Function at 0x4554fc
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x368
mov dword [ebp - 0x24], 0x24039b64
mov dword [ebp - 0x150], 0x42b9193c
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x45552a
push 0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp dword [ebp - 0x24], 0
je 0x455560
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x2a0], 0xfffffff8
mov dword [ebp - 0x104], 0xf55e00fe
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
jmp 0x45574f
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x8c], 0
jmp 0x455583
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x45559f
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x348], 0xfffffff7
jmp 0x455576
mov dword [ebp - 0x24], 3
jmp 0x4555af
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jne 0x45574f
mov dword [ebp - 0x84], 0xfffffffe
push 3
lea ecx, [ebp - 0x24c]
call fcn.00413c51
mov dword [ebp - 0x64], 0
jmp 0x4555e0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x4555f9
push dword [ebp - 0x64]
lea ecx, [ebp - 0x24c]
call fcn.00413d3f
and dword [eax], 0
jmp 0x4555d9
cmp dword [ebp - 0x24], 0
je 0x45560f
lea ecx, [ebp - 0x24c]
call fcn.00413d23
jmp 0x45574f
mov dword [ebp - 0x84], 0
jmp 0x455628
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x45573f
mov dword [ebp - 0x1c4], 0xf1fdbd01
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1c4], eax
je 0x45566f
mov dword [ebp - 0xd0], 1
jmp 0x455676
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0x24], 0x8064
jg 0x45568b
mov dword [ebp - 0xd8], 1
jmp 0x455692
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0xd8]
je 0x4556b8
mov dword [ebp - 0x190], 1
jmp 0x4556bf
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 7
jle 0x4556d4
mov dword [ebp - 0xe0], 1
jmp 0x4556db
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xe0], eax
je 0x4556f2
mov dword [ebp - 0x158], 1
jmp 0x4556f9
and dword [ebp - 0x158], 0
push 2
lea ecx, [ebp - 0x24c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x158]
mov dword [eax], ecx
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x45573a
push 0
push 0x143f
push 0xade
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
jmp 0x45561b
lea ecx, [ebp - 0x24c]
call fcn.00413d23
jmp 0x4555a8
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x456175
mov dword [ebp - 0x160], 0x44ad72d7
mov dword [ebp - 0xf0], 0xa278c007
mov dword [ebp - 0xf8], 0x2189f42c
mov dword [ebp - 0x168], 0xd65f4e26
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x270], 1
lea ecx, [ebp - 0xbd]
call fcn.00413d4e
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x350]
call fcn.00413d51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x300]
call fcn.00413cfd
mov dword [ebp - 0x6c], 0
jmp 0x4557f0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x455803
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x40], 0x2a4f
jmp 0x4557e9
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x40]
cmp dword [ebp + eax - 0x40], ecx
jle 0x455825
mov dword [ebp - 0xe8], 1
jmp 0x45582c
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0
jae 0x455841
mov dword [ebp - 0x1b0], 1
jmp 0x455848
and dword [ebp - 0x1b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xf0], eax
mov eax, 0x98e64e6d
sub eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x40]
imul ecx, eax
mov dword [ebp - 0xf8], ecx
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0xf8]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x40], eax
jg 0x4558a6
mov dword [ebp - 0x198], 1
jmp 0x4558ad
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0xdac7
jge 0x4558c5
mov dword [ebp - 0x100], 1
jmp 0x4558cc
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x4558fa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
je 0x4558fa
mov dword [ebp - 0x108], 1
jmp 0x455901
and dword [ebp - 0x108], 0
push 0
lea ecx, [ebp - 0x300]
call fcn.00413d3f
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
lea ecx, [ebp - 0x300]
call fcn.00413d23
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 8], 0xfffffffc
mov dword [ebp - 0x30], 0x49cec79e
mov dword [ebp - 0x88], 0x16501874
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x7c], 0
cmp dword [ebp - 8], 0
jne 0x45596c
xor eax, eax
jne 0x45596c
and dword [ebp - 0x1c0], 0
jmp 0x455976
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1c0], eax
jne 0x45598d
mov dword [ebp - 0x110], 1
jmp 0x455994
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 8]
cmp eax, 0x8e92eda8
ja 0x4559b3
mov dword [ebp - 0x170], 1
jmp 0x4559ba
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x170]
jne 0x4559d1
mov dword [ebp - 0x118], 1
jmp 0x4559d8
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x88], eax
jle 0x4559fb
mov dword [ebp - 0x1a0], 1
jmp 0x455a02
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1a0], eax
jge 0x455a1c
cmp dword [ebp - 8], 0
jne 0x455a1c
and dword [ebp - 0x120], 0
jmp 0x455a26
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 8]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
dec eax
dec eax
cmp eax, dword [ebp - 0x120]
jg 0x455a48
cmp dword [ebp - 0x30], 0
jne 0x455a48
and dword [ebp - 0x178], 0
jmp 0x455a52
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x178], eax
jle 0x455a6c
cmp dword [ebp - 0x30], 0
jne 0x455a6c
and dword [ebp - 0x128], 0
jmp 0x455a76
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 0x128]
add eax, 3
cmp eax, dword [ebp - 8]
je 0x455a90
mov dword [ebp - 0x1b8], 1
jmp 0x455a97
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x455b0e
mov dword [ebp - 0x220], 0xc2a41b87
mov eax, dword [ebp - 8]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x455adb
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x220], eax
je 0x455ad2
xor eax, eax
inc eax
jne 0x455adb
and dword [ebp - 0x130], 0
jmp 0x455ae5
mov dword [ebp - 0x130], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x130], eax
jge 0x455afc
mov dword [ebp - 0x20c], 1
jmp 0x455b03
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
jmp 0x455c56
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x74], 0
jmp 0x455b28
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x455b3e
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x90], 1
jmp 0x455b21
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
add eax, 0x4fbfd527
cmp dword [ebp - 8], eax
je 0x455b61
mov dword [ebp - 0x180], 1
jmp 0x455b68
and dword [ebp - 0x180], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
neg eax
cmp eax, dword [ebp - 0x180]
jg 0x455b8e
cmp dword [ebp - 0x7c], 0
jne 0x455b8e
and dword [ebp - 0x138], 0
jmp 0x455b98
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x138], eax
jne 0x455bb3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
jne 0x455bc2
cmp dword [ebp - 8], 0
jne 0x455bc2
and dword [ebp - 0x1a8], 0
jmp 0x455bcc
mov dword [ebp - 0x1a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov ecx, dword [ebp - 0x1a8]
lea eax, [eax + ecx + 0xecce]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x9991
jg 0x455c07
cmp dword [ebp - 0x1d4], 0
je 0x455c07
mov dword [ebp - 0x140], 1
jmp 0x455c0e
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x455c2f
cmp dword [ebp - 8], 0
je 0x455c2f
mov dword [ebp - 0x188], 1
jmp 0x455c36
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x455c56
push 0xc51
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x2d0], 0xffffffff
mov dword [ebp - 0x2d8], 0xfffffffd
mov dword [ebp - 0x2e0], 0x20fe6e32
push 3
lea ecx, [ebp - 0x320]
call fcn.00413c51
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x2f0], 0x796840e
push 3
lea ecx, [ebp - 0x310]
call fcn.00413c51
mov dword [ebp - 0x338], 0xffffffff
mov dword [ebp - 0x148], 0xffff
mov dword [ebp - 0x10], 0
jmp 0x455cc6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x455ce2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x320]
call fcn.00413d3f
mov dword [eax], 1
jmp 0x455cbf
mov dword [ebp - 0x10], 0
jmp 0x455cf2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x455d0e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x310]
call fcn.00413d3f
mov dword [eax], 0xab1d
jmp 0x455ceb
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
lea ecx, [ebp - 0x310]
call fcn.00413d23
lea ecx, [ebp - 0x320]
call fcn.00413d23
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x44], 0xffffffff
push 1
lea ecx, [ebp - 0x230]
call fcn.00413c51
push 3
lea ecx, [ebp - 0x288]
call fcn.00413c51
mov dword [ebp - 0x1e0], 0x1e6
mov dword [ebp - 0x18], 0
jmp 0x455d75
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x455d91
push dword [ebp - 0x18]
lea ecx, [ebp - 0x230]
call fcn.00413d3f
mov dword [eax], 0xfffffffc
jmp 0x455d6e
mov dword [ebp - 0x18], 0
jmp 0x455da1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x455dbd
push dword [ebp - 0x18]
lea ecx, [ebp - 0x288]
call fcn.00413d3f
mov dword [eax], 0x1f2e9667
jmp 0x455d9a
mov dword [ebp - 0x44], 0xfffffff2
jmp 0x455dcd
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff0
jge 0x455deb
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x455de9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
jmp 0x455dc6
push 0
lea ecx, [ebp - 0x230]
call fcn.00413d3f
mov eax, 0xa1fa
test eax, eax
je 0x455e1f
push 0
lea ecx, [ebp - 0x230]
call fcn.00413d3f
cmp dword [eax], 0
jg 0x455e1f
mov dword [ebp - 0xac], 1
jmp 0x455e26
and dword [ebp - 0xac], 0
push 0
lea ecx, [ebp - 0x230]
call fcn.00413d3f
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
push 2
lea ecx, [ebp - 0x288]
call fcn.00413d3f
mov ecx, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0xac]
je 0x455e64
mov dword [ebp - 0xc8], 1
jmp 0x455e6b
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1e0], eax
lea ecx, [ebp - 0x288]
call fcn.00413d23
lea ecx, [ebp - 0x230]
call fcn.00413d23
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0
jmp 0x455eaf
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 2
jg 0x456170
mov dword [ebp - 0xc], 8
mov dword [ebp - 0x340], 1
mov dword [ebp - 0x2bc], 0x108fa7ad
mov dword [ebp - 0xc], 0x10
jmp 0x455ee6
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffee
jle 0x455fc4
mov dword [ebp - 0xb4], 3
mov dword [ebp - 0x1e8], 6
mov dword [ebp - 0x238], 9
mov dword [ebp - 0x98], 0
jmp 0x455f27
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x455f43
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x218], 2
jmp 0x455f1a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e8]
cmp dword [ebp + eax - 0x218], ecx
jge 0x455f74
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x218], 0
je 0x455f74
mov dword [ebp - 0xbc], 1
jmp 0x455f7b
and dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0x218], ecx
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x238], 1
jmp 0x455edf
mov dword [ebp - 0xc], 0xfffffffb
jmp 0x455fd4
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffed
jne 0x456154
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x58], 0
jmp 0x455ff8
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x45600e
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x298], 0
jmp 0x455ff1
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x456022
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x298], 0
jmp 0x45604d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x298]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x298], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x298], 0xfffffffc
jle 0x45614f
mov dword [ebp - 0x5c], 0xfffffff7
mov dword [ebp - 0x2b4], 0x67684abf
mov dword [ebp - 0x2c0], 0x18158fb5
mov dword [ebp - 0x94], 0
jmp 0x456094
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x4560b0
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x35c], 0x49f2b782
jmp 0x456087
mov dword [ebp - 0x5c], 0xffffffed
jmp 0x4560c0
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffea
jg 0x45614a
push 4
lea ecx, [ebp - 0x258]
call fcn.00413c51
mov dword [ebp - 0x60], 0
jmp 0x4560e7
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x456103
push dword [ebp - 0x60]
lea ecx, [ebp - 0x258]
call fcn.00413d3f
mov dword [eax], 0x97ab83de
jmp 0x4560e0
cmp dword [ebp - 0xc], 0
je 0x456116
lea ecx, [ebp - 0x258]
call fcn.00413d23
jmp 0x45614a
push 2
lea ecx, [ebp - 0x258]
call fcn.00413d3f
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
lea ecx, [ebp - 0x258]
call fcn.00413d23
jmp 0x4560b9
jmp 0x456034
jmp 0x455fcd
mov eax, dword [ebp - 0x4c]
push dword [eax]
mov ecx, dword [ebp - 0x1f0]
call fcn.00413d3f
cmp dword [eax], 0
je 0x45616b
jmp 0x456170
jmp 0x455ea4
jmp 0x456a42
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x68], 3
mov dword [ebp - 0x78], 0xba86ba47
mov dword [ebp - 0x10c], 0xade0980d
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x25c], 0xffffffff
mov dword [ebp - 0x2c8], 9
mov dword [ebp - 0x68], 0xffffffee
jmp 0x4561d8
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff2
jl 0x456416
mov dword [ebp - 0xa8], 0x22e6
mov dword [ebp - 0xf4], 0x9900
mov dword [ebp - 0xec], 0xffffffff
cmp dword [ebp - 0xa8], 0xffff
je 0x456218
mov dword [ebp - 0xd4], 1
jmp 0x45621f
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0xd4]
imul eax, eax, 0xfffffff8
test eax, eax
je 0x456259
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x456254
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x456411
mov dword [ebp - 0x48], 0xc9bf5e4d
mov dword [ebp - 0x1f8], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x45627a
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x456290
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2b0], 0x6ab2aee5
jmp 0x456273
cmp dword [ebp - 0x78], 0
je 0x45629b
jmp 0x456416
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xdc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x268], ecx
cmp dword [ebp - 0xdc], 0
je 0x456389
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x334], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x268], 0x551b32e2
mov eax, 0x551b32e2
cmp eax, 0x3380ee91
jg 0x4562fc
mov dword [ebp - 0xe4], 1
jmp 0x456303
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x45631c
cmp dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x10c], eax
jl 0x456333
mov dword [ebp - 0x224], 1
jmp 0x45633a
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x1f8]
add eax, dword [ebp - 0x78]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x48], eax
jg 0x456369
mov dword [ebp - 0xfc], 1
jmp 0x456370
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
sub eax, 0x9c2b
je 0x456389
mov dword [ebp - 0x114], 1
jmp 0x456390
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xc4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax - 0x2b0], ecx
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x114]
jl 0x4563d4
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x4563d2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x456411
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x4563f1
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x456411
push 0x71
push 0xf76
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x4561d1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x38], 2
mov dword [ebp - 4], 1
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x1d8], 0xfc6a3f0b
mov dword [ebp - 0x1dc], 0xfffffffb
mov dword [ebp - 0x2f4], 0xd0bc
mov dword [ebp - 0x14], 0
jmp 0x45646e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x456484
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0xfffffff6
jmp 0x456467
mov dword [ebp - 0x14], 0
jmp 0x456494
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4564aa
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d0], 0xffffffff
jmp 0x45648d
cmp dword [ebp - 0x38], 0
jne 0x456597
xor eax, eax
inc eax
sub eax, dword [ebp - 0x38]
cmp eax, 0xfffa
jb 0x4564cd
mov dword [ebp - 0x11c], 1
jmp 0x4564d4
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x11c], eax
jle 0x4564eb
mov dword [ebp - 0x124], 1
jmp 0x4564f2
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x124], eax
jg 0x456509
mov dword [ebp - 0x12c], 1
jmp 0x456510
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x38]
inc eax
je 0x456534
cmp dword [ebp - 4], 0
je 0x456534
mov dword [ebp - 0x134], 1
jmp 0x45653b
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x13c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0xa4], ecx
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x134]
cmp dword [ebp - 0x13c], eax
jg 0x456575
mov dword [ebp - 0x144], 1
jmp 0x45657c
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0x4f2887cf
jg 0x45658e
cmp dword [ebp - 4], 0
jne 0x456597
and dword [ebp - 0x200], 0
jmp 0x4565a1
mov dword [ebp - 0x200], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 4]
mov dword [ebp + eax - 0x1d0], ecx
mov dword [ebp - 4], 0
jmp 0x4565c1
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x456899
mov dword [ebp - 0xb8], 0x276ac116
mov dword [ebp - 0x154], 0x7d3d8e1c
cmp dword [ebp - 0xb8], 1
je 0x4565f4
mov dword [ebp - 0x234], 1
jmp 0x4565fb
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xa4], ecx
mov eax, 0x5c7d
test eax, eax
jne 0x456630
mov dword [ebp - 0x23c], 1
jmp 0x456637
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x456651
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xa4], 0
jne 0x456663
cmp dword [ebp - 0xb8], 0
jne 0x456663
and dword [ebp - 0xb0], 0
jmp 0x45666d
mov dword [ebp - 0xb0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp + eax - 0x1d0], ecx
cmp dword [ebp - 0xb0], 0
jg 0x456695
mov dword [ebp - 0x14c], 1
jmp 0x45669c
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
add eax, 0xfff9
je 0x4566da
mov eax, 0xc7d75752
test eax, eax
je 0x4566da
mov dword [ebp - 0x15c], 1
jmp 0x4566e1
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0x860c
jg 0x4566f9
mov dword [ebp - 0x164], 1
jmp 0x456700
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x2cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
je 0x456744
mov eax, 0x18f7f2f1
test eax, eax
je 0x456744
mov dword [ebp - 0x16c], 1
jmp 0x45674b
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp dword [ebp - 0x16c], eax
jne 0x456769
mov dword [ebp - 0x174], 1
jmp 0x456770
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
neg eax
neg eax
cmp eax, dword [ebp - 0xb8]
jne 0x45678e
mov dword [ebp - 0x17c], 1
jmp 0x456795
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0x68f7
jl 0x4567ad
mov dword [ebp - 0x184], 1
jmp 0x4567b4
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
shl eax, 1
je 0x4567da
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d0], 0
je 0x4567da
mov dword [ebp - 0x18c], 1
jmp 0x4567e1
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4]
cmp eax, dword [ebp - 0x18c]
je 0x456802
mov dword [ebp - 0x194], 1
jmp 0x456809
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4]
cmp eax, dword [ebp - 0x194]
jl 0x45682a
mov dword [ebp - 0x19c], 1
jmp 0x456831
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp dword [ebp - 0x19c], eax
jne 0x456855
mov eax, 0x9349
test eax, eax
jne 0x456855
and dword [ebp - 0x1a4], 0
jmp 0x45685f
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x1a4], eax
je 0x456879
mov dword [ebp - 0x1ac], 1
jmp 0x456880
and dword [ebp - 0x1ac], 0
imul eax, dword [ebp - 0x1ac], 0x2935
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0xa4], eax
jmp 0x4565ba
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x80], 0x469ad59e
mov dword [ebp - 0x324], 0x20985a95
mov dword [ebp - 0x1f4], 0xb8ee41b6
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0x304], 0x1ba028e
mov dword [ebp - 0x2dc], 0x515fdc8d
mov dword [ebp - 0x33c], 0xfffffffd
mov dword [ebp - 0x2e4], 0x4952f341
mov dword [ebp - 0x1b4], 0x2a5bc422
mov dword [ebp - 0x20], 0
jmp 0x45690c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x456922
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x368], 1
jmp 0x456905
mov dword [ebp - 0x20], 0
jmp 0x456932
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x456948
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1ec], 3
jmp 0x45692b
mov dword [ebp - 0x80], 2
jmp 0x456958
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x4569da
push 1
lea ecx, [ebp - 0x330]
call fcn.00413c51
mov dword [ebp - 0x1c], 0
jmp 0x45697b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x456991
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x314], 0x290b
jmp 0x456974
mov dword [ebp - 0x1c], 0
jmp 0x4569a1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x4569bd
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x330]
call fcn.00413d3f
mov dword [eax], 0xfffffff7
jmp 0x45699a
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x330]
call fcn.00413d23
jmp 0x456951
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ec], 0x4361
jl 0x4569f9
mov dword [ebp - 0x1bc], 1
jmp 0x456a00
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
jmp 0x456a22
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax], 3
jge 0x456a42
mov eax, dword [ebp - 0x54]
push dword [eax]
mov ecx, dword [ebp - 0x1fc]
call fcn.00413d3f
mov dword [eax], 0xf70ad6f2
jmp 0x456a17
mov esp, ebp
pop ebp
ret