Function at 0x449ac5
Capabilities:
Delete registry key
Get file attributes
Get graphical window text
Hide graphical window
Query or enumerate registry value
Set environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x380c
call fcn.00480380
push esi
push edi
mov dword [ebp - 0x164], 0xa48bbca6
mov dword [ebp - 0x258], 0x3813
mov dword [ebp - 0x2540], 0xf8de905f
mov dword [ebp - 0x30d4], 0xa1ec
mov dword [ebp - 0x164], 0xffffffef
jmp 0x449b15
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xfffffff2
jl 0x449d5d
mov dword [ebp - 0x9b4], 1
mov dword [ebp - 0x2030], 0x4f230135
mov dword [ebp - 0x2038], 0x9e071a05
mov dword [ebp - 0x20f8], 0x4ca77904
mov dword [ebp - 0x2050], 0xffffffff
mov dword [ebp - 0x20f0], 0x9040c3f3
mov dword [ebp - 0x2528], 0xfffffff6
mov dword [ebp - 0x978], 0
jmp 0x449b81
mov eax, dword [ebp - 0x978]
inc eax
mov dword [ebp - 0x978], eax
cmp dword [ebp - 0x978], 4
jge 0x449b9d
mov eax, dword [ebp - 0x978]
mov dword [ebp + eax*4 - 0x350c], 0xfffffff8
jmp 0x449b74
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2c90], eax
cmp dword [ebp - 0x9b4], 0x45c8100c
jg 0x449bc1
mov dword [ebp - 0x17e4], 1
jmp 0x449bc8
and dword [ebp - 0x17e4], 0
mov eax, dword [ebp - 0x17e4]
mov dword [ebp - 0x2030], eax
mov eax, dword [ebp - 0x2030]
mov dword [ebp - 0x2038], eax
mov eax, dword [ebp - 0x2038]
mov ecx, dword [ebp - 0x20f8]
lea eax, [eax + ecx + 0x7af2]
test eax, eax
je 0x449c0c
cmp dword [ebp - 0x9b4], 0
je 0x449c0c
mov dword [ebp - 0x2240], 1
jmp 0x449c13
and dword [ebp - 0x2240], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2040], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2040]
mov dword [ebp + eax - 0x350c], ecx
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x2040], eax
jg 0x449c4c
mov dword [ebp - 0x2048], 1
jmp 0x449c53
and dword [ebp - 0x2048], 0
mov eax, dword [ebp - 0x2048]
mov dword [ebp - 0x2050], eax
cmp dword [ebp - 0x2050], 0xeb9ae77a
jae 0x449c77
mov dword [ebp - 0x2058], 1
jmp 0x449c7e
and dword [ebp - 0x2058], 0
cmp dword [ebp - 0x2058], 0xfffffff6
jne 0x449c93
mov dword [ebp - 0x20e0], 1
jmp 0x449c9a
and dword [ebp - 0x20e0], 0
mov eax, dword [ebp - 0x9b4]
cmp dword [ebp - 0x20e0], eax
je 0x449cb4
mov dword [ebp - 0x20e8], 1
jmp 0x449cbb
and dword [ebp - 0x20e8], 0
mov eax, dword [ebp - 0x20e8]
mov dword [ebp - 0x20f0], eax
mov eax, dword [ebp - 0x20f0]
mov dword [ebp - 0x2528], eax
mov dword [ebp - 0x258], 0xffffffef
jmp 0x449cec
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x15
jle 0x449d58
mov dword [ebp - 0x2530], 0x7c6d
mov byte [ebp - 0x2fd], 0
movzx eax, byte [ebp - 0x2fd]
test eax, eax
je 0x449d27
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
cmp dword [ebp - 0x20f8], 0
je 0x449d43
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x449d43
mov dword [ebp - 0x2100], 1
jmp 0x449d4a
and dword [ebp - 0x2100], 0
mov eax, dword [ebp - 0x2100]
mov dword [ebp - 0x2530], eax
jmp 0x449cdf
jmp 0x449b08
cmp dword [ebp - 0x258], 0
je 0x449d7b
cmp dword [ebp - 0x164], 0
je 0x449d7b
mov dword [ebp - 0x2538], 1
jmp 0x449d82
and dword [ebp - 0x2538], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x2540]
jle 0x449d9f
mov dword [ebp - 0x2108], 1
jmp 0x449da6
and dword [ebp - 0x2108], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x2108], eax
jle 0x449dbd
mov eax, 0x121f2059
test eax, eax
jne 0x449dcf
cmp dword [ebp - 0x258], 0
jne 0x449dcf
and dword [ebp - 0x2110], 0
jmp 0x449dd9
mov dword [ebp - 0x2110], 1
mov eax, dword [ebp - 0x2110]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x5cc], 0xfffffffd
mov dword [ebp - 0x2c98], 0x2df
mov dword [ebp - 0x980], 0
jmp 0x449e12
mov eax, dword [ebp - 0x980]
inc eax
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x980], 3
jge 0x449e2e
mov eax, dword [ebp - 0x980]
mov dword [ebp + eax*4 - 0x218c], 1
jmp 0x449e05
mov dword [ebp - 0x5cc], 0x10
jmp 0x449e47
mov eax, dword [ebp - 0x5cc]
dec eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 0xfffffff0
jg 0x44a17c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2118], 9
mov dword [ebp - 0x1c], 2
jmp 0x449e75
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x44a177
mov dword [ebp - 0x988], 0
jmp 0x449e98
mov eax, dword [ebp - 0x988]
inc eax
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 4
jge 0x449eb4
mov eax, dword [ebp - 0x988]
mov dword [ebp + eax*4 - 0x27cc], 0xfffffff6
jmp 0x449e8b
mov byte [ebp - 0x2f8], 0
movzx eax, byte [ebp - 0x2f8]
test eax, eax
je 0x449ed3
push 0x132c
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
cmp dword [ebp - 0x1c], 0
je 0x449fc0
xor eax, eax
jne 0x449ee5
cmp dword [ebp - 0x1c], 0
mov dword [ebp - 0x2118], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x218c]
cmp dword [ebp - 0x2118], eax
jge 0x449f0d
mov dword [ebp - 0xbf8], 1
jmp 0x449f14
and dword [ebp - 0xbf8], 0
cmp dword [ebp - 0xbf8], 0
ja 0x449f29
mov dword [ebp - 0x1b50], 1
jmp 0x449f30
and dword [ebp - 0x1b50], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218c]
cmp dword [ebp - 0x1b50], eax
jne 0x449f51
mov dword [ebp - 0xc00], 1
jmp 0x449f58
and dword [ebp - 0xc00], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27cc]
cmp dword [ebp - 0xc00], eax
jg 0x449f79
mov dword [ebp - 0x1b58], 1
jmp 0x449f80
and dword [ebp - 0x1b58], 0
cmp dword [ebp - 0x1b58], 0xef7e
jl 0x449f98
mov dword [ebp - 0xc08], 1
jmp 0x449f9f
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x218c]
add eax, dword [ebp - 0xc08]
add eax, dword [ebp - 0x1c]
je 0x449fc0
mov dword [ebp - 0x2548], 1
jmp 0x449fc7
and dword [ebp - 0x2548], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2ca0], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x27cc]
cmp dword [ebp + eax - 0x27cc], ecx
jge 0x449ff8
mov dword [ebp - 0x1b60], 1
jmp 0x449fff
and dword [ebp - 0x1b60], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1b60], eax
jg 0x44a016
mov dword [ebp - 0x2550], 1
jmp 0x44a01d
and dword [ebp - 0x2550], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2ca8], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x218c], 0
jle 0x44a03f
mov dword [ebp - 0xc10], 1
jmp 0x44a046
and dword [ebp - 0xc10], 0
cmp dword [ebp - 0xc10], 0xffffffff
jne 0x44a05b
mov dword [ebp - 0x1b68], 1
jmp 0x44a062
and dword [ebp - 0x1b68], 0
cmp dword [ebp - 0x1b68], 0xa9b03be4
jae 0x44a07a
mov dword [ebp - 0xc18], 1
jmp 0x44a081
and dword [ebp - 0xc18], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27cc]
cmp dword [ebp - 0xc18], eax
je 0x44a0a2
mov dword [ebp - 0x1b70], 1
jmp 0x44a0a9
and dword [ebp - 0x1b70], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1b70]
jne 0x44a0c2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x27cc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x27cc]
cmp dword [ebp - 0x5cc], eax
jne 0x44a0e3
mov dword [ebp - 0xc20], 1
jmp 0x44a0ea
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x218c]
add eax, dword [ebp - 0xc20]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x218c]
jge 0x44a114
mov dword [ebp - 0x1b78], 1
jmp 0x44a11b
and dword [ebp - 0x1b78], 0
cmp dword [ebp - 0x1b78], 0xffffffff
jb 0x44a130
mov dword [ebp - 0xc28], 1
jmp 0x44a137
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc28]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x27cc]
jl 0x44a15b
mov dword [ebp - 0x1b80], 1
jmp 0x44a162
and dword [ebp - 0x1b80], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1b80]
mov dword [ebp + eax*4 - 0x218c], ecx
jmp 0x449e6e
jmp 0x449e3a
mov dword [ebp - 0xd4], 0x99841b3c
mov dword [ebp - 0x7f4], 0xb9dd952e
mov dword [ebp - 0x1bc0], 0xfffffffe
mov dword [ebp - 8], 1
mov dword [ebp - 0x95c], 0
jmp 0x44a1ba
mov eax, dword [ebp - 0x95c]
inc eax
mov dword [ebp - 0x95c], eax
cmp dword [ebp - 0x95c], 4
jge 0x44a1d6
mov eax, dword [ebp - 0x95c]
mov dword [ebp + eax*4 - 0x3750], 0x5a14e9c1
jmp 0x44a1ad
mov dword [ebp - 0xd4], 0
jmp 0x44a1ef
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 7
jge 0x44a693
mov dword [ebp - 0x5c4], 4
mov dword [ebp - 0xc68], 1
mov dword [ebp - 0x7ec], 4
mov dword [ebp - 0x604], 0xffffffff
mov dword [ebp - 0x5fc], 0
jmp 0x44a23d
mov eax, dword [ebp - 0x5fc]
inc eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 4
jge 0x44a259
mov eax, dword [ebp - 0x5fc]
mov dword [ebp + eax*4 - 0x28d0], 0xac1dea90
jmp 0x44a230
mov eax, dword [ebp - 0x5c4]
dec eax
mov dword [ebp - 0x5c4], eax
je 0x44a514
cmp dword [ebp - 0xd4], 0
je 0x44a350
cmp dword [ebp - 0xd4], 0
jle 0x44a28e
mov dword [ebp - 0xc30], 1
jmp 0x44a295
and dword [ebp - 0xc30], 0
mov eax, dword [ebp - 0xc30]
add eax, 5
cmp eax, dword [ebp - 0xd4]
je 0x44a2b2
mov dword [ebp - 0x1b88], 1
jmp 0x44a2b9
and dword [ebp - 0x1b88], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x1b88]
cmp eax, dword [ebp - 0x5c4]
jg 0x44a2dd
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x44a2dd
and dword [ebp - 0xc38], 0
jmp 0x44a2e7
mov dword [ebp - 0xc38], 1
cmp dword [ebp - 0xc38], 0x930f888c
ja 0x44a2ff
mov dword [ebp - 0x1b90], 1
jmp 0x44a306
and dword [ebp - 0x1b90], 0
mov eax, dword [ebp - 0x1b90]
add eax, 0x479e
je 0x44a328
cmp dword [ebp - 0xd4], 0
je 0x44a328
mov dword [ebp - 0xc40], 1
jmp 0x44a32f
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x7ec], eax
cmp dword [ebp - 0x7ec], 0
je 0x44a350
mov dword [ebp - 0x1b98], 1
jmp 0x44a357
and dword [ebp - 0x1b98], 0
mov eax, dword [ebp - 0x1bc0]
cmp dword [ebp - 0x1b98], eax
jg 0x44a377
cmp dword [ebp - 0x604], 0
jne 0x44a377
and dword [ebp - 0xc48], 0
jmp 0x44a381
mov dword [ebp - 0xc48], 1
cmp dword [ebp - 0xc48], 0xb6c4
je 0x44a399
mov dword [ebp - 0x1ba0], 1
jmp 0x44a3a0
and dword [ebp - 0x1ba0], 0
imul eax, dword [ebp - 0x1ba0], 0x3e87
cmp eax, dword [ebp - 0xd4]
jle 0x44a3be
mov dword [ebp - 0xc50], 1
jmp 0x44a3c5
and dword [ebp - 0xc50], 0
cmp dword [ebp - 0xc50], 4
jb 0x44a3da
mov dword [ebp - 0x1ba8], 1
jmp 0x44a3e1
and dword [ebp - 0x1ba8], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1ba8]
cmp eax, 0xffffffff
jl 0x44a401
mov eax, 0x1cf2bba2
test eax, eax
jne 0x44a401
and dword [ebp - 0x2558], 0
jmp 0x44a40b
mov dword [ebp - 0x2558], 1
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x2cb0], eax
cmp dword [ebp - 0x7ec], 0
je 0x44a43b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x28d0], 0
je 0x44a43b
mov dword [ebp - 0xc58], 1
jmp 0x44a442
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x5c4]
add eax, dword [ebp - 0xc58]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x44a46e
mov eax, 0x97d6
test eax, eax
je 0x44a46e
mov dword [ebp - 0x1bb0], 1
jmp 0x44a475
and dword [ebp - 0x1bb0], 0
cmp dword [ebp - 0x1bb0], 0xa40f
jg 0x44a48d
mov dword [ebp - 0xc60], 1
jmp 0x44a494
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xc60], eax
jne 0x44a4ab
mov dword [ebp - 0x1bb8], 1
jmp 0x44a4b2
and dword [ebp - 0x1bb8], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
cmp dword [ebp - 0xc68], eax
je 0x44a514
mov dword [ebp - 8], 0
jmp 0x44a4e9
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x44a50f
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x28d0], 0
je 0x44a4fe
jmp 0x44a50f
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x28d0], 0
je 0x44a50d
jmp 0x44a4e2
jmp 0x44a4e2
jmp 0x44a68e
mov dword [ebp - 0x1bd0], 0xdda102f3
mov byte [ebp - 0x2fa], 0
movzx eax, byte [ebp - 0x2fa]
test eax, eax
je 0x44a53b
push 0x1406
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 8], 3
jmp 0x44a54b
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x44a68e
mov byte [ebp - 0x2fc], 0
movzx eax, byte [ebp - 0x2fc]
test eax, eax
je 0x44a576
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x28d0], 0xcf8314cd
jne 0x44a59b
cmp dword [ebp - 0x7ec], 0
je 0x44a59b
mov dword [ebp - 0x2560], 1
jmp 0x44a5a2
and dword [ebp - 0x2560], 0
cmp dword [ebp - 0x1bc0], 0
jne 0x44a5b7
mov dword [ebp - 0xc70], 1
jmp 0x44a5be
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0x1bd0]
cmp dword [ebp - 0xc70], eax
jg 0x44a5e1
cmp dword [ebp - 0x604], 0
je 0x44a5e1
mov dword [ebp - 0x1bc8], 1
jmp 0x44a5e8
and dword [ebp - 0x1bc8], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28d0]
imul eax, dword [ebp - 0x1bc8]
neg eax
cmp eax, dword [ebp - 0x7f4]
jne 0x44a60f
mov dword [ebp - 0xc78], 1
jmp 0x44a616
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28d0]
cmp dword [ebp - 0xc78], eax
jl 0x44a634
mov dword [ebp - 0xc80], 1
jmp 0x44a63b
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x1bd0]
cmp dword [ebp - 0xc80], eax
jl 0x44a655
mov dword [ebp - 0x1bd8], 1
jmp 0x44a65c
and dword [ebp - 0x1bd8], 0
mov eax, dword [ebp - 0x604]
cmp dword [ebp - 0x1bd8], eax
jne 0x44a676
mov dword [ebp - 0xc88], 1
jmp 0x44a67d
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x7f4], eax
jmp 0x44a544
jmp 0x44a1e2
mov dword [ebp - 8], 0
jmp 0x44a6a3
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x44a6de
mov dword [ebp - 0x1be0], 0x80eff2b3
mov eax, dword [ebp - 0x1be0]
dec eax
mov dword [ebp - 0x1be0], eax
mov byte [ebp - 0x2fe], 0
movzx eax, byte [ebp - 0x2fe]
test eax, eax
je 0x44a6dc
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x44a69c
mov dword [ebp - 0x1fc], 0xa48bbca6
mov dword [ebp - 0x60c], 0xbac64a68
mov dword [ebp - 0x60c], 0xd
jmp 0x44a70b
mov eax, dword [ebp - 0x60c]
dec eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 0xffffffe3
jl 0x44a73b
mov byte [ebp - 0x300], 0
movzx eax, byte [ebp - 0x300]
test eax, eax
je 0x44a739
push 0
push 0
push 0xe31
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
jmp 0x44a6fe
mov byte [ebp - 0x302], 0
movzx eax, byte [ebp - 0x302]
test eax, eax
je 0x44a761
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x274], 0x3813
mov dword [ebp - 0x27e0], 0x469ad59e
mov dword [ebp - 0x27dc], 0x469ad59e
mov dword [ebp - 0x27d8], 0x469ad59e
mov dword [ebp - 0x27d4], 0x469ad59e
mov dword [ebp - 0x7fc], 0
jmp 0x44a7ac
mov eax, dword [ebp - 0x7fc]
inc eax
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 1
jge 0x44a7c8
mov eax, dword [ebp - 0x7fc]
mov dword [ebp + eax*4 - 0x2cb8], 0
jmp 0x44a79f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x27e0], 0
jmp 0x44a7f6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27e0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x27e0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x27e0], 0
jg 0x44a830
mov byte [ebp - 0x304], 0
movzx eax, byte [ebp - 0x304]
test eax, eax
je 0x44a82e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x44a7db
mov byte [ebp - 0x306], 0
movzx eax, byte [ebp - 0x306]
test eax, eax
je 0x44a851
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x257c], 0xf8de905f
mov dword [ebp - 0x264], 0xa48bbca6
mov dword [ebp - 0x2cc0], 0xdc4b4e12
mov dword [ebp - 0x614], 0
jmp 0x44a888
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 1
jge 0x44a8a4
mov eax, dword [ebp - 0x614]
mov dword [ebp + eax*4 - 0x2cc8], 0x90a624cd
jmp 0x44a87b
mov dword [ebp - 0x264], 0
jmp 0x44a8bd
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x44a8df
mov dword [ebp - 0xc90], 7
mov eax, dword [ebp - 0xc90]
inc eax
mov dword [ebp - 0xc90], eax
jmp 0x44a8b0
mov dword [ebp - 0x264], 6
jmp 0x44a8f8
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x13
je 0x44a918
mov dword [ebp - 0x2568], 0x64fd9e2a
cmp dword [ebp - 0x2568], 0
je 0x44a916
jmp 0x44a918
jmp 0x44a8eb
mov dword [ebp - 0x2cd0], 0xa1ec
mov dword [ebp - 0x144], 0xfffffffa
mov dword [ebp - 0x804], 0
jmp 0x44a945
mov eax, dword [ebp - 0x804]
inc eax
mov dword [ebp - 0x804], eax
cmp dword [ebp - 0x804], 1
jge 0x44a961
mov eax, dword [ebp - 0x804]
mov dword [ebp + eax*4 - 0x2570], 0x6192
jmp 0x44a938
mov dword [ebp - 0x144], 0
jmp 0x44a97a
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jl 0x44a9df
mov dword [ebp - 0x61c], 0xfffffffa
mov dword [ebp - 0x61c], 0
jmp 0x44a9a6
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0
jg 0x44a9cb
mov byte [ebp - 0x308], 0
movzx eax, byte [ebp - 0x308]
test eax, eax
je 0x44a9c9
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x44a999
mov eax, dword [ebp - 0x144]
cmp dword [ebp + eax*4 - 0x2570], 0
je 0x44a9dd
jmp 0x44a96d
jmp 0x44a96d
mov dword [ebp - 0x144], 0
jmp 0x44a9f8
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xffffffe8
je 0x44aa5d
mov dword [ebp - 0x80c], 1
mov dword [ebp - 0x80c], 0x14
jmp 0x44aa24
mov eax, dword [ebp - 0x80c]
dec eax
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0xfffffffc
jne 0x44aa50
mov byte [ebp - 0x30a], 0
movzx eax, byte [ebp - 0x30a]
test eax, eax
je 0x44aa4e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
jmp 0x44aa17
cmp dword [ebp - 0x144], 0
je 0x44aa5b
jmp 0x44a9eb
jmp 0x44a9eb
mov dword [ebp - 0x1fc], 0xffffffef
jmp 0x44aa76
cmp dword [ebp - 0x1fc], 0xfffffff2
jl 0x44d05b
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x2598], 0x731e7bf5
mov dword [ebp - 0x2cd8], 0xaec51ac0
mov dword [ebp - 0xcb0], 0xecc33bab
mov dword [ebp - 0x2ce0], 0xd700d1a0
mov dword [ebp - 0xb64], 0x385e
mov dword [ebp - 0x1bf0], 0xfff7
mov dword [ebp - 0x1c18], 0x312446b8
mov dword [ebp - 0x444], 0x5f713ec2
mov dword [ebp - 0x154], 0
jmp 0x44aaf6
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x44ab12
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x2934], 0x4e2db58e
jmp 0x44aae9
mov dword [ebp - 0x154], 0
jmp 0x44ab2b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x44ab47
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x2ce8], 0x5631cd1a
jmp 0x44ab1e
mov dword [ebp - 0x124], 0
jmp 0x44ab60
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jg 0x44ac08
mov dword [ebp - 0x624], 0
jmp 0x44ab86
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 1
jge 0x44aba2
mov eax, dword [ebp - 0x624]
mov dword [ebp + eax*4 - 0x4e0], 0x197f0a2
jmp 0x44ab79
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4e0], 0
jmp 0x44abd0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4e0], 2
jg 0x44ac03
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e0]
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp + eax*4 - 0x2934]
mov dword [ebp + ecx*4 - 0x2934], eax
jmp 0x44abb5
jmp 0x44ab53
mov dword [ebp - 0x124], 0
jmp 0x44ac21
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffe5
jge 0x44b078
mov dword [ebp - 0xb6c], 9
mov dword [ebp - 0xcd0], 0xbd9b76fc
mov dword [ebp - 0x25a8], 0x59fb
mov dword [ebp - 0x4c], 0
jmp 0x44ac5c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x44ac72
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x25b4], 0x35db5a26
jmp 0x44ac55
mov dword [ebp - 0x4c], 0
jmp 0x44ac82
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x44ac98
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xbc8], 0
jmp 0x44ac7b
mov dword [ebp - 0x4c], 0
jmp 0x44aca8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x44acbe
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x2954], 0xf82eddaa
jmp 0x44aca1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2934]
mov dword [ebp - 0x2578], eax
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0x2580], eax
mov eax, dword [ebp - 0xb64]
inc eax
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x2578]
cmp eax, dword [ebp - 0x2580]
jg 0x44ad04
mov dword [ebp - 0xca8], 1
jmp 0x44ad0b
and dword [ebp - 0xca8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc8], 0
je 0x44ad37
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc8], 0
je 0x44ad37
mov dword [ebp - 0x1be8], 1
jmp 0x44ad3e
and dword [ebp - 0x1be8], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x1be8], eax
jg 0x44ad58
mov dword [ebp - 0xc98], 1
jmp 0x44ad5f
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x1bf0], eax
cmp dword [ebp - 0x1bf0], 0x19b2
jne 0x44ad83
mov dword [ebp - 0xca0], 1
jmp 0x44ad8a
and dword [ebp - 0xca0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xca0]
mov dword [ebp + eax - 0x25b4], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x25b4], 0xffffffff
jle 0x44adbf
mov eax, 0xa0b5
test eax, eax
jne 0x44adbf
and dword [ebp - 0x1bf8], 0
jmp 0x44adc9
mov dword [ebp - 0x1bf8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbc8]
imul eax, dword [ebp - 0x1bf8]
cmp dword [ebp - 0xca8], eax
jg 0x44adf0
mov dword [ebp - 0x1c00], 1
jmp 0x44adf7
and dword [ebp - 0x1c00], 0
mov eax, dword [ebp - 0x1c00]
mov dword [ebp - 0xcb0], eax
cmp dword [ebp - 0xcb0], 0xb34d7aeb
ja 0x44ae1b
mov dword [ebp - 0x1c08], 1
jmp 0x44ae22
and dword [ebp - 0x1c08], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbc8]
cmp dword [ebp - 0x1c08], eax
je 0x44ae43
mov dword [ebp - 0xcb8], 1
jmp 0x44ae4a
and dword [ebp - 0xcb8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcb8]
sub ecx, dword [ebp + eax - 0xbc8]
je 0x44ae7b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x25b4], 0
je 0x44ae7b
mov dword [ebp - 0x2588], 1
jmp 0x44ae82
and dword [ebp - 0x2588], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2934]
mov dword [ebp - 0x2cf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc8]
mov dword [ebp - 0x2cf8], eax
push 9
pop eax
imul eax, eax, 0xad8e
mov dword [ebp - 0x2590], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2590]
mov dword [ebp + eax - 0xbc8], ecx
mov eax, dword [ebp - 0xb6c]
cmp dword [ebp - 0x1c18], eax
jle 0x44aee4
mov dword [ebp - 0x1c10], 1
jmp 0x44aeeb
and dword [ebp - 0x1c10], 0
mov eax, dword [ebp - 0x2598]
cmp dword [ebp - 0x1c10], eax
jl 0x44af15
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbc8], 0
je 0x44af15
mov dword [ebp - 0xcc0], 1
jmp 0x44af1c
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xcc0]
sub eax, 0x726a
cmp eax, dword [ebp - 0x1c18]
jg 0x44af3b
mov dword [ebp - 0xcc8], 1
jmp 0x44af42
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x444]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc8]
sub eax, dword [ebp - 0x444]
cmp eax, 0xfffffffa
ja 0x44af6c
mov dword [ebp - 0x25a0], 1
jmp 0x44af73
and dword [ebp - 0x25a0], 0
cmp dword [ebp - 0xb6c], 0x15d2bb39
jne 0x44af8b
mov dword [ebp - 0x1c20], 1
jmp 0x44af92
and dword [ebp - 0x1c20], 0
mov eax, dword [ebp - 0x1c20]
mov dword [ebp - 0xcd0], eax
cmp dword [ebp - 0xcd0], 0
jne 0x44afc5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2954], 0
jne 0x44afc5
xor eax, eax
inc eax
jne 0x44afc5
and dword [ebp - 0x1c28], 0
jmp 0x44afcf
mov dword [ebp - 0x1c28], 1
cmp dword [ebp - 0x1c28], 0xf3af71e1
je 0x44afe7
mov dword [ebp - 0xcd8], 1
jmp 0x44afee
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xb6c]
cmp dword [ebp - 0xcd8], eax
jge 0x44b008
mov dword [ebp - 0x1c30], 1
jmp 0x44b00f
and dword [ebp - 0x1c30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2954]
xor eax, eax
inc eax
neg eax
mov dword [ebp - 0x25a8], eax
mov dword [ebp - 0x444], 0
jmp 0x44b040
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 1
jg 0x44b073
mov byte [ebp - 0x30c], 0
movzx eax, byte [ebp - 0x30c]
test eax, eax
je 0x44b071
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x44b033
jmp 0x44ac14
mov dword [ebp - 0xd0], 2
mov dword [ebp - 0x814], 0
jmp 0x44b09b
mov eax, dword [ebp - 0x814]
inc eax
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 1
jge 0x44b0b4
mov eax, dword [ebp - 0x814]
mov dword [ebp + eax*4 - 0x34], 0xffffffff
jmp 0x44b08e
mov dword [ebp - 0xd0], 0xffffffec
jmp 0x44b0cd
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x17
je 0x44b547
mov dword [ebp - 0x81c], 0xd9ba07e4
mov dword [ebp - 0xb9c], 3
mov dword [ebp - 0x44c], 0xffffffff
mov dword [ebp - 0xb74], 0
mov dword [ebp - 0xb7c], 0xc25
mov dword [ebp - 0x62c], 0
jmp 0x44b125
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 1
jge 0x44b141
mov eax, dword [ebp - 0x62c]
mov dword [ebp + eax*4 - 0x560], 0
jmp 0x44b118
mov eax, dword [ebp - 0x81c]
cmp dword [ebp - 0xd0], eax
jle 0x44b311
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2d00], eax
mov eax, dword [ebp - 0xd0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x34]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x34]
jne 0x44b187
mov dword [ebp - 0xce0], 1
jmp 0x44b18e
and dword [ebp - 0xce0], 0
cmp dword [ebp - 0xce0], 0xe13f5e3d
jne 0x44b1a6
mov dword [ebp - 0x26d8], 1
jmp 0x44b1ad
and dword [ebp - 0x26d8], 0
cmp dword [ebp - 0x81c], 0xffffffff
jae 0x44b1c2
mov dword [ebp - 0x1c38], 1
jmp 0x44b1c9
and dword [ebp - 0x1c38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x1c38], eax
jl 0x44b1e7
mov dword [ebp - 0xce8], 1
jmp 0x44b1ee
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0xb9c], eax
cmp dword [ebp - 0xb9c], 0
jne 0x44b21e
cmp dword [ebp - 0x44c], 0
jne 0x44b21e
mov eax, 0x9da9
test eax, eax
jne 0x44b21e
and dword [ebp - 0x1c40], 0
jmp 0x44b228
mov dword [ebp - 0x1c40], 1
mov eax, dword [ebp - 0x1c40]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0xb74]
cmp dword [ebp - 0x81c], eax
je 0x44b24e
mov dword [ebp - 0xcf0], 1
jmp 0x44b255
and dword [ebp - 0xcf0], 0
cmp dword [ebp - 0xcf0], 0xffffffff
jne 0x44b26a
mov dword [ebp - 0x1c48], 1
jmp 0x44b271
and dword [ebp - 0x1c48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
imul eax, dword [ebp - 0x1c48]
sub eax, 0x78ef8a6e
cmp eax, dword [ebp - 0xd0]
je 0x44b29b
mov dword [ebp - 0x26e0], 1
jmp 0x44b2a2
and dword [ebp - 0x26e0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2d08], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x34], 0x91f9
cmp eax, dword [ebp - 0x44c]
jl 0x44b2d0
mov dword [ebp - 0xcf8], 1
jmp 0x44b2d7
and dword [ebp - 0xcf8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0xcf8], eax
jne 0x44b2f5
mov dword [ebp - 0x1c50], 1
jmp 0x44b2fc
and dword [ebp - 0x1c50], 0
cmp dword [ebp - 0x1c50], 3
jge 0x44b311
mov dword [ebp - 0xd00], 1
jmp 0x44b318
and dword [ebp - 0xd00], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd00]
sub ecx, dword [ebp + eax - 0x34]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x560], ecx
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x2d10], eax
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0x2d18], eax
cmp dword [ebp - 0xd0], 0x4c116104
jne 0x44b362
cmp dword [ebp - 0xb74], 0
jne 0x44b37d
cmp dword [ebp - 0x44c], 0
jne 0x44b37d
cmp dword [ebp - 0xd0], 0
jne 0x44b37d
and dword [ebp - 0x1c58], 0
jmp 0x44b387
mov dword [ebp - 0x1c58], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x1c58]
jg 0x44b3a5
mov dword [ebp - 0x26e8], 1
jmp 0x44b3ac
and dword [ebp - 0x26e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0x2d20], eax
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x2d28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x560], 0
je 0x44b3ed
cmp dword [ebp - 0x44c], 0
je 0x44b3ed
mov dword [ebp - 0xd08], 1
jmp 0x44b3f4
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0x44c]
cmp dword [ebp - 0xd08], eax
jge 0x44b40e
mov dword [ebp - 0x1c60], 1
jmp 0x44b415
and dword [ebp - 0x1c60], 0
cmp dword [ebp - 0x1c60], 0xfffc
ja 0x44b42d
mov dword [ebp - 0x26f0], 1
jmp 0x44b434
and dword [ebp - 0x26f0], 0
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x2d30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
mov dword [ebp - 0x2d38], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x34]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x34]
jg 0x44b482
mov dword [ebp - 0xd10], 1
jmp 0x44b489
and dword [ebp - 0xd10], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x560]
cmp dword [ebp - 0xd10], eax
jne 0x44b4aa
mov dword [ebp - 0x1c68], 1
jmp 0x44b4b1
and dword [ebp - 0x1c68], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x1c68], eax
jg 0x44b4cb
mov dword [ebp - 0xd18], 1
jmp 0x44b4d2
and dword [ebp - 0xd18], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb9c]
add ecx, dword [ebp - 0xd18]
cmp dword [ebp + eax - 0x34], ecx
jl 0x44b4f6
mov dword [ebp - 0x26f8], 1
jmp 0x44b4fd
and dword [ebp - 0x26f8], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x2d40], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp dword [ebp + eax - 0x34], ecx
jl 0x44b52b
mov dword [ebp - 0x1c70], 1
jmp 0x44b532
and dword [ebp - 0x1c70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c70]
mov dword [ebp + eax - 0x34], ecx
jmp 0x44b0c0
mov dword [ebp - 0x9d8], 1
mov dword [ebp - 0x634], 0
jmp 0x44b56a
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 2
jge 0x44b586
mov eax, dword [ebp - 0x634]
mov dword [ebp + eax*4 - 0x21f8], 2
jmp 0x44b55d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x21f8], 0xffffffe7
jmp 0x44b5b4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21f8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x21f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21f8], 0x14
je 0x44b611
mov dword [ebp - 0x824], 0xdce9d05b
mov dword [ebp - 0x824], 0
jmp 0x44b5e7
mov eax, dword [ebp - 0x824]
inc eax
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x824], 9
jg 0x44b60f
mov byte [ebp - 0x30e], 0
movzx eax, byte [ebp - 0x30e]
test eax, eax
je 0x44b60d
push 0x221b
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x44b5da
jmp 0x44b599
mov byte [ebp - 0x310], 0
movzx eax, byte [ebp - 0x310]
test eax, eax
je 0x44b63a
push 0x170b
push 0x156f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
mov dword [ebp - 0x1de8], 0x4f230135
mov dword [ebp - 0x4e8], 0xbc75286e
mov dword [ebp - 0xfc], 0xf55e00fe
mov dword [ebp - 0xb48], 1
mov dword [ebp - 0xd40], 0x2967684a
mov dword [ebp - 0x2718], 0x94bf7d6
mov dword [ebp - 0x63c], 0
jmp 0x44b68f
mov eax, dword [ebp - 0x63c]
inc eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 4
jge 0x44b6ab
mov eax, dword [ebp - 0x63c]
mov dword [ebp + eax*4 - 0x2148], 0xffff
jmp 0x44b682
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x44b6c7
cmp dword [ebp - 0x4e8], 0
cmp dword [ebp - 0xfc], 0x7b6fe6d3
jle 0x44b6df
mov dword [ebp - 0x2700], 1
jmp 0x44b6e6
and dword [ebp - 0x2700], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x2d48], eax
mov eax, 0xeb59
cmp eax, 1
je 0x44b708
mov dword [ebp - 0x2708], 1
jmp 0x44b70f
and dword [ebp - 0x2708], 0
cmp dword [ebp - 0xfc], 0
jne 0x44b724
mov dword [ebp - 0xd20], 1
jmp 0x44b72b
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0xd20]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2148]
jl 0x44b751
mov dword [ebp - 0x1c78], 1
jmp 0x44b758
and dword [ebp - 0x1c78], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0x1c78], eax
jl 0x44b778
mov dword [ebp - 0x2710], 1
jmp 0x44b77f
and dword [ebp - 0x2710], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2d50], eax
mov eax, 0x667f
cmp eax, 0xee0c
jg 0x44b7a3
mov dword [ebp - 0xd28], 1
jmp 0x44b7aa
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0xfc], eax
imul eax, dword [ebp - 0xfc], 0xb59
mov dword [ebp - 0xb48], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0xfc], eax
jne 0x44b7e6
mov dword [ebp - 0x1c80], 1
jmp 0x44b7ed
and dword [ebp - 0x1c80], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0x1c80], eax
jl 0x44b80e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2148], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0xd40], eax
jle 0x44b82e
mov dword [ebp - 0xd30], 1
jmp 0x44b835
and dword [ebp - 0xd30], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp eax, dword [ebp - 0xd30]
jne 0x44b855
mov dword [ebp - 0x1c88], 1
jmp 0x44b85c
and dword [ebp - 0x1c88], 0
cmp dword [ebp - 0x1c88], 7
jle 0x44b871
mov dword [ebp - 0xd38], 1
jmp 0x44b878
and dword [ebp - 0xd38], 0
cmp dword [ebp - 0xd38], 0x8fa
jge 0x44b890
mov dword [ebp - 0x1c90], 1
jmp 0x44b897
and dword [ebp - 0x1c90], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0x1c90], eax
je 0x44b8b7
mov dword [ebp - 0x1c98], 1
jmp 0x44b8be
and dword [ebp - 0x1c98], 0
mov eax, dword [ebp - 0xd40]
cmp dword [ebp - 0x1c98], eax
jge 0x44b8d8
mov dword [ebp - 0xd48], 1
jmp 0x44b8df
and dword [ebp - 0xd48], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0xd48], eax
jle 0x44b8ff
mov dword [ebp - 0x1ca0], 1
jmp 0x44b906
and dword [ebp - 0x1ca0], 0
mov eax, dword [ebp - 0x1ca0]
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xb48], eax
jne 0x44b92c
mov dword [ebp - 0xd50], 1
jmp 0x44b933
and dword [ebp - 0xd50], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2148]
cmp dword [ebp - 0xd50], eax
jle 0x44b959
cmp dword [ebp - 0x4e8], 0
jne 0x44b959
and dword [ebp - 0x1ca8], 0
jmp 0x44b963
mov dword [ebp - 0x1ca8], 1
mov eax, dword [ebp - 0x1ca8]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
sub eax, 0x6826c341
mov dword [ebp - 0x2718], eax
mov dword [ebp - 0xe98], 0x9e071a05
mov dword [ebp - 0x2ac], 0xb9f9b31
mov dword [ebp - 0xd68], 0x2e166580
mov dword [ebp - 0x644], 0xffffffff
mov dword [ebp - 0x9c0], 0xfffffff6
mov dword [ebp - 0x9c8], 0xbe618b25
mov dword [ebp - 0x2730], 0xfffffffc
mov dword [ebp - 0x82c], 0
jmp 0x44b9df
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 4
jge 0x44b9fb
mov eax, dword [ebp - 0x82c]
mov dword [ebp + eax*4 - 0x3524], 0
jmp 0x44b9d2
mov dword [ebp - 0x2ac], 0xe
jmp 0x44ba14
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 8
jge 0x44be52
mov dword [ebp - 0x34c], 0xf1bf506e
mov dword [ebp - 0x5a0], 0x8319b885
mov dword [ebp - 0xab8], 0xffffffff
mov dword [ebp - 0x1f4], 0
jmp 0x44ba58
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 4
jge 0x44ba74
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x2ac0], 0x7662b0a9
jmp 0x44ba4b
mov dword [ebp - 0x1f4], 0
jmp 0x44ba8d
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x44baa9
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x33b8], 0
jmp 0x44ba80
mov dword [ebp - 0x34c], 6
jmp 0x44bac2
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0xffffffe5
jle 0x44bb0a
mov byte [ebp - 0x312], 0
movzx eax, byte [ebp - 0x312]
test eax, eax
je 0x44bae7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [ebp - 0x314], 0
movzx eax, byte [ebp - 0x314]
test eax, eax
je 0x44bb08
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x44bab5
cmp dword [ebp - 0x2ac], 0
jge 0x44bb28
cmp dword [ebp - 0x5a0], 0
je 0x44bb28
mov dword [ebp - 0xd58], 1
jmp 0x44bb2f
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0xd58], eax
jge 0x44bb49
mov dword [ebp - 0x1cb0], 1
jmp 0x44bb50
and dword [ebp - 0x1cb0], 0
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x1cb0], eax
je 0x44bb6a
mov dword [ebp - 0xd60], 1
jmp 0x44bb71
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0xd60]
jne 0x44bb97
mov dword [ebp - 0x1cb8], 1
jmp 0x44bb9e
and dword [ebp - 0x1cb8], 0
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x1cb8]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0xd68], eax
je 0x44bbd6
mov dword [ebp - 0x1cc0], 1
jmp 0x44bbdd
and dword [ebp - 0x1cc0], 0
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0x1cc0], eax
jge 0x44bbf7
mov dword [ebp - 0xd70], 1
jmp 0x44bbfe
and dword [ebp - 0xd70], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2ac0]
cmp dword [ebp - 0xd70], eax
jg 0x44bc1f
mov dword [ebp - 0x1cc8], 1
jmp 0x44bc26
and dword [ebp - 0x1cc8], 0
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x1cc8], eax
jle 0x44bc40
mov dword [ebp - 0xd78], 1
jmp 0x44bc47
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0xd78], eax
je 0x44bc65
xor eax, eax
je 0x44bc65
mov dword [ebp - 0x1cd0], 1
jmp 0x44bc6c
and dword [ebp - 0x1cd0], 0
cmp dword [ebp - 0x1cd0], 0xfffc
jbe 0x44bc84
mov dword [ebp - 0x2720], 1
jmp 0x44bc8b
and dword [ebp - 0x2720], 0
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0x9c0], eax
jle 0x44bca5
mov dword [ebp - 0xb30], 1
jmp 0x44bcac
and dword [ebp - 0xb30], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xb30]
mov dword [ebp + eax - 0x3524], ecx
mov eax, dword [ebp - 0x9c0]
cmp dword [ebp - 0xb30], eax
jge 0x44bce2
cmp dword [ebp - 0x644], 0
je 0x44bce2
mov dword [ebp - 0x2728], 1
jmp 0x44bce9
and dword [ebp - 0x2728], 0
mov eax, dword [ebp - 0x9c0]
cmp dword [ebp - 0xab8], eax
jl 0x44bd03
mov dword [ebp - 0xd80], 1
jmp 0x44bd0a
and dword [ebp - 0xd80], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2ac0]
cmp dword [ebp - 0xd80], eax
jle 0x44bd2b
mov dword [ebp - 0x1cd8], 1
jmp 0x44bd32
and dword [ebp - 0x1cd8], 0
cmp dword [ebp - 0x1cd8], 0xfffffff7
jge 0x44bd47
mov dword [ebp - 0xd88], 1
jmp 0x44bd4e
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0x9c8], eax
mov eax, 0x37bb
sub eax, dword [ebp - 0x9c8]
cmp eax, 0x35718a84
jg 0x44bd78
mov dword [ebp - 0x1ce0], 1
jmp 0x44bd7f
and dword [ebp - 0x1ce0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2ac0]
cmp dword [ebp - 0x1ce0], eax
je 0x44bda0
mov dword [ebp - 0xd90], 1
jmp 0x44bda7
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0xd90]
add eax, dword [ebp - 0x2730]
mov dword [ebp - 0x1ce8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1ce8]
mov dword [ebp + eax - 0x2ac0], ecx
mov eax, dword [ebp - 0xab8]
cmp dword [ebp - 0x1ce8], eax
je 0x44bde6
mov dword [ebp - 0xd98], 1
jmp 0x44bded
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0xab8]
add eax, dword [ebp - 0xd98]
cmp eax, 0xfff9
jne 0x44be15
cmp dword [ebp - 0x9c8], 0
je 0x44be15
mov dword [ebp - 0x1cf0], 1
jmp 0x44be1c
and dword [ebp - 0x1cf0], 0
cmp dword [ebp - 0x1cf0], 0xfffb
jne 0x44be34
mov dword [ebp - 0xda0], 1
jmp 0x44be3b
and dword [ebp - 0xda0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xda0]
mov dword [ebp + eax - 0x33b8], ecx
jmp 0x44ba07
mov dword [ebp - 0x1e20], 0x4ca77904
mov dword [ebp - 0x94], 5
mov dword [ebp - 0x4f0], 0xa75a592c
mov dword [ebp - 0x568], 0x8e045dce
mov dword [ebp - 0x2738], 0xa71a6e48
mov dword [ebp - 0xdf0], 4
mov dword [ebp - 0x2768], 0x2b500989
mov dword [ebp - 0xdd0], 1
mov dword [ebp - 0x2d58], 0xfffffff7
mov dword [ebp - 0x2d60], 0x420ea1bc
mov dword [ebp - 0x2d68], 0xd56a4262
mov dword [ebp - 0x2d70], 0x4e630971
mov dword [ebp - 0x2d78], 0xc9257018
mov dword [ebp - 0x2d80], 5
mov dword [ebp - 0x64c], 0x38fd2320
mov dword [ebp - 0x2760], 0x16e8cfb9
mov dword [ebp - 0x2770], 0xc30f141
mov dword [ebp - 0x2778], 0x2d3f
mov dword [ebp - 0x834], 0
jmp 0x44bf1f
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 1
jge 0x44bf3b
mov eax, dword [ebp - 0x834]
mov dword [ebp + eax*4 - 0xde0], 0x8aee5119
jmp 0x44bf12
mov eax, 0x5b0bb8b
test eax, eax
je 0x44bf59
cmp dword [ebp - 0x94], 0
je 0x44bf59
mov dword [ebp - 0x1cf8], 1
jmp 0x44bf60
and dword [ebp - 0x1cf8], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x94], eax
jl 0x44bf88
cmp dword [ebp - 0x94], 0
je 0x44bf88
xor eax, eax
inc eax
je 0x44bf88
mov dword [ebp - 0xda8], 1
jmp 0x44bf8f
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0x1cf8]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0xda8]
jge 0x44bfbe
cmp dword [ebp - 0x4f0], 0
je 0x44bfbe
mov dword [ebp - 0x1d00], 1
jmp 0x44bfc5
and dword [ebp - 0x1d00], 0
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x1d00]
cmp eax, 0xa6957688
je 0x44bfe4
mov dword [ebp - 0xdb0], 1
jmp 0x44bfeb
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x568], eax
je 0x44c011
mov dword [ebp - 0x1d08], 1
jmp 0x44c018
and dword [ebp - 0x1d08], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1d08], eax
jl 0x44c032
mov dword [ebp - 0xdb8], 1
jmp 0x44c039
and dword [ebp - 0xdb8], 0
cmp dword [ebp - 0xdb8], 0xfe2c
jne 0x44c051
mov dword [ebp - 0x1d10], 1
jmp 0x44c058
and dword [ebp - 0x1d10], 0
mov eax, dword [ebp - 0x1d10]
add eax, 0x56574b60
cmp eax, dword [ebp - 0x94]
jne 0x44c077
mov dword [ebp - 0xdc0], 1
jmp 0x44c07e
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0xdc0]
jge 0x44c098
mov dword [ebp - 0x1d18], 1
jmp 0x44c09f
and dword [ebp - 0x1d18], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1d18], eax
jl 0x44c0b9
mov dword [ebp - 0xdc8], 1
jmp 0x44c0c0
and dword [ebp - 0xdc8], 0
mov eax, dword [ebp - 0xdc8]
mov dword [ebp - 0x2738], eax
mov eax, dword [ebp - 0x64c]
mov ecx, dword [ebp - 0x64c]
dec ecx
mov dword [ebp - 0x64c], ecx
test eax, eax
je 0x44c1ca
cmp dword [ebp - 0x2760], 0
jne 0x44c1be
mov eax, dword [ebp - 0x2768]
cmp dword [ebp - 0x94], eax
jl 0x44c10b
cmp dword [ebp - 0xdd0], 0
jne 0x44c11b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xde0], 0
je 0x44c130
cmp dword [ebp - 0x2770], 0
je 0x44c130
mov dword [ebp - 0x1d20], 1
jmp 0x44c137
and dword [ebp - 0x1d20], 0
mov eax, dword [ebp - 0x2778]
cmp dword [ebp - 0x1d20], eax
jge 0x44c151
mov dword [ebp - 0x1d28], 1
jmp 0x44c158
and dword [ebp - 0x1d28], 0
mov eax, dword [ebp - 0x568]
sub eax, dword [ebp - 0xdd0]
cmp eax, dword [ebp - 0x1d28]
jl 0x44c178
mov dword [ebp - 0xdd8], 1
jmp 0x44c17f
and dword [ebp - 0xdd8], 0
cmp dword [ebp - 0xdd8], 0
jne 0x44c19a
mov eax, 0xffff
test eax, eax
jne 0x44c19a
and dword [ebp - 0x1d30], 0
jmp 0x44c1a4
mov dword [ebp - 0x1d30], 1
mov eax, dword [ebp - 0x1d30]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0xdf0]
cmp dword [ebp - 0x4f0], eax
je 0x44c1ca
mov dword [ebp - 0x1d38], 1
jmp 0x44c1d1
and dword [ebp - 0x1d38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xde0]
cmp dword [ebp - 0x1d38], eax
jle 0x44c1fb
cmp dword [ebp - 0x64c], 0
je 0x44c1fb
mov dword [ebp - 0xde8], 1
jmp 0x44c202
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0xde8]
sub eax, 4
mov dword [ebp - 0x568], eax
je 0x44c228
cmp dword [ebp - 0x94], 0
je 0x44c228
mov dword [ebp - 0x1d40], 1
jmp 0x44c22f
and dword [ebp - 0x1d40], 0
cmp dword [ebp - 0x1d40], 0
jle 0x44c244
mov dword [ebp - 0x2780], 1
jmp 0x44c24b
and dword [ebp - 0x2780], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2d88], eax
mov dword [ebp - 0xdf0], 9
mov dword [ebp - 0x1df8], 0xffffffff
mov dword [ebp - 0x654], 0x13532fe2
mov dword [ebp - 0x2d90], 4
mov dword [ebp - 0x83c], 0
jmp 0x44c298
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 2
jge 0x44c2b4
mov eax, dword [ebp - 0x83c]
mov dword [ebp + eax*4 - 0x34d4], 3
jmp 0x44c28b
mov dword [ebp - 0x654], 1
jmp 0x44c2cd
mov eax, dword [ebp - 0x654]
dec eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 0
jl 0x44c2f2
mov byte [ebp - 0x316], 0
movzx eax, byte [ebp - 0x316]
test eax, eax
je 0x44c2f0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x44c2c0
mov dword [ebp - 0x1e08], 0x9040c3f3
mov dword [ebp - 0x354], 0x7ddc85f7
mov dword [ebp - 0x844], 0
jmp 0x44c31f
mov eax, dword [ebp - 0x844]
inc eax
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 3
jge 0x44c33b
mov eax, dword [ebp - 0x844]
mov dword [ebp + eax*4 - 0x3478], 1
jmp 0x44c312
mov dword [ebp - 0x354], 0
jmp 0x44c354
mov eax, dword [ebp - 0x354]
dec eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffef
jge 0x44c526
mov dword [ebp - 0x4f8], 0x46158d32
mov dword [ebp - 0x2788], 0
mov dword [ebp - 0x1d50], 0x96d402da
mov dword [ebp - 0xe08], 0xc6f79b34
mov dword [ebp - 0x2790], 0xb8d23212
mov dword [ebp - 0x4f8], 0
jmp 0x44c3ac
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 1
jne 0x44c521
mov dword [ebp - 0xb44], 0x369b
mov dword [ebp - 0x1d48], 0xfffffffa
mov dword [ebp - 0x2798], 0x874acc01
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2788], eax
mov dword [ebp - 0x1d48], 0xb78a
cmp dword [ebp - 0x1d48], 0
jne 0x44c44d
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0x2d98], eax
mov eax, dword [ebp - 0x1d50]
mov dword [ebp - 0x2da0], eax
or eax, 0xffffffff
jne 0x44c425
mov eax, 0x2044
test eax, eax
jne 0x44c425
and dword [ebp - 0xdf8], 0
jmp 0x44c42f
mov dword [ebp - 0xdf8], 1
imul eax, dword [ebp - 0xdf8], 0xfd03
imul eax, dword [ebp - 0xb44]
test eax, eax
jne 0x44c44d
and dword [ebp - 0xe00], 0
jmp 0x44c457
mov dword [ebp - 0xe00], 1
mov eax, dword [ebp - 0x1d50]
imul eax, dword [ebp - 0xe00]
add eax, 0x5c6a3f15
cmp eax, dword [ebp - 0x354]
jge 0x44c47d
mov dword [ebp - 0x9d0], 1
jmp 0x44c484
and dword [ebp - 0x9d0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp + eax - 0x3478], ecx
mov eax, dword [ebp - 0xb44]
imul eax, dword [ebp - 0x9d0]
sub eax, dword [ebp - 0x4f8]
cmp eax, 7
je 0x44c4bb
mov dword [ebp - 0x1d58], 1
jmp 0x44c4c2
and dword [ebp - 0x1d58], 0
mov eax, dword [ebp - 0x1d58]
mov dword [ebp - 0xe08], eax
mov eax, dword [ebp - 0x2790]
cmp dword [ebp - 0xe08], eax
jle 0x44c4e8
mov dword [ebp - 0x1d60], 1
jmp 0x44c4ef
and dword [ebp - 0x1d60], 0
mov eax, dword [ebp - 0x354]
cmp dword [ebp - 0x1d60], eax
jge 0x44c509
mov dword [ebp - 0xe10], 1
jmp 0x44c510
and dword [ebp - 0xe10], 0
mov eax, dword [ebp - 0xe10]
mov dword [ebp - 0x2798], eax
jmp 0x44c39f
jmp 0x44c347
mov dword [ebp - 0x2574], 0xfffffff6
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x26c], 0xfffffffa
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0xec], 2
mov dword [ebp - 0x65c], 0
jmp 0x44c57b
mov eax, dword [ebp - 0x65c]
inc eax
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 3
jge 0x44c597
mov eax, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0x2204], 0xc75d
jmp 0x44c56e
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x2da8], eax
cmp dword [ebp - 0x26c], 0
jne 0x44c5be
cmp dword [ebp - 0x26c], 0
jne 0x44c5be
and dword [ebp - 0x1d78], 0
jmp 0x44c5c8
mov dword [ebp - 0x1d78], 1
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x2db0], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2db8], eax
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x26c], eax
jle 0x44c5fa
mov dword [ebp - 0x27a0], 1
jmp 0x44c601
and dword [ebp - 0x27a0], 0
cmp dword [ebp - 0x114], 0
je 0x44c61a
xor eax, eax
je 0x44c61a
mov dword [ebp - 0x1d68], 1
jmp 0x44c621
and dword [ebp - 0x1d68], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x1d68], eax
jne 0x44c647
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2204], 0
jne 0x44c647
and dword [ebp - 0xe18], 0
jmp 0x44c651
mov dword [ebp - 0xe18], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xe18], eax
je 0x44c671
mov eax, 0x5205
test eax, eax
jne 0x44c671
and dword [ebp - 0x27a8], 0
jmp 0x44c67b
mov dword [ebp - 0x27a8], 1
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x2dc0], eax
mov eax, dword [ebp - 0x114]
sub eax, 0x4a2f844a
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2204]
add eax, 0xe96b
cmp eax, dword [ebp - 0x2ec]
jg 0x44c6b8
mov dword [ebp - 0x1d70], 1
jmp 0x44c6bf
and dword [ebp - 0x1d70], 0
mov eax, dword [ebp - 0x1d70]
mov dword [ebp - 0x4cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2204], 0x2be2ff5
jl 0x44c6ea
mov dword [ebp - 0xe20], 1
jmp 0x44c6f1
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0xe20]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x1d78], eax
jl 0x44c717
mov dword [ebp - 0x27b0], 1
jmp 0x44c71e
and dword [ebp - 0x27b0], 0
mov eax, 0x45e32052
test eax, eax
je 0x44c831
mov dword [ebp - 0xe30], 0x49a5c1b0
mov dword [ebp - 0xec], 0x32da3bb1
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x2ec], eax
jne 0x44c765
mov dword [ebp - 0xe28], 1
jmp 0x44c76c
and dword [ebp - 0xe28], 0
cmp dword [ebp - 0xe30], 0xfff8
jbe 0x44c784
mov dword [ebp - 0x1d80], 1
jmp 0x44c78b
and dword [ebp - 0x1d80], 0
mov eax, dword [ebp - 0xe28]
imul eax, dword [ebp - 0x1d80]
cmp dword [ebp - 0x4cc], eax
jge 0x44c7ac
mov dword [ebp - 0x1d88], 1
jmp 0x44c7b3
and dword [ebp - 0x1d88], 0
mov eax, dword [ebp - 0xe30]
cmp eax, dword [ebp - 0x1d88]
jle 0x44c7cd
mov dword [ebp - 0xe38], 1
jmp 0x44c7d4
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0xe38]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x2ec], 0
jmp 0x44c7f9
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xb
jne 0x44c82f
mov byte [ebp - 0x318], 0
movzx eax, byte [ebp - 0x318]
test eax, eax
je 0x44c82d
push 0x1f6d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x44c7ec
jmp 0x44c866
mov dword [ebp - 0xec], 0
jmp 0x44c84a
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x44c866
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2204], 2
jmp 0x44c83d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2204]
mov dword [ebp - 0x2dc8], eax
cmp dword [ebp - 0x114], 1
jl 0x44c88d
mov dword [ebp - 0x1d90], 1
jmp 0x44c894
and dword [ebp - 0x1d90], 0
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x1d90]
cmp eax, 3
jle 0x44c8b2
mov dword [ebp - 0xe40], 1
jmp 0x44c8b9
and dword [ebp - 0xe40], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xe40], eax
jl 0x44c8d3
mov dword [ebp - 0x1d98], 1
jmp 0x44c8da
and dword [ebp - 0x1d98], 0
mov eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x1d98], eax
jl 0x44c900
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2204], 0
jne 0x44c900
and dword [ebp - 0xe48], 0
jmp 0x44c90a
mov dword [ebp - 0xe48], 1
cmp dword [ebp - 0xe48], 0x8e66
jl 0x44c922
mov dword [ebp - 0x1da0], 1
jmp 0x44c929
and dword [ebp - 0x1da0], 0
mov eax, dword [ebp - 0x1da0]
mov dword [ebp - 0x26c], eax
mov eax, 0xfc71
sub eax, dword [ebp - 0x26c]
imul eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 0x38d581ca
je 0x44c965
mov dword [ebp - 0xe50], 1
jmp 0x44c96c
and dword [ebp - 0xe50], 0
cmp dword [ebp - 0xe50], 0xfffc
ja 0x44c984
mov dword [ebp - 0x1da8], 1
jmp 0x44c98b
and dword [ebp - 0x1da8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1da8], eax
jge 0x44c9a5
mov dword [ebp - 0xe58], 1
jmp 0x44c9ac
and dword [ebp - 0xe58], 0
cmp dword [ebp - 0xe58], 0x2ccf58d9
jl 0x44c9c4
mov dword [ebp - 0x1db0], 1
jmp 0x44c9cb
and dword [ebp - 0x1db0], 0
mov eax, dword [ebp - 0x1db0]
add eax, 0x7069
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x84c], 0xfffffffe
mov byte [ebp - 0x31a], 0
movzx eax, byte [ebp - 0x31a]
test eax, eax
je 0x44ca07
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0x84c], 0
jmp 0x44ca20
cmp dword [ebp - 0x84c], 0xfffffff0
jne 0x44ca40
mov dword [ebp - 0x27b8], 0x6e871d97
cmp dword [ebp - 0x27b8], 0
je 0x44ca3e
mov dword [ebp - 0x664], 0
jmp 0x44ca59
mov dword [ebp - 0x67c], 0xfffffff7
mov dword [ebp - 0x2fcc], 0xfffffff7
mov dword [ebp - 0x864], 0
jmp 0x44d088
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 2
jge 0x44d0a4
mov eax, dword [ebp - 0x864]
mov dword [ebp + eax*4 - 0x35bc], 0x1713
jmp 0x44d07b
mov dword [ebp - 0x67c], 1
jmp 0x44d0bd
mov eax, dword [ebp - 0x67c]
dec eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0
jl 0x44d179
mov dword [ebp - 0x684], 0xe6e83846
mov dword [ebp - 0x2fd4], 7
mov dword [ebp - 0x86c], 0
jmp 0x44d0f7
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 1
jge 0x44d113
mov eax, dword [ebp - 0x86c]
mov dword [ebp + eax*4 - 0x2fdc], 0x1abe8f21
jmp 0x44d0ea
mov dword [ebp - 0x684], 0
jmp 0x44d12c
mov eax, dword [ebp - 0x684]
inc eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 1
jg 0x44d174
mov dword [ebp - 0x1e28], 1
mov byte [ebp - 0x322], 0
movzx eax, byte [ebp - 0x322]
test eax, eax
je 0x44d165
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov eax, dword [ebp - 0x1e28]
dec eax
mov dword [ebp - 0x1e28], eax
jmp 0x44d11f
jmp 0x44d0b0
cmp dword [ebp - 0x274], 0
je 0x44d197
cmp dword [ebp - 0x1fc], 0
je 0x44d197
mov dword [ebp - 0x226c], 1
jmp 0x44d19e
and dword [ebp - 0x226c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x257c]
jle 0x44d1bb
mov dword [ebp - 0xed8], 1
jmp 0x44d1c2
and dword [ebp - 0xed8], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0xed8], eax
jle 0x44d1d9
mov eax, 0x121f2059
test eax, eax
jne 0x44d1eb
cmp dword [ebp - 0x274], 0
jne 0x44d1eb
and dword [ebp - 0x1e30], 0
jmp 0x44d1f5
mov dword [ebp - 0x1e30], 1
mov eax, dword [ebp - 0x1e30]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x174], 0x43cdf98a
mov dword [ebp - 0x874], 0
jmp 0x44d224
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 4
jge 0x44d240
mov eax, dword [ebp - 0x874]
mov dword [ebp + eax*4 - 0x32a0], 1
jmp 0x44d217
mov eax, dword [ebp - 0x174]
imul ecx, dword [ebp - 0x174], 0
sub eax, ecx
imul eax, dword [ebp - 0x174]
mov dword [ebp - 0xee0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xee0]
mov dword [ebp + eax - 0x32a0], ecx
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0xee0], eax
jl 0x44d288
mov dword [ebp - 0x1e38], 1
jmp 0x44d28f
and dword [ebp - 0x1e38], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x1e38], eax
jne 0x44d2a9
mov dword [ebp - 0xee8], 1
jmp 0x44d2b0
and dword [ebp - 0xee8], 0
cmp dword [ebp - 0xee8], 0
je 0x44d2d4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x32a0], 0
je 0x44d2d4
mov dword [ebp - 0x1e40], 1
jmp 0x44d2db
and dword [ebp - 0x1e40], 0
mov eax, dword [ebp - 0x1e40]
neg eax
cmp eax, dword [ebp - 0x174]
jl 0x44d2f7
mov dword [ebp - 0x2274], 1
jmp 0x44d2fe
and dword [ebp - 0x2274], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x32a0], 0xfffffffd
jae 0x44d31a
mov dword [ebp - 0xef0], 1
jmp 0x44d321
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x174]
sub ecx, dword [ebp - 0xef0]
imul eax, ecx
mov dword [ebp - 0x174], eax
mov byte [ebp - 0x324], 0
movzx eax, byte [ebp - 0x324]
test eax, eax
je 0x44d363
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
cmp dword [ebp + 8], 2
jl 0x45f8dd
mov dword [ebp - 0x204], 0
mov dword [ebp - 0xef8], 0
mov dword [ebp - 0x68c], 0
jmp 0x44d39a
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 1
jge 0x44d3b6
mov eax, dword [ebp - 0x68c]
mov dword [ebp + eax*4 - 0xb38], 0xaf11
jmp 0x44d38d
mov byte [ebp - 0x326], 0
movzx eax, byte [ebp - 0x326]
test eax, eax
je 0x44d3d0
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [ebp - 0x204], 0
jmp 0x44d3e9
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jg 0x44d4b0
mov dword [ebp - 0x2610], 0
mov dword [ebp - 0x2584], 0xfffffff6
mov byte [ebp - 0x328], 0
movzx eax, byte [ebp - 0x328]
test eax, eax
je 0x44d424
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x204]
mov eax, dword [ebp + eax*4 - 0xb38]
mov dword [ebp + ecx*4 - 0xb38], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x2fe4], eax
mov eax, dword [ebp - 0x2610]
add eax, 0x226c
cmp dword [ebp - 0x204], eax
jne 0x44d469
mov dword [ebp - 0x1e48], 1
jmp 0x44d470
and dword [ebp - 0x1e48], 0
mov eax, dword [ebp - 0x1e48]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp - 0x204]
cmp dword [ebp + eax*4 - 0xb38], 5
jl 0x44d498
mov dword [ebp - 0x227c], 1
jmp 0x44d49f
and dword [ebp - 0x227c], 0
mov eax, dword [ebp - 0xef8]
mov dword [ebp - 0x2584], eax
jmp 0x44d3dc
mov dword [ebp - 0x1e60], 0xb5af9f7c
mov dword [ebp - 0x2284], 0
mov dword [ebp - 0x2660], 0xfffffffe
mov dword [ebp - 0x44], 0
jmp 0x44d4de
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x44d4f4
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x223c], 0x7d214c40
jmp 0x44d4d7
mov dword [ebp - 0x44], 0
jmp 0x44d504
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x44d51a
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x87c], 0x821342f3
jmp 0x44d4fd
mov dword [ebp - 0x44], 0
jmp 0x44d52a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x44d540
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x3430], 0xfffffff7
jmp 0x44d523
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x223c]
cmp dword [ebp + eax - 0x223c], ecx
jle 0x44d566
mov dword [ebp - 0xf00], 1
jmp 0x44d56d
and dword [ebp - 0xf00], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x223c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x223c]
mov dword [ebp - 0x1e50], 1
jmp 0x44d59a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
cmp dword [ebp - 0x1e50], eax
jge 0x44d5bb
mov dword [ebp - 0x1e58], 1
jmp 0x44d5c2
and dword [ebp - 0x1e58], 0
mov eax, dword [ebp - 0xf00]
cmp eax, dword [ebp - 0x1e58]
jne 0x44d5dc
mov dword [ebp - 0xf08], 1
jmp 0x44d5e3
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0xf08]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x1e60]
dec eax
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x223c]
add ecx, eax
jne 0x44d620
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x87c], 0
jne 0x44d620
and dword [ebp - 0xf10], 0
jmp 0x44d62a
mov dword [ebp - 0xf10], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
cmp dword [ebp - 0xf10], eax
jl 0x44d64b
mov dword [ebp - 0x1e68], 1
jmp 0x44d652
and dword [ebp - 0x1e68], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e68]
sub ecx, dword [ebp + eax - 0x223c]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x223c]
jge 0x44d680
mov dword [ebp - 0xf18], 1
jmp 0x44d687
and dword [ebp - 0xf18], 0
cmp dword [ebp - 0xf18], 0xffffffff
jne 0x44d69c
mov dword [ebp - 0x1e70], 1
jmp 0x44d6a3
and dword [ebp - 0x1e70], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x223c]
cmp eax, dword [ebp - 0x1e70]
je 0x44d6c4
mov dword [ebp - 0xf20], 1
jmp 0x44d6cb
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0x2284]
cmp dword [ebp - 0xf20], eax
jg 0x44d6e5
mov dword [ebp - 0x9e0], 1
jmp 0x44d6ec
and dword [ebp - 0x9e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9e0]
mov dword [ebp + eax - 0x3430], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
cmp dword [ebp - 0x9e0], eax
jle 0x44d720
mov dword [ebp - 0x1e78], 1
jmp 0x44d727
and dword [ebp - 0x1e78], 0
mov eax, dword [ebp - 0x1e78]
neg eax
mov dword [ebp - 0x2660], eax
mov dword [ebp - 0x5c0], 0xffffffff
mov dword [ebp - 0x1e88], 0xffffffff
mov dword [ebp - 0xac8], 0xd9532bb1
mov dword [ebp - 0x1e80], 0xffffffff
mov dword [ebp - 0x9e8], 0x3afc
mov dword [ebp - 0x2294], 1
mov byte [ebp - 0x32a], 0
movzx eax, byte [ebp - 0x32a]
test eax, eax
je 0x44d794
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0x5c0], eax
jg 0x44d7ae
mov dword [ebp - 0x228c], 1
jmp 0x44d7b5
and dword [ebp - 0x228c], 0
mov dword [ebp - 0xac8], 0x87c9a4d3
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x2fec], eax
push 6
pop eax
test eax, eax
je 0x44d7e7
cmp dword [ebp - 0xac8], 0
je 0x44d7e7
mov dword [ebp - 0xf28], 1
jmp 0x44d7ee
and dword [ebp - 0xf28], 0
cmp dword [ebp - 0xf28], 0x9bb7a140
jb 0x44d806
mov dword [ebp - 0x258c], 1
jmp 0x44d80d
and dword [ebp - 0x258c], 0
mov dword [ebp - 0x1e80], 0x3b16aac8
cmp dword [ebp - 0x1e80], 0
jne 0x44d830
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x44d830
and dword [ebp - 0xf30], 0
jmp 0x44d83a
mov dword [ebp - 0xf30], 1
mov eax, dword [ebp - 0xf30]
mov dword [ebp - 0x1e88], eax
cmp dword [ebp - 0x1e88], 0x2a0c
jl 0x44d85e
mov dword [ebp - 0xf38], 1
jmp 0x44d865
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0xf38], eax
jl 0x44d87f
mov dword [ebp - 0x1e90], 1
jmp 0x44d886
and dword [ebp - 0x1e90], 0
mov eax, dword [ebp - 0x1e90]
sub eax, dword [ebp - 0x5c0]
imul eax, dword [ebp - 0x5c0]
cmp eax, 1
je 0x44d8aa
mov dword [ebp - 0xf40], 1
jmp 0x44d8b1
and dword [ebp - 0xf40], 0
mov eax, dword [ebp - 0x9e8]
inc eax
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x9e8]
cmp eax, dword [ebp - 0xf40]
jge 0x44d8d8
mov dword [ebp - 0x1e98], 1
jmp 0x44d8df
and dword [ebp - 0x1e98], 0
mov eax, dword [ebp - 0x1e98]
mov dword [ebp - 0x2294], eax
mov dword [ebp - 0x234], 0xa48bbca6
mov dword [ebp - 0x884], 0x6de713a4
mov dword [ebp - 0x2ff4], 0xab65
mov dword [ebp - 0x694], 0
jmp 0x44d922
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 1
jge 0x44d93e
mov eax, dword [ebp - 0x694]
mov dword [ebp + eax*4 - 0x2ffc], 0x35568345
jmp 0x44d915
mov dword [ebp - 0x884], 0
jmp 0x44d957
mov eax, dword [ebp - 0x884]
dec eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 0
jl 0x44d97c
mov byte [ebp - 0x32c], 0
movzx eax, byte [ebp - 0x32c]
test eax, eax
je 0x44d97a
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
jmp 0x44d94a
mov dword [ebp - 0x2d4], 0x3813
mov dword [ebp - 0x17c], 0xfffffffe
mov dword [ebp - 0x35c], 0x2937a3a1
mov dword [ebp - 0x69c], 0
jmp 0x44d9b3
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 1
jge 0x44d9cf
mov eax, dword [ebp - 0x69c]
mov dword [ebp + eax*4 - 0x20c], 6
jmp 0x44d9a6
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x17c], eax
je 0x44d9e9
mov dword [ebp - 0xf48], 1
jmp 0x44d9f0
and dword [ebp - 0xf48], 0
mov eax, dword [ebp - 0xf48]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
je 0x44daac
cmp dword [ebp - 0x35c], 0
je 0x44daac
mov eax, 0xbff4
sub eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x35c]
jg 0x44da35
mov dword [ebp - 0x1ea0], 1
jmp 0x44da3c
and dword [ebp - 0x1ea0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x2668], eax
mov eax, dword [ebp - 0x1ea0]
mov dword [ebp - 0x229c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x20c], eax
mov eax, dword [ebp - 0x2668]
cmp eax, dword [ebp - 0x229c]
jle 0x44da90
mov dword [ebp - 0xf50], 1
jmp 0x44da97
and dword [ebp - 0xf50], 0
cmp dword [ebp - 0xf50], 3
jg 0x44daac
mov dword [ebp - 0x1ea8], 1
jmp 0x44dab3
and dword [ebp - 0x1ea8], 0
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x1ea8]
je 0x44dc86
mov dword [ebp - 0x1eb0], 0
mov dword [ebp - 0x454], 0xfffffff8
mov dword [ebp - 0x17c], 0
jmp 0x44daf2
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jg 0x44dc32
mov dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x17c]
mov ecx, 0x1571c097
sub ecx, dword [ebp + eax*4 - 0x20c]
mov dword [ebp - 0x500], ecx
mov dword [ebp - 0x500], 8
cmp dword [ebp - 0x500], 0
je 0x44dbe1
mov eax, dword [ebp - 0x1eb0]
cmp dword [ebp - 0x500], eax
jle 0x44db5b
cmp dword [ebp - 0x35c], 0
je 0x44db5b
mov dword [ebp - 0xf58], 1
jmp 0x44db62
and dword [ebp - 0xf58], 0
mov eax, dword [ebp - 0xf58]
sub eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x1eb0]
jg 0x44db82
mov dword [ebp - 0xf60], 1
jmp 0x44db89
and dword [ebp - 0xf60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp eax, dword [ebp - 0xf60]
jne 0x44dbb3
mov eax, 0xfe3d2f55
test eax, eax
je 0x44dbb3
mov dword [ebp - 0x1eb8], 1
jmp 0x44dbba
and dword [ebp - 0x1eb8], 0
mov eax, dword [ebp - 0x1eb8]
sub eax, dword [ebp - 0x500]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x20c]
je 0x44dbe1
mov dword [ebp - 0xf68], 1
jmp 0x44dbe8
and dword [ebp - 0xf68], 0
cmp dword [ebp - 0xf68], 0xee01
je 0x44dc00
mov dword [ebp - 0x1ec0], 1
jmp 0x44dc07
and dword [ebp - 0x1ec0], 0
mov eax, dword [ebp - 0x1ec0]
mov dword [ebp - 0x454], eax
mov byte [ebp - 0x32e], 0
movzx eax, byte [ebp - 0x32e]
test eax, eax
je 0x44dc2d
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
jmp 0x44dae5
mov dword [ebp - 0x454], 0
jmp 0x44dc4b
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jl 0x44dc84
mov dword [ebp - 0x2594], 0xffffffff
mov dword [ebp - 0x2594], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x454]
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp + ecx*4 - 0x20c], eax
jmp 0x44dc3e
jmp 0x44dcb5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20c], 1
jle 0x44dca2
mov dword [ebp - 0xf70], 1
jmp 0x44dca9
and dword [ebp - 0xf70], 0
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x26b0], 0xf8de905f
mov dword [ebp - 0x10c], 9
mov dword [ebp - 0xf78], 0x20ea0c8d
mov dword [ebp - 0xf80], 0x2f20920a
mov dword [ebp - 0x494], 0x8f9ed02e
mov dword [ebp - 0x1ef0], 9
mov eax, 0x27837
test eax, eax
je 0x44dd6e
cmp dword [ebp - 0x10c], 0
je 0x44dd48
cmp dword [ebp - 0x10c], 0x65c8
jne 0x44dd1b
mov dword [ebp - 0x1ec8], 1
jmp 0x44dd22
and dword [ebp - 0x1ec8], 0
mov eax, dword [ebp - 0x1ec8]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0xf78]
add eax, dword [ebp - 0x10c]
je 0x44dd48
mov dword [ebp - 0x1ed0], 1
jmp 0x44dd4f
and dword [ebp - 0x1ed0], 0
mov eax, dword [ebp - 0x1ed0]
sub eax, 0xec7e
mov dword [ebp - 0xf80], eax
je 0x44dd6e
mov dword [ebp - 0x1ed8], 1
jmp 0x44dd75
and dword [ebp - 0x1ed8], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x1ed8], eax
jl 0x44dd8f
mov dword [ebp - 0xf88], 1
jmp 0x44dd96
and dword [ebp - 0xf88], 0
cmp dword [ebp - 0xf88], 4
je 0x44ddab
mov dword [ebp - 0x1ee0], 1
jmp 0x44ddb2
and dword [ebp - 0x1ee0], 0
cmp dword [ebp - 0x1ee0], 0x5290
jg 0x44ddca
mov dword [ebp - 0xf90], 1
jmp 0x44ddd1
and dword [ebp - 0xf90], 0
mov eax, dword [ebp - 0xf90]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x3004], eax
mov eax, 0xcf7d1649
sub eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
imul eax, eax, 0xad90
cmp dword [ebp - 0x10c], eax
jle 0x44de1a
mov dword [ebp - 0x22a4], 1
jmp 0x44de21
and dword [ebp - 0x22a4], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x300c], eax
cmp dword [ebp - 0x10c], 0xc930f888
je 0x44de45
mov dword [ebp - 0x1ee8], 1
jmp 0x44de4c
and dword [ebp - 0x1ee8], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x1ee8], eax
jle 0x44de66
mov dword [ebp - 0xf98], 1
jmp 0x44de6d
and dword [ebp - 0xf98], 0
mov eax, dword [ebp - 0xf98]
mov dword [ebp - 0x1ef0], eax
mov dword [ebp - 0x494], 0
jmp 0x44de92
mov eax, dword [ebp - 0x494]
dec eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0xffffffeb
je 0x44dea8
cmp dword [ebp - 0x1ef0], 0
je 0x44dea6
jmp 0x44dea8
jmp 0x44de85
mov dword [ebp - 0x3014], 0xa1ec
mov dword [ebp - 0x6a4], 0xfffffffc
mov dword [ebp - 0x88c], 0
jmp 0x44ded5
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 3
jge 0x44def1
mov eax, dword [ebp - 0x88c]
mov dword [ebp + eax*4 - 0x36d4], 0xfffffffc
jmp 0x44dec8
mov dword [ebp - 0x6a4], 0
jmp 0x44df0a
mov eax, dword [ebp - 0x6a4]
inc eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 2
jg 0x44df2c
mov dword [ebp - 0xfa0], 0xffffffff
mov eax, dword [ebp - 0xfa0]
inc eax
mov dword [ebp - 0xfa0], eax
jmp 0x44defd
mov byte [ebp - 0x330], 0
movzx eax, byte [ebp - 0x330]
test eax, eax
je 0x44df63
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0x1a36
push 0x13f6
push 0x2341
push 0x1c48
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
mov dword [ebp - 0x234], 0xffffffef
jmp 0x44df7c
cmp dword [ebp - 0x234], 0xfffffff2
jl 0x450426
mov dword [ebp - 0xfb0], 0x72d9ee1c
mov dword [ebp - 0xf4], 0xfffffffe
mov dword [ebp - 0xb4c], 0
mov dword [ebp - 0xfb8], 1
mov dword [ebp - 0x2670], 0xf9034e10
mov dword [ebp - 0x158], 0
jmp 0x44dfd4
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x44dff0
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x34a8], 0x2285
jmp 0x44dfc7
mov dword [ebp - 0x158], 0
jmp 0x44e009
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x44e025
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x3448], 0xebbfad0d
jmp 0x44dffc
cmp dword [ebp - 0xf4], 0
jne 0x44e082
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0xf4], 0xcb6a
jge 0x44e060
mov dword [ebp - 0x1ef8], 1
jmp 0x44e067
and dword [ebp - 0x1ef8], 0
cmp dword [ebp - 0x1ef8], 0xfffffffb
jae 0x44e082
cmp dword [ebp - 0xb4c], 0
jne 0x44e082
and dword [ebp - 0xfa8], 0
jmp 0x44e08c
mov dword [ebp - 0xfa8], 1
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xfa8]
jge 0x44e0a6
mov dword [ebp - 0x1f00], 1
jmp 0x44e0ad
and dword [ebp - 0x1f00], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x1f00]
jge 0x44e0c7
mov dword [ebp - 0x1f08], 1
jmp 0x44e0ce
and dword [ebp - 0x1f08], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x34a8], 0xffffffff
mov dword [ebp - 0xfb0], 0xffffffff
mov eax, dword [ebp - 0xfb0]
imul eax, dword [ebp - 0x1f08]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xfb8], eax
jge 0x44e116
mov dword [ebp - 0x1f10], 1
jmp 0x44e11d
and dword [ebp - 0x1f10], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x1f10], eax
jg 0x44e13d
cmp dword [ebp - 0xb4c], 0
jne 0x44e13d
and dword [ebp - 0xfc0], 0
jmp 0x44e147
mov dword [ebp - 0xfc0], 1
mov eax, dword [ebp - 0xfc0]
add eax, 7
cmp eax, dword [ebp - 0x2670]
jg 0x44e169
xor eax, eax
inc eax
je 0x44e169
mov dword [ebp - 0x1f18], 1
jmp 0x44e170
and dword [ebp - 0x1f18], 0
mov eax, dword [ebp - 0x1f18]
mov dword [ebp - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x3448], ecx
mov byte [ebp - 0x332], 0
movzx eax, byte [ebp - 0x332]
test eax, eax
je 0x44e1b0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
mov dword [ebp - 0x104], 0x4643cdf9
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x1f30], 7
mov dword [ebp - 0x1f38], 0x5dbc2a41
mov dword [ebp - 0x2a60], 0xf213ed4
mov dword [ebp - 0x2a5c], 0xf213ed4
mov dword [ebp - 0x2a58], 0xf213ed4
mov dword [ebp - 0x2a54], 0xf213ed4
mov dword [ebp - 0x894], 0
jmp 0x44e223
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 1
jge 0x44e23f
mov eax, dword [ebp - 0x894]
mov dword [ebp + eax*4 - 0xfe8], 0xfffffff8
jmp 0x44e216
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x301c], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x104], eax
jle 0x44e265
mov dword [ebp - 0xfc8], 1
jmp 0x44e26c
and dword [ebp - 0xfc8], 0
mov eax, dword [ebp - 0xfc8]
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x3024], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x302c], eax
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x3034], eax
cmp dword [ebp - 0x6ac], 0
jne 0x44e2ae
cmp dword [ebp - 0x104], 0
je 0x44e2c3
cmp dword [ebp - 0x104], 0
je 0x44e2c3
mov dword [ebp - 0x22ac], 1
jmp 0x44e2ca
and dword [ebp - 0x22ac], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x303c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfe8], 0xd0d658ed
cmp dword [ebp - 0x104], 0xd0d658ed
jge 0x44e2ff
mov dword [ebp - 0x84], 0
jmp 0x45043f
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x45045b
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x3770], 0xffff
jmp 0x450432
mov dword [ebp - 0x84], 0
jmp 0x450474
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x450490
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x2aa0], 0xfebaeef2
jmp 0x450467
mov dword [ebp - 0x84], 0
jmp 0x4504a9
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x4504c5
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x36ec], 6
jmp 0x45049c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2aa0], 0
jmp 0x4504f0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2aa0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2aa0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2aa0], 3
jg 0x450589
mov dword [ebp - 0x27c], 0x37ad4351
mov dword [ebp - 0x27c], 0
jmp 0x450526
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jg 0x450549
mov byte [ebp - 0x2f3], 0
movzx eax, byte [ebp - 0x2f3]
test eax, eax
je 0x450547
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
jmp 0x450519
mov dword [ebp - 0x27c], 0
jmp 0x450562
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jg 0x450584
mov dword [ebp - 0x1d7c], 0xf68
mov eax, dword [ebp - 0x1d7c]
inc eax
mov dword [ebp - 0x1d7c], eax
jmp 0x450555
jmp 0x4504d7
cmp dword [ebp - 0x2d4], 0
je 0x4505a7
cmp dword [ebp - 0x234], 0
je 0x4505a7
mov dword [ebp - 0x2324], 1
jmp 0x4505ae
and dword [ebp - 0x2324], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x26b0]
jle 0x4505cb
mov dword [ebp - 0x11bc], 1
jmp 0x4505d2
and dword [ebp - 0x11bc], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x11bc], eax
jle 0x4505e9
mov eax, 0x121f2059
test eax, eax
jne 0x4505fb
cmp dword [ebp - 0x2d4], 0
jne 0x4505fb
and dword [ebp - 0x1994], 0
jmp 0x450605
mov dword [ebp - 0x1994], 1
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0xbbc], 0x48d327cb
mov dword [ebp - 0xbb8], 0x48d327cb
mov dword [ebp - 0xbb4], 0x48d327cb
mov dword [ebp - 0xbb0], 0x48d327cb
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x199c], 0x87fd074d
mov dword [ebp - 0x6dc], 0
jmp 0x450666
mov eax, dword [ebp - 0x6dc]
inc eax
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 2
jge 0x450682
mov eax, dword [ebp - 0x6dc]
mov dword [ebp + eax*4 - 0x2e04], 9
jmp 0x450659
mov dword [ebp - 0x1ac], 3
jmp 0x45069b
cmp dword [ebp - 0x1ac], 0
jl 0x4506fa
mov dword [ebp - 0x8cc], 0x7d214c40
mov dword [ebp - 0x8cc], 0
jmp 0x4506c7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbbc]
imul eax, dword [ebp - 0x1ac]
test eax, eax
je 0x4507a3
cmp dword [ebp + 8], 1
jne 0x4601b9
mov dword [ebp - 0x1a0], 0
jmp 0x45f900
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x45f91c
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x2174], 0x10c93b4e
jmp 0x45f8f3
mov dword [ebp - 0x1a0], 0
jmp 0x45f935
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x45f951
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x108], 2
jmp 0x45f928
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x108], 2
jmp 0x45f97f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jl 0x45fb88
mov dword [ebp - 0x2c0], 0x17f75960
mov dword [ebp - 0x2c0], 0
jmp 0x45f9b6
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jg 0x45fb53
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp + eax*4 - 0x2174], 0
jne 0x45f9fa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp + eax*4 - 0x2174], 0
jne 0x45f9fa
and dword [ebp - 0x1a88], 0
jmp 0x45fa04
mov dword [ebp - 0x1a88], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov eax, dword [ebp + eax*4 - 0x2174]
mov dword [ebp - 0x2b20], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
add eax, dword [ebp - 0x2c0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x108]
cmp eax, dword [ebp + ecx*4 - 0x2174]
je 0x45fa53
mov dword [ebp - 0x1a90], 1
jmp 0x45fa5a
and dword [ebp - 0x1a90], 0
mov eax, dword [ebp - 0x1a88]
cmp eax, dword [ebp - 0x1a90]
jle 0x45fa74
mov dword [ebp - 0x1a98], 1
jmp 0x45fa7b
and dword [ebp - 0x1a98], 0
cmp dword [ebp - 0x1a98], 1
jb 0x45fa96
mov eax, 0x58e92eda
test eax, eax
jne 0x45fa96
and dword [ebp - 0x1aa0], 0
jmp 0x45faa0
mov dword [ebp - 0x1aa0], 1
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x1aa0], eax
jne 0x45fab5
cmp dword [ebp - 0x2c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp + eax*4 - 0x2174], 1
je 0x45fad8
mov dword [ebp - 0x1aa8], 1
jmp 0x45fadf
and dword [ebp - 0x1aa8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov ecx, dword [ebp - 0x1aa8]
sub ecx, dword [ebp + eax*4 - 0x2174]
cmp ecx, 0xbcb1a7a8
jb 0x45fb0d
mov dword [ebp - 0x1ab0], 1
jmp 0x45fb14
and dword [ebp - 0x1ab0], 0
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x1ab0]
mov dword [ebp + eax*4 - 0x2174], ecx
mov byte [ebp - 0x355], 0
movzx eax, byte [ebp - 0x355]
test eax, eax
je 0x45fb4e
push 0
push 0
push 0xa85
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x45f9a9
mov byte [ebp - 0x43d], 0
movzx eax, byte [ebp - 0x43d]
test eax, eax
je 0x45fb83
push 0x9f4
push 0x1d56
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x45f964
mov dword [ebp - 0x2624], 0x469ad59e
mov dword [ebp - 0x2620], 0x469ad59e
mov dword [ebp - 0x261c], 0x469ad59e
mov dword [ebp - 0x2618], 0x469ad59e
mov dword [ebp - 0x678], 0
jmp 0x45fbc9
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 1
jge 0x45fbe5
mov eax, dword [ebp - 0x678]
mov dword [ebp + eax*4 - 0x2b28], 0
jmp 0x45fbbc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2624], 0
jmp 0x45fc13
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2624]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2624], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2624], 0
jg 0x45fc4d
mov byte [ebp - 0x35d], 0
movzx eax, byte [ebp - 0x35d]
test eax, eax
je 0x45fc4b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x45fbf8
mov byte [ebp - 0x429], 0
movzx eax, byte [ebp - 0x429]
test eax, eax
je 0x45fc6e
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x4a8], 0x24a8c6a5
mov dword [ebp - 0x4a8], 0x13
jmp 0x45fc91
mov eax, dword [ebp - 0x4a8]
dec eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x12
jne 0x45fd0c
mov dword [ebp - 0x680], 0
jmp 0x45fcb3
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 2
jge 0x45fccf
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x2e70], 0x88a137b1
jmp 0x45fca6
mov byte [ebp - 0x365], 0
movzx eax, byte [ebp - 0x365]
test eax, eax
je 0x45fcf5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e70], 0
je 0x45fd07
jmp 0x45fd0c
jmp 0x45fc84
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4a8], eax
call fcn.00449ac0
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x1ae0], 0x4f0e4f20
mov dword [ebp - 0x688], 0
jmp 0x45fd4a
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 3
jge 0x45fd66
mov eax, dword [ebp - 0x688]
mov dword [ebp + eax*4 - 0x3084], 0xfffffffe
jmp 0x45fd3d
mov byte [ebp - 0x435], 0
movzx eax, byte [ebp - 0x435]
test eax, eax
je 0x45fd8c
push 0x9b0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x4b0], 2
jmp 0x45fda5
mov eax, dword [ebp - 0x4b0]
dec eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
jl 0x460078
mov dword [ebp - 0x140], 0x6df37d45
mov dword [ebp - 0x57c], 1
mov dword [ebp - 0x690], 0
jmp 0x45fddf
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 2
jge 0x45fdfb
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x299c], 0xc2e7ccc8
jmp 0x45fdd2
mov dword [ebp - 0x140], 0
jmp 0x45fe14
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jg 0x460073
mov dword [ebp - 0x1ad8], 1
mov dword [ebp - 0x1b08], 3
mov dword [ebp - 0x698], 0
jmp 0x45fe4e
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 4
jge 0x45fe6a
mov eax, dword [ebp - 0x698]
mov dword [ebp + eax*4 - 0x365c], 0xfffffff9
jmp 0x45fe41
or eax, 0xffffffff
je 0x45ff05
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp + eax*4 - 0x3084]
mov dword [ebp - 0x2b30], eax
cmp dword [ebp - 0x57c], 0xf9a0
jge 0x45fea4
cmp dword [ebp - 0x1ad8], 0
jne 0x45fea4
and dword [ebp - 0x1ab8], 0
jmp 0x45feae
mov dword [ebp - 0x1ab8], 1
cmp dword [ebp - 0x1ab8], 0xffffffff
jne 0x45fec3
mov dword [ebp - 0x1ac0], 1
jmp 0x45feca
and dword [ebp - 0x1ac0], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x1ac0], eax
jne 0x45fee4
mov dword [ebp - 0x1ac8], 1
jmp 0x45feeb
and dword [ebp - 0x1ac8], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x1ac8]
jne 0x45ff05
mov dword [ebp - 0x23a8], 1
jmp 0x45ff0c
and dword [ebp - 0x23a8], 0
mov eax, dword [ebp - 0x57c]
imul eax, dword [ebp - 0x140]
cmp eax, 0xfffd
jb 0x45ff35
mov eax, 0xd791f9e6
test eax, eax
je 0x45ff35
mov dword [ebp - 0x1ad0], 1
jmp 0x45ff3c
and dword [ebp - 0x1ad0], 0
mov eax, dword [ebp - 0x1ad0]
sub eax, dword [ebp - 0x140]
js 0x45ff56
mov dword [ebp - 0x23b0], 1
jmp 0x45ff5d
and dword [ebp - 0x23b0], 0
mov eax, dword [ebp - 0x1ad8]
mov dword [ebp - 0x2b38], eax
mov eax, dword [ebp - 0x1ae0]
mov dword [ebp - 0x2b40], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x2b48], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x299c]
mov dword [ebp - 0x1ae8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ae8]
mov dword [ebp + eax - 0x299c], ecx
mov eax, dword [ebp - 0x1ae0]
cmp dword [ebp - 0x1ae8], eax
je 0x45ffc1
mov dword [ebp - 0x1af0], 1
jmp 0x45ffc8
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x1af0], eax
jge 0x45ffe8
cmp dword [ebp - 0x4b0], 0
jne 0x45ffe8
and dword [ebp - 0x1af8], 0
jmp 0x45fff2
mov dword [ebp - 0x1af8], 1
mov eax, dword [ebp - 0x140]
imul ecx, dword [ebp - 0x1af8], 0x5c7d
cmp dword [ebp + eax*4 - 0x3084], ecx
jle 0x460017
mov dword [ebp - 0x1b00], 1
jmp 0x46001e
and dword [ebp - 0x1b00], 0
imul eax, dword [ebp - 0x1b00], 0x69b4
mov dword [ebp - 0x1b08], eax
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x1b08], eax
jge 0x460048
mov dword [ebp - 0xabc], 1
jmp 0x46004f
and dword [ebp - 0xabc], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xabc]
mov dword [ebp + eax - 0x365c], ecx
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x57c], eax
jmp 0x45fe07
jmp 0x45fd98
mov dword [ebp - 0x2c8], 0xa48bbca6
mov dword [ebp - 0x2b50], 0xdc4b4e12
mov dword [ebp - 0x6a0], 0
jmp 0x4600a5
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 1
jge 0x4600c1
mov eax, dword [ebp - 0x6a0]
mov dword [ebp + eax*4 - 0x2b58], 0x90a624cd
jmp 0x460098
mov dword [ebp - 0x2c8], 0
jmp 0x4600da
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 3
jge 0x4600fc
mov dword [ebp - 0x1b10], 7
mov eax, dword [ebp - 0x1b10]
inc eax
mov dword [ebp - 0x1b10], eax
jmp 0x4600cd
mov dword [ebp - 0x2c8], 6
jmp 0x460115
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x13
je 0x460135
mov dword [ebp - 0x23b8], 0x64fd9e2a
cmp dword [ebp - 0x23b8], 0
je 0x460133
jmp 0x460135
jmp 0x460108
mov dword [ebp - 0x6a8], 0xfffffffe
mov byte [ebp - 0x36d], 0
movzx eax, byte [ebp - 0x36d]
test eax, eax
je 0x460160
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0x6a8], 0
jmp 0x460179
mov eax, dword [ebp - 0x6a8]
dec eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0xfffffff0
jne 0x460199
mov dword [ebp - 0x23c0], 0x6e871d97
cmp dword [ebp - 0x23c0], 0
je 0x460197
jmp 0x460199
jmp 0x46016c
call fcn.00464b62
cdq
push 3
pop ecx
idiv ecx
add edx, 3
imul eax, edx, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x462369
mov dword [ebp - 0x148], 0xfffffffa
mov dword [ebp - 0x6b0], 0
jmp 0x4601dc
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 1
jge 0x4601f8
mov eax, dword [ebp - 0x6b0]
mov dword [ebp + eax*4 - 0x23c8], 0x6192
jmp 0x4601cf
mov dword [ebp - 0x148], 0
jmp 0x460211
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jl 0x460276
mov dword [ebp - 0x6b8], 0xfffffffa
mov dword [ebp - 0x6b8], 0
jmp 0x46023d
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 0
jg 0x460262
mov byte [ebp - 0x42b], 0
movzx eax, byte [ebp - 0x42b]
test eax, eax
je 0x460260
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x460230
mov eax, dword [ebp - 0x148]
cmp dword [ebp + eax*4 - 0x23c8], 0
je 0x460274
jmp 0x460204
jmp 0x460204
mov dword [ebp - 0x148], 0
jmp 0x46028f
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffe8
je 0x4602f4
mov dword [ebp - 0x6c0], 1
mov dword [ebp - 0x6c0], 0x14
jmp 0x4602bb
mov eax, dword [ebp - 0x6c0]
dec eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0xfffffffc
jne 0x4602e7
mov byte [ebp - 0x375], 0
movzx eax, byte [ebp - 0x375]
test eax, eax
je 0x4602e5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
jmp 0x4602ae
cmp dword [ebp - 0x148], 0
je 0x4602f2
jmp 0x460282
jmp 0x460282
xor ecx, ecx
call fcn.0042494b
push eax
call fcn.00464b83
pop ecx
mov dword [ebp - 0x6d0], 0xfffffff7
mov dword [ebp - 0x2b60], 0xfffffff7
mov dword [ebp - 0x6c8], 0
jmp 0x46032f
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 2
jge 0x46034b
mov eax, dword [ebp - 0x6c8]
mov dword [ebp + eax*4 - 0x3664], 0x1713
jmp 0x460322
mov dword [ebp - 0x6d0], 1
jmp 0x460364
mov eax, dword [ebp - 0x6d0]
dec eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0
jl 0x460420
mov dword [ebp - 0x6e0], 0xe6e83846
mov dword [ebp - 0x2b68], 7
mov dword [ebp - 0x6d8], 0
jmp 0x46039e
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 1
jge 0x4603ba
mov eax, dword [ebp - 0x6d8]
mov dword [ebp + eax*4 - 0x2b70], 0x1abe8f21
jmp 0x460391
mov dword [ebp - 0x6e0], 0
jmp 0x4603d3
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 1
jg 0x46041b
mov dword [ebp - 0x1b18], 1
mov byte [ebp - 0x43b], 0
movzx eax, byte [ebp - 0x43b]
test eax, eax
je 0x46040c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov eax, dword [ebp - 0x1b18]
dec eax
mov dword [ebp - 0x1b18], eax
jmp 0x4603c6
jmp 0x460357
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x23f0], 0x731e7bf5
mov dword [ebp - 0x2b78], 0xaec51ac0
mov dword [ebp - 0xbfc], 0xecc33bab
mov dword [ebp - 0x2b80], 0xd700d1a0
mov dword [ebp - 0xac4], 0x385e
mov dword [ebp - 0x1b30], 0xfff7
mov dword [ebp - 0xc24], 0x312446b8
mov dword [ebp - 0x4b8], 0x5f713ec2
mov dword [ebp - 0x1a8], 0
jmp 0x460493
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x4604af
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x291c], 0x4e2db58e
jmp 0x460486
mov dword [ebp - 0x1a8], 0
jmp 0x4604c8
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x4604e4
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x2b88], 0x5631cd1a
jmp 0x4604bb
mov dword [ebp - 0x150], 0
jmp 0x4604fd
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jg 0x4605a5
mov dword [ebp - 0x6e8], 0
jmp 0x460523
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 1
jge 0x46053f
mov eax, dword [ebp - 0x6e8]
mov dword [ebp + eax*4 - 0x584], 0x197f0a2
jmp 0x460516
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x584], 0
jmp 0x46056d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x584], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x584], 2
jg 0x4605a0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
mov ecx, dword [ebp - 0x150]
mov eax, dword [ebp + eax*4 - 0x291c]
mov dword [ebp + ecx*4 - 0x291c], eax
jmp 0x460552
jmp 0x4604f0
mov dword [ebp - 0x150], 0
jmp 0x4605be
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffe5
jge 0x460a15
mov dword [ebp - 0xacc], 9
mov dword [ebp - 0xc3c], 0xbd9b76fc
mov dword [ebp - 0x2400], 0x59fb
mov dword [ebp - 0x78], 0
jmp 0x4605f9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x46060f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x2608], 0x35db5a26
jmp 0x4605f2
mov dword [ebp - 0x78], 0
jmp 0x46061f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x460635
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xbec], 0
jmp 0x460618
mov dword [ebp - 0x78], 0
jmp 0x460645
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x46065b
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x29d4], 0xf82eddaa
jmp 0x46063e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x291c]
mov dword [ebp - 0x23d0], eax
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0x23d8], eax
mov eax, dword [ebp - 0xac4]
inc eax
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0x23d0]
cmp eax, dword [ebp - 0x23d8]
jg 0x4606a1
mov dword [ebp - 0x1b48], 1
jmp 0x4606a8
and dword [ebp - 0x1b48], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbec], 0
je 0x4606d4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbec], 0
je 0x4606d4
mov dword [ebp - 0x1b20], 1
jmp 0x4606db
and dword [ebp - 0x1b20], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x1b20], eax
jg 0x4606f5
mov dword [ebp - 0x1b28], 1
jmp 0x4606fc
and dword [ebp - 0x1b28], 0
mov eax, dword [ebp - 0x1b28]
mov dword [ebp - 0x1b30], eax
cmp dword [ebp - 0x1b30], 0x19b2
jne 0x460720
mov dword [ebp - 0x1b38], 1
jmp 0x460727
and dword [ebp - 0x1b38], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b38]
mov dword [ebp + eax - 0x2608], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2608], 0xffffffff
jle 0x46075c
mov eax, 0xa0b5
test eax, eax
jne 0x46075c
and dword [ebp - 0x1b40], 0
jmp 0x460766
mov dword [ebp - 0x1b40], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbec]
imul eax, dword [ebp - 0x1b40]
cmp dword [ebp - 0x1b48], eax
jg 0x46078d
mov dword [ebp - 0xbf4], 1
jmp 0x460794
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0xbfc], eax
cmp dword [ebp - 0xbfc], 0xb34d7aeb
ja 0x4607b8
mov dword [ebp - 0xc04], 1
jmp 0x4607bf
and dword [ebp - 0xc04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbec]
cmp dword [ebp - 0xc04], eax
je 0x4607e0
mov dword [ebp - 0xc0c], 1
jmp 0x4607e7
and dword [ebp - 0xc0c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc0c]
sub ecx, dword [ebp + eax - 0xbec]
je 0x460818
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2608], 0
je 0x460818
mov dword [ebp - 0x23e0], 1
jmp 0x46081f
and dword [ebp - 0x23e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x291c]
mov dword [ebp - 0x2b90], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbec]
mov dword [ebp - 0x2b98], eax
push 9
pop eax
imul eax, eax, 0xad8e
mov dword [ebp - 0x23e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x23e8]
mov dword [ebp + eax - 0xbec], ecx
mov eax, dword [ebp - 0xacc]
cmp dword [ebp - 0xc24], eax
jle 0x460881
mov dword [ebp - 0xc14], 1
jmp 0x460888
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x23f0]
cmp dword [ebp - 0xc14], eax
jl 0x4608b2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbec], 0
je 0x4608b2
mov dword [ebp - 0xc1c], 1
jmp 0x4608b9
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0xc1c]
sub eax, 0x726a
cmp eax, dword [ebp - 0xc24]
jg 0x4608d8
mov dword [ebp - 0xc2c], 1
jmp 0x4608df
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0x4b8]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbec]
sub eax, dword [ebp - 0x4b8]
cmp eax, 0xfffffffa
ja 0x460909
mov dword [ebp - 0x23f8], 1
jmp 0x460910
and dword [ebp - 0x23f8], 0
cmp dword [ebp - 0xacc], 0x15d2bb39
jne 0x460928
mov dword [ebp - 0xc34], 1
jmp 0x46092f
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0xc3c], eax
cmp dword [ebp - 0xc3c], 0
jne 0x460962
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29d4], 0
jne 0x460962
xor eax, eax
inc eax
jne 0x460962
and dword [ebp - 0xc44], 0
jmp 0x46096c
mov dword [ebp - 0xc44], 1
cmp dword [ebp - 0xc44], 0xf3af71e1
je 0x460984
mov dword [ebp - 0xc4c], 1
jmp 0x46098b
and dword [ebp - 0xc4c], 0
mov eax, dword [ebp - 0xacc]
cmp dword [ebp - 0xc4c], eax
jge 0x4609a5
mov dword [ebp - 0xc54], 1
jmp 0x4609ac
and dword [ebp - 0xc54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29d4]
xor eax, eax
inc eax
neg eax
mov dword [ebp - 0x2400], eax
mov dword [ebp - 0x4b8], 0
jmp 0x4609dd
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 1
jg 0x460a10
mov byte [ebp - 0x37d], 0
movzx eax, byte [ebp - 0x37d]
test eax, eax
je 0x460a0e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x4609d0
jmp 0x4605b1
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa7c3ac
push 0xa7c3ac
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xb14], eax
mov dword [ebp - 0xa8], 2
mov dword [ebp - 0x6f0], 0
jmp 0x460a6b
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 1
jge 0x460a84
mov eax, dword [ebp - 0x6f0]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
jmp 0x460a5e
mov dword [ebp - 0xa8], 0xffffffec
jmp 0x460a9d
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x17
je 0x460f17
mov dword [ebp - 0x700], 0xd9ba07e4
mov dword [ebp - 0xae4], 3
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0xad4], 0
mov dword [ebp - 0xadc], 0xc25
mov dword [ebp - 0x6f8], 0
jmp 0x460af5
mov eax, dword [ebp - 0x6f8]
inc eax
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 1
jge 0x460b11
mov eax, dword [ebp - 0x6f8]
mov dword [ebp + eax*4 - 0x58c], 0
jmp 0x460ae8
mov eax, dword [ebp - 0x700]
cmp dword [ebp - 0xa8], eax
jle 0x460ce1
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2ba0], eax
mov eax, dword [ebp - 0xa8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x3c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3c]
jne 0x460b57
mov dword [ebp - 0xc5c], 1
jmp 0x460b5e
and dword [ebp - 0xc5c], 0
cmp dword [ebp - 0xc5c], 0xe13f5e3d
jne 0x460b76
mov dword [ebp - 0x2408], 1
jmp 0x460b7d
and dword [ebp - 0x2408], 0
cmp dword [ebp - 0x700], 0xffffffff
jae 0x460b92
mov dword [ebp - 0xc64], 1
jmp 0x460b99
and dword [ebp - 0xc64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0xc64], eax
jl 0x460bb7
mov dword [ebp - 0xc6c], 1
jmp 0x460bbe
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0xae4], 0
jne 0x460bee
cmp dword [ebp - 0x4c0], 0
jne 0x460bee
mov eax, 0x9da9
test eax, eax
jne 0x460bee
and dword [ebp - 0xc74], 0
jmp 0x460bf8
mov dword [ebp - 0xc74], 1
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp - 0xad4]
cmp dword [ebp - 0x700], eax
je 0x460c1e
mov dword [ebp - 0xc7c], 1
jmp 0x460c25
and dword [ebp - 0xc7c], 0
cmp dword [ebp - 0xc7c], 0xffffffff
jne 0x460c3a
mov dword [ebp - 0xc84], 1
jmp 0x460c41
and dword [ebp - 0xc84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
imul eax, dword [ebp - 0xc84]
sub eax, 0x78ef8a6e
cmp eax, dword [ebp - 0xa8]
je 0x460c6b
mov dword [ebp - 0x2410], 1
jmp 0x460c72
and dword [ebp - 0x2410], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2ba8], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x3c], 0x91f9
cmp eax, dword [ebp - 0x4c0]
jl 0x460ca0
mov dword [ebp - 0xc8c], 1
jmp 0x460ca7
and dword [ebp - 0xc8c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0xc8c], eax
jne 0x460cc5
mov dword [ebp - 0xc94], 1
jmp 0x460ccc
and dword [ebp - 0xc94], 0
cmp dword [ebp - 0xc94], 3
jge 0x460ce1
mov dword [ebp - 0xc9c], 1
jmp 0x460ce8
and dword [ebp - 0xc9c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc9c]
sub ecx, dword [ebp + eax - 0x3c]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58c], ecx
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0x2bb0], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x2bb8], eax
cmp dword [ebp - 0xa8], 0x4c116104
jne 0x460d32
cmp dword [ebp - 0xad4], 0
jne 0x460d4d
cmp dword [ebp - 0x4c0], 0
jne 0x460d4d
cmp dword [ebp - 0xa8], 0
jne 0x460d4d
and dword [ebp - 0xca4], 0
jmp 0x460d57
mov dword [ebp - 0xca4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp eax, dword [ebp - 0xca4]
jg 0x460d75
mov dword [ebp - 0x2418], 1
jmp 0x460d7c
and dword [ebp - 0x2418], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x2bc0], eax
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0x2bc8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58c], 0
je 0x460dbd
cmp dword [ebp - 0x4c0], 0
je 0x460dbd
mov dword [ebp - 0xcac], 1
jmp 0x460dc4
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0xcac], eax
jge 0x460dde
mov dword [ebp - 0xcb4], 1
jmp 0x460de5
and dword [ebp - 0xcb4], 0
cmp dword [ebp - 0xcb4], 0xfffc
ja 0x460dfd
mov dword [ebp - 0x2420], 1
jmp 0x460e04
and dword [ebp - 0x2420], 0
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0x2bd0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58c]
mov dword [ebp - 0x2bd8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x3c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3c]
jg 0x460e52
mov dword [ebp - 0xcbc], 1
jmp 0x460e59
and dword [ebp - 0xcbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58c]
cmp dword [ebp - 0xcbc], eax
jne 0x460e7a
mov dword [ebp - 0xcc4], 1
jmp 0x460e81
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xcc4], eax
jg 0x460e9b
mov dword [ebp - 0xccc], 1
jmp 0x460ea2
and dword [ebp - 0xccc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xae4]
add ecx, dword [ebp - 0xccc]
cmp dword [ebp + eax - 0x3c], ecx
jl 0x460ec6
mov dword [ebp - 0x2428], 1
jmp 0x460ecd
and dword [ebp - 0x2428], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x2be0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3c]
cmp dword [ebp + eax - 0x3c], ecx
jl 0x460efb
mov dword [ebp - 0xcd4], 1
jmp 0x460f02
and dword [ebp - 0xcd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcd4]
mov dword [ebp + eax - 0x3c], ecx
jmp 0x460a90
push 5
push dword [ebp - 0xb14]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x708], 0
jmp 0x460f3e
mov eax, dword [ebp - 0x708]
inc eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 2
jge 0x460f5a
mov eax, dword [ebp - 0x708]
mov dword [ebp + eax*4 - 0x21c8], 2
jmp 0x460f31
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x21c8], 0xffffffe7
jmp 0x460f88
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x21c8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21c8], 0x14
je 0x460fe5
mov dword [ebp - 0x710], 0xdce9d05b
mov dword [ebp - 0x710], 0
jmp 0x460fbb
mov eax, dword [ebp - 0x710]
inc eax
mov dword [ebp - 0x710], eax
cmp dword [ebp - 0x710], 9
jg 0x460fe3
mov byte [ebp - 0x42d], 0
movzx eax, byte [ebp - 0x42d]
test eax, eax
je 0x460fe1
push 0x221b
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x460fae
jmp 0x460f6d
mov byte [ebp - 0x385], 0
movzx eax, byte [ebp - 0x385]
test eax, eax
je 0x46100e
push 0x170b
push 0x156f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
push dword [ebp - 0xb14]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 0x594], 0xbc75286e
mov dword [ebp - 0x110], 0xf55e00fe
mov dword [ebp - 0xaec], 1
mov dword [ebp - 0xd1c], 0x2967684a
mov dword [ebp - 0x2448], 0x94bf7d6
mov dword [ebp - 0x718], 0
jmp 0x461065
mov eax, dword [ebp - 0x718]
inc eax
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x718], 4
jge 0x461081
mov eax, dword [ebp - 0x718]
mov dword [ebp + eax*4 - 0x2128], 0xffff
jmp 0x461058
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x46109d
cmp dword [ebp - 0x594], 0
cmp dword [ebp - 0x110], 0x7b6fe6d3
jle 0x4610b5
mov dword [ebp - 0x2430], 1
jmp 0x4610bc
and dword [ebp - 0x2430], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x2be8], eax
mov eax, 0xeb59
cmp eax, 1
je 0x4610de
mov dword [ebp - 0x2438], 1
jmp 0x4610e5
and dword [ebp - 0x2438], 0
cmp dword [ebp - 0x110], 0
jne 0x4610fa
mov dword [ebp - 0xcdc], 1
jmp 0x461101
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x594]
sub eax, dword [ebp - 0xcdc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2128]
jl 0x461127
mov dword [ebp - 0xce4], 1
jmp 0x46112e
and dword [ebp - 0xce4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0xce4], eax
jl 0x46114e
mov dword [ebp - 0x2440], 1
jmp 0x461155
and dword [ebp - 0x2440], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x2bf0], eax
mov eax, 0x667f
cmp eax, 0xee0c
jg 0x461179
mov dword [ebp - 0xcec], 1
jmp 0x461180
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x110], eax
imul eax, dword [ebp - 0x110], 0xb59
mov dword [ebp - 0xaec], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0x110], eax
jne 0x4611bc
mov dword [ebp - 0xcf4], 1
jmp 0x4611c3
and dword [ebp - 0xcf4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0xcf4], eax
jl 0x4611e4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2128], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0xd1c], eax
jle 0x461204
mov dword [ebp - 0xcfc], 1
jmp 0x46120b
and dword [ebp - 0xcfc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp eax, dword [ebp - 0xcfc]
jne 0x46122b
mov dword [ebp - 0xd04], 1
jmp 0x461232
and dword [ebp - 0xd04], 0
cmp dword [ebp - 0xd04], 7
jle 0x461247
mov dword [ebp - 0xd0c], 1
jmp 0x46124e
and dword [ebp - 0xd0c], 0
cmp dword [ebp - 0xd0c], 0x8fa
jge 0x461266
mov dword [ebp - 0xd14], 1
jmp 0x46126d
and dword [ebp - 0xd14], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0xd14], eax
je 0x46128d
mov dword [ebp - 0xd24], 1
jmp 0x461294
and dword [ebp - 0xd24], 0
mov eax, dword [ebp - 0xd1c]
cmp dword [ebp - 0xd24], eax
jge 0x4612ae
mov dword [ebp - 0xd2c], 1
jmp 0x4612b5
and dword [ebp - 0xd2c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0xd2c], eax
jle 0x4612d5
mov dword [ebp - 0xd34], 1
jmp 0x4612dc
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0xd34]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0xaec], eax
jne 0x461302
mov dword [ebp - 0xd3c], 1
jmp 0x461309
and dword [ebp - 0xd3c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2128]
cmp dword [ebp - 0xd3c], eax
jle 0x46132f
cmp dword [ebp - 0x594], 0
jne 0x46132f
and dword [ebp - 0xd44], 0
jmp 0x461339
mov dword [ebp - 0xd44], 1
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
sub eax, 0x6826c341
mov dword [ebp - 0x2448], eax
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp - 0x2450], eax
lea eax, [ebp - 0x2450]
push eax
push fcn.00449ac5
lea ecx, [ebp - 0x29ac]
call fcn.00462f96
mov dword [ebp - 0x2d0], 0xb9f9b31
mov dword [ebp - 0xd6c], 0x2e166580
mov dword [ebp - 0x728], 0xffffffff
mov dword [ebp - 0xafc], 0xfffffff6
mov dword [ebp - 0xb0c], 0xbe618b25
mov dword [ebp - 0x2468], 0xfffffffc
mov dword [ebp - 0x720], 0
jmp 0x4613cc
mov eax, dword [ebp - 0x720]
inc eax
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 4
jge 0x4613e8
mov eax, dword [ebp - 0x720]
mov dword [ebp + eax*4 - 0x3674], 0
jmp 0x4613bf
mov dword [ebp - 0x2d0], 0xe
jmp 0x461401
cmp dword [ebp - 0x2d0], 8
jge 0x46183f
mov dword [ebp - 0x404], 0xf1bf506e
mov dword [ebp - 0x59c], 0x8319b885
mov dword [ebp - 0xb04], 0xffffffff
mov dword [ebp - 0x1b0], 0
jmp 0x461445
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x461461
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x2a40], 0x7662b0a9
jmp 0x461438
mov dword [ebp - 0x1b0], 0
jmp 0x46147a
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x461496
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x34c0], 0
jmp 0x46146d
mov dword [ebp - 0x404], 6
jmp 0x4614af
mov eax, dword [ebp - 0x404]
dec eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0xffffffe5
jle 0x4614f7
mov byte [ebp - 0x437], 0
movzx eax, byte [ebp - 0x437]
test eax, eax
je 0x4614d4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov byte [ebp - 0x38d], 0
movzx eax, byte [ebp - 0x38d]
test eax, eax
je 0x4614f5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x4614a2
cmp dword [ebp - 0x2d0], 0
jge 0x461515
cmp dword [ebp - 0x59c], 0
je 0x461515
mov dword [ebp - 0xd4c], 1
jmp 0x46151c
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0x59c]
cmp dword [ebp - 0xd4c], eax
jge 0x461536
mov dword [ebp - 0xd54], 1
jmp 0x46153d
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0x59c]
cmp dword [ebp - 0xd54], eax
je 0x461557
mov dword [ebp - 0xd5c], 1
jmp 0x46155e
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0xd5c]
jne 0x461584
mov dword [ebp - 0xd64], 1
jmp 0x46158b
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0x2d0]
add eax, dword [ebp - 0xd64]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0xd6c], eax
je 0x4615c3
mov dword [ebp - 0xd74], 1
jmp 0x4615ca
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0x728]
cmp dword [ebp - 0xd74], eax
jge 0x4615e4
mov dword [ebp - 0xd7c], 1
jmp 0x4615eb
and dword [ebp - 0xd7c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2a40]
cmp dword [ebp - 0xd7c], eax
jg 0x46160c
mov dword [ebp - 0xd84], 1
jmp 0x461613
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0xd84], eax
jle 0x46162d
mov dword [ebp - 0xd8c], 1
jmp 0x461634
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x728]
cmp dword [ebp - 0xd8c], eax
je 0x461652
xor eax, eax
je 0x461652
mov dword [ebp - 0xd94], 1
jmp 0x461659
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0xd94], 0xfffc
jbe 0x461671
mov dword [ebp - 0x2458], 1
jmp 0x461678
and dword [ebp - 0x2458], 0
mov eax, dword [ebp - 0x728]
cmp dword [ebp - 0xafc], eax
jle 0x461692
mov dword [ebp - 0xaf4], 1
jmp 0x461699
and dword [ebp - 0xaf4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xaf4]
mov dword [ebp + eax - 0x3674], ecx
mov eax, dword [ebp - 0xafc]
cmp dword [ebp - 0xaf4], eax
jge 0x4616cf
cmp dword [ebp - 0x728], 0
je 0x4616cf
mov dword [ebp - 0x2460], 1
jmp 0x4616d6
and dword [ebp - 0x2460], 0
mov eax, dword [ebp - 0xafc]
cmp dword [ebp - 0xb04], eax
jl 0x4616f0
mov dword [ebp - 0xd9c], 1
jmp 0x4616f7
and dword [ebp - 0xd9c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2a40]
cmp dword [ebp - 0xd9c], eax
jle 0x461718
mov dword [ebp - 0xda4], 1
jmp 0x46171f
and dword [ebp - 0xda4], 0
cmp dword [ebp - 0xda4], 0xfffffff7
jge 0x461734
mov dword [ebp - 0xdac], 1
jmp 0x46173b
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0xdac]
mov dword [ebp - 0xb0c], eax
mov eax, 0x37bb
sub eax, dword [ebp - 0xb0c]
cmp eax, 0x35718a84
jg 0x461765
push 0
push 0
push 0
lea eax, [ebp - 0x380c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x461f54
push 0
push 0
push 0x10
push dword [ebp - 0xb14]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x40c], 0x7ddc85f7
mov dword [ebp - 0x730], 0
jmp 0x46188f
mov eax, dword [ebp - 0x730]
inc eax
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 3
jge 0x4618ab
mov eax, dword [ebp - 0x730]
mov dword [ebp + eax*4 - 0x3418], 1
jmp 0x461882
mov dword [ebp - 0x40c], 0
jmp 0x4618c4
mov eax, dword [ebp - 0x40c]
dec eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0xffffffef
jge 0x461a96
mov dword [ebp - 0x5a4], 0x46158d32
mov dword [ebp - 0x2470], 0
mov dword [ebp - 0xdf4], 0x96d402da
mov dword [ebp - 0xe0c], 0xc6f79b34
mov dword [ebp - 0x2478], 0xb8d23212
mov dword [ebp - 0x5a4], 0
jmp 0x46191c
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 1
jne 0x461a91
mov dword [ebp - 0xb1c], 0x369b
mov dword [ebp - 0xde4], 0xfffffffa
mov dword [ebp - 0x2480], 0x874acc01
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x2470], eax
mov dword [ebp - 0xde4], 0xb78a
cmp dword [ebp - 0xde4], 0
jne 0x4619bd
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0x2bf8], eax
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0x2c00], eax
or eax, 0xffffffff
jne 0x461995
mov eax, 0x2044
test eax, eax
jne 0x461995
and dword [ebp - 0xdec], 0
jmp 0x46199f
mov dword [ebp - 0xdec], 1
imul eax, dword [ebp - 0xdec], 0xfd03
imul eax, dword [ebp - 0xb1c]
test eax, eax
jne 0x4619bd
and dword [ebp - 0xdfc], 0
jmp 0x4619c7
mov dword [ebp - 0xdfc], 1
mov eax, dword [ebp - 0xdf4]
imul eax, dword [ebp - 0xdfc]
add eax, 0x5c6a3f15
cmp eax, dword [ebp - 0x40c]
jge 0x4619ed
mov dword [ebp - 0xb24], 1
jmp 0x4619f4
and dword [ebp - 0xb24], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb24]
mov dword [ebp + eax - 0x3418], ecx
mov eax, dword [ebp - 0xb1c]
imul eax, dword [ebp - 0xb24]
sub eax, dword [ebp - 0x5a4]
cmp eax, 7
je 0x461a2b
mov dword [ebp - 0xe04], 1
jmp 0x461a32
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0xe04]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0x2478]
cmp dword [ebp - 0xe0c], eax
jle 0x461a58
mov dword [ebp - 0xe14], 1
jmp 0x461a5f
and dword [ebp - 0xe14], 0
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0xe14], eax
jge 0x461a79
mov dword [ebp - 0xe1c], 1
jmp 0x461a80
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0x2480], eax
jmp 0x46190f
jmp 0x4618b7
lea ecx, [ebp - 0x29ac]
call fcn.00449a60
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x2d8], 0xfffffffa
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0xe0], 2
mov dword [ebp - 0x738], 0
jmp 0x461aec
mov eax, dword [ebp - 0x738]
inc eax
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 3
jge 0x461b08
mov eax, dword [ebp - 0x738]
mov dword [ebp + eax*4 - 0x2210], 0xc75d
jmp 0x461adf
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2c08], eax
cmp dword [ebp - 0x2d8], 0
jne 0x461b2f
cmp dword [ebp - 0x2d8], 0
jne 0x461b2f
and dword [ebp - 0xe44], 0
jmp 0x461b39
mov dword [ebp - 0xe44], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2c10], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c18], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x2d8], eax
jle 0x461b6b
mov dword [ebp - 0x2488], 1
jmp 0x461b72
and dword [ebp - 0x2488], 0
cmp dword [ebp - 0x11c], 0
je 0x461b8b
xor eax, eax
je 0x461b8b
mov dword [ebp - 0xe24], 1
jmp 0x461b92
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0xe24], eax
jne 0x461bb8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2210], 0
jne 0x461bb8
and dword [ebp - 0xe2c], 0
jmp 0x461bc2
mov dword [ebp - 0xe2c], 1
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xe2c], eax
je 0x461be2
mov eax, 0x5205
test eax, eax
jne 0x461be2
and dword [ebp - 0x2490], 0
jmp 0x461bec
mov dword [ebp - 0x2490], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2c20], eax
mov eax, dword [ebp - 0x11c]
sub eax, 0x4a2f844a
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2210]
add eax, 0xe96b
cmp eax, dword [ebp - 0x2e0]
jg 0x461c29
mov dword [ebp - 0xe34], 1
jmp 0x461c30
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0x4c8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2210], 0x2be2ff5
jl 0x461c5b
mov dword [ebp - 0xe3c], 1
jmp 0x461c62
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xe44], eax
jl 0x461c88
mov dword [ebp - 0x2498], 1
jmp 0x461c8f
and dword [ebp - 0x2498], 0
mov eax, 0x45e32052
test eax, eax
je 0x461da2
mov dword [ebp - 0xe5c], 0x49a5c1b0
mov dword [ebp - 0xe0], 0x32da3bb1
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x2e0], eax
jne 0x461cd6
mov dword [ebp - 0xe4c], 1
jmp 0x461cdd
and dword [ebp - 0xe4c], 0
cmp dword [ebp - 0xe5c], 0xfff8
jbe 0x461cf5
mov dword [ebp - 0xe54], 1
jmp 0x461cfc
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xe4c]
imul eax, dword [ebp - 0xe54]
cmp dword [ebp - 0x4c8], eax
jge 0x461d1d
mov dword [ebp - 0xe64], 1
jmp 0x461d24
and dword [ebp - 0xe64], 0
mov eax, dword [ebp - 0xe5c]
cmp eax, dword [ebp - 0xe64]
jle 0x461d3e
mov dword [ebp - 0xe6c], 1
jmp 0x461d45
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x2e0], 0
jmp 0x461d6a
cmp dword [ebp - 0x2e0], 0xb
jne 0x461da0
mov dword [ebp - 0xe0], 0
jmp 0x461dbb
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x461dd7
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x2210], 2
jmp 0x461dae
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2210]
mov dword [ebp - 0x2c28], eax
cmp dword [ebp - 0x11c], 1
jl 0x461dfe
mov dword [ebp - 0xe74], 1
jmp 0x461e05
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0xe74]
cmp eax, 3
jle 0x461e23
mov dword [ebp - 0xe7c], 1
jmp 0x461e2a
and dword [ebp - 0xe7c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xe7c], eax
jl 0x461e44
mov dword [ebp - 0xe84], 1
jmp 0x461e4b
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x4c8]
cmp dword [ebp - 0xe84], eax
jl 0x461e71
mov dword [ebp - 0x88], 5
mov dword [ebp - 0x5ac], 0xa75a592c
mov dword [ebp - 0x5b4], 0x8e045dce
mov dword [ebp - 0x24a0], 0xa71a6e48
mov dword [ebp - 0xf54], 4
mov dword [ebp - 0x24b0], 0x2b500989
mov dword [ebp - 0xf14], 1
mov dword [ebp - 0x2c30], 0xfffffff7
mov dword [ebp - 0x2c38], 0x420ea1bc
mov dword [ebp - 0x2c40], 0xd56a4262
mov dword [ebp - 0x2c48], 0x4e630971
mov dword [ebp - 0x2c50], 0xc9257018
mov dword [ebp - 0x2c58], 5
mov dword [ebp - 0x748], 0x38fd2320
mov dword [ebp - 0x24a8], 0x16e8cfb9
mov dword [ebp - 0x24b8], 0xc30f141
mov dword [ebp - 0x24c0], 0x2d3f
mov dword [ebp - 0x740], 0
jmp 0x462017
mov eax, dword [ebp - 0x740]
inc eax
mov dword [ebp - 0x740], eax
cmp dword [ebp - 0x740], 1
jge 0x462033
mov eax, dword [ebp - 0x740]
mov dword [ebp + eax*4 - 0xf34], 0x8aee5119
jmp 0x46200a
mov eax, 0x5b0bb8b
test eax, eax
je 0x462051
cmp dword [ebp - 0x88], 0
je 0x462051
mov dword [ebp - 0xebc], 1
jmp 0x462058
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x88], eax
jl 0x462080
cmp dword [ebp - 0x88], 0
je 0x462080
xor eax, eax
inc eax
je 0x462080
mov dword [ebp - 0xec4], 1
jmp 0x462087
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
cmp eax, dword [ebp - 0xec4]
jge 0x4620b6
cmp dword [ebp - 0x5ac], 0
je 0x4620b6
mov dword [ebp - 0xecc], 1
jmp 0x4620bd
and dword [ebp - 0xecc], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0xecc]
cmp eax, 0xa6957688
je 0x4620dc
mov dword [ebp - 0xed4], 1
jmp 0x4620e3
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0xed4]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x5b4], eax
je 0x462109
mov dword [ebp - 0xedc], 1
jmp 0x462110
and dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xedc], eax
jl 0x46212a
mov dword [ebp - 0xee4], 1
jmp 0x462131
and dword [ebp - 0xee4], 0
cmp dword [ebp - 0xee4], 0xfe2c
jne 0x462149
mov dword [ebp - 0xeec], 1
jmp 0x462150
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0xeec]
add eax, 0x56574b60
cmp eax, dword [ebp - 0x88]
jne 0x46216f
mov dword [ebp - 0xef4], 1
jmp 0x462176
and dword [ebp - 0xef4], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0xef4]
jge 0x462190
mov dword [ebp - 0xefc], 1
jmp 0x462197
and dword [ebp - 0xefc], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xefc], eax
jl 0x4621b1
mov dword [ebp - 0xf04], 1
jmp 0x4621b8
and dword [ebp - 0xf04], 0
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0x24a0], eax
mov eax, dword [ebp - 0x748]
mov ecx, dword [ebp - 0x748]
dec ecx
mov dword [ebp - 0x748], ecx
test eax, eax
je 0x4622c2
cmp dword [ebp - 0x24a8], 0
jne 0x4622b6
mov eax, dword [ebp - 0x24b0]
cmp dword [ebp - 0x88], eax
jl 0x462203
cmp dword [ebp - 0xf14], 0
jne 0x462213
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf34], 0
je 0x462228
cmp dword [ebp - 0x24b8], 0
je 0x462228
mov dword [ebp - 0xf0c], 1
jmp 0x46222f
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x24c0]
cmp dword [ebp - 0xf0c], eax
jge 0x462249
mov dword [ebp - 0xf1c], 1
jmp 0x462250
and dword [ebp - 0xf1c], 0
mov eax, dword [ebp - 0x5b4]
sub eax, dword [ebp - 0xf14]
cmp eax, dword [ebp - 0xf1c]
jl 0x462270
mov dword [ebp - 0xf24], 1
jmp 0x462277
and dword [ebp - 0xf24], 0
cmp dword [ebp - 0xf24], 0
jne 0x462292
mov eax, 0xffff
test eax, eax
jne 0x462292
and dword [ebp - 0xf2c], 0
jmp 0x46229c
mov dword [ebp - 0xf2c], 1
mov eax, dword [ebp - 0xf2c]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0xf54]
cmp dword [ebp - 0x5ac], eax
je 0x4622c2
mov dword [ebp - 0xf3c], 1
jmp 0x4622c9
and dword [ebp - 0xf3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf34]
cmp dword [ebp - 0xf3c], eax
jle 0x4622f3
cmp dword [ebp - 0x748], 0
je 0x4622f3
mov dword [ebp - 0xf44], 1
jmp 0x4622fa
and dword [ebp - 0xf44], 0
mov eax, dword [ebp - 0xf44]
sub eax, 4
mov dword [ebp - 0x5b4], eax
je 0x462320
cmp dword [ebp - 0x88], 0
je 0x462320
mov dword [ebp - 0xf4c], 1
jmp 0x462327
and dword [ebp - 0xf4c], 0
cmp dword [ebp - 0xf4c], 0
jle 0x46233c
mov dword [ebp - 0x24c8], 1
jmp 0x462343
and dword [ebp - 0x24c8], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2c60], eax
mov dword [ebp - 0xf54], 9
lea ecx, [ebp - 0x29ac]
call fcn.00449a55
jmp 0x462dbc
mov dword [ebp - 0x1b8], 0xa48bbca6
mov dword [ebp - 0x2e8], 0x3813
mov dword [ebp - 0x24f0], 0xf8de905f
mov dword [ebp - 0x2c68], 0xa1ec
mov dword [ebp - 0x1b8], 0xffffffef
jmp 0x4623aa
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xfffffff2
jl 0x4625f2
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xf64], 0x4f230135
mov dword [ebp - 0xf6c], 0x9e071a05
mov dword [ebp - 0xfac], 0x4ca77904
mov dword [ebp - 0xf84], 0xffffffff
mov dword [ebp - 0xfa4], 0x9040c3f3
mov dword [ebp - 0x24d8], 0xfffffff6
mov dword [ebp - 0x750], 0
jmp 0x462416
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 4
jge 0x462432
mov eax, dword [ebp - 0x750]
mov dword [ebp + eax*4 - 0x34ec], 0xfffffff8
jmp 0x462409
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2c70], eax
cmp dword [ebp - 0xb2c], 0x45c8100c
jg 0x462456
mov dword [ebp - 0xf5c], 1
jmp 0x46245d
and dword [ebp - 0xf5c], 0
mov eax, dword [ebp - 0xf5c]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0xf64]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0xf6c]
mov ecx, dword [ebp - 0xfac]
lea eax, [eax + ecx + 0x7af2]
test eax, eax
je 0x4624a1
cmp dword [ebp - 0xb2c], 0
je 0x4624a1
mov dword [ebp - 0x24d0], 1
jmp 0x4624a8
and dword [ebp - 0x24d0], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xf74], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf74]
mov dword [ebp + eax - 0x34ec], ecx
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0xf74], eax
jg 0x4624e1
mov dword [ebp - 0xf7c], 1
jmp 0x4624e8
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0xf7c]
mov dword [ebp - 0xf84], eax
cmp dword [ebp - 0xf84], 0xeb9ae77a
jae 0x46250c
mov dword [ebp - 0xf8c], 1
jmp 0x462513
and dword [ebp - 0xf8c], 0
cmp dword [ebp - 0xf8c], 0xfffffff6
jne 0x462528
mov dword [ebp - 0xf94], 1
jmp 0x46252f
and dword [ebp - 0xf94], 0
mov eax, dword [ebp - 0xb2c]
cmp dword [ebp - 0xf94], eax
je 0x462549
mov dword [ebp - 0xf9c], 1
jmp 0x462550
and dword [ebp - 0xf9c], 0
mov eax, dword [ebp - 0xf9c]
mov dword [ebp - 0xfa4], eax
mov eax, dword [ebp - 0xfa4]
mov dword [ebp - 0x24d8], eax
mov dword [ebp - 0x2e8], 0xffffffef
jmp 0x462581
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x15
jle 0x4625ed
mov dword [ebp - 0x24e0], 0x7c6d
mov byte [ebp - 0x395], 0
movzx eax, byte [ebp - 0x395]
test eax, eax
je 0x4625bc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
cmp dword [ebp - 0xfac], 0
je 0x4625d8
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x4625d8
mov dword [ebp - 0xfb4], 1
jmp 0x4625df
and dword [ebp - 0xfb4], 0
mov eax, dword [ebp - 0xfb4]
mov dword [ebp - 0x24e0], eax
jmp 0x462574
jmp 0x46239d
cmp dword [ebp - 0x2e8], 0
je 0x462610
cmp dword [ebp - 0x1b8], 0
je 0x462610
mov dword [ebp - 0x24e8], 1
jmp 0x462617
and dword [ebp - 0x24e8], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x24f0]
jle 0x462634
mov dword [ebp - 0xfbc], 1
jmp 0x46263b
and dword [ebp - 0xfbc], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0xfbc], eax
jle 0x462652
mov eax, 0x121f2059
test eax, eax
jne 0x462664
cmp dword [ebp - 0x2e8], 0
jne 0x462664
and dword [ebp - 0xfc4], 0
jmp 0x46266e
mov dword [ebp - 0xfc4], 1
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1c0], 0x43cdf98a
mov dword [ebp - 0x758], 0
jmp 0x46269d
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 4
jge 0x4626b9
mov eax, dword [ebp - 0x758]
mov dword [ebp + eax*4 - 0x327c], 1
jmp 0x462690
mov eax, dword [ebp - 0x1c0]
imul ecx, dword [ebp - 0x1c0], 0
sub eax, ecx
imul eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xfcc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfcc]
mov dword [ebp + eax - 0x327c], ecx
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0xfcc], eax
jl 0x462701
mov dword [ebp - 0xfd4], 1
jmp 0x462708
and dword [ebp - 0xfd4], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0xfd4], eax
jne 0x462722
mov dword [ebp - 0xfdc], 1
jmp 0x462729
and dword [ebp - 0xfdc], 0
cmp dword [ebp - 0xfdc], 0
je 0x46274d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x327c], 0
je 0x46274d
mov dword [ebp - 0xfe4], 1
jmp 0x462754
and dword [ebp - 0xfe4], 0
mov eax, dword [ebp - 0xfe4]
neg eax
cmp eax, dword [ebp - 0x1c0]
jl 0x462770
mov dword [ebp - 0x24f8], 1
jmp 0x462777
and dword [ebp - 0x24f8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x327c], 0xfffffffd
jae 0x462793
mov dword [ebp - 0xfec], 1
jmp 0x46279a
and dword [ebp - 0xfec], 0
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1c0]
sub ecx, dword [ebp - 0xfec]
imul eax, ecx
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 0x2f2], 0
movzx eax, byte [ebp - 0x2f2]
test eax, eax
je 0x4627dc
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
mov dword [ebp - 0x414], 0xc93b4e1
mov dword [ebp - 0x4d0], 0xfffffff8
mov dword [ebp - 0x760], 0
jmp 0x462809
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 1
jge 0x462825
mov eax, dword [ebp - 0x760]
mov dword [ebp + eax*4 - 0x103c], 0xffffffff
jmp 0x4627fc
mov byte [ebp - 0x2f4], 0
movzx eax, byte [ebp - 0x2f4]
test eax, eax
je 0x46284b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov dword [ebp - 0x414], 0x19
jmp 0x462864
mov eax, dword [ebp - 0x414]
dec eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0xc
jge 0x462db1
mov dword [ebp - 0x2f0], 0x4ebb0cb8
mov dword [ebp - 0x41c], 0xfffffff9
mov dword [ebp - 0xb34], 0
mov dword [ebp - 0x770], 0xcecce005
mov eax, dword [ebp - 0x414]
sub eax, dword [ebp - 0x414]
cmp dword [ebp - 0x2f0], eax
jg 0x4628c2
mov eax, 0xcfbce008
test eax, eax
je 0x4628c2
mov dword [ebp - 0xff4], 1
jmp 0x4628c9
and dword [ebp - 0xff4], 0
mov eax, dword [ebp - 0xff4]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
je 0x4628f3
mov eax, 0x8e92eda8
test eax, eax
je 0x4628f3
mov dword [ebp - 0x1004], 1
jmp 0x4628fa
and dword [ebp - 0x1004], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xffc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xffc]
mov dword [ebp + eax - 0x103c], ecx
imul eax, dword [ebp - 0xffc], 0xfff8
cmp eax, dword [ebp - 0x1004]
jge 0x462937
mov dword [ebp - 0x100c], 1
jmp 0x46293e
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0x100c]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
jne 0x462965
cmp dword [ebp - 0x4d0], 0
jne 0x462965
and dword [ebp - 0x2500], 0
jmp 0x46296f
mov dword [ebp - 0x2500], 1
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2c78], eax
mov eax, 0xa8628405
test eax, eax
jne 0x462996
cmp dword [ebp - 0x2f0], 0
jne 0x462996
and dword [ebp - 0x1014], 0
jmp 0x4629a0
mov dword [ebp - 0x1014], 1
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0x41c], 0xd
jmp 0x4629c5
mov eax, dword [ebp - 0x41c]
dec eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0xfffffff0
jne 0x462dac
mov dword [ebp - 0x2cc], 0xc1348862
mov dword [ebp - 0x1064], 0
cmp dword [ebp - 0x414], 0x9e62b560
jne 0x4629fe
mov dword [ebp - 0x101c], 1
jmp 0x462a05
and dword [ebp - 0x101c], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x101c], eax
jle 0x462a1f
mov dword [ebp - 0x1024], 1
jmp 0x462a26
and dword [ebp - 0x1024], 0
mov eax, dword [ebp - 0x2cc]
add eax, dword [ebp - 0x1024]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0xfffa
jbe 0x462a5c
mov dword [ebp - 0x102c], 1
jmp 0x462a63
and dword [ebp - 0x102c], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x102c], eax
je 0x462a7d
mov dword [ebp - 0x1034], 1
jmp 0x462a84
and dword [ebp - 0x1034], 0
cmp dword [ebp - 0x1034], 0xa34071e9
jb 0x462aa5
cmp dword [ebp - 0x2cc], 0
je 0x462aa5
mov dword [ebp - 0x1044], 1
jmp 0x462aac
and dword [ebp - 0x1044], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x103c]
cmp dword [ebp - 0x1044], eax
jl 0x462acd
mov dword [ebp - 0x104c], 1
jmp 0x462ad4
and dword [ebp - 0x104c], 0
imul eax, dword [ebp - 0x104c], 0xdb0f
test eax, eax
jne 0x462aee
mov dword [ebp - 0x1054], 1
jmp 0x462af5
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x1054], eax
jle 0x462b0f
mov dword [ebp - 0x105c], 1
jmp 0x462b16
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x2f0], 0x15
jmp 0x462b3b
cmp dword [ebp - 0x2f0], 0xfffffff4
je 0x462da7
mov dword [ebp - 0x5bc], 0x6128b293
mov dword [ebp - 0xb3c], 1
mov dword [ebp - 0x768], 0
jmp 0x462b75
mov eax, dword [ebp - 0x768]
inc eax
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 1
jge 0x462b91
mov eax, dword [ebp - 0x768]
mov dword [ebp + eax*4 - 0x2518], 0xf76e5f37
jmp 0x462b68
mov dword [ebp - 0x1064], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x1064], eax
jge 0x462bb5
mov dword [ebp - 0x1094], 1
jmp 0x462bbc
and dword [ebp - 0x1094], 0
cmp dword [ebp - 0x5bc], 0xd3b0
jle 0x462bd4
mov dword [ebp - 0x106c], 1
jmp 0x462bdb
and dword [ebp - 0x106c], 0
cmp dword [ebp - 0x106c], 0x2623ee1e
je 0x462bf3
mov dword [ebp - 0x1074], 1
jmp 0x462bfa
and dword [ebp - 0x1074], 0
mov eax, dword [ebp - 0x770]
imul eax, dword [ebp - 0x1074]
imul eax, dword [ebp - 0x2cc]
cmp eax, 0x75c875ff
jl 0x462c21
mov dword [ebp - 0x2508], 1
jmp 0x462c28
and dword [ebp - 0x2508], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x2c80], eax
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x2c88], eax
cmp dword [ebp - 0x5bc], 1
jl 0x462c55
mov dword [ebp - 0x107c], 1
jmp 0x462c5c
and dword [ebp - 0x107c], 0
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp - 0x107c], eax
jge 0x462c76
mov dword [ebp - 0x1084], 1
jmp 0x462c7d
and dword [ebp - 0x1084], 0
mov eax, dword [ebp - 0x1084]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x770], eax
jne 0x462ca3
jmp 0x4629b8
jmp 0x462857
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00449ac5
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret