Function at 0x440660
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x470206
mov eax, dword fs:[0]
push eax
mov eax, 0x1028
call fcn.00452050
mov eax, dword [0x47f0c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1034], 0
mov eax, 0x940c
mov word [ebp - 0xafc], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xeb2], ax
movzx ecx, word [ebp - 0xeb2]
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xafa], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xeb4], dx
movzx eax, word [ebp - 0xeb4]
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + str.C:Windows_system32_]
xor edx, eax
mov word [ebp - 0xaf8], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xeb6], dx
movzx eax, word [ebp - 0xeb6]
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + str.C:Windows_system32_]
xor edx, eax
mov word [ebp - 0xaf6], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xeb8], dx
movzx eax, word [ebp - 0xeb8]
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaf4], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xeba], cx
movzx edx, word [ebp - 0xeba]
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.C:Windows_system32_]
xor ecx, edx
mov word [ebp - 0xaf2], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xebc], cx
movzx edx, word [ebp - 0xebc]
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xaf0], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xebe], ax
movzx ecx, word [ebp - 0xebe]
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xaee], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xec0], dx
movzx eax, word [ebp - 0xec0]
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaec], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xec2], cx
movzx edx, word [ebp - 0xec2]
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.C:Windows_system32_]
xor ecx, edx
mov word [ebp - 0xaea], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xec4], cx
movzx edx, word [ebp - 0xec4]
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xae8], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xeda], ax
movzx ecx, word [ebp - 0xeda]
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xae6], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xedc], dx
movzx eax, word [ebp - 0xedc]
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xae4], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xede], cx
movzx edx, word [ebp - 0xede]
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xae2], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xee0], ax
movzx ecx, word [ebp - 0xee0]
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xae0], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xee2], dx
movzx eax, word [ebp - 0xee2]
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xade], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xee4], cx
movzx edx, word [ebp - 0xee4]
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xadc], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xee6], ax
movzx ecx, word [ebp - 0xee6]
mov edx, 2
shl edx, 4
movzx eax, word [edx + str.C:Windows_system32_]
xor eax, ecx
mov word [ebp - 0xada], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xee8], ax
movzx ecx, word [ebp - 0xee8]
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xad8], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xeea], dx
movzx eax, word [ebp - 0xeea]
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xad6], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xeec], cx
movzx edx, word [ebp - 0xeec]
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xad4], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xeee], ax
movzx ecx, word [ebp - 0xeee]
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xad2], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xef0], dx
movzx eax, word [ebp - 0xef0]
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xad0], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xef2], cx
movzx edx, word [ebp - 0xef2]
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xace], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xef4], ax
movzx ecx, word [ebp - 0xef4]
mov edx, 2
imul eax, edx, 0x17
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xacc], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xef6], dx
movzx eax, word [ebp - 0xef6]
mov ecx, 2
imul edx, ecx, 0x18
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaca], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xef8], cx
movzx edx, word [ebp - 0xef8]
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xac8], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xefa], ax
movzx ecx, word [ebp - 0xefa]
mov edx, 2
imul eax, edx, 0x1a
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xac6], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xefc], dx
movzx eax, word [ebp - 0xefc]
mov ecx, 2
imul edx, ecx, 0x1b
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xac4], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xefe], cx
movzx edx, word [ebp - 0xefe]
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xac2], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xf00], ax
movzx ecx, word [ebp - 0xf00]
mov edx, 2
imul eax, edx, 0x1d
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xac0], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xf02], dx
movzx eax, word [ebp - 0xf02]
mov ecx, 2
imul edx, ecx, 0x1e
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xabe], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xf04], cx
movzx edx, word [ebp - 0xf04]
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xabc], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xf06], ax
movzx ecx, word [ebp - 0xf06]
mov edx, 2
shl edx, 5
movzx eax, word [edx + str.C:Windows_system32_]
xor eax, ecx
mov word [ebp - 0xaba], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xf08], ax
movzx ecx, word [ebp - 0xf08]
mov edx, 2
imul eax, edx, 0x21
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xab8], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xf0a], dx
movzx eax, word [ebp - 0xf0a]
mov ecx, 2
imul edx, ecx, 0x22
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xab6], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xe12], cx
movzx edx, word [ebp - 0xe12]
mov eax, 2
imul ecx, eax, 0x23
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xab4], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xe14], ax
movzx ecx, word [ebp - 0xe14]
mov edx, 2
imul eax, edx, 0x24
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xab2], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xe16], dx
movzx eax, word [ebp - 0xe16]
mov ecx, 2
imul edx, ecx, 0x25
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xab0], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xafc]
mov word [ebp - 0xe18], cx
movzx edx, word [ebp - 0xe18]
mov eax, 2
imul ecx, eax, 0x26
movzx eax, word [ecx + str.C:Windows_system32_]
xor eax, edx
mov word [ebp - 0xaae], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xafc]
mov word [ebp - 0xe1a], ax
movzx ecx, word [ebp - 0xe1a]
mov edx, 2
imul eax, edx, 0x27
movzx edx, word [eax + str.C:Windows_system32_]
xor edx, ecx
mov word [ebp - 0xaac], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xafc]
mov word [ebp - 0xe1c], dx
movzx eax, word [ebp - 0xe1c]
mov ecx, 2
imul edx, ecx, 0x28
movzx ecx, word [edx + str.C:Windows_system32_]
xor ecx, eax
mov word [ebp - 0xaaa], cx
xor edx, edx
mov word [ebp - 0xaa8], dx
lea ecx, [ebp - 0xafc]
call fcn.0042f130
mov dword [ebp - 0xf14], eax
lea eax, [ebp - 0xda8]
mov dword [ebp - 0xfd0], eax
movzx ecx, byte [ebp - 0xeaf]
push ecx
mov ecx, dword [ebp - 0xfd0]
call fcn.00401f30
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0xf14]
mov dword [ebp - 0xe00], edx
mov eax, dword [ebp - 0xe00]
add eax, 2
mov dword [ebp - 0xfd4], eax
mov ecx, dword [ebp - 0xe00]
mov dx, word [ecx]
mov word [ebp - 0xe1e], dx
add dword [ebp - 0xe00], 2
cmp word [ebp - 0xe1e], 0
jne 0x440fa5
mov eax, dword [ebp - 0xe00]
sub eax, dword [ebp - 0xfd4]
sar eax, 1
mov dword [ebp - 0xfd8], eax
mov ecx, dword [ebp - 0xfd8]
mov dword [ebp - 0xfdc], ecx
mov edx, dword [ebp - 0xfdc]
mov dword [ebp - 0xfe0], edx
mov eax, dword [ebp - 0xfe0]
push eax
mov ecx, dword [ebp - 0xf14]
push ecx
lea ecx, [ebp - 0xda8]
call fcn.00416f10
mov dword [ebp - 4], 1
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd90], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str.computerdefaults.exe]
add ecx, edx
mov word [ebp - 0xd8e], cx
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str.computerdefaults.exe]
add ecx, edx
mov word [ebp - 0xd8c], cx
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd8a], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.computerdefaults.exe]
add ecx, edx
mov word [ebp - 0xd88], cx
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd86], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd84], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd82], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.computerdefaults.exe]
add ecx, edx
mov word [ebp - 0xd80], cx
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd7e], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd7c], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd7a], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd78], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd76], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd74], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd72], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + str.computerdefaults.exe]
add ecx, edx
mov word [ebp - 0xd70], cx
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd6e], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd6c], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd6a], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd68], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd66], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd64], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x17
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd62], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd60], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd5e], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1a
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd5c], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1b
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd5a], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd58], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1d
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd56], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1e
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd54], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd52], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 5
movzx ecx, word [eax + str.computerdefaults.exe]
add ecx, edx
mov word [ebp - 0xd50], cx
mov edx, 0xdcfe
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x21
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd4e], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x22
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd4c], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x23
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd4a], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x24
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd48], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x25
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd46], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x26
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd44], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x27
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd42], ax
mov ecx, 0xdcfe
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x28
movzx eax, word [ecx + str.computerdefaults.exe]
add eax, edx
mov word [ebp - 0xd40], ax
xor ecx, ecx
mov word [ebp - 0xd3e], cx
mov dword [ebp - 0xdfc], 0
jmp 0x441718
mov edx, dword [ebp - 0xdfc]
add edx, 1
mov dword [ebp - 0xdfc], edx
cmp dword [ebp - 0xdfc], 0x29
jae 0x441754
mov eax, 0xdcfe
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdfc]
movzx ecx, word [ebp + eax*2 - 0xd90]
sub ecx, edx
mov edx, dword [ebp - 0xdfc]
mov word [ebp + edx*2 - 0xd90], cx
jmp 0x441709
lea eax, [ebp - 0xd90]
push eax
lea ecx, [ebp - 0xda8]
push ecx
lea edx, [ebp - 0xdc0]
push edx
call fcn.0044bdc0
add esp, 0xc
mov byte [ebp - 4], 2
mov eax, 0x4f5c
mov word [ebp - 0xbc4], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe20], ax
movzx ecx, word [ebp - 0xe20]
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xbc2], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe22], dx
movzx eax, word [ebp - 0xe22]
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + str.ms_settings]
xor edx, eax
mov word [ebp - 0xbc0], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe24], dx
movzx eax, word [ebp - 0xe24]
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + str.ms_settings]
xor edx, eax
mov word [ebp - 0xbbe], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe26], dx
movzx eax, word [ebp - 0xe26]
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xbbc], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe28], cx
movzx edx, word [ebp - 0xe28]
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.ms_settings]
xor ecx, edx
mov word [ebp - 0xbba], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe2a], cx
movzx edx, word [ebp - 0xe2a]
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xbb8], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe2c], ax
movzx ecx, word [ebp - 0xe2c]
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xbb6], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe2e], dx
movzx eax, word [ebp - 0xe2e]
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xbb4], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe30], cx
movzx edx, word [ebp - 0xe30]
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.ms_settings]
xor ecx, edx
mov word [ebp - 0xbb2], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe32], cx
movzx edx, word [ebp - 0xe32]
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xbb0], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe34], ax
movzx ecx, word [ebp - 0xe34]
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xbae], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe36], dx
movzx eax, word [ebp - 0xe36]
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xbac], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe38], cx
movzx edx, word [ebp - 0xe38]
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xbaa], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe3a], ax
movzx ecx, word [ebp - 0xe3a]
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xba8], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe3c], dx
movzx eax, word [ebp - 0xe3c]
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xba6], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe3e], cx
movzx edx, word [ebp - 0xe3e]
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xba4], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe40], ax
movzx ecx, word [ebp - 0xe40]
mov edx, 2
shl edx, 4
movzx eax, word [edx + str.ms_settings]
xor eax, ecx
mov word [ebp - 0xba2], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe42], ax
movzx ecx, word [ebp - 0xe42]
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xba0], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe44], dx
movzx eax, word [ebp - 0xe44]
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xb9e], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe46], cx
movzx edx, word [ebp - 0xe46]
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xb9c], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xbc4]
mov word [ebp - 0xe48], ax
movzx ecx, word [ebp - 0xe48]
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + str.ms_settings]
xor edx, ecx
mov word [ebp - 0xb9a], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xbc4]
mov word [ebp - 0xe4a], dx
movzx eax, word [ebp - 0xe4a]
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + str.ms_settings]
xor ecx, eax
mov word [ebp - 0xb98], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xbc4]
mov word [ebp - 0xe4c], cx
movzx edx, word [ebp - 0xe4c]
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str.ms_settings]
xor eax, edx
mov word [ebp - 0xb96], ax
xor ecx, ecx
mov word [ebp - 0xb94], cx
lea ecx, [ebp - 0xbc4]
call fcn.0042f320
mov dword [ebp - 0xf34], eax
lea edx, [ebp - 0xdc0]
mov dword [ebp - 0xec8], edx
mov eax, dword [ebp - 0xec8]
mov dword [ebp - 0xf10], eax
mov ecx, dword [ebp - 0xec8]
cmp dword [ecx + 0x14], 7
jbe 0x441ca4
mov dword [ebp - 0xf18], 1
jmp 0x441cae
mov dword [ebp - 0xf18], 0
mov dl, byte [ebp - 0xf18]
mov byte [ebp - 0xdd2], dl
movzx eax, byte [ebp - 0xdd2]
test eax, eax
je 0x441cdf
mov ecx, dword [ebp - 0xec8]
mov edx, dword [ecx]
mov dword [ebp - 0xfe4], edx
mov eax, dword [ebp - 0xfe4]
mov dword [ebp - 0xf10], eax
mov ecx, dword [ebp - 0xf10]
mov dword [ebp - 0xfe8], ecx
mov edx, dword [ebp - 0xfe8]
mov dword [ebp - 0xf70], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0xecc], eax
mov ecx, dword [ebp - 0xecc]
mov dword [ebp - 0xf20], ecx
mov edx, dword [ebp - 0xecc]
cmp dword [edx + 0x14], 7
jbe 0x441d24
mov dword [ebp - 0xf1c], 1
jmp 0x441d2e
mov dword [ebp - 0xf1c], 0
mov al, byte [ebp - 0xf1c]
mov byte [ebp - 0xdd3], al
movzx ecx, byte [ebp - 0xdd3]
test ecx, ecx
je 0x441d5f
mov edx, dword [ebp - 0xecc]
mov eax, dword [edx]
mov dword [ebp - 0xfec], eax
mov ecx, dword [ebp - 0xfec]
mov dword [ebp - 0xf20], ecx
mov edx, dword [ebp - 0xf20]
mov dword [ebp - 0xff0], edx
mov eax, dword [ebp - 0xff0]
mov dword [ebp - 0xf3c], eax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc94], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xc92], cx
mov edx, 0x89d2
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xc90], cx
mov edx, 0x89d2
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc8e], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xc8c], cx
mov edx, 0x89d2
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc8a], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc88], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc86], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xc84], cx
mov edx, 0x89d2
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc82], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc80], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc7e], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc7c], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc7a], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc78], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc76], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + str.ntdll.dll]
add ecx, edx
mov word [ebp - 0xc74], cx
mov edx, 0x89d2
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc72], ax
mov ecx, 0x89d2
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + str.ntdll.dll]
add eax, edx
mov word [ebp - 0xc70], ax
xor ecx, ecx
mov word [ebp - 0xc6e], cx
mov dword [ebp - 0xdf4], 0
jmp 0x4420cb
mov edx, dword [ebp - 0xdf4]
add edx, 1
mov dword [ebp - 0xdf4], edx
cmp dword [ebp - 0xdf4], 0x13
jae 0x442107
mov eax, 0x89d2
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdf4]
movzx ecx, word [ebp + eax*2 - 0xc94]
sub ecx, edx
mov edx, dword [ebp - 0xdf4]
mov word [ebp + edx*2 - 0xc94], cx
jmp 0x4420bc
lea eax, [ebp - 0xc94]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x481458], eax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcf8], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + 0x472308]
add ecx, edx
mov word [ebp - 0xcf6], cx
mov edx, 0xba06
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + 0x472308]
add ecx, edx
mov word [ebp - 0xcf4], cx
mov edx, 0xba06
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcf2], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x472308]
add ecx, edx
mov word [ebp - 0xcf0], cx
mov edx, 0xba06
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcee], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcec], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcea], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x472308]
add ecx, edx
mov word [ebp - 0xce8], cx
mov edx, 0xba06
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xce6], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xce4], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xce2], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xce0], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcde], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcdc], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcda], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + 0x472308]
add ecx, edx
mov word [ebp - 0xcd8], cx
mov edx, 0xba06
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcd6], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcd4], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcd2], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcd0], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcce], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xccc], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x17
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcca], ax
mov ecx, 0xba06
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + 0x472308]
add eax, edx
mov word [ebp - 0xcc8], ax
xor ecx, ecx
mov word [ebp - 0xcc6], cx
mov dword [ebp - 0xdf8], 0
jmp 0x44256f
mov edx, dword [ebp - 0xdf8]
add edx, 1
mov dword [ebp - 0xdf8], edx
cmp dword [ebp - 0xdf8], 0x19
jae 0x4425ab
mov eax, 0xba06
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdf8]
movzx ecx, word [ebp + eax*2 - 0xcf8]
sub ecx, edx
mov edx, dword [ebp - 0xdf8]
mov word [ebp + edx*2 - 0xcf8], cx
jmp 0x442560
lea eax, [ebp - 0xcf8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x48145c], eax
mov ecx, 0xb328
mov word [ebp - 0xc24], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc24]
mov word [ebp - 0xe4e], cx
movzx edx, word [ebp - 0xe4e]
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x472324]
xor eax, edx
mov word [ebp - 0xc22], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe50], ax
movzx ecx, word [ebp - 0xe50]
mov edx, 2
shl edx, 0
movzx eax, word [edx + 0x472324]
xor eax, ecx
mov word [ebp - 0xc20], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe52], ax
movzx ecx, word [ebp - 0xe52]
mov edx, 2
shl edx, 1
movzx eax, word [edx + 0x472324]
xor eax, ecx
mov word [ebp - 0xc1e], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe54], ax
movzx ecx, word [ebp - 0xe54]
mov edx, 2
imul eax, edx, 3
movzx edx, word [eax + 0x472324]
xor edx, ecx
mov word [ebp - 0xc1c], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc24]
mov word [ebp - 0xe56], dx
movzx eax, word [ebp - 0xe56]
mov ecx, 2
shl ecx, 2
movzx edx, word [ecx + 0x472324]
xor edx, eax
mov word [ebp - 0xc1a], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc24]
mov word [ebp - 0xe58], dx
movzx eax, word [ebp - 0xe58]
mov ecx, 2
imul edx, ecx, 5
movzx ecx, word [edx + 0x472324]
xor ecx, eax
mov word [ebp - 0xc18], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc24]
mov word [ebp - 0xe5a], cx
movzx edx, word [ebp - 0xe5a]
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x472324]
xor eax, edx
mov word [ebp - 0xc16], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe5c], ax
movzx ecx, word [ebp - 0xe5c]
mov edx, 2
imul eax, edx, 7
movzx edx, word [eax + 0x472324]
xor edx, ecx
mov word [ebp - 0xc14], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc24]
mov word [ebp - 0xe5e], dx
movzx eax, word [ebp - 0xe5e]
mov ecx, 2
shl ecx, 3
movzx edx, word [ecx + 0x472324]
xor edx, eax
mov word [ebp - 0xc12], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc24]
mov word [ebp - 0xe60], dx
movzx eax, word [ebp - 0xe60]
mov ecx, 2
imul edx, ecx, 9
movzx ecx, word [edx + 0x472324]
xor ecx, eax
mov word [ebp - 0xc10], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc24]
mov word [ebp - 0xe62], cx
movzx edx, word [ebp - 0xe62]
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x472324]
xor eax, edx
mov word [ebp - 0xc0e], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe64], ax
movzx ecx, word [ebp - 0xe64]
mov edx, 2
imul eax, edx, 0xb
movzx edx, word [eax + 0x472324]
xor edx, ecx
mov word [ebp - 0xc0c], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc24]
mov word [ebp - 0xe66], dx
movzx eax, word [ebp - 0xe66]
mov ecx, 2
imul edx, ecx, 0xc
movzx ecx, word [edx + 0x472324]
xor ecx, eax
mov word [ebp - 0xc0a], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc24]
mov word [ebp - 0xe68], cx
movzx edx, word [ebp - 0xe68]
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x472324]
xor eax, edx
mov word [ebp - 0xc08], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe6a], ax
movzx ecx, word [ebp - 0xe6a]
mov edx, 2
imul eax, edx, 0xe
movzx edx, word [eax + 0x472324]
xor edx, ecx
mov word [ebp - 0xc06], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc24]
mov word [ebp - 0xe6c], dx
movzx eax, word [ebp - 0xe6c]
mov ecx, 2
imul edx, ecx, 0xf
movzx ecx, word [edx + 0x472324]
xor ecx, eax
mov word [ebp - 0xc04], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc24]
mov word [ebp - 0xe6e], cx
movzx edx, word [ebp - 0xe6e]
mov eax, 2
shl eax, 4
movzx ecx, word [eax + 0x472324]
xor ecx, edx
mov word [ebp - 0xc02], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc24]
mov word [ebp - 0xe70], cx
movzx edx, word [ebp - 0xe70]
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + 0x472324]
xor eax, edx
mov word [ebp - 0xc00], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc24]
mov word [ebp - 0xe72], ax
movzx ecx, word [ebp - 0xe72]
mov edx, 2
imul eax, edx, 0x12
movzx edx, word [eax + 0x472324]
xor edx, ecx
mov word [ebp - 0xbfe], dx
xor eax, eax
mov word [ebp - 0xbfc], ax
lea ecx, [ebp - 0xc24]
call fcn.0044ce10
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x48143c], eax
call fcn.004464b0
mov byte [ebp - 0xa84], 0x4e
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa84]
movsx ecx, al
mov edx, 1
imul eax, edx, 0
movsx edx, byte [eax + str.RtlCreateHeap]
xor edx, ecx
mov byte [ebp - 0xa83], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa84]
add edx, 1
movsx eax, dl
mov ecx, 1
shl ecx, 0
movsx edx, byte [ecx + str.RtlCreateHeap]
xor edx, eax
mov byte [ebp - 0xa82], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa84]
add edx, 2
movsx eax, dl
mov ecx, 1
shl ecx, 1
movsx edx, byte [ecx + str.RtlCreateHeap]
xor edx, eax
mov byte [ebp - 0xa81], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa84]
add edx, 3
movsx eax, dl
mov ecx, 1
imul edx, ecx, 3
movsx ecx, byte [edx + str.RtlCreateHeap]
xor ecx, eax
mov byte [ebp - 0xa80], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa84]
add ecx, 4
movsx edx, cl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.RtlCreateHeap]
xor ecx, edx
mov byte [ebp - 0xa7f], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa84]
add ecx, 5
movsx edx, cl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.RtlCreateHeap]
xor eax, edx
mov byte [ebp - 0xa7e], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa84]
add eax, 6
movsx ecx, al
mov edx, 1
imul eax, edx, 6
movsx edx, byte [eax + str.RtlCreateHeap]
xor edx, ecx
mov byte [ebp - 0xa7d], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa84]
add edx, 7
movsx eax, dl
mov ecx, 1
imul edx, ecx, 7
movsx ecx, byte [edx + str.RtlCreateHeap]
xor ecx, eax
mov byte [ebp - 0xa7c], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa84]
add ecx, 8
movsx edx, cl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.RtlCreateHeap]
xor ecx, edx
mov byte [ebp - 0xa7b], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa84]
add ecx, 9
movsx edx, cl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.RtlCreateHeap]
xor eax, edx
mov byte [ebp - 0xa7a], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa84]
add eax, 0xa
movsx ecx, al
mov edx, 1
imul eax, edx, 0xa
movsx edx, byte [eax + str.RtlCreateHeap]
xor edx, ecx
mov byte [ebp - 0xa79], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa84]
add edx, 0xb
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xb
movsx ecx, byte [edx + str.RtlCreateHeap]
xor ecx, eax
mov byte [ebp - 0xa78], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa84]
add ecx, 0xc
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.RtlCreateHeap]
xor eax, edx
mov byte [ebp - 0xa77], al
xor ecx, ecx
mov byte [ebp - 0xa76], cl
lea ecx, [ebp - 0xa84]
call fcn.0044c430
mov dword [ebp - 0xff4], eax
mov edx, dword [0x481458]
mov dword [ebp - 0xff8], edx
mov eax, dword [ebp - 0xff4]
push eax
mov ecx, dword [ebp - 0xff8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1004], eax
mov byte [ebp - 0xa50], 0x42
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xdd4], cl
movsx edx, byte [ebp - 0xdd4]
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa4f], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xdd5], al
movsx ecx, byte [ebp - 0xdd5]
mov edx, 1
shl edx, 0
movsx eax, byte [edx + str.RtlSetHeapInformation]
xor eax, ecx
mov byte [ebp - 0xa4e], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xdd6], al
movsx ecx, byte [ebp - 0xdd6]
mov edx, 1
shl edx, 1
movsx eax, byte [edx + str.RtlSetHeapInformation]
xor eax, ecx
mov byte [ebp - 0xa4d], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xdd7], al
movsx ecx, byte [ebp - 0xdd7]
mov edx, 1
imul eax, edx, 3
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa4c], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xdd1], dl
movsx eax, byte [ebp - 0xdd1]
mov ecx, 1
shl ecx, 2
movsx edx, byte [ecx + str.RtlSetHeapInformation]
xor edx, eax
mov byte [ebp - 0xa4b], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xdd8], dl
movsx eax, byte [ebp - 0xdd8]
mov ecx, 1
imul edx, ecx, 5
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa4a], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xdd9], cl
movsx edx, byte [ebp - 0xdd9]
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa49], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xdda], al
movsx ecx, byte [ebp - 0xdda]
mov edx, 1
imul eax, edx, 7
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa48], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xddb], dl
movsx eax, byte [ebp - 0xddb]
mov ecx, 1
shl ecx, 3
movsx edx, byte [ecx + str.RtlSetHeapInformation]
xor edx, eax
mov byte [ebp - 0xa47], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xddc], dl
movsx eax, byte [ebp - 0xddc]
mov ecx, 1
imul edx, ecx, 9
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa46], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xddd], cl
movsx edx, byte [ebp - 0xddd]
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa45], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xddf], al
movsx ecx, byte [ebp - 0xddf]
mov edx, 1
imul eax, edx, 0xb
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa44], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xde0], dl
movsx eax, byte [ebp - 0xde0]
mov ecx, 1
imul edx, ecx, 0xc
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa43], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xde1], cl
movsx edx, byte [ebp - 0xde1]
mov eax, 1
imul ecx, eax, 0xd
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa42], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xde2], al
movsx ecx, byte [ebp - 0xde2]
mov edx, 1
imul eax, edx, 0xe
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa41], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xde3], dl
movsx eax, byte [ebp - 0xde3]
mov ecx, 1
imul edx, ecx, 0xf
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa40], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xde4], cl
movsx edx, byte [ebp - 0xde4]
mov eax, 1
shl eax, 4
movsx ecx, byte [eax + str.RtlSetHeapInformation]
xor ecx, edx
mov byte [ebp - 0xa3f], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xde5], cl
movsx edx, byte [ebp - 0xde5]
mov eax, 1
imul ecx, eax, 0x11
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa3e], al
mov ecx, 1
imul edx, ecx, 0
mov al, byte [ebp + edx - 0xa50]
mov byte [ebp - 0xdc6], al
movsx ecx, byte [ebp - 0xdc6]
mov edx, 1
imul eax, edx, 0x12
movsx edx, byte [eax + str.RtlSetHeapInformation]
xor edx, ecx
mov byte [ebp - 0xa3d], dl
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp + ecx - 0xa50]
mov byte [ebp - 0xdc7], dl
movsx eax, byte [ebp - 0xdc7]
mov ecx, 1
imul edx, ecx, 0x13
movsx ecx, byte [edx + str.RtlSetHeapInformation]
xor ecx, eax
mov byte [ebp - 0xa3c], cl
mov edx, 1
imul eax, edx, 0
mov cl, byte [ebp + eax - 0xa50]
mov byte [ebp - 0xdde], cl
movsx edx, byte [ebp - 0xdde]
mov eax, 1
imul ecx, eax, 0x14
movsx eax, byte [ecx + str.RtlSetHeapInformation]
xor eax, edx
mov byte [ebp - 0xa3b], al
xor ecx, ecx
mov byte [ebp - 0xa3a], cl
lea ecx, [ebp - 0xa50]
call fcn.0044c950
mov dword [ebp - 0xffc], eax
mov edx, dword [0x481458]
mov dword [ebp - 0x1000], edx
mov eax, dword [ebp - 0xffc]
push eax
mov ecx, dword [ebp - 0x1000]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfb0], eax
mov edx, dword [ebp - 0x1004]
mov dword [ebp - 0xfa0], edx
push 0
push 0
push 0
push 0
push 0
push 2
call dword [ebp - 0xfa0]
mov dword [0x481454], eax
mov eax, dword [ebp - 0xfb0]
mov dword [ebp - 0xfb4], eax
push 0
push 0
push 1
mov ecx, dword [0x481454]
push ecx
call dword [ebp - 0xfb4]
mov dword [ebp - 0xf38], 0xc0000022
mov byte [ebp - 0xdc5], 0
mov dword [ebp - 0xdc4], 0xc0000022
mov dword [ebp - 0xf2c], 0
mov dword [ebp - 0xdd0], 0
mov dword [ebp - 0xdcc], 0
mov dword [ebp - 0xe04], 0
mov edx, dword [0x48146c]
mov dword [ebp - 0xfb8], edx
mov eax, 0xca23
mov word [ebp - 0xb48], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
movzx ecx, ax
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb46], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 1
movzx eax, dx
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + 0x472360]
xor edx, eax
mov word [ebp - 0xb44], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 2
movzx eax, dx
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + 0x472360]
xor edx, eax
mov word [ebp - 0xb42], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 3
movzx eax, dx
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb40], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 4
movzx edx, cx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x472360]
xor ecx, edx
mov word [ebp - 0xb3e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 5
movzx edx, cx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb3c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 6
movzx ecx, ax
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb3a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 7
movzx eax, dx
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb38], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 8
movzx edx, cx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x472360]
xor ecx, edx
mov word [ebp - 0xb36], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 9
movzx edx, cx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb34], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0xa
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb32], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0xb
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb30], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0xc
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb2e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0xd
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb2c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0xe
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb2a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0xf
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb28], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x10
movzx ecx, ax
mov edx, 2
shl edx, 4
movzx eax, word [edx + 0x472360]
xor eax, ecx
mov word [ebp - 0xb26], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x11
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb24], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0x12
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb22], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0x13
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb20], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x14
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb1e], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0x15
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb1c], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0x16
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb1a], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x17
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x17
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb18], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0x18
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x18
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb16], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0x19
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb14], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x1a
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1a
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb12], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0x1b
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1b
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb10], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0x1c
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb0e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x1d
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1d
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb0c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0x1e
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1e
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb0a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb48]
add ecx, 0x1f
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + 0x472360]
xor eax, edx
mov word [ebp - 0xb08], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x20
movzx ecx, ax
mov edx, 2
shl edx, 5
movzx eax, word [edx + 0x472360]
xor eax, ecx
mov word [ebp - 0xb06], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb48]
add eax, 0x21
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x21
movzx edx, word [eax + 0x472360]
xor edx, ecx
mov word [ebp - 0xb04], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb48]
add edx, 0x22
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x22
movzx ecx, word [edx + 0x472360]
xor ecx, eax
mov word [ebp - 0xb02], cx
xor edx, edx
mov word [ebp - 0xb00], dx
lea ecx, [ebp - 0xb48]
call fcn.0044cb80
push eax
lea eax, [ebp - 0x102c]
push eax
call dword [ebp - 0xfb8]
mov byte [ebp - 0xa74], 0x55
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa74]
movsx ecx, al
mov edx, 1
imul eax, edx, 0
movsx edx, byte [eax + 0x472384]
xor edx, ecx
mov byte [ebp - 0xa73], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa74]
add edx, 1
movsx eax, dl
mov ecx, 1
shl ecx, 0
movsx edx, byte [ecx + 0x472384]
xor edx, eax
mov byte [ebp - 0xa72], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa74]
add edx, 2
movsx eax, dl
mov ecx, 1
shl ecx, 1
movsx edx, byte [ecx + 0x472384]
xor edx, eax
mov byte [ebp - 0xa71], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa74]
add edx, 3
movsx eax, dl
mov ecx, 1
imul edx, ecx, 3
movsx ecx, byte [edx + 0x472384]
xor ecx, eax
mov byte [ebp - 0xa70], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa74]
add ecx, 4
movsx edx, cl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + 0x472384]
xor ecx, edx
mov byte [ebp - 0xa6f], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa74]
add ecx, 5
movsx edx, cl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + 0x472384]
xor eax, edx
mov byte [ebp - 0xa6e], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa74]
add eax, 6
movsx ecx, al
mov edx, 1
imul eax, edx, 6
movsx edx, byte [eax + 0x472384]
xor edx, ecx
mov byte [ebp - 0xa6d], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa74]
add edx, 7
movsx eax, dl
mov ecx, 1
imul edx, ecx, 7
movsx ecx, byte [edx + 0x472384]
xor ecx, eax
mov byte [ebp - 0xa6c], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa74]
add ecx, 8
movsx edx, cl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + 0x472384]
xor ecx, edx
mov byte [ebp - 0xa6b], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa74]
add ecx, 9
movsx edx, cl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + 0x472384]
xor eax, edx
mov byte [ebp - 0xa6a], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa74]
add eax, 0xa
movsx ecx, al
mov edx, 1
imul eax, edx, 0xa
movsx edx, byte [eax + 0x472384]
xor edx, ecx
mov byte [ebp - 0xa69], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa74]
add edx, 0xb
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xb
movsx ecx, byte [edx + 0x472384]
xor ecx, eax
mov byte [ebp - 0xa68], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa74]
add ecx, 0xc
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + 0x472384]
xor eax, edx
mov byte [ebp - 0xa67], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa74]
add eax, 0xd
movsx ecx, al
mov edx, 1
imul eax, edx, 0xd
movsx edx, byte [eax + 0x472384]
xor edx, ecx
mov byte [ebp - 0xa66], dl
xor eax, eax
mov byte [ebp - 0xa65], al
lea ecx, [ebp - 0xa74]
call fcn.0044c4a0
mov dword [ebp - 0xfbc], eax
mov ecx, dword [0x48143c]
mov dword [ebp - 0xf9c], ecx
mov edx, dword [ebp - 0xfbc]
push edx
mov eax, dword [ebp - 0xf9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc0], eax
mov ecx, dword [ebp - 0xfc0]
mov dword [ebp - 0xfc4], ecx
push 2
push 0
call dword [ebp - 0xfc4]
mov dword [ebp - 0xf88], eax
mov dword [ebp - 0xed4], 0x410
lea edx, [ebp - 0xa38]
mov dword [ebp - 0xed0], edx
cmp dword [ebp - 0xed4], 0
je 0x443b0f
mov eax, dword [ebp - 0xed0]
mov byte [eax], 0
mov ecx, dword [ebp - 0xed0]
add ecx, 1
mov dword [ebp - 0xed0], ecx
mov edx, dword [ebp - 0xed4]
sub edx, 1
mov dword [ebp - 0xed4], edx
jmp 0x443add
push 1
call fcn.0044b930
add esp, 4
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x443b60
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0xfc8], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdc0]
call fcn.0042d9e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda8]
call fcn.0042d9e0
mov eax, dword [ebp - 0xfc8]
jmp 0x446496
mov ecx, dword [0x481460]
mov dword [ebp - 0xfcc], ecx
lea edx, [ebp - 0xfa8]
push edx
call dword [ebp - 0xfcc]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x443b8d
jmp 0x445005
lea eax, [ebp - 0xdd0]
push eax
lea ecx, [ebp - 0xfa8]
push ecx
call fcn.00448790
add esp, 8
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x443bb7
jmp 0x445005
mov edx, 2
imul eax, edx, 0
mov ecx, 0x5c
mov word [ebp + eax - 0xa38], cx
mov dword [ebp - 0xf24], 2
cmp dword [ebp - 0xf24], 0x410
jae 0x443be4
jmp 0x443be9
call fcn.004524ce
xor edx, edx
mov eax, dword [ebp - 0xf24]
mov word [ebp + eax - 0xa38], dx
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0xa38]
push edx
mov eax, dword [ebp - 0xf3c]
push eax
mov ecx, dword [ebp - 0xdd0]
push ecx
call fcn.0044ada0
add esp, 0xc
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x443c33
jmp 0x445005
mov byte [ebp - 0xdc5], 1
lea edx, [ebp - 0xa38]
push edx
call fcn.0045a403
add esp, 4
movzx ecx, word [ebp - 0xfa6]
lea edx, [ecx + eax*2 + 0x104]
mov dword [ebp - 0xed8], edx
mov eax, dword [ebp - 0xed8]
push eax
call fcn.004482c0
add esp, 4
mov dword [ebp - 0xe04], eax
cmp dword [ebp - 0xe04], 0
jne 0x443c80
jmp 0x445005
mov ecx, dword [ebp - 0xe04]
mov dword [ebp - 0xe0c], ecx
xor edx, edx
mov word [ebp - 0xe10], dx
mov ax, word [ebp - 0xed8]
mov word [ebp - 0xe0e], ax
mov ecx, dword [0x481464]
mov dword [ebp - 0xf40], ecx
lea edx, [ebp - 0xfa8]
push edx
lea eax, [ebp - 0xe10]
push eax
call dword [ebp - 0xf40]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x443cd7
jmp 0x445005
mov ecx, 2
imul edx, ecx, 0
mov eax, 0x5c
mov word [ebp + edx - 0x628], ax
mov dword [ebp - 0xf28], 2
cmp dword [ebp - 0xf28], 0x208
jae 0x443d04
jmp 0x443d09
call fcn.004524ce
xor ecx, ecx
mov edx, dword [ebp - 0xf28]
mov word [ebp + edx - 0x628], cx
mov eax, 0x90cd
mov word [ebp - 0xb90], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
movzx ecx, ax
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb8e], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 1
movzx eax, dx
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + 0x472394]
xor edx, eax
mov word [ebp - 0xb8c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 2
movzx eax, dx
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + 0x472394]
xor edx, eax
mov word [ebp - 0xb8a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 3
movzx eax, dx
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb88], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 4
movzx edx, cx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x472394]
xor ecx, edx
mov word [ebp - 0xb86], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 5
movzx edx, cx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb84], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 6
movzx ecx, ax
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb82], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 7
movzx eax, dx
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb80], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 8
movzx edx, cx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x472394]
xor ecx, edx
mov word [ebp - 0xb7e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 9
movzx edx, cx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb7c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0xa
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb7a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0xb
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb78], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0xc
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb76], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0xd
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb74], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0xe
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb72], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0xf
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb70], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x10
movzx ecx, ax
mov edx, 2
shl edx, 4
movzx eax, word [edx + 0x472394]
xor eax, ecx
mov word [ebp - 0xb6e], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x11
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb6c], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0x12
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb6a], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0x13
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb68], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x14
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb66], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0x15
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb64], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0x16
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb62], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x17
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x17
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb60], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0x18
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x18
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb5e], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0x19
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb5c], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x1a
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1a
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb5a], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0x1b
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1b
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb58], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0x1c
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb56], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x1d
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x1d
movzx edx, word [eax + 0x472394]
xor edx, ecx
mov word [ebp - 0xb54], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xb90]
add edx, 0x1e
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x1e
movzx ecx, word [edx + 0x472394]
xor ecx, eax
mov word [ebp - 0xb52], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xb90]
add ecx, 0x1f
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + 0x472394]
xor eax, edx
mov word [ebp - 0xb50], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xb90]
add eax, 0x20
movzx ecx, ax
mov edx, 2
shl edx, 5
movzx eax, word [edx + 0x472394]
xor eax, ecx
mov word [ebp - 0xb4e], ax
xor ecx, ecx
mov word [ebp - 0xb4c], cx
lea ecx, [ebp - 0xb90]
call fcn.0044cb10
push eax
mov edx, 2
shl edx, 0
lea eax, [ebp + edx - 0x628]
push eax
call fcn.0045aa13
add esp, 8
mov ecx, dword [0x481468]
mov dword [ebp - 0xf44], ecx
lea edx, [ebp - 0x628]
push edx
lea eax, [ebp - 0xe10]
push eax
call dword [ebp - 0xf44]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x444370
jmp 0x445005
mov ecx, dword [0x481468]
mov dword [ebp - 0xf48], ecx
lea edx, [ebp - 0xa38]
push edx
lea eax, [ebp - 0xe10]
push eax
call dword [ebp - 0xf48]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x4443a4
jmp 0x445005
push 0x104
mov ecx, dword [ebp - 0xf34]
push ecx
lea edx, [ebp - 0x420]
push edx
call fcn.0045aa35
add esp, 0xc
mov eax, 0xecf1
mov word [ebp - 0xbf8], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
movzx ecx, ax
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + str._shellopen]
xor edx, ecx
mov word [ebp - 0xbf6], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 1
movzx eax, dx
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + str._shellopen]
xor edx, eax
mov word [ebp - 0xbf4], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 2
movzx eax, dx
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + str._shellopen]
xor edx, eax
mov word [ebp - 0xbf2], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 3
movzx eax, dx
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + str._shellopen]
xor ecx, eax
mov word [ebp - 0xbf0], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 4
movzx edx, cx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + str._shellopen]
xor ecx, edx
mov word [ebp - 0xbee], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 5
movzx edx, cx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + str._shellopen]
xor eax, edx
mov word [ebp - 0xbec], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
add eax, 6
movzx ecx, ax
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + str._shellopen]
xor edx, ecx
mov word [ebp - 0xbea], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 7
movzx eax, dx
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + str._shellopen]
xor ecx, eax
mov word [ebp - 0xbe8], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 8
movzx edx, cx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + str._shellopen]
xor ecx, edx
mov word [ebp - 0xbe6], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 9
movzx edx, cx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + str._shellopen]
xor eax, edx
mov word [ebp - 0xbe4], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
add eax, 0xa
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + str._shellopen]
xor edx, ecx
mov word [ebp - 0xbe2], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 0xb
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + str._shellopen]
xor ecx, eax
mov word [ebp - 0xbe0], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 0xc
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + str._shellopen]
xor eax, edx
mov word [ebp - 0xbde], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
add eax, 0xd
movzx ecx, ax
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + str._shellopen]
xor edx, ecx
mov word [ebp - 0xbdc], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 0xe
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + str._shellopen]
xor ecx, eax
mov word [ebp - 0xbda], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 0xf
movzx edx, cx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + str._shellopen]
xor eax, edx
mov word [ebp - 0xbd8], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
add eax, 0x10
movzx ecx, ax
mov edx, 2
shl edx, 4
movzx eax, word [edx + str._shellopen]
xor eax, ecx
mov word [ebp - 0xbd6], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
add eax, 0x11
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x11
movzx edx, word [eax + str._shellopen]
xor edx, ecx
mov word [ebp - 0xbd4], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 0x12
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x12
movzx ecx, word [edx + str._shellopen]
xor ecx, eax
mov word [ebp - 0xbd2], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 0x13
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + str._shellopen]
xor eax, edx
mov word [ebp - 0xbd0], ax
mov ecx, 2
imul edx, ecx, 0
movzx eax, word [ebp + edx - 0xbf8]
add eax, 0x14
movzx ecx, ax
mov edx, 2
imul eax, edx, 0x14
movzx edx, word [eax + str._shellopen]
xor edx, ecx
mov word [ebp - 0xbce], dx
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0xbf8]
add edx, 0x15
movzx eax, dx
mov ecx, 2
imul edx, ecx, 0x15
movzx ecx, word [edx + str._shellopen]
xor ecx, eax
mov word [ebp - 0xbcc], cx
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0xbf8]
add ecx, 0x16
movzx edx, cx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + str._shellopen]
xor eax, edx
mov word [ebp - 0xbca], ax
xor ecx, ecx
mov word [ebp - 0xbc8], cx
lea ecx, [ebp - 0xbf8]
call fcn.0044cc60
push eax
lea edx, [ebp - 0x420]
push edx
call fcn.0045a9e2
add esp, 8
mov byte [ebp - 0xa64], 0x60
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa63], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 1
movsx edx, cl
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + str.RegCreateKeyExW]
xor ecx, edx
mov byte [ebp - 0xa62], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 2
movsx edx, cl
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + str.RegCreateKeyExW]
xor ecx, edx
mov byte [ebp - 0xa61], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 3
movsx edx, cl
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa60], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 4
movsx ecx, al
mov edx, 1
shl edx, 2
movsx eax, byte [edx + str.RegCreateKeyExW]
xor eax, ecx
mov byte [ebp - 0xa5f], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 5
movsx ecx, al
mov edx, 1
imul eax, edx, 5
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa5e], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 6
movsx eax, dl
mov ecx, 1
imul edx, ecx, 6
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa5d], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 7
movsx edx, cl
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa5c], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 8
movsx ecx, al
mov edx, 1
shl edx, 3
movsx eax, byte [edx + str.RegCreateKeyExW]
xor eax, ecx
mov byte [ebp - 0xa5b], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 9
movsx ecx, al
mov edx, 1
imul eax, edx, 9
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa5a], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 0xa
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xa
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa59], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 0xb
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa58], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa64]
add eax, 0xc
movsx ecx, al
mov edx, 1
imul eax, edx, 0xc
movsx edx, byte [eax + str.RegCreateKeyExW]
xor edx, ecx
mov byte [ebp - 0xa57], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa64]
add edx, 0xd
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xd
movsx ecx, byte [edx + str.RegCreateKeyExW]
xor ecx, eax
mov byte [ebp - 0xa56], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa64]
add ecx, 0xe
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xe
movsx eax, byte [ecx + str.RegCreateKeyExW]
xor eax, edx
mov byte [ebp - 0xa55], al
xor ecx, ecx
mov byte [ebp - 0xa54], cl
lea ecx, [ebp - 0xa64]
call fcn.0044c510
mov dword [ebp - 0xf4c], eax
mov edx, dword [0x48145c]
mov dword [ebp - 0xf50], edx
mov eax, dword [ebp - 0xf4c]
push eax
mov ecx, dword [ebp - 0xf50]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xf54], eax
mov edx, dword [ebp - 0xf54]
mov dword [ebp - 0xf58], edx
push 0
lea eax, [ebp - 0xf2c]
push eax
push 0
push 0x2000000
push 0
push 0
push 0
lea ecx, [ebp - 0x420]
push ecx
mov edx, dword [ebp - 0xdd0]
push edx
call dword [ebp - 0xf58]
test eax, eax
je 0x444b31
jmp 0x445005
mov eax, dword [0x48146c]
mov dword [ebp - 0xf5c], eax
mov ecx, 0x87db
mov word [ebp - 0xc48], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc48]
mov word [ebp - 0xe74], cx
movzx edx, word [ebp - 0xe74]
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + str.command]
xor eax, edx
mov word [ebp - 0xc46], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc48]
mov word [ebp - 0xe76], ax
movzx ecx, word [ebp - 0xe76]
mov edx, 2
shl edx, 0
movzx eax, word [edx + str.command]
xor eax, ecx
mov word [ebp - 0xc44], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc48]
mov word [ebp - 0xe78], ax
movzx ecx, word [ebp - 0xe78]
mov edx, 2
shl edx, 1
movzx eax, word [edx + str.command]
xor eax, ecx
mov word [ebp - 0xc42], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc48]
mov word [ebp - 0xe7a], ax
movzx ecx, word [ebp - 0xe7a]
mov edx, 2
imul eax, edx, 3
movzx edx, word [eax + str.command]
xor edx, ecx
mov word [ebp - 0xc40], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc48]
mov word [ebp - 0xe7c], dx
movzx eax, word [ebp - 0xe7c]
mov ecx, 2
shl ecx, 2
movzx edx, word [ecx + str.command]
xor edx, eax
mov word [ebp - 0xc3e], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc48]
mov word [ebp - 0xe7e], dx
movzx eax, word [ebp - 0xe7e]
mov ecx, 2
imul edx, ecx, 5
movzx ecx, word [edx + str.command]
xor ecx, eax
mov word [ebp - 0xc3c], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc48]
mov word [ebp - 0xe80], cx
movzx edx, word [ebp - 0xe80]
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + str.command]
xor eax, edx
mov word [ebp - 0xc3a], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc48]
mov word [ebp - 0xe82], ax
movzx ecx, word [ebp - 0xe82]
mov edx, 2
imul eax, edx, 7
movzx edx, word [eax + str.command]
xor edx, ecx
mov word [ebp - 0xc38], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc48]
mov word [ebp - 0xe84], dx
movzx eax, word [ebp - 0xe84]
mov ecx, 2
shl ecx, 3
movzx edx, word [ecx + str.command]
xor edx, eax
mov word [ebp - 0xc36], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc48]
mov word [ebp - 0xe86], dx
movzx eax, word [ebp - 0xe86]
mov ecx, 2
imul edx, ecx, 9
movzx ecx, word [edx + str.command]
xor ecx, eax
mov word [ebp - 0xc34], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc48]
mov word [ebp - 0xe88], cx
movzx edx, word [ebp - 0xe88]
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + str.command]
xor eax, edx
mov word [ebp - 0xc32], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc48]
mov word [ebp - 0xe8a], ax
movzx ecx, word [ebp - 0xe8a]
mov edx, 2
imul eax, edx, 0xb
movzx edx, word [eax + str.command]
xor edx, ecx
mov word [ebp - 0xc30], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc48]
mov word [ebp - 0xe8c], dx
movzx eax, word [ebp - 0xe8c]
mov ecx, 2
imul edx, ecx, 0xc
movzx ecx, word [edx + str.command]
xor ecx, eax
mov word [ebp - 0xc2e], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc48]
mov word [ebp - 0xe8e], cx
movzx edx, word [ebp - 0xe8e]
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + str.command]
xor eax, edx
mov word [ebp - 0xc2c], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc48]
mov word [ebp - 0xe90], ax
movzx ecx, word [ebp - 0xe90]
mov edx, 2
imul eax, edx, 0xe
movzx edx, word [eax + str.command]
xor edx, ecx
mov word [ebp - 0xc2a], dx
xor eax, eax
mov word [ebp - 0xc28], ax
lea ecx, [ebp - 0xc48]
call fcn.0044cda0
push eax
lea ecx, [ebp - 0x1024]
push ecx
call dword [ebp - 0xf5c]
mov dword [ebp - 0x101c], 0x18
mov edx, dword [ebp - 0xf2c]
mov dword [ebp - 0x1018], edx
mov dword [ebp - 0x1010], 0x40
lea eax, [ebp - 0x1024]
mov dword [ebp - 0x1014], eax
mov dword [ebp - 0x100c], 0
mov dword [ebp - 0x1008], 0
mov ecx, dword [0x481480]
mov dword [ebp - 0xf60], ecx
lea edx, [ebp - 0x1030]
push edx
push 3
push 0
push 0
lea eax, [ebp - 0x101c]
push eax
push 0xf003f
lea ecx, [ebp - 0xdcc]
push ecx
call dword [ebp - 0xf60]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0xc0000035
jne 0x444f53
mov edx, dword [ebp - 0x1010]
or edx, 0x100
mov dword [ebp - 0x1010], edx
mov eax, dword [0x48147c]
mov dword [ebp - 0xf64], eax
lea ecx, [ebp - 0x101c]
push ecx
push 0xf003f
lea edx, [ebp - 0xdcc]
push edx
call dword [ebp - 0xf64]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x444f61
jmp 0x445005
mov eax, dword [ebp - 0xe0c]
push eax
call fcn.0045a403
add esp, 4
shl eax, 1
mov dword [ebp - 0xed8], eax
mov ecx, dword [0x481478]
mov dword [ebp - 0xf68], ecx
movzx edx, word [ebp - 0xe10]
push edx
mov eax, dword [ebp - 0xe0c]
push eax
push 6
push 0
lea ecx, [ebp - 0x102c]
push ecx
mov edx, dword [ebp - 0xdcc]
push edx
call dword [ebp - 0xf68]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xdc4], 0
jge 0x444fbc
jmp 0x445005
mov eax, dword [0x481474]
mov dword [ebp - 0xf6c], eax
mov ecx, dword [ebp - 0xdcc]
push ecx
call dword [ebp - 0xf6c]
mov dword [ebp - 0xdcc], 0
push 0
mov edx, dword [ebp - 0xf70]
push edx
call fcn.0044a5b0
add esp, 8
test eax, eax
je 0x444ffd
mov dword [ebp - 0xf38], 0
xor eax, eax
jne 0x443b60
cmp dword [ebp - 0xdcc], 0
je 0x445027
mov ecx, dword [0x481474]
mov dword [ebp - 0xf74], ecx
mov edx, dword [ebp - 0xdcc]
push edx
call dword [ebp - 0xf74]
cmp dword [ebp - 0xe04], 0
je 0x44503f
mov eax, dword [ebp - 0xe04]
push eax
call fcn.00448570
add esp, 4
movzx ecx, byte [ebp - 0xdc5]
test ecx, ecx
je 0x44530e
cmp dword [ebp - 0xdd0], 0
je 0x44530e
mov byte [ebp - 0xa94], 0x42
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa94]
movsx edx, cl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.RegDeleteKeyW]
xor eax, edx
mov byte [ebp - 0xa93], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa94]
add eax, 1
movsx ecx, al
mov edx, 1
shl edx, 0
movsx eax, byte [edx + str.RegDeleteKeyW]
xor eax, ecx
mov byte [ebp - 0xa92], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa94]
add eax, 2
movsx ecx, al
mov edx, 1
shl edx, 1
movsx eax, byte [edx + str.RegDeleteKeyW]
xor eax, ecx
mov byte [ebp - 0xa91], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa94]
add eax, 3
movsx ecx, al
mov edx, 1
imul eax, edx, 3
movsx edx, byte [eax + str.RegDeleteKeyW]
xor edx, ecx
mov byte [ebp - 0xa90], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa94]
add edx, 4
movsx eax, dl
mov ecx, 1
shl ecx, 2
movsx edx, byte [ecx + str.RegDeleteKeyW]
xor edx, eax
mov byte [ebp - 0xa8f], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa94]
add edx, 5
movsx eax, dl
mov ecx, 1
imul edx, ecx, 5
movsx ecx, byte [edx + str.RegDeleteKeyW]
xor ecx, eax
mov byte [ebp - 0xa8e], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa94]
add ecx, 6
movsx edx, cl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.RegDeleteKeyW]
xor eax, edx
mov byte [ebp - 0xa8d], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa94]
add eax, 7
movsx ecx, al
mov edx, 1
imul eax, edx, 7
movsx edx, byte [eax + str.RegDeleteKeyW]
xor edx, ecx
mov byte [ebp - 0xa8c], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa94]
add edx, 8
movsx eax, dl
mov ecx, 1
shl ecx, 3
movsx edx, byte [ecx + str.RegDeleteKeyW]
xor edx, eax
mov byte [ebp - 0xa8b], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa94]
add edx, 9
movsx eax, dl
mov ecx, 1
imul edx, ecx, 9
movsx ecx, byte [edx + str.RegDeleteKeyW]
xor ecx, eax
mov byte [ebp - 0xa8a], cl
mov edx, 1
imul eax, edx, 0
movsx ecx, byte [ebp + eax - 0xa94]
add ecx, 0xa
movsx edx, cl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.RegDeleteKeyW]
xor eax, edx
mov byte [ebp - 0xa89], al
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0xa94]
add eax, 0xb
movsx ecx, al
mov edx, 1
imul eax, edx, 0xb
movsx edx, byte [eax + str.RegDeleteKeyW]
xor edx, ecx
mov byte [ebp - 0xa88], dl
mov eax, 1
imul ecx, eax, 0
movsx edx, byte [ebp + ecx - 0xa94]
add edx, 0xc
movsx eax, dl
mov ecx, 1
imul edx, ecx, 0xc
movsx ecx, byte [edx + str.RegDeleteKeyW]
xor ecx, eax
mov byte [ebp - 0xa87], cl
xor edx, edx
mov byte [ebp - 0xa86], dl
lea ecx, [ebp - 0xa94]
call fcn.0044c430
mov dword [ebp - 0xf94], eax
mov eax, dword [0x48145c]
mov dword [ebp - 0xf78], eax
mov ecx, dword [ebp - 0xf94]
push ecx
mov edx, dword [ebp - 0xf78]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xf7c], eax
mov eax, dword [ebp - 0xf7c]
mov dword [ebp - 0xf80], eax
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0xa38]
push edx
mov eax, dword [ebp - 0xdd0]
push eax
call dword [ebp - 0xf80]
cmp dword [ebp - 0xdd0], 0
je 0x445330
mov ecx, dword [0x481474]
mov dword [ebp - 0xf84], ecx
mov edx, dword [ebp - 0xdd0]
push edx
call dword [ebp - 0xf84]
cmp dword [ebp - 0xf88], 0
jl 0x4455f0
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xaa4], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 0
movsx ecx, byte [eax + str.CoUninitialize]
add ecx, edx
mov byte [ebp - 0xaa3], cl
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 1
movsx ecx, byte [eax + str.CoUninitialize]
add ecx, edx
mov byte [ebp - 0xaa2], cl
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 3
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xaa1], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 2
movsx ecx, byte [eax + str.CoUninitialize]
add ecx, edx
mov byte [ebp - 0xaa0], cl
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 5
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa9f], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa9e], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 7
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa9d], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
shl eax, 3
movsx ecx, byte [eax + str.CoUninitialize]
add ecx, edx
mov byte [ebp - 0xa9c], cl
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 9
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa9b], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xa
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa9a], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xb
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa99], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xc
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa98], al
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, 1
imul ecx, eax, 0xd
movsx eax, byte [ecx + str.CoUninitialize]
add eax, edx
mov byte [ebp - 0xa97], al
mov byte [ebp - 0xa96], 0
mov dword [ebp - 0xe08], 0
jmp 0x445580
mov ecx, dword [ebp - 0xe08]
add ecx, 1
mov dword [ebp - 0xe08], ecx
cmp dword [ebp - 0xe08], 0xe
jae 0x4455b8
mov eax, 0x5d
cdq
mov ecx, 0xd
idiv ecx
movsx edx, dl
mov eax, dword [ebp - 0xe08]
movsx ecx, byte [ebp + eax - 0xaa4]
sub ecx, edx
mov edx, dword [ebp - 0xe08]
mov byte [ebp + edx - 0xaa4], cl
jmp 0x445571
lea eax, [ebp - 0xaa4]
mov dword [ebp - 0xf8c], eax
mov ecx, dword [0x48143c]
mov dword [ebp - 0xf90], ecx
mov edx, dword [ebp - 0xf8c]
push edx
mov eax, dword [ebp - 0xf90]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfac], eax
call dword [ebp - 0xfac]
mov ecx, 2
imul edx, ecx, 0
mov eax, 0x5c
mov word [ebp + edx - 0x420], ax
mov dword [ebp - 0xf30], 2
cmp dword [ebp - 0xf30], 0x410
jae 0x44561d
jmp 0x445622
call fcn.004524ce
xor ecx, ecx
mov edx, dword [ebp - 0xf30]
mov word [ebp + edx - 0x420], cx
mov eax, 0xdda6
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd3c], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + 0x472410]
add ecx, edx
mov word [ebp - 0xd3a], cx
mov edx, 0xdda6
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + 0x472410]
add ecx, edx
mov word [ebp - 0xd38], cx
mov edx, 0xdda6
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd36], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x472410]
add ecx, edx
mov word [ebp - 0xd34], cx
mov edx, 0xdda6
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd32], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd30], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd2e], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x472410]
add ecx, edx
mov word [ebp - 0xd2c], cx
mov edx, 0xdda6
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd2a], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd28], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd26], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd24], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd22], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd20], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd1e], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + 0x472410]
add ecx, edx
mov word [ebp - 0xd1c], cx
mov edx, 0xdda6
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd1a], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd18], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd16], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd14], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd12], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd10], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x17
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd0e], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x18
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd0c], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd0a], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1a
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd08], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1b
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd06], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1c
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd04], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1d
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd02], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1e
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xd00], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x1f
movzx eax, word [ecx + 0x472410]
add eax, edx
mov word [ebp - 0xcfe], ax
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 5
movzx ecx, word [eax + 0x472410]
add ecx, edx
mov word [ebp - 0xcfc], cx
xor edx, edx
mov word [ebp - 0xcfa], dx
mov dword [ebp - 0xdec], 0
jmp 0x445be0
mov eax, dword [ebp - 0xdec]
add eax, 1
mov dword [ebp - 0xdec], eax
cmp dword [ebp - 0xdec], 0x21
jae 0x445c1c
mov ecx, 0xdda6
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdec]
movzx ecx, word [ebp + eax*2 - 0xd3c]
sub ecx, edx
mov edx, dword [ebp - 0xdec]
mov word [ebp + edx*2 - 0xd3c], cx
jmp 0x445bd1
lea eax, [ebp - 0xd3c]
push eax
mov ecx, 2
shl ecx, 0
lea edx, [ebp + ecx - 0x420]
push edx
call fcn.0045aa13
add esp, 8
push 0x472434
lea eax, [ebp - 0x420]
push eax
call fcn.0045a9e2
add esp, 8
mov ecx, dword [ebp - 0xf34]
push ecx
lea edx, [ebp - 0x420]
push edx
call fcn.0045a9e2
add esp, 8
mov eax, 0xd421
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcc4], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 0
movzx ecx, word [eax + 0x472438]
add ecx, edx
mov word [ebp - 0xcc2], cx
mov edx, 0xd421
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 1
movzx ecx, word [eax + 0x472438]
add ecx, edx
mov word [ebp - 0xcc0], cx
mov edx, 0xd421
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 3
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcbe], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x472438]
add ecx, edx
mov word [ebp - 0xcbc], cx
mov edx, 0xd421
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcba], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 6
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcb8], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 7
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcb6], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x472438]
add ecx, edx
mov word [ebp - 0xcb4], cx
mov edx, 0xd421
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcb2], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xa
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcb0], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xb
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcae], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcac], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xd
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xcaa], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xe
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xca8], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0xf
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xca6], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
shl eax, 4
movzx ecx, word [eax + 0x472438]
add ecx, edx
mov word [ebp - 0xca4], cx
mov edx, 0xd421
movzx eax, dx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x11
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xca2], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x12
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xca0], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x13
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xc9e], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x14
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xc9c], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x15
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xc9a], ax
mov ecx, 0xd421
movzx eax, cx
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, 2
imul ecx, eax, 0x16
movzx eax, word [ecx + 0x472438]
add eax, edx
mov word [ebp - 0xc98], ax
xor ecx, ecx
mov word [ebp - 0xc96], cx
mov dword [ebp - 0xdf0], 0
jmp 0x446065
mov edx, dword [ebp - 0xdf0]
add edx, 1
mov dword [ebp - 0xdf0], edx
cmp dword [ebp - 0xdf0], 0x17
jae 0x4460a1
mov eax, 0xd421
movzx eax, ax
cdq
mov ecx, 0xd
idiv ecx
movzx edx, dx
mov eax, dword [ebp - 0xdf0]
movzx ecx, word [ebp + eax*2 - 0xcc4]
sub ecx, edx
mov edx, dword [ebp - 0xdf0]
mov word [ebp + edx*2 - 0xcc4], cx
jmp 0x446056
lea eax, [ebp - 0xcc4]
push eax
lea ecx, [ebp - 0x420]
push ecx
call fcn.0045a9e2
add esp, 8
push 0x472450
lea edx, [ebp - 0x420]
push edx
call fcn.0045a9e2
add esp, 8
mov eax, 0x4f6e
mov word [ebp - 0xc6c], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc6c]
mov word [ebp - 0xe92], ax
movzx ecx, word [ebp - 0xe92]
mov edx, 2
imul eax, edx, 0
movzx edx, word [eax + 0x472454]
xor edx, ecx
mov word [ebp - 0xc6a], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc6c]
mov word [ebp - 0xe94], dx
movzx eax, word [ebp - 0xe94]
mov ecx, 2
shl ecx, 0
movzx edx, word [ecx + 0x472454]
xor edx, eax
mov word [ebp - 0xc68], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc6c]
mov word [ebp - 0xe96], dx
movzx eax, word [ebp - 0xe96]
mov ecx, 2
shl ecx, 1
movzx edx, word [ecx + 0x472454]
xor edx, eax
mov word [ebp - 0xc66], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc6c]
mov word [ebp - 0xe98], dx
movzx eax, word [ebp - 0xe98]
mov ecx, 2
imul edx, ecx, 3
movzx ecx, word [edx + 0x472454]
xor ecx, eax
mov word [ebp - 0xc64], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc6c]
mov word [ebp - 0xe9a], cx
movzx edx, word [ebp - 0xe9a]
mov eax, 2
shl eax, 2
movzx ecx, word [eax + 0x472454]
xor ecx, edx
mov word [ebp - 0xc62], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc6c]
mov word [ebp - 0xe9c], cx
movzx edx, word [ebp - 0xe9c]
mov eax, 2
imul ecx, eax, 5
movzx eax, word [ecx + 0x472454]
xor eax, edx
mov word [ebp - 0xc60], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc6c]
mov word [ebp - 0xe9e], ax
movzx ecx, word [ebp - 0xe9e]
mov edx, 2
imul eax, edx, 6
movzx edx, word [eax + 0x472454]
xor edx, ecx
mov word [ebp - 0xc5e], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc6c]
mov word [ebp - 0xea0], dx
movzx eax, word [ebp - 0xea0]
mov ecx, 2
imul edx, ecx, 7
movzx ecx, word [edx + 0x472454]
xor ecx, eax
mov word [ebp - 0xc5c], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc6c]
mov word [ebp - 0xea2], cx
movzx edx, word [ebp - 0xea2]
mov eax, 2
shl eax, 3
movzx ecx, word [eax + 0x472454]
xor ecx, edx
mov word [ebp - 0xc5a], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc6c]
mov word [ebp - 0xea4], cx
movzx edx, word [ebp - 0xea4]
mov eax, 2
imul ecx, eax, 9
movzx eax, word [ecx + 0x472454]
xor eax, edx
mov word [ebp - 0xc58], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc6c]
mov word [ebp - 0xea6], ax
movzx ecx, word [ebp - 0xea6]
mov edx, 2
imul eax, edx, 0xa
movzx edx, word [eax + 0x472454]
xor edx, ecx
mov word [ebp - 0xc56], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc6c]
mov word [ebp - 0xea8], dx
movzx eax, word [ebp - 0xea8]
mov ecx, 2
imul edx, ecx, 0xb
movzx ecx, word [edx + 0x472454]
xor ecx, eax
mov word [ebp - 0xc54], cx
mov edx, 2
imul eax, edx, 0
mov cx, word [ebp + eax - 0xc6c]
mov word [ebp - 0xeaa], cx
movzx edx, word [ebp - 0xeaa]
mov eax, 2
imul ecx, eax, 0xc
movzx eax, word [ecx + 0x472454]
xor eax, edx
mov word [ebp - 0xc52], ax
mov ecx, 2
imul edx, ecx, 0
mov ax, word [ebp + edx - 0xc6c]
mov word [ebp - 0xeac], ax
movzx ecx, word [ebp - 0xeac]
mov edx, 2
imul eax, edx, 0xd
movzx edx, word [eax + 0x472454]
xor edx, ecx
mov word [ebp - 0xc50], dx
mov eax, 2
imul ecx, eax, 0
mov dx, word [ebp + ecx - 0xc6c]
mov word [ebp - 0xeae], dx
movzx eax, word [ebp - 0xeae]
mov ecx, 2
imul edx, ecx, 0xe
movzx ecx, word [edx + 0x472454]
xor ecx, eax
mov word [ebp - 0xc4e], cx
xor edx, edx
mov word [ebp - 0xc4c], dx
lea ecx, [ebp - 0xc6c]
call fcn.0044cda0
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0045a9e2
add esp, 8
lea ecx, [ebp - 0x420]
push ecx
call fcn.00448f10
add esp, 4
push 0
call fcn.0044b930
add esp, 4
mov edx, dword [0x481458]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x48145c]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [0x48143c]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, dword [ebp - 0xf38]
mov dword [ebp - 0xf98], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdc0]
call fcn.0042d9e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda8]
call fcn.0042d9e0
mov eax, dword [ebp - 0xf98]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00451fec
mov esp, ebp
pop ebp
ret