Function at 0x44c0f4
Capabilities:
Check os version
Create process on windows
Get common file path
Get file attributes
Get file size
Get keyboard layout
Get system information on windows
Hide graphical window
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x35b0
call fcn.00482130
push esi
push edi
mov dword [ebp - 0x114], 0
jmp 0x44c11c
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x44c138
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x1e8c], 1
jmp 0x44c10f
mov dword [ebp - 0x114], 0
jmp 0x44c151
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x44c16d
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0xc20], 0x15252cb1
jmp 0x44c144
mov byte [ebp - 0x2ee], 0
movzx eax, byte [ebp - 0x2ee]
test eax, eax
je 0x44c190
push 1
push 0x16b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc20], 2
jmp 0x44c1be
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc20]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc20], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc20], 0
jl 0x44c36f
mov dword [ebp - 0x1d1c], 7
mov dword [ebp - 0x1d2c], 0
mov dword [ebp - 0x21b0], 0xfff9
mov eax, 0x76ec
test eax, eax
je 0x44c2d6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc20]
cmp dword [ebp + eax*4 - 0x1e8c], 0
je 0x44c275
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc20]
cmp dword [ebp + eax*4 - 0x1e8c], 0
jb 0x44c237
mov dword [ebp - 0xe6c], 1
jmp 0x44c23e
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x1d1c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc20]
imul eax, dword [ebp + eax*4 - 0x1e8c], 0
neg eax
add eax, dword [ebp - 0x1d1c]
je 0x44c275
mov dword [ebp - 0x1d24], 1
jmp 0x44c27c
and dword [ebp - 0x1d24], 0
mov eax, dword [ebp - 0x1d24]
mov dword [ebp - 0x1d2c], eax
cmp dword [ebp - 0x1d2c], 1
je 0x44c29d
mov dword [ebp - 0x1d34], 1
jmp 0x44c2a4
and dword [ebp - 0x1d34], 0
cmp dword [ebp - 0x1d34], 0xa5f27a41
jne 0x44c2bc
mov dword [ebp - 0x1d3c], 1
jmp 0x44c2c3
and dword [ebp - 0x1d3c], 0
mov eax, dword [ebp - 0x1d3c]
neg eax
je 0x44c2d6
mov eax, 0xb857
test eax, eax
jne 0x44c2f6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc20]
cmp dword [ebp + eax*4 - 0x1e8c], 0
jne 0x44c2f6
and dword [ebp - 0x1fd0], 0
jmp 0x44c300
mov dword [ebp - 0x1fd0], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc20]
mov ecx, dword [ebp + ecx*4 - 0x1e8c]
cmp dword [ebp + eax - 0x1e8c], ecx
jne 0x44c32f
mov dword [ebp - 0x1d44], 1
jmp 0x44c336
and dword [ebp - 0x1d44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8c]
cmp dword [ebp - 0x1d44], eax
jge 0x44c357
mov dword [ebp - 0x1d4c], 1
jmp 0x44c35e
and dword [ebp - 0x1d4c], 0
mov eax, dword [ebp - 0x1d4c]
mov dword [ebp - 0x21b0], eax
jmp 0x44c1a3
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x9a0], 3
mov dword [ebp - 0x5d0], 0x87b25476
mov dword [ebp - 0x1fc], 0
jmp 0x44c3a6
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x44c3c2
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x2a50], 8
jmp 0x44c399
mov dword [ebp - 0x1fc], 0
jmp 0x44c3db
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 4
jge 0x44c3f7
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x31dc], 0xe3aa9c1c
jmp 0x44c3ce
mov dword [ebp - 0x9c], 0
jmp 0x44c410
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x12
jne 0x44c83f
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x1e1c], 0xfffffffa
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x104], 0
jmp 0x44c454
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jge 0x44c470
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x940], 0x51d69f42
jmp 0x44c447
mov dword [ebp - 0x104], 0
jmp 0x44c489
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 4
jge 0x44c4a5
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x307c], 0xfffffffc
jmp 0x44c47c
mov dword [ebp - 0x504], 0
jmp 0x44c4be
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
jg 0x44c4ea
mov byte [ebp - 0x391], 0
movzx eax, byte [ebp - 0x391]
test eax, eax
je 0x44c4e8
push 0
push 0x1403
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
jmp 0x44c4b1
xor eax, eax
jne 0x44c520
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9a0]
mov dword [ebp + eax - 0x2a50], ecx
mov eax, dword [ebp - 0x9a0]
dec eax
mov dword [ebp - 0x9a0], eax
mov eax, dword [ebp - 0x9c]
inc eax
jne 0x44c520
and dword [ebp - 0x21b8], 0
jmp 0x44c52a
mov dword [ebp - 0x21b8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x940]
mov dword [ebp - 0x29f0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x940], 0
je 0x44c562
cmp dword [ebp - 0x9c], 0
je 0x44c562
mov dword [ebp - 0x1d54], 1
jmp 0x44c569
and dword [ebp - 0x1d54], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x307c]
cmp dword [ebp - 0x1d54], eax
jge 0x44c58a
mov dword [ebp - 0x1da4], 1
jmp 0x44c591
and dword [ebp - 0x1da4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x940]
cmp eax, dword [ebp - 0x1da4]
jle 0x44c5b2
mov dword [ebp - 0x1dac], 1
jmp 0x44c5b9
and dword [ebp - 0x1dac], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x1dac]
cmp eax, dword [ebp - 0x9c]
jl 0x44c5d9
mov dword [ebp - 0x1db4], 1
jmp 0x44c5e0
and dword [ebp - 0x1db4], 0
cmp dword [ebp - 0x1db4], 0x92404e54
jae 0x44c5f8
mov dword [ebp - 0xb58], 1
jmp 0x44c5ff
and dword [ebp - 0xb58], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb58]
mov dword [ebp + eax - 0x31dc], ecx
cmp dword [ebp - 0xb58], 1
je 0x44c627
mov dword [ebp - 0x1dbc], 1
jmp 0x44c62e
and dword [ebp - 0x1dbc], 0
cmp dword [ebp - 0x1dbc], 0xf851
jge 0x44c646
mov dword [ebp - 0x1dc4], 1
jmp 0x44c64d
and dword [ebp - 0x1dc4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x307c]
cmp dword [ebp - 0x1dc4], eax
jle 0x44c677
mov eax, 0xf8859284
test eax, eax
je 0x44c677
mov dword [ebp - 0x1dcc], 1
jmp 0x44c67e
and dword [ebp - 0x1dcc], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x1dcc]
cmp eax, 0xfffd
jb 0x44c69d
mov dword [ebp - 0x1dd4], 1
jmp 0x44c6a4
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0x1dd4]
add eax, 0x7bde5156
cmp eax, dword [ebp - 0x9c]
je 0x44c6c3
mov dword [ebp - 0x1ddc], 1
jmp 0x44c6ca
and dword [ebp - 0x1ddc], 0
cmp dword [ebp - 0x1ddc], 0x71c25028
jge 0x44c6e8
cmp dword [ebp - 0x4d8], 0
jne 0x44c6e8
and dword [ebp - 0x1de4], 0
jmp 0x44c6f2
mov dword [ebp - 0x1de4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x307c]
cmp dword [ebp - 0x1de4], eax
jne 0x44c713
mov dword [ebp - 0x21c0], 1
jmp 0x44c71a
and dword [ebp - 0x21c0], 0
or eax, 0xffffffff
je 0x44c72d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x31dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x940]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x1e1c], eax
mov eax, dword [ebp - 0x1e1c]
imul eax, dword [ebp - 0x5d0]
cmp eax, dword [ebp - 0x9c]
jg 0x44c76d
mov dword [ebp - 0x1e24], 1
jmp 0x44c774
and dword [ebp - 0x1e24], 0
mov eax, dword [ebp - 0x4d8]
add eax, dword [ebp - 0x1e24]
je 0x44c7a8
mov byte [ebp - 0x32c], 0
movzx eax, byte [ebp - 0x32c]
test eax, eax
je 0x44c7a3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
jmp 0x44c83a
mov dword [ebp - 0x4d8], 0x15
jmp 0x44c7c1
mov eax, dword [ebp - 0x4d8]
inc eax
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 0x1b
jg 0x44c83a
mov dword [ebp - 0x5d0], 0
jmp 0x44c7e3
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0x2d
jge 0x44c835
mov dword [ebp - 0x948], 0
jmp 0x44c805
mov eax, dword [ebp - 0x948]
inc eax
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 1
jge 0x44c821
mov eax, dword [ebp - 0x948]
mov dword [ebp + eax*4 - 0x21c8], 0xfffc
jmp 0x44c7f8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x21c8], 0
je 0x44c833
jmp 0x44c835
jmp 0x44c7d6
jmp 0x44c7b4
jmp 0x44c403
mov dword [ebp - 0x950], 0x9f9b3198
mov dword [ebp - 0x21d0], 8
mov dword [ebp - 0x950], 0xfffffff6
jmp 0x44c86c
mov eax, dword [ebp - 0x950]
inc eax
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x950], 0xfffffff9
jl 0x44c9d6
mov dword [ebp - 0x5f0], 0xe60b0cea
mov dword [ebp - 0xe0], 0x693e9323
mov dword [ebp - 0x21d8], 7
cmp dword [ebp - 0x5f0], 0
je 0x44c988
mov dword [ebp - 0x984], 0
jmp 0x44c8bd
mov eax, dword [ebp - 0x984]
inc eax
mov dword [ebp - 0x984], eax
cmp dword [ebp - 0x984], 4
jge 0x44c8d9
mov eax, dword [ebp - 0x984]
mov dword [ebp + eax*4 - 0x3300], 0xcef989b1
jmp 0x44c8b0
mov dword [ebp - 0xe0], 0xf6dd8d13
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x21d0], eax
mov dword [ebp - 0xe0], 0xfffffff8
jmp 0x44c908
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xfffffff6
jg 0x44c986
mov dword [ebp - 0x458], 0x8bb4
mov dword [ebp - 0x5f0], 0xffffffec
jmp 0x44c934
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0x2f
jl 0x44c981
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x458], 0
jmp 0x44c962
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 3
jg 0x44c97f
mov eax, dword [ebp - 0x458]
cmp dword [ebp + eax*4 - 0x3300], 0
je 0x44c97d
jmp 0x44c97f
jmp 0x44c955
jmp 0x44c927
jmp 0x44c8fb
jmp 0x44c9c6
mov dword [ebp - 0xe0], 0
jmp 0x44c9a1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jg 0x44c9c6
mov byte [ebp - 0x3e9], 0
movzx eax, byte [ebp - 0x3e9]
test eax, eax
je 0x44c9c4
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x44c994
cmp dword [ebp - 0x21d8], 0
je 0x44c9d1
jmp 0x44c9d6
jmp 0x44c85f
mov dword [ebp - 0x11c], 0xfffffffc
mov dword [ebp - 0x1b7c], 3
mov dword [ebp - 0xc30], 0x45c17473
mov dword [ebp - 0x21e8], 0xc8d46758
mov dword [ebp - 0x2924], 0
mov dword [ebp - 0x30], 0
jmp 0x44ca18
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x44ca2e
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x980], 1
jmp 0x44ca11
mov dword [ebp - 0x30], 0
jmp 0x44ca3e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x44ca54
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x32b4], 3
jmp 0x44ca37
mov dword [ebp - 0x30], 0
jmp 0x44ca64
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x44ca7a
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1b8c], 0x81826fbd
jmp 0x44ca5d
mov dword [ebp - 0x11c], 0
jmp 0x44ca93
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x44cbf9
mov dword [ebp - 0x21e0], 0xed890fc5
mov byte [ebp - 0x32e], 0
movzx eax, byte [ebp - 0x32e]
test eax, eax
je 0x44cad0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x11c]
mov ecx, dword [ebp + ecx*4 - 0x980]
cmp dword [ebp + eax*4 - 0x980], ecx
jl 0x44cbc0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x980], 0x9d58
jl 0x44cb0f
mov dword [ebp - 0xb60], 1
jmp 0x44cb16
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0xb60]
mov dword [ebp + eax*4 - 0x980], ecx
mov eax, dword [ebp - 0x1b7c]
cmp dword [ebp - 0xb60], eax
jg 0x44cb43
mov dword [ebp - 0x1d08], 1
jmp 0x44cb4a
and dword [ebp - 0x1d08], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x1d08]
je 0x44cb64
mov dword [ebp - 0x1b74], 1
jmp 0x44cb6b
and dword [ebp - 0x1b74], 0
mov eax, dword [ebp - 0x1b74]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0xc30]
imul eax, dword [ebp - 0x1b7c]
cmp dword [ebp - 0x11c], eax
jl 0x44cb98
mov dword [ebp - 0xc38], 1
jmp 0x44cb9f
and dword [ebp - 0xc38], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x32b4]
cmp dword [ebp - 0xc38], eax
jg 0x44cbc0
mov dword [ebp - 0x1b84], 1
jmp 0x44cbc7
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x21e0]
cmp dword [ebp - 0x1b84], eax
jle 0x44cbe1
mov dword [ebp - 0xc40], 1
jmp 0x44cbe8
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x21e8], eax
jmp 0x44ca86
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b8c], eax
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x124], 1
mov dword [ebp - 0xb68], 1
mov dword [ebp - 0xc90], 0xf4dad240
mov dword [ebp - 0xc98], 0xfffffff8
mov dword [ebp - 0x24c], 0
jmp 0x44cc69
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x44cc85
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x3254], 9
jmp 0x44cc5c
mov dword [ebp - 0x24c], 0
jmp 0x44cc9e
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x44ccba
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x2208], 0x87c7592e
jmp 0x44cc91
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x292c], eax
cmp dword [ebp - 0x12c], 0
je 0x44ccdb
mov dword [ebp - 0xc48], 1
jmp 0x44cce2
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0xc48]
jg 0x44ccfc
mov dword [ebp - 0x1b94], 1
jmp 0x44cd03
and dword [ebp - 0x1b94], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x1b94], eax
jle 0x44cd1d
mov dword [ebp - 0xc50], 1
jmp 0x44cd24
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc50], eax
je 0x44cd3e
mov dword [ebp - 0x1b9c], 1
jmp 0x44cd45
and dword [ebp - 0x1b9c], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x1b9c], eax
jne 0x44cd5f
mov dword [ebp - 0xc58], 1
jmp 0x44cd66
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x12c]
add eax, dword [ebp - 0xc58]
neg eax
cmp eax, dword [ebp - 0x12c]
jle 0x44cd88
mov dword [ebp - 0x1ba4], 1
jmp 0x44cd8f
and dword [ebp - 0x1ba4], 0
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x1ba4]
je 0x44cda9
mov dword [ebp - 0xc60], 1
jmp 0x44cdb0
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0xc60], eax
jg 0x44cdca
mov dword [ebp - 0x21f0], 1
jmp 0x44cdd1
and dword [ebp - 0x21f0], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x204], eax
je 0x44cdf4
mov eax, 0x7153
test eax, eax
je 0x44cdf4
mov dword [ebp - 0x1bac], 1
jmp 0x44cdfb
and dword [ebp - 0x1bac], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x1bac]
je 0x44ce15
mov dword [ebp - 0x21f8], 1
jmp 0x44ce1c
and dword [ebp - 0x21f8], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x2934], eax
mov dword [ebp - 0xb68], 3
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x293c], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x2944], eax
cmp dword [ebp - 0x204], 0
je 0x44ce68
cmp dword [ebp - 0x124], 0
je 0x44ce68
mov dword [ebp - 0xc68], 1
jmp 0x44ce6f
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc68], eax
jle 0x44ce89
mov dword [ebp - 0x1bb4], 1
jmp 0x44ce90
and dword [ebp - 0x1bb4], 0
cmp dword [ebp - 0x1bb4], 3
ja 0x44cea5
mov dword [ebp - 0xc70], 1
jmp 0x44ceac
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
mov dword [ebp - 0xb68], eax
cmp dword [ebp - 0x204], 0
jne 0x44ced3
cmp dword [ebp - 0xb68], 0
jne 0x44ced3
and dword [ebp - 0x1bbc], 0
jmp 0x44cedd
mov dword [ebp - 0x1bbc], 1
cmp dword [ebp - 0x1bbc], 0xb718
jge 0x44cef5
mov dword [ebp - 0xc78], 1
jmp 0x44cefc
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc78], eax
jg 0x44cf16
mov dword [ebp - 0x1bc4], 1
jmp 0x44cf1d
and dword [ebp - 0x1bc4], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x1bc4], eax
jge 0x44cf37
mov dword [ebp - 0xc80], 1
jmp 0x44cf3e
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc80], eax
jl 0x44cf58
mov dword [ebp - 0x1bcc], 1
jmp 0x44cf5f
and dword [ebp - 0x1bcc], 0
cmp dword [ebp - 0x1bcc], 8
jl 0x44cf74
mov dword [ebp - 0xc88], 1
jmp 0x44cf7b
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0xc88]
jl 0x44cf95
mov dword [ebp - 0x1bd4], 1
jmp 0x44cf9c
and dword [ebp - 0x1bd4], 0
imul eax, dword [ebp - 0x1bd4], 0x5845
mov dword [ebp - 0xc90], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0xc90], eax
jge 0x44cfc6
mov dword [ebp - 0x2200], 1
jmp 0x44cfcd
and dword [ebp - 0x2200], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x294c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3254], 0xdb12
jl 0x44cff8
mov dword [ebp - 0x1bdc], 1
jmp 0x44cfff
and dword [ebp - 0x1bdc], 0
mov eax, dword [ebp - 0x1bdc]
sub eax, dword [ebp - 0x12c]
mov dword [ebp - 0xc98], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc98]
mov dword [ebp + eax - 0x2208], ecx
mov dword [ebp - 0x5c8], 3
mov dword [ebp - 0xb84], 0xc93e3288
mov dword [ebp - 0x714], 0
jmp 0x44d051
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 4
jge 0x44d06d
mov eax, dword [ebp - 0x714]
mov dword [ebp + eax*4 - 0x253c], 0xac204e2
jmp 0x44d044
mov byte [ebp - 0x399], 0
movzx eax, byte [ebp - 0x399]
test eax, eax
je 0x44d09c
push 0xed1
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x253c], 0
jmp 0x44d0c7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x253c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x253c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x253c], 8
jl 0x44d35c
mov dword [ebp - 0xa4], 0x97f0a290
mov dword [ebp - 0x254], 0
jmp 0x44d0fd
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x44d119
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x1df4], 0xfffffffe
jmp 0x44d0f0
mov dword [ebp - 0x254], 0
jmp 0x44d132
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x44d14e
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xb70], 0xfffd
jmp 0x44d125
mov dword [ebp - 0xa4], 0
jmp 0x44d167
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jg 0x44d322
mov eax, dword [ebp - 0xa4]
cmp dword [ebp + eax*4 - 0x1df4], 0
jne 0x44d1a2
xor eax, eax
inc eax
je 0x44d1a2
mov eax, dword [ebp - 0xa4]
cmp dword [ebp + eax*4 - 0x1df4], 0
je 0x44d1a2
and dword [ebp - 0xca8], 0
jmp 0x44d1ac
mov dword [ebp - 0xca8], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp + eax*4 - 0x1df4], 0xf703
jg 0x44d1cb
mov dword [ebp - 0x1be4], 1
jmp 0x44d1d2
and dword [ebp - 0x1be4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x253c]
cmp dword [ebp - 0x1be4], eax
je 0x44d1f2
mov dword [ebp - 0xca0], 1
jmp 0x44d1f9
and dword [ebp - 0xca0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x253c]
cmp dword [ebp - 0xca0], eax
je 0x44d219
mov dword [ebp - 0x1bec], 1
jmp 0x44d220
and dword [ebp - 0x1bec], 0
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x1bec]
sub ecx, dword [ebp + eax*4 - 0x1df4]
cmp dword [ebp - 0xca8], ecx
jne 0x44d247
mov dword [ebp - 0x1bf4], 1
jmp 0x44d24e
and dword [ebp - 0x1bf4], 0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x1df4]
add eax, dword [ebp - 0x1bf4]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xb70]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb70]
jge 0x44d29a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x253c], 0
je 0x44d29a
mov dword [ebp - 0xcb0], 1
jmp 0x44d2a1
and dword [ebp - 0xcb0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcb0]
sub ecx, dword [ebp + eax - 0xb70]
cmp ecx, 0xa6c6
jl 0x44d2c8
mov dword [ebp - 0x1bfc], 1
jmp 0x44d2cf
and dword [ebp - 0x1bfc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1bfc]
sub ecx, dword [ebp + eax - 0x1df4]
mov eax, dword [ebp - 0xa4]
cmp ecx, dword [ebp + eax*4 - 0x1df4]
jne 0x44d2fd
mov dword [ebp - 0xcb8], 1
jmp 0x44d304
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x1df4]
add eax, dword [ebp - 0xcb8]
mov dword [ebp - 0x5c8], eax
jmp 0x44d15a
mov dword [ebp - 0x5c8], 0
jmp 0x44d33b
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0x14
jg 0x44d357
mov eax, dword [ebp - 0xb84]
inc eax
mov dword [ebp - 0xb84], eax
je 0x44d355
jmp 0x44d357
jmp 0x44d32e
jmp 0x44d0ae
mov dword [ebp - 0x25c], 0
jmp 0x44d375
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x44d391
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x1e98], 1
jmp 0x44d368
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x2954], 0x737a9a97
mov dword [ebp - 0x134], 0
jmp 0x44d3bb
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x44d3d7
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x295c], 0xb40194dd
jmp 0x44d3ae
mov dword [ebp - 0x134], 0
jmp 0x44d3f0
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jge 0x44d40c
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x3090], 0x66c1
jmp 0x44d3e3
cmp dword [ebp - 0x44], 0
je 0x44d472
mov dword [ebp - 0x60c], 0
jmp 0x44d42b
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 4
jge 0x44d447
mov eax, dword [ebp - 0x60c]
mov dword [ebp + eax*4 - 0x3318], 0x4f46
jmp 0x44d41e
mov dword [ebp - 0x44], 0
jmp 0x44d457
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x44d46d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x3318], 4
jmp 0x44d450
jmp 0x44d737
mov dword [ebp - 0xcd0], 0x6ba47c9d
mov dword [ebp - 0x2964], 8
mov dword [ebp - 0x296c], 0xedade098
mov dword [ebp - 0x20c], 0
jmp 0x44d4a9
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x44d4c5
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x2a5c], 0x5725d367
jmp 0x44d49c
mov dword [ebp - 0x20c], 0
jmp 0x44d4de
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x44d4fa
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x2a68], 0xd55adb51
jmp 0x44d4d1
mov dword [ebp - 0x44], 0
jmp 0x44d50a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x3b
jg 0x44d59e
mov dword [ebp - 0x13c], 0
jmp 0x44d52d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x44d549
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x2974], 0xf499
jmp 0x44d520
mov dword [ebp - 0x13c], 0
jmp 0x44d562
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x44d57e
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x32e0], 0x5e3edfa8
jmp 0x44d555
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3090]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3090], eax
jmp 0x44d503
mov dword [ebp - 0x44], 0xfffffffd
jmp 0x44d5ae
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x37
jl 0x44d737
mov dword [ebp - 0x2210], 0x25423b19
mov dword [ebp - 0x830], 0
jmp 0x44d5db
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 2
jge 0x44d5f7
mov eax, dword [ebp - 0x830]
mov dword [ebp + eax*4 - 0x1f90], 0x8ceef9a8
jmp 0x44d5ce
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f90], 0
je 0x44d60c
jmp 0x44d737
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcd0]
cmp dword [ebp + eax - 0x1f90], ecx
jne 0x44d62d
mov dword [ebp - 0x1c04], 1
jmp 0x44d634
and dword [ebp - 0x1c04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f90]
cmp dword [ebp - 0x1c04], eax
jne 0x44d655
mov dword [ebp - 0xcc0], 1
jmp 0x44d65c
and dword [ebp - 0xcc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a5c]
cmp eax, dword [ebp - 0xcc0]
jle 0x44d67d
mov dword [ebp - 0x1c0c], 1
jmp 0x44d684
and dword [ebp - 0x1c0c], 0
imul eax, dword [ebp - 0x1c0c], 0x2496
cmp eax, 0x79bdd86b
jg 0x44d6a1
mov dword [ebp - 0xcc8], 1
jmp 0x44d6a8
and dword [ebp - 0xcc8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a68]
cmp dword [ebp - 0xcc8], eax
jne 0x44d6c9
mov dword [ebp - 0x1c14], 1
jmp 0x44d6d0
and dword [ebp - 0x1c14], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1c14]
sub ecx, dword [ebp + eax - 0x3090]
cmp dword [ebp - 0xcd0], ecx
jne 0x44d6f7
mov dword [ebp - 0x1c44], 1
jmp 0x44d6fe
and dword [ebp - 0x1c44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f90]
cmp eax, dword [ebp - 0x1c44]
jg 0x44d71f
mov dword [ebp - 0xcd8], 1
jmp 0x44d726
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x2210], eax
jmp 0x44d5a7
mov dword [ebp - 0x25c], 0
jmp 0x44d750
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x44d76c
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xc14], 0x15252cb1
jmp 0x44d743
mov dword [ebp - 0x297c], 0xffffffff
mov dword [ebp - 0x144], 0
jmp 0x44d78f
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x44d7ab
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x2dac], 0
jmp 0x44d782
mov dword [ebp - 0x144], 0
jmp 0x44d7c4
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 4
jge 0x44d7e0
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x27b8], 0x5252cb13
jmp 0x44d7b7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x27b8], 2
jmp 0x44d80e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27b8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x27b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27b8], 0
jl 0x44d8db
mov dword [ebp - 0x1ed0], 1
mov dword [ebp - 0x1ecc], 1
mov dword [ebp - 0x1ec8], 1
mov dword [ebp - 0x1ec4], 1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1ed0], 0
jmp 0x44d878
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1ed0]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1ed0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1ed0], 2
jg 0x44d8b2
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1ed0]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x1ed0]
mov eax, dword [ebp + eax*4 - 0x2dac]
mov dword [ebp + ecx*4 - 0x2dac], eax
jmp 0x44d85d
mov byte [ebp - 0x330], 0
movzx eax, byte [ebp - 0x330]
test eax, eax
je 0x44d8d6
push 0xad0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
jmp 0x44d7f3
mov byte [ebp - 0x332], 0
mov dword [ebp - 0x5bc], 0xffffffff
mov dword [ebp - 0x1c4c], 0xfa51
mov dword [ebp - 0x614], 0
jmp 0x44d90f
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 3
jge 0x44d92b
mov eax, dword [ebp - 0x614]
mov dword [ebp + eax*4 - 0x329c], 0xec0ae971
jmp 0x44d902
mov byte [ebp - 0x429], 0
movzx eax, byte [ebp - 0x429]
test eax, eax
je 0x44d94a
push 0x1d52
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x5bc], 2
jmp 0x44d963
mov eax, dword [ebp - 0x5bc]
dec eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0
jl 0x44d997
mov dword [ebp - 0x2984], 0x8f6c74aa
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp + eax*4 - 0x329c], 0
je 0x44d988
jmp 0x44d997
mov eax, dword [ebp - 0x1c4c]
dec eax
mov dword [ebp - 0x1c4c], eax
jmp 0x44d956
movzx eax, byte [ebp - 0x332]
test eax, eax
je 0x44daa6
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0x298c], 0x2121f90e
mov dword [ebp - 0x2994], 1
mov dword [ebp - 0x299c], 0xffffffff
mov dword [ebp - 0x29a4], 0xe32cf415
mov dword [ebp - 0x29ac], 0xfffffff8
mov dword [ebp - 0xce0], 4
mov dword [ebp - 0x838], 0
jmp 0x44da05
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x838], 3
jge 0x44da21
mov eax, dword [ebp - 0x838]
mov dword [ebp + eax*4 - 0x34c4], 0
jmp 0x44d9f8
mov dword [ebp - 0x61c], 0
jmp 0x44da3a
mov eax, dword [ebp - 0x61c]
dec eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0xffffffef
jl 0x44da88
mov dword [ebp - 0x840], 0xeede0b40
mov dword [ebp - 0x840], 0
jmp 0x44da66
mov eax, dword [ebp - 0x840]
dec eax
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 0xffffffe2
jl 0x44da86
mov dword [ebp - 0x2218], 0x91c5534b
cmp dword [ebp - 0x2218], 0
je 0x44da84
jmp 0x44da86
jmp 0x44da59
jmp 0x44da2d
mov eax, dword [ebp - 0xce0]
inc eax
mov dword [ebp - 0xce0], eax
push 1
push 0x16b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x524], 0xfffffff6
jmp 0x44dac9
mov eax, dword [ebp - 0x524]
inc eax
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0xa
jl 0x44dbca
mov dword [ebp - 0x214], 0
jmp 0x44daef
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x44db0b
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x624], 0x22124f84
jmp 0x44dae2
mov dword [ebp - 0x214], 0
jmp 0x44db24
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x44db40
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x2228], 0x5bfc88eb
jmp 0x44db17
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x624], 0
jmp 0x44db6e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x624]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x624], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x624], 0x15
jle 0x44dbc5
mov dword [ebp - 0x2220], 0x5653d423
mov dword [ebp - 0x2230], 0xffffffff
mov eax, dword [ebp - 0x2220]
sub eax, dword [ebp - 0x524]
mov dword [ebp - 0x1c54], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c54]
mov dword [ebp + eax - 0x2228], ecx
mov eax, dword [ebp - 0x1c54]
mov dword [ebp - 0x2230], eax
jmp 0x44db53
jmp 0x44dabc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc14], 2
jmp 0x44dbf8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc14], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc14], 0
jl 0x44e845
mov dword [ebp - 0x348], 0x48bbca63
mov dword [ebp - 0x288], 0x80444555
mov dword [ebp - 0x848], 0
jmp 0x44dc39
mov eax, dword [ebp - 0x848]
inc eax
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 4
jge 0x44dc55
mov eax, dword [ebp - 0x848]
mov dword [ebp + eax*4 - 0x3330], 0xdbcabebf
jmp 0x44dc2c
mov dword [ebp - 0x348], 0
jmp 0x44dc6e
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x1a
jl 0x44de57
mov dword [ebp - 0x350], 1
mov eax, dword [ebp - 0x350]
add eax, dword [ebp - 0x348]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x29b4], eax
cmp dword [ebp - 0x288], 0
jg 0x44dcb8
mov dword [ebp - 0xce8], 1
jmp 0x44dcbf
and dword [ebp - 0xce8], 0
cmp dword [ebp - 0xce8], 7
jne 0x44dcd4
mov dword [ebp - 0x1c5c], 1
jmp 0x44dcdb
and dword [ebp - 0x1c5c], 0
cmp dword [ebp - 0x1c5c], 0x974ca779
je 0x44dcf3
mov dword [ebp - 0xcf0], 1
jmp 0x44dcfa
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0xcf0], eax
jge 0x44dd14
mov dword [ebp - 0x1c64], 1
jmp 0x44dd1b
and dword [ebp - 0x1c64], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x1c64], eax
jle 0x44dd35
mov dword [ebp - 0xcf8], 1
jmp 0x44dd3c
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xcf8]
sub eax, dword [ebp - 0x350]
cmp eax, 1
jb 0x44dd59
mov dword [ebp - 0x1c6c], 1
jmp 0x44dd60
and dword [ebp - 0x1c6c], 0
cmp dword [ebp - 0x1c6c], 0
je 0x44dd7e
cmp dword [ebp - 0x348], 0
je 0x44dd7e
mov dword [ebp - 0xd00], 1
jmp 0x44dd85
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0xd00], eax
jl 0x44dda5
cmp dword [ebp - 0x350], 0
jne 0x44dda5
and dword [ebp - 0x1c74], 0
jmp 0x44ddaf
mov dword [ebp - 0x1c74], 1
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x1c74], eax
jge 0x44ddc9
mov dword [ebp - 0xd08], 1
jmp 0x44ddd0
and dword [ebp - 0xd08], 0
cmp dword [ebp - 0xd08], 6
jne 0x44ddee
cmp dword [ebp - 0x350], 0
je 0x44ddee
mov dword [ebp - 0x1c7c], 1
jmp 0x44ddf5
and dword [ebp - 0x1c7c], 0
mov eax, dword [ebp - 0x350]
imul eax, dword [ebp - 0x1c7c]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3330], eax
mov dword [ebp - 0x288], 0
jmp 0x44de28
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jg 0x44de52
mov byte [ebp - 0x3a1], 0
movzx eax, byte [ebp - 0x3a1]
test eax, eax
je 0x44de50
push 0x1afa
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
jmp 0x44de1b
jmp 0x44dc61
mov dword [ebp - 0xd68], 7
mov dword [ebp - 0x358], 2
mov dword [ebp - 0x1c84], 0x4e94f934
mov dword [ebp - 0x29bc], 0xb2455f9
mov dword [ebp - 0x29c4], 0
mov dword [ebp - 0x29cc], 0xffffffff
mov dword [ebp - 0x29d4], 0
mov dword [ebp - 0x2250], 0x6e82
mov dword [ebp - 0xba4], 0xb0d69b45
mov dword [ebp - 0xb9c], 0x58a13c4
mov dword [ebp - 0x62c], 0
jmp 0x44ded4
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 2
jge 0x44def0
mov eax, dword [ebp - 0x62c]
mov dword [ebp + eax*4 - 0x2a74], 7
jmp 0x44dec7
cmp dword [ebp - 0x358], 0
je 0x44e214
mov dword [ebp - 0x294], 0xfffffffe
mov dword [ebp - 0xbbc], 1
mov dword [ebp - 0x2384], 0x3fdda784
mov dword [ebp - 0x850], 0
jmp 0x44df34
mov eax, dword [ebp - 0x850]
inc eax
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x850], 3
jge 0x44df50
mov eax, dword [ebp - 0x850]
mov dword [ebp + eax*4 - 0x2764], 0
jmp 0x44df27
mov dword [ebp - 0x358], 0x16
jmp 0x44df69
mov eax, dword [ebp - 0x358]
dec eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0xb
je 0x44e03a
mov dword [ebp - 0x2240], 0xfff8
mov dword [ebp - 0xd10], 0
mov dword [ebp - 0x2248], 0xe9d60a22
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1c84], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0xd10]
cmp dword [ebp - 0x1c84], eax
jl 0x44dfc6
mov dword [ebp - 0xd18], 1
jmp 0x44dfcd
and dword [ebp - 0xd18], 0
cmp dword [ebp - 0x358], 0
je 0x44dfeb
mov eax, 0xffcf33f2
test eax, eax
je 0x44dfeb
mov dword [ebp - 0x1c8c], 1
jmp 0x44dff2
and dword [ebp - 0x1c8c], 0
mov eax, dword [ebp - 0xd18]
cmp eax, dword [ebp - 0x1c8c]
jl 0x44e00c
mov dword [ebp - 0x2238], 1
jmp 0x44e013
and dword [ebp - 0x2238], 0
mov eax, dword [ebp - 0x2240]
mov dword [ebp - 0x29dc], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x29e4], eax
mov dword [ebp - 0x2248], 0
jmp 0x44df5c
mov dword [ebp - 0x294], 0
jmp 0x44e053
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x12
jle 0x44e212
mov dword [ebp - 0x29ec], 0xc7fffaa2
mov dword [ebp - 0x29f4], 0xf8abff5e
mov dword [ebp - 0x29fc], 0xe294b58f
mov dword [ebp - 0x2a04], 0xffffffff
mov dword [ebp - 0x2a0c], 0xffffffff
mov dword [ebp - 0x2a14], 0xfffffff9
mov dword [ebp - 0xb94], 0xb643
mov dword [ebp - 0x237c], 8
cmp dword [ebp - 0x358], 0xbc24
jg 0x44e0c8
mov dword [ebp - 0xd20], 1
jmp 0x44e0cf
and dword [ebp - 0xd20], 0
cmp dword [ebp - 0xd20], 0xf126c7f0
jb 0x44e0e7
mov dword [ebp - 0xd28], 1
jmp 0x44e0ee
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0x2a1c], eax
mov eax, dword [ebp - 0x2250]
cmp dword [ebp - 0xbbc], eax
je 0x44e118
push 5
pop eax
test eax, eax
jne 0x44e118
and dword [ebp - 0x2258], 0
jmp 0x44e122
mov dword [ebp - 0x2258], 1
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x2764]
mov dword [ebp + ecx - 0x2764], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x294]
cmp dword [ebp + eax - 0x2764], ecx
je 0x44e15c
mov dword [ebp - 0xb8c], 1
jmp 0x44e163
and dword [ebp - 0xb8c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8c]
mov dword [ebp + eax - 0x2a74], ecx
mov eax, dword [ebp - 0x237c]
cmp dword [ebp - 0xb8c], eax
jne 0x44e190
mov dword [ebp - 0x1c94], 1
jmp 0x44e197
and dword [ebp - 0x1c94], 0
mov eax, dword [ebp - 0xb94]
dec eax
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0xb94]
mov ecx, dword [ebp - 0xb9c]
add eax, dword [ebp - 0x1c94]
add ecx, eax
mov eax, dword [ebp - 0xd28]
mov edx, dword [ebp - 0xb9c]
inc edx
mov dword [ebp - 0xb9c], edx
cmp eax, ecx
jl 0x44e1df
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x44e1df
and dword [ebp - 0x1c9c], 0
jmp 0x44e1e9
mov dword [ebp - 0x1c9c], 1
mov eax, dword [ebp - 0x1c9c]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0x2384], eax
jmp 0x44e046
jmp 0x44e235
mov dword [ebp - 0x2a24], 0x86b9bdd1
mov dword [ebp - 0xd30], 0x176a
mov eax, dword [ebp - 0xd30]
inc eax
mov dword [ebp - 0xd30], eax
mov byte [ebp - 0x334], 0
movzx eax, byte [ebp - 0x334]
test eax, eax
je 0x44e25b
push 0x12b4
push 0
push 0x23cd
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xd70], 0
mov dword [ebp - 0xec], 0xc75b57fd
mov dword [ebp - 0x2394], 0x18b47430
mov dword [ebp - 0xec], 0xffffffe6
jmp 0x44e292
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffff8
jne 0x44e421
mov dword [ebp - 0x4b0], 3
mov dword [ebp - 0x1cb4], 0xa014
cmp dword [ebp - 0xec], 0
je 0x44e2d1
mov eax, 0x8a6b950b
test eax, eax
je 0x44e2d1
mov dword [ebp - 0x1ca4], 1
jmp 0x44e2d8
and dword [ebp - 0x1ca4], 0
mov eax, dword [ebp - 0x1ca4]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4b0], 0
jmp 0x44e2fd
mov eax, dword [ebp - 0x4b0]
inc eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0x1a
je 0x44e41c
mov dword [ebp - 0x634], 0xf368
mov dword [ebp - 0xd38], 0xffffffff
cmp dword [ebp - 0xec], 0
jne 0x44e3cb
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x2a2c], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x2a34], eax
cmp dword [ebp - 0xec], 0
je 0x44e361
cmp dword [ebp - 0x634], 0
je 0x44e361
mov dword [ebp - 0x238c], 1
jmp 0x44e368
and dword [ebp - 0x238c], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x2a3c], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x2a44], eax
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0x2c84], eax
mov eax, dword [ebp - 0xd38]
cmp dword [ebp - 0x634], eax
jle 0x44e3a6
mov dword [ebp - 0x1cac], 1
jmp 0x44e3ad
and dword [ebp - 0x1cac], 0
mov eax, dword [ebp - 0xec]
mov eax, 0x6eb2
imul eax, eax, 0xffff
test eax, eax
jne 0x44e3cb
and dword [ebp - 0xd40], 0
jmp 0x44e3d5
mov dword [ebp - 0xd40], 1
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0x1cb4], eax
cmp dword [ebp - 0x1cb4], 0x65ee6d54
jle 0x44e3f9
mov dword [ebp - 0xd48], 1
jmp 0x44e400
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0xd48]
mov dword [ebp - 0x2394], eax
cmp dword [ebp - 0x4b0], 0
je 0x44e417
jmp 0x44e41c
jmp 0x44e2f0
jmp 0x44e285
mov dword [ebp - 0x23cc], 0xfff9
mov dword [ebp - 0x26bc], 0xb5ca
mov dword [ebp - 0x26b8], 0xb5ca
mov dword [ebp - 0x26b4], 0xb5ca
mov dword [ebp - 0x26b0], 0xb5ca
mov dword [ebp - 0xd50], 0x89051546
mov dword [ebp - 0x23b4], 1
mov dword [ebp - 0x9a8], 7
mov dword [ebp - 0x14c], 0
jmp 0x44e48a
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 2
jge 0x44e4a6
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x2684], 0x7e3b6f9b
jmp 0x44e47d
mov dword [ebp - 0x14c], 0
jmp 0x44e4bf
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x44e4db
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x239c], 0xaa05d762
jmp 0x44e4b2
mov eax, dword [ebp - 0x9a8]
mov ecx, dword [ebp - 0x9a8]
inc ecx
mov dword [ebp - 0x9a8], ecx
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x239c], 0xb812
cmp eax, 1
jb 0x44e510
mov dword [ebp - 0x23a4], 1
jmp 0x44e517
and dword [ebp - 0x23a4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26bc], 1
jne 0x44e533
mov dword [ebp - 0x1cbc], 1
jmp 0x44e53a
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0x1cbc]
add eax, 3
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2684]
je 0x44e55e
mov dword [ebp - 0x23ac], 1
jmp 0x44e565
and dword [ebp - 0x23ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26bc]
mov dword [ebp - 0x2c8c], eax
mov dword [ebp - 0xd50], 0x939c
mov eax, dword [ebp - 0x23b4]
cmp dword [ebp - 0xd50], eax
je 0x44e59c
mov dword [ebp - 0x1cc4], 1
jmp 0x44e5a3
and dword [ebp - 0x1cc4], 0
mov eax, dword [ebp - 0x1cc4]
neg eax
jns 0x44e5b9
mov dword [ebp - 0xd58], 1
jmp 0x44e5c0
and dword [ebp - 0xd58], 0
cmp dword [ebp - 0xd58], 0x11ca
jl 0x44e5d8
mov dword [ebp - 0x1ccc], 1
jmp 0x44e5df
and dword [ebp - 0x1ccc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ccc]
mov dword [ebp + eax - 0x2684], ecx
mov byte [ebp - 0x3f1], 0
movzx eax, byte [ebp - 0x3f1]
test eax, eax
je 0x44e60a
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [ebp - 0x23bc], 0xe60
mov dword [ebp - 0x2c94], 0xdd688769
mov dword [ebp - 0x2c9c], 0xffffffff
mov dword [ebp - 0x2ca4], 0xfb6f65e7
mov dword [ebp - 0xd60], 0xfffffffa
mov dword [ebp - 0x264], 0
jmp 0x44e655
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x44e671
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x3348], 0xffffffff
jmp 0x44e648
mov dword [ebp - 0x264], 0
jmp 0x44e68a
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x44e6a6
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x2cac], 0xfffffffa
jmp 0x44e67d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3348]
mov dword [ebp - 0x23bc], eax
mov eax, dword [ebp - 0xd60]
inc eax
mov dword [ebp - 0xd60], eax
mov eax, 0x76ec
test eax, eax
je 0x44e7ac
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
cmp dword [ebp + eax*4 - 0x1e98], 0
je 0x44e74b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
cmp dword [ebp + eax*4 - 0x1e98], 0
jb 0x44e70d
mov dword [ebp - 0x1cd4], 1
jmp 0x44e714
and dword [ebp - 0x1cd4], 0
mov eax, dword [ebp - 0x1cd4]
mov dword [ebp - 0xd68], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
imul eax, dword [ebp + eax*4 - 0x1e98], 0
neg eax
add eax, dword [ebp - 0xd68]
je 0x44e74b
mov dword [ebp - 0x1cdc], 1
jmp 0x44e752
and dword [ebp - 0x1cdc], 0
mov eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0xd70], eax
cmp dword [ebp - 0xd70], 1
je 0x44e773
mov dword [ebp - 0x1ce4], 1
jmp 0x44e77a
and dword [ebp - 0x1ce4], 0
cmp dword [ebp - 0x1ce4], 0xa5f27a41
jne 0x44e792
mov dword [ebp - 0xd78], 1
jmp 0x44e799
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0xd78]
neg eax
je 0x44e7ac
mov eax, 0xb857
test eax, eax
jne 0x44e7cc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
cmp dword [ebp + eax*4 - 0x1e98], 0
jne 0x44e7cc
and dword [ebp - 0x23c4], 0
jmp 0x44e7d6
mov dword [ebp - 0x23c4], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc14]
mov ecx, dword [ebp + ecx*4 - 0x1e98]
cmp dword [ebp + eax - 0x1e98], ecx
jne 0x44e805
mov dword [ebp - 0x1cec], 1
jmp 0x44e80c
and dword [ebp - 0x1cec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e98]
cmp dword [ebp - 0x1cec], eax
jge 0x44e82d
mov dword [ebp - 0xd80], 1
jmp 0x44e834
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0xd80]
mov dword [ebp - 0x23cc], eax
jmp 0x44dbdd
mov dword [ebp - 0x154], 0
jmp 0x44e85e
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x44e87a
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x23d4], 0xbdde0bcd
jmp 0x44e851
mov dword [ebp - 0x154], 0
jmp 0x44e893
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x44e8af
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x58c], 0xe8e56f9b
jmp 0x44e886
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58c], 0
jmp 0x44e8dd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x58c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58c], 0
jl 0x44e968
mov dword [ebp - 0x858], 0xfb023ed1
mov dword [ebp - 0x858], 0
jmp 0x44e910
mov eax, dword [ebp - 0x858]
dec eax
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0
jl 0x44e963
mov dword [ebp - 0x2818], 0xfffffffe
mov dword [ebp - 0x2814], 0xfffffffe
mov dword [ebp - 0x2810], 0xfffffffe
mov dword [ebp - 0x280c], 0xfffffffe
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x58c]
mov eax, dword [ebp + eax - 0x2818]
mov dword [ebp + ecx*4 - 0x23d4], eax
jmp 0x44e903
jmp 0x44e8c2
mov byte [ebp - 0x336], 0
movzx eax, byte [ebp - 0x336]
test eax, eax
je 0x44e9a2
push 0x474
push 0x1cc9
push 0x1519
push 0x1f3b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
cmp dword [ebp + 8], 2
jl 0x461f61
mov dword [ebp - 0x8c], 0xfffffffc
mov dword [ebp - 0xb44], 0
mov dword [ebp - 0x2cb4], 0xffffffff
mov dword [ebp - 0x2cbc], 0xfffffffd
mov dword [ebp - 0x2cc4], 0xc58f5537
mov dword [ebp - 0x23ec], 0xffffffff
mov dword [ebp - 0x2ccc], 1
mov dword [ebp - 0x2cd4], 0x74fd5228
mov dword [ebp - 0x2cdc], 1
mov dword [ebp - 0x2ce4], 0x6b2c4eb0
mov dword [ebp - 0x2cec], 0
mov dword [ebp - 0x2cf4], 0x29c214f1
mov dword [ebp - 0x2cfc], 0xffffffff
mov dword [ebp - 0x23f4], 0x4e7fb108
mov dword [ebp - 0x63c], 0
jmp 0x44ea51
mov eax, dword [ebp - 0x63c]
inc eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 3
jge 0x44ea6d
mov eax, dword [ebp - 0x63c]
mov dword [ebp + eax*4 - 0x2dbc], 0x7b38e516
jmp 0x44ea44
mov dword [ebp - 0x8c], 9
jmp 0x44ea86
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xb
jne 0x44ead7
mov dword [ebp - 0x23dc], 0
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x8c]
je 0x44eabc
cmp dword [ebp - 0x8c], 0
je 0x44eabc
mov dword [ebp - 0x1cf4], 1
jmp 0x44eac3
and dword [ebp - 0x1cf4], 0
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x1cf4]
mov dword [ebp - 0x23dc], eax
jmp 0x44ea79
mov dword [ebp - 0x8c], 0xfffffff2
jmp 0x44eaf0
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 7
jl 0x44ed2a
mov dword [ebp - 0x9b8], 0xfffffff7
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xb88], 0x104a
mov dword [ebp - 0x1d04], 0xfffffffe
mov dword [ebp - 0x21c], 0
jmp 0x44eb3e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x44eb5a
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x9b0], 0xb5411457
jmp 0x44eb31
mov dword [ebp - 0x21c], 0
jmp 0x44eb73
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x44eb8f
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x3218], 8
jmp 0x44eb66
cmp dword [ebp - 0x9b8], 0
jne 0x44ecd3
cmp dword [ebp - 0xb88], 0xfffffffb
jne 0x44ebc1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9b0], 0
je 0x44ebc1
mov dword [ebp - 0x23e4], 1
jmp 0x44ebc8
and dword [ebp - 0x23e4], 0
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0x2d04], eax
mov eax, dword [ebp - 0x23ec]
mov dword [ebp - 0x2d0c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2dbc]
mov dword [ebp - 0x2d14], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9b0]
mov dword [ebp - 0x2d1c], eax
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x2d24], eax
mov eax, dword [ebp - 0x23f4]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0xb44]
sub eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x23fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x23fc]
mov dword [ebp + eax - 0x9b0], ecx
mov eax, dword [ebp - 0xac0]
add eax, 0x3eeb0096
mov dword [ebp - 0x2404], eax
mov eax, dword [ebp - 0xac0]
inc eax
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0x2404], 0
je 0x44ec76
mov dword [ebp - 0xd88], 1
jmp 0x44ec7d
and dword [ebp - 0xd88], 0
cmp dword [ebp - 0xd88], 2
je 0x44ec92
mov dword [ebp - 0x1cfc], 1
jmp 0x44ec99
and dword [ebp - 0x1cfc], 0
cmp dword [ebp - 0x1cfc], 0xffffffff
je 0x44ecae
mov dword [ebp - 0xd90], 1
jmp 0x44ecb5
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x1d04], eax
cmp dword [ebp - 0x1d04], 0
jne 0x44ecd3
and dword [ebp - 0xd98], 0
jmp 0x44ecdd
mov dword [ebp - 0xd98], 1
mov eax, dword [ebp - 0x9b8]
imul eax, dword [ebp - 0xd98]
cmp eax, dword [ebp - 0xb88]
je 0x44ecfe
mov dword [ebp - 0x1d0c], 1
jmp 0x44ed05
and dword [ebp - 0x1d0c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d0c]
sub ecx, dword [ebp + eax - 0x2dbc]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3218], ecx
jmp 0x44eae3
mov dword [ebp - 0x860], 0x9f9b3198
mov dword [ebp - 0x247c], 8
mov dword [ebp - 0x860], 0xfffffff6
jmp 0x44ed57
mov eax, dword [ebp - 0x860]
inc eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 0xfffffff9
jl 0x44eec1
mov dword [ebp - 0x52c], 0xe60b0cea
mov dword [ebp - 0xd4], 0x693e9323
mov dword [ebp - 0x2484], 7
cmp dword [ebp - 0x52c], 0
je 0x44ee73
mov dword [ebp - 0x644], 0
jmp 0x44eda8
mov eax, dword [ebp - 0x644]
inc eax
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 4
jge 0x44edc4
mov eax, dword [ebp - 0x644]
mov dword [ebp + eax*4 - 0x3360], 0xcef989b1
jmp 0x44ed9b
mov dword [ebp - 0xd4], 0xf6dd8d13
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x247c], eax
mov dword [ebp - 0xd4], 0xfffffff8
jmp 0x44edf3
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xfffffff6
jg 0x44ee71
mov dword [ebp - 0x460], 0x8bb4
mov dword [ebp - 0x52c], 0xffffffec
jmp 0x44ee1f
mov eax, dword [ebp - 0x52c]
inc eax
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 0x2f
jl 0x44ee6c
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x460], 0
jmp 0x44ee4d
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 3
jg 0x44ee6a
mov eax, dword [ebp - 0x460]
cmp dword [ebp + eax*4 - 0x3360], 0
je 0x44ee68
jmp 0x44ee6a
jmp 0x44ee40
jmp 0x44ee12
jmp 0x44ede6
jmp 0x44eeb1
mov dword [ebp - 0xd4], 0
jmp 0x44ee8c
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jg 0x44eeb1
mov byte [ebp - 0x3a9], 0
movzx eax, byte [ebp - 0x3a9]
test eax, eax
je 0x44eeaf
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x44ee7f
cmp dword [ebp - 0x2484], 0
je 0x44eebc
jmp 0x44eec1
jmp 0x44ed4a
mov dword [ebp - 0xac], 0xaa32b1ce
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x64c], 1
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x15c], 0
jmp 0x44ef02
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x44ef1e
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x468], 0xfffffff9
jmp 0x44eef5
mov dword [ebp - 0x15c], 0
jmp 0x44ef37
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x44ef53
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x2dcc], 7
jmp 0x44ef2a
mov dword [ebp - 0xac], 0
jmp 0x44ef6c
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x44f35b
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0x868], 0x635290ce
mov dword [ebp - 0x1a18], 0x7283a38c
mov dword [ebp - 0x26c], 0
jmp 0x44efb0
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x44efcc
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x2550], 0xffffffff
jmp 0x44efa3
mov dword [ebp - 0x26c], 0
jmp 0x44efe5
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x44f001
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x3378], 1
jmp 0x44efd8
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2550], 0
jmp 0x44f02f
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2550]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2550], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2550], 0
jl 0x44f163
mov dword [ebp - 0x9c0], 0xc47d
mov dword [ebp - 0x2494], 0x9ed02e88
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x2d2c], eax
cmp dword [ebp - 0x9c0], 0
je 0x44f078
mov dword [ebp - 0x1d14], 1
jmp 0x44f07f
and dword [ebp - 0x1d14], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x1d14]
jne 0x44f099
mov dword [ebp - 0xda4], 1
jmp 0x44f0a0
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0x4f0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2550]
cmp dword [ebp - 0x4f0], eax
jle 0x44f0cd
mov dword [ebp - 0xda8], 1
jmp 0x44f0d4
and dword [ebp - 0xda8], 0
cmp dword [ebp - 0xda8], 0xed89
jle 0x44f0ec
mov dword [ebp - 0x248c], 1
jmp 0x44f0f3
and dword [ebp - 0x248c], 0
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x2d34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x468]
cmp dword [ebp - 0x9c0], eax
jge 0x44f120
mov dword [ebp - 0x1654], 1
jmp 0x44f127
and dword [ebp - 0x1654], 0
cmp dword [ebp - 0x1654], 0
jne 0x44f13c
mov dword [ebp - 0xdb0], 1
jmp 0x44f143
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xdb0]
add eax, 5
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x2494], eax
jmp 0x44f014
mov dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x1610], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1610]
mov dword [ebp + eax - 0x2dcc], ecx
mov eax, dword [ebp - 0x1610]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x64c]
cmp dword [ebp - 0x4f0], eax
je 0x44f1b2
mov dword [ebp - 0x1c3c], 1
jmp 0x44f1b9
and dword [ebp - 0x1c3c], 0
cmp dword [ebp - 0x1a18], 0x69d0
jl 0x44f1d1
mov dword [ebp - 0x249c], 1
jmp 0x44f1d8
and dword [ebp - 0x249c], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0xac]
add eax, dword [ebp - 0xac]
jne 0x44f1f9
mov dword [ebp - 0xdb8], 1
jmp 0x44f200
and dword [ebp - 0xdb8], 0
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0xdb8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2550]
jle 0x44f227
mov dword [ebp - 0xdc0], 1
jmp 0x44f22e
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x1a18]
cmp dword [ebp - 0xdc0], eax
jne 0x44f248
mov dword [ebp - 0x1618], 1
jmp 0x44f24f
and dword [ebp - 0x1618], 0
mov eax, dword [ebp - 0x870]
cmp dword [ebp - 0x1618], eax
jne 0x44f269
mov dword [ebp - 0xdc8], 1
jmp 0x44f270
and dword [ebp - 0xdc8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x468]
cmp dword [ebp - 0xdc8], eax
jg 0x44f291
mov dword [ebp - 0xdd0], 1
jmp 0x44f298
and dword [ebp - 0xdd0], 0
mov eax, dword [ebp - 0x868]
imul eax, dword [ebp - 0x1c3c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x468]
imul ecx, dword [ebp - 0xdd0]
cmp eax, ecx
je 0x44f2d2
mov eax, 0x6ac1dea9
test eax, eax
je 0x44f2d2
mov dword [ebp - 0x1620], 1
jmp 0x44f2d9
and dword [ebp - 0x1620], 0
mov eax, dword [ebp - 0x868]
cmp dword [ebp - 0x1620], eax
jg 0x44f2f3
mov dword [ebp - 0xdd8], 1
jmp 0x44f2fa
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0xac8]
add eax, dword [ebp - 0xdd8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x468]
test eax, eax
je 0x44f33c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3378], 0
je 0x44f33c
mov eax, 0xffff
test eax, eax
je 0x44f33c
mov dword [ebp - 0x1a20], 1
jmp 0x44f343
and dword [ebp - 0x1a20], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1a20]
mov dword [ebp + eax - 0x2550], ecx
jmp 0x44ef5f
cmp dword [ebp - 0x4f0], 0
je 0x44f379
cmp dword [ebp - 0x4f0], 0
je 0x44f379
mov dword [ebp - 0x1628], 1
jmp 0x44f380
and dword [ebp - 0x1628], 0
cmp dword [ebp - 0xac], 0
jne 0x44f3bd
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x870]
cmp dword [ebp + eax - 0x468], ecx
jle 0x44f3aa
mov dword [ebp - 0xde0], 1
jmp 0x44f3b1
and dword [ebp - 0xde0], 0
mov eax, dword [ebp - 0xde0]
sub eax, dword [ebp - 0x64c]
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x2d3c], eax
mov eax, dword [ebp - 0x64c]
cmp dword [ebp - 0x870], eax
je 0x44f3e3
mov dword [ebp - 0xde8], 1
jmp 0x44f3ea
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x1628]
cmp eax, dword [ebp - 0xde8]
jne 0x44f404
mov dword [ebp - 0x1c20], 1
jmp 0x44f40b
and dword [ebp - 0x1c20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x468]
cmp eax, dword [ebp - 0x1c20]
jg 0x44f42c
mov dword [ebp - 0xdf0], 1
jmp 0x44f433
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xdf0], eax
jne 0x44f44d
mov dword [ebp - 0x1630], 1
jmp 0x44f454
and dword [ebp - 0x1630], 0
cmp dword [ebp - 0x1630], 1
je 0x44f469
mov dword [ebp - 0xdf8], 1
jmp 0x44f470
and dword [ebp - 0xdf8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xdf8]
mov dword [ebp + eax - 0x2dcc], ecx
mov dword [ebp - 0x55c], 1
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x654], 0
jmp 0x44f4af
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 4
jge 0x44f4cb
mov eax, dword [ebp - 0x654]
mov dword [ebp + eax*4 - 0x3564], 0x1ec2
jmp 0x44f4a2
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b8], 0
jmp 0x44f4f0
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 3
jg 0x44f513
mov byte [ebp - 0x2ed], 0
movzx eax, byte [ebp - 0x2ed]
test eax, eax
je 0x44f511
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x44f4e3
mov dword [ebp - 0x498], 0xfffffffe
mov dword [ebp - 0x38], 0x596960f5
mov dword [ebp - 0x2d44], 0
mov dword [ebp - 0x2d4c], 0xd4a0d461
mov dword [ebp - 0x2d54], 0xffffffff
mov dword [ebp - 0x1648], 0xfb66febf
mov dword [ebp - 0x878], 0xffffffff
mov dword [ebp - 0x2d5c], 0xc3d6c1df
mov dword [ebp - 0x30a4], 0
mov dword [ebp - 0x30a0], 0
mov dword [ebp - 0x309c], 0
mov dword [ebp - 0x3098], 0
mov dword [ebp - 0x164], 0
jmp 0x44f5a1
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x44f5bd
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x2770], 0xfffffffd
jmp 0x44f594
mov dword [ebp - 0x164], 0
jmp 0x44f5d6
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x44f5f2
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x1e80], 6
jmp 0x44f5c9
mov dword [ebp - 0x38], 0
jmp 0x44f602
cmp dword [ebp - 0x38], 2
jg 0x44f976
mov dword [ebp - 0x2d64], 0
mov dword [ebp - 0x2d6c], 0x666a756a
mov dword [ebp - 0x2d74], 0
mov dword [ebp - 0xe40], 0xc3c39ba0
mov dword [ebp - 0xe10], 0xba20b95a
mov dword [ebp - 0x24a4], 0xb4c8f0d0
mov dword [ebp - 0x26d4], 0x184dcc8
mov dword [ebp - 0x26d0], 0x184dcc8
mov dword [ebp - 0x26cc], 0x184dcc8
mov dword [ebp - 0x26c8], 0x184dcc8
mov dword [ebp - 0x9c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e80]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1e80], eax
mov dword [ebp - 0x878], 0
jmp 0x44f6ae
cmp dword [ebp - 0x878], 2
jg 0x44f971
mov dword [ebp - 0xb4c], 0x299fa9ef
mov dword [ebp - 0x2d7c], 0x972e7eb6
mov dword [ebp - 0x2d84], 0xffffffff
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x1e80], 0xcf58d911
jbe 0x44f6f5
jmp 0x44f5fb
mov dword [ebp - 0x5cc], 0xffffffff
mov dword [ebp - 0x880], 0xffff
mov dword [ebp - 0x1658], 0x93dda37b
mov dword [ebp - 0x65c], 0
jmp 0x44f9ad
cmp dword [ebp - 0x65c], 2
jge 0x44f9c9
mov eax, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0x3410], 0xd9ddcef9
jmp 0x44f9a0
mov dword [ebp - 0x1658], 1
cmp dword [ebp - 0x1658], 0
je 0x44fa2d
cmp dword [ebp + 8], 1
jne 0x4626d8
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0x1a64], 0xf4dad240
mov dword [ebp - 0x1a74], 0xfffffff8
mov dword [ebp - 0x1b8], 0
jmp 0x461fc0
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x461fdc
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x3284], 9
jmp 0x461fb3
mov dword [ebp - 0x1b8], 0
jmp 0x461ff5
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 1
jge 0x462011
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x20d0], 0x87c7592e
jmp 0x461fe8
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x3094], eax
cmp dword [ebp - 0x1d0], 0
je 0x462032
mov dword [ebp - 0x19d4], 1
jmp 0x462039
and dword [ebp - 0x19d4], 0
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x19d4]
jg 0x462053
mov dword [ebp - 0x19dc], 1
jmp 0x46205a
and dword [ebp - 0x19dc], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x19dc], eax
jle 0x462074
mov dword [ebp - 0x19e4], 1
jmp 0x46207b
and dword [ebp - 0x19e4], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x19e4], eax
je 0x462095
mov dword [ebp - 0x19ec], 1
jmp 0x46209c
and dword [ebp - 0x19ec], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x19ec], eax
jne 0x4620b6
mov dword [ebp - 0x19f4], 1
jmp 0x4620bd
and dword [ebp - 0x19f4], 0
mov eax, dword [ebp - 0x1d0]
add eax, dword [ebp - 0x19f4]
neg eax
cmp eax, dword [ebp - 0x1d0]
jle 0x4620df
mov dword [ebp - 0x19fc], 1
jmp 0x4620e6
and dword [ebp - 0x19fc], 0
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x19fc]
je 0x462100
mov dword [ebp - 0x1a04], 1
jmp 0x462107
and dword [ebp - 0x1a04], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1a04], eax
jg 0x462121
mov dword [ebp - 0x20b8], 1
jmp 0x462128
and dword [ebp - 0x20b8], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c8], eax
je 0x46214b
mov eax, 0x7153
test eax, eax
je 0x46214b
mov dword [ebp - 0x1a0c], 1
jmp 0x462152
and dword [ebp - 0x1a0c], 0
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x1a0c]
je 0x46216c
mov dword [ebp - 0x20c0], 1
jmp 0x462173
and dword [ebp - 0x20c0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x2cd8], eax
mov dword [ebp - 0xac4], 3
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x2f18], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x2ce0], eax
cmp dword [ebp - 0x1c8], 0
je 0x4621bf
cmp dword [ebp - 0x1c0], 0
je 0x4621bf
mov dword [ebp - 0x1a14], 1
jmp 0x4621c6
and dword [ebp - 0x1a14], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1a14], eax
jle 0x4621e0
mov dword [ebp - 0x1a1c], 1
jmp 0x4621e7
and dword [ebp - 0x1a1c], 0
cmp dword [ebp - 0x1a1c], 3
ja 0x4621fc
mov dword [ebp - 0x1a24], 1
jmp 0x462203
and dword [ebp - 0x1a24], 0
mov eax, dword [ebp - 0x1a24]
mov dword [ebp - 0xac4], eax
cmp dword [ebp - 0x1c8], 0
jne 0x46222a
cmp dword [ebp - 0xac4], 0
jne 0x46222a
and dword [ebp - 0x1a2c], 0
jmp 0x462234
mov dword [ebp - 0x1a2c], 1
cmp dword [ebp - 0x1a2c], 0xb718
jge 0x46224c
mov dword [ebp - 0x1a34], 1
jmp 0x462253
and dword [ebp - 0x1a34], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1a34], eax
jg 0x46226d
mov dword [ebp - 0x1a3c], 1
jmp 0x462274
and dword [ebp - 0x1a3c], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1a3c], eax
jge 0x46228e
mov dword [ebp - 0x1a44], 1
jmp 0x462295
and dword [ebp - 0x1a44], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1a44], eax
jl 0x4622af
mov dword [ebp - 0x1a4c], 1
jmp 0x4622b6
and dword [ebp - 0x1a4c], 0
cmp dword [ebp - 0x1a4c], 8
jl 0x4622cb
mov dword [ebp - 0x1a54], 1
jmp 0x4622d2
and dword [ebp - 0x1a54], 0
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x1a54]
jl 0x4622ec
mov dword [ebp - 0x1a5c], 1
jmp 0x4622f3
and dword [ebp - 0x1a5c], 0
imul eax, dword [ebp - 0x1a5c], 0x5845
mov dword [ebp - 0x1a64], eax
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x1a64], eax
jge 0x46231d
mov dword [ebp - 0x20c8], 1
jmp 0x462324
and dword [ebp - 0x20c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x300c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3284], 0xdb12
jl 0x46234f
mov dword [ebp - 0x1a6c], 1
jmp 0x462356
and dword [ebp - 0x1a6c], 0
mov eax, dword [ebp - 0x1a6c]
sub eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1a74], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a74]
mov dword [ebp + eax - 0x20d0], ecx
call fcn.0044c0ef
mov dword [ebp - 0x590], 3
mov dword [ebp - 0xad4], 0xc93e3288
mov dword [ebp - 0x670], 0
jmp 0x4623ad
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 4
jge 0x4623c9
mov eax, dword [ebp - 0x670]
mov dword [ebp + eax*4 - 0x2514], 0xac204e2
jmp 0x4623a0
mov byte [ebp - 0x322], 0
movzx eax, byte [ebp - 0x322]
test eax, eax
je 0x4623f8
push 0xed1
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2514], 0
jmp 0x462423
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2514], 8
jl 0x4626b8
mov dword [ebp - 0xd0], 0x97f0a290
mov dword [ebp - 0x1d8], 0
jmp 0x462459
cmp dword [ebp - 0x1d8], 3
jge 0x462475
call fcn.00466902
cdq
push 3
pop ecx
idiv ecx
add edx, 3
imul eax, edx, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x463860
mov dword [ebp - 0x50], 0xfffffffd
mov dword [ebp - 0x2ce8], 0x737a9a97
mov dword [ebp - 0x1e0], 0
jmp 0x462702
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x46271e
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x2f20], 0xb40194dd
jmp 0x4626f5
mov dword [ebp - 0x1e0], 0
jmp 0x462737
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x462753
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x2fa4], 0x66c1
jmp 0x46272a
cmp dword [ebp - 0x50], 0
je 0x4627b9
mov dword [ebp - 0x678], 0
jmp 0x462772
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 4
jge 0x46278e
mov eax, dword [ebp - 0x678]
mov dword [ebp + eax*4 - 0x34a0], 0x4f46
jmp 0x462765
mov dword [ebp - 0x50], 0
jmp 0x46279e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x4627b4
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x34a0], 4
jmp 0x462797
jmp 0x462a7e
mov dword [ebp - 0x1ae4], 0x6ba47c9d
mov dword [ebp - 0x2cf0], 8
mov dword [ebp - 0x3170], 0xedade098
mov dword [ebp - 0x1e8], 0
jmp 0x4627f0
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x46280c
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x2b1c], 0x5725d367
jmp 0x4627e3
mov dword [ebp - 0x1e8], 0
jmp 0x462825
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x462841
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x2b28], 0xd55adb51
jmp 0x462818
mov dword [ebp - 0x50], 0
jmp 0x462851
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3b
jg 0x4628e5
mov dword [ebp - 0x1f0], 0
jmp 0x462874
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x462890
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x2cf8], 0xf499
jmp 0x462867
mov dword [ebp - 0x1f0], 0
jmp 0x4628a9
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x4628c5
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x3460], 0x5e3edfa8
jmp 0x46289c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2fa4]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2fa4], eax
jmp 0x46284a
mov dword [ebp - 0x50], 0xfffffffd
jmp 0x4628f5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x37
jl 0x462a7e
mov dword [ebp - 0x20d8], 0x25423b19
mov dword [ebp - 0x680], 0
jmp 0x462922
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 2
jge 0x46293e
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x1f30], 0x8ceef9a8
jmp 0x462915
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f30], 0
je 0x462953
jmp 0x462a7e
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1ae4]
cmp dword [ebp + eax - 0x1f30], ecx
jne 0x462974
mov dword [ebp - 0x1abc], 1
jmp 0x46297b
and dword [ebp - 0x1abc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f30]
cmp dword [ebp - 0x1abc], eax
jne 0x46299c
mov dword [ebp - 0x1ac4], 1
jmp 0x4629a3
and dword [ebp - 0x1ac4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b1c]
cmp eax, dword [ebp - 0x1ac4]
jle 0x4629c4
mov dword [ebp - 0x1acc], 1
jmp 0x4629cb
and dword [ebp - 0x1acc], 0
imul eax, dword [ebp - 0x1acc], 0x2496
cmp eax, 0x79bdd86b
jg 0x4629e8
mov dword [ebp - 0x1ad4], 1
jmp 0x4629ef
and dword [ebp - 0x1ad4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b28]
cmp dword [ebp - 0x1ad4], eax
jne 0x462a10
mov dword [ebp - 0x1adc], 1
jmp 0x462a17
and dword [ebp - 0x1adc], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1adc]
sub ecx, dword [ebp + eax - 0x2fa4]
cmp dword [ebp - 0x1ae4], ecx
jne 0x462a3e
mov dword [ebp - 0x1aec], 1
jmp 0x462a45
and dword [ebp - 0x1aec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f30]
cmp eax, dword [ebp - 0x1aec]
jg 0x462a66
mov dword [ebp - 0x1af4], 1
jmp 0x462a6d
and dword [ebp - 0x1af4], 0
mov eax, dword [ebp - 0x1af4]
mov dword [ebp - 0x20d8], eax
jmp 0x4628ee
xor ecx, ecx
call fcn.00426105
push eax
call fcn.00466923
pop ecx
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x598], 0xfffffff6
jmp 0x462aaf
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0xa
jl 0x462bb0
mov dword [ebp - 0x1f8], 0
jmp 0x462ad5
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x462af1
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x688], 0x22124f84
jmp 0x462ac8
mov dword [ebp - 0x1f8], 0
jmp 0x462b0a
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x462b26
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x20e8], 0x5bfc88eb
jmp 0x462afd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x688], 0
jmp 0x462b54
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x688]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x688], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x688], 0x15
jle 0x462bab
mov dword [ebp - 0x20e0], 0x5653d423
mov dword [ebp - 0x20f0], 0xffffffff
mov eax, dword [ebp - 0x20e0]
sub eax, dword [ebp - 0x598]
mov dword [ebp - 0x1afc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1afc]
mov dword [ebp + eax - 0x20e8], ecx
mov eax, dword [ebp - 0x1afc]
mov dword [ebp - 0x20f0], eax
jmp 0x462b39
jmp 0x462aa2
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa7dfec
push 0xa7dfec
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xadc], eax
mov dword [ebp - 0x2f28], 0xffffffff
mov dword [ebp - 0x200], 0
jmp 0x462c06
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x462c22
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x2e7c], 0
jmp 0x462bf9
mov dword [ebp - 0x200], 0
jmp 0x462c3b
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x462c57
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x2868], 0x5252cb13
jmp 0x462c2e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2868], 2
jmp 0x462c85
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2868]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2868], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2868], 0
jl 0x462d52
mov dword [ebp - 0x1ec0], 1
mov dword [ebp - 0x1ebc], 1
mov dword [ebp - 0x1eb8], 1
mov dword [ebp - 0x1eb4], 1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1ec0], 0
jmp 0x462cef
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1ec0]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1ec0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1ec0], 2
jg 0x462d29
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1ec0]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x1ec0]
mov eax, dword [ebp + eax*4 - 0x2e7c]
mov dword [ebp + ecx*4 - 0x2e7c], eax
jmp 0x462cd4
mov byte [ebp - 0x381], 0
movzx eax, byte [ebp - 0x381]
test eax, eax
je 0x462d4d
push 0xad0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
jmp 0x462c6a
push 5
push dword [ebp - 0xadc]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x5a0], 0xffffffff
mov dword [ebp - 0x1b04], 0xfa51
mov dword [ebp - 0x690], 0
jmp 0x462d8d
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 3
jge 0x462da9
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x323c], 0xec0ae971
jmp 0x462d80
mov byte [ebp - 0x324], 0
movzx eax, byte [ebp - 0x324]
test eax, eax
je 0x462dc8
push 0x1d52
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x5a0], 2
jmp 0x462de1
mov eax, dword [ebp - 0x5a0]
dec eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0
jl 0x462e15
mov dword [ebp - 0x2d00], 0x8f6c74aa
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp + eax*4 - 0x323c], 0
je 0x462e06
jmp 0x462e15
mov eax, dword [ebp - 0x1b04]
dec eax
mov dword [ebp - 0x1b04], eax
jmp 0x462dd4
push dword [ebp - 0xadc]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x3014], 0x2121f90e
mov dword [ebp - 0x2d08], 1
mov dword [ebp - 0x2f30], 0xffffffff
mov dword [ebp - 0x2d10], 0xe32cf415
mov dword [ebp - 0x30a8], 0xfffffff8
mov dword [ebp - 0x1b0c], 4
mov dword [ebp - 0x698], 0
jmp 0x462e80
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 3
jge 0x462e9c
mov eax, dword [ebp - 0x698]
mov dword [ebp + eax*4 - 0x3524], 0
jmp 0x462e73
mov dword [ebp - 0x6a0], 0
jmp 0x462eb5
cmp dword [ebp - 0x6a0], 0xffffffef
jl 0x462f03
mov dword [ebp - 0x6a8], 0xeede0b40
mov dword [ebp - 0x6a8], 0
jmp 0x462ee1
cmp dword [ebp - 0x6a8], 0xffffffe2
jl 0x462f01
mov dword [ebp - 0x20f8], 0x91c5534b
cmp dword [ebp - 0x20f8], 0
je 0x462eff
jmp 0x462ea8
mov eax, dword [ebp - 0x1b0c]
inc eax
mov dword [ebp - 0x1b0c], eax
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp - 0x2100], eax
lea eax, [ebp - 0x2100]
push eax
push fcn.0044c0f4
lea ecx, [ebp - 0x2724]
call fcn.00464d59
mov dword [ebp - 0x428], 0x48bbca63
mov dword [ebp - 0x2e0], 0x80444555
mov dword [ebp - 0x6b0], 0
jmp 0x462f5e
cmp dword [ebp - 0x6b0], 4
jge 0x462f7a
mov eax, dword [ebp - 0x6b0]
mov dword [ebp + eax*4 - 0x34b8], 0xdbcabebf
jmp 0x462f51
mov dword [ebp - 0x428], 0
jmp 0x462f93
mov dword [ebp - 0x5a8], 1
mov dword [ebp - 0x4f4], 0xfffffffe
mov dword [ebp - 0x5b0], 0xffffffff
mov dword [ebp - 0x6d0], 0x8959
mov dword [ebp - 0x28c4], 0x10320ba2
mov dword [ebp - 0xb24], 0x81be2fc3
mov dword [ebp - 0xb1c], 0x1b934971
mov dword [ebp - 0xb14], 0xffffffff
mov dword [ebp - 0x2168], 0xed4b89d5
mov dword [ebp - 0xb2c], 0xfffd
mov dword [ebp - 0x2178], 0x8521eb7c
mov dword [ebp - 0x28cc], 0xffffffff
mov dword [ebp - 0x218], 0
jmp 0x4638f1