Function at 0x45f71e
Capabilities:
Delete file
Encrypt data using speck
Enumerate gui resources
Get file attributes
Get geographical location
Get thread local storage value
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ae0bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x407c
call fcn.0049d850
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c24], 0x3af8
mov dword [ebp - 0x26b8], 0xfffffff6
mov dword [ebp - 0xcec], 0x4e6dc660
mov dword [ebp - 0xba8], 0
mov dword [ebp - 0x23dc], 0x9e63
mov dword [ebp - 0x38a8], 0xffffffff
mov dword [ebp - 0x23fc], 0xfffffff9
mov dword [ebp - 0x670], 0
jmp 0x45f7a6
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 3
jge 0x45f7c2
mov eax, dword [ebp - 0x670]
mov dword [ebp + eax*4 - 0x2ba0], 0xa35f394
jmp 0x45f799
mov eax, dword [ebp - 0x26b8]
mov dword [ebp - 0x28ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x28ac]
mov dword [ebp + eax - 0x2ba0], ecx
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x3af8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x23dc]
cmp dword [ebp + eax - 0x2ba0], ecx
jge 0x45f80e
mov dword [ebp - 0x2098], 1
jmp 0x45f815
and dword [ebp - 0x2098], 0
cmp dword [ebp - 0xcec], 0
jne 0x45f837
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ba0], 0
jne 0x45f837
and dword [ebp - 0x23cc], 0
jmp 0x45f841
mov dword [ebp - 0x23cc], 1
mov eax, dword [ebp - 0x2098]
cmp eax, dword [ebp - 0x23cc]
jge 0x45f85b
mov dword [ebp - 0x23d4], 1
jmp 0x45f862
and dword [ebp - 0x23d4], 0
cmp dword [ebp - 0x23d4], 0x5dc6
jne 0x45f87a
mov dword [ebp - 0x28b4], 1
jmp 0x45f881
and dword [ebp - 0x28b4], 0
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x3808], eax
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0x28bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ba0]
imul eax, dword [ebp - 0x23dc]
mov dword [ebp - 0x28c4], eax
mov eax, dword [ebp - 0xba8]
dec eax
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0x28bc]
cmp eax, dword [ebp - 0x28c4]
jl 0x45f8da
mov dword [ebp - 0x23e4], 1
jmp 0x45f8e1
and dword [ebp - 0x23e4], 0
cmp dword [ebp - 0x23e4], 0xbca9
jl 0x45f8f9
mov dword [ebp - 0x23ec], 1
jmp 0x45f900
and dword [ebp - 0x23ec], 0
mov eax, dword [ebp - 0x23ec]
dec eax
je 0x45f924
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2ba0], 0
je 0x45f924
mov dword [ebp - 0x23f4], 1
jmp 0x45f92b
and dword [ebp - 0x23f4], 0
cmp dword [ebp - 0x23f4], 0
je 0x45f957
mov byte [ebp - 0x47d], 0
movzx eax, byte [ebp - 0x47d]
test eax, eax
je 0x45f955
push 0
push 0x15d4
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x45f9b7
mov dword [ebp - 0x3b74], 0x6fc75dfc
mov dword [ebp - 0x3810], 0xffffffff
mov dword [ebp - 0x3b08], 4
mov dword [ebp - 0x8f4], 0
jmp 0x45f98e
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 2
jge 0x45f9aa
mov eax, dword [ebp - 0x8f4]
mov dword [ebp + eax*4 - 0x3e44], 0xacb085bb
jmp 0x45f981
mov eax, dword [ebp - 0x23fc]
inc eax
mov dword [ebp - 0x23fc], eax
mov dword [ebp - 0x318], 0xf8256a9e
mov dword [ebp - 0xe5c], 0xfffffffe
mov dword [ebp - 0xe58], 0xfffffffe
mov dword [ebp - 0xe54], 0xfffffffe
mov dword [ebp - 0xe50], 0xfffffffe
mov dword [ebp - 0x484], 0xffffffff
mov dword [ebp - 0x144], 0x890c5440
mov dword [ebp - 0xbc], 0x335900b
mov dword [ebp - 0xbb0], 0xfffffffb
mov dword [ebp - 0x28e4], 0xfffffffa
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x3818], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe5c]
mov dword [ebp - 0x3b7c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe5c], 0
je 0x45fdfc
mov dword [ebp - 0x540], 0xbd4856cd
mov dword [ebp - 0x544], 0xffffffff
mov dword [ebp - 0xcf0], 0
mov dword [ebp - 0x8e0], 0xf8ef5d3c
mov dword [ebp - 0x2464], 0xe1e3
mov dword [ebp - 0x678], 0
jmp 0x45fa99
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 2
jge 0x45fab5
mov eax, dword [ebp - 0x678]
mov dword [ebp + eax*4 - 0x28f0], 0xfffffffc
jmp 0x45fa8c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe5c]
mov dword [ebp - 0x3820], eax
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x3b18], eax
mov eax, dword [ebp - 0x540]
imul eax, dword [ebp - 0x540]
imul eax, eax, 0x9cee
test eax, eax
je 0x45fb07
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe5c], 0
je 0x45fb07
mov dword [ebp - 0x2404], 1
jmp 0x45fb0e
and dword [ebp - 0x2404], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe5c]
cmp dword [ebp - 0x2404], eax
jne 0x45fb2f
mov dword [ebp - 0x240c], 1
jmp 0x45fb36
and dword [ebp - 0x240c], 0
mov eax, dword [ebp - 0x240c]
add eax, 0xb541
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
dec eax
cmp eax, dword [ebp - 0x540]
jl 0x45fb62
mov dword [ebp - 0x2414], 1
jmp 0x45fb69
and dword [ebp - 0x2414], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x2414]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
cmp dword [ebp - 0x144], eax
jle 0x45fba7
mov dword [ebp - 0x28cc], 1
jmp 0x45fbae
and dword [ebp - 0x28cc], 0
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x3828], eax
cmp dword [ebp - 0x540], 0xffff
jbe 0x45fbde
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe5c], 0
jne 0x45fbde
and dword [ebp - 0x241c], 0
jmp 0x45fbe8
mov dword [ebp - 0x241c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x241c]
mov dword [ebp + eax - 0x28f0], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe5c]
cmp dword [ebp - 0x8e0], eax
jl 0x45fc1b
mov dword [ebp - 0x2424], 1
jmp 0x45fc22
and dword [ebp - 0x2424], 0
mov eax, dword [ebp - 0xcf0]
add eax, dword [ebp - 0x2424]
cmp dword [ebp - 0x8e0], eax
jle 0x45fc42
mov dword [ebp - 0x28d4], 1
jmp 0x45fc49
and dword [ebp - 0x28d4], 0
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x3b84], eax
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x484], eax
jg 0x45fc6f
mov dword [ebp - 0x242c], 1
jmp 0x45fc76
and dword [ebp - 0x242c], 0
mov eax, dword [ebp - 0x544]
cmp dword [ebp - 0x242c], eax
jge 0x45fc90
mov dword [ebp - 0x2434], 1
jmp 0x45fc97
and dword [ebp - 0x2434], 0
mov eax, dword [ebp - 0x8e0]
cmp dword [ebp - 0x2434], eax
jl 0x45fcb1
mov dword [ebp - 0x243c], 1
jmp 0x45fcb8
and dword [ebp - 0x243c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x28f0]
imul eax, dword [ebp - 0x243c]
add eax, 6
mov dword [ebp - 0x544], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe5c]
cmp dword [ebp - 0x544], eax
jne 0x45fcf6
mov dword [ebp - 0x2444], 1
jmp 0x45fcfd
and dword [ebp - 0x2444], 0
mov eax, dword [ebp - 0xcf0]
cmp dword [ebp - 0x2444], eax
jle 0x45fd17
mov dword [ebp - 0x244c], 1
jmp 0x45fd1e
and dword [ebp - 0x244c], 0
mov eax, dword [ebp - 0x244c]
sub eax, dword [ebp - 0x2464]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x28f0]
add eax, dword [ebp - 0x318]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xe5c]
jne 0x45fd58
mov dword [ebp - 0x2454], 1
jmp 0x45fd5f
and dword [ebp - 0x2454], 0
cmp dword [ebp - 0x2454], 0
jae 0x45fd74
mov dword [ebp - 0x245c], 1
jmp 0x45fd7b
and dword [ebp - 0x245c], 0
mov eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x245c]
jge 0x45fd92
cmp dword [ebp - 0x2464], 0
je 0x45fda7
cmp dword [ebp - 0x144], 0
je 0x45fda7
mov dword [ebp - 0x246c], 1
jmp 0x45fdae
and dword [ebp - 0x246c], 0
mov eax, dword [ebp - 0x8e0]
cmp dword [ebp - 0x246c], eax
jle 0x45fdc8
mov dword [ebp - 0x2474], 1
jmp 0x45fdcf
and dword [ebp - 0x2474], 0
cmp dword [ebp - 0x2474], 6
jbe 0x45fde4
mov dword [ebp - 0x247c], 1
jmp 0x45fdeb
and dword [ebp - 0x247c], 0
mov eax, dword [ebp - 0x247c]
mov dword [ebp - 0xbc], eax
jmp 0x4600b3
mov dword [ebp - 0x2504], 0x4f31
mov dword [ebp - 0x254], 0xfffffff9
mov dword [ebp - 0x24f4], 0xffffffff
mov dword [ebp - 0x25d4], 0xfffffff6
mov dword [ebp - 0x25d0], 0xfffffff6
mov dword [ebp - 0x25cc], 0xfffffff6
mov dword [ebp - 0x25c8], 0xfffffff6
mov dword [ebp - 0x28dc], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3830], eax
mov eax, dword [ebp - 0x254]
imul eax, dword [ebp - 0x144]
cmp eax, 0xfffffffc
jbe 0x45fe76
mov dword [ebp - 0x2484], 1
jmp 0x45fe7d
and dword [ebp - 0x2484], 0
cmp dword [ebp - 0x2484], 1
je 0x45fe92
mov dword [ebp - 0x248c], 1
jmp 0x45fe99
and dword [ebp - 0x248c], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x248c], eax
jl 0x45feb3
mov dword [ebp - 0x2494], 1
jmp 0x45feba
and dword [ebp - 0x2494], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x2494], eax
jge 0x45fed4
mov dword [ebp - 0x249c], 1
jmp 0x45fedb
and dword [ebp - 0x249c], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x249c], eax
jg 0x45fef5
mov dword [ebp - 0x24a4], 1
jmp 0x45fefc
and dword [ebp - 0x24a4], 0
mov eax, dword [ebp - 0x24a4]
mov dword [ebp - 0x24f4], eax
cmp dword [ebp - 0x24f4], 0
je 0x45ff26
cmp dword [ebp - 0x254], 0
je 0x45ff26
mov dword [ebp - 0x24fc], 1
jmp 0x45ff2d
and dword [ebp - 0x24fc], 0
mov eax, dword [ebp - 0x24fc]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x144]
mov dword [ebp - 0x254], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x25d4]
cmp dword [ebp - 0x254], eax
jne 0x45ff6c
mov dword [ebp - 0x250c], 1
jmp 0x45ff73
and dword [ebp - 0x250c], 0
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x2504], eax
mov eax, dword [ebp - 0x2504]
sub eax, dword [ebp - 0x250c]
cmp eax, dword [ebp - 0xbc]
jl 0x45ff9f
mov dword [ebp - 0x2514], 1
jmp 0x45ffa6
and dword [ebp - 0x2514], 0
cmp dword [ebp - 0x2514], 0xa07f
je 0x45ffbe
mov dword [ebp - 0x251c], 1
jmp 0x45ffc5
and dword [ebp - 0x251c], 0
mov eax, dword [ebp - 0xbb0]
mov ecx, dword [ebp - 0x251c]
sub ecx, dword [ebp - 0x318]
imul ecx, dword [ebp - 0x318]
add ecx, 0xa0ae
imul eax, ecx
test eax, eax
je 0x45fff8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x25d4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x25d4]
cmp dword [ebp + eax - 0xe5c], ecx
jg 0x460020
mov dword [ebp - 0x2524], 1
jmp 0x460027
and dword [ebp - 0x2524], 0
mov eax, dword [ebp - 0x28dc]
cmp dword [ebp - 0x2524], eax
jle 0x460041
mov dword [ebp - 0x252c], 1
jmp 0x460048
and dword [ebp - 0x252c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x252c]
sub ecx, dword [ebp + eax - 0x25d4]
cmp ecx, dword [ebp - 0x318]
je 0x46006f
mov dword [ebp - 0x2534], 1
jmp 0x460076
and dword [ebp - 0x2534], 0
cmp dword [ebp - 0x2534], 7
je 0x46008b
mov dword [ebp - 0x253c], 1
jmp 0x460092
and dword [ebp - 0x253c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25d4]
imul eax, dword [ebp - 0x253c]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x25d4], eax
mov dword [ebp - 0xbc], 0xfffffff4
jmp 0x4600cc
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xfffffff2
jg 0x46027c
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x24d0], 0x112dd267
mov byte [ebp - 0x304], 0
movzx eax, byte [ebp - 0x304]
test eax, eax
je 0x46011d
push 0x9f9
push 0x1b76
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x3b28], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3838], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x3b8c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe5c]
cmp dword [ebp - 0x320], eax
jg 0x46016e
mov dword [ebp - 0x2544], 1
jmp 0x460175
and dword [ebp - 0x2544], 0
mov eax, dword [ebp - 0x2544]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
imul eax, dword [ebp - 0x320]
test eax, eax
jne 0x4601a4
cmp dword [ebp - 0xbc], 0
jne 0x4601a4
and dword [ebp - 0x254c], 0
jmp 0x4601ae
mov dword [ebp - 0x254c], 1
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x254c], eax
jle 0x4601c8
mov dword [ebp - 0x2430], 1
jmp 0x4601cf
and dword [ebp - 0x2430], 0
mov eax, dword [ebp - 0x320]
neg eax
mov dword [ebp - 0x24d0], eax
mov eax, dword [ebp - 0x24d0]
cmp eax, dword [ebp - 0x2430]
jle 0x4601f7
mov dword [ebp - 0x209c], 1
jmp 0x4601fe
and dword [ebp - 0x209c], 0
cmp dword [ebp - 0x209c], 0xda34dbb
jl 0x460216
mov dword [ebp - 0xf1c], 1
jmp 0x46021d
and dword [ebp - 0xf1c], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0xf1c], eax
jle 0x460237
mov dword [ebp - 0x20a4], 1
jmp 0x46023e
and dword [ebp - 0x20a4], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x20a4]
add eax, 0xad58
cmp eax, dword [ebp - 0x320]
jge 0x460264
mov dword [ebp - 0xf24], 1
jmp 0x46026b
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0x28e4], eax
jmp 0x4600bf
mov dword [ebp - 0xb4], 0xfffffffe
mov dword [ebp - 0x29a4], 0xb1b0
mov dword [ebp - 0xb4], 0xa
jmp 0x4602a9
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x1a
jge 0x460347
mov dword [ebp - 0xb00], 0xf390197f
mov dword [ebp - 0x2994], 0x41b66baf
mov dword [ebp - 0x680], 0
jmp 0x4602e3
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 1
jge 0x4602ff
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x299c], 0x95e1
jmp 0x4602d6
mov dword [ebp - 0xb00], 0
jmp 0x460318
mov eax, dword [ebp - 0xb00]
dec eax
mov dword [ebp - 0xb00], eax
cmp dword [ebp - 0xb00], 0
jl 0x46032d
mov dword [ebp - 0x2994], 0x5a9576c3
jmp 0x46030b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x299c], 0
je 0x460342
jmp 0x46029c
jmp 0x46029c
cmp dword [ebp - 0xb4], 0x2749
jne 0x46035f
mov dword [ebp - 0x20ac], 1
jmp 0x460366
and dword [ebp - 0x20ac], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x3840], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x33d8], eax
cmp dword [ebp - 0xb4], 0xfff6
je 0x46039c
cmp dword [ebp - 0xb4], 0
jne 0x46039c
and dword [ebp - 0xf2c], 0
jmp 0x4603a6
mov dword [ebp - 0xf2c], 1
mov eax, dword [ebp - 0x20ac]
cmp eax, dword [ebp - 0xf2c]
jl 0x4603c0
mov dword [ebp - 0x20b4], 1
jmp 0x4603c7
and dword [ebp - 0x20b4], 0
mov eax, dword [ebp - 0x20b4]
sub eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jg 0x4603e7
mov dword [ebp - 0xf34], 1
jmp 0x4603ee
and dword [ebp - 0xf34], 0
mov eax, dword [ebp - 0xf34]
add eax, 0x61a6
jmp 0x460407
and dword [ebp - 0x20bc], 0
cmp dword [ebp - 0x20bc], 0x63b0a6d0
jne 0x46042f
cmp dword [ebp - 0x29a4], 0
je 0x46042f
mov dword [ebp - 0xf3c], 1
jmp 0x460436
and dword [ebp - 0xf3c], 0
mov eax, dword [ebp - 0xf3c]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x29e4], 0xfffffff6
push 1
lea ecx, [ebp - 0x2558]
call fcn.0042be3e
mov dword [ebp - 0x328], 0xd63a88e0
mov dword [ebp - 0x5b8], 0x91208373
mov dword [ebp - 0x688], 0
jmp 0x460486
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 1
jge 0x4604a8
push dword [ebp - 0x688]
lea ecx, [ebp - 0x2558]
call fcn.0042bf2c
mov dword [eax], 0xe2c0d37a
jmp 0x460479
push 0
lea ecx, [ebp - 0x2558]
call fcn.0042bf2c
cmp dword [eax], 0
jne 0x460540
push 0
lea ecx, [ebp - 0x2558]
call fcn.0042bf2c
mov eax, dword [eax]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
je 0x4604fd
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x33dc], eax
mov eax, 0x9d22
test eax, eax
je 0x4604fd
mov dword [ebp - 0x20c4], 1
jmp 0x460504
and dword [ebp - 0x20c4], 0
cmp dword [ebp - 0x20c4], 0xfffffffd
jne 0x460519
mov dword [ebp - 0xf44], 1
jmp 0x460520
and dword [ebp - 0xf44], 0
push 0
lea ecx, [ebp - 0x2558]
call fcn.0042bf2c
mov eax, dword [eax]
cmp eax, dword [ebp - 0xf44]
jle 0x460540
and dword [ebp - 0x20cc], 0
jmp 0x46054a
mov dword [ebp - 0x20cc], 1
push 0
lea ecx, [ebp - 0x2558]
call fcn.0042bf2c
mov esi, dword [ebp - 0x20cc]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x2558]
call fcn.0042bf2c
cmp esi, dword [eax]
jg 0x46057c
mov dword [ebp - 0xf4c], 1
jmp 0x460583
and dword [ebp - 0xf4c], 0
mov eax, dword [ebp - 0xf4c]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x328], 0xf
jmp 0x4605a8
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 5
jle 0x4605f3
mov dword [ebp - 0x5b8], 0
jmp 0x4605ca
mov eax, dword [ebp - 0x5b8]
dec eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
jl 0x4605f1
mov byte [ebp - 0x306], 0
movzx eax, byte [ebp - 0x306]
test eax, eax
je 0x4605ef
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
jmp 0x4605bd
jmp 0x46059b
lea ecx, [ebp - 0x2558]
call fcn.0042bf10
mov dword [ebp - 0xd24], 0x4e6dc660
push 2
lea ecx, [ebp - 0x2630]
call fcn.0042be3e
mov dword [ebp - 0x8e8], 0
jmp 0x46062e
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 2
jge 0x460650
push dword [ebp - 0x8e8]
lea ecx, [ebp - 0x2630]
call fcn.0042bf2c
mov dword [eax], 1
jmp 0x460621
push 1
lea ecx, [ebp - 0x2630]
call fcn.0042bf2c
mov dword [eax], 0xffffffe2
jmp 0x460689
push 1
lea ecx, [ebp - 0x2630]
call fcn.0042bf2c
mov dword [ebp - 0x20d4], eax
mov eax, dword [ebp - 0x20d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x20d4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2630]
call fcn.0042bf2c
cmp dword [eax], 0xffffffec
jg 0x4606f8
mov dword [ebp - 0xf54], 0xffffffff
mov dword [ebp - 0x29ac], 0x7909b792
push 0
lea ecx, [ebp - 0x2630]
call fcn.0042bf2c
cmp dword [eax], 0
jne 0x4606dd
mov dword [ebp - 0xf54], 0x4351cdcb
cmp dword [ebp - 0xf54], 0
jne 0x4606dd
and dword [ebp - 0x20dc], 0
jmp 0x4606e7
mov dword [ebp - 0x20dc], 1
mov eax, dword [ebp - 0x20dc]
mov dword [ebp - 0x29ac], eax
jmp 0x460665
lea ecx, [ebp - 0x2630]
call fcn.0042bf10
mov dword [ebp - 0xbc8], 0
mov dword [ebp - 0x214c], 0x9e63
mov dword [ebp - 0x33e4], 0xd546
mov dword [ebp - 0x33ec], 0xfffffffe
mov dword [ebp - 0x33f4], 0xfffffffa
mov dword [ebp - 0x33fc], 0xffffffff
push 3
lea ecx, [ebp - 0x39a4]
call fcn.0042be3e
mov dword [ebp - 0x34cc], 0
mov dword [ebp - 0x34d4], 0xfffffffd
mov dword [ebp - 0xf5c], 0x1dc6
mov dword [ebp - 0x23c], 0
jmp 0x460783
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jge 0x4607a5
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x39a4]
call fcn.0042bf2c
mov dword [eax], 0xc8a6b950
jmp 0x460776
mov dword [ebp - 0x23c], 0
jmp 0x4607be
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jge 0x4607da
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x3fc8], 0xf0488f4f
jmp 0x4607b1
mov eax, dword [ebp - 0xf5c]
inc eax
mov dword [ebp - 0xf5c], eax
lea ecx, [ebp - 0x39a4]
call fcn.0042bf10
mov dword [ebp - 0x34dc], 0xffffffff
mov dword [ebp - 0xb5c], 0x7730f94f
mov dword [ebp - 0xb58], 0x7730f94f
mov dword [ebp - 0xb54], 0x7730f94f
mov dword [ebp - 0xb50], 0x7730f94f
mov dword [ebp - 0x20f4], 0x5e3b372b
mov dword [ebp - 0xf84], 0
mov dword [ebp - 0x210c], 0xfffffffa
mov dword [ebp - 0xf94], 0x4e2e0f61
mov dword [ebp - 0x211c], 1
mov dword [ebp - 0x29b4], 1
mov dword [ebp - 0x690], 0
jmp 0x460879
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 2
jge 0x460895
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x3408], 3
jmp 0x46086c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb5c], 0xcf5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
mov dword [ebp - 0x34e4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb5c], 0
je 0x4608d5
mov dword [ebp - 0x20e4], 1
jmp 0x4608dc
and dword [ebp - 0x20e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0x20e4], eax
je 0x4608fc
mov dword [ebp - 0xf64], 1
jmp 0x460903
and dword [ebp - 0xf64], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0xf64], eax
jge 0x460924
mov dword [ebp - 0x20ec], 1
jmp 0x46092b
and dword [ebp - 0x20ec], 0
cmp dword [ebp - 0x20ec], 0xfffffff9
jl 0x460946
mov eax, 0x75761ac7
test eax, eax
jne 0x460946
and dword [ebp - 0xf6c], 0
jmp 0x460950
mov dword [ebp - 0xf6c], 1
imul eax, dword [ebp - 0xf6c], 0x6728
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb5c]
je 0x460975
mov dword [ebp - 0xd20], 1
jmp 0x46097c
and dword [ebp - 0xd20], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd20]
mov dword [ebp + eax - 0x3408], ecx
cmp dword [ebp - 0xd20], 3
jl 0x4609a4
mov dword [ebp - 0xf74], 1
jmp 0x4609ab
and dword [ebp - 0xf74], 0
mov dword [ebp - 0x20f4], 0xfffb
mov eax, dword [ebp - 0x20f4]
cmp eax, dword [ebp - 0xf74]
jle 0x4609cf
mov dword [ebp - 0x20fc], 1
jmp 0x4609d6
and dword [ebp - 0x20fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp eax, dword [ebp - 0x20fc]
je 0x4609f7
mov dword [ebp - 0xf7c], 1
jmp 0x4609fe
and dword [ebp - 0xf7c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0xf7c], eax
jge 0x460a1f
mov dword [ebp - 0x2104], 1
jmp 0x460a26
and dword [ebp - 0x2104], 0
mov eax, dword [ebp - 0x2104]
mov dword [ebp - 0xf84], eax
mov eax, dword [ebp - 0xf84]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0xb5c]
mov dword [ebp - 0x210c], eax
mov eax, dword [ebp - 0x210c]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xb5c]
cmp eax, 1
jae 0x460a6f
mov dword [ebp - 0xf8c], 1
jmp 0x460a76
and dword [ebp - 0xf8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0xf8c], eax
jge 0x460a97
mov dword [ebp - 0x2114], 1
jmp 0x460a9e
and dword [ebp - 0x2114], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
add eax, dword [ebp - 0x2114]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xb5c]
mov dword [ebp - 0xf94], eax
mov eax, dword [ebp - 0xf94]
mov dword [ebp - 0x211c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0x211c], eax
jne 0x460af1
mov dword [ebp - 0xf9c], 1
jmp 0x460af8
and dword [ebp - 0xf9c], 0
mov eax, dword [ebp - 0xf9c]
mov dword [ebp - 0x29b4], eax
mov byte [ebp - 0x308], 0
movzx eax, byte [ebp - 0x308]
test eax, eax
je 0x460b36
push 0
push 0x1e71
push 0x1ba3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov dword [ebp - 0xfe4], 0xfffffff9
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0xa08], 0
jmp 0x460b63
mov eax, dword [ebp - 0xa08]
inc eax
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 4
jge 0x460b7f
mov eax, dword [ebp - 0xa08]
mov dword [ebp + eax*4 - 0x3edc], 1
jmp 0x460b56
mov dword [ebp - 0x4f8], 0xffffffe8
jmp 0x460b98
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0x1c
jl 0x460c7d
mov dword [ebp - 0x698], 0xffffffff
mov dword [ebp - 0xfac], 0x53f0d3ec
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x34ec], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x34f4], eax
cmp dword [ebp - 0x698], 0xfffffffd
jl 0x460be6
mov dword [ebp - 0x2124], 1
jmp 0x460bed
and dword [ebp - 0x2124], 0
mov eax, dword [ebp - 0x698]
cmp eax, dword [ebp - 0x2124]
jge 0x460c07
mov dword [ebp - 0xfa4], 1
jmp 0x460c0e
and dword [ebp - 0xfa4], 0
mov eax, dword [ebp - 0xfa4]
inc eax
imul eax, eax, 0xfffffffc
cmp eax, dword [ebp - 0xfac]
jne 0x460c2e
xor eax, eax
inc eax
jne 0x460c2e
and dword [ebp - 0x212c], 0
jmp 0x460c38
mov dword [ebp - 0x212c], 1
mov eax, dword [ebp - 0x698]
cmp eax, dword [ebp - 0x212c]
jg 0x460c52
mov dword [ebp - 0x29bc], 1
jmp 0x460c59
and dword [ebp - 0x29bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3edc]
mov dword [ebp - 0x34fc], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0xfac], eax
jmp 0x460b8b
mov dword [ebp - 0x8f0], 0
jmp 0x460c96
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 3
jge 0x460cb2
mov eax, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0x2bb0], 0xa35f394
jmp 0x460c89
mov dword [ebp - 0xbb8], 0xe17ca002
mov dword [ebp - 0x2134], 4
mov dword [ebp - 0x29c4], 0x1ba028e
mov dword [ebp - 0xcf8], 0xfffffff8
mov dword [ebp - 0x29dc], 0x1b17d72
mov dword [ebp - 0x3504], 0xfffffffd
mov dword [ebp - 0x6a0], 0
jmp 0x460d07
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 1
jge 0x460d23
mov eax, dword [ebp - 0x6a0]
mov dword [ebp + eax*4 - 0x29d4], 0
jmp 0x460cfa
mov dword [ebp - 0x2134], 0xfcb143e9
mov eax, dword [ebp - 0x2134]
cmp dword [ebp - 0xbb8], eax
jl 0x460d47
mov dword [ebp - 0x213c], 1
jmp 0x460d4e
and dword [ebp - 0x213c], 0
cmp dword [ebp - 0x29c4], 0x15fd
jl 0x460d66
mov dword [ebp - 0xfb4], 1
jmp 0x460d6d
and dword [ebp - 0xfb4], 0
mov eax, dword [ebp - 0xfb4]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0xcf8]
cmp dword [ebp - 0x213c], eax
jl 0x460d93
mov dword [ebp - 0x29cc], 1
jmp 0x460d9a
and dword [ebp - 0x29cc], 0
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0x350c], eax
mov eax, dword [ebp - 0xbb8]
mov ecx, 0x274
neg ecx
imul eax, ecx
test eax, eax
jne 0x460dcc
cmp dword [ebp - 0xcf8], 0
jne 0x460dcc
and dword [ebp - 0xbc0], 0
jmp 0x460dd6
mov dword [ebp - 0xbc0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc0]
mov dword [ebp + eax - 0x29d4], ecx
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0x29dc], eax
mov byte [ebp - 0x30a], 0
movzx eax, byte [ebp - 0x30a]
test eax, eax
je 0x460e22
push 0
push 0x6d8
push 0x1e0d
push 0x116b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov eax, dword [ebp - 0x29e4]
mov dword [ebp - 0x29ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x29ec]
mov dword [ebp + eax - 0x2bb0], ecx
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0x3514], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214c]
cmp dword [ebp + eax - 0x2bb0], ecx
jge 0x460e6e
mov dword [ebp - 0xfbc], 1
jmp 0x460e75
and dword [ebp - 0xfbc], 0
cmp dword [ebp - 0xd24], 0
jne 0x460e97
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2bb0], 0
jne 0x460e97
and dword [ebp - 0x2144], 0
jmp 0x460ea1
mov dword [ebp - 0x2144], 1
mov eax, dword [ebp - 0xfbc]
cmp eax, dword [ebp - 0x2144]
jge 0x460ebb
mov dword [ebp - 0xfc4], 1
jmp 0x460ec2
and dword [ebp - 0xfc4], 0
cmp dword [ebp - 0xfc4], 0x5dc6
jne 0x460eda
mov dword [ebp - 0x29f4], 1
jmp 0x460ee1
and dword [ebp - 0x29f4], 0
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0x351c], eax
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0x29fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bb0]
imul eax, dword [ebp - 0x214c]
mov dword [ebp - 0x2a6c], eax
mov eax, dword [ebp - 0xbc8]
dec eax
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0x29fc]
cmp eax, dword [ebp - 0x2a6c]
jl 0x460f3a
mov dword [ebp - 0xfcc], 1
jmp 0x460f41
and dword [ebp - 0xfcc], 0
cmp dword [ebp - 0xfcc], 0xbca9
jl 0x460f59
mov dword [ebp - 0x2154], 1
jmp 0x460f60
and dword [ebp - 0x2154], 0
mov eax, dword [ebp - 0x2154]
dec eax
je 0x460f84
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2bb0], 0
je 0x460f84
mov dword [ebp - 0xfd4], 1
jmp 0x460f8b
and dword [ebp - 0xfd4], 0
cmp dword [ebp - 0xfd4], 0
je 0x4610a2
mov byte [ebp - 0x30e], 0
mov dword [ebp - 0x2f90], 8
mov dword [ebp - 0x2f8c], 8
mov dword [ebp - 0x2f88], 8
mov dword [ebp - 0x2f84], 8
lea ecx, [ebp - 0xcf1]
call fcn.0042bf3b
push eax
lea eax, [ebp - 0x2f80]
push eax
lea eax, [ebp - 0x2f90]
push eax
lea ecx, [ebp - 0x3ec4]
call fcn.0042bf3e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2da8]
call fcn.0042beea
mov dword [ebp - 0x3524], 6
push 0
lea ecx, [ebp - 0x2da8]
call fcn.0042bf2c
and dword [eax], 0
jmp 0x46103c
push 0
lea ecx, [ebp - 0x2da8]
call fcn.0042bf2c
mov dword [ebp - 0x215c], eax
mov eax, dword [ebp - 0x215c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x215c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2da8]
call fcn.0042bf2c
cmp dword [eax], 0xffffffe9
jle 0x461078
mov byte [ebp - 0x30c], 0
movzx eax, byte [ebp - 0x30c]
test eax, eax
je 0x461076
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x461018
lea ecx, [ebp - 0x2da8]
call fcn.0042bf10
movzx eax, byte [ebp - 0x30e]
test eax, eax
je 0x46109d
push 0
push 0x15d4
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x461529
mov dword [ebp - 0xa98], 0x5d6c05ba
mov dword [ebp - 0x2a74], 0xdd03248c
mov byte [ebp - 0x310], 0
movzx eax, byte [ebp - 0x310]
test eax, eax
je 0x4610d2
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
mov dword [ebp - 0xa98], 0
jmp 0x4610eb
mov eax, dword [ebp - 0xa98]
dec eax
mov dword [ebp - 0xa98], eax
cmp dword [ebp - 0xa98], 0xffffffea
jg 0x461100
mov dword [ebp - 0x2a74], 0
jmp 0x4610de
mov dword [ebp - 0x352c], 0x6fc75dfc
mov dword [ebp - 0x3534], 0xffffffff
mov dword [ebp - 0x54c], 0x7cb3
mov dword [ebp - 0x6a8], 0
jmp 0x461137
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 1
jge 0x461153
mov eax, dword [ebp - 0x6a8]
mov dword [ebp + eax*4 - 0x2a7c], 3
jmp 0x46112a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x54c]
mov dword [ebp + eax - 0x2a7c], ecx
mov dword [ebp - 0x54c], 8
jmp 0x46117f
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0x16
jne 0x4611a4
mov byte [ebp - 0x2bb], 0
movzx eax, byte [ebp - 0x2bb]
test eax, eax
je 0x4611a2
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x461172
mov dword [ebp - 0x353c], 4
push 3
lea ecx, [ebp - 0x2bc0]
call fcn.0042be3e
mov dword [ebp - 0x8f8], 0
jmp 0x4611d4
mov eax, dword [ebp - 0x8f8]
inc eax
mov dword [ebp - 0x8f8], eax
cmp dword [ebp - 0x8f8], 3
jge 0x4611f6
push dword [ebp - 0x8f8]
lea ecx, [ebp - 0x2bc0]
call fcn.0042bf2c
mov dword [eax], 0xb9b55bb2
jmp 0x4611c7
push 1
lea ecx, [ebp - 0x2bc0]
call fcn.0042bf2c
and dword [eax], 0
jmp 0x46122c
push 1
lea ecx, [ebp - 0x2bc0]
call fcn.0042bf2c
mov dword [ebp - 0xfdc], eax
mov eax, dword [ebp - 0xfdc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xfdc]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2bc0]
call fcn.0042bf2c
cmp dword [eax], 0xffffffe4
jl 0x4612ec
mov dword [ebp - 0x5bc], 1
mov dword [ebp - 0x6b0], 0
jmp 0x461265
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 1
jge 0x461281
mov eax, dword [ebp - 0x6b0]
mov dword [ebp + eax*4 - 0x2a84], 1
jmp 0x461258
mov dword [ebp - 0x5bc], 0
jmp 0x46129a
mov eax, dword [ebp - 0x5bc]
dec eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0
jl 0x4612b7
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp + eax*4 - 0x2a84], 0
je 0x4612b5
jmp 0x4612b7
jmp 0x46128d
mov byte [ebp - 0x399], 0
movzx eax, byte [ebp - 0x399]
test eax, eax
je 0x4612e7
push 0xbf7
push 0x1262
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
jmp 0x461208
lea ecx, [ebp - 0x2bc0]
call fcn.0042bf10
push 2
lea ecx, [ebp - 0x3050]
call fcn.0042be3e
mov dword [ebp - 0x14c], 0xffffffff
mov dword [ebp - 0x3544], 0
mov dword [ebp - 0xa10], 0
jmp 0x461331
mov eax, dword [ebp - 0xa10]
inc eax
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 2
jge 0x461350
push dword [ebp - 0xa10]
lea ecx, [ebp - 0x3050]
call fcn.0042bf2c
and dword [eax], 0
jmp 0x461324
mov dword [ebp - 0x14c], 0
jmp 0x461369
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jg 0x46138c
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x3050]
call fcn.0042bf2c
cmp dword [eax], 0
je 0x46138a
jmp 0x46138c
jmp 0x46135c
mov dword [ebp - 0x14c], 0
jmp 0x4613a5
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xffffffed
jg 0x4613cd
mov byte [ebp - 0x2bd], 0
movzx eax, byte [ebp - 0x2bd]
test eax, eax
je 0x4613cb
push 0x1122
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
jmp 0x461398
lea ecx, [ebp - 0x3050]
call fcn.0042bf10
mov dword [ebp - 0x6b8], 0
jmp 0x4613f1
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 2
jge 0x46140d
mov eax, dword [ebp - 0x6b8]
mov dword [ebp + eax*4 - 0x3f5c], 0xacb085bb
jmp 0x4613e4
mov dword [ebp - 0x6c0], 0xbac64a68
mov dword [ebp - 0x900], 0
jmp 0x461430
mov eax, dword [ebp - 0x900]
inc eax
mov dword [ebp - 0x900], eax
cmp dword [ebp - 0x900], 2
jge 0x46144c
mov eax, dword [ebp - 0x900]
mov dword [ebp + eax*4 - 0x3414], 0x86bd085
jmp 0x461423
mov dword [ebp - 0x6c0], 0
jmp 0x461465
mov eax, dword [ebp - 0x6c0]
inc eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0x11
je 0x461502
push 3
lea ecx, [ebp - 0x3308]
call fcn.0042be3e
mov dword [ebp - 0xae0], 0
jmp 0x461498
mov eax, dword [ebp - 0xae0]
inc eax
mov dword [ebp - 0xae0], eax
cmp dword [ebp - 0xae0], 3
jge 0x4614ba
push dword [ebp - 0xae0]
lea ecx, [ebp - 0x3308]
call fcn.0042bf2c
mov dword [eax], 2
jmp 0x46148b
push 1
lea ecx, [ebp - 0x3308]
call fcn.0042bf2c
cmp dword [eax], 3
jb 0x4614d8
mov dword [ebp - 0x2164], 1
jmp 0x4614df
and dword [ebp - 0x2164], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2164]
mov dword [ebp + eax - 0x3414], ecx
lea ecx, [ebp - 0x3308]
call fcn.0042bf10
jmp 0x461458
mov byte [ebp - 0x472], 0
movzx eax, byte [ebp - 0x472]
test eax, eax
je 0x46151c
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0xfe4]
inc eax
mov dword [ebp - 0xfe4], eax
mov dword [ebp - 0x6c], 0xc0f8067e
mov dword [ebp - 0x2c], 0x73e7ed6f
mov dword [ebp - 0x204], 0xfffffffd
cmp dword [ebp - 0x6c], 0
jne 0x461586
cmp dword [ebp - 0x2c], 0xffff
jb 0x46155c
mov dword [ebp - 0x216c], 1
jmp 0x461563
and dword [ebp - 0x216c], 0
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x216c]
add eax, ecx
mov dword [ebp - 0x2c], eax
jne 0x461586
and dword [ebp - 0xfec], 0
jmp 0x461590
mov dword [ebp - 0xfec], 1
cmp dword [ebp - 0xfec], 0x3aeb
jg 0x4615a8
mov dword [ebp - 0x2174], 1
jmp 0x4615af
and dword [ebp - 0x2174], 0
mov eax, dword [ebp - 0x2174]
inc eax
cmp eax, dword [ebp - 0x204]
jl 0x4615ca
mov dword [ebp - 0xff4], 1
jmp 0x4615d1
and dword [ebp - 0xff4], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0xff4], eax
jl 0x4615eb
mov dword [ebp - 0x217c], 1
jmp 0x4615f2
and dword [ebp - 0x217c], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x217c], eax
jg 0x461763
push 3
lea ecx, [ebp - 0x2bd0]
call fcn.0042be3e
mov dword [ebp - 0x6c8], 0
jmp 0x46162a
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 3
jge 0x461649
push dword [ebp - 0x6c8]
lea ecx, [ebp - 0x2bd0]
call fcn.0042bf2c
and dword [eax], 0
jmp 0x46161d
mov dword [ebp - 0x6c], 0
jmp 0x461659
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x461753
mov dword [ebp - 0x2c], 0
jmp 0x461673
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x4616a3
mov byte [ebp - 0x2bf], 0
movzx eax, byte [ebp - 0x2bf]
test eax, eax
je 0x4616a1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x46166c
mov dword [ebp - 0x2c], 0
jmp 0x4616b3
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x46174e
mov dword [ebp - 0x204], 0
jmp 0x4616d6
cmp dword [ebp - 0x204], 2
jg 0x461749
mov dword [ebp - 0x908], 0xfffffff9
mov dword [ebp - 0x908], 0
jmp 0x461702
cmp dword [ebp - 0x908], 2
jg 0x461732
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x2bd0]
call fcn.0042bf2c
mov esi, eax
push dword [ebp - 0x204]
lea ecx, [ebp - 0x2bd0]
call fcn.0042bf2c
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x4616f5
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2bd0]
call fcn.0042bf2c
cmp dword [eax], 0
je 0x461747
jmp 0x4616ac
jmp 0x461652
lea ecx, [ebp - 0x2bd0]
call fcn.0042bf10
jmp 0x461956
push 4
lea ecx, [ebp - 0x2be0]
call fcn.0042be3e
mov dword [ebp - 0x218c], 0x1300ca3c
mov dword [ebp - 0x2a8c], 0xcbfb41ce
mov dword [ebp - 0x6d0], 0
jmp 0x46179d
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 4
jge 0x4617bf
push dword [ebp - 0x6d0]
lea ecx, [ebp - 0x2be0]
call fcn.0042bf2c
mov dword [eax], 0x4042
jmp 0x461790
mov dword [ebp - 0x2c], 3
jmp 0x4617cf
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x46194b
mov dword [ebp - 0xd00], 0xfffffff8
mov dword [ebp - 0x6c], 3
jmp 0x4617f3
cmp dword [ebp - 0x6c], 0
jl 0x461946
mov dword [ebp - 0xd00], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2be0]
call fcn.0042bf2c
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2be0]
call fcn.0042bf2c
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x461837
mov dword [ebp - 0xffc], 1
jmp 0x46183e
and dword [ebp - 0xffc], 0
mov eax, dword [ebp - 0xffc]
mov dword [ebp - 0x218c], eax
mov eax, dword [ebp - 0xd00]
mov dword [ebp - 0x2184], eax
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x2be0]
call fcn.0042bf2c
mov ecx, dword [ebp - 0x2184]
mov dword [eax], ecx
cmp dword [ebp - 0x2184], 0x3de37d66
jl 0x46188a
cmp dword [ebp - 0x6c], 0
je 0x46188a
mov dword [ebp - 0x1004], 1
jmp 0x461891
and dword [ebp - 0x1004], 0
mov eax, dword [ebp - 0xd00]
cmp eax, dword [ebp - 0x1004]
jle 0x4618ab
mov dword [ebp - 0x100c], 1
jmp 0x4618b2
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0x218c]
cmp dword [ebp - 0x100c], eax
jg 0x4618cc
mov dword [ebp - 0x2194], 1
jmp 0x4618d3
and dword [ebp - 0x2194], 0
cmp dword [ebp - 0x2194], 0x3f0e
je 0x4618eb
mov dword [ebp - 0x1014], 1
jmp 0x4618f2
and dword [ebp - 0x1014], 0
mov eax, 0xa9e1a0
sub eax, dword [ebp - 0x1014]
js 0x46190b
mov dword [ebp - 0x219c], 1
jmp 0x461912
and dword [ebp - 0x219c], 0
cmp dword [ebp - 0x219c], 0xffffffff
jge 0x461927
jmp 0x4617c8
lea ecx, [ebp - 0x2be0]
call fcn.0042bf10
mov dword [ebp - 0x15e0], 0x635
mov dword [ebp - 0xfc], 0x2887cf2e
mov dword [ebp - 0x554], 0x2e7c
mov dword [ebp - 0x354c], 3
mov dword [ebp - 0x3554], 0x2c78ef8a
mov dword [ebp - 0x355c], 0
mov dword [ebp - 0x2aa4], 1
mov dword [ebp - 0x3564], 8
mov dword [ebp - 0x356c], 0xffffffff
mov dword [ebp - 0x3574], 0x6ac116e0
push 1
lea ecx, [ebp - 0x39b4]
call fcn.0042be3e
mov dword [ebp - 0x154], 0
jmp 0x4619e0
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x461a02
push dword [ebp - 0x154]
lea ecx, [ebp - 0x39b4]
call fcn.0042bf2c
mov dword [eax], 1
jmp 0x4619d3
mov dword [ebp - 0x154], 0
jmp 0x461a1b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x461a37
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x3f98], 0x742cc323
jmp 0x461a0e
mov byte [ebp - 0x3a1], 0
movzx eax, byte [ebp - 0x3a1]
test eax, eax
je 0x461a67
push 0x13fc
push 0xe50
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
cmp dword [ebp - 0xfc], 0
je 0x461a8a
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xfc], eax
jle 0x461a8a
mov dword [ebp - 0x21a4], 1
jmp 0x461a91
and dword [ebp - 0x21a4], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x21a4]
sub eax, dword [ebp - 0x554]
add eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xfc]
je 0x461ac3
mov dword [ebp - 0x1024], 1
jmp 0x461aca
and dword [ebp - 0x1024], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x1024], eax
jge 0x461ae4
mov dword [ebp - 0x21ac], 1
jmp 0x461aeb
and dword [ebp - 0x21ac], 0
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x21ac]
jne 0x461b05