43274], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x43278], eax
mov ecx, dword [ebp - 0x43274]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x43278]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x413f0]
call fcn.0054d328
mov byte [ebp - 4], 0xe7
lea ecx, [ebp - 0x413ec]
call fcn.0054d328
mov byte [ebp - 4], 0xe6
lea ecx, [ebp - 0x413e8]
call fcn.0054d328
mov byte [ebp - 4], 0xe5
lea ecx, [ebp - 0x413e4]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x413e0]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aad64
lea edx, [ebp - 0x24]
push edx
push 0x5aad6c
lea eax, [ebp - 0x28]
push eax
push 0x5aad74
lea ecx, [ebp - 0x413f4]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43e8c], eax
mov edx, dword [ebp - 0x43e8c]
mov dword [ebp - 0x43e90], edx
mov byte [ebp - 4], 0xe9
mov eax, dword [ebp - 0x43e90]
push eax
lea ecx, [ebp - 0x413f8]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43e94], eax
mov edx, dword [ebp - 0x43e94]
mov dword [ebp - 0x43e98], edx
mov byte [ebp - 4], 0xea
mov eax, dword [ebp - 0x43e98]
push eax
lea ecx, [ebp - 0x413fc]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43e9c], eax
mov edx, dword [ebp - 0x43e9c]
mov dword [ebp - 0x43ea0], edx
mov byte [ebp - 4], 0xeb
mov eax, dword [ebp - 0x43ea0]
push eax
lea ecx, [ebp - 0x41400]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43ea4], eax
mov edx, dword [ebp - 0x43ea4]
mov dword [ebp - 0x43ea8], edx
mov byte [ebp - 4], 0xec
mov eax, dword [ebp - 0x43ea8]
push eax
lea ecx, [ebp - 0x41404]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43eac], eax
mov edx, dword [ebp - 0x43eac]
mov dword [ebp - 0x4327c], edx
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0x4327c]
mov ecx, dword [eax]
mov dword [ebp - 0x43280], ecx
mov edx, dword [ebp - 0x43280]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xec
lea ecx, [ebp - 0x41404]
call fcn.0054d328
mov byte [ebp - 4], 0xeb
lea ecx, [ebp - 0x41400]
call fcn.0054d328
mov byte [ebp - 4], 0xea
lea ecx, [ebp - 0x413fc]
call fcn.0054d328
mov byte [ebp - 4], 0xe9
lea ecx, [ebp - 0x413f8]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x413f4]
call fcn.0054d328
jmp 0x435154
lea eax, [ebp - 0x20]
push eax
push 0x5aad94
lea ecx, [ebp - 0x24]
push ecx
push 0x5aad9c
lea edx, [ebp - 0x28]
push edx
push 0x5aada4
lea eax, [ebp - 0x41408]
push eax
call fcn.0054d641
mov dword [ebp - 0x43eb0], eax
mov ecx, dword [ebp - 0x43eb0]
mov dword [ebp - 0x43eb4], ecx
mov byte [ebp - 4], 0xee
mov edx, dword [ebp - 0x43eb4]
push edx
lea eax, [ebp - 0x4140c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43eb8], eax
mov ecx, dword [ebp - 0x43eb8]
mov dword [ebp - 0x43ebc], ecx
mov byte [ebp - 4], 0xef
mov edx, dword [ebp - 0x43ebc]
push edx
lea eax, [ebp - 0x41410]
push eax
call fcn.0054d567
mov dword [ebp - 0x43ec0], eax
mov ecx, dword [ebp - 0x43ec0]
mov dword [ebp - 0x43ec4], ecx
mov byte [ebp - 4], 0xf0
mov edx, dword [ebp - 0x43ec4]
push edx
lea eax, [ebp - 0x41414]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43ec8], eax
mov ecx, dword [ebp - 0x43ec8]
mov dword [ebp - 0x43ecc], ecx
mov byte [ebp - 4], 0xf1
mov edx, dword [ebp - 0x43ecc]
push edx
lea eax, [ebp - 0x41418]
push eax
call fcn.0054d567
mov dword [ebp - 0x43284], eax
mov ecx, dword [ebp - 0x43284]
mov edx, dword [ecx]
mov dword [ebp - 0x43288], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x4328c], eax
mov ecx, dword [ebp - 0x43288]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x4328c]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41418]
call fcn.0054d328
mov byte [ebp - 4], 0xf0
lea ecx, [ebp - 0x41414]
call fcn.0054d328
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0x41410]
call fcn.0054d328
mov byte [ebp - 4], 0xee
lea ecx, [ebp - 0x4140c]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41408]
call fcn.0054d328
lea ecx, [ebp - 0x20]
push ecx
push 0x5aadc4
lea edx, [ebp - 0x24]
push edx
push 0x5aadcc
lea eax, [ebp - 0x28]
push eax
push 0x5aadd4
lea ecx, [ebp - 0x4141c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43ed0], eax
mov edx, dword [ebp - 0x43ed0]
mov dword [ebp - 0x43ed4], edx
mov byte [ebp - 4], 0xf2
mov eax, dword [ebp - 0x43ed4]
push eax
lea ecx, [ebp - 0x41420]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43ed8], eax
mov edx, dword [ebp - 0x43ed8]
mov dword [ebp - 0x43edc], edx
mov byte [ebp - 4], 0xf3
mov eax, dword [ebp - 0x43edc]
push eax
lea ecx, [ebp - 0x41424]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43ee0], eax
mov edx, dword [ebp - 0x43ee0]
mov dword [ebp - 0x43ee4], edx
mov byte [ebp - 4], 0xf4
mov eax, dword [ebp - 0x43ee4]
push eax
lea ecx, [ebp - 0x41428]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43ee8], eax
mov edx, dword [ebp - 0x43ee8]
mov dword [ebp - 0x43eec], edx
mov byte [ebp - 4], 0xf5
mov eax, dword [ebp - 0x43eec]
push eax
lea ecx, [ebp - 0x4142c]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43ef0], eax
mov edx, dword [ebp - 0x43ef0]
mov dword [ebp - 0x43290], edx
mov byte [ebp - 4], 0xf6
mov eax, dword [ebp - 0x43290]
mov ecx, dword [eax]
mov dword [ebp - 0x43294], ecx
mov edx, dword [ebp - 0x43294]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xf5
lea ecx, [ebp - 0x4142c]
call fcn.0054d328
mov byte [ebp - 4], 0xf4
lea ecx, [ebp - 0x41428]
call fcn.0054d328
mov byte [ebp - 4], 0xf3
lea ecx, [ebp - 0x41424]
call fcn.0054d328
mov byte [ebp - 4], 0xf2
lea ecx, [ebp - 0x41420]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4141c]
call fcn.0054d328
jmp 0x435302
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x410ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410e4], eax
cmp dword [ebp - 0x410e4], 0
jne 0x435241
lea edx, [ebp - 0x28]
push edx
push 0x5aadf8
lea eax, [ebp - 0x41430]
push eax
call fcn.0054d641
mov dword [ebp - 0x43298], eax
mov ecx, dword [ebp - 0x43298]
mov edx, dword [ecx]
mov dword [ebp - 0x4329c], edx
mov eax, dword [0x5c2d68]
add eax, 0x98
mov dword [ebp - 0x432a0], eax
mov ecx, dword [ebp - 0x4329c]
push ecx
push 0
push 0x180
mov edx, dword [ebp - 0x432a0]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41430]
call fcn.0054d328
lea ecx, [ebp - 0x28]
push ecx
push 0x5aae18
lea edx, [ebp - 0x41434]
push edx
call fcn.0054d641
mov dword [ebp - 0x43ef4], eax
mov eax, dword [ebp - 0x43ef4]
mov dword [ebp - 0x432a4], eax
mov byte [ebp - 4], 0xf7
mov ecx, dword [ebp - 0x432a4]
mov edx, dword [ecx]
mov dword [ebp - 0x432a8], edx
mov eax, dword [ebp - 0x432a8]
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x41434]
call fcn.0054d328
jmp 0x435302
lea ecx, [ebp - 0x28]
push ecx
push 0x5aae38
lea edx, [ebp - 0x41438]
push edx
call fcn.0054d641
mov dword [ebp - 0x432ac], eax
mov eax, dword [ebp - 0x432ac]
mov ecx, dword [eax]
mov dword [ebp - 0x432b0], ecx
mov edx, dword [0x5c2d68]
add edx, 0x98
mov dword [ebp - 0x432b4], edx
mov eax, dword [ebp - 0x432b0]
push eax
push 0
push 0x180
mov ecx, dword [ebp - 0x432b4]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x41438]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aae58
lea ecx, [ebp - 0x4143c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43ef8], eax
mov edx, dword [ebp - 0x43ef8]
mov dword [ebp - 0x432b8], edx
mov byte [ebp - 4], 0xf8
mov eax, dword [ebp - 0x432b8]
mov ecx, dword [eax]
mov dword [ebp - 0x432bc], ecx
mov edx, dword [ebp - 0x432bc]
push edx
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4143c]
call fcn.0054d328
jmp 0x434a3e
jmp 0x43531e
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x33c
call fcn.0043c920
mov eax, dword [0x5c2d68]
mov dword [ebp - 0x438bc], eax
call fcn.0043c570
mov dword [ebp - 0x43670], eax
push 0x208
lea ecx, [ebp - 0x4359c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x4359c]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d39c
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43634]
call fcn.0043c4c0
push 0x5c
lea ecx, [ebp - 0x43634]
call fcn.0054a7e6
mov dword [ebp - 0x437ac], eax
mov eax, dword [ebp - 0x437ac]
add eax, 1
push eax
lea ecx, [ebp - 0x43660]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054a76e
mov byte [ebp - 4], 0xfa
push 0x5abce8
lea edx, [ebp - 0x43660]
push edx
lea eax, [ebp - 0x437b8]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43efc], eax
mov ecx, dword [ebp - 0x43efc]
mov dword [ebp - 0x43f00], ecx
mov byte [ebp - 4], 0xfb
mov ecx, dword [ebp - 0x43f00]
call fcn.0043c4e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x437b4], al
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x437b8]
call fcn.0054d328
mov edx, dword [ebp - 0x437b4]
and edx, 0xff
test edx, edx
je 0x43544f
mov eax, dword [ebp - 0x43670]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x437bc], 0
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov ecx, dword [ebp - 0x437bc]
mov dword [ebp - 0x438c0], ecx
jmp 0x4365dd
lea ecx, [ebp - 0x432f8]
call fcn.0043c4a0
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0043c4a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552c60
mov byte [ebp - 4], 0xfe
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x437a8]
call fcn.0043c340
mov byte [ebp - 4], 0xff
lea edx, [ebp - 0x437a8]
push edx
push 0
push 0x5abce8
lea eax, [ebp - 0x43660]
push eax
lea ecx, [ebp - 0x437c0]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43f04], eax
mov edx, dword [ebp - 0x43f04]
mov dword [ebp - 0x43f08], edx
mov dword [ebp - 4], 0x100
mov ecx, dword [ebp - 0x43f08]
call fcn.0043c4e0
push eax
lea ecx, [ebp - 0x43658]
call fcn.00552d6e
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x437c0]
call fcn.0054d328
lea eax, [ebp - 0x43394]
push eax
lea ecx, [ebp - 0x43658]
call fcn.00552f53
test eax, eax
je 0x43551e
lea ecx, [ebp - 0x43394]
push ecx
lea ecx, [ebp - 0x432f8]
call fcn.0054d755
jmp 0x4354f4
lea edx, [ebp - 0x43394]
push edx
lea ecx, [ebp - 0x432f8]
call fcn.0054d755
lea ecx, [ebp - 0x43658]
call fcn.005530a6
lea ecx, [ebp - 0x43394]
call fcn.0054d2b0
lea ecx, [ebp - 0x432f8]
call fcn.0054acc3
lea ecx, [ebp - 0x432f8]
call fcn.0054abd2
push 0x5c2d6c
push 0x5a9614
lea ecx, [ebp - 0x432f8]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abce0
lea ecx, [ebp - 0x432f8]
call fcn.0054a4c8
push 0x5c2d6c
push 0x5abcdc
lea ecx, [ebp - 0x432f8]
call fcn.0054a4c8
lea ecx, [ebp - 0x432f8]
call fcn.0043c4c0
cmp eax, 0x78
jl 0x4355c1
lea ecx, [ebp - 0x432f8]
call fcn.0043c4c0
cmp eax, 0x82
jle 0x435646
mov eax, dword [ebp - 0x43670]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x437c4], 0
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov ecx, dword [ebp - 0x437c4]
mov dword [ebp - 0x438c0], ecx
jmp 0x4365dd
push 0x5abcd0
lea ecx, [ebp - 0x4365c]
call fcn.0054d39c
mov dword [ebp - 4], 0x101
push 0x5abbcc
lea ecx, [ebp - 0x432f4]
call fcn.0054d39c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0043c4a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f30
mov byte [ebp - 4], 7
push 0x10
lea edx, [ebp - 0x432f4]
push edx
lea ecx, [ebp - 0x43794]
call fcn.004035c7
push 0x10
lea eax, [ebp - 0x4365c]
push eax
lea ecx, [ebp - 0x4362c]
call fcn.004035c7
push 0x10
lea ecx, [ebp - 0x432f8]
push ecx
lea ecx, [ebp - 0x43390]
call fcn.004035c7
lea edx, [ebp - 0x43794]
push edx
lea eax, [ebp - 0x4362c]
push eax
lea ecx, [ebp - 0x43854]
push ecx
lea ecx, [ebp - 0x43390]
call fcn.00403df7
mov dword [ebp - 0x43f0c], eax
mov esi, dword [ebp - 0x43f0c]
mov ecx, 0x24
lea edi, [ebp - 0x43700]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x43854]
call fcn.00401f71
push 0x10
lea edx, [ebp - 0x437b0]
push edx
lea ecx, [ebp - 0x43700]
call fcn.00403832
lea ecx, [ebp - 0x437b0]
call fcn.0043c4c0
and eax, 0x80000001
jns 0x435767
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x435861
mov eax, dword [ebp - 0x43670]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x43858], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov ecx, dword [ebp - 0x43858]
mov dword [ebp - 0x438c0], ecx
jmp 0x4365dd
push ecx
mov ecx, esp
mov dword [ebp - 0x4385c], esp
lea edx, [ebp - 0x437b0]
push edx
call fcn.0054d095
mov dword [ebp - 0x43f10], eax
lea eax, [ebp - 0x43860]
push eax
mov ecx, dword [ebp - 0x43670]
call fcn.004c1480
mov dword [ebp - 0x43f14], eax
mov ecx, dword [ebp - 0x43f14]
mov dword [ebp - 0x43f18], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x43f18]
push edx
lea ecx, [ebp - 0x43394]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43860]
call fcn.0054d328
lea eax, [ebp - 0x43394]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 2
lea ecx, [ebp - 0x43864]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054a76e
mov dword [ebp - 0x43f1c], eax
mov edx, dword [ebp - 0x43f1c]
mov dword [ebp - 0x43f20], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x43f20]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43864]
call fcn.0054d328
push 0x5abbc4
lea ecx, [ebp - 0x43634]
push ecx
call fcn.0043c4f0
and eax, 0xff
test eax, eax
je 0x435a31
mov edx, dword [ebp - 0x43670]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x43868], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov eax, dword [ebp - 0x43868]
mov dword [ebp - 0x438c0], eax
jmp 0x4365dd
lea ecx, [ebp - 0x43394]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 1
push 2
lea edx, [ebp - 0x4386c]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f24], eax
mov eax, dword [ebp - 0x43f24]
mov dword [ebp - 0x43f28], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x43f28]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4386c]
call fcn.0054d328
push 0x5abbc0
lea edx, [ebp - 0x43634]
push edx
call fcn.0043c4f0
and eax, 0xff
test eax, eax
je 0x435b9f
mov eax, dword [ebp - 0x43670]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x43870], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov ecx, dword [ebp - 0x43870]
mov dword [ebp - 0x438c0], ecx
jmp 0x4365dd
lea edx, [ebp - 0x43394]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 1
push 7
lea eax, [ebp - 0x43874]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f2c], eax
mov ecx, dword [ebp - 0x43f2c]
mov dword [ebp - 0x43f30], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x43f30]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43874]
call fcn.0054d328
push 0x5abbbc
lea eax, [ebp - 0x43634]
push eax
call fcn.0043c4f0
and eax, 0xff
test eax, eax
je 0x435d0d
mov ecx, dword [ebp - 0x43670]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x43878], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov edx, dword [ebp - 0x43878]
mov dword [ebp - 0x438c0], edx
jmp 0x4365dd
lea eax, [ebp - 0x43394]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 1
push 0xa
lea ecx, [ebp - 0x4387c]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f34], eax
mov edx, dword [ebp - 0x43f34]
mov dword [ebp - 0x43f38], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x43f38]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4387c]
call fcn.0054d328
push 0x5abbb8
lea ecx, [ebp - 0x43634]
push ecx
call fcn.0043c4f0
and eax, 0xff
test eax, eax
je 0x435e7b
mov edx, dword [ebp - 0x43670]
mov dword [edx + 0x110], 0
mov dword [ebp - 0x43880], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov eax, dword [ebp - 0x43880]
mov dword [ebp - 0x438c0], eax
jmp 0x4365dd
mov dword [ebp - 0x43640], 0
mov dword [ebp - 0x43644], 0
mov dword [ebp - 0x4363c], 0
lea ecx, [ebp - 0x43300]
call fcn.0043c560
lea ecx, [ebp - 0x4366c]
call fcn.0043c560
lea ecx, [ebp - 0x43394]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 4
push 3
lea edx, [ebp - 0x43884]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f3c], eax
mov eax, dword [ebp - 0x43f3c]
mov dword [ebp - 0x43f40], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x43f40]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43884]
call fcn.0054d328
lea ecx, [ebp - 0x43634]
call fcn.0043c4e0
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x43640], eax
lea edx, [ebp - 0x43394]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 2
push 8
lea eax, [ebp - 0x43888]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f44], eax
mov ecx, dword [ebp - 0x43f44]
mov dword [ebp - 0x43f48], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x43f48]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43888]
call fcn.0054d328
lea ecx, [ebp - 0x43634]
call fcn.0043c4e0
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x43644], eax
lea eax, [ebp - 0x43394]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 2
push 0xb
lea ecx, [ebp - 0x4388c]
push ecx
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f4c], eax
mov edx, dword [ebp - 0x43f4c]
mov dword [ebp - 0x43f50], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x43f50]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4388c]
call fcn.0054d328
lea ecx, [ebp - 0x43634]
call fcn.0043c4e0
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x4363c], eax
push 0xffffffffffffffff
push 0
push 0
push 0
mov ecx, dword [ebp - 0x4363c]
push ecx
mov edx, dword [ebp - 0x43644]
push edx
mov eax, dword [ebp - 0x43640]
push eax
lea ecx, [ebp - 0x43630]
call fcn.0054adfb
mov dword [ebp - 0x432fc], 0
push 0x34
push 0
lea ecx, [ebp - 0x432f0]
push ecx
call fcn.005370b0
add esp, 0xc
push 0x208
lea edx, [ebp - 0x4359c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x27
push 3
push 0
push 1
push SysReAllocStringLen
lea eax, [ebp - 0x4359c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x43704], eax
cmp dword [ebp - 0x43704], 0xffffffff
jne 0x436183
mov dword [ebp - 0x43890], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov ecx, dword [ebp - 0x43890]
mov dword [ebp - 0x438c0], ecx
jmp 0x4365dd
lea edx, [ebp - 0x432f0]
push edx
mov eax, dword [ebp - 0x43704]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov dword [ebp - 0x43668], eax
mov ecx, dword [ebp - 0x43704]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x432ec]
mov dword [ebp - 0x432fc], edx
cmp dword [ebp - 0x432fc], 0
je 0x4361df
push 0xffffffffffffffff
mov eax, dword [ebp - 0x432fc]
push eax
lea ecx, [ebp - 0x43894]
call fcn.0054ae93
push eax
lea ecx, [ebp - 0x43300]
call fcn.0043c520
push ecx
mov ecx, esp
mov dword [ebp - 0x43898], esp
push ecx
call fcn.0054aedf
lea edx, [ebp - 0x4389c]
push edx
lea ecx, [ebp - 0x43300]
call fcn.0043c2f0
push eax
lea ecx, [ebp - 0x4366c]
call fcn.0043c520
lea ecx, [ebp - 0x4366c]
call fcn.0043c540
test eax, eax
jle 0x436310
mov eax, dword [ebp - 0x43670]
mov dword [eax + 0x110], 0
mov dword [ebp - 0x438a0], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov ecx, dword [ebp - 0x438a0]
mov dword [ebp - 0x438c0], ecx
jmp 0x4365dd
lea edx, [ebp - 0x438a4]
push edx
call fcn.0054aedf
push eax
lea ecx, [ebp - 0x43300]
call fcn.0043c520
push ecx
mov ecx, esp
mov dword [ebp - 0x438a8], esp
lea eax, [ebp - 0x43630]
push eax
call fcn.0043c520
lea ecx, [ebp - 0x438ac]
push ecx
lea ecx, [ebp - 0x43300]
call fcn.0043c2f0
push eax
lea ecx, [ebp - 0x4366c]
call fcn.0043c520
lea ecx, [ebp - 0x4366c]
call fcn.0043c540
mov dword [ebp - 0x43664], eax
mov dword [ebp - 0x43638], 0
lea edx, [ebp - 0x43394]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
push 2
push 0xe
lea eax, [ebp - 0x438b0]
push eax
lea ecx, [ebp - 0x43634]
call fcn.0054a65c
mov dword [ebp - 0x43f54], eax
mov ecx, dword [ebp - 0x43f54]
mov dword [ebp - 0x43f58], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x43f58]
push edx
lea ecx, [ebp - 0x43634]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x438b0]
call fcn.0054d328
lea ecx, [ebp - 0x43634]
call fcn.0043c4e0
push eax
call fcn.0053758e
add esp, 4
mov dword [ebp - 0x43638], eax
mov eax, dword [ebp - 0x43638]
imul eax, eax, 0x16d
cmp dword [ebp - 0x43664], eax
jg 0x436410
cmp dword [ebp - 0x43664], 0
jge 0x436501
mov ecx, dword [ebp - 0x43670]
mov dword [ecx + 0x110], 0
mov dword [ebp - 0x438b4], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov edx, dword [ebp - 0x438b4]
mov dword [ebp - 0x438c0], edx
jmp 0x4365dd
mov dword [ebp - 0x438b8], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43390]
call fcn.00401f71
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43700]
call fcn.00401f71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4362c]
call fcn.00401f71
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x43794]
call fcn.00401f71
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x437b0]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x432f4]
call fcn.0054d328
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0x4365c]
call fcn.0054d328
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x437a8]
call fcn.0043c2a0
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x43658]
call fcn.00552d2b
mov byte [ebp - 4], 0xfc
lea ecx, [ebp - 0x43394]
call fcn.0054d328
mov byte [ebp - 4], 0xfa
lea ecx, [ebp - 0x432f8]
call fcn.0054d328
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x43660]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x43634]
call fcn.0054d328
mov eax, dword [ebp - 0x438b8]
mov dword [ebp - 0x438c0], eax
cmp dword [ebp - 0x438c0], 0
je 0x436e51
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x328
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x436619
mov ecx, dword [ebp - 0x410a4]
add ecx, 1
mov dword [ebp - 0x410a4], ecx
mov edx, dword [ebp - 0x410a4]
cmp edx, dword [ebp - 0x10]
jge 0x436e4f
mov eax, dword [ebp - 0x410a4]
push eax
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x328
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aae7c
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410e8], eax
mov edx, dword [ebp - 0x410e8]
push edx
lea eax, [ebp - 0x41440]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x43f5c], eax
mov ecx, dword [ebp - 0x43f5c]
mov dword [ebp - 0x43f60], ecx
mov dword [ebp - 4], 0x111
mov edx, dword [ebp - 0x43f60]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41440]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41444], esp
lea eax, [ebp - 0x14]
push eax
call fcn.0054d095
mov dword [ebp - 0x43f64], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x43f68], eax
mov ecx, dword [ebp - 0x43f68]
mov dword [ebp - 0x410ac], ecx
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41448], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x43f6c], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x43f70], eax
cmp dword [ebp - 0x43f70], 0
je 0x436e4a
cmp dword [ebp - 0x30], 1
jne 0x436cae
push ecx
mov ecx, esp
mov dword [ebp - 0x4144c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x43f74], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x43f78], eax
cmp dword [ebp - 0x43f78], 0
je 0x436a0e
lea eax, [ebp - 0x20]
push eax
push 0x5aae80
lea ecx, [ebp - 0x24]
push ecx
push 0x5aae88
lea edx, [ebp - 0x28]
push edx
push 0x5aae90
lea eax, [ebp - 0x41450]
push eax
call fcn.0054d641
mov dword [ebp - 0x43f7c], eax
mov ecx, dword [ebp - 0x43f7c]
mov dword [ebp - 0x43f80], ecx
mov dword [ebp - 4], 0x112
mov edx, dword [ebp - 0x43f80]
push edx
lea eax, [ebp - 0x41454]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43f84], eax
mov ecx, dword [ebp - 0x43f84]
mov dword [ebp - 0x43f88], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x43f88]
push edx
lea eax, [ebp - 0x41458]
push eax
call fcn.0054d567
mov dword [ebp - 0x43f8c], eax
mov ecx, dword [ebp - 0x43f8c]
mov dword [ebp - 0x43f90], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x43f90]
push edx
lea eax, [ebp - 0x4145c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43f94], eax
mov ecx, dword [ebp - 0x43f94]
mov dword [ebp - 0x43f98], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x43f98]
push edx
lea eax, [ebp - 0x41460]
push eax
call fcn.0054d567
mov dword [ebp - 0x43f9c], eax
mov ecx, dword [ebp - 0x43f9c]
mov dword [ebp - 0x43fa0], ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x43fa0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x41460]
call fcn.0054d328
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x4145c]
call fcn.0054d328
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x41458]
call fcn.0054d328
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41454]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41450]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5aaeb0
lea eax, [ebp - 0x24]
push eax
push 0x5aaeb8
lea ecx, [ebp - 0x28]
push ecx
push 0x5aaec0
lea edx, [ebp - 0x41464]
push edx
call fcn.0054d641
mov dword [ebp - 0x43fa4], eax
mov eax, dword [ebp - 0x43fa4]
mov dword [ebp - 0x43fa8], eax
mov dword [ebp - 4], 0x117
mov ecx, dword [ebp - 0x43fa8]
push ecx
lea edx, [ebp - 0x41468]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x43fac], eax
mov eax, dword [ebp - 0x43fac]
mov dword [ebp - 0x43fb0], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x43fb0]
push ecx
lea edx, [ebp - 0x4146c]
push edx
call fcn.0054d567
mov dword [ebp - 0x43fb4], eax
mov eax, dword [ebp - 0x43fb4]
mov dword [ebp - 0x43fb8], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x43fb8]
push ecx
lea edx, [ebp - 0x41470]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x43fbc], eax
mov eax, dword [ebp - 0x43fbc]
mov dword [ebp - 0x43fc0], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x43fc0]
push ecx
lea edx, [ebp - 0x41474]
push edx
call fcn.0054d567
mov dword [ebp - 0x43fc4], eax
mov eax, dword [ebp - 0x43fc4]
mov dword [ebp - 0x43fc8], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x43fc8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x41474]
call fcn.0054d328
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x41470]
call fcn.0054d328
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4146c]
call fcn.0054d328
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x41468]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41464]
call fcn.0054d328
jmp 0x436ca9
lea ecx, [ebp - 0x20]
push ecx
push 0x5aaee0
lea edx, [ebp - 0x24]
push edx
push 0x5aaee8
lea eax, [ebp - 0x28]
push eax
push 0x5aaef0
lea ecx, [ebp - 0x41478]
push ecx
call fcn.0054d641
mov dword [ebp - 0x43fcc], eax
mov edx, dword [ebp - 0x43fcc]
mov dword [ebp - 0x43fd0], edx
mov dword [ebp - 4], 0x11c
mov eax, dword [ebp - 0x43fd0]
push eax
lea ecx, [ebp - 0x4147c]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43fd4], eax
mov edx, dword [ebp - 0x43fd4]
mov dword [ebp - 0x43fd8], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x43fd8]
push eax
lea ecx, [ebp - 0x41480]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43fdc], eax
mov edx, dword [ebp - 0x43fdc]
mov dword [ebp - 0x43fe0], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x43fe0]
push eax
lea ecx, [ebp - 0x41484]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x43fe4], eax
mov edx, dword [ebp - 0x43fe4]
mov dword [ebp - 0x43fe8], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x43fe8]
push eax
lea ecx, [ebp - 0x41488]
push ecx
call fcn.0054d567
mov dword [ebp - 0x43fec], eax
mov edx, dword [ebp - 0x43fec]
mov dword [ebp - 0x43ff0], edx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x43ff0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x41488]
call fcn.0054d328
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x41484]
call fcn.0054d328
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x41480]
call fcn.0054d328
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x4147c]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41478]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5aaf10
lea ecx, [ebp - 0x24]
push ecx
push 0x5aaf18
lea edx, [ebp - 0x28]
push edx
push 0x5aaf20
lea eax, [ebp - 0x4148c]
push eax
call fcn.0054d641
mov dword [ebp - 0x43ff4], eax
mov ecx, dword [ebp - 0x43ff4]
mov dword [ebp - 0x43ff8], ecx
mov dword [ebp - 4], 0x121
mov edx, dword [ebp - 0x43ff8]
push edx
lea eax, [ebp - 0x41490]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x43ffc], eax
mov ecx, dword [ebp - 0x43ffc]
mov dword [ebp - 0x44000], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x44000]
push edx
lea eax, [ebp - 0x41494]
push eax
call fcn.0054d567
mov dword [ebp - 0x44004], eax
mov ecx, dword [ebp - 0x44004]
mov dword [ebp - 0x44008], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x44008]
push edx
lea eax, [ebp - 0x41498]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4400c], eax
mov ecx, dword [ebp - 0x4400c]
mov dword [ebp - 0x44010], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x44010]
push edx
lea eax, [ebp - 0x4149c]
push eax
call fcn.0054d567
mov dword [ebp - 0x44014], eax
mov ecx, dword [ebp - 0x44014]
mov dword [ebp - 0x44018], ecx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x44018]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x4149c]
call fcn.0054d328
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x41498]
call fcn.0054d328
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x41494]
call fcn.0054d328
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x41490]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4148c]
call fcn.0054d328
jmp 0x436e4a
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410ec], eax
cmp dword [ebp - 0x410ec], 0
jne 0x436d93
lea eax, [ebp - 0x28]
push eax
push 0x5aaf44
lea ecx, [ebp - 0x414a0]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4401c], eax
mov edx, dword [ebp - 0x4401c]
mov dword [ebp - 0x44020], edx
mov dword [ebp - 4], 0x126
mov ecx, dword [ebp - 0x44020]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414a0]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aaf64
lea ecx, [ebp - 0x414a4]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44024], eax
mov edx, dword [ebp - 0x44024]
mov dword [ebp - 0x44028], edx
mov dword [ebp - 4], 0x127
mov ecx, dword [ebp - 0x44028]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414a4]
call fcn.0054d328
jmp 0x436e4a
lea eax, [ebp - 0x28]
push eax
push 0x5aaf84
lea ecx, [ebp - 0x414a8]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4402c], eax
mov edx, dword [ebp - 0x4402c]
mov dword [ebp - 0x44030], edx
mov dword [ebp - 4], 0x128
mov ecx, dword [ebp - 0x44030]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414a8]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5aafa4
lea ecx, [ebp - 0x414ac]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44034], eax
mov edx, dword [ebp - 0x44034]
mov dword [ebp - 0x44038], edx
mov dword [ebp - 4], 0x129
mov ecx, dword [ebp - 0x44038]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414ac]
call fcn.0054d328
jmp 0x43660a
jmp 0x436e62
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x328
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
je 0x4376dc
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3dc
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x436ea4
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x4376da
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3dc
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5aafc8
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410f0], eax
mov ecx, dword [ebp - 0x410f0]
push ecx
lea edx, [ebp - 0x414b0]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x4403c], eax
mov eax, dword [ebp - 0x4403c]
mov dword [ebp - 0x44040], eax
mov dword [ebp - 4], 0x12a
mov ecx, dword [ebp - 0x44040]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414b0]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x414b4], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x44044], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x44048], eax
mov eax, dword [ebp - 0x44048]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x414b8], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x4404c], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x44050], eax
cmp dword [ebp - 0x44050], 0
je 0x4376d5
cmp dword [ebp - 0x30], 1
jne 0x437539
push ecx
mov ecx, esp
mov dword [ebp - 0x414bc], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x44054], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x44058], eax
cmp dword [ebp - 0x44058], 0
je 0x437299
lea eax, [ebp - 0x20]
push eax
push 0x5aafcc
lea ecx, [ebp - 0x24]
push ecx
push 0x5aafd4
lea edx, [ebp - 0x28]
push edx
push 0x5aafdc
lea eax, [ebp - 0x414c0]
push eax
call fcn.0054d641
mov dword [ebp - 0x4405c], eax
mov ecx, dword [ebp - 0x4405c]
mov dword [ebp - 0x44060], ecx
mov dword [ebp - 4], 0x12b
mov edx, dword [ebp - 0x44060]
push edx
lea eax, [ebp - 0x414c4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44064], eax
mov ecx, dword [ebp - 0x44064]
mov dword [ebp - 0x44068], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x44068]
push edx
lea eax, [ebp - 0x414c8]
push eax
call fcn.0054d567
mov dword [ebp - 0x4406c], eax
mov ecx, dword [ebp - 0x4406c]
mov dword [ebp - 0x44070], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x44070]
push edx
lea eax, [ebp - 0x414cc]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44074], eax
mov ecx, dword [ebp - 0x44074]
mov dword [ebp - 0x44078], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x44078]
push edx
lea eax, [ebp - 0x414d0]
push eax
call fcn.0054d567
mov dword [ebp - 0x4407c], eax
mov ecx, dword [ebp - 0x4407c]
mov dword [ebp - 0x44080], ecx
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x44080]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x414d0]
call fcn.0054d328
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x414cc]
call fcn.0054d328
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x414c8]
call fcn.0054d328
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x414c4]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414c0]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5aaffc
lea eax, [ebp - 0x24]
push eax
push 0x5ab004
lea ecx, [ebp - 0x28]
push ecx
push 0x5ab00c
lea edx, [ebp - 0x414d4]
push edx
call fcn.0054d641
mov dword [ebp - 0x44084], eax
mov eax, dword [ebp - 0x44084]
mov dword [ebp - 0x44088], eax
mov dword [ebp - 4], 0x130
mov ecx, dword [ebp - 0x44088]
push ecx
lea edx, [ebp - 0x414d8]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4408c], eax
mov eax, dword [ebp - 0x4408c]
mov dword [ebp - 0x44090], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x44090]
push ecx
lea edx, [ebp - 0x414dc]
push edx
call fcn.0054d567
mov dword [ebp - 0x44094], eax
mov eax, dword [ebp - 0x44094]
mov dword [ebp - 0x44098], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x44098]
push ecx
lea edx, [ebp - 0x414e0]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4409c], eax
mov eax, dword [ebp - 0x4409c]
mov dword [ebp - 0x440a0], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x440a0]
push ecx
lea edx, [ebp - 0x414e4]
push edx
call fcn.0054d567
mov dword [ebp - 0x440a4], eax
mov eax, dword [ebp - 0x440a4]
mov dword [ebp - 0x440a8], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x440a8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x414e4]
call fcn.0054d328
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x414e0]
call fcn.0054d328
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x414dc]
call fcn.0054d328
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x414d8]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414d4]
call fcn.0054d328
jmp 0x437534
lea ecx, [ebp - 0x20]
push ecx
push 0x5ab02c
lea edx, [ebp - 0x24]
push edx
push 0x5ab034
lea eax, [ebp - 0x28]
push eax
push 0x5ab03c
lea ecx, [ebp - 0x414e8]
push ecx
call fcn.0054d641
mov dword [ebp - 0x440ac], eax
mov edx, dword [ebp - 0x440ac]
mov dword [ebp - 0x440b0], edx
mov dword [ebp - 4], 0x135
mov eax, dword [ebp - 0x440b0]
push eax
lea ecx, [ebp - 0x414ec]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x440b4], eax
mov edx, dword [ebp - 0x440b4]
mov dword [ebp - 0x440b8], edx
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x440b8]
push eax
lea ecx, [ebp - 0x414f0]
push ecx
call fcn.0054d567
mov dword [ebp - 0x440bc], eax
mov edx, dword [ebp - 0x440bc]
mov dword [ebp - 0x440c0], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x440c0]
push eax
lea ecx, [ebp - 0x414f4]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x440c4], eax
mov edx, dword [ebp - 0x440c4]
mov dword [ebp - 0x440c8], edx
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x440c8]
push eax
lea ecx, [ebp - 0x414f8]
push ecx
call fcn.0054d567
mov dword [ebp - 0x440cc], eax
mov edx, dword [ebp - 0x440cc]
mov dword [ebp - 0x440d0], edx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x440d0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x414f8]
call fcn.0054d328
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x414f4]
call fcn.0054d328
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x414f0]
call fcn.0054d328
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x414ec]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414e8]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5ab05c
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab064
lea edx, [ebp - 0x28]
push edx
push 0x5ab06c
lea eax, [ebp - 0x414fc]
push eax
call fcn.0054d641
mov dword [ebp - 0x440d4], eax
mov ecx, dword [ebp - 0x440d4]
mov dword [ebp - 0x440d8], ecx
mov dword [ebp - 4], 0x13a
mov edx, dword [ebp - 0x440d8]
push edx
lea eax, [ebp - 0x41500]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x440dc], eax
mov ecx, dword [ebp - 0x440dc]
mov dword [ebp - 0x440e0], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x440e0]
push edx
lea eax, [ebp - 0x41504]
push eax
call fcn.0054d567
mov dword [ebp - 0x440e4], eax
mov ecx, dword [ebp - 0x440e4]
mov dword [ebp - 0x440e8], ecx
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x440e8]
push edx
lea eax, [ebp - 0x41508]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x440ec], eax
mov ecx, dword [ebp - 0x440ec]
mov dword [ebp - 0x440f0], ecx
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x440f0]
push edx
lea eax, [ebp - 0x4150c]
push eax
call fcn.0054d567
mov dword [ebp - 0x440f4], eax
mov ecx, dword [ebp - 0x440f4]
mov dword [ebp - 0x440f8], ecx
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x440f8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x4150c]
call fcn.0054d328
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x41508]
call fcn.0054d328
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x41504]
call fcn.0054d328
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x41500]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x414fc]
call fcn.0054d328
jmp 0x4376d5
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410f4], eax
cmp dword [ebp - 0x410f4], 0
jne 0x43761e
lea eax, [ebp - 0x28]
push eax
push 0x5ab090
lea ecx, [ebp - 0x41510]
push ecx
call fcn.0054d641
mov dword [ebp - 0x440fc], eax
mov edx, dword [ebp - 0x440fc]
mov dword [ebp - 0x44100], edx
mov dword [ebp - 4], 0x13f
mov ecx, dword [ebp - 0x44100]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41510]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab0b0
lea ecx, [ebp - 0x41514]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44104], eax
mov edx, dword [ebp - 0x44104]
mov dword [ebp - 0x44108], edx
mov dword [ebp - 4], 0x140
mov ecx, dword [ebp - 0x44108]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41514]
call fcn.0054d328
jmp 0x4376d5
lea eax, [ebp - 0x28]
push eax
push 0x5ab0d0
lea ecx, [ebp - 0x41518]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4410c], eax
mov edx, dword [ebp - 0x4410c]
mov dword [ebp - 0x44110], edx
mov dword [ebp - 4], 0x141
mov ecx, dword [ebp - 0x44110]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41518]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab0f0
lea ecx, [ebp - 0x4151c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44114], eax
mov edx, dword [ebp - 0x44114]
mov dword [ebp - 0x44118], edx
mov dword [ebp - 4], 0x142
mov ecx, dword [ebp - 0x44118]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4151c]
call fcn.0054d328
jmp 0x436e95
jmp 0x4376ed
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3dc
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
jne 0x43770f
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
jne 0x437f76
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3b4
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x43773e
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x437f74
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3b4
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5ab114
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x410f8], eax
mov ecx, dword [ebp - 0x410f8]
push ecx
lea edx, [ebp - 0x41520]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x4411c], eax
mov eax, dword [ebp - 0x4411c]
mov dword [ebp - 0x44120], eax
mov dword [ebp - 4], 0x143
mov ecx, dword [ebp - 0x44120]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41520]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41524], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x44124], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x44128], eax
mov eax, dword [ebp - 0x44128]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41528], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x4412c], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x44130], eax
cmp dword [ebp - 0x44130], 0
je 0x437f6f
cmp dword [ebp - 0x30], 1
jne 0x437dd3
push ecx
mov ecx, esp
mov dword [ebp - 0x4152c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x44134], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x44138], eax
cmp dword [ebp - 0x44138], 0
je 0x437b33
lea eax, [ebp - 0x20]
push eax
push 0x5ab118
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab120
lea edx, [ebp - 0x28]
push edx
push 0x5ab128
lea eax, [ebp - 0x41530]
push eax
call fcn.0054d641
mov dword [ebp - 0x4413c], eax
mov ecx, dword [ebp - 0x4413c]
mov dword [ebp - 0x44140], ecx
mov dword [ebp - 4], 0x144
mov edx, dword [ebp - 0x44140]
push edx
lea eax, [ebp - 0x41534]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44144], eax
mov ecx, dword [ebp - 0x44144]
mov dword [ebp - 0x44148], ecx
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x44148]
push edx
lea eax, [ebp - 0x41538]
push eax
call fcn.0054d567
mov dword [ebp - 0x4414c], eax
mov ecx, dword [ebp - 0x4414c]
mov dword [ebp - 0x44150], ecx
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x44150]
push edx
lea eax, [ebp - 0x4153c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44154], eax
mov ecx, dword [ebp - 0x44154]
mov dword [ebp - 0x44158], ecx
mov byte [ebp - 4], 0x47
mov edx, dword [ebp - 0x44158]
push edx
lea eax, [ebp - 0x41540]
push eax
call fcn.0054d567
mov dword [ebp - 0x4415c], eax
mov ecx, dword [ebp - 0x4415c]
mov dword [ebp - 0x44160], ecx
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x44160]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x41540]
call fcn.0054d328
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x4153c]
call fcn.0054d328
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x41538]
call fcn.0054d328
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x41534]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41530]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5ab148
lea eax, [ebp - 0x24]
push eax
push 0x5ab150
lea ecx, [ebp - 0x28]
push ecx
push 0x5ab158
lea edx, [ebp - 0x41544]
push edx
call fcn.0054d641
mov dword [ebp - 0x44164], eax
mov eax, dword [ebp - 0x44164]
mov dword [ebp - 0x44168], eax
mov dword [ebp - 4], 0x149
mov ecx, dword [ebp - 0x44168]
push ecx
lea edx, [ebp - 0x41548]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4416c], eax
mov eax, dword [ebp - 0x4416c]
mov dword [ebp - 0x44170], eax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x44170]
push ecx
lea edx, [ebp - 0x4154c]
push edx
call fcn.0054d567
mov dword [ebp - 0x44174], eax
mov eax, dword [ebp - 0x44174]
mov dword [ebp - 0x44178], eax
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x44178]
push ecx
lea edx, [ebp - 0x41550]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4417c], eax
mov eax, dword [ebp - 0x4417c]
mov dword [ebp - 0x44180], eax
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x44180]
push ecx
lea edx, [ebp - 0x41554]
push edx
call fcn.0054d567
mov dword [ebp - 0x44184], eax
mov eax, dword [ebp - 0x44184]
mov dword [ebp - 0x44188], eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x44188]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x41554]
call fcn.0054d328
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x41550]
call fcn.0054d328
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x4154c]
call fcn.0054d328
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x41548]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41544]
call fcn.0054d328
jmp 0x437dce
lea ecx, [ebp - 0x20]
push ecx
push 0x5ab178
lea edx, [ebp - 0x24]
push edx
push 0x5ab180
lea eax, [ebp - 0x28]
push eax
push 0x5ab188
lea ecx, [ebp - 0x41558]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4418c], eax
mov edx, dword [ebp - 0x4418c]
mov dword [ebp - 0x44190], edx
mov dword [ebp - 4], 0x14e
mov eax, dword [ebp - 0x44190]
push eax
lea ecx, [ebp - 0x4155c]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44194], eax
mov edx, dword [ebp - 0x44194]
mov dword [ebp - 0x44198], edx
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x44198]
push eax
lea ecx, [ebp - 0x41560]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4419c], eax
mov edx, dword [ebp - 0x4419c]
mov dword [ebp - 0x441a0], edx
mov byte [ebp - 4], 0x50
mov eax, dword [ebp - 0x441a0]
push eax
lea ecx, [ebp - 0x41564]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x441a4], eax
mov edx, dword [ebp - 0x441a4]
mov dword [ebp - 0x441a8], edx
mov byte [ebp - 4], 0x51
mov eax, dword [ebp - 0x441a8]
push eax
lea ecx, [ebp - 0x41568]
push ecx
call fcn.0054d567
mov dword [ebp - 0x441ac], eax
mov edx, dword [ebp - 0x441ac]
mov dword [ebp - 0x441b0], edx
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x441b0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x41568]
call fcn.0054d328
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x41564]
call fcn.0054d328
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x41560]
call fcn.0054d328
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4155c]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41558]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5ab1a8
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab1b0
lea edx, [ebp - 0x28]
push edx
push 0x5ab1b8
lea eax, [ebp - 0x4156c]
push eax
call fcn.0054d641
mov dword [ebp - 0x441b4], eax
mov ecx, dword [ebp - 0x441b4]
mov dword [ebp - 0x441b8], ecx
mov dword [ebp - 4], 0x153
mov edx, dword [ebp - 0x441b8]
push edx
lea eax, [ebp - 0x41570]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x441bc], eax
mov ecx, dword [ebp - 0x441bc]
mov dword [ebp - 0x441c0], ecx
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x441c0]
push edx
lea eax, [ebp - 0x41574]
push eax
call fcn.0054d567
mov dword [ebp - 0x441c4], eax
mov ecx, dword [ebp - 0x441c4]
mov dword [ebp - 0x441c8], ecx
mov byte [ebp - 4], 0x55
mov edx, dword [ebp - 0x441c8]
push edx
lea eax, [ebp - 0x41578]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x441cc], eax
mov ecx, dword [ebp - 0x441cc]
mov dword [ebp - 0x441d0], ecx
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x441d0]
push edx
lea eax, [ebp - 0x4157c]
push eax
call fcn.0054d567
mov dword [ebp - 0x441d4], eax
mov ecx, dword [ebp - 0x441d4]
mov dword [ebp - 0x441d8], ecx
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x441d8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x4157c]
call fcn.0054d328
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x41578]
call fcn.0054d328
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x41574]
call fcn.0054d328
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x41570]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4156c]
call fcn.0054d328
jmp 0x437f6f
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x410fc], eax
cmp dword [ebp - 0x410fc], 0
jne 0x437eb8
lea eax, [ebp - 0x28]
push eax
push 0x5ab1dc
lea ecx, [ebp - 0x41580]
push ecx
call fcn.0054d641
mov dword [ebp - 0x441dc], eax
mov edx, dword [ebp - 0x441dc]
mov dword [ebp - 0x441e0], edx
mov dword [ebp - 4], 0x158
mov ecx, dword [ebp - 0x441e0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41580]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab1fc
lea ecx, [ebp - 0x41584]
push ecx
call fcn.0054d641
mov dword [ebp - 0x441e4], eax
mov edx, dword [ebp - 0x441e4]
mov dword [ebp - 0x441e8], edx
mov dword [ebp - 4], 0x159
mov ecx, dword [ebp - 0x441e8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41584]
call fcn.0054d328
jmp 0x437f6f
lea eax, [ebp - 0x28]
push eax
push 0x5ab21c
lea ecx, [ebp - 0x41588]
push ecx
call fcn.0054d641
mov dword [ebp - 0x441ec], eax
mov edx, dword [ebp - 0x441ec]
mov dword [ebp - 0x441f0], edx
mov dword [ebp - 4], 0x15a
mov ecx, dword [ebp - 0x441f0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41588]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab23c
lea ecx, [ebp - 0x4158c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x441f4], eax
mov edx, dword [ebp - 0x441f4]
mov dword [ebp - 0x441f8], edx
mov dword [ebp - 4], 0x15b
mov ecx, dword [ebp - 0x441f8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4158c]
call fcn.0054d328
jmp 0x43772f
jmp 0x437f87
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3b4
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
je 0x438801
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3a0
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x437fc9
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x4387ff
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3a0
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5ab260
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x41100], eax
mov ecx, dword [ebp - 0x41100]
push ecx
lea edx, [ebp - 0x41590]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x441fc], eax
mov eax, dword [ebp - 0x441fc]
mov dword [ebp - 0x44200], eax
mov dword [ebp - 4], 0x15c
mov ecx, dword [ebp - 0x44200]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41590]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41594], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x44204], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x44208], eax
mov eax, dword [ebp - 0x44208]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41598], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x4420c], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x44210], eax
cmp dword [ebp - 0x44210], 0
je 0x4387fa
cmp dword [ebp - 0x30], 1
jne 0x43865e
push ecx
mov ecx, esp
mov dword [ebp - 0x4159c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x44214], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x44218], eax
cmp dword [ebp - 0x44218], 0
je 0x4383be
lea eax, [ebp - 0x20]
push eax
push 0x5ab264
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab26c
lea edx, [ebp - 0x28]
push edx
push 0x5ab274
lea eax, [ebp - 0x415a0]
push eax
call fcn.0054d641
mov dword [ebp - 0x4421c], eax
mov ecx, dword [ebp - 0x4421c]
mov dword [ebp - 0x44220], ecx
mov dword [ebp - 4], 0x15d
mov edx, dword [ebp - 0x44220]
push edx
lea eax, [ebp - 0x415a4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44224], eax
mov ecx, dword [ebp - 0x44224]
mov dword [ebp - 0x44228], ecx
mov byte [ebp - 4], 0x5e
mov edx, dword [ebp - 0x44228]
push edx
lea eax, [ebp - 0x415a8]
push eax
call fcn.0054d567
mov dword [ebp - 0x4422c], eax
mov ecx, dword [ebp - 0x4422c]
mov dword [ebp - 0x44230], ecx
mov byte [ebp - 4], 0x5f
mov edx, dword [ebp - 0x44230]
push edx
lea eax, [ebp - 0x415ac]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44234], eax
mov ecx, dword [ebp - 0x44234]
mov dword [ebp - 0x44238], ecx
mov byte [ebp - 4], 0x60
mov edx, dword [ebp - 0x44238]
push edx
lea eax, [ebp - 0x415b0]
push eax
call fcn.0054d567
mov dword [ebp - 0x4423c], eax
mov ecx, dword [ebp - 0x4423c]
mov dword [ebp - 0x44240], ecx
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x44240]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x415b0]
call fcn.0054d328
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x415ac]
call fcn.0054d328
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x415a8]
call fcn.0054d328
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x415a4]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415a0]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5ab294
lea eax, [ebp - 0x24]
push eax
push 0x5ab29c
lea ecx, [ebp - 0x28]
push ecx
push 0x5ab2a4
lea edx, [ebp - 0x415b4]
push edx
call fcn.0054d641
mov dword [ebp - 0x44244], eax
mov eax, dword [ebp - 0x44244]
mov dword [ebp - 0x44248], eax
mov dword [ebp - 4], 0x162
mov ecx, dword [ebp - 0x44248]
push ecx
lea edx, [ebp - 0x415b8]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4424c], eax
mov eax, dword [ebp - 0x4424c]
mov dword [ebp - 0x44250], eax
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x44250]
push ecx
lea edx, [ebp - 0x415bc]
push edx
call fcn.0054d567
mov dword [ebp - 0x44254], eax
mov eax, dword [ebp - 0x44254]
mov dword [ebp - 0x44258], eax
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x44258]
push ecx
lea edx, [ebp - 0x415c0]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4425c], eax
mov eax, dword [ebp - 0x4425c]
mov dword [ebp - 0x44260], eax
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x44260]
push ecx
lea edx, [ebp - 0x415c4]
push edx
call fcn.0054d567
mov dword [ebp - 0x44264], eax
mov eax, dword [ebp - 0x44264]
mov dword [ebp - 0x44268], eax
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x44268]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x415c4]
call fcn.0054d328
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x415c0]
call fcn.0054d328
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x415bc]
call fcn.0054d328
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x415b8]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415b4]
call fcn.0054d328
jmp 0x438659
lea ecx, [ebp - 0x20]
push ecx
push 0x5ab2c4
lea edx, [ebp - 0x24]
push edx
push 0x5ab2cc
lea eax, [ebp - 0x28]
push eax
push 0x5ab2d4
lea ecx, [ebp - 0x415c8]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4426c], eax
mov edx, dword [ebp - 0x4426c]
mov dword [ebp - 0x44270], edx
mov dword [ebp - 4], 0x167
mov eax, dword [ebp - 0x44270]
push eax
lea ecx, [ebp - 0x415cc]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44274], eax
mov edx, dword [ebp - 0x44274]
mov dword [ebp - 0x44278], edx
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0x44278]
push eax
lea ecx, [ebp - 0x415d0]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4427c], eax
mov edx, dword [ebp - 0x4427c]
mov dword [ebp - 0x44280], edx
mov byte [ebp - 4], 0x69
mov eax, dword [ebp - 0x44280]
push eax
lea ecx, [ebp - 0x415d4]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44284], eax
mov edx, dword [ebp - 0x44284]
mov dword [ebp - 0x44288], edx
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0x44288]
push eax
lea ecx, [ebp - 0x415d8]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4428c], eax
mov edx, dword [ebp - 0x4428c]
mov dword [ebp - 0x44290], edx
mov byte [ebp - 4], 0x6b
mov ecx, dword [ebp - 0x44290]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x415d8]
call fcn.0054d328
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x415d4]
call fcn.0054d328
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x415d0]
call fcn.0054d328
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x415cc]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415c8]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5ab2f4
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab2fc
lea edx, [ebp - 0x28]
push edx
push 0x5ab304
lea eax, [ebp - 0x415dc]
push eax
call fcn.0054d641
mov dword [ebp - 0x44294], eax
mov ecx, dword [ebp - 0x44294]
mov dword [ebp - 0x44298], ecx
mov dword [ebp - 4], 0x16c
mov edx, dword [ebp - 0x44298]
push edx
lea eax, [ebp - 0x415e0]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4429c], eax
mov ecx, dword [ebp - 0x4429c]
mov dword [ebp - 0x442a0], ecx
mov byte [ebp - 4], 0x6d
mov edx, dword [ebp - 0x442a0]
push edx
lea eax, [ebp - 0x415e4]
push eax
call fcn.0054d567
mov dword [ebp - 0x442a4], eax
mov ecx, dword [ebp - 0x442a4]
mov dword [ebp - 0x442a8], ecx
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0x442a8]
push edx
lea eax, [ebp - 0x415e8]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x442ac], eax
mov ecx, dword [ebp - 0x442ac]
mov dword [ebp - 0x442b0], ecx
mov byte [ebp - 4], 0x6f
mov edx, dword [ebp - 0x442b0]
push edx
lea eax, [ebp - 0x415ec]
push eax
call fcn.0054d567
mov dword [ebp - 0x442b4], eax
mov ecx, dword [ebp - 0x442b4]
mov dword [ebp - 0x442b8], ecx
mov byte [ebp - 4], 0x70
mov ecx, dword [ebp - 0x442b8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x415ec]
call fcn.0054d328
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x415e8]
call fcn.0054d328
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x415e4]
call fcn.0054d328
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x415e0]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415dc]
call fcn.0054d328
jmp 0x4387fa
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x41104], eax
cmp dword [ebp - 0x41104], 0
jne 0x438743
lea eax, [ebp - 0x28]
push eax
push 0x5ab328
lea ecx, [ebp - 0x415f0]
push ecx
call fcn.0054d641
mov dword [ebp - 0x442bc], eax
mov edx, dword [ebp - 0x442bc]
mov dword [ebp - 0x442c0], edx
mov dword [ebp - 4], 0x171
mov ecx, dword [ebp - 0x442c0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415f0]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab348
lea ecx, [ebp - 0x415f4]
push ecx
call fcn.0054d641
mov dword [ebp - 0x442c4], eax
mov edx, dword [ebp - 0x442c4]
mov dword [ebp - 0x442c8], edx
mov dword [ebp - 4], 0x172
mov ecx, dword [ebp - 0x442c8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415f4]
call fcn.0054d328
jmp 0x4387fa
lea eax, [ebp - 0x28]
push eax
push 0x5ab368
lea ecx, [ebp - 0x415f8]
push ecx
call fcn.0054d641
mov dword [ebp - 0x442cc], eax
mov edx, dword [ebp - 0x442cc]
mov dword [ebp - 0x442d0], edx
mov dword [ebp - 4], 0x173
mov ecx, dword [ebp - 0x442d0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415f8]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab388
lea ecx, [ebp - 0x415fc]
push ecx
call fcn.0054d641
mov dword [ebp - 0x442d4], eax
mov edx, dword [ebp - 0x442d4]
mov dword [ebp - 0x442d8], edx
mov dword [ebp - 4], 0x174
mov ecx, dword [ebp - 0x442d8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x415fc]
call fcn.0054d328
jmp 0x437fba
jmp 0x438812
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3a0
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
je 0x43908c
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3f0
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x438854
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x43908a
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3f0
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5ab3ac
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x41108], eax
mov ecx, dword [ebp - 0x41108]
push ecx
lea edx, [ebp - 0x41600]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x442dc], eax
mov eax, dword [ebp - 0x442dc]
mov dword [ebp - 0x442e0], eax
mov dword [ebp - 4], 0x175
mov ecx, dword [ebp - 0x442e0]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41600]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41604], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x442e4], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x442e8], eax
mov eax, dword [ebp - 0x442e8]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41608], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x442ec], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x442f0], eax
cmp dword [ebp - 0x442f0], 0
je 0x439085
cmp dword [ebp - 0x30], 1
jne 0x438ee9
push ecx
mov ecx, esp
mov dword [ebp - 0x4160c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x442f4], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x442f8], eax
cmp dword [ebp - 0x442f8], 0
je 0x438c49
lea eax, [ebp - 0x20]
push eax
push 0x5ab3b0
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab3b8
lea edx, [ebp - 0x28]
push edx
push 0x5ab3c0
lea eax, [ebp - 0x41610]
push eax
call fcn.0054d641
mov dword [ebp - 0x442fc], eax
mov ecx, dword [ebp - 0x442fc]
mov dword [ebp - 0x44300], ecx
mov dword [ebp - 4], 0x176
mov edx, dword [ebp - 0x44300]
push edx
lea eax, [ebp - 0x41614]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44304], eax
mov ecx, dword [ebp - 0x44304]
mov dword [ebp - 0x44308], ecx
mov byte [ebp - 4], 0x77
mov edx, dword [ebp - 0x44308]
push edx
lea eax, [ebp - 0x41618]
push eax
call fcn.0054d567
mov dword [ebp - 0x4430c], eax
mov ecx, dword [ebp - 0x4430c]
mov dword [ebp - 0x44310], ecx
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0x44310]
push edx
lea eax, [ebp - 0x4161c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x44314], eax
mov ecx, dword [ebp - 0x44314]
mov dword [ebp - 0x44318], ecx
mov byte [ebp - 4], 0x79
mov edx, dword [ebp - 0x44318]
push edx
lea eax, [ebp - 0x41620]
push eax
call fcn.0054d567
mov dword [ebp - 0x4431c], eax
mov ecx, dword [ebp - 0x4431c]
mov dword [ebp - 0x44320], ecx
mov byte [ebp - 4], 0x7a
mov ecx, dword [ebp - 0x44320]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x41620]
call fcn.0054d328
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x4161c]
call fcn.0054d328
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x41618]
call fcn.0054d328
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x41614]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41610]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5ab3e0
lea eax, [ebp - 0x24]
push eax
push 0x5ab3e8
lea ecx, [ebp - 0x28]
push ecx
push 0x5ab3f0
lea edx, [ebp - 0x41624]
push edx
call fcn.0054d641
mov dword [ebp - 0x44324], eax
mov eax, dword [ebp - 0x44324]
mov dword [ebp - 0x44328], eax
mov dword [ebp - 4], 0x17b
mov ecx, dword [ebp - 0x44328]
push ecx
lea edx, [ebp - 0x41628]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4432c], eax
mov eax, dword [ebp - 0x4432c]
mov dword [ebp - 0x44330], eax
mov byte [ebp - 4], 0x7c
mov ecx, dword [ebp - 0x44330]
push ecx
lea edx, [ebp - 0x4162c]
push edx
call fcn.0054d567
mov dword [ebp - 0x44334], eax
mov eax, dword [ebp - 0x44334]
mov dword [ebp - 0x44338], eax
mov byte [ebp - 4], 0x7d
mov ecx, dword [ebp - 0x44338]
push ecx
lea edx, [ebp - 0x41630]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4433c], eax
mov eax, dword [ebp - 0x4433c]
mov dword [ebp - 0x44340], eax
mov byte [ebp - 4], 0x7e
mov ecx, dword [ebp - 0x44340]
push ecx
lea edx, [ebp - 0x41634]
push edx
call fcn.0054d567
mov dword [ebp - 0x44344], eax
mov eax, dword [ebp - 0x44344]
mov dword [ebp - 0x44348], eax
mov byte [ebp - 4], 0x7f
mov ecx, dword [ebp - 0x44348]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x41634]
call fcn.0054d328
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x41630]
call fcn.0054d328
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x4162c]
call fcn.0054d328
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x41628]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41624]
call fcn.0054d328
jmp 0x438ee4
lea ecx, [ebp - 0x20]
push ecx
push 0x5ab410
lea edx, [ebp - 0x24]
push edx
push 0x5ab418
lea eax, [ebp - 0x28]
push eax
push 0x5ab420
lea ecx, [ebp - 0x41638]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4434c], eax
mov edx, dword [ebp - 0x4434c]
mov dword [ebp - 0x44350], edx
mov dword [ebp - 4], 0x180
mov eax, dword [ebp - 0x44350]
push eax
lea ecx, [ebp - 0x4163c]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44354], eax
mov edx, dword [ebp - 0x44354]
mov dword [ebp - 0x44358], edx
mov byte [ebp - 4], 0x81
mov eax, dword [ebp - 0x44358]
push eax
lea ecx, [ebp - 0x41640]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4435c], eax
mov edx, dword [ebp - 0x4435c]
mov dword [ebp - 0x44360], edx
mov byte [ebp - 4], 0x82
mov eax, dword [ebp - 0x44360]
push eax
lea ecx, [ebp - 0x41644]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44364], eax
mov edx, dword [ebp - 0x44364]
mov dword [ebp - 0x44368], edx
mov byte [ebp - 4], 0x83
mov eax, dword [ebp - 0x44368]
push eax
lea ecx, [ebp - 0x41648]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4436c], eax
mov edx, dword [ebp - 0x4436c]
mov dword [ebp - 0x44370], edx
mov byte [ebp - 4], 0x84
mov ecx, dword [ebp - 0x44370]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x41648]
call fcn.0054d328
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x41644]
call fcn.0054d328
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x41640]
call fcn.0054d328
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x4163c]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41638]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5ab440
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab448
lea edx, [ebp - 0x28]
push edx
push 0x5ab450
lea eax, [ebp - 0x4164c]
push eax
call fcn.0054d641
mov dword [ebp - 0x44374], eax
mov ecx, dword [ebp - 0x44374]
mov dword [ebp - 0x44378], ecx
mov dword [ebp - 4], 0x185
mov edx, dword [ebp - 0x44378]
push edx
lea eax, [ebp - 0x41650]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4437c], eax
mov ecx, dword [ebp - 0x4437c]
mov dword [ebp - 0x44380], ecx
mov byte [ebp - 4], 0x86
mov edx, dword [ebp - 0x44380]
push edx
lea eax, [ebp - 0x41654]
push eax
call fcn.0054d567
mov dword [ebp - 0x44384], eax
mov ecx, dword [ebp - 0x44384]
mov dword [ebp - 0x44388], ecx
mov byte [ebp - 4], 0x87
mov edx, dword [ebp - 0x44388]
push edx
lea eax, [ebp - 0x41658]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4438c], eax
mov ecx, dword [ebp - 0x4438c]
mov dword [ebp - 0x44390], ecx
mov byte [ebp - 4], 0x88
mov edx, dword [ebp - 0x44390]
push edx
lea eax, [ebp - 0x4165c]
push eax
call fcn.0054d567
mov dword [ebp - 0x44394], eax
mov ecx, dword [ebp - 0x44394]
mov dword [ebp - 0x44398], ecx
mov byte [ebp - 4], 0x89
mov ecx, dword [ebp - 0x44398]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x4165c]
call fcn.0054d328
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x41658]
call fcn.0054d328
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x41654]
call fcn.0054d328
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x41650]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4164c]
call fcn.0054d328
jmp 0x439085
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x4110c], eax
cmp dword [ebp - 0x4110c], 0
jne 0x438fce
lea eax, [ebp - 0x28]
push eax
push 0x5ab474
lea ecx, [ebp - 0x41660]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4439c], eax
mov edx, dword [ebp - 0x4439c]
mov dword [ebp - 0x443a0], edx
mov dword [ebp - 4], 0x18a
mov ecx, dword [ebp - 0x443a0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41660]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab494
lea ecx, [ebp - 0x41664]
push ecx
call fcn.0054d641
mov dword [ebp - 0x443a4], eax
mov edx, dword [ebp - 0x443a4]
mov dword [ebp - 0x443a8], edx
mov dword [ebp - 4], 0x18b
mov ecx, dword [ebp - 0x443a8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41664]
call fcn.0054d328
jmp 0x439085
lea eax, [ebp - 0x28]
push eax
push 0x5ab4b4
lea ecx, [ebp - 0x41668]
push ecx
call fcn.0054d641
mov dword [ebp - 0x443ac], eax
mov edx, dword [ebp - 0x443ac]
mov dword [ebp - 0x443b0], edx
mov dword [ebp - 4], 0x18c
mov ecx, dword [ebp - 0x443b0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41668]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab4d4
lea ecx, [ebp - 0x4166c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x443b4], eax
mov edx, dword [ebp - 0x443b4]
mov dword [ebp - 0x443b8], edx
mov dword [ebp - 4], 0x18d
mov ecx, dword [ebp - 0x443b8]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4166c]
call fcn.0054d328
jmp 0x438845
jmp 0x43909d
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3f0
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
je 0x439917
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x404
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x4390df
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x439915
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x404
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5ab4f8
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x41110], eax
mov ecx, dword [ebp - 0x41110]
push ecx
lea edx, [ebp - 0x41670]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x443bc], eax
mov eax, dword [ebp - 0x443bc]
mov dword [ebp - 0x443c0], eax
mov dword [ebp - 4], 0x18e
mov ecx, dword [ebp - 0x443c0]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41670]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41674], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x443c4], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x443c8], eax
mov eax, dword [ebp - 0x443c8]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41678], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x443cc], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x443d0], eax
cmp dword [ebp - 0x443d0], 0
je 0x439910
cmp dword [ebp - 0x30], 1
jne 0x439774
push ecx
mov ecx, esp
mov dword [ebp - 0x4167c], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x443d4], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x443d8], eax
cmp dword [ebp - 0x443d8], 0
je 0x4394d4
lea eax, [ebp - 0x20]
push eax
push 0x5ab4fc
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab504
lea edx, [ebp - 0x28]
push edx
push 0x5ab50c
lea eax, [ebp - 0x41680]
push eax
call fcn.0054d641
mov dword [ebp - 0x443dc], eax
mov ecx, dword [ebp - 0x443dc]
mov dword [ebp - 0x443e0], ecx
mov dword [ebp - 4], 0x18f
mov edx, dword [ebp - 0x443e0]
push edx
lea eax, [ebp - 0x41684]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x443e4], eax
mov ecx, dword [ebp - 0x443e4]
mov dword [ebp - 0x443e8], ecx
mov byte [ebp - 4], 0x90
mov edx, dword [ebp - 0x443e8]
push edx
lea eax, [ebp - 0x41688]
push eax
call fcn.0054d567
mov dword [ebp - 0x443ec], eax
mov ecx, dword [ebp - 0x443ec]
mov dword [ebp - 0x443f0], ecx
mov byte [ebp - 4], 0x91
mov edx, dword [ebp - 0x443f0]
push edx
lea eax, [ebp - 0x4168c]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x443f4], eax
mov ecx, dword [ebp - 0x443f4]
mov dword [ebp - 0x443f8], ecx
mov byte [ebp - 4], 0x92
mov edx, dword [ebp - 0x443f8]
push edx
lea eax, [ebp - 0x41690]
push eax
call fcn.0054d567
mov dword [ebp - 0x443fc], eax
mov ecx, dword [ebp - 0x443fc]
mov dword [ebp - 0x44400], ecx
mov byte [ebp - 4], 0x93
mov ecx, dword [ebp - 0x44400]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x41690]
call fcn.0054d328
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x4168c]
call fcn.0054d328
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x41688]
call fcn.0054d328
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x41684]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41680]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5ab52c
lea eax, [ebp - 0x24]
push eax
push 0x5ab534
lea ecx, [ebp - 0x28]
push ecx
push 0x5ab53c
lea edx, [ebp - 0x41694]
push edx
call fcn.0054d641
mov dword [ebp - 0x44404], eax
mov eax, dword [ebp - 0x44404]
mov dword [ebp - 0x44408], eax
mov dword [ebp - 4], 0x194
mov ecx, dword [ebp - 0x44408]
push ecx
lea edx, [ebp - 0x41698]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4440c], eax
mov eax, dword [ebp - 0x4440c]
mov dword [ebp - 0x44410], eax
mov byte [ebp - 4], 0x95
mov ecx, dword [ebp - 0x44410]
push ecx
lea edx, [ebp - 0x4169c]
push edx
call fcn.0054d567
mov dword [ebp - 0x44414], eax
mov eax, dword [ebp - 0x44414]
mov dword [ebp - 0x44418], eax
mov byte [ebp - 4], 0x96
mov ecx, dword [ebp - 0x44418]
push ecx
lea edx, [ebp - 0x416a0]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x4441c], eax
mov eax, dword [ebp - 0x4441c]
mov dword [ebp - 0x44420], eax
mov byte [ebp - 4], 0x97
mov ecx, dword [ebp - 0x44420]
push ecx
lea edx, [ebp - 0x416a4]
push edx
call fcn.0054d567
mov dword [ebp - 0x44424], eax
mov eax, dword [ebp - 0x44424]
mov dword [ebp - 0x44428], eax
mov byte [ebp - 4], 0x98
mov ecx, dword [ebp - 0x44428]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x416a4]
call fcn.0054d328
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x416a0]
call fcn.0054d328
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x4169c]
call fcn.0054d328
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x41698]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41694]
call fcn.0054d328
jmp 0x43976f
lea ecx, [ebp - 0x20]
push ecx
push 0x5ab55c
lea edx, [ebp - 0x24]
push edx
push 0x5ab564
lea eax, [ebp - 0x28]
push eax
push 0x5ab56c
lea ecx, [ebp - 0x416a8]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4442c], eax
mov edx, dword [ebp - 0x4442c]
mov dword [ebp - 0x44430], edx
mov dword [ebp - 4], 0x199
mov eax, dword [ebp - 0x44430]
push eax
lea ecx, [ebp - 0x416ac]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44434], eax
mov edx, dword [ebp - 0x44434]
mov dword [ebp - 0x44438], edx
mov byte [ebp - 4], 0x9a
mov eax, dword [ebp - 0x44438]
push eax
lea ecx, [ebp - 0x416b0]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4443c], eax
mov edx, dword [ebp - 0x4443c]
mov dword [ebp - 0x44440], edx
mov byte [ebp - 4], 0x9b
mov eax, dword [ebp - 0x44440]
push eax
lea ecx, [ebp - 0x416b4]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44444], eax
mov edx, dword [ebp - 0x44444]
mov dword [ebp - 0x44448], edx
mov byte [ebp - 4], 0x9c
mov eax, dword [ebp - 0x44448]
push eax
lea ecx, [ebp - 0x416b8]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4444c], eax
mov edx, dword [ebp - 0x4444c]
mov dword [ebp - 0x44450], edx
mov byte [ebp - 4], 0x9d
mov ecx, dword [ebp - 0x44450]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x416b8]
call fcn.0054d328
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x416b4]
call fcn.0054d328
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x416b0]
call fcn.0054d328
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x416ac]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416a8]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5ab58c
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab594
lea edx, [ebp - 0x28]
push edx
push 0x5ab59c
lea eax, [ebp - 0x416bc]
push eax
call fcn.0054d641
mov dword [ebp - 0x44454], eax
mov ecx, dword [ebp - 0x44454]
mov dword [ebp - 0x44458], ecx
mov dword [ebp - 4], 0x19e
mov edx, dword [ebp - 0x44458]
push edx
lea eax, [ebp - 0x416c0]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4445c], eax
mov ecx, dword [ebp - 0x4445c]
mov dword [ebp - 0x44460], ecx
mov byte [ebp - 4], 0x9f
mov edx, dword [ebp - 0x44460]
push edx
lea eax, [ebp - 0x416c4]
push eax
call fcn.0054d567
mov dword [ebp - 0x44464], eax
mov ecx, dword [ebp - 0x44464]
mov dword [ebp - 0x44468], ecx
mov byte [ebp - 4], 0xa0
mov edx, dword [ebp - 0x44468]
push edx
lea eax, [ebp - 0x416c8]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4446c], eax
mov ecx, dword [ebp - 0x4446c]
mov dword [ebp - 0x44470], ecx
mov byte [ebp - 4], 0xa1
mov edx, dword [ebp - 0x44470]
push edx
lea eax, [ebp - 0x416cc]
push eax
call fcn.0054d567
mov dword [ebp - 0x44474], eax
mov ecx, dword [ebp - 0x44474]
mov dword [ebp - 0x44478], ecx
mov byte [ebp - 4], 0xa2
mov ecx, dword [ebp - 0x44478]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x416cc]
call fcn.0054d328
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x416c8]
call fcn.0054d328
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x416c4]
call fcn.0054d328
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x416c0]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416bc]
call fcn.0054d328
jmp 0x439910
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x41114], eax
cmp dword [ebp - 0x41114], 0
jne 0x439859
lea eax, [ebp - 0x28]
push eax
push 0x5ab5c0
lea ecx, [ebp - 0x416d0]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4447c], eax
mov edx, dword [ebp - 0x4447c]
mov dword [ebp - 0x44480], edx
mov dword [ebp - 4], 0x1a3
mov ecx, dword [ebp - 0x44480]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416d0]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab5e0
lea ecx, [ebp - 0x416d4]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44484], eax
mov edx, dword [ebp - 0x44484]
mov dword [ebp - 0x44488], edx
mov dword [ebp - 4], 0x1a4
mov ecx, dword [ebp - 0x44488]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416d4]
call fcn.0054d328
jmp 0x439910
lea eax, [ebp - 0x28]
push eax
push 0x5ab600
lea ecx, [ebp - 0x416d8]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4448c], eax
mov edx, dword [ebp - 0x4448c]
mov dword [ebp - 0x44490], edx
mov dword [ebp - 4], 0x1a5
mov ecx, dword [ebp - 0x44490]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416d8]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push 0x5ab620
lea ecx, [ebp - 0x416dc]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44494], eax
mov edx, dword [ebp - 0x44494]
mov dword [ebp - 0x44498], edx
mov dword [ebp - 4], 0x1a6
mov ecx, dword [ebp - 0x44498]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416dc]
call fcn.0054d328
jmp 0x4390d0
jmp 0x439928
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x404
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
je 0x43a1a2
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x418
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x43996a
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x43a1a0
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x418
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
push 0x5ab644
lea ecx, [ebp - 0x14]
call fcn.0054a808
mov dword [ebp - 0x41118], eax
mov ecx, dword [ebp - 0x41118]
push ecx
lea edx, [ebp - 0x416e0]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054a76e
mov dword [ebp - 0x4449c], eax
mov eax, dword [ebp - 0x4449c]
mov dword [ebp - 0x444a0], eax
mov dword [ebp - 4], 0x1a7
mov ecx, dword [ebp - 0x444a0]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416e0]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x416e4], esp
lea edx, [ebp - 0x14]
push edx
call fcn.0054d095
mov dword [ebp - 0x444a4], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e7489
mov dword [ebp - 0x444a8], eax
mov eax, dword [ebp - 0x444a8]
mov dword [ebp - 0x410ac], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x416e8], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0054d095
mov dword [ebp - 0x444ac], eax
mov eax, dword [ebp - 0x410ac]
push eax
lea ecx, [ebp - 0x410a0]
call fcn.004e75e4
mov dword [ebp - 0x444b0], eax
cmp dword [ebp - 0x444b0], 0
je 0x43a19b
cmp dword [ebp - 0x30], 1
jne 0x439fff
push ecx
mov ecx, esp
mov dword [ebp - 0x416ec], esp
lea edx, [ebp - 0x24]
push edx
call fcn.0054d095
mov dword [ebp - 0x444b4], eax
lea ecx, [ebp - 0x410a0]
call fcn.004e990d
mov dword [ebp - 0x444b8], eax
cmp dword [ebp - 0x444b8], 0
je 0x439d5f
lea eax, [ebp - 0x20]
push eax
push 0x5ab648
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab650
lea edx, [ebp - 0x28]
push edx
push 0x5ab658
lea eax, [ebp - 0x416f0]
push eax
call fcn.0054d641
mov dword [ebp - 0x444bc], eax
mov ecx, dword [ebp - 0x444bc]
mov dword [ebp - 0x444c0], ecx
mov dword [ebp - 4], 0x1a8
mov edx, dword [ebp - 0x444c0]
push edx
lea eax, [ebp - 0x416f4]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x444c4], eax
mov ecx, dword [ebp - 0x444c4]
mov dword [ebp - 0x444c8], ecx
mov byte [ebp - 4], 0xa9
mov edx, dword [ebp - 0x444c8]
push edx
lea eax, [ebp - 0x416f8]
push eax
call fcn.0054d567
mov dword [ebp - 0x444cc], eax
mov ecx, dword [ebp - 0x444cc]
mov dword [ebp - 0x444d0], ecx
mov byte [ebp - 4], 0xaa
mov edx, dword [ebp - 0x444d0]
push edx
lea eax, [ebp - 0x416fc]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x444d4], eax
mov ecx, dword [ebp - 0x444d4]
mov dword [ebp - 0x444d8], ecx
mov byte [ebp - 4], 0xab
mov edx, dword [ebp - 0x444d8]
push edx
lea eax, [ebp - 0x41700]
push eax
call fcn.0054d567
mov dword [ebp - 0x444dc], eax
mov ecx, dword [ebp - 0x444dc]
mov dword [ebp - 0x444e0], ecx
mov byte [ebp - 4], 0xac
mov ecx, dword [ebp - 0x444e0]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x41700]
call fcn.0054d328
mov byte [ebp - 4], 0xaa
lea ecx, [ebp - 0x416fc]
call fcn.0054d328
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x416f8]
call fcn.0054d328
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0x416f4]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x416f0]
call fcn.0054d328
lea edx, [ebp - 0x20]
push edx
push 0x5ab678
lea eax, [ebp - 0x24]
push eax
push 0x5ab680
lea ecx, [ebp - 0x28]
push ecx
push 0x5ab688
lea edx, [ebp - 0x41704]
push edx
call fcn.0054d641
mov dword [ebp - 0x444e4], eax
mov eax, dword [ebp - 0x444e4]
mov dword [ebp - 0x444e8], eax
mov dword [ebp - 4], 0x1ad
mov ecx, dword [ebp - 0x444e8]
push ecx
lea edx, [ebp - 0x41708]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x444ec], eax
mov eax, dword [ebp - 0x444ec]
mov dword [ebp - 0x444f0], eax
mov byte [ebp - 4], 0xae
mov ecx, dword [ebp - 0x444f0]
push ecx
lea edx, [ebp - 0x4170c]
push edx
call fcn.0054d567
mov dword [ebp - 0x444f4], eax
mov eax, dword [ebp - 0x444f4]
mov dword [ebp - 0x444f8], eax
mov byte [ebp - 4], 0xaf
mov ecx, dword [ebp - 0x444f8]
push ecx
lea edx, [ebp - 0x41710]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x444fc], eax
mov eax, dword [ebp - 0x444fc]
mov dword [ebp - 0x44500], eax
mov byte [ebp - 4], 0xb0
mov ecx, dword [ebp - 0x44500]
push ecx
lea edx, [ebp - 0x41714]
push edx
call fcn.0054d567
mov dword [ebp - 0x44504], eax
mov eax, dword [ebp - 0x44504]
mov dword [ebp - 0x44508], eax
mov byte [ebp - 4], 0xb1
mov ecx, dword [ebp - 0x44508]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x41714]
call fcn.0054d328
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x41710]
call fcn.0054d328
mov byte [ebp - 4], 0xae
lea ecx, [ebp - 0x4170c]
call fcn.0054d328
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x41708]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41704]
call fcn.0054d328
jmp 0x439ffa
lea ecx, [ebp - 0x20]
push ecx
push 0x5ab6a8
lea edx, [ebp - 0x24]
push edx
push 0x5ab6b0
lea eax, [ebp - 0x28]
push eax
push 0x5ab6b8
lea ecx, [ebp - 0x41718]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4450c], eax
mov edx, dword [ebp - 0x4450c]
mov dword [ebp - 0x44510], edx
mov dword [ebp - 4], 0x1b2
mov eax, dword [ebp - 0x44510]
push eax
lea ecx, [ebp - 0x4171c]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44514], eax
mov edx, dword [ebp - 0x44514]
mov dword [ebp - 0x44518], edx
mov byte [ebp - 4], 0xb3
mov eax, dword [ebp - 0x44518]
push eax
lea ecx, [ebp - 0x41720]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4451c], eax
mov edx, dword [ebp - 0x4451c]
mov dword [ebp - 0x44520], edx
mov byte [ebp - 4], 0xb4
mov eax, dword [ebp - 0x44520]
push eax
lea ecx, [ebp - 0x41724]
push ecx
call fcn.0054d5cd
mov dword [ebp - 0x44524], eax
mov edx, dword [ebp - 0x44524]
mov dword [ebp - 0x44528], edx
mov byte [ebp - 4], 0xb5
mov eax, dword [ebp - 0x44528]
push eax
lea ecx, [ebp - 0x41728]
push ecx
call fcn.0054d567
mov dword [ebp - 0x4452c], eax
mov edx, dword [ebp - 0x4452c]
mov dword [ebp - 0x44530], edx
mov byte [ebp - 4], 0xb6
mov ecx, dword [ebp - 0x44530]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov byte [ebp - 4], 0xb5
lea ecx, [ebp - 0x41728]
call fcn.0054d328
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x41724]
call fcn.0054d328
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x41720]
call fcn.0054d328
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x4171c]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41718]
call fcn.0054d328
lea eax, [ebp - 0x20]
push eax
push 0x5ab6d8
lea ecx, [ebp - 0x24]
push ecx
push 0x5ab6e0
lea edx, [ebp - 0x28]
push edx
push 0x5ab6e8
lea eax, [ebp - 0x4172c]
push eax
call fcn.0054d641
mov dword [ebp - 0x44534], eax
mov ecx, dword [ebp - 0x44534]
mov dword [ebp - 0x44538], ecx
mov dword [ebp - 4], 0x1b7
mov edx, dword [ebp - 0x44538]
push edx
lea eax, [ebp - 0x41730]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4453c], eax
mov ecx, dword [ebp - 0x4453c]
mov dword [ebp - 0x44540], ecx
mov byte [ebp - 4], 0xb8
mov edx, dword [ebp - 0x44540]
push edx
lea eax, [ebp - 0x41734]
push eax
call fcn.0054d567
mov dword [ebp - 0x44544], eax
mov ecx, dword [ebp - 0x44544]
mov dword [ebp - 0x44548], ecx
mov byte [ebp - 4], 0xb9
mov edx, dword [ebp - 0x44548]
push edx
lea eax, [ebp - 0x41738]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4454c], eax
mov ecx, dword [ebp - 0x4454c]
mov dword [ebp - 0x44550], ecx
mov byte [ebp - 4], 0xba
mov edx, dword [ebp - 0x44550]
push edx
lea eax, [ebp - 0x4173c]
push eax
call fcn.0054d567
mov dword [ebp - 0x44554], eax
mov ecx, dword [ebp - 0x44554]
mov dword [ebp - 0x44558], ecx
mov byte [ebp - 4], 0xbb
mov ecx, dword [ebp - 0x44558]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov byte [ebp - 4], 0xba
lea ecx, [ebp - 0x4173c]
call fcn.0054d328
mov byte [ebp - 4], 0xb9
lea ecx, [ebp - 0x41738]
call fcn.0054d328
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x41734]
call fcn.0054d328
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x41730]
call fcn.0054d328
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4172c]
call fcn.0054d328
jmp 0x43a19b
lea ecx, [ebp - 0x2c]
call fcn.0043c4e0
push eax
mov edx, dword [ebp - 0x410ac]
push edx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov dword [ebp - 0x4111c], eax
cmp dword [ebp - 0x4111c], 0
jne 0x43a0e4
lea eax, [ebp - 0x28]
push eax
push 0x5ab70c
lea ecx, [ebp - 0x41740]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4455c], eax
mov edx, dword [ebp - 0x4455c]
mov dword [ebp - 0x44560], edx
mov dword [ebp - 4], 0x1bc
mov ecx, dword [ebp - 0x44560]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41740]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push str.Fixed_Success:
lea ecx, [ebp - 0x41744]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44564], eax
mov edx, dword [ebp - 0x44564]
mov dword [ebp - 0x44568], edx
mov dword [ebp - 4], 0x1bd
mov ecx, dword [ebp - 0x44568]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41744]
call fcn.0054d328
jmp 0x43a19b
lea eax, [ebp - 0x28]
push eax
push str.Fix_Unsuccess:
lea ecx, [ebp - 0x41748]
push ecx
call fcn.0054d641
mov dword [ebp - 0x4456c], eax
mov edx, dword [ebp - 0x4456c]
mov dword [ebp - 0x44570], edx
mov dword [ebp - 4], 0x1be
mov ecx, dword [ebp - 0x44570]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x98
call fcn.0043c580
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x41748]
call fcn.0054d328
lea eax, [ebp - 0x28]
push eax
push str.Fixed_Unsuccess:
lea ecx, [ebp - 0x4174c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x44574], eax
mov edx, dword [ebp - 0x44574]
mov dword [ebp - 0x44578], edx
mov dword [ebp - 4], 0x1bf
mov ecx, dword [ebp - 0x44578]
call fcn.0043c4e0
push eax
mov ecx, dword [0x5c2d68]
add ecx, 0x5c
call fcn.00551562
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x4174c]
call fcn.0054d328
jmp 0x43995b
jmp 0x43a1b3
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x418
call fcn.0043c650
mov ecx, dword [0x5c2d68]
call fcn.0043aee0
test eax, eax
je 0x43a2d4
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3c8
call fcn.0043c630
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x410a4], 0
jmp 0x43a1f5
mov eax, dword [ebp - 0x410a4]
add eax, 1
mov dword [ebp - 0x410a4], eax
mov ecx, dword [ebp - 0x410a4]
cmp ecx, dword [ebp - 0x10]
jge 0x43a2d2
mov edx, dword [ebp - 0x410a4]
push edx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3c8
call fcn.0043c900
push eax
lea ecx, [ebp - 0x30]
call fcn.0043c5b0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0054d46f
lea ecx, [ebp - 0x14]
call fcn.0043c4e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
jne 0x43a2cd
lea ecx, [ebp - 0x14]
call fcn.0043c4e0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x41124], eax
mov ecx, dword [ebp - 0x41124]
and ecx, 1
test ecx, ecx
je 0x43a296
mov edx, dword [ebp - 0x41124]
and edx, 0xfffffffe
mov dword [ebp - 0x41124], edx
mov eax, dword [ebp - 0x41124]
push eax
lea ecx, [ebp - 0x14]
call fcn.0043c4e0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov dword [ebp - 0x41128], eax
lea ecx, [ebp - 0x14]
call fcn.0043c4e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x41120], eax
cmp dword [ebp - 0x41120], 0
jne 0x43a2cd
push 4
push 0
lea ecx, [ebp - 0x14]
call fcn.0043c4e0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov dword [ebp - 0x4112c], eax
jmp 0x43a1e6
jmp 0x43a2e5
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x3c8
call fcn.0043c650
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.0043c3d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.0054d328
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410a0]
call fcn.004e71cb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret