Function at 0x44fc46
Capabilities:
Check os version
Enumerate gui resources
Get common file path
Get disk information
Get graphical window text
Get keyboard layout
Hide graphical window
Identify system language via api
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x68ac
call fcn.0049c580
push esi
push edi
mov dword [ebp - 0xa28], 1
mov dword [ebp - 0x54d0], 0xfffffffe
mov dword [ebp - 0x52f8], 0xe87f6fb8
mov dword [ebp - 0x5300], 0xed7c6ae4
mov dword [ebp - 0x5308], 0x403ca955
mov dword [ebp - 0x5310], 7
mov dword [ebp - 0xa28], 0xfffffff9
jmp 0x44fcaa
mov eax, dword [ebp - 0xa28]
inc eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 0xb
je 0x44feba
push 2
lea ecx, [ebp - 0x46e4]
call fcn.0040fd61
mov dword [ebp - 0x5318], 0xfffffffc
mov dword [ebp - 0x5320], 0xdc6b79df
mov dword [ebp - 0x5328], 0
mov dword [ebp - 0x5330], 0xdd8fb8ce
mov dword [ebp - 0xd90], 0
jmp 0x44fd05
mov eax, dword [ebp - 0xd90]
inc eax
mov dword [ebp - 0xd90], eax
cmp dword [ebp - 0xd90], 2
jge 0x44fd27
push dword [ebp - 0xd90]
lea ecx, [ebp - 0x46e4]
call fcn.0040fe4f
mov dword [eax], 0x6d444182
jmp 0x44fcf8
push 1
lea ecx, [ebp - 0x46e4]
call fcn.0040fe4f
mov dword [eax], 0xc
jmp 0x44fd60
push 1
lea ecx, [ebp - 0x46e4]
call fcn.0040fe4f
mov dword [ebp - 0x2c1c], eax
mov eax, dword [ebp - 0x2c1c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2c1c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x46e4]
call fcn.0040fe4f
cmp dword [eax], 0xfffffff8
jne 0x44feaa
mov dword [ebp - 0x8c4], 9
mov dword [ebp - 0x5338], 0xfffffff7
push 4
lea ecx, [ebp - 0x502c]
call fcn.0040fd61
mov dword [ebp - 0xa30], 0
jmp 0x44fdb0
mov eax, dword [ebp - 0xa30]
inc eax
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0xa30], 4
jge 0x44fdd2
push dword [ebp - 0xa30]
lea ecx, [ebp - 0x502c]
call fcn.0040fe4f
mov dword [eax], 0xfffffffe
jmp 0x44fda3
cmp dword [ebp - 0x8c4], 0
je 0x44fdeb
lea ecx, [ebp - 0x502c]
call fcn.0040fe33
jmp 0x44feaa
mov dword [ebp - 0x8c4], 0xffffffee
jmp 0x44fe04
mov eax, dword [ebp - 0x8c4]
inc eax
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0x31
jne 0x44fe9a
push 4
lea ecx, [ebp - 0x5de0]
call fcn.0040fd61
mov dword [ebp - 0x3988], 0xe7790660
mov dword [ebp - 0xf4c], 0
jmp 0x44fe41
mov eax, dword [ebp - 0xf4c]
inc eax
mov dword [ebp - 0xf4c], eax
cmp dword [ebp - 0xf4c], 4
jge 0x44fe63
push dword [ebp - 0xf4c]
lea ecx, [ebp - 0x5de0]
call fcn.0040fe4f
mov dword [eax], 0x5f5f996f
jmp 0x44fe34
mov eax, dword [ebp - 0x3988]
inc eax
mov dword [ebp - 0x3988], eax
mov byte [ebp - 0x75a], 0
movzx eax, byte [ebp - 0x75a]
test eax, eax
je 0x44fe8a
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea ecx, [ebp - 0x5de0]
call fcn.0040fe33
jmp 0x44fdf7
lea ecx, [ebp - 0x502c]
call fcn.0040fe33
jmp 0x44fd3c
lea ecx, [ebp - 0x46e4]
call fcn.0040fe33
jmp 0x44fc9d
push 4
lea ecx, [ebp - 0x5e00]
call fcn.0040fd61
mov dword [ebp - 0xa38], 0xffffffff
mov dword [ebp - 0x5340], 0x4f2887cf
mov dword [ebp - 0x5348], 0xfffffffc
mov dword [ebp - 0x5350], 0xe1c97412
mov dword [ebp - 0x5358], 0xffffffff
mov dword [ebp - 0x5360], 4
mov dword [ebp - 0x5368], 0xccc89593
mov dword [ebp - 0x5370], 0xffffffff
mov dword [ebp - 0x5378], 0x289fff12
mov dword [ebp - 0x5380], 0x466e9f08
mov dword [ebp - 0x3990], 1
mov dword [ebp - 0x228], 0
jmp 0x44ff4e
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 4
jge 0x44ff70
push dword [ebp - 0x228]
lea ecx, [ebp - 0x5e00]
call fcn.0040fe4f
mov dword [eax], 0x4826
jmp 0x44ff41
mov dword [ebp - 0x228], 0
jmp 0x44ff89
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x44ffa5
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x6538], 1
jmp 0x44ff7c
mov byte [ebp - 0x510], 0
movzx eax, byte [ebp - 0x510]
test eax, eax
je 0x44ffc4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov dword [ebp - 0xa38], 3
jmp 0x44ffdd
mov eax, dword [ebp - 0xa38]
dec eax
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0
jl 0x450084
mov dword [ebp - 0x5388], 0xfffffffb
push 3
lea ecx, [ebp - 0x5df0]
call fcn.0040fd61
mov dword [ebp - 0xd98], 0
jmp 0x45001a
mov eax, dword [ebp - 0xd98]
inc eax
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0xd98], 3
jge 0x45003c
push dword [ebp - 0xd98]
lea ecx, [ebp - 0x5df0]
call fcn.0040fe4f
mov dword [eax], 0xfffffffa
jmp 0x45000d
mov byte [ebp - 0x512], 0
movzx eax, byte [ebp - 0x512]
test eax, eax
je 0x450067
push 0x9f4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp - 0x3990]
dec eax
mov dword [ebp - 0x3990], eax
lea ecx, [ebp - 0x5df0]
call fcn.0040fe33
jmp 0x44ffd0
lea ecx, [ebp - 0x5e00]
call fcn.0040fe33
mov dword [ebp - 0xa50], 1
mov dword [ebp - 0x3da8], 0xa5d6c05b
mov dword [ebp - 0x3da4], 0xa5d6c05b
mov dword [ebp - 0x3da0], 0xa5d6c05b
mov dword [ebp - 0x3d9c], 0xa5d6c05b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3da8], 0
jmp 0x4500ef
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3da8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3da8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3da8], 0xfffffff0
jle 0x4501aa
mov dword [ebp - 0x52c], 0x6f5a9c4c
mov dword [ebp - 0x39a0], 0
mov dword [ebp - 0x52c], 0
jmp 0x450130
mov eax, dword [ebp - 0x52c]
dec eax
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 0xffffffe3
jl 0x450192
mov dword [ebp - 0x3998], 0x65720b96
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x5390], eax
mov eax, dword [ebp - 0x3998]
mov dword [ebp - 0x5398], eax
mov eax, dword [ebp - 0x39a0]
mov dword [ebp - 0x53a0], eax
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x53a8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3da8]
sub eax, 0x3bd6525
sub eax, dword [ebp - 0x52c]
mov dword [ebp - 0x3998], eax
jmp 0x450123
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3da8]
mov dword [ebp - 0x39a0], eax
jmp 0x4500d4
mov dword [ebp - 0x53b0], 0xfffffffe
mov dword [ebp - 0x53b8], 0xe87f6fb8
mov dword [ebp - 0x410], 0xfffffff9
mov dword [ebp - 0x39e0], 0xd9964974
mov dword [ebp - 0xa40], 0
jmp 0x4501eb
mov eax, dword [ebp - 0xa40]
inc eax
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 2
jge 0x450207
mov eax, dword [ebp - 0xa40]
mov dword [ebp + eax*4 - 0x543c], 0xa7c6dd3
jmp 0x4501de
mov byte [ebp - 0x514], 0
movzx eax, byte [ebp - 0x514]
test eax, eax
je 0x450230
push 0x421
push 0x452
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
cmp dword [ebp - 0x410], 0x383c
jl 0x450248
mov dword [ebp - 0x39b0], 1
jmp 0x45024f
and dword [ebp - 0x39b0], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x410], eax
je 0x450269
mov dword [ebp - 0x39a8], 1
jmp 0x450270
and dword [ebp - 0x39a8], 0
cmp dword [ebp - 0x39a8], 0xe071
je 0x45028e
mov eax, 0xd7af2c9a
test eax, eax
jne 0x45028e
and dword [ebp - 0x39b8], 0
jmp 0x450298
mov dword [ebp - 0x39b8], 1
mov eax, dword [ebp - 0x39b0]
add eax, dword [ebp - 0x39b8]
cmp eax, dword [ebp - 0x410]
je 0x4502b8
mov dword [ebp - 0x39c0], 1
jmp 0x4502bf
and dword [ebp - 0x39c0], 0
cmp dword [ebp - 0x410], 0
je 0x4502d9
or eax, 0xffffffff
je 0x4502d9
mov dword [ebp - 0x39c8], 1
jmp 0x4502e0
and dword [ebp - 0x39c8], 0
cmp dword [ebp - 0x39c8], 0xb91e
jl 0x4502f8
mov dword [ebp - 0x39d0], 1
jmp 0x4502ff
and dword [ebp - 0x39d0], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x39d0], eax
jle 0x450319
mov dword [ebp - 0x39d8], 1
jmp 0x450320
and dword [ebp - 0x39d8], 0
mov eax, dword [ebp - 0x39d8]
mov dword [ebp - 0x39e0], eax
mov eax, dword [ebp - 0x39e0]
mov dword [ebp - 0x53c0], eax
cmp dword [ebp - 0x410], 1
je 0x45034d
mov dword [ebp - 0x39e8], 1
jmp 0x450354
and dword [ebp - 0x39e8], 0
mov eax, dword [ebp - 0x39e8]
shl eax, 1
jne 0x450370
cmp dword [ebp - 0x410], 0
jne 0x450370
and dword [ebp - 0x3a20], 0
jmp 0x45037a
mov dword [ebp - 0x3a20], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a20]
mov dword [ebp + eax - 0x543c], ecx
mov dword [ebp - 0x53c8], 0xed7c6ae4
mov dword [ebp - 0x784], 0xfffffffc
mov dword [ebp - 0x3a38], 0xf2e5664d
mov dword [ebp - 0x784], 0xfffffffc
jmp 0x4503c4
mov eax, dword [ebp - 0x784]
dec eax
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x784], 0xfffffffa
jne 0x450442
mov dword [ebp - 0x3a28], 0x45db
mov byte [ebp - 0x516], 0
movzx eax, byte [ebp - 0x516]
test eax, eax
je 0x450400
push 0x421
push 0x452
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3a28], eax
cmp dword [ebp - 0x3a28], 0
je 0x45042a
cmp dword [ebp - 0x784], 0
je 0x45042a
mov dword [ebp - 0x3a30], 1
jmp 0x450431
and dword [ebp - 0x3a30], 0
mov eax, dword [ebp - 0x3a30]
mov dword [ebp - 0x3a38], eax
jmp 0x4503b7
mov dword [ebp - 0x3a38], 0x7e4fc22
mov dword [ebp - 0x53d0], 0x403ca955
mov dword [ebp - 0x1d8], 0x2db58e46
mov dword [ebp - 0x40], 0x7ad95e17
mov dword [ebp - 0x4294], 0xff5f6f59
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1d8], 0
jmp 0x450493
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xfffffff3
je 0x450931
mov dword [ebp - 0x360], 0xd72b
mov dword [ebp - 0x3a68], 0x44fa7555
mov dword [ebp - 0xf48], 0
jmp 0x4504cd
mov eax, dword [ebp - 0xf48]
inc eax
mov dword [ebp - 0xf48], eax
cmp dword [ebp - 0xf48], 2
jge 0x4504e9
mov eax, dword [ebp - 0xf48]
mov dword [ebp + eax*4 - 0x89c], 0xb143e95a
jmp 0x4504c0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x89c]
cmp dword [ebp + eax - 0x89c], ecx
je 0x450511
mov dword [ebp - 0x3ea0], 1
jmp 0x450518
and dword [ebp - 0x3ea0], 0
mov eax, 0xa22e
test eax, eax
je 0x450536
cmp dword [ebp - 0x1d8], 0
je 0x450536
mov dword [ebp - 0x3a40], 1
jmp 0x45053d
and dword [ebp - 0x3a40], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x89c]
cmp dword [ebp - 0x3a40], eax
jge 0x45055e
mov dword [ebp - 0x3a48], 1
jmp 0x450565
and dword [ebp - 0x3a48], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x3a48]
jl 0x450582
mov dword [ebp - 0x4284], 1
jmp 0x450589
and dword [ebp - 0x4284], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x89c]
add eax, dword [ebp - 0x1d8]
je 0x4505b1
cmp dword [ebp - 0x360], 0
je 0x4505ac
jmp 0x450931
jmp 0x45092c
mov dword [ebp - 0x1470], 0x8317d239
cmp dword [ebp - 0x40], 0
je 0x4505c6
jmp 0x450931
mov dword [ebp - 0x360], 0
jmp 0x4505df
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 1
jg 0x45092c
push 2
lea ecx, [ebp - 0x46f4]
call fcn.0040fd61
mov dword [ebp - 0x3a98], 0xfffffffb
mov dword [ebp - 0xa48], 0
jmp 0x45061c
mov eax, dword [ebp - 0xa48]
inc eax
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0xa48], 2
jge 0x45063e
push dword [ebp - 0xa48]
lea ecx, [ebp - 0x46f4]
call fcn.0040fe4f
mov dword [eax], 0x208dd2dc
jmp 0x45060f
mov dword [ebp - 0x40], 0
jmp 0x45064e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x45091c
mov eax, dword [ebp - 0x1470]
mov dword [ebp - 0x53d8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x89c], 0
je 0x450689
cmp dword [ebp - 0x1d8], 0
je 0x450689
mov dword [ebp - 0x3a50], 1
jmp 0x450690
and dword [ebp - 0x3a50], 0
cmp dword [ebp - 0x3a50], 0x36042c8c
je 0x4506a8
mov dword [ebp - 0x3a58], 1
jmp 0x4506af
and dword [ebp - 0x3a58], 0
imul eax, dword [ebp - 0x3a58], 0xfffffff6
cmp dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x1d8], eax
jne 0x4506db
or eax, 0xffffffff
je 0x4506db
mov dword [ebp - 0x3a60], 1
jmp 0x4506e2
and dword [ebp - 0x3a60], 0
mov eax, dword [ebp - 0x3a60]
mov dword [ebp - 0x3a68], eax
cmp dword [ebp - 0x3a68], 0x2bba6dad
jle 0x450706
mov dword [ebp - 0x3a70], 1
jmp 0x45070d
and dword [ebp - 0x3a70], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x3a70], eax
jl 0x450727
mov dword [ebp - 0x3a78], 1
jmp 0x45072e
and dword [ebp - 0x3a78], 0
cmp dword [ebp - 0x3a78], 0x8d81c919
jne 0x450746
mov dword [ebp - 0x3a80], 1
jmp 0x45074d
and dword [ebp - 0x3a80], 0
push 0
lea ecx, [ebp - 0x46f4]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x3a80]
add ecx, dword [eax]
jne 0x450774
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x450774
and dword [ebp - 0x3a88], 0
jmp 0x45077e
mov dword [ebp - 0x3a88], 1
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x89c]
cmp eax, dword [ebp - 0x3a88]
je 0x45079c
mov dword [ebp - 0x428c], 1
jmp 0x4507a3
and dword [ebp - 0x428c], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x89c]
mov dword [ebp - 0x53e0], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x89c]
mov dword [ebp - 0x53e8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x53f0], eax
mov eax, 0x9b20
cmp eax, 0x5c0
jg 0x4507f9
or eax, 0xffffffff
je 0x4507f9
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x89c], 0
je 0x4507f9
mov dword [ebp - 0x3a90], 1
jmp 0x450800
and dword [ebp - 0x3a90], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x3a90]
mov dword [ebp - 0x3a98], eax
mov eax, dword [ebp - 0x3a98]
mov dword [ebp - 0x53f8], eax
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp + eax*4 - 0x89c]
push 0
lea ecx, [ebp - 0x46f4]
call fcn.0040fe4f
sub esi, dword [eax]
cmp esi, dword [ebp - 0x1470]
jne 0x450848
mov dword [ebp - 0x3aa0], 1
jmp 0x45084f
and dword [ebp - 0x3aa0], 0
cmp dword [ebp - 0x3aa0], 0xc65b0b56
jbe 0x450867
mov dword [ebp - 0x3aa8], 1
jmp 0x45086e
and dword [ebp - 0x3aa8], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3aa8]
mov dword [ebp + eax*4 - 0x89c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x89c]
imul eax, dword [ebp - 0x360]
test eax, eax
je 0x4508b4
push 0
lea ecx, [ebp - 0x46f4]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x4508b4
mov dword [ebp - 0x3ab0], 1
jmp 0x4508bb
and dword [ebp - 0x3ab0], 0
cmp dword [ebp - 0x3ab0], 0x7a312446
je 0x4508d3
mov dword [ebp - 0x3ab8], 1
jmp 0x4508da
and dword [ebp - 0x3ab8], 0
mov eax, dword [ebp - 0x3ab8]
sub eax, 0xcc39
mov dword [ebp - 0x4294], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x89c], 0
jne 0x450904
mov dword [ebp - 0x3ac0], 1
jmp 0x45090b
and dword [ebp - 0x3ac0], 0
mov eax, dword [ebp - 0x3ac0]
mov dword [ebp - 0x1470], eax
jmp 0x450647
lea ecx, [ebp - 0x46f4]
call fcn.0040fe33
jmp 0x4505d2
jmp 0x450486
mov dword [ebp - 0x5400], 7
mov dword [ebp - 0xda0], 0xfd3df75d
mov dword [ebp - 0x4d54], 5
mov dword [ebp - 0x4d50], 5
mov dword [ebp - 0x4d4c], 5
mov dword [ebp - 0x4d48], 5
lea ecx, [ebp - 0x1165]
call fcn.0040fe5e
push eax
lea eax, [ebp - 0x4d44]
push eax
lea eax, [ebp - 0x4d54]
push eax
lea ecx, [ebp - 0x65f0]
call fcn.0040fe61
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5e10]
call fcn.0040fe0d
mov dword [ebp - 0xda0], 0
jmp 0x4509bb
mov eax, dword [ebp - 0xda0]
dec eax
mov dword [ebp - 0xda0], eax
cmp dword [ebp - 0xda0], 0xffffffe8
jle 0x450a27
mov dword [ebp - 0x8c8], 0xffffffff
mov dword [ebp - 0x8c8], 0
jmp 0x4509e7
mov eax, dword [ebp - 0x8c8]
inc eax
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 4
jge 0x450a09
push dword [ebp - 0x8c8]
lea ecx, [ebp - 0x5e10]
call fcn.0040fe4f
mov dword [eax], 0x937a3a11
jmp 0x4509da
mov byte [ebp - 0x518], 0
movzx eax, byte [ebp - 0x518]
test eax, eax
je 0x450a25
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
jmp 0x4509ae
lea ecx, [ebp - 0x5e10]
call fcn.0040fe33
mov dword [ebp - 0xa50], 0xfffffff9
jmp 0x450a4b
mov eax, dword [ebp - 0xa50]
inc eax
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 0xb
je 0x4533b1
push 2
lea ecx, [ebp - 0x5e20]
call fcn.0040fd61
mov dword [ebp - 0x1018], 0xeef20fe6
mov dword [ebp - 0x5408], 0xad4351cd
mov dword [ebp - 0x230], 0
jmp 0x450a92
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x450ab4
push dword [ebp - 0x230]
lea ecx, [ebp - 0x5e20]
call fcn.0040fe4f
mov dword [eax], 0x571177e8
jmp 0x450a85
mov dword [ebp - 0x230], 0
jmp 0x450acd
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x450ae9
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x6820], 3
jmp 0x450ac0
mov dword [ebp - 0x1018], 0
jmp 0x450b02
mov eax, dword [ebp - 0x1018]
inc eax
mov dword [ebp - 0x1018], eax
cmp dword [ebp - 0x1018], 1
jg 0x450b24
mov dword [ebp - 0x3ac8], 0xffffffff
mov eax, dword [ebp - 0x3ac8]
inc eax
mov dword [ebp - 0x3ac8], eax
jmp 0x450af5
lea ecx, [ebp - 0x5e20]
call fcn.0040fe33
push 2
lea ecx, [ebp - 0x4724]
call fcn.0040fd61
mov dword [ebp - 0x3ad0], 1
mov dword [ebp - 0xa58], 0
jmp 0x450b5f
mov eax, dword [ebp - 0xa58]
inc eax
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0xa58], 2
jge 0x450b7b
mov eax, dword [ebp - 0xa58]
mov dword [ebp + eax*4 - 0x6600], 0x58e469ad
jmp 0x450b52
mov byte [ebp - 0x51a], 0
movzx eax, byte [ebp - 0x51a]
test eax, eax
je 0x450ba3
push 0
push 0x15c9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebp - 0x3ad0]
inc eax
mov dword [ebp - 0x3ad0], eax
mov dword [ebp - 0x5410], 0xfffffffc
mov dword [ebp - 0x5418], 0x2135
mov dword [ebp - 0x5420], 0xffffffff
mov dword [ebp - 0x5428], 2
mov dword [ebp - 0x3ad8], 0xfffffffc
mov eax, dword [ebp - 0x3ad8]
dec eax
mov dword [ebp - 0x3ad8], eax
mov byte [ebp - 0x51c], 0
movzx eax, byte [ebp - 0x51c]
test eax, eax
je 0x450c13
push 0x25bb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x5430], 0xdc6b79df
mov dword [ebp - 0x58], 0
mov dword [ebp - 0xda8], 0xfffffff7
push 3
lea ecx, [ebp - 0x3b08]
call fcn.0040fd61
mov dword [ebp - 0x1190], 4
push 4
lea ecx, [ebp - 0x3cb4]
call fcn.0040fd61
mov dword [ebp - 0xcc], 0xda972737
mov dword [ebp - 0x42b4], 0x320ba2c1
mov dword [ebp - 0x94], 0
jmp 0x450c7f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x450ca1
push dword [ebp - 0x94]
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
mov dword [eax], 0x9ba8
jmp 0x450c72
mov dword [ebp - 0x94], 0
jmp 0x450cba
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x450cdc
push dword [ebp - 0x94]
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe4f
mov dword [eax], 0xa9f4f9a0
jmp 0x450cad
mov dword [ebp - 0x94], 0
jmp 0x450cf5
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x450d11
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x6620], 0xffffffff
jmp 0x450ce8
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5668], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5670], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5678], eax
xor eax, eax
inc eax
imul eax, eax, 0x9637
test eax, eax
je 0x450d4b
cmp dword [ebp - 0x58], 0
je 0x450d4b
mov dword [ebp - 0x3ae0], 1
jmp 0x450d52
and dword [ebp - 0x3ae0], 0
mov eax, dword [ebp - 0x3ae0]
sub eax, 0x2728
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0x5680], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5688], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5690], eax
cmp dword [ebp - 0x58], 0x9ba0
je 0x450d96
mov dword [ebp - 0x3ae8], 1
jmp 0x450d9d
and dword [ebp - 0x3ae8], 0
push 1
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x3ae8]
cmp ecx, dword [eax]
jg 0x450dc0
mov dword [ebp - 0x429c], 1
jmp 0x450dc7
and dword [ebp - 0x429c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jle 0x450ddb
mov dword [ebp - 0x3af0], 1
jmp 0x450de2
and dword [ebp - 0x3af0], 0
mov eax, dword [ebp - 0x3af0]
mov dword [ebp - 0x1190], eax
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0x5698], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x56a0], eax
push 3
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe4f
mov esi, eax
push 3
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe4f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x450e31
mov dword [ebp - 0x3af8], 1
jmp 0x450e38
and dword [ebp - 0x3af8], 0
mov eax, dword [ebp - 0x3af8]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x58], 0
jmp 0x450e54
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x45103b
mov dword [ebp - 0x3350], 0xffffffff
mov dword [ebp - 0x42a4], 0
mov dword [ebp - 0x42ac], 5
mov dword [ebp - 0xcc], 2
jmp 0x450e95
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x451036
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
cmp dword [ebp - 0xda8], 0xffffffff
je 0x450ed9
mov dword [ebp - 0x3c64], 1
jmp 0x450ee0
and dword [ebp - 0x3c64], 0
cmp dword [ebp - 0x3c64], 0
jne 0x450ef5
mov dword [ebp - 0x1c2c], 1
jmp 0x450efc
and dword [ebp - 0x1c2c], 0
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x1c2c]
add ecx, dword [eax]
cmp ecx, 0xffffffff
jle 0x450f26
mov dword [ebp - 0x3340], 1
jmp 0x450f2d
and dword [ebp - 0x3340], 0
mov esi, dword [ebp - 0xcc]
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x3340]
add ecx, dword [eax]
imul esi, ecx
cmp esi, 0xffff
je 0x450f63
mov dword [ebp - 0x15f0], 1
jmp 0x450f6a
and dword [ebp - 0x15f0], 0
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x15f0]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x3350]
jne 0x450f97
mov dword [ebp - 0x3348], 1
jmp 0x450f9e
and dword [ebp - 0x3348], 0
cmp dword [ebp - 0x3348], 0
jne 0x450fae
cmp dword [ebp - 0x42a4], 0
mov eax, dword [ebp - 0x42ac]
mov dword [ebp - 0x1190], eax
mov esi, dword [ebp - 0x1190]
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe4f
cmp dword [eax], esi
jl 0x450fe1
mov dword [ebp - 0x15f8], 1
jmp 0x450fe8
and dword [ebp - 0x15f8], 0
mov eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x42b4], eax
mov esi, dword [ebp - 0x3350]
push 1
lea ecx, [ebp - 0x3b08]
call fcn.0040fe4f
add esi, dword [eax]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x6620], esi
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x451031
jmp 0x450e88
jmp 0x450e88
jmp 0x450e4d
lea ecx, [ebp - 0x3cb4]
call fcn.0040fe33
lea ecx, [ebp - 0x3b08]
call fcn.0040fe33
mov dword [ebp - 0x56a8], 0
push 1
lea ecx, [ebp - 0x15d4]
call fcn.0040fd61
mov dword [ebp - 0x818], 0xfffffffa
mov dword [ebp - 0xa60], 0
jmp 0x45108b
mov eax, dword [ebp - 0xa60]
inc eax
mov dword [ebp - 0xa60], eax
cmp dword [ebp - 0xa60], 1
jge 0x4510ad
push dword [ebp - 0xa60]
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
mov dword [eax], 0x1c7b
jmp 0x45107e
push 0
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
push 0
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
mov esi, eax
push 0
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x4510e8
mov dword [ebp - 0x1600], 1
jmp 0x4510ef
and dword [ebp - 0x1600], 0
mov eax, dword [ebp - 0x1600]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x818], 0
jmp 0x451114
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0x13
jle 0x45120a
mov dword [ebp - 0x218], 0xd2086bd0
mov dword [ebp - 0x218], 0
jmp 0x451144
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jg 0x451177
push dword [ebp - 0x218]
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
mov esi, eax
push dword [ebp - 0x218]
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x451137
mov eax, dword [ebp - 0x818]
cmp dword [ebp - 0x218], eax
je 0x451191
mov dword [ebp - 0x42bc], 1
jmp 0x451198
and dword [ebp - 0x42bc], 0
push 0
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x4511c8
push 0
lea ecx, [ebp - 0x15d4]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x4511c8
mov dword [ebp - 0x42c4], 1
jmp 0x4511cf
and dword [ebp - 0x42c4], 0
cmp dword [ebp - 0x218], 0
je 0x4511ed
cmp dword [ebp - 0x218], 0
je 0x4511ed
mov dword [ebp - 0x3358], 1
jmp 0x4511f4
and dword [ebp - 0x3358], 0
mov eax, dword [ebp - 0x3358]
sub eax, 0xb0a
mov dword [ebp - 0x218], eax
jmp 0x451107
lea ecx, [ebp - 0x15d4]
call fcn.0040fe33
mov dword [ebp - 0x56b0], 0xdd8fb8ce
mov dword [ebp - 0x8b8], 0
push 4
lea ecx, [ebp - 0x5104]
call fcn.0040fd61
mov dword [ebp - 0xf50], 0
jmp 0x45124f
mov eax, dword [ebp - 0xf50]
inc eax
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0xf50], 4
jge 0x451271
push dword [ebp - 0xf50]
lea ecx, [ebp - 0x5104]
call fcn.0040fe4f
mov dword [eax], 0xfffffffc
jmp 0x451242
mov esi, dword [ebp - 0x8b8]
push 1
lea ecx, [ebp - 0x5104]
call fcn.0040fe4f
mov dword [eax], esi
mov dword [ebp - 0x8b8], 0
jmp 0x45129f
mov eax, dword [ebp - 0x8b8]
inc eax
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 3
jg 0x4512cb
mov byte [ebp - 0x51e], 0
movzx eax, byte [ebp - 0x51e]
test eax, eax
je 0x4512c9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x451292
lea ecx, [ebp - 0x5104]
call fcn.0040fe33
mov dword [ebp - 0xa68], 0
jmp 0x4512ef
mov eax, dword [ebp - 0xa68]
inc eax
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 2
jge 0x451311
push dword [ebp - 0xa68]
lea ecx, [ebp - 0x4724]
call fcn.0040fe4f
mov dword [eax], 0x6d444182
jmp 0x4512e2
mov dword [ebp - 0x9b0], 0xfffffffc
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x1198], 0xfffffff9
mov dword [ebp - 0x42cc], 0xfba2522a
mov dword [ebp - 0x56b8], 0xf5a260df
mov dword [ebp - 0xdb0], 0
jmp 0x45135c
mov eax, dword [ebp - 0xdb0]
inc eax
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0xdb0], 2
jge 0x451378
mov eax, dword [ebp - 0xdb0]
mov dword [ebp + eax*4 - 0x5448], 9
jmp 0x45134f
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x56c0], eax
push 0xfffffffffffffff7
pop eax
sub eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0x1198]
jl 0x4513a1
mov dword [ebp - 0x1368], 1
jmp 0x4513a8
and dword [ebp - 0x1368], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1368]
mov dword [ebp + eax - 0x5448], ecx
mov eax, dword [ebp - 0x1198]
imul eax, dword [ebp - 0x1368]
cmp dword [ebp - 0x9b0], eax
jle 0x4513dc
mov dword [ebp - 0x1608], 1
jmp 0x4513e3
and dword [ebp - 0x1608], 0
mov eax, dword [ebp - 0x1198]
cmp dword [ebp - 0x1608], eax
jle 0x4513fd
mov dword [ebp - 0x3360], 1
jmp 0x451404
and dword [ebp - 0x3360], 0
mov eax, dword [ebp - 0x9b0]
cmp dword [ebp - 0x3360], eax
jle 0x451427
cmp dword [ebp - 0x534], 0
je 0x451427
mov dword [ebp - 0x1610], 1
jmp 0x45142e
and dword [ebp - 0x1610], 0
mov eax, dword [ebp - 0x534]
cmp dword [ebp - 0x1610], eax
je 0x451448
mov dword [ebp - 0x3368], 1
jmp 0x45144f
and dword [ebp - 0x3368], 0
mov eax, dword [ebp - 0x9b0]
cmp dword [ebp - 0x3368], eax
jg 0x451469
mov dword [ebp - 0x1618], 1
jmp 0x451470
and dword [ebp - 0x1618], 0
cmp dword [ebp - 0x1618], 0x8bff9cf0
jg 0x451488
mov dword [ebp - 0x3370], 1
jmp 0x45148f
and dword [ebp - 0x3370], 0
mov eax, dword [ebp - 0x534]
imul eax, dword [ebp - 0x3370]
sub eax, 0xdec9
cmp eax, dword [ebp - 0x534]
jge 0x4514b5
mov dword [ebp - 0x1620], 1
jmp 0x4514bc
and dword [ebp - 0x1620], 0
mov eax, dword [ebp - 0x534]
imul eax, dword [ebp - 0x1620]
cmp eax, dword [ebp - 0x534]
je 0x4514dd
mov dword [ebp - 0x3378], 1
jmp 0x4514e4
and dword [ebp - 0x3378], 0
mov eax, dword [ebp - 0x9b0]
cmp eax, dword [ebp - 0x3378]
jge 0x4514fe
mov dword [ebp - 0x1628], 1
jmp 0x451505
and dword [ebp - 0x1628], 0
mov eax, dword [ebp - 0x1628]
mov dword [ebp - 0x42cc], eax
push 1
lea ecx, [ebp - 0x4724]
call fcn.0040fe4f
mov dword [eax], 0xc
jmp 0x45154a
push 1
lea ecx, [ebp - 0x4724]
call fcn.0040fe4f
cmp dword [eax], 0xfffffff8
jne 0x4533a1
mov dword [ebp - 0x1080], 0x1a049fe3
mov dword [ebp - 0xa70], 0
jmp 0x451583
mov eax, dword [ebp - 0xa70]
inc eax
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 1
jge 0x45159f
mov eax, dword [ebp - 0xa70]
mov dword [ebp + eax*4 - 0x1630], 0xffffffff
jmp 0x451576
mov dword [ebp - 0x1080], 0
jmp 0x4515b8
mov eax, dword [ebp - 0x1080]
inc eax
mov dword [ebp - 0x1080], eax
cmp dword [ebp - 0x1080], 0xd
jg 0x45163b
mov dword [ebp - 0x790], 1
mov dword [ebp - 0x790], 0
jmp 0x4515e4
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0
jg 0x451636
mov byte [ebp - 0x520], 0
movzx eax, byte [ebp - 0x520]
test eax, eax
je 0x45161a
push 0x11ee
push 0
push 0x26ab
push 0x1572
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x790]
mov eax, dword [ebp + eax*4 - 0x1630]
mov dword [ebp + ecx*4 - 0x1630], eax
jmp 0x4515d7
jmp 0x4515ab
mov dword [ebp - 0x8d0], 9
mov dword [ebp - 0x458], 0x3644
mov dword [ebp - 0xdb8], 0x1b713623
mov dword [ebp - 0x3398], 0x806aa1c3
mov dword [ebp - 0x1650], 0x18ebdb8
mov dword [ebp - 0x56c8], 0
mov dword [ebp - 0x56d0], 0xffffffff
mov dword [ebp - 0xa78], 0
jmp 0x45169a
mov eax, dword [ebp - 0xa78]
inc eax
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0xa78], 4
jge 0x4516b6
mov eax, dword [ebp - 0xa78]
mov dword [ebp + eax*4 - 0x6860], 1
jmp 0x45168d
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x56d8], eax
mov eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x458]
lea eax, [eax + ecx + 1]
cmp eax, 1
je 0x4516e3
mov dword [ebp - 0x3388], 1
jmp 0x4516ea
and dword [ebp - 0x3388], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0x3388], eax
jle 0x451704
mov dword [ebp - 0x1638], 1
jmp 0x45170b
and dword [ebp - 0x1638], 0
mov eax, dword [ebp - 0x458]
imul eax, dword [ebp - 0x1638]
cmp eax, 6
je 0x45172f
cmp dword [ebp - 0xdb8], 0
jne 0x45172f
and dword [ebp - 0x3390], 0
jmp 0x451739
mov dword [ebp - 0x3390], 1
imul eax, dword [ebp - 0x3390], 0xe4bf
cmp eax, dword [ebp - 0xdb8]
jg 0x451757
mov dword [ebp - 0x1640], 1
jmp 0x45175e
and dword [ebp - 0x1640], 0
mov eax, dword [ebp - 0x1640]
mov dword [ebp - 0x3398], eax
mov eax, dword [ebp - 0xdb8]
cmp dword [ebp - 0x3398], eax
jne 0x451784
mov dword [ebp - 0x1648], 1
jmp 0x45178b
and dword [ebp - 0x1648], 0
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x1648]
je 0x4517a5
mov dword [ebp - 0x33a0], 1
jmp 0x4517ac
and dword [ebp - 0x33a0], 0
mov eax, dword [ebp - 0xdb8]
cmp dword [ebp - 0x33a0], eax
jl 0x4517c6
mov dword [ebp - 0x42d4], 1
jmp 0x4517cd
and dword [ebp - 0x42d4], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x56e0], eax
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x56e8], eax
mov dword [ebp - 0x1650], 0x34e401d9
cmp dword [ebp - 0x1650], 0
je 0x4518a4
mov dword [ebp - 0x56f0], 0xffffffff
mov dword [ebp - 0x56f8], 0xfffffffe
mov dword [ebp - 0x5700], 0x3f6d1d89
mov dword [ebp - 0x5708], 0x31137833
mov dword [ebp - 0x5710], 0xffffffff
mov dword [ebp - 0x5718], 0xeb4e5227
push 3
lea ecx, [ebp - 0x5e30]
call fcn.0040fd61
mov dword [ebp - 0x33a8], 0
mov dword [ebp - 0xa80], 0
jmp 0x451868
mov eax, dword [ebp - 0xa80]
inc eax
mov dword [ebp - 0xa80], eax
cmp dword [ebp - 0xa80], 3
jge 0x45188a
push dword [ebp - 0xa80]
lea ecx, [ebp - 0x5e30]
call fcn.0040fe4f
mov dword [eax], 0xfffffffd
jmp 0x45185b
mov eax, dword [ebp - 0x33a8]
dec eax
mov dword [ebp - 0x33a8], eax
lea ecx, [ebp - 0x5e30]
call fcn.0040fe33
jmp 0x4518d0
mov dword [ebp - 0x42dc], 0xfffffff6
mov byte [ebp - 0x522], 0
movzx eax, byte [ebp - 0x522]
test eax, eax
je 0x4518c6
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [ebp - 0x42dc], 0
mov dword [ebp - 0x5720], 0xfffffff7
push 2
lea ecx, [ebp - 0xa14]
call fcn.0040fd61
mov dword [ebp - 0x42ec], 1
mov dword [ebp - 0x98], 0
jmp 0x45190a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x451926
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x3b18], 0x204e2db5
jmp 0x4518fd
mov dword [ebp - 0x98], 0
jmp 0x45193f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x451961
push dword [ebp - 0x98]
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov dword [eax], 0x9e57ad95
jmp 0x451932
mov dword [ebp - 0x98], 0
jmp 0x45197a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x451996
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x5e40], 0x6b933888
jmp 0x45196d
mov byte [ebp - 0x524], 0
movzx eax, byte [ebp - 0x524]
test eax, eax
je 0x4519b2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov dword [eax], 2
jmp 0x4519eb
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov dword [ebp - 0x1658], eax
mov eax, dword [ebp - 0x1658]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1658]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
cmp dword [eax], 0
jl 0x451c07
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3b18]
mov dword [ebp - 0x5728], eax
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x3b18], 0
je 0x451b59
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov esi, eax
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x451a68
mov dword [ebp - 0x33b8], 1
jmp 0x451a6f
and dword [ebp - 0x33b8], 0
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x3b18], 0
jne 0x451a9a
mov eax, 0x9986
test eax, eax
jne 0x451a9a
and dword [ebp - 0x33b0], 0
jmp 0x451aa4
mov dword [ebp - 0x33b0], 1
cmp dword [ebp - 0x33b0], 0xbbde
jne 0x451abc
mov dword [ebp - 0x1660], 1
jmp 0x451ac3
and dword [ebp - 0x1660], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b18]
add eax, dword [ebp - 0x1660]
imul eax, dword [ebp - 0x33b8]
cmp eax, 2
ja 0x451afb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b18], 0
jne 0x451afb
and dword [ebp - 0x1668], 0
jmp 0x451b05
mov dword [ebp - 0x1668], 1
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3b18]
cmp dword [ebp - 0x1668], eax
jne 0x451b2f
mov dword [ebp - 0x33c0], 1
jmp 0x451b36
and dword [ebp - 0x33c0], 0
push 1
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x33c0]
cmp ecx, dword [eax]
je 0x451b59
mov dword [ebp - 0x42e4], 1
jmp 0x451b60
and dword [ebp - 0x42e4], 0
push 1
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, 0x9d87263b
test eax, eax
je 0x451b9b
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x3b18], 0
je 0x451b9b
mov dword [ebp - 0x1670], 1
jmp 0x451ba2
and dword [ebp - 0x1670], 0
push 0
lea ecx, [ebp - 0xa14]
call fcn.0040fe4f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3b18]
cmp dword [ebp - 0x1670], eax
jg 0x451bcc
mov dword [ebp - 0x33c8], 1
jmp 0x451bd3
and dword [ebp - 0x33c8], 0
mov eax, dword [ebp - 0x33c8]
mov dword [ebp - 0x42ec], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x5e40], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5e40], 0
je 0x451c02
jmp 0x451c07
jmp 0x4519c7
lea ecx, [ebp - 0xa14]
call fcn.0040fe33
push 4
lea ecx, [ebp - 0x51c4]
call fcn.0040fd61
push 1
lea ecx, [ebp - 0x4704]
call fcn.0040fd61
mov dword [ebp - 0x5730], 1
mov dword [ebp - 0x5738], 0xf0b101aa
mov dword [ebp - 0x5740], 0xe12aa53f
mov dword [ebp - 0x5748], 0xfffffffa
mov dword [ebp - 0x1680], 0x62b50098
mov dword [ebp - 0x3dc], 0
jmp 0x451c77
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 1
jge 0x451c99
push dword [ebp - 0x3dc]
lea ecx, [ebp - 0x4704]
call fcn.0040fe4f
mov dword [eax], 0x7e2799ac
jmp 0x451c6a
mov dword [ebp - 0x3dc], 0
jmp 0x451cb2
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 3
jge 0x451cce
mov eax, dword [ebp - 0x3dc]
mov dword [ebp + eax*4 - 0x678c], 0xffffffff
jmp 0x451ca5
push 0
lea ecx, [ebp - 0x4704]
call fcn.0040fe4f
and dword [eax], 0
jmp 0x451d04
push 0
lea ecx, [ebp - 0x4704]
call fcn.0040fe4f
mov dword [ebp - 0x1678], eax
mov eax, dword [ebp - 0x1678]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1678]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4704]
call fcn.0040fe4f
cmp dword [eax], 0xe
jl 0x451ee5
mov dword [ebp - 0x4c64], 0x4914d2ed
mov dword [ebp - 0x4c60], 0x4914d2ed
mov dword [ebp - 0x4c5c], 0x4914d2ed
mov dword [ebp - 0x4c58], 0x4914d2ed
lea ecx, [ebp - 0x1465]
call fcn.0040fe5e
push eax
lea eax, [ebp - 0x4c54]
push eax
lea eax, [ebp - 0x4c64]
push eax
lea ecx, [ebp - 0x6610]
call fcn.0040fe61
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6410]
call fcn.0040fe0d
mov dword [ebp - 0xf58], 0
mov dword [ebp - 0x5750], 0xfffffffb
mov dword [ebp - 0x5758], 0
mov dword [ebp - 0x5760], 1
mov dword [ebp - 0x5768], 1
mov dword [ebp - 0x60], 0
jmp 0x451db9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x451dcf
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x67a4], 0xb06c0e26
jmp 0x451db2
mov dword [ebp - 0x60], 0
jmp 0x451ddf
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x451df5
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x6880], 0
jmp 0x451dd8
mov dword [ebp - 0x60], 0
jmp 0x451e05
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x451e1b
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x5e50], 0xffffffff
jmp 0x451dfe
mov dword [ebp - 0xf58], 3
jmp 0x451e34
mov eax, dword [ebp - 0xf58]
dec eax
mov dword [ebp - 0xf58], eax
cmp dword [ebp - 0xf58], 0
jl 0x451ec8
mov dword [ebp - 0x33d0], 0x3e34b64b
push 4
lea ecx, [ebp - 0x5e60]
call fcn.0040fd61
mov dword [ebp - 0xa88], 0
jmp 0x451e71
mov eax, dword [ebp - 0xa88]
inc eax
mov dword [ebp - 0xa88], eax
cmp dword [ebp - 0xa88], 4
jge 0x451e90
push dword [ebp - 0xa88]
lea ecx, [ebp - 0x5e60]
call fcn.0040fe4f
and dword [eax], 0
jmp 0x451e64
mov eax, dword [ebp - 0x33d0]
dec eax
mov dword [ebp - 0x33d0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5e50]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5e50], eax
lea ecx, [ebp - 0x5e60]
call fcn.0040fe33
jmp 0x451e27
mov eax, dword [ebp - 0x1680]
dec eax
mov dword [ebp - 0x1680], eax
lea ecx, [ebp - 0x6410]
call fcn.0040fe33
jmp 0x451ce0
lea ecx, [ebp - 0x4704]
call fcn.0040fe33
mov dword [ebp - 0x4e1c], 0xd6c05baf
mov dword [ebp - 0x4e18], 0xd6c05baf
mov dword [ebp - 0x4e14], 0xd6c05baf
mov dword [ebp - 0x4e10], 0xd6c05baf
lea ecx, [ebp - 0x116d]
call fcn.0040fe5e
push eax
lea eax, [ebp - 0x4e0c]
push eax
lea eax, [ebp - 0x4e1c]
push eax
lea ecx, [ebp - 0x6628]
call fcn.0040fe61
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6500]
call fcn.0040fe0d
mov dword [ebp - 0xa90], 0xa8e97eed
mov dword [ebp - 0x5770], 0x891c5534
push 3
lea ecx, [ebp - 0x5e70]
call fcn.0040fd61
mov dword [ebp - 0x5778], 0x88e1
mov dword [ebp - 0x33d8], 0xffffffff
mov dword [ebp - 0xdc0], 0
jmp 0x451f9b
mov eax, dword [ebp - 0xdc0]
inc eax
mov dword [ebp - 0xdc0], eax
cmp dword [ebp - 0xdc0], 3
jge 0x451fbd
push dword [ebp - 0xdc0]
lea ecx, [ebp - 0x5e70]
call fcn.0040fe4f
mov dword [eax], 0xe6f7fbf2
jmp 0x451f8e
mov dword [ebp - 0xa90], 3
jmp 0x451fd6
mov eax, dword [ebp - 0xa90]
dec eax
mov dword [ebp - 0xa90], eax
cmp dword [ebp - 0xa90], 0
jl 0x452006
mov byte [ebp - 0x497], 0
movzx eax, byte [ebp - 0x497]
test eax, eax
je 0x452004
push 0
push 0x827
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x451fc9
mov eax, dword [ebp - 0x33d8]
inc eax
mov dword [ebp - 0x33d8], eax
lea ecx, [ebp - 0x5e70]
call fcn.0040fe33
lea ecx, [ebp - 0x6500]
call fcn.0040fe33
mov dword [ebp - 0x1020], 0
jmp 0x452042
mov eax, dword [ebp - 0x1020]
inc eax
mov dword [ebp - 0x1020], eax
cmp dword [ebp - 0x1020], 4
jge 0x452064
push dword [ebp - 0x1020]
lea ecx, [ebp - 0x51c4]
call fcn.0040fe4f
mov dword [eax], 0xfffffffe
jmp 0x452035
mov dword [ebp - 0xa98], 6
mov dword [ebp - 0x33e0], 0xffffffff
mov dword [ebp - 0x14d0], 0xe008
mov dword [ebp - 0x42f4], 0x28405cef
mov byte [ebp - 0x635], 0
movzx eax, byte [ebp - 0x635]
test eax, eax
je 0x4520b0
push 0x20
push 0x234a
push 0x2525
call dword [sym.imp.KERNEL32.dll_HeapCreate]
cmp dword [ebp - 0xa98], 0
jne 0x4520fb
cmp dword [ebp - 0xa98], 0
jne 0x4520d7
cmp dword [ebp - 0xa98], 1
jne 0x4520d7
mov dword [ebp - 0x1688], 1
jmp 0x4520de
and dword [ebp - 0x1688], 0
mov eax, dword [ebp - 0xa98]
add eax, dword [ebp - 0x1688]
mov dword [ebp - 0x33e0], eax
jne 0x4520fb
and dword [ebp - 0x1690], 0
jmp 0x452105
mov dword [ebp - 0x1690], 1
cmp dword [ebp - 0x1690], 0xfffffff7
jg 0x45211a
mov dword [ebp - 0x33e8], 1
jmp 0x452121
and dword [ebp - 0x33e8], 0
cmp dword [ebp - 0x33e8], 1
jg 0x452136
mov dword [ebp - 0x1698], 1
jmp 0x45213d
and dword [ebp - 0x1698], 0
mov eax, dword [ebp - 0x14d0]
cmp dword [ebp - 0x1698], eax
jle 0x452157
mov dword [ebp - 0x33f0], 1
jmp 0x45215e
and dword [ebp - 0x33f0], 0
cmp dword [ebp - 0x33f0], 0xb44cf59
jle 0x452176
mov dword [ebp - 0x16a0], 1
jmp 0x45217d
and dword [ebp - 0x16a0], 0
mov eax, dword [ebp - 0x14d0]
cmp dword [ebp - 0x16a0], eax
jg 0x452197
mov dword [ebp - 0x33f8], 1
jmp 0x45219e
and dword [ebp - 0x33f8], 0
mov eax, dword [ebp - 0x14d0]
cmp dword [ebp - 0x33f8], eax
jl 0x4521b8
mov dword [ebp - 0x16a8], 1
jmp 0x4521bf
and dword [ebp - 0x16a8], 0
mov eax, dword [ebp - 0x16a8]
mov dword [ebp - 0x42f4], eax
cmp dword [ebp - 0x8d0], 0
je 0x4521e4
lea ecx, [ebp - 0x51c4]
call fcn.0040fe33
jmp 0x4533a1
mov dword [ebp - 0x14], 0x643cdf98
mov dword [ebp - 0x16e8], 0xcc9df78a
mov dword [ebp - 0x1700], 0x73394210
mov dword [ebp - 0x4314], 3
mov dword [ebp - 0x238], 0
jmp 0x452222
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 4
jge 0x45223e
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x1458], 0xc93b4e1
jmp 0x452215
mov dword [ebp - 0x238], 0
jmp 0x452257
cmp dword [ebp - 0x238], 2
jge 0x452273
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x1124], 0xffffffff
jmp 0x45224a
mov dword [ebp - 0x14], 0
jmp 0x452283
lea ecx, [ebp - 0x4724]
call fcn.0040fe33
jmp 0x450a3e
mov dword [ebp - 0xf68], 0
mov dword [ebp - 0x444c], 0xffffffff
mov dword [ebp - 0xf68], 0xfffffff2
jmp 0x4533de
mov eax, dword [ebp - 0xf68]
inc eax
mov dword [ebp - 0xf68], eax
cmp dword [ebp - 0xf68], 0x10
jge 0x453419
mov dword [ebp - 0x444c], 0x951ad386
mov byte [ebp - 0x741], 0
movzx eax, byte [ebp - 0x741]
test eax, eax
je 0x453417
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x4533d1
mov dword [ebp - 0xac8], 0
jmp 0x453432
mov eax, dword [ebp - 0xac8]
inc eax
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0xac8], 1
jge 0x45344e
mov eax, dword [ebp - 0xac8]
mov dword [ebp + eax*4 - 0x57e8], 1
jmp 0x453425
mov byte [ebp - 0x4a3], 0
movzx eax, byte [ebp - 0x4a3]
test eax, eax
je 0x453468
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov byte [ebp - 0x64d], 0
movzx eax, byte [ebp - 0x64d]
test eax, eax
je 0x453493
push 0xe38
push 0x583
push 0
push 0x1348
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
mov dword [ebp - 0x150], 0xffffffff
mov dword [ebp - 0x860], 0x29aa810d
mov dword [ebp - 0xad0], 1
mov dword [ebp - 0x54c], 0xffffffff
mov dword [ebp - 0x445c], 2
mov dword [ebp - 0x3e4], 0
jmp 0x4534de
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 2
jge 0x4534fa
mov eax, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0x5460], 0xfffffff9
jmp 0x4534d1
mov dword [ebp - 0x3e4], 0
jmp 0x453513
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 4
jge 0x45352f
mov eax, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0x6780], 0xffffffff
jmp 0x453506
mov dword [ebp - 0x150], 0
jmp 0x453548
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x16
jle 0x4535b6
mov dword [ebp - 0xde0], 0xdf251d69
mov byte [ebp - 0x4a5], 0
movzx eax, byte [ebp - 0x4a5]
test eax, eax
je 0x453579
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
mov dword [ebp - 0xde0], 0
jmp 0x453592
mov eax, dword [ebp - 0xde0]
dec eax
mov dword [ebp - 0xde0], eax
cmp dword [ebp - 0xde0], 0xffffffea
jne 0x4535b4
cmp dword [ebp - 0x150], 0
je 0x4535a6
jmp 0x4535b4
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x860], eax
jmp 0x453585
jmp 0x45353b
mov eax, dword [ebp - 0x860]
dec eax
cmp eax, dword [ebp - 0x54c]
jg 0x4535d1
mov dword [ebp - 0x4454], 1
jmp 0x4535d8
and dword [ebp - 0x4454], 0
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x57f0], eax
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x57f8], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x5800], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x5808], eax
cmp dword [ebp - 0x54c], 0
jne 0x453623
cmp dword [ebp - 0xad0], 0
jne 0x453623
and dword [ebp - 0x1370], 0
jmp 0x45362d
mov dword [ebp - 0x1370], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1370]
mov dword [ebp + eax - 0x5460], ecx
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x1370]
mov ecx, dword [ebp - 0x150]
imul ecx, dword [ebp - 0x860]
cmp ecx, eax
jg 0x453672
cmp dword [ebp - 0x860], 0
je 0x453672
mov dword [ebp - 0x1778], 1
jmp 0x453679
and dword [ebp - 0x1778], 0
mov eax, dword [ebp - 0xad0]
cmp dword [ebp - 0x1778], eax
jl 0x453693
mov dword [ebp - 0x34d0], 1
jmp 0x45369a
and dword [ebp - 0x34d0], 0
mov eax, dword [ebp - 0x34d0]
sub eax, dword [ebp - 0x150]
cmp eax, 1
jle 0x4536b7
mov dword [ebp - 0x1780], 1
jmp 0x4536be
and dword [ebp - 0x1780], 0
mov eax, dword [ebp - 0x860]
cmp dword [ebp - 0x1780], eax
jle 0x4536de
cmp dword [ebp - 0x860], 0
jne 0x4536de
and dword [ebp - 0x34d8], 0
jmp 0x4536e8
mov dword [ebp - 0x34d8], 1
cmp dword [ebp - 0x34d8], 0xfffffffa
jne 0x4536ff
xor eax, eax
inc eax
jne 0x4536ff
and dword [ebp - 0x1788], 0
jmp 0x453709
mov dword [ebp - 0x1788], 1
mov eax, dword [ebp - 0x54c]
cmp dword [ebp - 0x1788], eax
jg 0x453723
mov dword [ebp - 0x34e0], 1
jmp 0x45372a
and dword [ebp - 0x34e0], 0
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x34e0]
test eax, eax
jne 0x45374d
cmp dword [ebp - 0x445c], 0
jne 0x45374d
and dword [ebp - 0x4464], 0
jmp 0x453757
mov dword [ebp - 0x4464], 1
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x5810], eax
cmp dword [ebp - 0x54c], 0xffffffff
jle 0x453778
mov dword [ebp - 0x1790], 1
jmp 0x45377f
and dword [ebp - 0x1790], 0
mov eax, dword [ebp - 0x54c]
cmp dword [ebp - 0x1790], eax
jle 0x453799
mov dword [ebp - 0x34e8], 1
jmp 0x4537a0
and dword [ebp - 0x34e8], 0
mov eax, dword [ebp - 0x54c]
imul eax, dword [ebp - 0x34e8]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x6780], eax
mov dword [ebp - 0x1028], 0x7ddc85f7
mov dword [ebp - 0x1028], 0
jmp 0x4537dc
mov eax, dword [ebp - 0x1028]
inc eax
mov dword [ebp - 0x1028], eax
cmp dword [ebp - 0x1028], 0x1c
je 0x4538fe
push 3
lea ecx, [ebp - 0x4e70]
call fcn.0040fd61
push 1
lea ecx, [ebp - 0x3e18]
call fcn.0040fd61
mov dword [ebp - 0x248], 0
jmp 0x45381c
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x45383e
push dword [ebp - 0x248]
lea ecx, [ebp - 0x4e70]
call fcn.0040fe4f
mov dword [eax], 0x6158d32f
jmp 0x45380f
mov dword [ebp - 0x248], 0
jmp 0x453857
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x453879
push dword [ebp - 0x248]
lea ecx, [ebp - 0x3e18]
call fcn.0040fe4f
mov dword [eax], 0xd3b3152c
jmp 0x45384a
push 0
lea ecx, [ebp - 0x3e18]
call fcn.0040fe4f
and dword [eax], 0
jmp 0x4538af
push 0
lea ecx, [ebp - 0x3e18]
call fcn.0040fe4f
mov dword [ebp - 0x1798], eax
mov eax, dword [ebp - 0x1798]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1798]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3e18]
call fcn.0040fe4f
cmp dword [eax], 3
jge 0x4538e3
push 0
lea ecx, [ebp - 0x3e18]
call fcn.0040fe4f
push dword [eax]
lea ecx, [ebp - 0x4e70]
call fcn.0040fe4f
mov dword [eax], 0xa77c874
jmp 0x45388b
lea ecx, [ebp - 0x3e18]
call fcn.0040fe33
lea ecx, [ebp - 0x4e70]
call fcn.0040fe33
jmp 0x4537cf
mov dword [ebp - 0x35b0], 4
mov dword [ebp - 0x798], 0x9d29be1d
mov dword [ebp - 0x4d7c], 3
mov dword [ebp - 0x4d78], 3
mov dword [ebp - 0x4d74], 3
mov dword [ebp - 0x4d70], 3
lea ecx, [ebp - 0x1175]
call fcn.0040fe5e
push eax
lea eax, [ebp - 0x4d6c]
push eax
lea eax, [ebp - 0x4d7c]
push eax
lea ecx, [ebp - 0x6658]
call fcn.0040fe61
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4e88]
call fcn.0040fe0d
mov dword [ebp - 0x798], 0xe0648261
mov dword [ebp - 0x798], 3
jmp 0x453992
mov eax, dword [ebp - 0x798]
dec eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0
jl 0x453a45
mov dword [ebp - 0xad8], 0
jmp 0x4539b8
mov eax, dword [ebp - 0xad8]
inc eax
mov dword [ebp - 0xad8], eax
cmp dword [ebp - 0xad8], 1
jge 0x4539d4
mov eax, dword [ebp - 0xad8]
mov dword [ebp + eax*4 - 0xde8], 0xd9ba07e4
jmp 0x4539ab
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xde8], 3
jmp 0x453a02
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xde8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xde8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xde8], 0
jl 0x453a40
push dword [ebp - 0x798]
lea ecx, [ebp - 0x4e88]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x453a2a
jmp 0x453a40
push 0
lea ecx, [ebp - 0x4e88]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x453a3e
jmp 0x453a40
jmp 0x4539e7
jmp 0x453985
lea ecx, [ebp - 0x4e88]
call fcn.0040fe33
mov dword [ebp - 0x44dc], 0xe0d1
mov dword [ebp - 0x420], 0xb9f9b31
mov dword [ebp - 0x5818], 0x85ffff32
mov dword [ebp - 0x4484], 0xffffffff
mov dword [ebp - 0x5820], 0x975a1448
mov dword [ebp - 0x5828], 0x2cac2457
mov dword [ebp - 0x447c], 0xbdbb389e
mov dword [ebp - 0x420], 0
jmp 0x453aaf
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 6
jle 0x453fd0
mov dword [ebp - 0x554], 0
mov dword [ebp - 0x5830], 0xffffffff
mov dword [ebp - 0x5838], 0xd2c643d4
mov dword [ebp - 0x5840], 0xffffffff
mov dword [ebp - 0x370], 0
jmp 0x453afd
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x453b19
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x4b98], 1
jmp 0x453af0
mov dword [ebp - 0x370], 0
jmp 0x453b32
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 3
jge 0x453b4e
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x64ac], 0xc86797b6
jmp 0x453b25
mov dword [ebp - 0x554], 0xffffffe3
jmp 0x453b67
mov eax, dword [ebp - 0x554]
inc eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0xfffffff5
jg 0x453fcb
push 2
lea ecx, [ebp - 0x3e6c]
call fcn.0040fd61
mov dword [ebp - 0x3ec], 8
mov dword [ebp - 0xae0], 0xea311c3f
mov dword [ebp - 0x17b8], 1
mov dword [ebp - 0x11a8], 0xfff9
mov dword [ebp - 0x250], 0
jmp 0x453bc2
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x453be4
push dword [ebp - 0x250]
lea ecx, [ebp - 0x3e6c]
call fcn.0040fe4f
mov dword [eax], 0xf6dd
jmp 0x453bb5
mov dword [ebp - 0x250], 0
jmp 0x453bfd
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x453c19
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x5eb0], 1
jmp 0x453bf0
mov dword [ebp - 0x3ec], 1
jmp 0x453c32
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0
jl 0x453def
mov dword [ebp - 0x3508], 0xffff
mov dword [ebp - 0x446c], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x5848], eax
mov dword [ebp - 0xae0], 1
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0xae0], eax
jne 0x453c83
mov dword [ebp - 0x34f0], 1
jmp 0x453c8a
and dword [ebp - 0x34f0], 0
cmp dword [ebp - 0x34f0], 0x52a42bbd
jge 0x453ca2
mov dword [ebp - 0x17a0], 1
jmp 0x453ca9
and dword [ebp - 0x17a0], 0
cmp dword [ebp - 0x17a0], 0xfffffffa
jae 0x453cbe
mov dword [ebp - 0x34f8], 1
jmp 0x453cc5
and dword [ebp - 0x34f8], 0
mov eax, dword [ebp - 0x34f8]
sub eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0x3508]
jne 0x453ce5
mov dword [ebp - 0x17a8], 1
jmp 0x453cec
and dword [ebp - 0x17a8], 0
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0x17a8]
cmp eax, dword [ebp - 0x554]
jg 0x453d0c
mov dword [ebp - 0x3500], 1
jmp 0x453d13
and dword [ebp - 0x3500], 0
cmp dword [ebp - 0x3500], 0xa3205f5
je 0x453d2b
mov dword [ebp - 0x17b0], 1
jmp 0x453d32
and dword [ebp - 0x17b0], 0
push dword [ebp - 0x3ec]
lea ecx, [ebp - 0x3e6c]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x17b0]
add ecx, dword [eax]
mov dword [ebp - 0x17b8], ecx
mov esi, dword [ebp - 0x3508]
add esi, dword [ebp - 0x17b8]
push dword [ebp - 0x3ec]
lea ecx, [ebp - 0x3e6c]
call fcn.0040fe4f
cmp dword [eax], esi
jne 0x453d8b
mov eax, 0xa198
test eax, eax
jne 0x453d8b
push 8
pop eax
test eax, eax
jne 0x453d8b
and dword [ebp - 0x3510], 0
jmp 0x453d95
mov dword [ebp - 0x3510], 1
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x3510], eax
jle 0x453daf
mov dword [ebp - 0x17c0], 1
jmp 0x453db6
and dword [ebp - 0x17c0], 0
mov eax, dword [ebp - 0x17c0]
mov dword [ebp - 0x446c], eax
mov byte [ebp - 0x743], 0
movzx eax, byte [ebp - 0x743]
test eax, eax
je 0x453dea
push 0
push 0
push 0x22fe
push 0x1731
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
jmp 0x453c25
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x5850], eax
mov eax, dword [ebp - 0x11a8]
dec eax
mov dword [ebp - 0x11a8], eax
mov eax, dword [ebp - 0xae0]
imul eax, dword [ebp - 0x11a8]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4b98]
cmp dword [ebp - 0x3ec], eax
jle 0x453e3c
mov dword [ebp - 0x3518], 1
jmp 0x453e43
and dword [ebp - 0x3518], 0
cmp dword [ebp - 0x3518], 0x1cd4
jl 0x453e5b
mov dword [ebp - 0x17c8], 1
jmp 0x453e62
and dword [ebp - 0x17c8], 0
mov eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0x17c8]
je 0x453e7c
mov dword [ebp - 0x3520], 1
jmp 0x453e83
and dword [ebp - 0x3520], 0
push 0
lea ecx, [ebp - 0x3e6c]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x3520]
cmp ecx, dword [eax]
jle 0x453ea6
mov dword [ebp - 0x1478], 1
jmp 0x453ead
and dword [ebp - 0x1478], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1478]
mov dword [ebp + eax - 0x64ac], ecx
push 0
lea ecx, [ebp - 0x3e6c]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x1478]
cmp ecx, dword [eax]
je 0x453ee2
mov dword [ebp - 0x4474], 1
jmp 0x453ee9
and dword [ebp - 0x4474], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5eb0]
mov dword [ebp - 0x5858], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x5eb0]
cmp dword [ebp + eax - 0x4b98], ecx
je 0x453f23
mov dword [ebp - 0x17d0], 1
jmp 0x453f2a
and dword [ebp - 0x17d0], 0
mov eax, dword [ebp - 0xae0]
cmp dword [ebp - 0x17d0], eax
jl 0x453f44
mov dword [ebp - 0x3528], 1
jmp 0x453f4b
and dword [ebp - 0x3528], 0
cmp dword [ebp - 0x3528], 0xdf100f83
jae 0x453f63
mov dword [ebp - 0x17d8], 1
jmp 0x453f6a
and dword [ebp - 0x17d8], 0
mov eax, dword [ebp - 0x17d8]
add eax, 0x6cdf50b9
jne 0x453f89
cmp dword [ebp - 0x447c], 0
jne 0x453f89
and dword [ebp - 0x3530], 0
jmp 0x453f93
mov dword [ebp - 0x3530], 1
cmp dword [ebp - 0x3530], 9
jge 0x453fa8
mov dword [ebp - 0x17e0], 1
jmp 0x453faf
and dword [ebp - 0x17e0], 0
mov eax, dword [ebp - 0x17e0]
mov dword [ebp - 0x4484], eax
lea ecx, [ebp - 0x3e6c]
call fcn.0040fe33
jmp 0x453b5a
jmp 0x453aa2
mov dword [ebp - 0x44cc], 0x748dc164
mov dword [ebp - 0x564], 0xfffffff7
mov dword [ebp - 0x55c], 0xfffffffb
mov dword [ebp - 0x44a4], 0xeec73f5c
mov dword [ebp - 0x564], 0
jmp 0x454011
mov eax, dword [ebp - 0x564]
dec eax
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0xffffffef
je 0x4542e6
mov dword [ebp - 0xf70], 1
mov dword [ebp - 0x44ac], 0xcb4e347
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x55c], 0
jmp 0x454057
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 0xf
je 0x4542e1
push 2
lea ecx, [ebp - 0x4734]
call fcn.0040fd61
mov dword [ebp - 0x448c], 0xffffffff
mov dword [ebp - 0x3560], 0
mov dword [ebp - 0x1800], 0xffffffff
mov dword [ebp - 0x3558], 0x12ef314d
mov dword [ebp - 0x258], 0
jmp 0x4540b2
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x4540d4
push dword [ebp - 0x258]
lea ecx, [ebp - 0x4734]
call fcn.0040fe4f
mov dword [eax], 0x7e08
jmp 0x4540a5
mov dword [ebp - 0x258], 0
jmp 0x4540ed
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 3
jge 0x454109
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x6434], 0x8f27142b
jmp 0x4540e0
mov esi, dword [ebp - 0xf70]
push 1
lea ecx, [ebp - 0x4734]
call fcn.0040fe4f
add esi, dword [eax]
je 0x45427c
imul eax, dword [ebp - 0x55c], 0xfffffffa
add eax, dword [ebp - 0x448c]
cmp eax, 0x1ba8
jl 0x454144
mov dword [ebp - 0x3538], 1
jmp 0x45414b
and dword [ebp - 0x3538], 0
push 1
lea ecx, [ebp - 0x4734]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x3538]
cmp ecx, dword [eax]
jle 0x45416e
mov dword [ebp - 0x17e8], 1
jmp 0x454175
and dword [ebp - 0x17e8], 0
push 1
lea ecx, [ebp - 0x4734]
call fcn.0040fe4f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x17e8]
jne 0x454198
mov dword [ebp - 0x4494], 1
jmp 0x45419f
and dword [ebp - 0x4494], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3560]
cmp dword [ebp + eax - 0x6434], ecx
jg 0x4541c0
mov dword [ebp - 0x3540], 1
jmp 0x4541c7
and dword [ebp - 0x3540], 0
mov eax, dword [ebp - 0x564]
cmp dword [ebp - 0x3540], eax
jge 0x4541e1
mov dword [ebp - 0x449c], 1
jmp 0x4541e8
and dword [ebp - 0x449c], 0
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0x5860], eax
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0x5868], eax
cmp dword [ebp - 0x55c], 0
je 0x454215
mov dword [ebp - 0x17f0], 1
jmp 0x45421c
and dword [ebp - 0x17f0], 0
mov eax, dword [ebp - 0x17f0]
sub eax, dword [ebp - 0x564]
cmp eax, 0xfff9
ja 0x45423b
mov dword [ebp - 0x3548], 1
jmp 0x454242
and dword [ebp - 0x3548], 0
mov eax, dword [ebp - 0x1800]
cmp dword [ebp - 0x3548], eax
jle 0x45425c
mov dword [ebp - 0x17f8], 1
jmp 0x454263
and dword [ebp - 0x17f8], 0
mov eax, dword [ebp - 0x17f8]
sub eax, 0xe311
je 0x45427c
mov dword [ebp - 0x3550], 1
jmp 0x454283
and dword [ebp - 0x3550], 0
mov eax, dword [ebp - 0x3550]
mov dword [ebp - 0x3558], eax
mov eax, dword [ebp - 0x1800]
cmp dword [ebp - 0x3558], eax
jle 0x4542af
cmp dword [ebp - 0xf70], 0
jne 0x4542af
and dword [ebp - 0x1808], 0
jmp 0x4542b9
mov dword [ebp - 0x1808], 1
mov eax, dword [ebp - 0x1808]
mov dword [ebp - 0x44a4], eax
mov eax, dword [ebp - 0x3560]
mov dword [ebp - 0x44ac], eax
lea ecx, [ebp - 0x4734]
call fcn.0040fe33
jmp 0x45404a
jmp 0x454004
mov dword [ebp - 0x44d4], 0x2f34e401
mov dword [ebp - 0x5870], 0x2eb90da1
mov dword [ebp - 0x5878], 9
mov dword [ebp - 0x5880], 0x4c3c69ae
mov dword [ebp - 0x5888], 0
mov dword [ebp - 0x5890], 0x72226312
push 3
lea ecx, [ebp - 0x5ec0]
call fcn.0040fd61
mov dword [ebp - 0x378], 0
jmp 0x454348
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 3
jge 0x45436a
push dword [ebp - 0x378]
lea ecx, [ebp - 0x5ec0]
call fcn.0040fe4f
mov dword [eax], 0xfffffffb
jmp 0x45433b
mov dword [ebp - 0x378], 0
jmp 0x454383
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 4
jge 0x45439f
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x63b4], 0
jmp 0x454376
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x63b4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x63b4], eax
mov byte [ebp - 0x4a7], 0
movzx eax, byte [ebp - 0x4a7]
test eax, eax
je 0x4543dc
push 0x20
push 0x234a
push 0x2525
call dword [sym.imp.KERNEL32.dll_HeapCreate]
lea ecx, [ebp - 0x5ec0]
call fcn.0040fe33
mov dword [ebp - 0x1378], 6
mov dword [ebp - 0x1860], 0xfff9
mov dword [ebp - 0xdf0], 0
mov dword [ebp - 0x1810], 4
mov dword [ebp - 0x44b4], 0x9a971867
mov dword [ebp - 0xae8], 0
jmp 0x454432
mov eax, dword [ebp - 0xae8]
inc eax
mov dword [ebp - 0xae8], eax
cmp dword [ebp - 0xae8], 3
jge 0x45444e
mov eax, dword [ebp - 0xae8]
mov dword [ebp + eax*4 - 0x4ea0], 0xdb50
jmp 0x454425
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4ea0]
mov dword [ebp - 0xdf0], eax
cmp dword [ebp - 0xdf0], 0
je 0x45449c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4ea0]
mov dword [ebp - 0x1810], eax
mov eax, dword [ebp - 0x1810]
mov dword [ebp - 0xdf0], eax
cmp dword [ebp - 0xdf0], 0
je 0x45449c
mov dword [ebp - 0x3568], 1
jmp 0x4544a3
and dword [ebp - 0x3568], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4ea0]
sub eax, dword [ebp - 0x3568]
mov dword [ebp - 0x44b4], eax
mov byte [ebp - 0x655], 0
movzx eax, byte [ebp - 0x655]
test eax, eax
je 0x4544d9
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
mov dword [ebp - 0x44ec], 0xfffffff8
push 1
lea ecx, [ebp - 0x1528]
call fcn.0040fd61
mov dword [ebp - 0x5250], 0xfffffff9
mov dword [ebp - 0x524c], 0xfffffff9
mov dword [ebp - 0x5248], 0xfffffff9
mov dword [ebp - 0x5244], 0xfffffff9
mov dword [ebp - 0x5898], 0xffffffff
mov dword [ebp - 0x1818], 0xffffffff
mov dword [ebp - 0x1820], 0x112def90
mov dword [ebp - 0x1828], 0x8ddac0fa
push 1
lea ecx, [ebp - 0x4eb8]
call fcn.0040fd61
mov dword [ebp - 0xa0], 0
jmp 0x454566
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x454585
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
and dword [eax], 0
jmp 0x454559
mov dword [ebp - 0xa0], 0
jmp 0x45459e
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x4545ba
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x5ed0], 0xfffffff9
jmp 0x454591
mov dword [ebp - 0xa0], 0
jmp 0x4545d3
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x4545f2
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x4eb8]
call fcn.0040fe4f
and dword [eax], 0
jmp 0x4545c6
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov dword [eax], 0x4a6847df
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov esi, eax
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x454633
mov dword [ebp - 0x11b0], 1
jmp 0x45463a
and dword [ebp - 0x11b0], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x11b0]
mov dword [ebp + eax - 0x5250], ecx
mov eax, dword [ebp - 0x11b0]
inc eax
mov dword [ebp - 0x1818], eax
cmp dword [ebp - 0x1818], 0x6bb2
jg 0x454672
mov dword [ebp - 0x3570], 1
jmp 0x454679
and dword [ebp - 0x3570], 0
mov eax, dword [ebp - 0x3570]
mov dword [ebp - 0x1820], eax
mov esi, dword [ebp - 0x1820]
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
cmp esi, dword [eax]
jne 0x4546a8
mov dword [ebp - 0x3578], 1
jmp 0x4546af
and dword [ebp - 0x3578], 0
mov eax, dword [ebp - 0x1828]
cmp dword [ebp - 0x3578], eax
jl 0x4546c9
mov dword [ebp - 0x44bc], 1
jmp 0x4546d0
and dword [ebp - 0x44bc], 0
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov eax, dword [ebp - 0x1828]
mov dword [ebp - 0x58a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5ed0], 0x8486
je 0x454708
mov dword [ebp - 0x3580], 1
jmp 0x45470f
and dword [ebp - 0x3580], 0
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x3580]
cmp ecx, dword [eax]
jge 0x454734
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5ed0], 0
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov esi, eax
push 0
lea ecx, [ebp - 0x1528]
call fcn.0040fe4f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x454762
mov dword [ebp - 0x1830], 1
jmp 0x454769
and dword [ebp - 0x1830], 0
push 0
lea ecx, [ebp - 0x4eb8]
call fcn.0040fe4f
mov ecx, dword [ebp - 0x1830]
mov dword [eax], ecx
lea ecx, [ebp - 0x4eb8]
call fcn.0040fe33
lea ecx, [ebp - 0x1528]
call fcn.0040fe33
push 4
lea ecx, [ebp - 0x3b28]
call fcn.0040fd61
mov dword [ebp - 0x120], 0x252cb136
mov dword [ebp - 0x3598], 0xa720
mov dword [ebp - 0xaf0], 0
jmp 0x4547ce
mov eax, dword [ebp - 0xaf0]
inc eax
mov dword [ebp - 0xaf0], eax
cmp dword [ebp - 0xaf0], 4
jge 0x4547f0
push dword [ebp - 0xaf0]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
mov dword [eax], 8
jmp 0x4547c1
mov dword [ebp - 0x120], 3
jmp 0x454809
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x454982
mov dword [ebp - 0x970], 0x2ff18c9a
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x58a8], eax
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
mov esi, dword [eax]
add esi, 0x31c587c7
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
imul esi, dword [eax]
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
cmp esi, dword [eax]
je 0x45487a
mov dword [ebp - 0x44c4], 1
jmp 0x454881
and dword [ebp - 0x44c4], 0
mov eax, dword [ebp - 0x970]
sub eax, dword [ebp - 0x3598]
cmp eax, dword [ebp - 0x970]
je 0x4548a1
mov dword [ebp - 0x3588], 1
jmp 0x4548a8
and dword [ebp - 0x3588], 0
cmp dword [ebp - 0x3588], 0
jbe 0x4548bd
mov dword [ebp - 0x1838], 1
jmp 0x4548c4
and dword [ebp - 0x1838], 0
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
mov eax, dword [eax]
imul eax, dword [ebp - 0x1838]
cmp eax, 0x76ec
jle 0x4548f1
mov dword [ebp - 0x3590], 1
jmp 0x4548f8
and dword [ebp - 0x3590], 0
mov eax, dword [ebp - 0x3590]
sub eax, dword [ebp - 0x970]
cmp eax, dword [ebp - 0x120]
je 0x454918
mov dword [ebp - 0x1840], 1
jmp 0x45491f
and dword [ebp - 0x1840], 0
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
mov esi, dword [eax]
add esi, dword [ebp - 0x1840]
imul esi, dword [ebp - 0x3598]
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3b28]
call fcn.0040fe4f
cmp esi, dword [eax]
je 0x454960
mov dword [ebp - 0x1848], 1
jmp 0x454967
and dword [ebp - 0x1848], 0
mov eax, dword [ebp - 0x1848]
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x970], 0
jmp 0x4547fc
lea ecx, [ebp - 0x3b28]
call fcn.0040fe33
mov dword [ebp - 0x1088], 0
jmp 0x4549a6
mov eax, dword [ebp - 0x1088]
inc eax
mov dword [ebp - 0x1088], eax
cmp dword [ebp - 0x1088], 4
jge 0x4549c2
mov eax, dword [ebp - 0x1088]
mov dword [ebp + eax*4 - 0x6638], 0x5eb20068
jmp 0x454999
cmp dword [ebp - 0x35b0], 0
je 0x454a37
cmp dword [ebp - 0x44cc], 0xfffffff6
jge 0x4549e0
mov dword [ebp - 0x35a0], 1
jmp 0x4549e7
and dword [ebp - 0x35a0], 0
mov eax, dword [ebp - 0x44d4]
add eax, dword [ebp - 0x35a0]
cmp eax, 0x380a
jg 0x454a06
mov dword [ebp - 0x1850], 1
jmp 0x454a0d
and dword [ebp - 0x1850], 0
imul eax, dword [ebp - 0x1378], 0
mov ecx, dword [ebp - 0x1850]
mov edx, dword [ebp - 0x1378]
dec edx
mov dword [ebp - 0x1378], edx
cmp eax, ecx
jle 0x454a37
mov dword [ebp - 0x35a8], 1
jmp 0x454a3e
and dword [ebp - 0x35a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6638]
add eax, dword [ebp - 0x35a8]
jne 0x454a60
xor eax, eax
jne 0x454a60
and dword [ebp - 0x1858], 0
jmp 0x454a6a
mov dword [ebp - 0x1858], 1
mov eax, dword [ebp - 0x1858]
mov dword [ebp - 0x1860], eax
mov eax, dword [ebp - 0x35b0]
cmp dword [ebp - 0x1860], eax
jge 0x454a90
mov dword [ebp - 0x35b8], 1
jmp 0x454a97
and dword [ebp - 0x35b8], 0
mov eax, dword [ebp - 0x44dc]
cmp dword [ebp - 0x35b8], eax
jge 0x454ab1
mov dword [ebp - 0x44e4], 1
jmp 0x454ab8
and dword [ebp - 0x44e4], 0
mov dword [ebp - 0x44ec], 0xdd3610cb
mov dword [ebp - 0x8e8], 0xfcb50bf3
mov dword [ebp - 0xaf8], 0
jmp 0x454ae5
mov eax, dword [ebp - 0xaf8]
inc eax
mov dword [ebp - 0xaf8], eax
cmp dword [ebp - 0xaf8], 3
jge 0x454b01
mov eax, dword [ebp - 0xaf8]
mov dword [ebp + eax*4 - 0x64f4], 0xeac8b13e
jmp 0x454ad8
mov byte [ebp - 0x4a9], 0
movzx eax, byte [ebp - 0x4a9]
test eax, eax
je 0x454b33
push 0
push 0x1986
push 0x7b4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x8e8], 0
jmp 0x454b4c
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 3
jge 0x454b68
mov eax, dword [ebp - 0x8e8]
mov dword [ebp + eax*4 - 0x64f4], 0xda0e60f9
jmp 0x454b3f
mov dword [ebp - 0xdf8], 0
jmp 0x454b81
mov eax, dword [ebp - 0xdf8]
inc eax
mov dword [ebp - 0xdf8], eax
cmp dword [ebp - 0xdf8], 2
jge 0x454b9d
mov eax, dword [ebp - 0xdf8]
mov dword [ebp + eax*4 - 0x6670], 0xf0ea
jmp 0x454b74
mov byte [ebp - 0x745], 0
movzx eax, byte [ebp - 0x745]
test eax, eax
je 0x454bcd
push 0xeef
push 0x1177
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
mov byte [ebp - 0x4ab], 0
movzx eax, byte [ebp - 0x4ab]
test eax, eax
je 0x454be7
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x178], 0xfffffffd
mov dword [ebp - 0x1870], 0xbc657e3b
mov dword [ebp - 0xb00], 0
jmp 0x454c14
mov eax, dword [ebp - 0xb00]
inc eax
mov dword [ebp - 0xb00], eax
cmp dword [ebp - 0xb00], 3
jge 0x454c30
mov eax, dword [ebp - 0xb00]
mov dword [ebp + eax*4 - 0x3b38], 0
jmp 0x454c07
mov dword [ebp - 0x178], 0
jmp 0x454c49
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jg 0x454d55
mov dword [ebp - 0x44fc], 1
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x178]
mov ecx, dword [ebp + ecx*4 - 0x3b38]
cmp dword [ebp + eax*4 - 0x3b38], ecx
jle 0x454c88
mov dword [ebp - 0x44f4], 1
jmp 0x454c8f
and dword [ebp - 0x44f4], 0
mov eax, dword [ebp - 0x44fc]
mov dword [ebp - 0x58b0], eax
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x3b38]
cmp dword [ebp - 0x178], eax
jle 0x454cbc
mov dword [ebp - 0x1868], 1
jmp 0x454cc3
and dword [ebp - 0x1868], 0
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x3b38]
imul eax, dword [ebp - 0x1868]
cmp eax, 0xfffffff8
jl 0x454ce8
mov dword [ebp - 0x4504], 1
jmp 0x454cef
and dword [ebp - 0x4504], 0
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x3b38]
mov dword [ebp - 0x58b8], eax
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0x3b38]
mov dword [ebp - 0x58c0], eax
mov eax, dword [ebp - 0x178]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3b38]
cmp dword [ebp + eax*4 - 0x3b38], ecx
jg 0x454d3d
mov dword [ebp - 0x35c0], 1
jmp 0x454d44
and dword [ebp - 0x35c0], 0
mov eax, dword [ebp - 0x35c0]
mov dword [ebp - 0x1870], eax
jmp 0x454c3c
mov dword [ebp - 0x1870], 0x7ab6dad8
mov dword [ebp - 0x194], 0x63e8
mov dword [ebp - 0x35e0], 0xb5486b6f
mov dword [ebp - 0x1880], 1
mov dword [ebp - 0x1508], 0x7b88
mov dword [ebp - 0x11c0], 0
mov dword [ebp - 0x3600], 0xffffffff
mov dword [ebp - 0x18b8], 0x6f944dcd
mov dword [ebp - 0x450c], 4
mov dword [ebp - 0xf78], 0
jmp 0x454dc8
mov eax, dword [ebp - 0xf78]
inc eax
mov dword [ebp - 0xf78], eax
cmp dword [ebp - 0xf78], 1
jge 0x454de4
mov eax, dword [ebp - 0xf78]
mov dword [ebp + eax*4 - 0x11b8], 0x9bacc5d9
jmp 0x454dbb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11b8]
mov dword [ebp - 0x35c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x35c8]
mov dword [ebp + eax - 0x11b8], ecx
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x35c8]
mov edx, dword [ebp - 0x194]
dec edx
mov dword [ebp - 0x194], edx
cmp eax, ecx
je 0x454f69
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x194]
cmp dword [ebp - 0x194], eax
jg 0x454e4b
mov dword [ebp - 0x1878], 1
jmp 0x454e52
and dword [ebp - 0x1878], 0
cmp dword [ebp - 0x1878], 0
je 0x454e70
cmp dword [ebp - 0x194], 0
je 0x454e70
mov dword [ebp - 0x35d0], 1
jmp 0x454e77
and dword [ebp - 0x35d0], 0
mov eax, dword [ebp - 0x35d0]
dec eax
mov dword [ebp - 0x1880], eax
mov eax, dword [ebp - 0x1880]
dec eax
cmp eax, 0x9d5b611f
jne 0x454e9e
mov dword [ebp - 0x35d8], 1
jmp 0x454ea5
and dword [ebp - 0x35d8], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x35d8], eax
jge 0x454ebf
mov dword [ebp - 0x1888], 1
jmp 0x454ec6
and dword [ebp - 0x1888], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x1888], eax
je 0x454ee0
mov dword [ebp - 0x35e8], 1
jmp 0x454ee7
and dword [ebp - 0x35e8], 0
mov dword [ebp - 0x35e0], 0xf33f
mov eax, dword [ebp - 0x35e0]
mov dword [ebp - 0x1890], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1890]
mov dword [ebp + eax - 0x11b8], ecx
mov eax, dword [ebp - 0x1890]
add eax, dword [ebp - 0x35e8]
jne 0x454f30
cmp dword [ebp - 0x194], 0
jne 0x454f30
and dword [ebp - 0x1898], 0
jmp 0x454f3a
mov dword [ebp - 0x1898], 1
mov eax, dword [ebp - 0x1508]
cmp dword [ebp - 0x1898], eax
jge 0x454f54
mov dword [ebp - 0x35f0], 1
jmp 0x454f5b
and dword [ebp - 0x35f0], 0
mov eax, dword [ebp - 0x35f0]
sub eax, dword [ebp - 0x1508]
jne 0x454f7b
cmp dword [ebp - 0x11c0], 0
jne 0x454f7b
and dword [ebp - 0x18a0], 0
jmp 0x454f85
mov dword [ebp - 0x18a0], 1
mov eax, dword [ebp - 0x11c0]
cmp dword [ebp - 0x18a0], eax
jge 0x454f9f
mov dword [ebp - 0x35f8], 1
jmp 0x454fa6
and dword [ebp - 0x35f8], 0
mov eax, dword [ebp - 0x1508]
cmp dword [ebp - 0x35f8], eax
jge 0x454fc0
mov dword [ebp - 0x18a8], 1
jmp 0x454fc7
and dword [ebp - 0x18a8], 0
mov eax, dword [ebp - 0x18a8]
mov dword [ebp - 0x3600], eax
cmp dword [ebp - 0x3600], 0
je 0x454ff1
cmp dword [ebp - 0x194], 0
je 0x454ff1
mov dword [ebp - 0x18b0], 1
jmp 0x454ff8
and dword [ebp - 0x18b0], 0
mov eax, dword [ebp - 0x11c0]
add eax, dword [ebp - 0x18b0]
cmp eax, 0xffffffff
jle 0x455015
mov dword [ebp - 0x3608], 1
jmp 0x45501c
and dword [ebp - 0x3608], 0
mov eax, dword [ebp - 0x3608]
mov dword [ebp - 0x18b8], eax
mov eax, dword [ebp - 0x18b8]
mov dword [ebp - 0x450c], eax
mov dword [ebp - 0x128], 0xdfa860b4
mov dword [ebp - 0x58c8], 0xffffffff
push 3
lea ecx, [ebp - 0x50bc]
call fcn.0040fd61
mov dword [ebp - 0xe00], 0xfffffffb
mov dword [ebp - 0x4514], 0xfffffffc
mov dword [ebp - 0xb08], 0
jmp 0x455082
mov eax, dword [ebp - 0xb08]
inc eax
mov dword [ebp - 0xb08], eax
cmp dword [ebp - 0xb08], 3
jge 0x4550a4
push dword [ebp - 0xb08]
lea ecx, [ebp - 0x50bc]
call fcn.0040fe4f
mov dword [eax], 0x3342eb90
jmp 0x455075
mov dword [ebp - 0xe00], 2
jmp 0x4550bd
mov eax, dword [ebp - 0xe00]
dec eax
mov dword [ebp - 0xe00], eax
cmp dword [ebp - 0xe00], 0
jl 0x4550e6
mov dword [ebp - 0x4514], 0x6182eac4
push 0
lea ecx, [ebp - 0x50bc]
call fcn.0040fe4f
cmp dword [eax], 0
je 0x4550e4
jmp 0x4550e6
jmp 0x4550b0
lea ecx, [ebp - 0x50bc]
call fcn.0040fe33
mov dword [ebp - 0x58d0], 0x9dbc9b78
mov dword [ebp - 0x58d8], 0xa938f738
mov dword [ebp - 0x18d8], 0xb716
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x820], 1
mov dword [ebp - 0x9b8], 0xffffffff
mov dword [ebp - 0x1380], 0xaa1c33c0
mov dword [ebp - 0x4524], 8
mov dword [ebp - 0x260], 0
jmp 0x45515a
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jge 0x455176
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x546c], 0xffffffff
jmp 0x45514d
mov dword [ebp - 0x260], 0
jmp 0x45518f
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 1
jge 0x4551ab
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x452c], 0xe4bc795c
jmp 0x455182
cmp dword [ebp - 0x820], 0
je 0x4551c9
cmp dword [ebp - 0x478], 0
je 0x4551c9
mov dword [ebp - 0x3610], 1
jmp 0x4551d0
and dword [ebp - 0x3610], 0
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x9b8]
cmp eax, dword [ebp - 0x3610]
jge 0x4551f6
mov dword [ebp - 0x18c0], 1
jmp 0x4551fd
and dword [ebp - 0x18c0], 0
cmp dword [ebp - 0x18c0], 0x5e2de4bf
jne 0x455215
mov dword [ebp - 0x3618], 1
jmp 0x45521c
and dword [ebp - 0x3618], 0
mov eax, dword [ebp - 0x820]
cmp eax, dword [ebp - 0x3618]
jge 0x455236
mov dword [ebp - 0x18c8], 1
jmp 0x45523d
and dword [ebp - 0x18c8], 0
mov eax, dword [ebp - 0x478]
add eax, dword [ebp - 0x18c8]
cmp eax, dword [ebp - 0x478]
jne 0x45525d
mov dword [ebp - 0x3620], 1
jmp 0x455264
and dword [ebp - 0x3620], 0
mov eax, dword [ebp - 0x3620]
mov dword [ebp - 0x1380], eax
mov eax, dword [ebp - 0x478]
add eax, dword [ebp - 0x1380]
cmp eax, dword [ebp - 0x820]
jge 0x455290