Function at 0x45bc2b
Capabilities:
Check os version
Get disk information
Get file attributes
Get file size
Get graphical window text
Hide graphical window
Identify system language via api
Query service status
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x68b4
call fcn.004a9330
push esi
push 3
lea ecx, [ebp - 0x1158]
call fcn.00413c51
mov dword [ebp - 0x3ac4], 0
mov dword [ebp - 0x21c], 0
jmp 0x45bc69
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x45bc8b
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov dword [eax], 0xf70ad6f2
jmp 0x45bc5c
mov dword [ebp - 0x21c], 0
jmp 0x45bca4
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x45bcc0
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x984], 0
jmp 0x45bc97
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x984], 2
jmp 0x45bcee
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x984]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x984], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x984], 0
jl 0x45bf2d
mov dword [ebp - 0x384], 0xfb770a77
mov dword [ebp - 0x42dc], 2
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x984]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45bd38
jmp 0x45bf2d
mov dword [ebp - 0x384], 0
jmp 0x45bd51
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 2
jg 0x45bf28
push dword [ebp - 0x384]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x984]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0x384]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x984]
cmp dword [eax], ecx
jl 0x45bdbb
mov dword [ebp - 0x2bfc], 1
jmp 0x45bdc2
and dword [ebp - 0x2bfc], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x984]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov ecx, dword [ebp - 0x2bfc]
cmp ecx, dword [eax]
jne 0x45bdf0
mov dword [ebp - 0x3fc8], 1
jmp 0x45bdf7
and dword [ebp - 0x3fc8], 0
push dword [ebp - 0x384]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x984]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
cmp dword [eax], 7
jbe 0x45be31
mov dword [ebp - 0x3aa4], 1
jmp 0x45be38
and dword [ebp - 0x3aa4], 0
push dword [ebp - 0x384]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3aa4]
add ecx, dword [eax]
imul eax, ecx, 5
test eax, eax
jne 0x45be6a
cmp dword [ebp - 0x384], 0
jne 0x45be6a
and dword [ebp - 0x3aac], 0
jmp 0x45be74
mov dword [ebp - 0x3aac], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x984]
cmp dword [ebp - 0x3aac], eax
jg 0x45be95
mov dword [ebp - 0x3ab4], 1
jmp 0x45be9c
and dword [ebp - 0x3ab4], 0
push 2
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3ab4]
jg 0x45bebf
mov dword [ebp - 0x3abc], 1
jmp 0x45bec6
and dword [ebp - 0x3abc], 0
push 0
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
mov eax, dword [eax]
imul eax, dword [ebp - 0x3abc]
mov dword [ebp - 0x3ac4], eax
mov esi, dword [ebp - 0x3ac4]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x984]
lea ecx, [ebp - 0x1158]
call fcn.00413d3f
cmp esi, dword [eax]
je 0x45bf10
mov dword [ebp - 0x3acc], 1
jmp 0x45bf17
and dword [ebp - 0x3acc], 0
mov eax, dword [ebp - 0x3acc]
mov dword [ebp - 0x42dc], eax
jmp 0x45bd44
jmp 0x45bcd3
mov byte [ebp - 0x6c7], 0
movzx eax, byte [ebp - 0x6c7]
test eax, eax
je 0x45bf49
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x1158]
call fcn.00413d23
mov dword [ebp - 0x9d4], 0
jmp 0x45bf6d
mov eax, dword [ebp - 0x9d4]
inc eax
mov dword [ebp - 0x9d4], eax
cmp dword [ebp - 0x9d4], 1
jge 0x45bf89
mov eax, dword [ebp - 0x9d4]
mov dword [ebp + eax*4 - 0x42e4], 0x13638ecf
jmp 0x45bf60
mov byte [ebp - 0x605], 0
movzx eax, byte [ebp - 0x605]
test eax, eax
je 0x45bfb1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x42e4], 0
push 3
lea ecx, [ebp - 0x1110]
call fcn.00413c51
or dword [ebp - 0x4e2c], 0xffffffff
or dword [ebp - 0x4e28], 0xffffffff
or dword [ebp - 0x4e24], 0xffffffff
or dword [ebp - 0x4e20], 0xffffffff
lea ecx, [ebp - 0x145d]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x4e1c]
push eax
lea eax, [ebp - 0x4e2c]
push eax
lea ecx, [ebp - 0x660c]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1528]
call fcn.00413cfd
mov dword [ebp - 0xa4], 2
mov dword [ebp - 0x3aec], 0xfffffffb
mov dword [ebp - 0x3b04], 0
mov dword [ebp - 0x3ba4], 0x33d4965d
mov dword [ebp - 0x430c], 0xfffffffc
mov dword [ebp - 0x9d0], 0
jmp 0x45c06b
mov eax, dword [ebp - 0x9d0]
inc eax
mov dword [ebp - 0x9d0], eax
cmp dword [ebp - 0x9d0], 2
jge 0x45c087
mov eax, dword [ebp - 0x9d0]
mov dword [ebp + eax*4 - 0x43c8], 1
jmp 0x45c05e
mov dword [ebp - 0xa4], 3
jmp 0x45c0a0
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x45c578
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x3ad4], 0x318b4743
mov dword [ebp - 0x11c4], 0xd5f49dcb
mov dword [ebp - 0x100], 0
jmp 0x45c0e4
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x45c573
mov dword [ebp - 0x804], 0x92d14b43
mov dword [ebp - 0x13d4], 0x92ad5889
push dword [ebp - 0x100]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45c2b6
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x3ad4], eax
cmp dword [ebp - 0x3ad4], 0
jne 0x45c146
mov eax, 0x976b5a7d
test eax, eax
jne 0x45c146
and dword [ebp - 0x3adc], 0
jmp 0x45c150
mov dword [ebp - 0x3adc], 1
cmp dword [ebp - 0x3adc], 0xae65c342
je 0x45c168
mov dword [ebp - 0x42ec], 1
jmp 0x45c16f
and dword [ebp - 0x42ec], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x42f4], eax
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov ecx, dword [ebp - 0x42f4]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45c1b9
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x45c1b9
mov dword [ebp - 0x42fc], 1
jmp 0x45c1c0
and dword [ebp - 0x42fc], 0
cmp dword [ebp - 0xa4], 0x60be6286
jne 0x45c1d8
mov dword [ebp - 0x3ae4], 1
jmp 0x45c1df
and dword [ebp - 0x3ae4], 0
mov eax, dword [ebp - 0x3ae4]
mov dword [ebp - 0x11c4], eax
mov eax, dword [ebp - 0x11c4]
mov dword [ebp - 0x3aec], eax
cmp dword [ebp - 0x3aec], 2
jne 0x45c20c
mov dword [ebp - 0x3af4], 1
jmp 0x45c213
and dword [ebp - 0x3af4], 0
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x3af4]
sub eax, dword [ebp - 0xa4]
neg eax
cmp eax, dword [ebp - 0x100]
jl 0x45c23c
mov dword [ebp - 0x3afc], 1
jmp 0x45c243
and dword [ebp - 0x3afc], 0
mov eax, dword [ebp - 0x3afc]
mov dword [ebp - 0x3b04], eax
cmp dword [ebp - 0x3b04], 0
jne 0x45c26a
mov eax, 0xa5c1
test eax, eax
jne 0x45c26a
and dword [ebp - 0x3b0c], 0
jmp 0x45c274
mov dword [ebp - 0x3b0c], 1
mov eax, dword [ebp - 0x804]
add eax, dword [ebp - 0x3b0c]
imul eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0xa4]
cmp eax, 0x30906344
jl 0x45c2b6
push dword [ebp - 0x100]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45c2b6
mov dword [ebp - 0x3b14], 1
jmp 0x45c2bd
and dword [ebp - 0x3b14], 0
cmp dword [ebp - 0x3b14], 0
ja 0x45c2d2
mov dword [ebp - 0x3b4c], 1
jmp 0x45c2d9
and dword [ebp - 0x3b4c], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x3b4c], eax
jne 0x45c2f3
mov dword [ebp - 0x3b54], 1
jmp 0x45c2fa
and dword [ebp - 0x3b54], 0
mov eax, dword [ebp - 0x3b54]
neg eax
jne 0x45c316
mov eax, 0xfefa2e57
test eax, eax
jne 0x45c316
and dword [ebp - 0x3b5c], 0
jmp 0x45c320
mov dword [ebp - 0x3b5c], 1
mov eax, dword [ebp - 0x3b5c]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x3b64], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b64]
mov dword [ebp + eax - 0x43c8], ecx
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x3b64], eax
jne 0x45c365
mov dword [ebp - 0x3b6c], 1
jmp 0x45c36c
and dword [ebp - 0x3b6c], 0
mov eax, dword [ebp - 0x3b6c]
inc eax
jne 0x45c381
mov dword [ebp - 0x3b74], 1
jmp 0x45c388
and dword [ebp - 0x3b74], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x3b74], eax
jg 0x45c3a2
mov dword [ebp - 0x3b7c], 1
jmp 0x45c3a9
and dword [ebp - 0x3b7c], 0
mov eax, dword [ebp - 0x3b7c]
mov dword [ebp - 0x3ba4], eax
push dword [ebp - 0x100]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov ecx, dword [ebp - 0x11c4]
cmp dword [eax], ecx
je 0x45c3dc
mov dword [ebp - 0x3b84], 1
jmp 0x45c3e3
and dword [ebp - 0x3b84], 0
mov eax, dword [ebp - 0x804]
cmp dword [ebp - 0x3b84], eax
jl 0x45c3fd
mov dword [ebp - 0x3b8c], 1
jmp 0x45c404
and dword [ebp - 0x3b8c], 0
push dword [ebp - 0x100]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3b8c]
cmp ecx, dword [eax]
jg 0x45c431
cmp dword [ebp - 0x13d4], 0
jne 0x45c431
and dword [ebp - 0x3b94], 0
jmp 0x45c43b
mov dword [ebp - 0x3b94], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x43c8]
cmp dword [ebp - 0x3b94], eax
je 0x45c45c
mov dword [ebp - 0x3b9c], 1
jmp 0x45c463
and dword [ebp - 0x3b9c], 0
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3b9c]
je 0x45c48a
mov dword [ebp - 0x4304], 1
jmp 0x45c491
and dword [ebp - 0x4304], 0
mov eax, dword [ebp - 0x3ba4]
mov dword [ebp - 0x5668], eax
push dword [ebp - 0x100]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x13d4]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x43c8]
cmp eax, 1
jb 0x45c4db
mov dword [ebp - 0x3bac], 1
jmp 0x45c4e2
and dword [ebp - 0x3bac], 0
cmp dword [ebp - 0x3bac], 0
jne 0x45c4f7
mov dword [ebp - 0x3bb4], 1
jmp 0x45c4fe
and dword [ebp - 0x3bb4], 0
push 1
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3bb4]
add ecx, dword [eax]
cmp ecx, 0x26da
jne 0x45c527
mov dword [ebp - 0x3bbc], 1
jmp 0x45c52e
and dword [ebp - 0x3bbc], 0
mov eax, dword [ebp - 0x13d4]
add eax, dword [ebp - 0x3bbc]
cmp eax, dword [ebp - 0x430c]
je 0x45c54e
mov dword [ebp - 0x3bc4], 1
jmp 0x45c555
and dword [ebp - 0x3bc4], 0
push dword [ebp - 0x100]
lea ecx, [ebp - 0x1528]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3bc4]
mov dword [eax], ecx
jmp 0x45c0d7
jmp 0x45c093
lea ecx, [ebp - 0x1528]
call fcn.00413d23
mov dword [ebp - 0x4f94], 3
mov dword [ebp - 0x4f90], 3
mov dword [ebp - 0x4f8c], 3
mov dword [ebp - 0x4f88], 3
lea ecx, [ebp - 0x1465]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x4f84]
push eax
lea eax, [ebp - 0x4f94]
push eax
lea ecx, [ebp - 0x6734]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5d3c]
call fcn.00413cfd
push 1
lea ecx, [ebp - 0x3f70]
call fcn.00413c51
mov dword [ebp - 0xd68], 0
jmp 0x45c606
mov eax, dword [ebp - 0xd68]
inc eax
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0xd68], 1
jge 0x45c628
push dword [ebp - 0xd68]
lea ecx, [ebp - 0x3f70]
call fcn.00413d3f
mov dword [eax], 0xfffffff6
jmp 0x45c5f9
push 0
lea ecx, [ebp - 0x3f70]
call fcn.00413d3f
mov dword [eax], 3
jmp 0x45c661
push 0
lea ecx, [ebp - 0x3f70]
call fcn.00413d3f
mov dword [ebp - 0x3bcc], eax
mov eax, dword [ebp - 0x3bcc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3bcc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3f70]
call fcn.00413d3f
cmp dword [eax], 0
jl 0x45c696
push 0
lea ecx, [ebp - 0x3f70]
call fcn.00413d3f
push dword [eax]
lea ecx, [ebp - 0x5d3c]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45c694
jmp 0x45c696
jmp 0x45c63d
lea ecx, [ebp - 0x3f70]
call fcn.00413d23
lea ecx, [ebp - 0x5d3c]
call fcn.00413d23
mov dword [ebp - 0x32a8], 0
mov dword [ebp - 0x4d4], 1
mov dword [ebp - 0x11cc], 0x37ac
mov dword [ebp - 0xf5c], 0x51938d10
mov dword [ebp - 0x4d4], 0
jmp 0x45c6ed
mov eax, dword [ebp - 0x4d4]
dec eax
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0xfffffff3
jg 0x45c8a4
mov dword [ebp - 0x4dc], 0x8bb4aad9
mov dword [ebp - 0x9d8], 0xfffffffe
mov dword [ebp - 0x4314], 0xffffffff
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x6308], eax
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x11cc], eax
mov eax, dword [ebp - 0x11cc]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x5af0], eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x6070], eax
mov eax, 0x57f2e3e3
sub eax, dword [ebp - 0x4dc]
add eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x11cc]
jne 0x45c779
mov dword [ebp - 0x3bd4], 1
jmp 0x45c780
and dword [ebp - 0x3bd4], 0
mov eax, dword [ebp - 0x4d4]
cmp dword [ebp - 0x3bd4], eax
jne 0x45c7a0
cmp dword [ebp - 0x4d4], 0
jne 0x45c7a0
and dword [ebp - 0x3bdc], 0
jmp 0x45c7aa
mov dword [ebp - 0x3bdc], 1
mov eax, dword [ebp - 0x4314]
add eax, dword [ebp - 0x3bdc]
cmp eax, dword [ebp - 0x4dc]
jne 0x45c7ca
mov dword [ebp - 0x431c], 1
jmp 0x45c7d1
and dword [ebp - 0x431c], 0
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x5af8], eax
mov eax, dword [ebp - 0xf5c]
dec eax
cmp eax, 3
je 0x45c7f5
mov dword [ebp - 0x3be4], 1
jmp 0x45c7fc
and dword [ebp - 0x3be4], 0
imul eax, dword [ebp - 0x3be4], 0x95b
cmp eax, 1
jge 0x45c817
mov dword [ebp - 0x4324], 1
jmp 0x45c81e
and dword [ebp - 0x4324], 0
mov eax, dword [ebp - 0xf5c]
mov dword [ebp - 0x64a4], eax
cmp dword [ebp - 0x4dc], 0
je 0x45c848
cmp dword [ebp - 0x9d8], 0
je 0x45c848
mov dword [ebp - 0x3bec], 1
jmp 0x45c84f
and dword [ebp - 0x3bec], 0
cmp dword [ebp - 0x3bec], 7
jg 0x45c864
mov dword [ebp - 0x3bf4], 1
jmp 0x45c86b
and dword [ebp - 0x3bf4], 0
mov eax, dword [ebp - 0xf5c]
imul eax, dword [ebp - 0x3bf4]
cmp eax, dword [ebp - 0x4dc]
jge 0x45c88c
mov dword [ebp - 0x3bfc], 1
jmp 0x45c893
and dword [ebp - 0x3bfc], 0
mov eax, dword [ebp - 0x3bfc]
mov dword [ebp - 0xf5c], eax
jmp 0x45c6e0
push 3
lea ecx, [ebp - 0x5d4c]
call fcn.00413c51
mov dword [ebp - 0x5b00], 0x7a876e6b
mov dword [ebp - 0x6080], 0x36444696
mov dword [ebp - 0x5b08], 7
mov dword [ebp - 0x6310], 0
mov dword [ebp - 0x5b10], 1
mov dword [ebp - 0x6090], 0x813f1a07
mov dword [ebp - 0x5b18], 5
mov dword [ebp - 0x6444], 0xfffffffc
mov dword [ebp - 0x5b20], 0x7e08a110
mov dword [ebp - 0x60a0], 0xffffffff
mov dword [ebp - 0x4d6c], 7
mov dword [ebp - 0x4d68], 7
mov dword [ebp - 0x4d64], 7
mov dword [ebp - 0x4d60], 7
mov dword [ebp - 0x224], 0
jmp 0x45c956
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x45c978
push dword [ebp - 0x224]
lea ecx, [ebp - 0x5d4c]
call fcn.00413d3f
mov dword [eax], 0x9ff6
jmp 0x45c949
mov dword [ebp - 0x224], 0
jmp 0x45c991
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x45c9ad
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x67d8], 6
jmp 0x45c984
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4d6c]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x4d6c], eax
lea ecx, [ebp - 0x5d4c]
call fcn.00413d23
mov dword [ebp - 0x344], 0
jmp 0x45c9ec
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 3
jge 0x45ca0e
push dword [ebp - 0x344]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov dword [eax], 0xf70ad6f2
jmp 0x45c9df
mov dword [ebp - 0x1c], 0x860b4ffb
mov dword [ebp - 0x3c8c], 0x4f27d270
mov dword [ebp - 0x9e8], 0x4a41637c
mov dword [ebp - 0x4e4], 0xfffffff8
mov dword [ebp - 0x4334], 0xc655ef1c
mov dword [ebp - 0x9e0], 0
jmp 0x45ca56
mov eax, dword [ebp - 0x9e0]
inc eax
mov dword [ebp - 0x9e0], eax
cmp dword [ebp - 0x9e0], 3
jge 0x45ca72
mov eax, dword [ebp - 0x9e0]
mov dword [ebp + eax*4 - 0x16b8], 1
jmp 0x45ca49
mov dword [ebp - 0x1c], 2
jmp 0x45ca82
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x45cb65
mov dword [ebp - 0x432c], 0x3b28
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x16b8]
mov dword [ebp - 0x5b28], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x16b8], 0
jne 0x45cad5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x16b8]
mov dword [ebp - 0x6318], eax
cmp dword [ebp - 0x3c8c], 0
jne 0x45cad5
and dword [ebp - 0x3c04], 0
jmp 0x45cadf
mov dword [ebp - 0x3c04], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp + eax*4 - 0x16b8], 0xffffffff
mov dword [ebp - 0x9e8], eax
cmp dword [ebp - 0x9e8], 0
je 0x45cb06
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x16b8], 0
jne 0x45cb1c
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x16b8], 0
jne 0x45cb1c
and dword [ebp - 0x3c0c], 0
jmp 0x45cb26
mov dword [ebp - 0x3c0c], 1
mov eax, dword [ebp - 0x3c04]
cmp eax, dword [ebp - 0x3c0c]
jg 0x45cb40
mov dword [ebp - 0x3c14], 1
jmp 0x45cb47
and dword [ebp - 0x3c14], 0
mov eax, dword [ebp - 0x3c14]
sub eax, dword [ebp - 0x432c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x16b8], eax
jmp 0x45ca7b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16b8]
mov dword [ebp - 0x5b30], eax
cmp dword [ebp - 0x9e8], 0
jne 0x45cc43
cmp dword [ebp - 0x4e4], 0
je 0x45cb95
cmp dword [ebp - 0x1c], 0xb6b
or eax, 0xffffffff
cmp eax, 0xf574
jg 0x45cbab
mov dword [ebp - 0x3c1c], 1
jmp 0x45cbb2
and dword [ebp - 0x3c1c], 0
cmp dword [ebp - 0x3c1c], 0x10a1
jge 0x45cbca
mov dword [ebp - 0x3c24], 1
jmp 0x45cbd1
and dword [ebp - 0x3c24], 0
mov eax, dword [ebp - 0x3c24]
sub eax, 0x18f7411a
jne 0x45cbf0
cmp dword [ebp - 0x4e4], 0
jne 0x45cbf0
and dword [ebp - 0x3c2c], 0
jmp 0x45cbfa
mov dword [ebp - 0x3c2c], 1
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x3c2c], eax
jle 0x45cc14
mov dword [ebp - 0x3c34], 1
jmp 0x45cc1b
and dword [ebp - 0x3c34], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c34]
mov dword [ebp + eax - 0x16b8], ecx
mov eax, 0x44ed25e4
cmp eax, 0x6ed55c5
je 0x45cc43
and dword [ebp - 0x3c3c], 0
jmp 0x45cc4d
mov dword [ebp - 0x3c3c], 1
cmp dword [ebp - 0x3c3c], 0x6fbc
jle 0x45cc65
mov dword [ebp - 0x3c44], 1
jmp 0x45cc6c
and dword [ebp - 0x3c44], 0
mov eax, dword [ebp - 0x3c44]
mov dword [ebp - 0x4e4], eax
imul eax, dword [ebp - 0x4e4], 0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x45cebe
mov dword [ebp - 0x3ca4], 0xfffffffe
mov dword [ebp - 0x6cc], 1
mov dword [ebp - 0xd70], 0
jmp 0x45ccb9
mov eax, dword [ebp - 0xd70]
inc eax
mov dword [ebp - 0xd70], eax
cmp dword [ebp - 0xd70], 2
jge 0x45ccd5
mov eax, dword [ebp - 0xd70]
mov dword [ebp + eax*4 - 0x6180], 0xdd14a140
jmp 0x45ccac
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x4e4], eax
jl 0x45ccef
mov dword [ebp - 0x3c4c], 1
jmp 0x45ccf6
and dword [ebp - 0x3c4c], 0
cmp dword [ebp - 0x3c4c], 0xaa7fcf62
jb 0x45cd0e
mov dword [ebp - 0x3c54], 1
jmp 0x45cd15
and dword [ebp - 0x3c54], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x3c54]
jl 0x45cd2c
mov dword [ebp - 0x3c5c], 1
jmp 0x45cd33
and dword [ebp - 0x3c5c], 0
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x3c5c], eax
jg 0x45cd4d
mov dword [ebp - 0x3c64], 1
jmp 0x45cd54
and dword [ebp - 0x3c64], 0
mov eax, dword [ebp - 0x3c64]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x6cc]
je 0x45cd71
mov dword [ebp - 0x3c6c], 1
jmp 0x45cd78
and dword [ebp - 0x3c6c], 0
cmp dword [ebp - 0x3c6c], 0xfd6f6066
jb 0x45cd90
mov dword [ebp - 0x3c74], 1
jmp 0x45cd97
and dword [ebp - 0x3c74], 0
mov eax, dword [ebp - 0x4334]
cmp dword [ebp - 0x3c74], eax
jle 0x45cdb1
mov dword [ebp - 0x3c7c], 1
jmp 0x45cdb8
and dword [ebp - 0x3c7c], 0
cmp dword [ebp - 0x3c7c], 3
je 0x45cdcd
mov dword [ebp - 0x3c84], 1
jmp 0x45cdd4
and dword [ebp - 0x3c84], 0
mov eax, dword [ebp - 0x3ca4]
mov ecx, dword [ebp - 0x3c84]
lea eax, [ecx + eax + 0x4378215c]
cmp eax, dword [ebp - 0x6cc]
je 0x45cdfb
mov dword [ebp - 0x3c94], 1
jmp 0x45ce02
and dword [ebp - 0x3c94], 0
mov eax, dword [ebp - 0x3c8c]
cmp dword [ebp - 0x3c94], eax
jg 0x45ce1c
mov dword [ebp - 0x3c9c], 1
jmp 0x45ce23
and dword [ebp - 0x3c9c], 0
mov eax, dword [ebp - 0x3c9c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xc9e48991
jb 0x45ce4a
cmp dword [ebp - 0x4e4], 0
je 0x45ce4a
mov dword [ebp - 0x3cac], 1
jmp 0x45ce51
and dword [ebp - 0x3cac], 0
mov eax, dword [ebp - 0x3ca4]
sub eax, dword [ebp - 0x3cac]
mov ecx, 0xe69ed994
sub ecx, eax
cmp dword [ebp - 0x9e8], ecx
jg 0x45ce81
cmp dword [ebp - 0x6cc], 0
je 0x45ce81
mov dword [ebp - 0x3d64], 1
jmp 0x45ce88
and dword [ebp - 0x3d64], 0
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x3d64], eax
jne 0x45cea2
mov dword [ebp - 0x3d6c], 1
jmp 0x45cea9
and dword [ebp - 0x3d6c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d6c]
mov dword [ebp + eax - 0x6180], ecx
jmp 0x45cefc
mov dword [ebp - 0x1c], 2
jmp 0x45cece
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x45cefc
mov byte [ebp - 0x46a], 0
movzx eax, byte [ebp - 0x46a]
test eax, eax
je 0x45cefa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
jmp 0x45cec7
mov dword [ebp - 0x344], 0
jmp 0x45cf15
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 2
jge 0x45cf31
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0x990], 0
jmp 0x45cf08
mov dword [ebp - 0x433c], 0x714a0256
mov dword [ebp - 0x60b0], 0x276b87d0
mov dword [ebp - 0x22c], 0
jmp 0x45cf5e
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x45cf7a
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x4344], 0x951ad386
jmp 0x45cf51
mov dword [ebp - 0x22c], 0
jmp 0x45cf93
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x45cfaf
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x5d5c], 0
jmp 0x45cf86
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d5c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5d5c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x433c]
mov dword [ebp + eax - 0x4344], ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x990], 2
jmp 0x45d00b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x990]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x990], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x990], 0
jl 0x45e51a
mov dword [ebp - 0xe8], 2
mov dword [ebp - 0x435c], 0x3ea3a722
mov dword [ebp - 0x1008], 0
jmp 0x45d04c
mov eax, dword [ebp - 0x1008]
inc eax
mov dword [ebp - 0x1008], eax
cmp dword [ebp - 0x1008], 2
jge 0x45d068
mov eax, dword [ebp - 0x1008]
mov dword [ebp + eax*4 - 0x7f4], 0x3342eb9
jmp 0x45d03f
mov dword [ebp - 0xe8], 1
jmp 0x45d081
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x45d34f
mov dword [ebp - 0x1700], 0xfffffffa
mov dword [ebp - 0x4e54], 0xfffffffd
mov dword [ebp - 0x4e50], 0xfffffffd
mov dword [ebp - 0x4e4c], 0xfffffffd
mov dword [ebp - 0x4e48], 0xfffffffd
lea ecx, [ebp - 0x146d]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x4e44]
push eax
lea eax, [ebp - 0x4e54]
push eax
lea ecx, [ebp - 0x67c4]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5d6c]
call fcn.00413cfd
mov dword [ebp - 0x3188], 0xd065835a
mov dword [ebp - 0x4354], 0xffffffff
mov dword [ebp - 0x9f0], 0
jmp 0x45d122
mov eax, dword [ebp - 0x9f0]
inc eax
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0x9f0], 1
jge 0x45d13e
mov eax, dword [ebp - 0x9f0]
mov dword [ebp + eax*4 - 0x1708], 0xc511ec1f
jmp 0x45d115
mov eax, 0x165352f7
test eax, eax
je 0x45d2ce
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0x7f4]
mov dword [ebp - 0x5b38], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0x7f4]
mov dword [ebp - 0x64fc], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp + eax*4 - 0x7f4], 0x70b1
je 0x45d190
mov dword [ebp - 0x16f0], 1
jmp 0x45d197
and dword [ebp - 0x16f0], 0
cmp dword [ebp - 0x16f0], 0xf928
jne 0x45d1bc
mov eax, dword [ebp - 0xe8]
cmp dword [ebp + eax*4 - 0x7f4], 0
jne 0x45d1bc
and dword [ebp - 0x3170], 0
jmp 0x45d1c6
mov dword [ebp - 0x3170], 1
cmp dword [ebp - 0x3170], 0x129b8575
jne 0x45d1de
mov dword [ebp - 0x16f8], 1
jmp 0x45d1e5
and dword [ebp - 0x16f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f4]
cmp dword [ebp - 0x16f8], eax
je 0x45d206
mov dword [ebp - 0x434c], 1
jmp 0x45d20d
and dword [ebp - 0x434c], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0x7f4]
mov dword [ebp - 0x5b40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7f4]
mov dword [ebp - 0x60c0], eax
mov eax, dword [ebp - 0xe8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7f4]
cmp dword [ebp + eax*4 - 0x7f4], ecx
jne 0x45d25b
mov dword [ebp - 0x3178], 1
jmp 0x45d262
and dword [ebp - 0x3178], 0
mov eax, dword [ebp - 0x3178]
mov dword [ebp - 0x1700], eax
cmp dword [ebp - 0x1700], 0
jne 0x45d287
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x45d287
and dword [ebp - 0x1580], 0
jmp 0x45d291
mov dword [ebp - 0x1580], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1580]
mov dword [ebp + eax - 0x1708], ecx
push 3
lea ecx, [ebp - 0x5d6c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1580]
mov dword [eax], ecx
mov eax, 0x2718b962
test eax, eax
je 0x45d2ce
mov dword [ebp - 0x3180], 1
jmp 0x45d2d5
and dword [ebp - 0x3180], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0x7f4]
add eax, dword [ebp - 0x3180]
je 0x45d306
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1708], 0
je 0x45d306
mov dword [ebp - 0x11d4], 1
jmp 0x45d30d
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x11d4]
mov dword [ebp + eax*4 - 0x7f4], ecx
mov eax, dword [ebp - 0x11d4]
inc eax
sub eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3188], eax
mov eax, dword [ebp - 0x3188]
mov dword [ebp - 0x4354], eax
lea ecx, [ebp - 0x5d6c]
call fcn.00413d23
jmp 0x45d074
mov eax, dword [ebp - 0x435c]
mov dword [ebp - 0x1710], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1710]
mov dword [ebp + eax - 0x7f4], ecx
mov eax, dword [ebp - 0x1710]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x234], 0xfb770a77
mov dword [ebp - 0x13dc], 0xfffffffd
mov dword [ebp - 0x11dc], 0xf6f97812
mov dword [ebp - 0x31b0], 0xea21
mov dword [ebp - 0xf40], 0x3f5cfeb4
mov dword [ebp - 0xd78], 0
jmp 0x45d3c5
mov eax, dword [ebp - 0xd78]
inc eax
mov dword [ebp - 0xd78], eax
cmp dword [ebp - 0xd78], 2
jge 0x45d3e1
mov eax, dword [ebp - 0xd78]
mov dword [ebp + eax*4 - 0x3b20], 0
jmp 0x45d3b8
mov dword [ebp - 0x13dc], 0xfffffffe
cmp dword [ebp - 0x13dc], 0x91ba
jle 0x45d403
mov dword [ebp - 0x3190], 1
jmp 0x45d40a
and dword [ebp - 0x3190], 0
cmp dword [ebp - 0x3190], 1
jne 0x45d41f
mov dword [ebp - 0x1718], 1
jmp 0x45d426
and dword [ebp - 0x1718], 0
mov eax, dword [ebp - 0x11dc]
cmp dword [ebp - 0x1718], eax
jl 0x45d440
mov dword [ebp - 0x3198], 1
jmp 0x45d447
and dword [ebp - 0x3198], 0
cmp dword [ebp - 0x3198], 0xf2f34e40
ja 0x45d45f
mov dword [ebp - 0x1720], 1
jmp 0x45d466
and dword [ebp - 0x1720], 0
imul eax, dword [ebp - 0x1720], 9
imul eax, eax, 0xfffa
test eax, eax
je 0x45d54c
mov dword [ebp - 0x1730], 0xfffffffb
cmp dword [ebp - 0x31b0], 0
jne 0x45d49e
push 4
pop eax
test eax, eax
jne 0x45d49e
and dword [ebp - 0x31a0], 0
jmp 0x45d4a8
mov dword [ebp - 0x31a0], 1
mov eax, dword [ebp - 0x1730]
cmp dword [ebp - 0x31a0], eax
je 0x45d4c2
mov dword [ebp - 0x1728], 1
jmp 0x45d4c9
and dword [ebp - 0x1728], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b20]
cmp eax, dword [ebp - 0x1728]
jl 0x45d4ee
push 7
pop eax
test eax, eax
jne 0x45d4ee
and dword [ebp - 0x31a8], 0
jmp 0x45d4f8
mov dword [ebp - 0x31a8], 1
mov eax, dword [ebp - 0x31a8]
inc eax
cmp eax, dword [ebp - 0x1730]
je 0x45d513
mov dword [ebp - 0x1738], 1
jmp 0x45d51a
and dword [ebp - 0x1738], 0
mov eax, dword [ebp - 0x31b0]
cmp dword [ebp - 0x1738], eax
je 0x45d534
mov dword [ebp - 0x31b8], 1
jmp 0x45d53b
and dword [ebp - 0x31b8], 0
mov eax, dword [ebp - 0x31b8]
mov dword [ebp - 0xf40], eax
jmp 0x45d86a
mov dword [ebp - 0x13c], 0x3ede
mov dword [ebp - 0x15c], 0x4d3380d4
mov eax, dword [ebp - 0x13dc]
add eax, dword [ebp - 0x13c]
cmp eax, 0x85c68ab8
ja 0x45d57f
mov dword [ebp - 0x1740], 1
jmp 0x45d586
and dword [ebp - 0x1740], 0
cmp dword [ebp - 0x1740], 0xffffffff
jbe 0x45d59b
mov dword [ebp - 0x31c0], 1
jmp 0x45d5a2
and dword [ebp - 0x31c0], 0
mov eax, dword [ebp - 0xf40]
cmp dword [ebp - 0x31c0], eax
jle 0x45d5bc
mov dword [ebp - 0x4364], 1
jmp 0x45d5c3
and dword [ebp - 0x4364], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x5b48], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x6320], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jne 0x45d602
cmp dword [ebp - 0x13c], 0
jne 0x45d602
and dword [ebp - 0x436c], 0
jmp 0x45d60c
mov dword [ebp - 0x436c], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x5b50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b20], 0
je 0x45d801
mov dword [ebp - 0x9f8], 0
jmp 0x45d645
mov eax, dword [ebp - 0x9f8]
inc eax
mov dword [ebp - 0x9f8], eax
cmp dword [ebp - 0x9f8], 4
jge 0x45d661
mov eax, dword [ebp - 0x9f8]
mov dword [ebp + eax*4 - 0x4cfc], 0xfffffff6
jmp 0x45d638
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x4cfc], 0
jne 0x45d6f7
push 2
pop eax
test eax, eax
je 0x45d6ad
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3b20]
cmp dword [ebp + eax - 0x4cfc], ecx
jle 0x45d6a1
cmp dword [ebp - 0x15c], 0
je 0x45d6ad
mov dword [ebp - 0x1748], 1
jmp 0x45d6b4
and dword [ebp - 0x1748], 0
mov eax, dword [ebp - 0x1748]
mov dword [ebp - 0xf40], eax
cmp dword [ebp - 0xf40], 0
je 0x45d6de
cmp dword [ebp - 0x11dc], 0
je 0x45d6de
mov dword [ebp - 0x31c8], 1
jmp 0x45d6e5
and dword [ebp - 0x31c8], 0
mov eax, dword [ebp - 0x31c8]
dec eax
jne 0x45d6f7
and dword [ebp - 0x1750], 0
jmp 0x45d701
mov dword [ebp - 0x1750], 1
cmp dword [ebp - 0x1750], 9
jae 0x45d716
mov dword [ebp - 0x31d0], 1
jmp 0x45d71d
and dword [ebp - 0x31d0], 0
mov eax, dword [ebp - 0x31d0]
sub eax, 0xc87c
je 0x45d738
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x4cfc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b20]
mov dword [ebp - 0x60d0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x5b58], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4cfc]
mov dword [ebp - 0x644c], eax
mov eax, 0x777
test eax, eax
jne 0x45d77c
cmp dword [ebp - 0x15c], 0
je 0x45d791
cmp dword [ebp - 0x15c], 0
je 0x45d791
mov dword [ebp - 0x1758], 1
jmp 0x45d798
and dword [ebp - 0x1758], 0
mov eax, dword [ebp - 0x1758]
neg eax
cmp eax, dword [ebp - 0x15c]
je 0x45d7b4
mov dword [ebp - 0x31d8], 1
jmp 0x45d7bb
and dword [ebp - 0x31d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x31d8]
sub ecx, dword [ebp + eax - 0x4cfc]
jne 0x45d7e9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b20], 0
jne 0x45d7e9
and dword [ebp - 0x1760], 0
jmp 0x45d7f3
mov dword [ebp - 0x1760], 1
mov eax, dword [ebp - 0x1760]
mov dword [ebp - 0x15c], eax
jmp 0x45d86a
mov dword [ebp - 0x31e0], 0x266a
mov dword [ebp - 0x15c], 0
jmp 0x45d824
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xa
jge 0x45d83a
cmp dword [ebp - 0x31e0], 0
je 0x45d838
jmp 0x45d83a
jmp 0x45d817
mov dword [ebp - 0x13c], 0
jmp 0x45d853
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x23
jle 0x45d86a
mov eax, dword [ebp - 0x31e0]
mov dword [ebp - 0x11dc], eax
jmp 0x45d846
mov dword [ebp - 0x4394], 2
push 4
lea ecx, [ebp - 0x5d7c]
call fcn.00413c51
mov dword [ebp - 0xa00], 0
jmp 0x45d89a
mov eax, dword [ebp - 0xa00]
inc eax
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0xa00], 4
jge 0x45d8bc
push dword [ebp - 0xa00]
lea ecx, [ebp - 0x5d7c]
call fcn.00413d3f
mov dword [eax], 4
jmp 0x45d88d
mov byte [ebp - 0x46c], 0
movzx eax, byte [ebp - 0x46c]
test eax, eax
je 0x45d8e3
push 0
push 0x1a3e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0x46e], 0
movzx eax, byte [ebp - 0x46e]
test eax, eax
je 0x45d900
push 0x681
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [ebp - 0x5d7c]
call fcn.00413d23
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x990]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45d92d
jmp 0x45e51a
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x11e4], 6
mov dword [ebp - 0x3c4], 0xfffffffc
mov dword [ebp - 0x7dc], 0xffffffff
mov dword [ebp - 0xd80], 0
jmp 0x45d978
mov eax, dword [ebp - 0xd80]
inc eax
mov dword [ebp - 0xd80], eax
cmp dword [ebp - 0xd80], 1
jge 0x45d994
mov eax, dword [ebp - 0xd80]
mov dword [ebp + eax*4 - 0x80c], 0xe836ea0e
jmp 0x45d96b
cmp dword [ebp - 0x8cc], 1
jle 0x45d9a9
mov dword [ebp - 0x1768], 1
jmp 0x45d9b0
and dword [ebp - 0x1768], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x1768], eax
jg 0x45d9cf
xor eax, eax
inc eax
je 0x45d9cf
mov dword [ebp - 0x31e8], 1
jmp 0x45d9d6
and dword [ebp - 0x31e8], 0
mov eax, dword [ebp - 0x8cc]
cmp dword [ebp - 0x31e8], eax
je 0x45d9f6
cmp dword [ebp - 0x17c], 0
jne 0x45d9f6
and dword [ebp - 0x1770], 0
jmp 0x45da00
mov dword [ebp - 0x1770], 1
mov eax, dword [ebp - 0x1770]
sub eax, 0x4087a912
neg eax
cmp eax, 0xfffffff7
jbe 0x45da1e
mov dword [ebp - 0x31f0], 1
jmp 0x45da25
and dword [ebp - 0x31f0], 0
mov eax, dword [ebp - 0x31f0]
mov dword [ebp - 0x11e4], eax
mov eax, dword [ebp - 0x8cc]
cmp dword [ebp - 0x11e4], eax
je 0x45da51
cmp dword [ebp - 0x17c], 0
jne 0x45da51
and dword [ebp - 0x1778], 0
jmp 0x45da5b
mov dword [ebp - 0x1778], 1
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x1778], eax
je 0x45da75
mov dword [ebp - 0x31f8], 1
jmp 0x45da7c
and dword [ebp - 0x31f8], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x31f8], eax
jne 0x45da96
mov dword [ebp - 0x1780], 1
jmp 0x45da9d
and dword [ebp - 0x1780], 0
mov eax, dword [ebp - 0x1780]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x5b60], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x60e0], eax
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x7dc], eax
jl 0x45dadb
mov dword [ebp - 0x3200], 1
jmp 0x45dae2
and dword [ebp - 0x3200], 0
mov eax, dword [ebp - 0x8cc]
cmp dword [ebp - 0x3200], eax
jg 0x45dafc
mov dword [ebp - 0x1788], 1
jmp 0x45db03
and dword [ebp - 0x1788], 0
mov eax, dword [ebp - 0x8cc]
cmp dword [ebp - 0x1788], eax
je 0x45dd08
mov dword [ebp - 0x14d4], 1
mov dword [ebp - 0x437c], 2
mov dword [ebp - 0x3220], 1
mov dword [ebp - 0x3c4], 0
jmp 0x45db4c
mov eax, dword [ebp - 0x3c4]
dec eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
jl 0x45dd03
mov dword [ebp - 0x1790], 0xe785e8a7
mov dword [ebp - 0x3218], 0xf4a3ca5a
mov dword [ebp - 0x17c], 0
jmp 0x45db86
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jg 0x45dbc7
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x3c4]
mov eax, dword [ebp + eax*4 - 0x80c]
mov dword [ebp + ecx*4 - 0x80c], eax
mov byte [ebp - 0x470], 0
movzx eax, byte [ebp - 0x470]
test eax, eax
je 0x45dbc5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x45db79
cmp dword [ebp - 0x14d4], 2
je 0x45dc4f
mov eax, dword [ebp - 0x3c4]
mov eax, dword [ebp + eax*4 - 0x80c]
cmp dword [ebp - 0x1790], eax
jg 0x45dbf1
mov dword [ebp - 0x3208], 1
jmp 0x45dbf8
and dword [ebp - 0x3208], 0
mov eax, dword [ebp - 0x14d4]
cmp dword [ebp - 0x3208], eax
jge 0x45dc12
mov dword [ebp - 0x3210], 1
jmp 0x45dc19
and dword [ebp - 0x3210], 0
mov eax, dword [ebp - 0x1790]
cmp dword [ebp - 0x3210], eax
jg 0x45dc33
mov dword [ebp - 0x1798], 1
jmp 0x45dc3a
and dword [ebp - 0x1798], 0
cmp dword [ebp - 0x1798], 2
jne 0x45dc4f
mov dword [ebp - 0x4374], 1
jmp 0x45dc56
and dword [ebp - 0x4374], 0
mov eax, dword [ebp - 0x14d4]
mov dword [ebp - 0x5b68], eax
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x6328], eax
mov eax, dword [ebp - 0x437c]
mov dword [ebp - 0x5b70], eax
mov eax, dword [ebp - 0x11e4]
mov dword [ebp - 0x60f0], eax
mov eax, dword [ebp - 0x3218]
mov dword [ebp - 0x5b78], eax
mov eax, dword [ebp - 0x3c4]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x80c]
cmp dword [ebp + eax*4 - 0x80c], ecx
jle 0x45dcc0
cmp dword [ebp - 0x3218], 0
jne 0x45dcc0
and dword [ebp - 0x17a0], 0
jmp 0x45dcca
mov dword [ebp - 0x17a0], 1
mov eax, dword [ebp - 0x17a0]
mov dword [ebp - 0x3220], eax
cmp dword [ebp - 0x3220], 0
jne 0x45dceb
mov dword [ebp - 0x17a8], 1
jmp 0x45dcf2
and dword [ebp - 0x17a8], 0
mov eax, dword [ebp - 0x17a8]
mov dword [ebp - 0x7dc], eax
jmp 0x45db3f
jmp 0x45de4b
mov dword [ebp - 0x13e4], 1
mov dword [ebp - 0x11ec], 0x3ae864ea
mov dword [ebp - 0xa08], 0
jmp 0x45dd35
mov eax, dword [ebp - 0xa08]
inc eax
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 2
jge 0x45dd51
mov eax, dword [ebp - 0xa08]
mov dword [ebp + eax*4 - 0x5ba4], 0x2fb88b70
jmp 0x45dd28
mov eax, dword [ebp - 0x13e4]
sub eax, dword [ebp - 0x13e4]
je 0x45de0e
mov eax, dword [ebp - 0x17c]
shl eax, 1
cmp eax, 1
jne 0x45dd7c
mov dword [ebp - 0x3228], 1
jmp 0x45dd83
and dword [ebp - 0x3228], 0
cmp dword [ebp - 0x3228], 0xffffffff
jl 0x45dd98
mov dword [ebp - 0x17b0], 1
jmp 0x45dd9f
and dword [ebp - 0x17b0], 0
mov eax, dword [ebp - 0x13e4]
cmp dword [ebp - 0x17b0], eax
jge 0x45ddb9
mov dword [ebp - 0x3230], 1
jmp 0x45ddc0
and dword [ebp - 0x3230], 0
mov eax, dword [ebp - 0x3230]
mov dword [ebp - 0x11ec], eax
cmp dword [ebp - 0x11ec], 0x702
jl 0x45ddea
cmp dword [ebp - 0x11ec], 0
jne 0x45ddea
and dword [ebp - 0x17b8], 0
jmp 0x45ddf4
mov dword [ebp - 0x17b8], 1
mov eax, dword [ebp - 0x7dc]
cmp dword [ebp - 0x17b8], eax
jg 0x45de0e
mov dword [ebp - 0x3238], 1
jmp 0x45de15
and dword [ebp - 0x3238], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3238]
mov dword [ebp + eax - 0x5ba4], ecx
mov byte [ebp - 0x472], 0
movzx eax, byte [ebp - 0x472]
test eax, eax
je 0x45de4b
push 0
push 0
push 0x17d5
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 0x234], 0
jmp 0x45de64
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jg 0x45e515
mov dword [ebp - 0x144], 0xfffffffd
mov dword [ebp - 0x3240], 6
mov dword [ebp - 0x3260], 0x75761ac7
mov dword [ebp - 0x4384], 0x6e523240
mov dword [ebp - 0x1070], 0
jmp 0x45deb2
mov eax, dword [ebp - 0x1070]
inc eax
mov dword [ebp - 0x1070], eax
cmp dword [ebp - 0x1070], 1
jge 0x45dece
mov eax, dword [ebp - 0x1070]
mov dword [ebp + eax*4 - 0x155c], 0xfffffffc
jmp 0x45dea5
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x144], eax
jg 0x45dee8
mov dword [ebp - 0x17e8], 1
jmp 0x45deef
and dword [ebp - 0x17e8], 0
cmp dword [ebp - 0x144], 0
je 0x45df09
xor eax, eax
inc eax
je 0x45df09
mov dword [ebp - 0x17c8], 1
jmp 0x45df10
and dword [ebp - 0x17c8], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x144], eax
jge 0x45df2a
mov dword [ebp - 0x17c0], 1
jmp 0x45df31
and dword [ebp - 0x17c0], 0
mov eax, dword [ebp - 0x17c0]
mov dword [ebp - 0x3240], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3240]
mov dword [ebp + eax - 0x155c], ecx
xor eax, eax
neg eax
neg eax
jne 0x45df71
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x155c], 0
jne 0x45df71
and dword [ebp - 0x3248], 0
jmp 0x45df7b
mov dword [ebp - 0x3248], 1
mov eax, dword [ebp - 0x17c8]
cmp eax, dword [ebp - 0x3248]
jne 0x45df95
mov dword [ebp - 0x17d0], 1
jmp 0x45df9c
and dword [ebp - 0x17d0], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x17d0], eax
je 0x45dfb6
mov dword [ebp - 0x3250], 1
jmp 0x45dfbd
and dword [ebp - 0x3250], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x3250], eax
jge 0x45dfd7
mov dword [ebp - 0x17d8], 1
jmp 0x45dfde
and dword [ebp - 0x17d8], 0
imul eax, dword [ebp - 0x17d8], 0x5257
neg eax
cmp eax, 0x81de
jne 0x45dffd
mov dword [ebp - 0x3258], 1
jmp 0x45e004
and dword [ebp - 0x3258], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x3258], eax
jl 0x45e01e
mov dword [ebp - 0x17e0], 1
jmp 0x45e025
and dword [ebp - 0x17e0], 0
mov eax, dword [ebp - 0x17e0]
mov dword [ebp - 0x3260], eax
mov eax, dword [ebp - 0x3260]
mov dword [ebp - 0x64ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x144]
cmp dword [ebp + eax - 0x155c], ecx
jg 0x45e05e
mov dword [ebp - 0x3268], 1
jmp 0x45e065
and dword [ebp - 0x3268], 0
mov eax, dword [ebp - 0x17e8]
sub eax, dword [ebp - 0x3268]
add eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x144]
cmp eax, 0xd77dfcc8
ja 0x45e091
mov dword [ebp - 0x17f0], 1
jmp 0x45e098
and dword [ebp - 0x17f0], 0
mov eax, dword [ebp - 0x17f0]
mov dword [ebp - 0x4384], eax
mov byte [ebp - 0x474], 0
movzx eax, byte [ebp - 0x474]
test eax, eax
je 0x45e0cb
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
push dword [ebp - 0x234]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x990]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov ecx, dword [esi]
mov dword [eax], ecx
mov dword [ebp - 0x3d8], 0x24039b64
mov dword [ebp - 0x3280], 0x42b9193c
mov byte [ebp - 0x476], 0
movzx eax, byte [ebp - 0x476]
test eax, eax
je 0x45e128
push 0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp dword [ebp - 0x3d8], 0
je 0x45e161
mov dword [ebp - 0x5b80], 1
mov dword [ebp - 0x6100], 0xfffffff8
mov dword [ebp - 0x3270], 0xf55e00fe
mov eax, dword [ebp - 0x3270]
inc eax
mov dword [ebp - 0x3270], eax
jmp 0x45e37a
mov dword [ebp - 0x17f8], 0
mov dword [ebp - 0xa10], 0
jmp 0x45e184
mov eax, dword [ebp - 0xa10]
inc eax
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 2
jge 0x45e1a0
mov eax, dword [ebp - 0xa10]
mov dword [ebp + eax*4 - 0x66b4], 0xfffffff7
jmp 0x45e177
mov dword [ebp - 0x3d8], 3
jmp 0x45e1b9
mov eax, dword [ebp - 0x3d8]
dec eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 2
jne 0x45e37a
mov dword [ebp - 0xa18], 0xfffffffe
push 3
lea ecx, [ebp - 0x4b64]
call fcn.00413c51
mov dword [ebp - 0xd88], 0
jmp 0x45e1f6
mov eax, dword [ebp - 0xd88]
inc eax
mov dword [ebp - 0xd88], eax
cmp dword [ebp - 0xd88], 3
jge 0x45e215
push dword [ebp - 0xd88]
lea ecx, [ebp - 0x4b64]
call fcn.00413d3f
and dword [eax], 0
jmp 0x45e1e9
cmp dword [ebp - 0x3d8], 0
je 0x45e22e
lea ecx, [ebp - 0x4b64]
call fcn.00413d23
jmp 0x45e37a
mov dword [ebp - 0xa18], 0
jmp 0x45e247
mov eax, dword [ebp - 0xa18]
inc eax
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 1
jg 0x45e36a
mov dword [ebp - 0x3278], 0xf1fdbd01
mov eax, dword [ebp - 0x17f8]
mov dword [ebp - 0x5b88], eax
mov dword [ebp - 0x3278], 0
mov eax, dword [ebp - 0x17f8]
cmp dword [ebp - 0x3278], eax
je 0x45e28e
mov dword [ebp - 0x1800], 1
jmp 0x45e295
and dword [ebp - 0x1800], 0
cmp dword [ebp - 0x3d8], 0x8064
jg 0x45e2ad
mov dword [ebp - 0x1808], 1
jmp 0x45e2b4
and dword [ebp - 0x1808], 0
mov eax, dword [ebp - 0x1800]
mov dword [ebp - 0x3280], eax
mov eax, dword [ebp - 0x3280]
cmp eax, dword [ebp - 0x1808]
je 0x45e2da
mov dword [ebp - 0x3288], 1
jmp 0x45e2e1
and dword [ebp - 0x3288], 0
cmp dword [ebp - 0x3288], 7
jle 0x45e2f6
mov dword [ebp - 0x1810], 1
jmp 0x45e2fd
and dword [ebp - 0x1810], 0
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x1810], eax
je 0x45e317
mov dword [ebp - 0x3290], 1
jmp 0x45e31e
and dword [ebp - 0x3290], 0
push 2
lea ecx, [ebp - 0x4b64]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3290]
mov dword [eax], ecx
mov byte [ebp - 0x478], 0
movzx eax, byte [ebp - 0x478]
test eax, eax
je 0x45e365
push 0
push 0x143f
push 0xade
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
jmp 0x45e23a
lea ecx, [ebp - 0x4b64]
call fcn.00413d23
jmp 0x45e1ac
push dword [ebp - 0x234]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x990]
cmp dword [eax], ecx
jl 0x45e3a8
mov dword [ebp - 0x1818], 1
jmp 0x45e3af
and dword [ebp - 0x1818], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x990]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1818]
cmp ecx, dword [eax]
jne 0x45e3dd
mov dword [ebp - 0x438c], 1
jmp 0x45e3e4
and dword [ebp - 0x438c], 0
push dword [ebp - 0x234]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x990]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
cmp dword [eax], 7
jbe 0x45e41e
mov dword [ebp - 0x3298], 1
jmp 0x45e425
and dword [ebp - 0x3298], 0
push dword [ebp - 0x234]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3298]
add ecx, dword [eax]
imul eax, ecx, 5
test eax, eax
jne 0x45e457
cmp dword [ebp - 0x234], 0
jne 0x45e457
and dword [ebp - 0x1820], 0
jmp 0x45e461
mov dword [ebp - 0x1820], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x990]
cmp dword [ebp - 0x1820], eax
jg 0x45e482
mov dword [ebp - 0x32a0], 1
jmp 0x45e489
and dword [ebp - 0x32a0], 0
push 2
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x32a0]
jg 0x45e4ac
mov dword [ebp - 0x1828], 1
jmp 0x45e4b3
and dword [ebp - 0x1828], 0
push 0
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
mov eax, dword [eax]
imul eax, dword [ebp - 0x1828]
mov dword [ebp - 0x32a8], eax
mov esi, dword [ebp - 0x32a8]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x990]
lea ecx, [ebp - 0x1110]
call fcn.00413d3f
cmp esi, dword [eax]
je 0x45e4fd
mov dword [ebp - 0x1830], 1
jmp 0x45e504
and dword [ebp - 0x1830], 0
mov eax, dword [ebp - 0x1830]
mov dword [ebp - 0x4394], eax
jmp 0x45de57
jmp 0x45cff0
mov dword [ebp - 0x1cc], 0x90ac204e
mov dword [ebp - 0x11f4], 0x1ba028ea
push 4
lea ecx, [ebp - 0x1594]
call fcn.00413c51
mov dword [ebp - 0xf48], 1
mov dword [ebp - 0x32c8], 0
push 2
lea ecx, [ebp - 0x51b4]
call fcn.00413c51
mov dword [ebp - 0x20c], 0
jmp 0x45e575
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x45e594
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
and dword [eax], 0
jmp 0x45e568
mov dword [ebp - 0x20c], 0
jmp 0x45e5ad
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x45e5cf
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x51b4]
call fcn.00413d3f
mov dword [eax], 0x458d81c9
jmp 0x45e5a0
mov dword [ebp - 0x1cc], 0
jmp 0x45e5e8
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xffffffeb
jg 0x45e806
mov dword [ebp - 0x50d4], 0x17ca0029
mov dword [ebp - 0x50d0], 0x17ca0029
mov dword [ebp - 0x50cc], 0x17ca0029
mov dword [ebp - 0x50c8], 0x17ca0029
lea ecx, [ebp - 0x14b9]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x50c4]
push eax
lea eax, [ebp - 0x50d4]
push eax
lea ecx, [ebp - 0x6744]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5334]
call fcn.00413cfd
mov dword [ebp - 0x420], 0x438bea12
mov dword [ebp - 0x439c], 0xffffffff
mov dword [ebp - 0x420], 3
jmp 0x45e67f
mov eax, dword [ebp - 0x420]
dec eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
jl 0x45e695
cmp dword [ebp - 0x420], 0
je 0x45e693
jmp 0x45e695
jmp 0x45e672
cmp dword [ebp - 0x420], 0
jne 0x45e6c2
imul eax, dword [ebp - 0xf48], 0xe45b
mov ecx, dword [ebp - 0xf48]
dec ecx
mov dword [ebp - 0xf48], ecx
test eax, eax
jne 0x45e6c2
and dword [ebp - 0x1840], 0
jmp 0x45e6cc
mov dword [ebp - 0x1840], 1
push 2
lea ecx, [ebp - 0x5334]
call fcn.00413d3f
mov eax, dword [ebp - 0x11f4]
mov dword [ebp - 0x6178], eax
push 3
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
mov esi, dword [ebp - 0x420]
push 3
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
imul esi, dword [eax]
cmp esi, 0x32883e73
jle 0x45e71c
mov dword [ebp - 0x32b0], 1
jmp 0x45e723
and dword [ebp - 0x32b0], 0
mov eax, dword [ebp - 0x32b0]
sub eax, dword [ebp - 0x439c]
sub eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x1cc]
jne 0x45e749
mov dword [ebp - 0x1838], 1
jmp 0x45e750
and dword [ebp - 0x1838], 0
cmp dword [ebp - 0x1838], 0
jbe 0x45e765
mov dword [ebp - 0x32b8], 1
jmp 0x45e76c
and dword [ebp - 0x32b8], 0
push 0
lea ecx, [ebp - 0x5334]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x32b8]
jg 0x45e78f
mov dword [ebp - 0x32c0], 1
jmp 0x45e796
and dword [ebp - 0x32c0], 0
mov eax, dword [ebp - 0x1840]
cmp eax, dword [ebp - 0x32c0]
jge 0x45e7b0
mov dword [ebp - 0x1848], 1
jmp 0x45e7b7
and dword [ebp - 0x1848], 0
cmp dword [ebp - 0x1848], 0
je 0x45e7d7
mov esi, dword [ebp - 0x420]
push 2
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
mov dword [eax], esi
jmp 0x45e7f6
mov dword [ebp - 0x43a4], 0x21576660
push 2
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x43a4], eax
lea ecx, [ebp - 0x5334]
call fcn.00413d23
jmp 0x45e5db
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x5b90], eax
mov eax, dword [ebp - 0x32c8]
sub eax, 0x7d904387
mov dword [ebp - 0x11f4], eax
mov eax, dword [ebp - 0x32c8]
cmp dword [ebp - 0x11f4], eax
jne 0x45e83d
mov dword [ebp - 0x1850], 1
jmp 0x45e844
and dword [ebp - 0x1850], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x1850], eax
jle 0x45e864
push 2
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
cmp dword [eax], 0
jne 0x45e874
push 2
pop eax
test eax, eax
jne 0x45e874
and dword [ebp - 0x32d0], 0
jmp 0x45e87e
mov dword [ebp - 0x32d0], 1
push 0
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
mov esi, dword [eax]
add esi, dword [ebp - 0x32d0]
push 0
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
cmp esi, dword [eax]
jg 0x45e8b0
mov dword [ebp - 0x1858], 1
jmp 0x45e8b7
and dword [ebp - 0x1858], 0
cmp dword [ebp - 0x1858], 0x2570
je 0x45e8cf
mov dword [ebp - 0x32d8], 1
jmp 0x45e8d6
and dword [ebp - 0x32d8], 0
push 0
lea ecx, [ebp - 0x1594]
call fcn.00413d3f
mov ecx, dword [ebp - 0x32d8]
mov dword [eax], ecx
mov dword [ebp - 0x1cc], 0x4e2bba6d
mov eax, dword [ebp - 0xf48]
cmp dword [ebp - 0x1cc], eax
jge 0x45e90f
mov dword [ebp - 0x1860], 1
jmp 0x45e916
and dword [ebp - 0x1860], 0
push 0
lea ecx, [ebp - 0x51b4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1860]
mov dword [eax], ecx
lea ecx, [ebp - 0x51b4]
call fcn.00413d23
lea ecx, [ebp - 0x1594]
call fcn.00413d23
mov dword [ebp - 0x1870], 0x44ad72d7
mov dword [ebp - 0x32e8], 0xa278c007
mov dword [ebp - 0x32f0], 0x2189f42c
mov dword [ebp - 0x1880], 0xd65f4e26
mov dword [ebp - 0x4e7c], 1
mov dword [ebp - 0x4e78], 1
mov dword [ebp - 0x4e74], 1
mov dword [ebp - 0x4e70], 1
lea ecx, [ebp - 0x14cb]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x4e6c]
push eax
lea eax, [ebp - 0x4e7c]
push eax
lea ecx, [ebp - 0x6614]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5d8c]
call fcn.00413cfd
mov dword [ebp - 0xa20], 0
jmp 0x45e9df
mov eax, dword [ebp - 0xa20]
inc eax
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 1
jge 0x45e9fb
mov eax, dword [ebp - 0xa20]
mov dword [ebp + eax*4 - 0x7e4], 0x2a4f
jmp 0x45e9d2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7e4]
cmp dword [ebp + eax - 0x7e4], ecx
jle 0x45ea23
mov dword [ebp - 0x32e0], 1
jmp 0x45ea2a
and dword [ebp - 0x32e0], 0
cmp dword [ebp - 0x32e0], 0
jae 0x45ea3f
mov dword [ebp - 0x1868], 1
jmp 0x45ea46
and dword [ebp - 0x1868], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7e4]
mov dword [ebp - 0x1870], eax
mov eax, dword [ebp - 0x1868]
mov dword [ebp - 0x32e8], eax
mov eax, 0x98e64e6d
sub eax, dword [ebp - 0x32e8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7e4]
imul ecx, eax
mov dword [ebp - 0x32f0], ecx
mov eax, dword [ebp - 0x1870]
sub eax, dword [ebp - 0x32f0]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x7e4], eax
jg 0x45eaad
mov dword [ebp - 0x1878], 1
jmp 0x45eab4
and dword [ebp - 0x1878], 0
cmp dword [ebp - 0x1878], 0xdac7
jge 0x45eacc
mov dword [ebp - 0x32f8], 1
jmp 0x45ead3
and dword [ebp - 0x32f8], 0
mov eax, dword [ebp - 0x32f8]
mov dword [ebp - 0x1880], eax
cmp dword [ebp - 0x1880], 0
je 0x45eb04
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7e4], 0
je 0x45eb04
mov dword [ebp - 0x3300], 1
jmp 0x45eb0b
and dword [ebp - 0x3300], 0
push 0
lea ecx, [ebp - 0x5d8c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3300]
mov dword [eax], ecx
lea ecx, [ebp - 0x5d8c]
call fcn.00413d23
mov byte [ebp - 0x47c], 0
mov dword [ebp - 0x64], 0xfffffffc
mov dword [ebp - 0x4ec], 0x49cec79e
mov dword [ebp - 0xd90], 0x16501874
mov dword [ebp - 0x994], 0xffffffff
mov dword [ebp - 0xa30], 0
cmp dword [ebp - 0x64], 0
jne 0x45eb74
xor eax, eax
jne 0x45eb74
and dword [ebp - 0x1888], 0
jmp 0x45eb7e
mov dword [ebp - 0x1888], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1888], eax
jne 0x45eb95
mov dword [ebp - 0x3308], 1
jmp 0x45eb9c
and dword [ebp - 0x3308], 0
mov eax, dword [ebp - 0x3308]
sub eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x64]
cmp eax, 0x8e92eda8
ja 0x45ebbb
mov dword [ebp - 0x1890], 1
jmp 0x45ebc2
and dword [ebp - 0x1890], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x1890]
jne 0x45ebd9
mov dword [ebp - 0x3310], 1
jmp 0x45ebe0
and dword [ebp - 0x3310], 0
mov eax, dword [ebp - 0x3310]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xd90], eax
jle 0x45ec03
mov dword [ebp - 0x1898], 1
jmp 0x45ec0a
and dword [ebp - 0x1898], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1898], eax
jge 0x45ec24
cmp dword [ebp - 0x64], 0
jne 0x45ec24
and dword [ebp - 0x3318], 0
jmp 0x45ec2e
mov dword [ebp - 0x3318], 1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
dec eax
dec eax
cmp eax, dword [ebp - 0x3318]
jg 0x45ec59
cmp dword [ebp - 0x4ec], 0
jne 0x45ec59
and dword [ebp - 0x18a0], 0
jmp 0x45ec63
mov dword [ebp - 0x18a0], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x18a0], eax
jle 0x45ec80
cmp dword [ebp - 0x4ec], 0
jne 0x45ec80
and dword [ebp - 0x3320], 0
jmp 0x45ec8a
mov dword [ebp - 0x3320], 1
mov eax, dword [ebp - 0x3320]
add eax, 3
cmp eax, dword [ebp - 0x64]
je 0x45eca4
mov dword [ebp - 0x18a8], 1
jmp 0x45ecab
and dword [ebp - 0x18a8], 0
mov eax, dword [ebp - 0x18a8]
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 0
je 0x45ed31
mov dword [ebp - 0x43ac], 0xc2a41b87
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xd90], eax
cmp dword [ebp - 0xd90], 0
jne 0x45ecf8
mov eax, dword [ebp - 0x4ec]
cmp dword [ebp - 0x43ac], eax
je 0x45ecef
xor eax, eax
inc eax
jne 0x45ecf8
and dword [ebp - 0x3328], 0
jmp 0x45ed02
mov dword [ebp - 0x3328], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x3328], eax
jge 0x45ed19
mov dword [ebp - 0x43b4], 1
jmp 0x45ed20
and dword [ebp - 0x43b4], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x994], eax
jmp 0x45eea3
mov dword [ebp - 0x43bc], 1
mov dword [ebp - 0xa28], 0
jmp 0x45ed54
mov eax, dword [ebp - 0xa28]
inc eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 1
jge 0x45ed70
mov eax, dword [ebp - 0xa28]
mov dword [ebp + eax*4 - 0x1010], 1
jmp 0x45ed47
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1010]
add eax, 0x4fbfd527
cmp dword [ebp - 0x64], eax
je 0x45ed93
mov dword [ebp - 0x18b0], 1
jmp 0x45ed9a
and dword [ebp - 0x18b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1010]
neg eax
cmp eax, dword [ebp - 0x18b0]
jg 0x45edc3
cmp dword [ebp - 0xa30], 0
jne 0x45edc3
and dword [ebp - 0x3330], 0
jmp 0x45edcd
mov dword [ebp - 0x3330], 1
mov eax, dword [ebp - 0xa30]
cmp dword [ebp - 0x3330], eax
jne 0x45edeb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1010], 0
jne 0x45edfa
cmp dword [ebp - 0x64], 0
jne 0x45edfa
and dword [ebp - 0x18b8], 0
jmp 0x45ee04
mov dword [ebp - 0x18b8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1010]
mov ecx, dword [ebp - 0x18b8]
lea eax, [eax + ecx + 0xecce]
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0xa30], 0x9991
jg 0x45ee45
cmp dword [ebp - 0x43bc], 0
je 0x45ee45
mov dword [ebp - 0x3338], 1
jmp 0x45ee4c
and dword [ebp - 0x3338], 0
mov eax, dword [ebp - 0x3338]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0
je 0x45ee73
cmp dword [ebp - 0x64], 0
je 0x45ee73
mov dword [ebp - 0x18c0], 1
jmp 0x45ee7a
and dword [ebp - 0x18c0], 0
mov eax, dword [ebp - 0x18c0]
mov dword [ebp - 0x994], eax
mov byte [ebp - 0x47a], 0
movzx eax, byte [ebp - 0x47a]
test eax, eax
je 0x45eea3
push 0xc51
call dword [sym.imp.USER32.dll_GetKeyboardType]
movzx eax, byte [ebp - 0x47c]
test eax, eax
je 0x45efb5
mov dword [ebp - 0x6110], 0xffffffff
mov dword [ebp - 0x5b98], 0xfffffffd
mov dword [ebp - 0x5c20], 0x20fe6e32
push 3
lea ecx, [ebp - 0x5dac]
call fcn.00413c51
mov dword [ebp - 0x6340], 0xffffffff
mov dword [ebp - 0x5c28], 0x796840e
push 3
lea ecx, [ebp - 0x5d9c]
call fcn.00413c51
mov dword [ebp - 0x61b4], 0xffffffff
mov dword [ebp - 0x3340], 0xffff
mov dword [ebp - 0x34c], 0
jmp 0x45ef2b
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 3
jge 0x45ef4d
push dword [ebp - 0x34c]
lea ecx, [ebp - 0x5dac]
call fcn.00413d3f
mov dword [eax], 1
jmp 0x45ef1e
mov dword [ebp - 0x34c], 0
jmp 0x45ef66
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 3
jge 0x45ef88
push dword [ebp - 0x34c]
lea ecx, [ebp - 0x5d9c]
call fcn.00413d3f
mov dword [eax], 0xab1d
jmp 0x45ef59
mov eax, dword [ebp - 0x3340]
inc eax
mov dword [ebp - 0x3340], eax
lea ecx, [ebp - 0x5d9c]
call fcn.00413d23
lea ecx, [ebp - 0x5dac]
call fcn.00413d23
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x1110]
call fcn.00413d23
mov dword [ebp - 0x6350], 0x3556
mov dword [ebp - 0x634c], 0x3556
mov dword [ebp - 0x6348], 0x3556
mov dword [ebp - 0x6344], 0x3556
mov byte [ebp - 0x47e], 0
movzx eax, byte [ebp - 0x47e]
test eax, eax
je 0x45f004
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
mov byte [ebp - 0x480], 0
movzx eax, byte [ebp - 0x480]
test eax, eax
je 0x45f01c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov dword [ebp - 0x7a0], 0xffffffff
push 1
lea ecx, [ebp - 0x4720]
call fcn.00413c51
push 3
lea ecx, [ebp - 0x54b4]
call fcn.00413c51
mov dword [ebp - 0x4470], 0x1e6
mov dword [ebp - 0x23c], 0
jmp 0x45f063
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x45f085
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x4720]
call fcn.00413d3f
mov dword [eax], 0xfffffffc
jmp 0x45f056
mov dword [ebp - 0x23c], 0
jmp 0x45f09e
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jge 0x45f0c0
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x54b4]
call fcn.00413d3f
mov dword [eax], 0x1f2e9667
jmp 0x45f091
mov dword [ebp - 0x7a0], 0xfffffff2
jmp 0x45f0d9
mov eax, dword [ebp - 0x7a0]
dec eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0xfffffff0
jge 0x45f100
mov byte [ebp - 0x482], 0
movzx eax, byte [ebp - 0x482]
test eax, eax
je 0x45f0fe
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
jmp 0x45f0cc
push 0
lea ecx, [ebp - 0x4720]
call fcn.00413d3f
mov eax, 0xa1fa
test eax, eax
je 0x45f134
push 0
lea ecx, [ebp - 0x4720]
call fcn.00413d3f
cmp dword [eax], 0
jg 0x45f134
mov dword [ebp - 0x13ec], 1
jmp 0x45f13b
and dword [ebp - 0x13ec], 0
push 0
lea ecx, [ebp - 0x4720]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x7a0], eax
push 2
lea ecx, [ebp - 0x54b4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x13ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7a0]
cmp eax, dword [ebp - 0x13ec]
je 0x45f17f
mov dword [ebp - 0x18c8], 1
jmp 0x45f186
and dword [ebp - 0x18c8], 0
mov eax, dword [ebp - 0x18c8]
mov dword [ebp - 0x4470], eax
lea ecx, [ebp - 0x54b4]
call fcn.00413d23
lea ecx, [ebp - 0x4720]
call fcn.00413d23
mov dword [ebp - 0x3dc8], 9
mov dword [ebp - 0x3dc4], 9
mov dword [ebp - 0x3dc0], 9
mov dword [ebp - 0x3dbc], 9
mov dword [ebp - 0xd98], 0
jmp 0x45f1e9
mov eax, dword [ebp - 0xd98]
inc eax
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0xd98], 2
jge 0x45f205
mov eax, dword [ebp - 0xd98]
mov dword [ebp + eax*4 - 0x3ecc], 0x62fd
jmp 0x45f1dc
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3dc8], 1
jmp 0x45f233
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3dc8]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3dc8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3dc8], 0
jl 0x45f4f1
mov dword [ebp - 0x3d80], 0xffffffff
mov dword [ebp - 0x3d7c], 0xffffffff
mov dword [ebp - 0x3d78], 0xffffffff
mov dword [ebp - 0x3d74], 0xffffffff
mov dword [ebp - 0x4478], 0x4d07ddbf
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3d80], 1
jmp 0x45f2a7
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3d80]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3d80], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3d80], 0
jl 0x45f4ec
push 4
lea ecx, [ebp - 0x534c]
call fcn.00413c51
push 1
lea ecx, [ebp - 0x51cc]
call fcn.00413c51
mov dword [ebp - 0x4480], 0
mov dword [ebp - 0x38c], 0
jmp 0x45f2f8
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 4
jge 0x45f31a
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x534c]
call fcn.00413d3f
mov dword [eax], 1
jmp 0x45f2eb
mov dword [ebp - 0x38c], 0
jmp 0x45f333
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 1
jge 0x45f355
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x51cc]
call fcn.00413d3f
mov dword [eax], 0xbbd18838
jmp 0x45f326
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3d80]
cmp dword [ebp + eax*4 - 0x3ecc], 0
je 0x45f418
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3d80]
mov eax, dword [ebp + eax*4 - 0x3ecc]
mov dword [ebp - 0x3348], eax
push 0
lea ecx, [ebp - 0x51cc]
call fcn.00413d3f
mov ecx, dword [ebp - 0x3348]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3dc8]
cmp eax, dword [ebp - 0x3348]
jl 0x45f3c5
xor eax, eax
inc eax
je 0x45f3c5
mov dword [ebp - 0x18d0], 1
jmp 0x45f3cc
and dword [ebp - 0x18d0], 0
push 1
lea ecx, [ebp - 0x534c]
call fcn.00413d3f
mov dword [eax], 0xbfb66feb
cmp dword [ebp - 0x18d0], 0xbfb66feb
jg 0x45f3f7
mov dword [ebp - 0x3350], 1
jmp 0x45f3fe
and dword [ebp - 0x3350], 0
imul eax, dword [ebp - 0x3350], 0xce3d
test eax, eax
je 0x45f418
mov dword [ebp - 0x18d8], 1
jmp 0x45f41f
and dword [ebp - 0x18d8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3d80]
mov eax, dword [ebp + eax*4 - 0x3ecc]
cmp dword [ebp - 0x18d8], eax
jne 0x45f447
mov dword [ebp - 0x3358], 1
jmp 0x45f44e
and dword [ebp - 0x3358], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3dc8]
mov eax, dword [ebp + eax*4 - 0x3ecc]
sub eax, dword [ebp - 0x3358]
jne 0x45f47a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3d80], 0
je 0x45f496
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3dc8], 0
je 0x45f496
mov dword [ebp - 0x18e0], 1
jmp 0x45f49d
and dword [ebp - 0x18e0], 0
cmp dword [ebp - 0x18e0], 0x3a4c6382
jne 0x45f4be
cmp dword [ebp - 0x4478], 0
je 0x45f4be
mov dword [ebp - 0x3360], 1
jmp 0x45f4c5
and dword [ebp - 0x3360], 0
mov eax, dword [ebp - 0x3360]
mov dword [ebp - 0x4480], eax
lea ecx, [ebp - 0x51cc]
call fcn.00413d23
lea ecx, [ebp - 0x534c]
call fcn.00413d23
jmp 0x45f28c
jmp 0x45f218
mov dword [ebp - 0xda8], 0x57fd5464
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x6d8], 0xb5cabfc3
mov dword [ebp - 0x244], 0
jmp 0x45f528
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xffffffea
jle 0x45f562
mov byte [ebp - 0x484], 0
movzx eax, byte [ebp - 0x484]
test eax, eax
je 0x45f560
push 0
push 0x1015
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x45f51b
mov dword [ebp - 0x244], 0
jmp 0x45f57b
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jl 0x45f738
mov dword [ebp - 0xf50], 0xffffffff
push 2
lea ecx, [ebp - 0x51e4]
call fcn.00413c51
mov dword [ebp - 0xa38], 0
jmp 0x45f5b8
mov eax, dword [ebp - 0xa38]
inc eax
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 2
jge 0x45f5d7
push dword [ebp - 0xa38]
lea ecx, [ebp - 0x51e4]
call fcn.00413d3f
or dword [eax], 0xffffffff
jmp 0x45f5ab
mov dword [ebp - 0xf50], 0
jmp 0x45f5f0
mov eax, dword [ebp - 0xf50]
dec eax
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0xf50], 0xfffffff6
jge 0x45f728
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x6d8], eax
mov esi, dword [ebp - 0x6d8]
push 0
lea ecx, [ebp - 0x51e4]
call fcn.00413d3f
mov dword [eax], esi
mov dword [ebp - 0x6d8], 0
jmp 0x45f637
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 1
jg 0x45f723
mov dword [ebp - 0xa40], 0x66a92721
mov byte [ebp - 0x486], 0
movzx eax, byte [ebp - 0x486]
test eax, eax
je 0x45f676
push 0
push 0
push 0x1a78
push 0x2127
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0xa40], 1
jmp 0x45f68f
mov eax, dword [ebp - 0xa40]
dec eax
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 0
jl 0x45f71e
mov dword [ebp - 0xda0], 0
mov dword [ebp - 0xda0], 1
jmp 0x45f6bf
mov eax, dword [ebp - 0xda0]
dec eax
mov dword [ebp - 0xda0], eax
cmp dword [ebp - 0xda0], 0
jl 0x45f719
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0xa48], 1
jmp 0x45f6eb
mov eax, dword [ebp - 0xa48]
dec eax
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0xa48], 0
jl 0x45f717
mov byte [ebp - 0x488], 0
movzx eax, byte [ebp - 0x488]
test eax, eax
je 0x45f715
push 0xeb4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x45f6de
jmp 0x45f6b2
jmp 0x45f682
jmp 0x45f62a
jmp 0x45f5e3
lea ecx, [ebp - 0x51e4]
call fcn.00413d23
jmp 0x45f56e
mov dword [ebp - 0x5c30], 0xfffffffd
mov dword [ebp - 0x645c], 0xfffffff6
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0x10cc], 0
jmp 0x45f76f
mov eax, dword [ebp - 0x10cc]
inc eax
mov dword [ebp - 0x10cc], eax
cmp dword [ebp - 0x10cc], 3
jge 0x45f78b
mov eax, dword [ebp - 0x10cc]
mov dword [ebp + eax*4 - 0x67f0], 0xec0ae971
jmp 0x45f762
mov dword [ebp - 0xa50], 0
jmp 0x45f7a4
mov eax, dword [ebp - 0xa50]
inc eax
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 2
jg 0x45f7d0
mov byte [ebp - 0x48a], 0
movzx eax, byte [ebp - 0x48a]
test eax, eax
je 0x45f7ce
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
jmp 0x45f797
mov byte [ebp - 0x48c], 0
movzx eax, byte [ebp - 0x48c]
test eax, eax
je 0x45f7fb
push 0xc15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0xda8], 0
jmp 0x45f814
mov eax, dword [ebp - 0xda8]
dec eax
mov dword [ebp - 0xda8], eax
cmp dword [ebp - 0xda8], 0xfffffff3
jl 0x45fd14
mov dword [ebp - 0xf58], 0xfffffffc
mov dword [ebp - 0x5c38], 0xffffffff
mov dword [ebp - 0xa58], 0
jmp 0x45f84e
mov eax, dword [ebp - 0xa58]
inc eax
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0xa58], 2
jge 0x45f86a
mov eax, dword [ebp - 0xa58]
mov dword [ebp + eax*4 - 0x6124], 0x3df603fa
jmp 0x45f841
mov dword [ebp - 0xf58], 0
jmp 0x45f883
mov eax, dword [ebp - 0xf58]
inc eax
mov dword [ebp - 0xf58], eax
cmp dword [ebp - 0xf58], 0x19
jl 0x45f931
mov dword [ebp - 0x354], 0xfffffff8
mov dword [ebp - 0x55b0], 0xb37b0480
mov dword [ebp - 0x55ac], 0xb37b0480
mov dword [ebp - 0x55a8], 0xb37b0480
mov dword [ebp - 0x55a4], 0xb37b0480
mov dword [ebp - 0x354], 0
jmp 0x45f8db
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 2
jge 0x45f8f7
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x6124], 0
jmp 0x45f8ce
mov dword [ebp - 0x354], 0xd
jmp 0x45f910
mov eax, dword [ebp - 0x354]
dec eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xfffffff9
jle 0x45f92c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x55b0], 0xfffffffe
jmp 0x45f903
jmp 0x45f876
mov dword [ebp - 0x3380], 0
mov dword [ebp - 0x4498], 0
mov dword [ebp - 0x760], 0xdbe8
mov dword [ebp - 0x11fc], 0xffffffff
mov dword [ebp - 0x18e8], 0
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x61c0], eax
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x760]
imul eax, dword [ebp - 0x760]
mov dword [ebp - 0x11fc], eax
cmp dword [ebp - 0x11fc], 1
jle 0x45fafa
mov dword [ebp - 0x3e0], 0x8f4a8fe2
mov byte [ebp - 0x48e], 0
movzx eax, byte [ebp - 0x48e]
test eax, eax
je 0x45f9c5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov eax, dword [ebp - 0x18e8]
mov dword [ebp - 0x5c40], eax
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x55d8], eax
mov eax, dword [ebp - 0x3e0]
add eax, 0x324015fb
sub eax, dword [ebp - 0x18e8]
add eax, dword [ebp - 0x3e0]
cmp eax, 0xff5ecce3
jbe 0x45fa07
mov dword [ebp - 0x3368], 1
jmp 0x45fa0e
and dword [ebp - 0x3368], 0
cmp dword [ebp - 0x3368], 0xa2ef
jl 0x45fa26
mov dword [ebp - 0x4488], 1
jmp 0x45fa2d
and dword [ebp - 0x4488], 0
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x55dc], eax
cmp dword [ebp - 0x3e0], 0x91920b24
jne 0x45fa51
mov dword [ebp - 0x18f0], 1
jmp 0x45fa58
and dword [ebp - 0x18f0], 0
mov eax, dword [ebp - 0x760]
cmp eax, dword [ebp - 0x18f0]
jge 0x45fa72
mov dword [ebp - 0x3370], 1
jmp 0x45fa79
and dword [ebp - 0x3370], 0
mov eax, dword [ebp - 0x3370]
neg eax
je 0x45fa98
cmp dword [ebp - 0x3e0], 0
je 0x45fa98
mov dword [ebp - 0x18f8], 1
jmp 0x45fa9f
and dword [ebp - 0x18f8], 0
mov eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0x18f8], eax
jge 0x45fab9
mov dword [ebp - 0x3378], 1
jmp 0x45fac0
and dword [ebp - 0x3378], 0
imul eax, dword [ebp - 0x3378], 0x8c65
cmp eax, dword [ebp - 0x3e0]
jge 0x45fade
mov dword [ebp - 0x1900], 1
jmp 0x45fae5
and dword [ebp - 0x1900], 0
mov eax, dword [ebp - 0x3e0]
imul eax, dword [ebp - 0x1900]
mov dword [ebp - 0x11fc], eax
jmp 0x45fb1e
mov byte [ebp - 0x492], 0
movzx eax, byte [ebp - 0x492]
test eax, eax
je 0x45fb1e
push 0x51c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov eax, dword [ebp - 0x3380]
dec eax
mov dword [ebp - 0x3380], eax
mov dword [ebp - 0x6e0], 0xdbe8
mov dword [ebp - 0x14dc], 0xffffffff
mov dword [ebp - 0x1908], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x55e4], eax
mov eax, dword [ebp - 0x6e0]
add eax, dword [ebp - 0x6e0]
imul eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x14dc], eax
cmp dword [ebp - 0x14dc], 1
jle 0x45fce0
mov dword [ebp - 0x460], 0x8f4a8fe2
mov byte [ebp - 0x494], 0
movzx eax, byte [ebp - 0x494]
test eax, eax
je 0x45fbab
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov eax, dword [ebp - 0x1908]
mov dword [ebp - 0x55ec], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x55f4], eax
mov eax, dword [ebp - 0x460]
add eax, 0x324015fb
sub eax, dword [ebp - 0x1908]
add eax, dword [ebp - 0x460]
cmp eax, 0xff5ecce3
jbe 0x45fbed
mov dword [ebp - 0x3388], 1
jmp 0x45fbf4
and dword [ebp - 0x3388], 0
cmp dword [ebp - 0x3388], 0xa2ef
jl 0x45fc0c
mov dword [ebp - 0x4490], 1
jmp 0x45fc13
and dword [ebp - 0x4490], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x55fc], eax
cmp dword [ebp - 0x460], 0x91920b24
jne 0x45fc37
mov dword [ebp - 0x1910], 1
jmp 0x45fc3e
and dword [ebp - 0x1910], 0
mov eax, dword [ebp - 0x6e0]
cmp eax, dword [ebp - 0x1910]
jge 0x45fc58
mov dword [ebp - 0x3390], 1
jmp 0x45fc5f
and dword [ebp - 0x3390], 0
mov eax, dword [ebp - 0x3390]
neg eax
je 0x45fc7e
cmp dword [ebp - 0x460], 0
je 0x45fc7e
mov dword [ebp - 0x1918], 1
jmp 0x45fc85
and dword [ebp - 0x1918], 0
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0x1918], eax
jge 0x45fc9f
mov dword [ebp - 0x3398], 1
jmp 0x45fca6
and dword [ebp - 0x3398], 0
imul eax, dword [ebp - 0x3398], 0x8c65
cmp eax, dword [ebp - 0x460]
jge 0x45fcc4
mov dword [ebp - 0x1920], 1
jmp 0x45fccb
and dword [ebp - 0x1920], 0
mov eax, dword [ebp - 0x460]
imul eax, dword [ebp - 0x1920]
mov dword [ebp - 0x14dc], eax
jmp 0x45fd04
mov byte [ebp - 0x496], 0
movzx eax, byte [ebp - 0x496]
test eax, eax
je 0x45fd04
push 0x51c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp dword [ebp - 0x4498], 0
je 0x45fd0f
jmp 0x45fd14
jmp 0x45f807
mov dword [ebp - 0x194], 8
mov dword [ebp - 0x5604], 1
mov dword [ebp - 0x560c], 0x108fa7ad
mov dword [ebp - 0x194], 0x10
jmp 0x45fd4b
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xffffffee
jle 0x45fe2f
mov dword [ebp - 0x13f4], 3
mov dword [ebp - 0x44a0], 6
mov dword [ebp - 0x44a8], 9
mov dword [ebp - 0xa60], 0
jmp 0x45fd8f
mov eax, dword [ebp - 0xa60]
inc eax
mov dword [ebp - 0xa60], eax
cmp dword [ebp - 0xa60], 2
jge 0x45fdab
mov eax, dword [ebp - 0xa60]
mov dword [ebp + eax*4 - 0x43d4], 2
jmp 0x45fd82
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x44a0]
cmp dword [ebp + eax - 0x43d4], ecx
jge 0x45fddc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x43d4], 0
je 0x45fddc
mov dword [ebp - 0x1204], 1
jmp 0x45fde3
and dword [ebp - 0x1204], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1204]
mov dword [ebp + eax - 0x43d4], ecx
mov eax, dword [ebp - 0x1204]
sub eax, dword [ebp - 0x13f4]
mov dword [ebp - 0x13f4], eax
mov eax, dword [ebp - 0x13f4]
mov dword [ebp - 0x5614], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x561c], eax
mov dword [ebp - 0x44a8], 1
jmp 0x45fd3e
mov dword [ebp - 0x194], 0xfffffffb
jmp 0x45fe48
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xffffffed
jne 0x460001
mov dword [ebp - 0x5624], 0
mov dword [ebp - 0xdb0], 0
jmp 0x45fe78
mov eax, dword [ebp - 0xdb0]
inc eax
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0xdb0], 4
jge 0x45fe94
mov eax, dword [ebp - 0xdb0]
mov dword [ebp + eax*4 - 0x5530], 0
jmp 0x45fe6b
mov byte [ebp - 0x498], 0
movzx eax, byte [ebp - 0x498]
test eax, eax
je 0x45feae
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x5530], 0
jmp 0x45fed9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5530]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x5530], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5530], 0xfffffffc
jle 0x45fffc
mov dword [ebp - 0x1018], 0xfffffff7
mov dword [ebp - 0x562c], 0x67684abf
mov dword [ebp - 0x5634], 0x18158fb5
mov dword [ebp - 0xa68], 0
jmp 0x45ff23
mov eax, dword [ebp - 0xa68]
inc eax
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 3
jge 0x45ff3f
mov eax, dword [ebp - 0xa68]
mov dword [ebp + eax*4 - 0x6850], 0x49f2b782
jmp 0x45ff16
mov dword [ebp - 0x1018], 0xffffffed
jmp 0x45ff58
mov eax, dword [ebp - 0x1018]
dec eax
mov dword [ebp - 0x1018], eax
cmp dword [ebp - 0x1018], 0xffffffea
jg 0x45fff7
push 4
lea ecx, [ebp - 0x4b7c]
call fcn.00413c51
mov dword [ebp - 0xa70], 0
jmp 0x45ff8b
mov eax, dword [ebp - 0xa70]
inc eax
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 4
jge 0x45ffad
push dword [ebp - 0xa70]
lea ecx, [ebp - 0x4b7c]
call fcn.00413d3f
mov dword [eax], 0x97ab83de
jmp 0x45ff7e
cmp dword [ebp - 0x194], 0
je 0x45ffc3
lea ecx, [ebp - 0x4b7c]
call fcn.00413d23
jmp 0x45fff7
push 2
lea ecx, [ebp - 0x4b7c]
call fcn.00413d3f
mov dword [ebp - 0x33a0], eax
mov eax, dword [ebp - 0x33a0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x33a0]
mov dword [ecx], eax
lea ecx, [ebp - 0x4b7c]
call fcn.00413d23
jmp 0x45ff4b
jmp 0x45fec0
jmp 0x45fe3b
mov dword [ebp - 0xdb8], 3
mov dword [ebp - 0xf60], 0xba86ba47
mov dword [ebp - 0x33c0], 0xade0980d
mov dword [ebp - 0x4d0c], 0xffffffff
mov dword [ebp - 0x4d08], 0xffffffff
mov dword [ebp - 0x4d04], 0xffffffff
mov dword [ebp - 0x4d00], 0xffffffff
mov dword [ebp - 0x563c], 9
mov dword [ebp - 0xdb8], 0xffffffee
jmp 0x46006a
mov eax, dword [ebp - 0xdb8]
inc eax
mov dword [ebp - 0xdb8], eax
cmp dword [ebp - 0xdb8], 0xfffffff2
jl 0x4602f0
mov dword [ebp - 0x120c], 0x22e6
mov dword [ebp - 0x1938], 0x9900
mov dword [ebp - 0x33b0], 0xffffffff
cmp dword [ebp - 0x120c], 0xffff
je 0x4600ad
mov dword [ebp - 0x1928], 1
jmp 0x4600b4
and dword [ebp - 0x1928], 0
mov eax, dword [ebp - 0x1938]
add eax, dword [ebp - 0x1928]
imul eax, eax, 0xfffffff8
test eax, eax
je 0x4600f4
mov byte [ebp - 0x49a], 0
movzx eax, byte [ebp - 0x49a]
test eax, eax
je 0x4600ef
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x4602eb
mov dword [ebp - 0x814], 0xc9bf5e4d
mov dword [ebp - 0x44b8], 0xffffffff
mov dword [ebp - 0xa78], 0
jmp 0x460121
mov eax, dword [ebp - 0xa78]
inc eax
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0xa78], 2
jge 0x46013d
mov eax, dword [ebp - 0xa78]
mov dword [ebp + eax*4 - 0x5bb0], 0x6ab2aee5
jmp 0x460114
cmp dword [ebp - 0xf60], 0
je 0x46014b
jmp 0x4602f0
mov eax, dword [ebp - 0x120c]
mov dword [ebp - 0x33a8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x33a8]
mov dword [ebp + eax - 0x4d0c], ecx
cmp dword [ebp - 0x33a8], 0
je 0x46024e
mov eax, dword [ebp - 0x120c]
mov dword [ebp - 0x5644], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4d0c], 0x551b32e2
mov eax, 0x551b32e2
cmp eax, 0x3380ee91
jg 0x4601ac
mov dword [ebp - 0x1930], 1
jmp 0x4601b3
and dword [ebp - 0x1930], 0
mov eax, dword [ebp - 0x1930]
mov dword [ebp - 0x33b0], eax
cmp dword [ebp - 0x33b0], 0
je 0x4601cf
cmp dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
cmp dword [ebp - 0x33c0], eax
jl 0x4601e9
mov dword [ebp - 0x44b0], 1
jmp 0x4601f0
and dword [ebp - 0x44b0], 0
mov eax, dword [ebp - 0x1938]
mov dword [ebp - 0x564c], eax
mov eax, dword [ebp - 0x814]
sub eax, dword [ebp - 0x44b8]
add eax, dword [ebp - 0xf60]
mov dword [ebp - 0x814], eax
mov eax, dword [ebp - 0xf60]
cmp dword [ebp - 0x814], eax
jg 0x46022e
mov dword [ebp - 0x33b8], 1
jmp 0x460235
and dword [ebp - 0x33b8], 0
mov eax, dword [ebp - 0x33b8]
sub eax, 0x9c2b
je 0x46024e
mov dword [ebp - 0x1948], 1
jmp 0x460255
and dword [ebp - 0x1948], 0
mov eax, dword [ebp - 0xf60]
mov dword [ebp - 0x1940], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1940]
mov dword [ebp + eax - 0x5bb0], ecx
mov eax, dword [ebp - 0x1940]
sub eax, dword [ebp - 0x33c0]
cmp eax, dword [ebp - 0x1948]
jl 0x4602a2
mov byte [ebp - 0x49c], 0
movzx eax, byte [ebp - 0x49c]
test eax, eax
je 0x4602a0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x4602eb
mov byte [ebp - 0x49e], 0
movzx eax, byte [ebp - 0x49e]
test eax, eax
je 0x4602c5
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov byte [ebp - 0x4a0], 0
movzx eax, byte [ebp - 0x4a0]
test eax, eax
je 0x4602eb
push 0x71
push 0xf76
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x46005d
mov dword [ebp - 0x4fbc], 3
mov dword [ebp - 0x4fb8], 3
mov dword [ebp - 0x4fb4], 3
mov dword [ebp - 0x4fb0], 3
lea ecx, [ebp - 0x14cd]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x4fac]
push eax
lea eax, [ebp - 0x4fbc]
push eax
lea ecx, [ebp - 0x6624]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5dbc]
call fcn.00413cfd
push 1
lea ecx, [ebp - 0x3f88]
call fcn.00413c51
mov dword [ebp - 0xa80], 0
jmp 0x460373
mov eax, dword [ebp - 0xa80]
inc eax
mov dword [ebp - 0xa80], eax
cmp dword [ebp - 0xa80], 1
jge 0x460395
push dword [ebp - 0xa80]
lea ecx, [ebp - 0x3f88]
call fcn.00413d3f
mov dword [eax], 0xfffffff6
jmp 0x460366
push 0
lea ecx, [ebp - 0x3f88]
call fcn.00413d3f
mov dword [eax], 3
jmp 0x4603ce
push 0
lea ecx, [ebp - 0x3f88]
call fcn.00413d3f
mov dword [ebp - 0x33c8], eax
mov eax, dword [ebp - 0x33c8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x33c8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3f88]
call fcn.00413d3f
cmp dword [eax], 0
jl 0x460403
push 0
lea ecx, [ebp - 0x3f88]
call fcn.00413d3f
push dword [eax]
lea ecx, [ebp - 0x5dbc]
call fcn.00413d3f
cmp dword [eax], 0
je 0x460401
jmp 0x460403
jmp 0x4603aa
lea ecx, [ebp - 0x3f88]
call fcn.00413d23
lea ecx, [ebp - 0x5dbc]
call fcn.00413d23
mov dword [ebp - 0xa98], 0x48bbca63
push 1
lea ecx, [ebp - 0x4730]
call fcn.00413c51
push 2
lea ecx, [ebp - 0x3e18]
call fcn.00413c51
mov dword [ebp - 0x24c], 0
jmp 0x460456
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x460478
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x4730]
call fcn.00413d3f
mov dword [eax], 0xfffffffb
jmp 0x460449
mov dword [ebp - 0x24c], 0
jmp 0x460491
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x4604b3
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x3e18]
call fcn.00413d3f
mov dword [eax], 0x897a4a12
jmp 0x460484
push 0
lea ecx, [ebp - 0x3e18]
call fcn.00413d3f
and dword [eax], 0
jmp 0x4604e9
push 0
lea ecx, [ebp - 0x3e18]
call fcn.00413d3f
mov dword [ebp - 0x1950], eax
mov eax, dword [ebp - 0x1950]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1950]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3e18]
call fcn.00413d3f
cmp dword [eax], 0
jg 0x460587
push 0
lea ecx, [ebp - 0x3e18]
call fcn.00413d3f
push dword [eax]
lea ecx, [ebp - 0x4730]
call fcn.00413d3f
mov esi, eax
push 0
lea ecx, [ebp - 0x4730]
call fcn.00413d3f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x46053a
mov dword [ebp - 0x33d0], 1
jmp 0x460541
and dword [ebp - 0x33d0], 0
cmp dword [ebp - 0x33d0], 0x9cc14173
jne 0x460559
mov dword [ebp - 0x1958], 1
jmp 0x460560
and dword [ebp - 0x1958], 0
push 0
lea ecx, [ebp - 0x3e18]
call fcn.00413d3f
push dword [eax]
lea ecx, [ebp - 0x4730]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1958]
mov dword [eax], ecx
jmp 0x4604c5
lea ecx, [ebp - 0x3e18]
call fcn.00413d23
lea ecx, [ebp - 0x4730]
call fcn.00413d23
mov byte [ebp - 0x4a2], 0
mov dword [ebp - 0x8dc], 0xeb90
push 1
lea ecx, [ebp - 0x4b94]
call fcn.00413c51
mov dword [ebp - 0x33e8], 0xc0e3e763
mov dword [ebp - 0x3400], 0x6acb8f2b
mov dword [ebp - 0x44c8], 0xe81720d7
mov dword [ebp - 0x1214], 0xfffffffb
mov dword [ebp - 0x44c0], 0xfffffffe
mov dword [ebp - 0x1990], 0x138b36ce
mov dword [ebp - 0xdc0], 0
jmp 0x460610
mov eax, dword [ebp - 0xdc0]
inc eax
mov dword [ebp - 0xdc0], eax
cmp dword [ebp - 0xdc0], 1
jge 0x460632
push dword [ebp - 0xdc0]
lea ecx, [ebp - 0x4b94]
call fcn.00413d3f
mov dword [eax], 0x63ffaf07
jmp 0x460603
mov eax, dword [ebp - 0x8dc]
cmp dword [ebp - 0x33e8], eax
jl 0x46064c
mov dword [ebp - 0x33d8], 1
jmp 0x460653
and dword [ebp - 0x33d8], 0
push 0
lea ecx, [ebp - 0x4b94]
call fcn.00413d3f
mov ecx, dword [ebp - 0x33d8]
cmp ecx, dword [eax]
jge 0x460676
mov dword [ebp - 0x1960], 1
jmp 0x46067d
and dword [ebp - 0x1960], 0
mov eax, dword [ebp - 0x3400]
cmp dword [ebp - 0x1960], eax
jg 0x460697
mov dword [ebp - 0x1588], 1
jmp 0x46069e
and dword [ebp - 0x1588], 0
push 0
lea ecx, [ebp - 0x4b94]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1588]
mov dword [eax], ecx
cmp dword [ebp - 0x1588], 0
je 0x4606ce