Function at 0x45de3b
Capabilities:
Modify service
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x444
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x45dea7
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x324], eax
push dword [ebp - 0x27c]
push dword [ebp - 0x304]
push 0x4f52
push dword [ebp - 0x30c]
push dword [ebp - 0x324]
push 0x297f
push 0x7279
push 0
call fcn.0045f9f3
add esp, 0x20
jmp 0x45f9ee
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2ec], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x2fc], eax
push 3
lea ecx, [ebp - 0x320]
call fcn.0041257d
mov dword [ebp - 0x48], 0x39beb064
mov dword [ebp - 0x38], 0x55950707
mov dword [ebp - 0xac], 0
jmp 0x45df11
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x45df33
push dword [ebp - 0xac]
lea ecx, [ebp - 0x320]
call fcn.0041261e
mov dword [eax], 0xbbca6318
jmp 0x45df04
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x45df45
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 0x48], 2
jmp 0x45df55
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x45e05e
push 3
lea ecx, [ebp - 0x390]
call fcn.0041257d
mov dword [ebp - 0x74], 0
jmp 0x45df7c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x45df95
push dword [ebp - 0x74]
lea ecx, [ebp - 0x390]
call fcn.0041261e
or dword [eax], 0xffffffff
jmp 0x45df75
push 0
lea ecx, [ebp - 0x390]
call fcn.0041261e
mov dword [eax], 0xdb8faaae
mov dword [ebp - 0x38], 0xdb8faaae
mov dword [ebp - 0x38], 2
jmp 0x45dfbf
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x45e04e
mov dword [ebp - 0x50], 0x18e418a5
mov dword [ebp - 0x50], 2
jmp 0x45dfe0
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x45e049
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x94], 2
jmp 0x45e009
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x45e047
push dword [ebp - 0x50]
lea ecx, [ebp - 0x320]
call fcn.0041261e
push dword [ebp - 0x38]
lea ecx, [ebp - 0x320]
call fcn.0041261e
mov esi, 0x9f3faa32
sub esi, dword [eax]
push dword [ebp - 0x48]
lea ecx, [ebp - 0x320]
call fcn.0041261e
mov dword [eax], esi
jmp 0x45dffc
jmp 0x45dfd9
jmp 0x45dfb8
lea ecx, [ebp - 0x390]
call fcn.00412619
jmp 0x45df4e
lea ecx, [ebp - 0x320]
call fcn.00412619
mov eax, dword [ebp - 0x32c]
movzx eax, byte [eax]
test eax, eax
je 0x45f101
push 2
lea ecx, [ebp - 0xe0]
call fcn.0041257d
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x7c], 0
jmp 0x45e09e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x45e0ba
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xe0]
call fcn.0041261e
mov dword [eax], 7
jmp 0x45e097
mov dword [ebp - 0x10], 1
jmp 0x45e0ca
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x45e296
mov dword [ebp - 0xbc], 0x8e2294bb
mov dword [ebp - 0x288], 0x89063530
mov dword [ebp - 0x98], 0
jmp 0x45e101
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x45e11d
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x424], 0x9d2e819d
jmp 0x45e0f4
cmp dword [ebp - 0x10], 0xffffffff
jl 0x45e12f
mov dword [ebp - 0x14c], 1
jmp 0x45e136
and dword [ebp - 0x14c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe0]
call fcn.0041261e
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
jg 0x45e15a
mov dword [ebp - 0x334], 1
jmp 0x45e161
and dword [ebp - 0x334], 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.0041261e
mov esi, eax
push 1
lea ecx, [ebp - 0xe0]
call fcn.0041261e
imul eax, dword [eax], 0xfbf6
cmp dword [esi], eax
jl 0x45e193
mov dword [ebp - 0x268], 1
jmp 0x45e19a
and dword [ebp - 0x268], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe0]
call fcn.0041261e
mov ecx, dword [ebp - 0x268]
cmp ecx, dword [eax]
jge 0x45e1be
mov dword [ebp - 0x2e4], 1
jmp 0x45e1c5
and dword [ebp - 0x2e4], 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.0041261e
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe0]
call fcn.0041261e
cmp dword [ebp - 0x10], 9
jbe 0x45e1f2
mov dword [ebp - 0x270], 1
jmp 0x45e1f9
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x278], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0x424], ecx
push 0
lea ecx, [ebp - 0xe0]
call fcn.0041261e
mov ecx, dword [ebp - 0x278]
imul ecx, dword [eax]
sub ecx, dword [ebp - 0x10]
je 0x45e253
cmp dword [ebp - 0xbc], 0
je 0x45e253
mov dword [ebp - 0x22c], 1
jmp 0x45e25a
and dword [ebp - 0x22c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe0]
call fcn.0041261e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x22c]
jle 0x45e27e
mov dword [ebp - 0xf0], 1
jmp 0x45e285
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x288], eax
jmp 0x45e0c3
lea ecx, [ebp - 0xe0]
call fcn.00412619
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x378], 0xfcc013ce
mov dword [ebp - 0x374], 0xfcc013ce
mov dword [ebp - 0x370], 0xfcc013ce
mov dword [ebp - 0x36c], 0xfcc013ce
lea ecx, [ebp - 0xb1]
call fcn.00401745
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x434]
call fcn.0041262d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd4]
call fcn.004125f3
mov dword [ebp - 0xc4], 0xfffffffa
mov dword [ebp - 0x2f8], 0xa133a5b7
mov dword [ebp - 0x84], 0
jmp 0x45e345
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x45e361
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x404], 0
jmp 0x45e338
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x28], 0
jmp 0x45e377
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 8
je 0x45e82b
mov dword [ebp - 0x24], 0x1591
mov dword [ebp - 0x8c], 0x6d5d64f6
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x4c], eax
je 0x45e3ba
mov dword [ebp - 0x234], 1
jmp 0x45e3c1
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 0xd19f
jg 0x45e3d9
mov dword [ebp - 0xf8], 1
jmp 0x45e3e0
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xfffffff9
jle 0x45e3f5
mov dword [ebp - 0x23c], 1
jmp 0x45e3fc
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x23c], eax
jne 0x45e413
mov dword [ebp - 0x100], 1
jmp 0x45e41a
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0x333e
jg 0x45e441
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
cmp dword [eax], 0
jne 0x45e441
and dword [ebp - 0x244], 0
jmp 0x45e44b
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x244]
jge 0x45e462
mov dword [ebp - 0x108], 1
jmp 0x45e469
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xdd61fb9a
jbe 0x45e490
mov dword [ebp - 0x24c], 1
jmp 0x45e497
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x24c], eax
jne 0x45e4ae
mov dword [ebp - 0x254], 1
jmp 0x45e4b5
and dword [ebp - 0x254], 0
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
mov ecx, dword [ebp - 0x254]
sub ecx, dword [eax]
je 0x45e4ea
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
cmp dword [eax], 0
je 0x45e4ea
mov dword [ebp - 0x1c8], 1
jmp 0x45e4f1
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1c8], eax
je 0x45e508
mov dword [ebp - 0x120], 1
jmp 0x45e50f
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x24]
jg 0x45e529
mov dword [ebp - 0x220], 1
jmp 0x45e530
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x220], eax
jl 0x45e547
mov dword [ebp - 0x290], 1
jmp 0x45e54e
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x404], 0xffffffff
jl 0x45e573
mov dword [ebp - 0x128], 1
jmp 0x45e57a
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 8
je 0x45e58f
mov dword [ebp - 0x1d0], 1
jmp 0x45e596
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x130], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x404], ecx
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
cmp dword [eax], 0
je 0x45e5e5
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
cmp dword [eax], 0
je 0x45e5e5
mov dword [ebp - 0x264], 1
jmp 0x45e5ec
and dword [ebp - 0x264], 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.0041261e
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [eax]
je 0x45e615
cmp dword [ebp - 0x24], 0
je 0x45e615
mov dword [ebp - 0x138], 1
jmp 0x45e61c
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x138]
jg 0x45e644
mov dword [ebp - 0x2f0], 0xb42b8ffd
cmp dword [ebp - 0x2f0], 0
je 0x45e63f
jmp 0x45e82b
jmp 0x45e826
mov dword [ebp - 0xc8], 1
push 4
lea ecx, [ebp - 0x39c]
call fcn.0041257d
mov dword [ebp - 0x310], 0xa5cd
mov dword [ebp - 0xa0], 0
jmp 0x45e67e
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x45e6a0
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x39c]
call fcn.0041261e
mov dword [eax], 1
jmp 0x45e671
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jne 0x45e6c3
mov dword [ebp - 0x1d8], 1
jmp 0x45e6ca
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1d8], eax
jge 0x45e6e7
cmp dword [ebp - 0x4c], 0
jne 0x45e6e7
and dword [ebp - 0x140], 0
jmp 0x45e6f1
mov dword [ebp - 0x140], 1
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
mov ecx, dword [ebp - 0x140]
add ecx, dword [eax]
cmp ecx, 0xccf75bae
jb 0x45e71a
mov dword [ebp - 0x228], 1
jmp 0x45e721
and dword [ebp - 0x228], 0
push 2
lea ecx, [ebp - 0xd4]
call fcn.0041261e
mov ecx, dword [ebp - 0x228]
cmp ecx, dword [eax]
jg 0x45e74a
cmp dword [ebp - 0xc4], 0
jne 0x45e74a
and dword [ebp - 0x148], 0
jmp 0x45e754
mov dword [ebp - 0x148], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x148], eax
jle 0x45e775
mov dword [ebp - 0x1e0], 1
jmp 0x45e77c
and dword [ebp - 0x1e0], 0
imul esi, dword [ebp - 0x1e0], 0xffffffff
push 2
lea ecx, [ebp - 0x39c]
call fcn.0041261e
mov dword [eax], esi
cmp dword [ebp - 0x8c], 0
cmp dword [ebp - 0x298], 0x2f7f1c74
je 0x45e7b1
mov dword [ebp - 0x150], 1
jmp 0x45e7b8
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x310]
add eax, dword [ebp - 0x150]
je 0x45e7d7
or eax, 0xffffffff
je 0x45e7d7
mov dword [ebp - 0x2a0], 1
jmp 0x45e7de
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x3b0], eax
mov esi, dword [ebp - 0xc4]
push 0
lea ecx, [ebp - 0xd4]
call fcn.0041261e
mov eax, dword [eax]
neg eax
imul eax, eax, 0x226f
sub esi, eax
mov dword [ebp - 0x2f8], esi
lea ecx, [ebp - 0x39c]
call fcn.00412619
jmp 0x45e370
lea ecx, [ebp - 0xd4]
call fcn.00412619
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x68], 0x9e57ad95
mov dword [ebp - 0xa8], 0
jmp 0x45e862
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x45e87e
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x250], 0xc204e2db
jmp 0x45e855
mov dword [ebp - 0x68], 0
jmp 0x45e88e
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x45e8a8
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x45e8a6
call dword [sym.imp.USER32.dll_CreateMenu]
jmp 0x45e887
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp + ecx - 0x250], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0xc], 0x6de713a
mov dword [ebp - 0x2b0], 0xffffffff
mov dword [ebp - 0xb0], 0
jmp 0x45e8f8
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x45e914
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x260], 0xffffffff
jmp 0x45e8eb
mov dword [ebp - 0xc], 0
jmp 0x45e924
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jg 0x45e982
mov dword [ebp - 0x9c], 0x83111738
mov dword [ebp - 0x9c], 1
jmp 0x45e94d
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x45e980
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x260]
mov dword [ebp + ecx*4 - 0x260], eax
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x45e97e
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x45e940
jmp 0x45e91d
xor eax, eax
inc eax
je 0x45ea02
cmp dword [ebp - 0xc], 0
jne 0x45e99f
mov eax, 0xc28cae2f
test eax, eax
jne 0x45e99f
and dword [ebp - 0x158], 0
jmp 0x45e9a9
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x158], eax
je 0x45e9c6
cmp dword [ebp - 0xc], 0
je 0x45e9c6
mov dword [ebp - 0x1e8], 1
jmp 0x45e9cd
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
cmp eax, dword [ebp - 0x1e8]
jg 0x45e9f0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x260], 0
cmp dword [ebp - 0xc], 0
je 0x45ea02
mov dword [ebp - 0x160], 1
jmp 0x45ea09
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
sub eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x2b0]
imul ecx, dword [ebp - 0x160]
add eax, ecx
cmp eax, 0x4f78
jl 0x45ea3b
mov dword [ebp - 0x230], 1
jmp 0x45ea42
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x230], eax
je 0x45ea59
mov dword [ebp - 0x168], 1
jmp 0x45ea60
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0xfffffff7
je 0x45ea75
mov dword [ebp - 0x1f0], 1
jmp 0x45ea7c
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x44], 0x102071b1
mov dword [ebp - 0x14], 0xffffffff
cmp dword [ebp - 0x44], 0
je 0x45eaa5
mov dword [ebp - 0x14], 0
jmp 0x45ebac
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x350], 0x3b2b74c3
mov dword [ebp - 0x34c], 0x3b2b74c3
mov dword [ebp - 0x348], 0x3b2b74c3
mov dword [ebp - 0x344], 0x3b2b74c3
mov dword [ebp - 0x44], 0x1c
jmp 0x45eae4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x39
jl 0x45eb69
mov dword [ebp - 0x14], 0
jmp 0x45eafa
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff8
jg 0x45eb3e
mov dword [ebp - 0x6c], 0x61bab593
mov dword [ebp - 0x6c], 0
jmp 0x45eb17
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe8
jg 0x45eb3c
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x45eb33
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
jmp 0x45eb10
jmp 0x45eaf3
mov dword [ebp - 0x14], 0
jmp 0x45eb4e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x45eb64
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x350], 0x552bf338
jmp 0x45eb47
jmp 0x45eadd
mov dword [ebp - 0x3c], 0xffffffe2
jmp 0x45eb79
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x14
jg 0x45ebac
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x350], 0
je 0x45eb91
jmp 0x45ebac
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x45ebaa
push 0x81c
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
jmp 0x45eb72
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0xb8], 0xffffffff
and dword [ebp - 0x364], 0
and dword [ebp - 0x360], 0
and dword [ebp - 0x35c], 0
and dword [ebp - 0x358], 0
lea ecx, [ebp - 0xbd]
call fcn.00401745
push eax
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x414]
call fcn.0041262d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x384]
call fcn.004125f3
mov dword [ebp - 0x70], 0x7f28
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x258], 0x1f997ec5
mov dword [ebp - 0x1a8], 0x81b27067
mov dword [ebp - 0x2c0], 0x50eb6ba8
mov dword [ebp - 8], 0
jmp 0x45ec52
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x45ec65
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x64], 0xd41e5596
jmp 0x45ec4b
mov dword [ebp - 8], 0
jmp 0x45ec75
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x45ec8b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3cc], 0xffffffff
jmp 0x45ec6e
mov dword [ebp - 8], 0
jmp 0x45ec9b
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x45ecb1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3a8], 1
jmp 0x45ec94
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xb8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
je 0x45ee31
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x64]
cmp eax, 0xfffffffb
jne 0x45ecf5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x170], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x170]
mov dword [ebp + eax - 0x3cc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x170], eax
jle 0x45ed36
mov dword [ebp - 0x274], 1
jmp 0x45ed3d
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x274], eax
jge 0x45ed5b
mov dword [ebp - 0x2b8], 1
jmp 0x45ed62
and dword [ebp - 0x2b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x330], eax
push 3
lea ecx, [ebp - 0x384]
call fcn.0041261e
mov ecx, dword [ebp - 0x330]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
jge 0x45eda7
mov dword [ebp - 0x178], 1
jmp 0x45edae
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xf57b17b4
jb 0x45edc6
mov dword [ebp - 0x1f8], 1
jmp 0x45edcd
and dword [ebp - 0x1f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x1f8], eax
jge 0x45edeb
mov dword [ebp - 0x180], 1
jmp 0x45edf2
and dword [ebp - 0x180], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a8]
cmp dword [ebp - 0x180], eax
jle 0x45ee13
mov dword [ebp - 0x238], 1
jmp 0x45ee1a
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x238], eax
jl 0x45ee31
mov dword [ebp - 0x188], 1
jmp 0x45ee38
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 1
jne 0x45ee4d
mov dword [ebp - 0x200], 1
jmp 0x45ee54
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x3bc], eax
push 3
lea ecx, [ebp - 0x384]
call fcn.0041261e
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3a8]
cmp dword [eax], ecx
jl 0x45eeb4
mov eax, 0xda3bb1d4
test eax, eax
je 0x45eeb4
mov dword [ebp - 0x198], 1
jmp 0x45eebb
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0xfffffff9
jl 0x45eed6
mov eax, 0xd01cd43a
test eax, eax
jne 0x45eed6
and dword [ebp - 0x208], 0
jmp 0x45eee0
mov dword [ebp - 0x208], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x208], eax
je 0x45eefe
mov dword [ebp - 0x1a0], 1
jmp 0x45ef05
and dword [ebp - 0x1a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a0]
sub ecx, dword [ebp + eax - 0x64]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x64]
jge 0x45ef2d
mov dword [ebp - 0x240], 1
jmp 0x45ef34
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x1a8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp eax, dword [ebp - 0x1a8]
jl 0x45ef5d
mov dword [ebp - 0x210], 1
jmp 0x45ef64
and dword [ebp - 0x210], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x210], eax
jle 0x45ef81
mov dword [ebp - 0x1b0], 1
jmp 0x45ef88
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0
jae 0x45ef9d
mov dword [ebp - 0x26c], 1
jmp 0x45efa4
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
imul eax, dword [ebp - 0x26c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x3a8]
cmp eax, 8
jl 0x45efd3
mov dword [ebp - 0x1b8], 1
jmp 0x45efda
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2c0], eax
lea ecx, [ebp - 0x384]
call fcn.00412619
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x3c4], 9
mov dword [ebp - 0x3d0], 0x2971c1e
mov dword [ebp - 0x3d4], 0xffffffff
mov dword [ebp - 0x3d8], 0xffffffff
mov dword [ebp - 0x3e0], 0xffffffff
mov dword [ebp - 0x218], 0xf75d
mov dword [ebp - 0x18], 0
jmp 0x45f049
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x45f05f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3e8], 0
jmp 0x45f042
mov dword [ebp - 0x18], 0
jmp 0x45f06f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x45f085
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x444], 0xac54c975
jmp 0x45f068
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x45f0b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1cc8
push 0x7d9
push 0x6fc
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x328]
mov eax, dword [eax]
mov dword [ebp - 0x2e8], eax
push dword [ebp - 0x2d0]
lea eax, [ebp - 0x2e8]
push eax
mov ecx, dword [ebp - 0x2d8]
call fcn.004602c2
mov ecx, eax
call fcn.0046023e
jmp 0x45f9ee
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x80], 0x67e307b5
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x78], 0xffffffff
push 3
lea ecx, [ebp - 0x118]
call fcn.0041257d
mov dword [ebp - 0x19c], 0xfe831e34
mov dword [ebp - 0xa4], 0xeeff
mov dword [ebp - 0x1cc], 0x73439d6f
mov dword [ebp - 4], 0
jmp 0x45f160
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x45f173
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1c], 1
jmp 0x45f159
mov dword [ebp - 4], 0
jmp 0x45f183
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x45f196
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x54], 0x4dde9ab
jmp 0x45f17c
mov dword [ebp - 4], 0
jmp 0x45f1a6
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x45f1bf
push dword [ebp - 4]
lea ecx, [ebp - 0x118]
call fcn.0041261e
and dword [eax], 0
jmp 0x45f19f
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x2e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x2f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
mov eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x2f4]
jl 0x45f207
mov dword [ebp - 0x1c0], 1
jmp 0x45f20e
and dword [ebp - 0x1c0], 0
imul eax, dword [ebp - 0x1c0], 0xfbe5
cmp eax, 0x9968
jge 0x45f22b
mov dword [ebp - 0x10c], 1
jmp 0x45f232
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x80], 0
je 0x45f251
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x45f251
mov dword [ebp - 0x248], 1
jmp 0x45f258
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xcd9796a
jne 0x45f270
mov dword [ebp - 0x11c], 1
jmp 0x45f277
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x11c]
cmp eax, 0xfffb
ja 0x45f296
mov dword [ebp - 0x124], 1
jmp 0x45f29d
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x124], eax
jg 0x45f2bb
mov dword [ebp - 0x12c], 1
jmp 0x45f2c2
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0x1c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x78], eax
jg 0x45f2ed
mov dword [ebp - 0x134], 1
jmp 0x45f2f4
and dword [ebp - 0x134], 0
push 0
lea ecx, [ebp - 0x118]
call fcn.0041261e
mov eax, dword [eax]
add eax, dword [ebp - 0x134]
cmp eax, 0x4356e3f0
jle 0x45f31c
mov dword [ebp - 0x13c], 1
jmp 0x45f323
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x13c]
jle 0x45f33a
mov dword [ebp - 0x280], 1
jmp 0x45f341
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x78], 1
jl 0x45f353
mov dword [ebp - 0x144], 1
jmp 0x45f35a
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0xbfb41ce0
jbe 0x45f372
mov dword [ebp - 0xe4], 1
jmp 0x45f379
and dword [ebp - 0xe4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp eax, dword [ebp - 0xe4]
jle 0x45f397
mov dword [ebp - 0x154], 1
jmp 0x45f39e
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0xf7d6
je 0x45f3b6
mov dword [ebp - 0x15c], 1
jmp 0x45f3bd
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x15c], eax
jne 0x45f3d4
mov dword [ebp - 0x164], 1
jmp 0x45f3db
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x164], eax
jne 0x45f408
push 0
lea ecx, [ebp - 0x118]
call fcn.0041261e
cmp dword [eax], 0
jne 0x45f408
and dword [ebp - 0x16c], 0
jmp 0x45f412
mov dword [ebp - 0x16c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x16c], eax
jle 0x45f430
mov dword [ebp - 0x284], 1
jmp 0x45f437
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3f0], eax
push 0
lea ecx, [ebp - 0x118]
call fcn.0041261e
cmp dword [ebp - 0x19c], 0
je 0x45f61a
mov dword [ebp - 0x184], 0x33e235bd
mov dword [ebp - 0x1b4], 0xf9d9
mov dword [ebp - 0x1c4], 0x714a8a5a
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x40c], 4
mov esi, dword [ebp - 0x184]
push 0
lea ecx, [ebp - 0x118]
call fcn.0041261e
cmp esi, dword [eax]
jge 0x45f4af
mov dword [ebp - 0x174], 1
jmp 0x45f4b6
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0x211a
je 0x45f4ce
mov dword [ebp - 0x17c], 1
jmp 0x45f4d5
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x17c]
jne 0x45f4ec
mov dword [ebp - 0x18c], 1
jmp 0x45f4f3
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x18c], eax
jne 0x45f50d
mov dword [ebp - 0x194], 1
jmp 0x45f514
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0
jae 0x45f529
mov dword [ebp - 0x28c], 1
jmp 0x45f530
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x19c], eax
jg 0x45f55e
mov dword [ebp - 0x294], 1
jmp 0x45f565
and dword [ebp - 0x294], 0
push 0
lea ecx, [ebp - 0x118]
call fcn.0041261e
imul esi, dword [ebp - 0x1b4], 0
push 0
lea ecx, [ebp - 0x118]
call fcn.0041261e
cmp esi, dword [eax]
jg 0x45f59f
mov eax, 0xf0cd
test eax, eax
je 0x45f59f
mov dword [ebp - 0x1a4], 1
jmp 0x45f5a6
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp eax, dword [ebp - 0x1a4]
jge 0x45f5c4
mov dword [ebp - 0x1ac], 1
jmp 0x45f5cb
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0
je 0x45f5e9
cmp dword [ebp - 0x1b4], 0
je 0x45f5e9
mov dword [ebp - 0x1bc], 1
jmp 0x45f5f0
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
jmp 0x45f7a8
mov dword [ebp - 0x90], 0x7bd5
mov dword [ebp - 0x40], 0
push 2
lea ecx, [ebp - 0x340]
call fcn.0041257d
mov dword [ebp - 0x88], 0
jmp 0x45f651
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x45f673
push dword [ebp - 0x88]
lea ecx, [ebp - 0x340]
call fcn.0041261e
mov dword [eax], 0xfffffffa
jmp 0x45f644
cmp dword [ebp - 0x90], 0
je 0x45f691
cmp dword [ebp - 0x90], 0
je 0x45f691
mov dword [ebp - 0x1e4], 1
jmp 0x45f698
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x2a4], eax
jne 0x45f6b2
mov dword [ebp - 0x1d4], 1
jmp 0x45f6b9
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xfffffff9
jl 0x45f6ce
mov dword [ebp - 0x1dc], 1
jmp 0x45f6d5
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x1dc], eax
je 0x45f6ef
mov dword [ebp - 0x1f4], 1
jmp 0x45f6f6
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp + eax - 0x1c], ecx
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x1f4]
jge 0x45f732
mov dword [ebp - 0x1fc], 1
jmp 0x45f739
and dword [ebp - 0x1fc], 0
push 1
lea ecx, [ebp - 0x340]
call fcn.0041261e
mov ecx, dword [ebp - 0x1fc]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0
jmp 0x45f767
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 5
jle 0x45f79d
mov dword [ebp - 0x40], 0
jmp 0x45f780
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x45f79b
push 1
lea ecx, [ebp - 0x340]
call fcn.0041261e
mov dword [eax], 0x1f29c70a
jmp 0x45f779
jmp 0x45f75a
lea ecx, [ebp - 0x340]
call fcn.00412619
lea ecx, [ebp - 0x118]
call fcn.00412619
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x58], 0x39b6
mov dword [ebp - 0x204], 0x39e3cf95
mov dword [ebp - 0x2b4], 0x277ebd00
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x45f7f3
push 0x338
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
cmp dword [ebp - 0x58], 0
je 0x45f91a
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xe8], 0xc01e6e2b
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x204], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x204], eax
jle 0x45f845
cmp dword [ebp - 0xe8], 0
jne 0x45f845
and dword [ebp - 0x20c], 0
jmp 0x45f84f
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jne 0x45f875
mov dword [ebp - 0x214], 1
jmp 0x45f87c
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0x214]
test eax, eax
je 0x45f8a2
cmp dword [ebp - 0x2b4], 0
je 0x45f8a2
mov dword [ebp - 0x21c], 1
jmp 0x45f8a9
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0xde9a
jg 0x45f8c1
mov dword [ebp - 0x224], 1
jmp 0x45f8c8
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0xfffffff7
jg 0x45f8dd
mov dword [ebp - 0xec], 1
jmp 0x45f8e4
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xf4]
jle 0x45f905
mov dword [ebp - 0xfc], 1
jmp 0x45f90c
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2bc], eax
jmp 0x45f933
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x45f933
push 0
push 0xf06
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x3e4], 0x13638ecf
mov dword [ebp - 0x3c0], 0x9aed23b6
mov dword [ebp - 0x104], 0xffff
mov dword [ebp - 0x20], 0
jmp 0x45f979
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x45f98f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x42c], 0
jmp 0x45f972
mov dword [ebp - 0x20], 0
jmp 0x45f99f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x45f9b5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x43c], 0x53072226
jmp 0x45f998
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x45f9ce
push 0x2478
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2d4]
push dword [eax]
mov ecx, dword [ebp - 0x2dc]
call fcn.00450dd5
pop esi
mov esp, ebp
pop ebp
ret