Function at 0x401000
Capabilities:
Allocate thread local storage
Hide graphical window
Identify system language via api
Log keystrokes via polling
Query environment variable

Disassembly:
push 0x754
push 0
push 0x1812534
call fcn.00428100
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x1812538], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x1812534], eax
mov eax, 0x554cb4
mov dword [0x18125d8], eax
call fcn.00411d7d
call fcn.00470bd0
call fcn.0046fff7
call fcn.0046fad0
call fcn.0046e270
call fcn.0046c07a
call fcn.0046b790
call fcn.0046b064
call fcn.0046a57f
call fcn.00469420
call fcn.00460a04
call fcn.00460768
call fcn.0045ec70
call fcn.0045e67c
call fcn.0045e012
call fcn.0045cd30
call fcn.0045bcb1
call fcn.0045a58a
call fcn.00458b47
call fcn.00458825
call fcn.00454a16
call fcn.004533fc
call fcn.004528af
call fcn.00451a3f
call fcn.00450ed9
call fcn.004359c0
call fcn.0043570a
call fcn.004349a0
mov edx, 0x5522aa
lea ecx, [0x1812744]
call fcn.00411008
mov edx, 0x5531ba
lea ecx, [0x1812580]
call fcn.00411008
mov dword [0x1812604], 0
mov dword [0x1812638], 0
mov dword [0x18125ec], 0
mov dword [0x18126c8], 0x3e3
mov dword [0x18126c0], 0
mov dword [0x1812760], 0xffffffff
mov dword [0x1812768], 0xffffffff
mov dword [0x1812550], 0xffffffff
mov dword [0x1812554], 0xffffffff
mov dword [0x181272c], 0
push 0x14
push 0x3c
push 0xffffffff
call fcn.004695f6
mov dword [0x1812590], eax
call fcn.00407131
call fcn.004539ec
mov ebp, 0x180b613
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x181258c], eax
mov ebp, 0x180b760
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812594], eax
mov ebp, 0x180baa3
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812598], eax
mov ebp, 0x180be23
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x181259c], eax
mov ebp, 0x180c2eb
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125a0], eax
mov ebp, 0x180c68c
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125a4], eax
mov ebp, 0x180ca16
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125a8], eax
mov ebp, 0x180cfbd
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125ac], eax
mov ebp, 0x180d503
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125b0], eax
mov ebp, 0x180d5ab
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125b4], eax
mov ebp, 0x70de9e
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812588], eax
mov ebp, 0x70df3f
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125e4], eax
mov ebp, 0x70e12e
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125e0], eax
mov ebp, 0x180d79a
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812618], eax
mov ebp, 0x180da78
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812660], eax
mov ebp, 0x610bda
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812770], eax
mov ebp, 0x610e35
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125bc], eax
mov ebp, 0x6117b3
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125c4], eax
mov ebp, 0x6119b5
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x181260c], eax
mov ebp, 0x611081
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125e8], eax
mov ebp, 0x611423
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812648], eax
mov ebp, 0x611bcd
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812750], eax
push dword [0x1812770]
call fcn.00405d35
push dword [0x18125bc]
call fcn.00405d35
push dword [0x18125c4]
call fcn.00405d35
push dword [0x181260c]
call fcn.00405d35
push dword [0x18125e8]
call fcn.00405d35
push dword [0x1812648]
call fcn.00405d35
push dword [0x1812750]
call fcn.00405d35
push dword [0x1812618]
call fcn.00405d35
push dword [0x1812660]
call fcn.00405d35
mov dword [0x18126b8], 0
mov dword [0x18126b0], 0
mov edx, 0x550028
lea ecx, [0x18126d4]
call fcn.00411008
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0x64
call fcn.0046e560
lea eax, [0x1812540]
push eax
call fcn.00470c30
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0xc8
call fcn.0046e560
lea eax, [0x18126d8]
push eax
call fcn.00470c30
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0xc8
call fcn.0046e560
lea eax, [0x1812754]
push eax
call fcn.00470c30
push 0xc8
mov eax, dword [0x18126d8]
push eax
mov eax, 0x55492e
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x1812754]
push eax
mov eax, 0x552792
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x1812540]
push eax
mov eax, 0x551a3c
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov edx, 0x550028
lea ecx, [0x1812738]
call fcn.00411008
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0x3e8
call fcn.0046e560
lea eax, [0x181256c]
push eax
call fcn.00470c30
push 0x3e8
mov eax, dword [0x181256c]
push eax
mov eax, 0x55313c
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c0d4
lea eax, [0x1812568]
push eax
call fcn.00470c30
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.0045c15d
lea eax, [0x1812730]
push eax
call fcn.00470c30
mov edx, 0x550028
lea ecx, [0x1812630]
call fcn.00411008
push dword [0x18126d8]
mov edx, 0x550dc8
pop ecx
call fcn.00411b60
jne 0x401568
push dword [0x1812754]
mov edx, 0x550dc8
pop ecx
call fcn.00411b60
jne 0x401568
jmp 0x40156f
mov eax, 1
jmp 0x401571
xor eax, eax
and eax, eax
je 0x401587
mov edx, 0x55257a
lea ecx, [0x18126d4]
call fcn.00411008
jmp 0x401597
mov edx, 0x55317e
lea ecx, [0x18126d4]
call fcn.00411008
call fcn.0045110e
mov ebx, eax
dec ebx
mov dword [0x18125b8], ebx
mov ebx, dword [0x18125b8]
and ebx, ebx
jl 0x401667
mov dword [0x18126bc], 0
jmp 0x4015bf
mov eax, dword [0x18125b8]
cmp eax, dword [0x18126bc]
jl 0x401667
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x18126bc]
call fcn.00451122
call fcn.00411b42
add dword [esp], edx
call fcn.0046e5b0
lea eax, [0x18126dc]
push eax
call fcn.00470c30
push dword [0x18126dc]
mov edx, 0x5519de
mov ecx, dword [esp]
call fcn.00411b60
je 0x40163b
mov edx, 0x552f8e
lea ecx, [0x1812630]
call fcn.00411008
jmp 0x40165a
mov edx, 0x552588
mov ecx, dword [esp]
call fcn.00411b60
je 0x40165a
mov edx, 0x552720
lea ecx, [0x1812630]
call fcn.00411008
pop eax
inc dword [0x18126bc]
jno 0x4015bf
push 0x100
push 1
call fcn.00410ade
push dword [0x1812630]
mov edx, 0x550028
pop ecx
call fcn.00411b60
je 0x4016b2
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call sub.KERNEL32.dll_GetUserDefaultLangID
cdq
push edx
push eax
call fcn.0046e620
lea eax, [0x1812630]
push eax
call fcn.00470c30
push dword [0x1812630]
mov edx, 0x551e44
pop ecx
call fcn.00411b60
je 0x4016d7
mov edx, 0x551b22
lea ecx, [0x1812630]
call fcn.00411008
jmp 0x40170c
push dword [0x1812630]
mov edx, 0x5522c0
pop ecx
call fcn.00411b60
je 0x4016fc
mov edx, 0x550b40
lea ecx, [0x1812630]
call fcn.00411008
jmp 0x40170c
mov edx, 0x551b22
lea ecx, [0x1812630]
call fcn.00411008
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c28d
call fcn.00470ca0
push 1
push 0
push dword [0x1812734]
call fcn.00411b42
add dword [esp + 0xc], edx
call sub.KERNEL32.dll_CreateSemaphoreW
call fcn.00411ba0
mov dword [0x181255c], eax
mov ebx, dword [0x181255c]
and ebx, ebx
je 0x401793
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
cmp ebx, 0xb7
jne 0x401793
mov eax, 1
jmp 0x401795
xor eax, eax
and eax, eax
je 0x4017a9
push dword [0x181255c]
call sub.KERNEL32.dll_CloseHandle
jmp 0x404150
mov dword [0x1812678], 0
mov edx, 0x550028
lea ecx, [0x181273c]
call fcn.00411008
push 0x100
push 0
call fcn.00410ade
push edx
call fcn.00470c00
pop edx
push eax
mov eax, 0x55039e
push eax
mov eax, 0x550dfe
push eax
mov eax, 0x550e5c
push eax
call fcn.0040beea
lea eax, [0x18126b4]
push eax
call fcn.00470c30
mov eax, 0x55039e
push eax
push dword [0x18126b4]
call fcn.0046e8e0
mov dword [0x1812728], eax
mov ebx, dword [0x1812728]
cmp ebx, 1
jge 0x401820
jmp 0x401854
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
mov ebx, dword [0x1812728]
dec ebx
push ebx
push 1
push dword [0x18126b4]
call fcn.0046e920
lea eax, [0x18126b4]
push eax
call fcn.00470c30
push dword [0x18126b4]
call fcn.0046e9b0
mov dword [0x1812544], eax
mov ebx, dword [0x1812544]
cmp ebx, 0x2710
jle 0x40187c
mov dword [0x1812678], 1
mov ebx, dword [0x1812544]
cmp ebx, 0x2580
jl 0x40189f
mov edx, 0x554860
lea ecx, [0x181273c]
call fcn.00411008
jmp 0x401963
mov ebx, dword [0x1812544]
cmp ebx, 0x23f0
jl 0x4018c2
mov ebx, dword [0x1812544]
cmp ebx, 0x2454
jge 0x4018c2
mov eax, 1
jmp 0x4018c4
xor eax, eax
and eax, eax
je 0x4018dd
mov edx, 0x550436
lea ecx, [0x181273c]
call fcn.00411008
jmp 0x401963
mov ebx, dword [0x1812544]
cmp ebx, 0x1db0
jl 0x401900
mov ebx, dword [0x1812544]
cmp ebx, 0x1e14
jge 0x401900
mov eax, 1
jmp 0x401902
xor eax, eax
and eax, eax
je 0x401918
mov edx, 0x550432
lea ecx, [0x181273c]
call fcn.00411008
jmp 0x401963
mov ebx, dword [0x1812544]
cmp ebx, 0xa28
jl 0x40193b
mov ebx, dword [0x1812544]
cmp ebx, 0xbb8
jge 0x40193b
mov eax, 1
jmp 0x40193d
xor eax, eax
and eax, eax
je 0x401953
mov edx, 0x552582
lea ecx, [0x181273c]
call fcn.00411008
jmp 0x401963
mov edx, 0x554860
lea ecx, [0x181273c]
call fcn.00411008
mov ebx, dword [0x1812604]
cmp ebx, 7
jne 0x40198a
mov edx, 0x550432
lea ecx, [0x181273c]
call fcn.00411008
mov dword [0x1812678], 0
jmp 0x4019af
mov ebx, dword [0x1812604]
cmp ebx, 0xa
jne 0x4019af
mov edx, 0x554860
lea ecx, [0x181273c]
call fcn.00411008
mov dword [0x1812678], 1
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x55445e
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4019fc
jl 0x4019f8
cmp ebx, 0
ja 0x4019fc
xor eax, eax
jmp 0x401a01
mov eax, 1
or eax, eax
je 0x401a32
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x550f02
push edx
call fcn.00470cc0
lea eax, [0x1812738]
push eax
call fcn.00470c30
jmp 0x401a5d
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x55248a
push edx
call fcn.00470cc0
lea eax, [0x1812738]
push eax
call fcn.00470c30
push 7
push 0x554c74
lea eax, [0x1812c20]
push eax
push 0x3c
call fcn.0046a59e
push 7
push 0x554c74
lea eax, [0x1812c28]
push eax
push 0x3c
call fcn.0046a59e
mov dword [0x181274c], 0
call fcn.004539ec
mov dword [0x1812614], 0xa
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x553a20
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x553a20
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x553a20
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x553f04
lea ecx, [ebp + 0x18]
call fcn.00411008
mov edx, 0x5547aa
lea ecx, [ebp + 0x1c]
call fcn.00411008
mov ebp, 0x6d10ee
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x553898
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x553898
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x5513a4
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x55224e
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x67eaf2
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
mov ebx, dword [0x1812678]
and ebx, ebx
jle 0x401c61
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x550332
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x550be6
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x552fe2
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x553742
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x67eaf2
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
jmp 0x401c61
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x55302a
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x550140
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x550f36
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x55379e
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x61cd22
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x551060
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x551060
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x5535d8
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x554850
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x61cd22
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x550b54
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x550b54
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x550b54
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x553ef4
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x66fa54
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x554b3c
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x5538c0
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x5538c0
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x550480
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x6e192c
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
push edx
call fcn.00470c00
pop edx
push eax
mov eax, 0x550028
push eax
mov eax, 0x55084e
push eax
call fcn.00406174
call fcn.00411ba0
call fcn.004539ec
mov ebp, 0x5a3c61
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125dc], eax
push dword [0x181258c]
call fcn.00405d35
push dword [0x1812594]
call fcn.00405d35
push dword [0x1812598]
call fcn.00405d35
push dword [0x18125a4]
call fcn.00405d35
push dword [0x18125a8]
call fcn.00405d35
call fcn.0045ecdf
mov edx, 0x5549aa
lea ecx, [0x1812624]
call fcn.00411008
mov ebx, dword [0x1812760]
cmp ebx, 0xffffffff
je 0x401f22
mov ebx, dword [0x1812768]
cmp ebx, 0xffffffff
je 0x401f22
mov eax, 1
jmp 0x401f24
xor eax, eax
and eax, eax
je 0x401f64
mov ebx, dword [0x1812550]
push 0
call fcn.0045ef66
cmp ebx, eax
jne 0x401f57
mov ebx, dword [0x1812554]
push 0
call fcn.0045ef89
cmp ebx, eax
jne 0x401f57
mov eax, 1
jmp 0x401f59
xor eax, eax
and eax, eax
je 0x401f64
mov eax, 1
jmp 0x401f66
xor eax, eax
and eax, eax
je 0x401f9d
push 0
push dword [0x1812624]
push dword [0x18125dc]
push 0x1c7
push 0x27d
push dword [0x1812768]
push dword [0x1812760]
call fcn.00405426
mov dword [0x1812724], eax
jmp 0x401fcf
mov eax, 1
push eax
push dword [0x1812624]
push dword [0x18125dc]
push 0x1c7
push 0x27d
push dword [0x1812768]
push dword [0x1812760]
call fcn.00405426
mov dword [0x1812724], eax
mov eax, 0x552058
push eax
call sub.USER32.dll_RegisterWindowMessageW
mov dword [0x1812644], eax
push dword [0x1812724]
lea eax, [0x406fd5]
push eax
call fcn.00458bb2
push 0x55
push 0x43
push 0x34
push 0x43
push 0xffffffff
call fcn.00455b10
mov dword [0x1812658], eax
push 1
push dword [0x1812658]
call fcn.00455d4e
push 0
push 0
push 0
call fcn.00460a10
push eax
push dword [0x1812724]
call fcn.00458c18
push dword [0x18126c8]
push 4
push dword [0x1812724]
call fcn.00458c75
push dword [0x181273c]
mov edx, 0x552582
pop ecx
call fcn.00411b60
je 0x402096
mov ebp, 0x60e561
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1812724]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
jmp 0x4020bd
mov ebp, 0x5f48dd
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1812724]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1812624]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x5502ee
push edx
call fcn.00470cc0
mov edx, dword [0x1812744]
push edx
call fcn.00470cc0
call fcn.00470ca0
push 0
call fcn.00411b42
add dword [esp + 4], edx
call fcn.0045bf81
call fcn.00411ba0
mov ebp, 0x610b1f
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812740], eax
mov ebp, 0x610b7d
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812780], eax
push dword [0x1812740]
call fcn.00405d35
push dword [0x1812780]
call fcn.00405d35
mov dword [0x1812670], 8
push dword [0x1812670]
mov eax, 0x5504d6
push eax
push 0
call fcn.004700f4
and eax, eax
je 0x402175
xor eax, eax
jmp 0x40217a
mov eax, 1
and eax, eax
je 0x402199
push 0
mov eax, 0x553d90
push eax
mov eax, 0x5546f2
push eax
call fcn.00435741
jmp 0x404150
push 0x100
push dword [0x1812670]
mov eax, 0x5504d6
push eax
push 1
call fcn.00470044
and eax, eax
je 0x4021bc
xor eax, eax
jmp 0x4021c1
mov eax, 1
and eax, eax
je 0x4021e0
push 0
mov eax, 0x553d90
push eax
mov eax, 0x5546f2
push eax
call fcn.00435741
jmp 0x404150
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1812568]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x5537dc
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40222d
jl 0x402229
cmp ebx, 0
ja 0x40222d
xor eax, eax
jmp 0x402232
mov eax, 1
or eax, eax
jne 0x40228e
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1812568]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x55269a
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402283
jl 0x40227f
cmp ebx, 0
ja 0x402283
xor eax, eax
jmp 0x402288
mov eax, 1
or eax, eax
jne 0x40228e
jmp 0x402295
mov eax, 1
jmp 0x402297
xor eax, eax
and eax, eax
je 0x402327
push dword [0x1812c28]
call fcn.0046a630
mov ebp, dword [0x1812c2c]
mov edx, 0x55005a
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x55005a
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x55005a
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55426c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x5536a8
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x64e9d8
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x20]
push dword [0x1812614]
pop dword [ebp + 0x40]
mov ebx, dword [0x1812614]
inc ebx
mov dword [0x1812614], ebx
mov dword [0x18125c8], 0
mov dword [0x1812564], 0
mov dword [0x1812718], 0
mov dword [0x181257c], 0xa
mov dword [0x1812610], 0x4e
mov dword [0x18125c0], 0x1c
mov dword [0x1812570], 0
push dword [0x1812c28]
call fcn.0046a6ce
push dword [0x1812c28]
call fcn.0046a6e3
or eax, eax
je 0x402565
mov ebx, dword [0x1812570]
cmp ebx, dword [0x181257c]
jne 0x4023b9
push dword [0x1812610]
pop dword [0x1812718]
mov dword [0x1812610], 0x4e
mov dword [0x1812564], 1
push 1
mov ebp, dword [0x1812c2c]
push dword [ebp + 8]
push dword [0x18125b0]
push 0x17
push 0xaa
push dword [0x1812610]
push 0xeb
call fcn.0040631a
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x24]
push 1
push 0x550028
push dword [0x181258c]
push 0x17
push 0x17
push dword [0x1812610]
push 0x19e
call fcn.0040631a
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x28]
push 1
push 0x550028
push dword [0x1812594]
push 0x17
push 0x17
push dword [0x1812610]
push 0x1bc
call fcn.0040631a
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x2c]
push 1
push 0x550028
push dword [0x1812598]
push 0x17
push 0x17
push dword [0x1812610]
push 0x1e4
call fcn.0040631a
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x30]
push 1
push 0x550028
push dword [0x18125a4]
push 0x17
push 0x17
push dword [0x1812610]
push 0x220
call fcn.0040631a
push eax
mov ebp, dword [0x1812c2c]
pop dword [ebp + 0x34]
mov ebx, dword [0x1812564]
and ebx, ebx
jne 0x4024e7
push dword [0x1812610]
mov ebp, dword [0x1812c2c]
push dword [ebp + 0x18]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00407eca
jmp 0x402541
push 1
mov ebp, dword [0x1812c2c]
push dword [ebp + 0x24]
call fcn.0040612b
push 1
mov ebp, dword [0x1812c2c]
push dword [ebp + 0x24]
call fcn.00455d8d
push 1
push dword [ebp + 0x28]
call fcn.00455d8d
push 1
push dword [ebp + 0x2c]
call fcn.00455d8d
push 1
push dword [ebp + 0x30]
call fcn.00455d8d
push 1
push dword [ebp + 0x34]
call fcn.00455d8d
mov ebx, dword [0x1812570]
inc ebx
mov dword [0x1812570], ebx
mov ebx, dword [0x1812610]
add ebx, dword [0x18125c0]
mov dword [0x1812610], ebx
jmp 0x402378
push 1
push 0x550028
push dword [0x1812598]
push 0x17
push 0x17
push 0x14a
push 0x82
call fcn.0040631a
mov dword [0x1812634], eax
jmp 0x4027e2
mov ebp, 0x63dd9e
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x18126ac], eax
mov ebp, 0x63e19a
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x18126a8], eax
mov ebp, 0x6e484a
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x1812608], eax
mov ebp, 0x68f330
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x18125f4], eax
mov ebp, 0x6a8fb4
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x1812558], eax
push 0
call fcn.0045b844
and eax, eax
je 0x402bd6
push dword [0x1812630]
mov edx, 0x550b40
pop ecx
call fcn.00411b60
je 0x40298c
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x55331e
push eax
call fcn.0045b8d0
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x55331e
push eax
push 0x33
call fcn.0045b9ab
push dword [0x1812608]
mov eax, 0x551380
push eax
push 0x32
call fcn.0045b9ab
push 0x5a
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x5545c0
push eax
push 0x31
call fcn.0045b9ab
push 0x58
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x554a1e
push eax
push 0x2f
call fcn.0045b9ab
push 0xa2
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x550cea
push eax
push 0x2e
call fcn.0045b9ab
push 0xa6
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x552270
push eax
push 0x30
call fcn.0045b9ab
jmp 0x402a81
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x552d6e
push eax
call fcn.0045b8d0
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x552d6e
push eax
push 0x33
call fcn.0045b9ab
push dword [0x1812608]
mov eax, 0x551362
push eax
push 0x32
call fcn.0045b9ab
push 0x5a
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x554110
push eax
push 0x31
call fcn.0045b9ab
push 0x58
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x550084
push eax
push 0x2f
call fcn.0045b9ab
push 0xa2
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x551270
push eax
push 0x2e
call fcn.0045b9ab
push 0xa6
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x551b02
push eax
push 0x30
call fcn.0045b9ab
call fcn.0045ba5b
call fcn.0045ba7f
push dword [0x1812c28]
call fcn.0046a71e
mov ebx, eax
cmp ebx, dword [0x181257c]
jl 0x402b10
push dword [0x1812630]
mov edx, 0x550b40
pop ecx
call fcn.00411b60
je 0x402ac0
mov eax, 0x554b20
push eax
call fcn.0045b99d
jmp 0x402acb
mov eax, 0x554a04
push eax
call fcn.0045b99d
push dword [0x1812c28]
call fcn.0046a6ce
push dword [0x1812c28]
call fcn.0046a6e3
or eax, eax
je 0x402b10
push dword [0x1812c28]
call fcn.0046a731
mov ebx, eax
cmp ebx, dword [0x181257c]
jl 0x402b0e
mov ebp, dword [0x1812c2c]
push dword [ebp + 0x20]
push dword [ebp + 8]
push dword [ebp + 0x40]
call fcn.0045b9ab
jmp 0x402ad6
call fcn.0045ba5b
push dword [0x1812c28]
call fcn.0046a6ce
push dword [0x1812c28]
call fcn.0046a6e3
or eax, eax
je 0x402b5a
push dword [0x1812c28]
call fcn.0046a731
mov ebx, eax
cmp ebx, dword [0x181257c]
jge 0x402b58
mov ebp, dword [0x1812c2c]
push dword [ebp + 0x20]
push dword [ebp + 8]
push dword [ebp + 0x40]
call fcn.0045b9ab
jmp 0x402b20
call fcn.0045ba7f
push dword [0x1812630]
mov edx, 0x550b40
pop ecx
call fcn.00411b60
je 0x402ba5
push dword [0x18125f4]
mov eax, 0x55349a
push eax
push 1
call fcn.0045b9ab
call fcn.0045ba7f
push dword [0x18126ac]
mov eax, 0x551f48
push eax
push 3
call fcn.0045b9ab
jmp 0x402bd6
push dword [0x18125f4]
mov eax, 0x553e18
push eax
push 1
call fcn.0045b9ab
call fcn.0045ba7f
push dword [0x18126ac]
mov eax, 0x5527c0
push eax
push 3
call fcn.0045b9ab
mov ebx, dword [0x1812564]
and ebx, ebx
jle 0x402c76
push dword [0x18125e4]
call fcn.004697a9
push eax
call fcn.0045efac
push eax
push dword [0x18125e4]
call fcn.004697c7
push eax
call fcn.0045efd0
push eax
push dword [0x18125e4]
call fcn.0046987b
push dword [0x18125e0]
call fcn.004697a9
push eax
call fcn.0045efac
push eax
push dword [0x18125e0]
call fcn.004697c7
push eax
call fcn.0045efd0
push eax
push dword [0x18125e0]
call fcn.0046987b
push dword [0x18125e4]
call fcn.0046978d
push eax
push 0x14
push 0x14
mov ebx, dword [0x1812718]
add ebx, 0xfffffffd
push ebx
push 0x19e
push 0xffffffff
call fcn.00456350
mov dword [0x1812748], eax
push 1
mov eax, 0x550028
push eax
push dword [0x18125a0]
push 0x14
push 0x19
push 0xe
push 0x206
call fcn.0040631a
mov dword [0x18126e8], eax
mov eax, 0x550028
push eax
push 0xe
push 0xe
push 0x52
push 0xd4
push 0xffffffff
call fcn.0045661a
mov dword [0x1812650], eax
push 0
push 0x28
push 0x134
push 0x54
push 0xeb
push 0xffffffff
call fcn.00456350
mov dword [0x1812548], eax
mov eax, 0x550028
push eax
push 0xe
push 0xe
push 0x6e
push 0xd4
push 0xffffffff
call fcn.0045661a
mov dword [0x1812654], eax
push 0
push 0x28
push 0x134
push 0x70
push 0xeb
push 0xffffffff
call fcn.00456350
mov dword [0x181254c], eax
push 1
push 0x550028
push dword [0x18125a4]
push 0x17
push 0x17
push 0x14a
push 0x46
call fcn.0040631a
mov dword [0x1812668], eax
mov edx, 0x550028
lea ecx, [0x18125f0]
call fcn.00411008
push dword [0x1812630]
mov edx, 0x550b40
pop ecx
call fcn.00411b60
je 0x402df8
push 0
mov eax, 0x55044e
push eax
push dword [0x1812588]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040631a
mov dword [0x1812628], eax
push 0
mov eax, 0x550a52
push eax
push dword [0x18125b0]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040631a
mov dword [0x18126cc], eax
jmp 0x402e56
push 0
mov eax, 0x550a9c
push eax
push dword [0x1812588]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040631a
mov dword [0x1812628], eax
push 0
mov eax, 0x554652
push eax
push dword [0x18125b0]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040631a
mov dword [0x18126cc], eax
mov edx, 0x550028
lea ecx, [0x181271c]
call fcn.00411008
push 9
mov eax, 0x5504d6
push eax
push 0xffffffff
call fcn.004700f4
mov dword [0x18126c4], eax
push 0x14
push 0xb4
push 0xffffffff
call fcn.004695f6
mov dword [0x1812710], eax
push 0x14
push 0xb4
push 0xffffffff
call fcn.004695f6
mov dword [0x181267c], eax
push dword [0x1812710]
call fcn.00405d35
push dword [0x181267c]
call fcn.00405d35
push 0x12
push 0x64
push 0x23
call fcn.0045efac
push eax
push dword [0x18125dc]
call fcn.004697c7
mov ebx, eax
add ebx, 0xffffff9c
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
push dword [0x18125dc]
call fcn.00469891
mov dword [0x1812720], eax
push 0x12
push 0x64
push 0x23
call fcn.0045efac
push eax
push dword [0x18125dc]
call fcn.004697c7
mov ebx, eax
add ebx, 0xffffff9c
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
push dword [0x18125dc]
call fcn.00469891
mov dword [0x1812708], eax
push dword [0x1812720]
call fcn.00405d35
push dword [0x1812708]
call fcn.00405d35
mov edx, dword [0x1812744]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, dword [0x181271c]
push edx
call fcn.00470cc0
mov edx, 0x55264a
push edx
call fcn.00470cc0
lea eax, [0x1812714]
push eax
call fcn.00470c30
push dword [0x1812710]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x403087
push 1
call fcn.00460ab2
push dword [0x18126c4]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x1812714]
call fcn.00460ae0
fistp dword [0x181275c]
push dword [0x1812714]
call fcn.00460af7
fistp dword [0x1812758]
push 0x40
push pe_nt_image_headers32
push 0xff
call fcn.00460a10
mov dword [0x18126a4], eax
push 5
push 5
call fcn.00460b0e
mov dword [0x1812560], eax
push dword [0x1812560]
push dword [0x18126a4]
push dword [0x1812714]
push 2
call fcn.0045efac
mov dword [esp - 4], eax
fild dword [esp - 4]
sub esp, 8
fstp qword [esp]
push dword [0x1812710]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x181275c]
fadd qword [0x554c44]
fdiv qword [0x554c4c]
sub esp, 8
fstp qword [esp]
call fcn.00460b37
fstp st(0)
call fcn.00460bd8
push dword [0x181267c]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x40316b
push 1
call fcn.00460ab2
push dword [0x18126c4]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x1812714]
call fcn.00460ae0
fistp dword [0x181275c]
push dword [0x1812714]
call fcn.00460af7
fistp dword [0x1812758]
push 0xfa
push 0xfa
push 0xfa
call fcn.00460a10
mov dword [0x18126a4], eax
push 5
push 5
call fcn.00460b0e
mov dword [0x1812560], eax
push dword [0x1812560]
push dword [0x18126a4]
push dword [0x1812714]
push 2
call fcn.0045efac
mov dword [esp - 4], eax
fild dword [esp - 4]
sub esp, 8
fstp qword [esp]
push dword [0x1812710]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x181275c]
fadd qword [0x554c44]
fdiv qword [0x554c4c]
sub esp, 8
fstp qword [esp]
call fcn.00460b37
fstp st(0)
call fcn.00460bd8
mov edx, 0x551b6e
lea ecx, [0x1812714]
call fcn.00411008
push dword [0x1812720]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x403239
push 1
call fcn.00460ab2
push dword [0x18126c4]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x1812714]
call fcn.00460ae0
fistp dword [0x181275c]
push dword [0x1812714]
call fcn.00460af7
fistp dword [0x1812758]
push 0x96
push 0xdc
push 0x96
call fcn.00460a10
mov dword [0x18126a4], eax
push dword [0x18126a4]
push dword [0x1812714]
fld qword [0x554c44]
sub esp, 8
fstp qword [esp]
push dword [0x1812720]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x181275c]
fadd qword [0x554c44]
fdiv qword [0x554c4c]
sub esp, 8
fstp qword [esp]
call fcn.00460c20
fstp st(0)
call fcn.00460bd8
push dword [0x1812708]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x4032f7
push 1
call fcn.00460ab2
push dword [0x18126c4]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x1812714]
call fcn.00460ae0
fistp dword [0x181275c]
push dword [0x1812714]
call fcn.00460af7
fistp dword [0x1812758]
push 0xfa
push 0xfa
push 0xfa
call fcn.00460a10
mov dword [0x18126a4], eax
push dword [0x18126a4]
push dword [0x1812714]
fld qword [0x554c44]
sub esp, 8
fstp qword [esp]
push dword [0x1812708]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x181275c]
fadd qword [0x554c44]
fdiv qword [0x554c4c]
sub esp, 8
fstp qword [esp]
call fcn.00460c20
fstp st(0)
call fcn.00460bd8
push dword [0x1812710]
call fcn.0046978d
push eax
push 0x14
push 0xb4
push 0x1a0
push 0x5f
push 0xffffffff
call fcn.00456350
mov dword [0x1812584], eax
push dword [0x1812720]
call fcn.0046978d
push eax
push 0x12
push dword [0x181275c]
push 0x23
push dword [0x18125dc]
call fcn.004697c7
push eax
call fcn.0045eff4
mov ebx, eax
push dword [0x1812720]
call fcn.004697c7
push eax
call fcn.0045eff4
sub ebx, eax
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
call fcn.00456350
mov dword [0x1812620], eax
push dword [0x18125a8]
call fcn.0046978d
push eax
push 0x23
push 0x1a
push 0x194
push 0x3a
push 0xffffffff
call fcn.00456350
mov dword [0x1812600], eax
push dword [0x1812618]
call fcn.0046978d
push eax
push 0x23
push 0x1a
push 0x19c
push 0x235
push 0xffffffff
call fcn.00456350
mov dword [0x1812764], eax
push dword [0x1812630]
mov edx, 0x550b40
pop ecx
call fcn.00411b60
je 0x403408
mov eax, 0x551b92
push eax
push dword [0x1812764]
call fcn.0045667d
jmp 0x403419
mov eax, 0x552676
push eax
push dword [0x1812764]
call fcn.0045667d
mov ebx, dword [0x18126c0]
and ebx, ebx
jne 0x403483
push 1
mov eax, 0x550028
push eax
push dword [0x181259c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.0040631a
mov dword [0x181269c], eax
push 1
mov eax, 0x550028
push eax
push dword [0x18125ac]
push 0x14
push 0x22
push 0xe
push 0x22b
call fcn.0040631a
mov dword [0x18125cc], eax
jmp 0x4034f1
push 1
mov eax, 0x550028
push eax
push dword [0x181259c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.0040631a
mov dword [0x181269c], eax
push 1
push dword [0x181269c]
call fcn.00455d4e
push 1
mov eax, 0x550028
push eax
push dword [0x18125ac]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.0040631a
mov dword [0x18125cc], eax
push dword [0x1812630]
mov edx, 0x550b40
pop ecx
call fcn.00411b60
je 0x403546
push 0
mov eax, 0x553476
push eax
push dword [0x18125b0]
push 0x17
push 0xaa
push 0x14a
push 0x18c
call fcn.0040631a
mov dword [0x181276c], eax
mov eax, 0x553cb0
push eax
push dword [0x1812634]
call fcn.0045667d
jmp 0x403586
push 0
mov eax, 0x55428e
push eax
push dword [0x18125b0]
push 0x17
push 0xaa
push 0x14a
push 0x18c
call fcn.0040631a
mov dword [0x181276c], eax
mov eax, 0x55165c
push eax
push dword [0x1812634]
call fcn.0045667d
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x1a
push 0x60
push 0xffffffff
call fcn.00456350
mov dword [0x18126e0], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x23
push 0x84
push 0xffffffff
call fcn.00456350
mov dword [0x18126e4], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x3e
push 0x9b
push 0xffffffff
call fcn.00456350
mov dword [0x18126ec], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x5d
push 0xa2
push 0xffffffff
call fcn.00456350
mov dword [0x18126f0], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x7d
push 0x9a
push 0xffffffff
call fcn.00456350
mov dword [0x18126f4], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x96
push 0x81
push 0xffffffff
call fcn.00456350
mov dword [0x18126f8], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0xa0
push 0x5f
push 0xffffffff
call fcn.00456350
mov dword [0x18126fc], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x96
push 0x3e
push 0xffffffff
call fcn.00456350
mov dword [0x1812700], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x7d
push 0x24
push 0xffffffff
call fcn.00456350
mov dword [0x1812704], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x5d
push 0x1c
push 0xffffffff
call fcn.00456350
mov dword [0x181270c], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x3e
push 0x24
push 0xffffffff
call fcn.00456350
mov dword [0x1812680], eax
push dword [0x1812780]
call fcn.0046978d
push eax
push 6
push 6
push 0x24
push 0x3d
push 0xffffffff
call fcn.00456350
mov dword [0x1812684], eax
mov ebp, 0x6e4cd4
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812688], eax
mov ebp, 0x6e52b2
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x181268c], eax
mov ebp, 0x6e5947
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812690], eax
mov ebp, 0x6e5d3e
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812694], eax
mov ebp, 0x6e8220
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1812698], eax
mov ebp, 0x6ea7ec
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18126a0], eax
push dword [0x1812688]
call fcn.00405d35
push dword [0x181268c]
call fcn.00405d35
push dword [0x1812690]
call fcn.00405d35
push dword [0x1812694]
call fcn.00405d35
push dword [0x1812698]
call fcn.00405d35
push dword [0x18126a0]
call fcn.00405d35
call fcn.004548a0
mov ebp, 0x6edab4
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x18125d4], eax
push dword [0x1812690]
call fcn.0046978d
push eax
push 0x4e
push 0x4a
push 0x3a
push 0x3e
push 0xffffffff
call fcn.00456350
mov dword [0x1812674], eax
mov ebx, dword [0x1812564]
and ebx, ebx
jle 0x4038f7
mov dword [0x1812638], 1
push 1
call fcn.0040a6cc
mov dword [0x1812638], 0
push 1
call fcn.0040a6cc
jmp 0x403901
push 1
call fcn.0040a6cc
push 1
push dword [0x18126e8]
call fcn.00455d4e
push 1
push dword [0x181276c]
call fcn.00455d4e
push 1
push dword [0x1812724]
call fcn.00458ca4
push eax
call fcn.004070b9
push 8
push 0x1b3
push 0x168
push 0x64
push 1
push 0
call fcn.00408352
mov ebx, dword [0x18126c0]
and ebx, ebx
jne 0x403980
push 0
push dword [0x1812724]
call fcn.00404542
mov dword [0x1812778], 0
jmp 0x40399a
push 1
push dword [0x1812724]
call fcn.00404542
mov dword [0x1812778], 1
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1812730]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x552e88
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4039e7
jl 0x4039e3
cmp ebx, 0
ja 0x4039e7
xor eax, eax
jmp 0x4039ec
mov eax, 1
or eax, eax
je 0x403a2e
push edx
call fcn.00470c00
pop edx
push eax
push 2
mov edx, dword [0x1812730]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x552e88
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c3f6
call fcn.00411ba0
mov ebx, dword [0x18126c0]
and ebx, ebx
jle 0x403a4f
push 0
push 1
push dword [0x1812650]
call fcn.0045682a
jmp 0x403a64
push 0
push 0
push dword [0x1812650]
call fcn.0045682a
mov dword [0x181262c], 0
call fcn.00405d63
push dword [0x1812724]
call fcn.00458cc0
push 1
push dword [0x18126cc]
call fcn.00455d4e
push 1
push dword [0x1812628]
call fcn.00455d4e
call fcn.00408fc8
call fcn.00458cde
mov dword [0x18126d0], eax
cmp dword [0x18126d0], 0
je 0x404059
push dword [0x18126d0]
call fcn.00405a1a
mov dword [0x18126d0], eax
push 9
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x403aea
call fcn.00458ce6
mov ebx, eax
cmp ebx, dword [0x1812724]
jne 0x403aea
call fcn.0045e138
mov ebx, eax
cmp ebx, dword [0x1812724]
jne 0x403b0e
mov ebx, dword [0x18126d0]
cmp ebx, 0x204
jne 0x403b0e
mov eax, 1
jmp 0x403b10
xor eax, eax
and eax, eax
je 0x403b2a
push dword [0x1812724]
call fcn.00458ca4
push eax
push 0
call fcn.0045bacb
mov ebx, dword [0x18126d0]
cmp ebx, 0x201
jne 0x403b58
push 0
push 2
push 0xa1
push dword [0x1812724]
call fcn.00458ca4
push eax
call sub.USER32.dll_SendMessageW
mov ebx, dword [0x18126d0]
cmp ebx, 0x332c
jne 0x403b7c
call fcn.0045e147
mov ebx, eax
cmp ebx, dword [0x18125cc]
jne 0x403b7c
mov eax, 1
jmp 0x403b7e
xor eax, eax
and eax, eax
je 0x403bb1
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403bb1
push 1
push dword [0x1812724]
call fcn.00404542
mov dword [0x1812778], 1
mov dword [0x18126d0], 0
mov ebx, dword [0x18126d0]
cmp ebx, 0x332c
jne 0x403bd5
call fcn.0045e147
mov ebx, eax
cmp ebx, dword [0x1812764]
jne 0x403bd5
mov eax, 1
jmp 0x403bd7
xor eax, eax
and eax, eax
je 0x403bf1
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403bf1
mov eax, 0x551d94
push eax
call fcn.00451746
mov ebx, dword [0x18126d0]
cmp ebx, 0x332e
jne 0x403cbb
call fcn.0045e156
mov ebx, eax
cmp ebx, 1
jne 0x403c25
push dword [0x1812724]
call fcn.00458ca4
push eax
push 0
call fcn.0045bacb
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403cbb
mov ebx, dword [0x1812778]
and ebx, ebx
jne 0x403c5a
push 1
push dword [0x1812724]
call fcn.00404542
mov dword [0x1812778], 1
jmp 0x403ca6
push 9
push dword [0x1812724]
call fcn.00458ca4
push eax
call sub.USER32.dll_ShowWindow
push dword [0x1812724]
call fcn.00458ca4
push eax
call sub.USER32.dll_SetForegroundWindow
push 0
push dword [0x1812724]
call fcn.00404542
push dword [0x1812724]
call fcn.00458cc0
mov dword [0x1812778], 0
mov dword [0x18126d0], 0
call fcn.00458cde
and eax, eax
je 0x403cbb
jmp 0x403cb0
mov ebx, dword [0x18126d0]
cmp ebx, 0x332d
jne 0x403f3b
push dword [0x1812c28]
call fcn.0046a6ce
push dword [0x1812c28]
call fcn.0046a6e3
or eax, eax
je 0x403d0c
call fcn.0045e165
mov ebx, eax
mov ebp, dword [0x1812c2c]
cmp ebx, dword [ebp + 0x40]
jne 0x403d0a
push dword [0x1812c28]
call fcn.0046a731
push eax
call fcn.0040a0c2
jmp 0x403cd8
call fcn.0045e165
push eax
mov ebx, 0x2e
cmp ebx, dword [esp]
jne 0x403d66
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x181256c]
mov eax, 0x553e4c
push eax
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554ae8
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f3a
mov ebx, 0x2f
cmp ebx, dword [esp]
jne 0x403dba
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x181256c]
mov eax, 0x5500e2
push eax
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554ae8
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f3a
mov ebx, 0x30
cmp ebx, dword [esp]
jne 0x403dd4
mov eax, 0x5534be
push eax
call fcn.00451746
jmp 0x403f3a
mov ebx, 0x31
cmp ebx, dword [esp]
jne 0x403e28
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x181256c]
mov eax, 0x550fca
push eax
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554ae8
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f3a
mov ebx, 0x32
cmp ebx, dword [esp]
jne 0x403e7c
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x181256c]
mov eax, 0x553f6e
push eax
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554ae8
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f3a
mov ebx, 0x33
cmp ebx, dword [esp]
jne 0x403ecd
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x181256c]
mov eax, 0x551578
push eax
mov edx, dword [0x181256c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554ae8
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f3a
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403f1a
push 9
push dword [0x1812724]
call fcn.00458ca4
push eax
call sub.USER32.dll_ShowWindow
push dword [0x1812724]
call fcn.00458ca4
push eax
call sub.USER32.dll_SetForegroundWindow
push 0
push dword [0x1812724]
call fcn.00404542
mov dword [0x1812778], 0
jmp 0x403f3a
mov ebx, 2
cmp ebx, dword [esp]
jne 0x403f26
jmp 0x403f3a
mov ebx, 3
cmp ebx, dword [esp]
jne 0x403f3a
mov dword [0x18126d0], 0x333c
pop eax
mov ebx, dword [0x18126d0]
cmp ebx, 0x3336
jne 0x403f5c
call fcn.0045e174
mov ebx, eax
cmp ebx, 4
jne 0x403f5c
mov eax, 1
jmp 0x403f5e
xor eax, eax
and eax, eax
je 0x403f67
call fcn.00408866
mov ebx, dword [0x18126d0]
cmp ebx, 0x332c
jne 0x403f8b
call fcn.0045e147
mov ebx, eax
cmp ebx, dword [0x181269c]
jne 0x403f8b
mov eax, 1
jmp 0x403f8d
xor eax, eax
and eax, eax
je 0x403fcc
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403fcc
mov ebx, dword [0x18126c0]
and ebx, ebx
jne 0x403fb2
mov dword [0x18126d0], 0x333c
jmp 0x403fcc
push 1
push dword [0x1812724]
call fcn.00404542
mov dword [0x1812778], 1
push 0
call fcn.0045c01c
mov ebx, eax
and ebx, ebx
jne 0x40403f
push dword [0x181273c]
mov edx, 0x552582
pop ecx
call fcn.00411b60
je 0x404018
mov ebp, 0x60e561
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1812724]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
jmp 0x40403f
mov ebp, 0x5f48dd
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1812724]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
mov ebx, dword [0x18126d0]
cmp ebx, 0x333c
je 0x404057
mov dword [0x18126d0], 0
jmp 0x40406d
mov dword [0x18126d0], 0
push 5
call fcn.0045882e
mov ebx, dword [0x18126d0]
cmp ebx, 0x333c
jne 0x403a7e
mov eax, 0x550028
push eax
mov eax, 0x550028
push eax
mov eax, 0x550028
push eax
call fcn.00405133
push edx
call fcn.00470c00
pop edx
push eax
push 2
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c0d4
mov edx, 0x551886
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c3f6
call fcn.00411ba0
push edx
call fcn.00470c00
pop edx
push eax
push 2
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c0d4
mov edx, 0x550f62
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c3f6
call fcn.00411ba0
jmp 0x404150
push 0
call 0x40416f
call fcn.00470bb0
push dword [0x1812534]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00411580
call fcn.0043495e
call fcn.00434b30
call fcn.004359b0
call fcn.00451a2d
call fcn.00452883
call fcn.004533f0
call fcn.004549ba
call sub.ole32.dll_OleUninitialize
call fcn.00458b24
call fcn.0045bca5
call fcn.0045c432
call fcn.0045cd20
call fcn.0045dff4
call fcn.0045ec5f
call fcn.00469414
call fcn.0046b057
call fcn.0046e290
call fcn.00470167
call fcn.004701b1
call fcn.0046fac0
ret