Function at 0x44aa73
Capabilities:
Get common file path
Get disk size
Get session user name
Modify service
Query or enumerate registry key
Set registry value
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4e74
call fcn.004c70f0
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x880], 0x1c
jmp 0x44aaa3
mov eax, dword [ebp - 0x880]
dec eax
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 0xe
jle 0x44aca7
mov dword [ebp - 0x584], 0xffffffff
mov dword [ebp - 0xe08], 0
jmp 0x44aad3
mov eax, dword [ebp - 0xe08]
inc eax
mov dword [ebp - 0xe08], eax
cmp dword [ebp - 0xe08], 2
jge 0x44aaef
mov eax, dword [ebp - 0xe08]
mov dword [ebp + eax*4 - 0x400c], 0x30a9bca7
jmp 0x44aac6
mov dword [ebp - 0x584], 0
jmp 0x44ab08
mov eax, dword [ebp - 0x584]
dec eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0xfffffff0
jle 0x44aca2
mov dword [ebp - 0xe14], 0
jmp 0x44ab2e
mov eax, dword [ebp - 0xe14]
inc eax
mov dword [ebp - 0xe14], eax
cmp dword [ebp - 0xe14], 2
jge 0x44ab4a
mov eax, dword [ebp - 0xe14]
mov dword [ebp + eax*4 - 0x10cc], 0xc4c8d3c8
jmp 0x44ab21
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x10cc], 0xffffffe6
jmp 0x44ab78
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10cc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x10cc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10cc], 0xfffffff5
je 0x44ac9d
mov dword [ebp - 0x32a0], 0x39ee491b
mov dword [ebp - 0xb24], 0
jmp 0x44abaf
mov eax, dword [ebp - 0xb24]
inc eax
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0xb24], 3
jge 0x44abcb
mov eax, dword [ebp - 0xb24]
mov dword [ebp + eax*4 - 0x4518], 0xffff
jmp 0x44aba2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4518]
mov dword [ebp - 0x42ec], eax
cmp dword [ebp - 0x584], 0x31d14cd4
jge 0x44abf7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10cc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10cc], 0
je 0x44ac1c
mov eax, 0x5bef
test eax, eax
je 0x44ac1c
mov dword [ebp - 0x18c8], 1
jmp 0x44ac23
and dword [ebp - 0x18c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10cc]
cmp dword [ebp - 0x18c8], eax
jne 0x44ac44
mov dword [ebp - 0x2a50], 1
jmp 0x44ac4b
and dword [ebp - 0x2a50], 0
mov eax, dword [ebp - 0x584]
cmp dword [ebp - 0x2a50], eax
jl 0x44ac65
mov dword [ebp - 0x2a58], 1
jmp 0x44ac6c
and dword [ebp - 0x2a58], 0
mov eax, dword [ebp - 0x880]
imul eax, dword [ebp - 0x2a58]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x400c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4518]
mov dword [ebp - 0x32a0], eax
jmp 0x44ab5d
jmp 0x44aafb
jmp 0x44aa96
mov dword [ebp - 0xe5c], 0xb871c7bf
mov dword [ebp - 0x58c], 0x39924432
mov dword [ebp - 0x383c], 4
mov dword [ebp - 0x3838], 4
mov dword [ebp - 0x3834], 4
mov dword [ebp - 0x3830], 4
mov dword [ebp - 0x31d8], 1
mov dword [ebp - 0x31e0], 0xaea1dc7e
mov dword [ebp - 0x894], 0
jmp 0x44ad10
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 1
jge 0x44ad2c
mov eax, dword [ebp - 0x894]
mov dword [ebp + eax*4 - 0x570], 0xad2086bd
jmp 0x44ad03
cmp dword [ebp - 0xe5c], 0
jne 0x44ad4a
cmp dword [ebp - 0x58c], 0x1b7e8336
jl 0x44ad4a
and dword [ebp - 0x2a60], 0
jmp 0x44ad54
mov dword [ebp - 0x2a60], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a60]
mov dword [ebp + eax - 0x570], ecx
mov eax, dword [ebp - 0xe5c]
mov dword [ebp - 0x2a68], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a68]
mov dword [ebp + eax - 0x570], ecx
cmp dword [ebp - 0x2a68], 0
je 0x44b060
mov dword [ebp - 0xb70], 0x5bd5
mov dword [ebp - 0x6bc], 0xfffffffb
mov dword [ebp - 0x31d0], 0x2506ed55
mov dword [ebp - 0x58c], 0xffffffeb
jmp 0x44adca
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0x28
jl 0x44af0f
mov dword [ebp - 0x2a98], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x570], 1
jg 0x44adfd
mov dword [ebp - 0x2aa0], 1
jmp 0x44ae04
and dword [ebp - 0x2aa0], 0
cmp dword [ebp - 0x2a98], 0xfffffffb
jae 0x44ae19
mov dword [ebp - 0x2a70], 1
jmp 0x44ae20
and dword [ebp - 0x2a70], 0
imul eax, dword [ebp - 0x2a70], 0x3f29
cmp eax, 0xf9db
jne 0x44ae3d
mov dword [ebp - 0x2a78], 1
jmp 0x44ae44
and dword [ebp - 0x2a78], 0
mov eax, dword [ebp - 0xb70]
imul eax, dword [ebp - 0x2a78]
cmp eax, dword [ebp - 0xb70]
je 0x44ae65
mov dword [ebp - 0x2a80], 1
jmp 0x44ae6c
and dword [ebp - 0x2a80], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x570]
cmp eax, dword [ebp - 0x2a80]
jg 0x44ae8d
mov dword [ebp - 0x2a88], 1
jmp 0x44ae94
and dword [ebp - 0x2a88], 0
mov eax, dword [ebp - 0xb70]
cmp dword [ebp - 0x2a88], eax
jge 0x44aeae
mov dword [ebp - 0x2a90], 1
jmp 0x44aeb5
and dword [ebp - 0x2a90], 0
mov eax, dword [ebp - 0x2a90]
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 1
jl 0x44aed6
mov dword [ebp - 0x31c8], 1
jmp 0x44aedd
and dword [ebp - 0x31c8], 0
mov eax, dword [ebp - 0x2a98]
mov dword [ebp - 0x3de8], eax
mov eax, dword [ebp - 0x58c]
imul eax, dword [ebp - 0xe5c]
imul eax, dword [ebp - 0x2aa0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x570], eax
jmp 0x44adbd
mov dword [ebp - 0x6bc], 0xffffffed
jmp 0x44af28
mov eax, dword [ebp - 0x6bc]
dec eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 0xffffffe2
jl 0x44b05e
mov dword [ebp - 0x10a0], 0
mov dword [ebp - 0x2ac0], 0xc3ebe155
mov dword [ebp - 0x1098], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x570]
mov dword [ebp - 0x3df0], eax
mov eax, dword [ebp - 0xb70]
cmp dword [ebp - 0x10a0], eax
jl 0x44af80
mov dword [ebp - 0x2aa8], 1
jmp 0x44af87
and dword [ebp - 0x2aa8], 0
mov eax, dword [ebp - 0x2aa8]
mov dword [ebp - 0x31d0], eax
mov eax, dword [ebp - 0x1098]
mov dword [ebp - 0x3df8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x383c]
cmp dword [ebp - 0x1098], eax
jl 0x44afc0
mov dword [ebp - 0x2ab0], 1
jmp 0x44afc7
and dword [ebp - 0x2ab0], 0
mov eax, dword [ebp - 0x1098]
neg eax
imul eax, eax, 0x24d
cmp eax, dword [ebp - 0x2ab0]
jne 0x44afe9
mov dword [ebp - 0x2ab8], 1
jmp 0x44aff0
and dword [ebp - 0x2ab8], 0
cmp dword [ebp - 0x2ab8], 0xce2e
jle 0x44b008
mov dword [ebp - 0x2ac8], 1
jmp 0x44b00f
and dword [ebp - 0x2ac8], 0
mov dword [ebp - 0x10a0], 0xfbc6a687
mov eax, dword [ebp - 0x10a0]
mov dword [ebp - 0x2ac0], eax
mov eax, dword [ebp - 0x2ac0]
cmp eax, dword [ebp - 0x2ac8]
jg 0x44b03f
mov dword [ebp - 0x2b48], 1
jmp 0x44b046
and dword [ebp - 0x2b48], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b48]
mov dword [ebp + eax - 0x570], ecx
jmp 0x44af1b
jmp 0x44b06c
mov eax, dword [ebp - 0x31d8]
mov dword [ebp - 0x31e0], eax
mov dword [ebp - 0x70c], 0
mov dword [ebp - 0x18c], 0xfffffffc
mov dword [ebp - 0x594], 0x1dba3399
mov dword [ebp - 0x3e00], 0x3d9b950
mov dword [ebp - 0x38dc], 0xaab7
mov dword [ebp - 0x38d8], 0xaab7
mov dword [ebp - 0x38d4], 0xaab7
mov dword [ebp - 0x38d0], 0xaab7
mov dword [ebp - 0x477c], 0xecf4a416
mov dword [ebp - 0x4778], 0xecf4a416
mov dword [ebp - 0x4774], 0xecf4a416
mov dword [ebp - 0x4770], 0xecf4a416
mov dword [ebp - 0x3e08], 6
mov dword [ebp - 0x18c], 0
jmp 0x44b107
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x14
jne 0x44b11e
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x594], eax
jmp 0x44b0fa
mov dword [ebp - 0x18c], 0
jmp 0x44b137
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xfffffff5
jle 0x44b27a
mov dword [ebp - 0x3e10], 0x26f3f17e
mov dword [ebp - 0x3e18], 0x6c4a87fc
mov dword [ebp - 0x3e20], 0xffffffff
mov dword [ebp - 0x2b50], 1
mov dword [ebp - 0x31e8], 0
mov dword [ebp - 0x2fc], 0
jmp 0x44b18f
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 2
jge 0x44b1ab
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x4018], 0xfffffffa
jmp 0x44b182
mov dword [ebp - 0x2fc], 0
jmp 0x44b1c4
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x44b1e0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x4c60], 0x9c8ddac0
jmp 0x44b1b7
mov dword [ebp - 0x594], 0
jmp 0x44b1f9
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 1
jg 0x44b262
mov dword [ebp - 0x3e28], 0xfffffffb
mov dword [ebp - 0x89c], 0
jmp 0x44b225
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 3
jge 0x44b241
mov eax, dword [ebp - 0x89c]
mov dword [ebp + eax*4 - 0x4c18], 0x6fd5d705
jmp 0x44b218
mov eax, dword [ebp - 0x594]
cmp dword [ebp + eax*4 - 0x4018], 0
je 0x44b253
jmp 0x44b262
mov eax, dword [ebp - 0x2b50]
dec eax
mov dword [ebp - 0x2b50], eax
jmp 0x44b1ec
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38dc]
mov dword [ebp - 0x31e8], eax
jmp 0x44b12a
mov dword [ebp - 0x70c], 0x1c
jmp 0x44b293
mov eax, dword [ebp - 0x70c]
dec eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 0xe
jle 0x44cc29
mov dword [ebp - 0x8a4], 0x860b4ffb
mov dword [ebp - 0x31f8], 0xa5043c4a
mov dword [ebp - 0xb78], 0
jmp 0x44b2cd
mov eax, dword [ebp - 0xb78]
inc eax
mov dword [ebp - 0xb78], eax
cmp dword [ebp - 0xb78], 3
jge 0x44b2e9
mov eax, dword [ebp - 0xb78]
mov dword [ebp + eax*4 - 0x4cfc], 1
jmp 0x44b2c0
mov byte [ebp - 0x524], 0
movzx eax, byte [ebp - 0x524]
test eax, eax
je 0x44b301
call dword [sym.imp.USER32.dll_WaitMessage]
mov dword [ebp - 0x8a4], 0
jmp 0x44b31a
mov eax, dword [ebp - 0x8a4]
inc eax
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 2
jg 0x44b33b
mov dword [ebp - 0x31f0], 0
mov eax, dword [ebp - 0x31f0]
mov dword [ebp - 0x31f8], eax
jmp 0x44b30d
mov dword [ebp - 0x5a4], 0xffffffff
mov dword [ebp - 0x364], 1
mov dword [ebp - 0x2b58], 2
mov dword [ebp - 0x8ac], 5
mov dword [ebp - 0x10a8], 1
mov dword [ebp - 0x3200], 0x1b0cadfb
mov dword [ebp - 0xb80], 0
jmp 0x44b390
mov eax, dword [ebp - 0xb80]
inc eax
mov dword [ebp - 0xb80], eax
cmp dword [ebp - 0xb80], 1
jge 0x44b3ac
mov eax, dword [ebp - 0xb80]
mov dword [ebp + eax*4 - 0x3e30], 6
jmp 0x44b383
mov byte [ebp - 0x431], 0
movzx eax, byte [ebp - 0x431]
test eax, eax
je 0x44b3d7
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6e5
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov eax, 0xad95e17c
test eax, eax
je 0x44b505
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x2b58], eax
cmp dword [ebp - 0x2b58], 0
jne 0x44b40b
cmp dword [ebp - 0x364], 0
jne 0x44b40b
and dword [ebp - 0x2b60], 0
jmp 0x44b415
mov dword [ebp - 0x2b60], 1
cmp dword [ebp - 0x2b60], 0x7d72
jge 0x44b42d
mov dword [ebp - 0x2b68], 1
jmp 0x44b434
and dword [ebp - 0x2b68], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x2b68], eax
jl 0x44b44e
mov dword [ebp - 0x2b70], 1
jmp 0x44b455
and dword [ebp - 0x2b70], 0
mov eax, dword [ebp - 0x2b70]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x8ac]
cmp dword [ebp - 0x364], eax
jne 0x44b47b
mov dword [ebp - 0x2b78], 1
jmp 0x44b482
and dword [ebp - 0x2b78], 0
mov eax, dword [ebp - 0x2b78]
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0x10a8]
mov dword [ebp - 0x3e38], eax
mov eax, dword [ebp - 0x364]
imul eax, dword [ebp - 0x8ac]
cmp eax, 0xffffffff
jg 0x44b4be
mov eax, 0xc910
test eax, eax
jne 0x44b4be
and dword [ebp - 0x2b80], 0
jmp 0x44b4c8
mov dword [ebp - 0x2b80], 1
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x2b80], eax
je 0x44b4e2
mov dword [ebp - 0x29c4], 1
jmp 0x44b4e9
and dword [ebp - 0x29c4], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x29c4], eax
je 0x44b4fe
cmp dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x10a8], 0
cmp dword [ebp - 0x364], 0x3b0a6d08
jl 0x44b51d
mov dword [ebp - 0x2a48], 1
jmp 0x44b524
and dword [ebp - 0x2a48], 0
mov eax, dword [ebp - 0x2a48]
mov dword [ebp - 0x3200], eax
mov dword [ebp - 0x544], 0xfffffffa
mov dword [ebp - 0xb88], 0
jmp 0x44b553
mov eax, dword [ebp - 0xb88]
inc eax
mov dword [ebp - 0xb88], eax
cmp dword [ebp - 0xb88], 1
jge 0x44b56f
mov eax, dword [ebp - 0xb88]
mov dword [ebp + eax*4 - 0x11c8], 1
jmp 0x44b546
mov dword [ebp - 0x544], 0
jmp 0x44b588
mov eax, dword [ebp - 0x544]
inc eax
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 0
jg 0x44b5fb
mov dword [ebp - 0x888], 0
mov dword [ebp - 0x888], 0
jmp 0x44b5b4
mov eax, dword [ebp - 0x888]
inc eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0
jg 0x44b5f9
mov dword [ebp - 0x3208], 0x16b471df
mov eax, dword [ebp - 0x544]
cmp dword [ebp + eax*4 - 0x11c8], 0
je 0x44b5d9
jmp 0x44b5f9
mov eax, dword [ebp - 0x544]
imul eax, dword [ebp + eax*4 - 0x11c8], 0x2972
imul eax, dword [ebp - 0x888]
mov dword [ebp - 0x3208], eax
jmp 0x44b5a7
jmp 0x44b57b
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x314], 0x7e2799ac
mov dword [ebp - 0x11cc], 6
mov dword [ebp - 0x314], 6
jmp 0x44b632
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x1b
jle 0x44b760
mov dword [ebp - 0x8b4], 1
mov dword [ebp - 0x3218], 0x92c6eed1
cmp dword [ebp - 0x8b4], 0
jne 0x44b66e
cmp dword [ebp - 0x314], 0
jne 0x44b66e
and dword [ebp - 0x1ebc], 0
jmp 0x44b678
mov dword [ebp - 0x1ebc], 1
cmp dword [ebp - 0x314], 0
je 0x44b6b7
mov eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x8b4], eax
jge 0x44b69b
mov dword [ebp - 0x3210], 1
jmp 0x44b6a2
and dword [ebp - 0x3210], 0
mov eax, 0xb0bb
test eax, eax
je 0x44b6b7
mov dword [ebp - 0x11c4], 1
jmp 0x44b6be
and dword [ebp - 0x11c4], 0
mov eax, dword [ebp - 0x314]
cmp eax, dword [ebp - 0x11c4]
jg 0x44b6d8
mov dword [ebp - 0x1f00], 1
jmp 0x44b6df
and dword [ebp - 0x1f00], 0
mov eax, dword [ebp - 0x1f00]
sub eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x11cc], eax
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x11cc], eax
jge 0x44b70b
mov dword [ebp - 0x11d4], 1
jmp 0x44b712
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0x1ebc]
sub eax, dword [ebp - 0x11d4]
mov dword [ebp - 0x3218], eax
mov byte [ebp - 0x538], 0
movzx eax, byte [ebp - 0x538]
test eax, eax
je 0x44b75b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1670
push 0xd80
push 0x1bf7
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x44b625
mov dword [ebp - 0xb90], 0
jmp 0x44b779
mov eax, dword [ebp - 0xb90]
inc eax
mov dword [ebp - 0xb90], eax
cmp dword [ebp - 0xb90], 2
jge 0x44b795
mov eax, dword [ebp - 0xb90]
mov dword [ebp + eax*4 - 0x403c], 0x30a9bca7
jmp 0x44b76c
mov dword [ebp - 0x6fc], 0xf951fe7
mov dword [ebp - 0x3220], 0x2a1e9487
mov dword [ebp - 0x3e40], 0xe790e864
mov dword [ebp - 0x3e48], 0x3735b263
mov dword [ebp - 0x250c], 0xd203
mov eax, dword [ebp - 0x6fc]
dec eax
imul eax, eax, 0xca4f
mov dword [ebp - 0x3220], eax
mov dword [ebp - 0x6fc], 0xfffffff5
jmp 0x44b7f3
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 3
jg 0x44b878
mov dword [ebp - 0x3e50], 0xffffffff
mov dword [ebp - 0x3e58], 1
mov dword [ebp - 0x8bc], 0
jmp 0x44b829
mov eax, dword [ebp - 0x8bc]
inc eax
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 2
jge 0x44b845
mov eax, dword [ebp - 0x8bc]
mov dword [ebp + eax*4 - 0x49ec], 0xfffffffd
jmp 0x44b81c
mov byte [ebp - 0x439], 0
movzx eax, byte [ebp - 0x439]
test eax, eax
je 0x44b866
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x250c]
inc eax
mov dword [ebp - 0x250c], eax
jmp 0x44b7e6
mov dword [ebp - 0x5a4], 0
jmp 0x44b891
mov eax, dword [ebp - 0x5a4]
dec eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 0xfffffff0
jle 0x44cc24
mov dword [ebp - 0x6c], 0x42a1
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x3230], 3
mov dword [ebp - 0x878], 0x302aff63
mov dword [ebp - 0x3e60], 0x22a1efe0
mov dword [ebp - 0x3e68], 1
mov dword [ebp - 0x3e70], 0xb2d505bc
mov dword [ebp - 0x3e78], 6
cmp dword [ebp - 0x6c], 0
je 0x44b959
cmp dword [ebp - 0x6c], 0
jne 0x44b959
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
jge 0x44b90b
mov dword [ebp - 0x11dc], 1
jmp 0x44b912
and dword [ebp - 0x11dc], 0
mov eax, dword [ebp - 0x11dc]
neg eax
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
jl 0x44b92e
mov dword [ebp - 0x1ec4], 1
jmp 0x44b935
and dword [ebp - 0x1ec4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1ec4], eax
jne 0x44b94c
mov dword [ebp - 0x11e4], 1
jmp 0x44b953
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x6c], 0
jne 0x44b971
cmp dword [ebp - 0x388], 0
jne 0x44b971
and dword [ebp - 0x2834], 0
jmp 0x44b97b
mov dword [ebp - 0x2834], 1
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x2834]
jl 0x44b992
mov dword [ebp - 0x11ec], 1
jmp 0x44b999
and dword [ebp - 0x11ec], 0
cmp dword [ebp - 0x11ec], 1
jge 0x44b9ae
mov dword [ebp - 0x3228], 1
jmp 0x44b9b5
and dword [ebp - 0x3228], 0
mov eax, dword [ebp - 0x3230]
mov dword [ebp - 0x3e80], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x3e88], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x6c], 0
jmp 0x44b9e6
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xe
jle 0x44bb48
mov dword [ebp - 0x3e90], 0xfffffffc
mov dword [ebp - 0x3e98], 0xfffffffb
mov dword [ebp - 0xb98], 0
jmp 0x44ba1d
mov eax, dword [ebp - 0xb98]
inc eax
mov dword [ebp - 0xb98], eax
cmp dword [ebp - 0xb98], 3
jge 0x44ba39
mov eax, dword [ebp - 0xb98]
mov dword [ebp + eax*4 - 0x4d38], 0x23e46920
jmp 0x44ba10
mov dword [ebp - 0x388], 0
jmp 0x44ba52
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x1b
jg 0x44bb07
mov dword [ebp - 0x3ea0], 0x1f0dfbc4
mov dword [ebp - 0x3ea8], 0x1e13ca4d
mov dword [ebp - 0x3eb0], 1
mov dword [ebp - 0x3eb8], 6
mov dword [ebp - 0x3ec0], 0x403132d6
mov dword [ebp - 0x3ec8], 0xffffffff
mov dword [ebp - 0x3ed0], 0xa1dd7933
mov dword [ebp - 0x3ed8], 6
mov dword [ebp - 0x3ee0], 0x21692869
mov dword [ebp - 0x3ee8], 0x983c17a3
mov dword [ebp - 0x3ef0], 1
mov dword [ebp - 0x3ef8], 1
mov dword [ebp - 0x3f00], 0xfffffff8
mov dword [ebp - 0x3f08], 0x1f51b437
mov dword [ebp - 0x1ecc], 9
mov eax, dword [ebp - 0x1ecc]
dec eax
mov dword [ebp - 0x1ecc], eax
jmp 0x44ba45
mov dword [ebp - 0x878], 0
jmp 0x44bb20
mov eax, dword [ebp - 0x878]
dec eax
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0xffffffee
jne 0x44bb43
mov byte [ebp - 0x53a], 0
movzx eax, byte [ebp - 0x53a]
test eax, eax
je 0x44bb41
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x44bb13
jmp 0x44b9df
mov dword [ebp - 0x7c4], 4
mov dword [ebp - 0x10b8], 0xffffffff
mov dword [ebp - 0x10b0], 8
mov dword [ebp - 0x8c4], 0
jmp 0x44bb7f
mov eax, dword [ebp - 0x8c4]
inc eax
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 3
jge 0x44bb9b
mov eax, dword [ebp - 0x8c4]
mov dword [ebp + eax*4 - 0x2c10], 1
jmp 0x44bb72
mov byte [ebp - 0x441], 0
movzx eax, byte [ebp - 0x441]
test eax, eax
je 0x44bbb8
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x3f10], eax
mov eax, 0x870
sub eax, dword [ebp - 0x10b8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2c10]
je 0x44bbec
mov dword [ebp - 0x11f4], 1
jmp 0x44bbf3
and dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x11f4], eax
je 0x44bc0d
mov dword [ebp - 0x3238], 1
jmp 0x44bc14
and dword [ebp - 0x3238], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c10]
add eax, 0x671c
imul eax, eax, 0x4c20
test eax, eax
jne 0x44bc47
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2c10], 0
jne 0x44bc47
and dword [ebp - 0x2514], 0
jmp 0x44bc51
mov dword [ebp - 0x2514], 1
mov eax, dword [ebp - 0x10b0]
inc eax
mov dword [ebp - 0x10b0], eax
mov eax, dword [ebp - 0x10b0]
cmp eax, dword [ebp - 0x2514]
jg 0x44bc78
mov dword [ebp - 0x11fc], 1
jmp 0x44bc7f
and dword [ebp - 0x11fc], 0
mov eax, dword [ebp - 0x11fc]
mov dword [ebp - 0x10b8], eax
mov eax, dword [ebp - 0x10b8]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x2c10]
cmp eax, dword [ebp - 0x7c4]
jl 0x44bcb2
mov dword [ebp - 0x1ed4], 1
jmp 0x44bcb9
and dword [ebp - 0x1ed4], 0
cmp dword [ebp - 0x1ed4], 1
jne 0x44bcce
mov dword [ebp - 0x1204], 1
jmp 0x44bcd5
and dword [ebp - 0x1204], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x1204], eax
jg 0x44bcef
mov dword [ebp - 0x2b08], 1
jmp 0x44bcf6
and dword [ebp - 0x2b08], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x2b08], eax
jge 0x44bd10
mov dword [ebp - 0x120c], 1
jmp 0x44bd17
and dword [ebp - 0x120c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c10]
add eax, dword [ebp - 0x120c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c10], eax
mov dword [ebp - 0x3f18], 0x22124f84
mov dword [ebp - 0x3f20], 0xfffffff6
mov dword [ebp - 0x3f28], 0xfffffffa
mov dword [ebp - 0x3f30], 0xd509978f
mov dword [ebp - 0x4790], 1
mov dword [ebp - 0x478c], 1
mov dword [ebp - 0x4788], 1
mov dword [ebp - 0x4784], 1
mov dword [ebp - 0x3f38], 0x4edf6b3e
mov dword [ebp - 0x3f40], 0
mov dword [ebp - 0x3f48], 0xd7feae21
mov dword [ebp - 0x3f50], 9
mov dword [ebp - 0x1edc], 0xfff6
mov dword [ebp - 0x194], 0
jmp 0x44bdd1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x44bded
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x4a64], 0x387fb0b0
jmp 0x44bdc4
mov dword [ebp - 0x194], 0
jmp 0x44be06
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x44be22
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x3f58], 0xffffffff
jmp 0x44bdf9
mov eax, dword [ebp - 0x1edc]
dec eax
mov dword [ebp - 0x1edc], eax
mov dword [ebp - 0xba0], 0
jmp 0x44be48
mov eax, dword [ebp - 0xba0]
inc eax
mov dword [ebp - 0xba0], eax
cmp dword [ebp - 0xba0], 2
jge 0x44be64
mov eax, dword [ebp - 0xba0]
mov dword [ebp + eax*4 - 0x10d8], 0xc4c8d3c8
jmp 0x44be3b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x10d8], 0xffffffe6
jmp 0x44be92
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10d8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x10d8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10d8], 0xfffffff5
je 0x44cc1f
mov dword [ebp - 0x54], 0x6d0374c7
mov dword [ebp - 0x10c0], 0xf6a715cc
mov dword [ebp - 0x1214], 0x2ba29f58
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x634], 0xfffffffe
mov dword [ebp - 0x2c8], 0
jmp 0x44beee
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 3
jge 0x44bf0a
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x3660], 0xf803
jmp 0x44bee1
mov dword [ebp - 0x2c8], 0
jmp 0x44bf23
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x44bf3f
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x4024], 0x11c25c53
jmp 0x44bf16
cmp dword [ebp - 0x54], 0
je 0x44c0b1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10c0], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x1214]
neg eax
cmp dword [ebp - 0x10c0], eax
jge 0x44bf77
mov dword [ebp - 0x1224], 1
jmp 0x44bf7e
and dword [ebp - 0x1224], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 0
jne 0x44bfab
cmp dword [ebp - 0x8cc], 0
jne 0x44bfab
and dword [ebp - 0x251c], 0
jmp 0x44bfb5
mov dword [ebp - 0x251c], 1
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x251c]
test eax, eax
je 0x44bfd5
cmp dword [ebp - 0x54], 0
je 0x44bfd5
mov dword [ebp - 0x121c], 1
jmp 0x44bfdc
and dword [ebp - 0x121c], 0
mov eax, dword [ebp - 0x121c]
sub eax, 0x3672
cmp eax, dword [ebp - 0x54]
je 0x44bff8
mov dword [ebp - 0x3240], 1
jmp 0x44bfff
and dword [ebp - 0x3240], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3f60], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jge 0x44c029
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3660], 0
jne 0x44c029
and dword [ebp - 0x1ee4], 0
jmp 0x44c033
mov dword [ebp - 0x1ee4], 1
mov eax, dword [ebp - 0x1ee4]
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 0xfcc6
jle 0x44c057
mov dword [ebp - 0x283c], 1
jmp 0x44c05e
and dword [ebp - 0x283c], 0
mov eax, dword [ebp - 0x1224]
cmp eax, dword [ebp - 0x283c]
je 0x44c078
mov dword [ebp - 0x122c], 1
jmp 0x44c07f
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x122c], eax
jne 0x44c096
mov dword [ebp - 0x1eec], 1
jmp 0x44c09d
and dword [ebp - 0x1eec], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1eec], eax
jle 0x44c0b1
and dword [ebp - 0x1234], 0
jmp 0x44c0bb
mov dword [ebp - 0x1234], 1
imul eax, dword [ebp - 0x1234], 0xffffffff
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3660]
jle 0x44c0dd
mov dword [ebp - 0x3248], 1
jmp 0x44c0e4
and dword [ebp - 0x3248], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3660]
mov dword [ebp - 0x3f68], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3f70], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3660]
mov dword [ebp - 0x3f78], eax
mov eax, dword [ebp - 0x10c0]
add eax, dword [ebp - 0x54]
shl eax, 2
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4024], eax
mov dword [ebp - 0x634], 0
jmp 0x44c144
mov eax, dword [ebp - 0x634]
dec eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 0xfffffffb
jge 0x44c19d
mov byte [ebp - 0x53c], 0
movzx eax, byte [ebp - 0x53c]
test eax, eax
je 0x44c16c
push 0x1c02
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov byte [ebp - 0x449], 0
movzx eax, byte [ebp - 0x449]
test eax, eax
je 0x44c19b
push 0x1f27
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
jmp 0x44c137
mov dword [ebp - 0x704], 0xb72f
mov dword [ebp - 0x59c], 0xffffffff
mov dword [ebp - 0x1ef4], 0xffffffff
mov dword [ebp - 0xba8], 0
jmp 0x44c1d4
mov eax, dword [ebp - 0xba8]
inc eax
mov dword [ebp - 0xba8], eax
cmp dword [ebp - 0xba8], 2
jge 0x44c1f0
mov eax, dword [ebp - 0xba8]
mov dword [ebp + eax*4 - 0x4030], 4
jmp 0x44c1c7
cmp dword [ebp - 0x704], 0x89a6
je 0x44c208
mov dword [ebp - 0x2524], 1
jmp 0x44c20f
and dword [ebp - 0x2524], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x59c], eax
imul eax, dword [ebp - 0x2524], 0xbf3384b0
mov ecx, dword [ebp - 0x59c]
sub ecx, eax
mov eax, dword [ebp - 0x704]
sub eax, ecx
cmp eax, dword [ebp - 0x704]
jne 0x44c249
mov dword [ebp - 0x123c], 1
jmp 0x44c250
and dword [ebp - 0x123c], 0
mov eax, dword [ebp - 0x123c]
mov dword [ebp - 0x1ef4], eax
mov dword [ebp - 0x59c], 0x1c
jmp 0x44c275
mov eax, dword [ebp - 0x59c]
dec eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 0xffffffec
jge 0x44c4af
mov dword [ebp - 0xd4], 0xb8bffbef
mov dword [ebp - 0x29cc], 6
mov dword [ebp - 0x8d4], 0
jmp 0x44c2af
mov eax, dword [ebp - 0x8d4]
inc eax
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 2
jge 0x44c2cb
mov eax, dword [ebp - 0x8d4]
mov dword [ebp + eax*4 - 0x3674], 0xbb66efe0
jmp 0x44c2a2
mov dword [ebp - 0xd4], 0xffffffff
cmp dword [ebp - 0xd4], 0
je 0x44c475
mov dword [ebp - 0x3250], 0xffffffff
mov dword [ebp - 0xbb0], 0
jmp 0x44c305
mov eax, dword [ebp - 0xbb0]
inc eax
mov dword [ebp - 0xbb0], eax
cmp dword [ebp - 0xbb0], 4
jge 0x44c321
mov eax, dword [ebp - 0xbb0]
mov dword [ebp + eax*4 - 0x485c], 0
jmp 0x44c2f8
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x1ef4], eax
jne 0x44c33b
mov dword [ebp - 0x1efc], 1
jmp 0x44c342
and dword [ebp - 0x1efc], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x3f80], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4030], 0
jne 0x44c370
cmp dword [ebp - 0x704], 0
jne 0x44c370
and dword [ebp - 0x8dc], 0
jmp 0x44c37a
mov dword [ebp - 0x8dc], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8dc]
mov dword [ebp + eax - 0x3674], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8dc]
mov dword [ebp + eax - 0x485c], ecx
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x8dc], eax
jne 0x44c3ba
mov dword [ebp - 0x1244], 1
jmp 0x44c3c1
and dword [ebp - 0x1244], 0
mov eax, dword [ebp - 0x1244]
mov dword [ebp - 0x29cc], eax
cmp dword [ebp - 0x29cc], 1
jbe 0x44c3e2
mov dword [ebp - 0x124c], 1
jmp 0x44c3e9
and dword [ebp - 0x124c], 0
imul eax, dword [ebp - 0x124c], 0x1a1f
cmp eax, dword [ebp - 0xd4]
jg 0x44c407
mov dword [ebp - 0x1254], 1
jmp 0x44c40e
and dword [ebp - 0x1254], 0
mov eax, dword [ebp - 0x1efc]
add eax, dword [ebp - 0x1254]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x44c441
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x485c], 0
je 0x44c441
mov dword [ebp - 0x252c], 1
jmp 0x44c448
and dword [ebp - 0x252c], 0
cmp dword [ebp - 0x252c], 0x11b55e9
je 0x44c460
mov dword [ebp - 0x125c], 1
jmp 0x44c467
and dword [ebp - 0x125c], 0
mov eax, dword [ebp - 0x125c]
mov dword [ebp - 0x3250], eax
jmp 0x44c4aa
mov dword [ebp - 0xd4], 0
jmp 0x44c48e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jg 0x44c4aa
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x3674], 0x64e62b50
jmp 0x44c481
jmp 0x44c268
mov dword [ebp - 0x3298], 0x39ee491b
mov dword [ebp - 0x114], 0x24ec2e0c
mov dword [ebp - 0x3278], 0xffff
mov dword [ebp - 0x8c], 0
jmp 0x44c4e6
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x44c502
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x684], 0x3526c715
jmp 0x44c4d9
mov dword [ebp - 0x8c], 0
jmp 0x44c51b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x44c537
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x48bc], 0xffffffff
jmp 0x44c50e
mov dword [ebp - 0x8c], 0
jmp 0x44c550
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x44c56c
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x4a24], 0x65dd4d14
jmp 0x44c543
mov dword [ebp - 0x114], 0xfffffff3
jmp 0x44c585
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xd
jle 0x44c74b
mov dword [ebp - 0x1084], 0xa2b82c44
mov dword [ebp - 0x3260], 1
mov dword [ebp - 0x3268], 0xffffffff
cmp dword [ebp - 0x114], 0
jne 0x44c70f
cmp dword [ebp - 0x114], 0x746e33a7
je 0x44c5d5
mov dword [ebp - 0x3258], 1
jmp 0x44c5dc
and dword [ebp - 0x3258], 0
mov eax, dword [ebp - 0x1084]
mov dword [ebp - 0x3f88], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x3f90], eax
mov eax, dword [ebp - 0x3260]
mov dword [ebp - 0x3f98], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1f04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f04]
mov dword [ebp + eax - 0x684], ecx
mov eax, dword [ebp - 0x1f04]
shl eax, 2
cmp eax, 0x752570e
jg 0x44c63b
mov dword [ebp - 0x112c], 1
jmp 0x44c642
and dword [ebp - 0x112c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x112c]
mov dword [ebp + eax - 0x48bc], ecx
cmp dword [ebp - 0x112c], 0
jne 0x44c66a
mov dword [ebp - 0x1264], 1
jmp 0x44c671
and dword [ebp - 0x1264], 0
mov eax, dword [ebp - 0x3268]
imul eax, dword [ebp - 0x1264]
test eax, eax
jne 0x44c694
cmp dword [ebp - 0x1084], 0
jne 0x44c694
and dword [ebp - 0x2844], 0
jmp 0x44c69e
mov dword [ebp - 0x2844], 1
cmp dword [ebp - 0x2844], 0xfffffffc
je 0x44c6b3
mov dword [ebp - 0x126c], 1
jmp 0x44c6ba
and dword [ebp - 0x126c], 0
imul eax, dword [ebp - 0x126c], 0xffffffff
cmp eax, 0xffffffff
jle 0x44c6d2
mov dword [ebp - 0x3270], 1
jmp 0x44c6d9
and dword [ebp - 0x3270], 0
mov eax, dword [ebp - 0x1084]
mov dword [ebp - 0x3fa0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x684]
mov dword [ebp - 0x3fa8], eax
or eax, 0xffffffff
jne 0x44c70f
cmp dword [ebp - 0x3278], 0
jne 0x44c70f
and dword [ebp - 0x1f0c], 0
jmp 0x44c719
mov dword [ebp - 0x1f0c], 1
cmp dword [ebp - 0x1f0c], 0xfffffff8
je 0x44c72e
mov dword [ebp - 0x3280], 1
jmp 0x44c735
and dword [ebp - 0x3280], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4a24], 0xffffffff
jmp 0x44c578
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x684], 0
jne 0x44c767
mov dword [ebp - 0x2534], 1
jmp 0x44c76e
and dword [ebp - 0x2534], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x684], 0
je 0x44c79a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x684], 0
je 0x44c79a
mov dword [ebp - 0x127c], 1
jmp 0x44c7a1
and dword [ebp - 0x127c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x684]
mov dword [ebp - 0x3fb0], eax
cmp dword [ebp - 0x114], 0x6511c25c
jl 0x44c7cc
mov dword [ebp - 0x1274], 1
jmp 0x44c7d3
and dword [ebp - 0x1274], 0
mov eax, dword [ebp - 0x1274]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x2534]
sub eax, dword [ebp - 0x127c]
cmp eax, dword [ebp - 0x114]
je 0x44c7ff
mov dword [ebp - 0x1f14], 1
jmp 0x44c806
and dword [ebp - 0x1f14], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1f14]
mov dword [ebp + eax - 0x48bc], ecx
mov dword [ebp - 0x358c], 1
mov dword [ebp - 0x3588], 1
mov dword [ebp - 0x3584], 1
mov dword [ebp - 0x3580], 1
mov dword [ebp - 0xbb8], 0
jmp 0x44c85a
mov eax, dword [ebp - 0xbb8]
inc eax
mov dword [ebp - 0xbb8], eax
cmp dword [ebp - 0xbb8], 1
jge 0x44c876
mov eax, dword [ebp - 0xbb8]
mov dword [ebp + eax*4 - 0x87c], 0
jmp 0x44c84d
mov byte [ebp - 0x53e], 0
movzx eax, byte [ebp - 0x53e]
test eax, eax
je 0x44c892
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x87c], 0
jmp 0x44c8c0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x87c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x87c], 0x1a
jg 0x44ca1d
mov dword [ebp - 0x390], 0xfffffffd
mov dword [ebp - 0x3fb8], 0xfffffffb
mov dword [ebp - 0x390], 0
jmp 0x44c901
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 3
jg 0x44ca18
mov dword [ebp - 0x1284], 0x8c9dffbe
mov dword [ebp - 0x8e4], 0
jmp 0x44c931
mov eax, dword [ebp - 0x8e4]
inc eax
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x8e4], 1
jge 0x44c94d
mov eax, dword [ebp - 0x8e4]
mov dword [ebp + eax*4 - 0x3288], 0xffffffff
jmp 0x44c924
mov eax, dword [ebp - 0x390]
mov eax, dword [ebp + eax*4 - 0x358c]
mov dword [ebp - 0x3fc0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
mov dword [ebp - 0x1284], eax
mov eax, dword [ebp - 0x1284]
mov ecx, dword [ebp - 0x390]
imul eax, dword [ebp + ecx*4 - 0x358c]
mov ecx, dword [ebp - 0x390]
cmp eax, dword [ebp + ecx*4 - 0x358c]
jl 0x44c9a2
mov dword [ebp - 0x2a94], 1
jmp 0x44c9a9
and dword [ebp - 0x2a94], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a94]
mov dword [ebp + eax - 0x3288], ecx
mov eax, 0x96a0b597
test eax, eax
je 0x44c9dc
mov dword [ebp - 0x3290], 0x1791
cmp dword [ebp - 0x3290], 0
je 0x44c9da
jmp 0x44ca18
jmp 0x44ca13
mov byte [ebp - 0x451], 0
movzx eax, byte [ebp - 0x451]
test eax, eax
je 0x44ca13
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0x253b
push 0xc71
push 0x1723
push 0x22e0
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x44c8f4
jmp 0x44c8a5
mov dword [ebp - 0xbc0], 0
jmp 0x44ca36
mov eax, dword [ebp - 0xbc0]
inc eax
mov dword [ebp - 0xbc0], eax
cmp dword [ebp - 0xbc0], 3
jge 0x44ca52
mov eax, dword [ebp - 0xbc0]
mov dword [ebp + eax*4 - 0x4528], 0xffff
jmp 0x44ca29
mov dword [ebp - 0x3fc8], 5
mov byte [ebp - 0x540], 0
movzx eax, byte [ebp - 0x540]
test eax, eax
je 0x44ca80
push 0xe4d
push 0x9e4
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 0x459], 0
movzx eax, byte [ebp - 0x459]
test eax, eax
je 0x44caad
push 0
push 0
push 0x1bc7
push 0x1e31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4528]
mov dword [ebp - 0x3fd0], eax
cmp dword [ebp - 0x5a4], 0x31d14cd4
jge 0x44cad9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10d8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10d8], 0
je 0x44cafe
mov eax, 0x5bef
test eax, eax
je 0x44cafe
mov dword [ebp - 0x128c], 1
jmp 0x44cb05
and dword [ebp - 0x128c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10d8]
cmp dword [ebp - 0x128c], eax
jne 0x44cb26
mov dword [ebp - 0x1f1c], 1
jmp 0x44cb2d
and dword [ebp - 0x1f1c], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x1f1c], eax
jl 0x44cb47
mov dword [ebp - 0x1294], 1
jmp 0x44cb4e
and dword [ebp - 0x1294], 0
mov eax, dword [ebp - 0x70c]
imul eax, dword [ebp - 0x1294]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x403c], eax
mov dword [ebp - 0x7cc], 0x73838a1f
mov dword [ebp - 0x8ec], 0
jmp 0x44cb8b
mov eax, dword [ebp - 0x8ec]
inc eax
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 3
jge 0x44cba7
mov eax, dword [ebp - 0x8ec]
mov dword [ebp + eax*4 - 0x4990], 0xffffffff
jmp 0x44cb7e
mov dword [ebp - 0x7cc], 0
jmp 0x44cbc0
mov eax, dword [ebp - 0x7cc]
inc eax
mov dword [ebp - 0x7cc], eax
cmp dword [ebp - 0x7cc], 2
jg 0x44cbdd
mov eax, dword [ebp - 0x7cc]
cmp dword [ebp + eax*4 - 0x4990], 0
je 0x44cbdb
jmp 0x44cbdd
jmp 0x44cbb3
mov byte [ebp - 0x545], 0
movzx eax, byte [ebp - 0x545]
test eax, eax
je 0x44cc08
push 0x135e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4528]
mov dword [ebp - 0x3298], eax
jmp 0x44be77
jmp 0x44b884
jmp 0x44b286
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x290], 0x62395e2d
mov dword [ebp - 0x3fd8], 1
mov dword [ebp - 0x3fe0], 0xff81308f
mov dword [ebp - 0x3fe8], 0x713981d
mov dword [ebp - 0x3ff0], 0xd6c332e4
mov dword [ebp - 0x3ff8], 1
mov dword [ebp - 0x4000], 0xfffffff8
mov dword [ebp - 0x43f0], 0xffffffff
mov dword [ebp - 0x12d4], 0
mov dword [ebp - 0x19c], 0
jmp 0x44cca6
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x44ccc2
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x4b3c], 0xfffffffc
jmp 0x44cc99
mov dword [ebp - 0x19c], 0
jmp 0x44ccdb
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x44ccf7
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x4c90], 1
jmp 0x44ccce
or eax, 0xffffffff
sub eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
je 0x44cd14
mov dword [ebp - 0x253c], 1
jmp 0x44cd1b
and dword [ebp - 0x253c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x253c], eax
je 0x44cd3e
mov eax, 0x78f1e0c8
test eax, eax
je 0x44cd3e
mov dword [ebp - 0x129c], 1
jmp 0x44cd45
and dword [ebp - 0x129c], 0
mov eax, dword [ebp - 0x290]
add eax, dword [ebp - 0x129c]
add eax, dword [ebp - 0xb4]
neg eax
cmp eax, dword [ebp - 0xb4]
jge 0x44cd6d
mov dword [ebp - 0x1f24], 1
jmp 0x44cd74
and dword [ebp - 0x1f24], 0
cmp dword [ebp - 0x1f24], 1
je 0x44cd89
mov dword [ebp - 0x2c90], 1
jmp 0x44cd90
and dword [ebp - 0x2c90], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x43f8], eax
imul eax, dword [ebp - 0xb4], 0
cmp eax, dword [ebp - 0xb4]
jne 0x44cdb7
mov dword [ebp - 0x12a4], 1
jmp 0x44cdbe
and dword [ebp - 0x12a4], 0
mov eax, dword [ebp - 0x12a4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0xb4], eax
je 0x44cde4
mov dword [ebp - 0x284c], 1
jmp 0x44cdeb
and dword [ebp - 0x284c], 0
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x284c], eax
jne 0x44ce05
mov dword [ebp - 0x12ac], 1
jmp 0x44ce0c
and dword [ebp - 0x12ac], 0
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x12ac]
test eax, eax
jne 0x44ce2f
cmp dword [ebp - 0xb4], 0
jne 0x44ce2f
and dword [ebp - 0x1f2c], 0
jmp 0x44ce39
mov dword [ebp - 0x1f2c], 1
mov eax, dword [ebp - 0x290]
add eax, dword [ebp - 0x1f2c]
je 0x44ce72
cmp dword [ebp - 0x290], 0
je 0x44ce72
mov byte [ebp - 0x461], 0
movzx eax, byte [ebp - 0x461]
test eax, eax
je 0x44ce6d
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x44d111
mov dword [ebp - 0x1a4], 0x8597a0b8
mov dword [ebp - 0x2e8], 0x1996
mov dword [ebp - 0x12cc], 0xc77a5c6a
mov dword [ebp - 0x4400], 0
mov dword [ebp - 0x4408], 1
mov dword [ebp - 0xbc8], 0
jmp 0x44cebd
mov eax, dword [ebp - 0xbc8]
inc eax
mov dword [ebp - 0xbc8], eax
cmp dword [ebp - 0xbc8], 1
jge 0x44ced9
mov eax, dword [ebp - 0xbc8]
mov dword [ebp + eax*4 - 0x4410], 1
jmp 0x44ceb0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x4418], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x4420], eax
cmp dword [ebp - 0x290], 0xfffffffe
jge 0x44cf06
mov dword [ebp - 0x12b4], 1
jmp 0x44cf0d
and dword [ebp - 0x12b4], 0
mov eax, dword [ebp - 0x12b4]
add eax, 0xb5df
cmp eax, dword [ebp - 0x2e8]
jge 0x44cf2c
mov dword [ebp - 0x32a8], 1
jmp 0x44cf33
and dword [ebp - 0x32a8], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x4428], eax
cmp dword [ebp - 0x1a4], 0
jl 0x44cf54
mov dword [ebp - 0x2544], 1
jmp 0x44cf5b
and dword [ebp - 0x2544], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x2544], eax
jg 0x44cf7e
cmp dword [ebp - 0x2e8], 0
je 0x44cf7e
mov dword [ebp - 0x32b0], 1
jmp 0x44cf85
and dword [ebp - 0x32b0], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x4430], eax
imul eax, dword [ebp - 0xb4], 0xfffffffd
mov ecx, dword [ebp - 0x2e8]
add ecx, dword [ebp - 0x1a4]
cmp eax, ecx
jne 0x44cfb4
mov dword [ebp - 0x32b8], 1
jmp 0x44cfbb
and dword [ebp - 0x32b8], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x4438], eax
cmp dword [ebp - 0x1a4], 0x34ef
jg 0x44cfdf
mov dword [ebp - 0x12bc], 1
jmp 0x44cfe6
and dword [ebp - 0x12bc], 0
mov eax, dword [ebp - 0x1a4]
imul eax, dword [ebp - 0x12bc]
test eax, eax
jne 0x44d009
cmp dword [ebp - 0x2e8], 0
jne 0x44d009
and dword [ebp - 0x1f34], 0
jmp 0x44d013
mov dword [ebp - 0x1f34], 1
mov eax, dword [ebp - 0x12cc]
add eax, dword [ebp - 0x1f34]
cmp eax, dword [ebp - 0xb4]
jl 0x44d033
mov dword [ebp - 0x12c4], 1
jmp 0x44d03a
and dword [ebp - 0x12c4], 0
cmp dword [ebp - 0x12c4], 0xb08f
jge 0x44d052
mov dword [ebp - 0x29d4], 1
jmp 0x44d059
and dword [ebp - 0x29d4], 0
mov eax, dword [ebp - 0x2e8]
imul eax, dword [ebp - 0x29d4]
cmp eax, dword [ebp - 0x12cc]
jg 0x44d07a
mov dword [ebp - 0x1f3c], 1
jmp 0x44d081
and dword [ebp - 0x1f3c], 0
mov eax, dword [ebp - 0x1f3c]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x2e8], 0
jmp 0x44d0a6
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x34
jne 0x44d111
mov dword [ebp - 0x4440], 0xfffffff7
mov dword [ebp - 0x4448], 0
mov dword [ebp - 0x4450], 0x3adeb0cc
mov dword [ebp - 0x8f4], 0
jmp 0x44d0e6
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 2
jge 0x44d102
mov eax, dword [ebp - 0x8f4]
mov dword [ebp + eax*4 - 0x4a7c], 0x8275baed
jmp 0x44d0d9
mov eax, dword [ebp - 0x12d4]
inc eax
mov dword [ebp - 0x12d4], eax
jmp 0x44d099
mov dword [ebp - 0x4458], 9
mov dword [ebp - 0x4460], 0xe85a7b05
mov dword [ebp - 0x63c], 0x556123d4
mov dword [ebp - 0xbd0], 0
jmp 0x44d148
mov eax, dword [ebp - 0xbd0]
inc eax
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0xbd0], 4
jge 0x44d164
mov eax, dword [ebp - 0xbd0]
mov dword [ebp + eax*4 - 0x4d54], 0x833fcb50
jmp 0x44d13b
mov eax, dword [ebp - 0x63c]
inc eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x63c], 0
jmp 0x44d18a
mov eax, dword [ebp - 0x63c]
inc eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 6
jg 0x44d1b6
mov byte [ebp - 0x547], 0
movzx eax, byte [ebp - 0x547]
test eax, eax
je 0x44d1b4
push 0
push 0x1281
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
jmp 0x44d17d
mov dword [ebp - 0x34c], 0x68ec0ae9
mov dword [ebp - 0x5ac], 3
mov dword [ebp - 0x32d8], 0xfffffffe
mov dword [ebp - 0x4468], 0x6b59229a
mov dword [ebp - 0x12f4], 0xffffffff
mov dword [ebp - 0x32c8], 0xe5ec3521
mov dword [ebp - 0x8fc], 0
jmp 0x44d20b
mov eax, dword [ebp - 0x8fc]
inc eax
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 1
jge 0x44d227
mov eax, dword [ebp - 0x8fc]
mov dword [ebp + eax*4 - 0x1f54], 0xbf261718
jmp 0x44d1fe
mov dword [ebp - 0x34c], 0xb
jmp 0x44d240
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0xffffffea
jle 0x44d450
mov dword [ebp - 0xe64], 0xe57b
mov dword [ebp - 0x12dc], 1
mov dword [ebp - 0x4470], 8
mov dword [ebp - 0x4478], 6
mov dword [ebp - 0x4480], 2
mov dword [ebp - 0x12ec], 0x2fd8
mov dword [ebp - 0xbd8], 0
jmp 0x44d2a2
mov eax, dword [ebp - 0xbd8]
inc eax
mov dword [ebp - 0xbd8], eax
cmp dword [ebp - 0xbd8], 4
jge 0x44d2be
mov eax, dword [ebp - 0xbd8]
mov dword [ebp + eax*4 - 0x4e64], 0x187b35f1
jmp 0x44d295
cmp dword [ebp - 0xe64], 0
je 0x44d422
mov dword [ebp - 0x32c0], 0xc299e885
mov dword [ebp - 0x1ac], 0
jmp 0x44d2ee
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x44d30a
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x3784], 0xffffffff
jmp 0x44d2e1
mov dword [ebp - 0x1ac], 0
jmp 0x44d323
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x44d33f
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x4bfc], 0xf7c629c4
jmp 0x44d316
cmp dword [ebp - 0xe64], 0
jne 0x44d3fd
mov eax, 0x7b5b
test eax, eax
je 0x44d383
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3784]
cmp dword [ebp - 0xe64], eax
jne 0x44d376
mov dword [ebp - 0x254c], 1
jmp 0x44d37d
and dword [ebp - 0x254c], 0
mov eax, dword [ebp - 0x34c]
mov eax, dword [ebp - 0x12dc]
mov dword [ebp - 0x4488], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3784]
mov dword [ebp - 0x4490], eax
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x12dc], eax
je 0x44d3bc
mov dword [ebp - 0x1f44], 1
jmp 0x44d3c3
and dword [ebp - 0x1f44], 0
cmp dword [ebp - 0x1f44], 0xfffffff8
jb 0x44d3d8
mov dword [ebp - 0x12e4], 1
jmp 0x44d3df
and dword [ebp - 0x12e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3784]
cmp dword [ebp - 0x12e4], eax
je 0x44d3fd
and dword [ebp - 0x2854], 0
jmp 0x44d407
mov dword [ebp - 0x2854], 1
mov eax, dword [ebp - 0x2854]
mov dword [ebp - 0x32c0], eax
mov eax, dword [ebp - 0x12ec]
dec eax
mov dword [ebp - 0x12ec], eax
jmp 0x44d439
mov dword [ebp - 0x1f4c], 0x9e13
mov eax, dword [ebp - 0x1f4c]
dec eax
mov dword [ebp - 0x1f4c], eax
mov eax, dword [ebp - 0x12f4]
add eax, dword [ebp - 0x34c]
mov dword [ebp - 0x32c8], eax
jmp 0x44d233
mov dword [ebp - 0x5ac], 0x1d
jmp 0x44d469
mov eax, dword [ebp - 0x5ac]
dec eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0xffffffe8
jle 0x44d5f0
mov dword [ebp - 0x904], 4
mov dword [ebp - 0x255c], 0x54fd57ec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f54], 0
je 0x44d514
cmp dword [ebp - 0x904], 0
jne 0x44d508
cmp dword [ebp - 0x12f4], 1
jbe 0x44d4b8
mov dword [ebp - 0x2554], 1
jmp 0x44d4bf
and dword [ebp - 0x2554], 0
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0x2554]
je 0x44d4d9
mov dword [ebp - 0x12fc], 1
jmp 0x44d4e0
and dword [ebp - 0x12fc], 0
cmp dword [ebp - 0x12fc], 0xb92a1dd6
jb 0x44d4f8
mov dword [ebp - 0x32d0], 1
jmp 0x44d4ff
and dword [ebp - 0x32d0], 0
cmp dword [ebp - 0x5ac], 0
je 0x44d514
mov dword [ebp - 0xfd4], 1
jmp 0x44d51b
and dword [ebp - 0xfd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfd4]
mov dword [ebp + eax - 0x1f54], ecx
mov eax, dword [ebp - 0x32d8]
cmp dword [ebp - 0xfd4], eax
je 0x44d548
mov dword [ebp - 0x1304], 1
jmp 0x44d54f
and dword [ebp - 0x1304], 0
cmp dword [ebp - 0x1304], 0
jae 0x44d564
mov dword [ebp - 0x2b74], 1
jmp 0x44d56b
and dword [ebp - 0x2b74], 0
mov eax, dword [ebp - 0x255c]
cmp dword [ebp - 0x2b74], eax
jg 0x44d585
mov dword [ebp - 0x130c], 1
jmp 0x44d58c
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x5ac]
add eax, dword [ebp - 0x130c]
cmp eax, dword [ebp - 0x904]
jne 0x44d5ac
mov dword [ebp - 0x1f5c], 1
jmp 0x44d5b3
and dword [ebp - 0x1f5c], 0
mov eax, dword [ebp - 0x904]
cmp dword [ebp - 0x1f5c], eax
jle 0x44d5cd
mov dword [ebp - 0x1314], 1
jmp 0x44d5d4
and dword [ebp - 0x1314], 0
mov eax, dword [ebp - 0x1314]
mov dword [ebp - 0x255c], eax
cmp dword [ebp - 0x904], 0
je 0x44d5eb
jmp 0x44d5f0
jmp 0x44d45c
mov dword [ebp - 0x11a0], 1
mov dword [ebp - 0x119c], 1
mov dword [ebp - 0x1198], 1
mov dword [ebp - 0x1194], 1
mov dword [ebp - 0x4c], 1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x11a0], 0xffffffe3
jmp 0x44d64d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11a0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x11a0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x11a0], 0xffffffea
jne 0x44d900
mov dword [ebp - 0x714], 0xe5f36f6d
mov dword [ebp - 0xbe0], 0
jmp 0x44d684
mov eax, dword [ebp - 0xbe0]
inc eax
mov dword [ebp - 0xbe0], eax
cmp dword [ebp - 0xbe0], 2
jge 0x44d6a0
mov eax, dword [ebp - 0xbe0]
mov dword [ebp + eax*4 - 0x1168], 0xfffffff9
jmp 0x44d677
mov eax, dword [ebp - 0x714]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x11a0]
push 4
pop edx
imul edx, edx, 0
imul edx, dword [ebp + edx - 0x1168], 0
sub ecx, edx
push 4
pop edx
shl edx, 0
add ecx, dword [ebp + edx - 0x11a0]
add eax, ecx
mov dword [ebp - 0x32e0], eax
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x32e0], 0
je 0x44d703
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x11a0]
mov dword [ebp - 0x4c], eax
jmp 0x44d8bd
mov dword [ebp - 0xe6c], 1
mov dword [ebp - 0x4c], 1
jmp 0x44d71d
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x44d74e
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x1168], ecx
mov byte [ebp - 0x469], 0
movzx eax, byte [ebp - 0x469]
test eax, eax
je 0x44d74c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x44d716
cmp dword [ebp - 0xe6c], 0xcf8b
je 0x44d766
mov dword [ebp - 0x32e8], 1
jmp 0x44d76d
and dword [ebp - 0x32e8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x11a0]
mov dword [ebp - 0x4498], eax
mov eax, 0x11de
cmp eax, 1
jne 0x44d796
mov dword [ebp - 0x131c], 1
jmp 0x44d79d
and dword [ebp - 0x131c], 0
mov eax, dword [ebp - 0x714]
imul eax, dword [ebp - 0x131c]
cmp eax, 0xffffffff
jle 0x44d7bb
mov dword [ebp - 0x1f64], 1
jmp 0x44d7c2
and dword [ebp - 0x1f64], 0
mov eax, dword [ebp - 0x714]
cmp dword [ebp - 0x1f64], eax
je 0x44d7dc
mov dword [ebp - 0x1324], 1
jmp 0x44d7e3
and dword [ebp - 0x1324], 0
imul eax, dword [ebp - 0x1324], 0xcda2
cmp eax, 0xffffffff
je 0x44d7fe
mov dword [ebp - 0x285c], 1
jmp 0x44d805
and dword [ebp - 0x285c], 0
mov eax, dword [ebp - 0x285c]
sub eax, dword [ebp - 0x4c]
cmp eax, 0xffffffff
jle 0x44d81f
mov dword [ebp - 0x132c], 1
jmp 0x44d826
and dword [ebp - 0x132c], 0
mov eax, dword [ebp - 0xe6c]
cmp dword [ebp - 0x132c], eax
je 0x44d840
mov dword [ebp - 0x1334], 1
jmp 0x44d847
and dword [ebp - 0x1334], 0
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x1f6c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f6c]
mov dword [ebp + eax - 0x1168], ecx
mov eax, dword [ebp - 0x1f6c]
cmp eax, dword [ebp - 0x1334]
jne 0x44d880
mov dword [ebp - 0x2564], 1
jmp 0x44d887
and dword [ebp - 0x2564], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11a0]
cmp eax, dword [ebp - 0x2564]
jg 0x44d8a8
mov dword [ebp - 0x133c], 1
jmp 0x44d8af
and dword [ebp - 0x133c], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x133c]
dec eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 1
jmp 0x44d8cd
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x44d8fb
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x1168]
mov dword [ebp + ecx*4 - 0x1168], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1168], 0
je 0x44d8f9
jmp 0x44d8fb
jmp 0x44d8c6
jmp 0x44d632
mov dword [ebp - 0x44a0], 5
mov dword [ebp - 0xe8], 0x20bd2ab
mov dword [ebp - 0xe74], 0x578cca69
mov dword [ebp - 0x1f74], 0xffffffff
mov dword [ebp - 0xfdc], 0
mov dword [ebp - 0x108c], 0x24489be6
mov dword [ebp - 0x136c], 0xdda259c4
mov dword [ebp - 0x2574], 0xd38c4615
mov dword [ebp - 0x90c], 0
jmp 0x44d969
mov eax, dword [ebp - 0x90c]
inc eax
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 1
jge 0x44d985
mov eax, dword [ebp - 0x90c]
mov dword [ebp + eax*4 - 0xd0], 0x3e70d28e
jmp 0x44d95c
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x44a8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1f74], eax
mov eax, dword [ebp - 0x1f74]
mov dword [ebp - 0xfdc], eax
cmp dword [ebp - 0xfdc], 0
je 0x44d9c7
cmp dword [ebp - 0x108c], 0
je 0x44d9c7
mov dword [ebp - 0x1344], 1
jmp 0x44d9ce
and dword [ebp - 0x1344], 0
mov eax, dword [ebp - 0x1344]
mov dword [ebp - 0x108c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x108c], eax
jl 0x44d9fb
mov dword [ebp - 0x29dc], 1
jmp 0x44da02
and dword [ebp - 0x29dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x29dc], eax
jg 0x44da23
mov dword [ebp - 0x134c], 1
jmp 0x44da2a
and dword [ebp - 0x134c], 0
mov eax, dword [ebp - 0xe8]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x134c]
sub edx, dword [ebp + ecx - 0xd0]
add edx, dword [ebp - 0xe8]
sub eax, edx
je 0x44da62
cmp dword [ebp - 0xe8], 0
je 0x44da62
mov dword [ebp - 0x1f7c], 1
jmp 0x44da69
and dword [ebp - 0x1f7c], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xe74], eax
mov eax, dword [ebp - 0xe74]
cmp eax, dword [ebp - 0x1f7c]
je 0x44da8f
mov dword [ebp - 0x1354], 1
jmp 0x44da96
and dword [ebp - 0x1354], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x1354], eax
jg 0x44dac0
cmp dword [ebp - 0xe74], 0
je 0x44dac0
mov dword [ebp - 0x256c], 1
jmp 0x44dac7
and dword [ebp - 0x256c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x256c], eax
jl 0x44dae8
mov dword [ebp - 0x135c], 1
jmp 0x44daef
and dword [ebp - 0x135c], 0
cmp dword [ebp - 0x135c], 0xffffffff
jg 0x44db04
mov dword [ebp - 0x1f84], 1
jmp 0x44db0b
and dword [ebp - 0x1f84], 0
cmp dword [ebp - 0x1f84], 0x69a0165d
jl 0x44db23
mov dword [ebp - 0x1364], 1
jmp 0x44db2a
and dword [ebp - 0x1364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x1364], eax
jg 0x44db4b
mov dword [ebp - 0x2864], 1
jmp 0x44db52
and dword [ebp - 0x2864], 0
mov eax, dword [ebp - 0x2864]
mov dword [ebp - 0x136c], eax
cmp dword [ebp - 0x136c], 0
jne 0x44db77
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x44db77
and dword [ebp - 0x1f8c], 0
jmp 0x44db81
mov dword [ebp - 0x1f8c], 1
imul eax, dword [ebp - 0x1f8c], 0xf6f4
cmp eax, 0xfffffffb
jne 0x44db9c
mov dword [ebp - 0x1374], 1
jmp 0x44dba3
and dword [ebp - 0x1374], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0xfdc], 0
je 0x44dbce
mov eax, 0xe9f8
test eax, eax
je 0x44dbce
mov dword [ebp - 0x34ac], 1
jmp 0x44dbd5
and dword [ebp - 0x34ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp - 0x44b0], eax
mov dword [ebp - 0x2574], 0x2b5bddd
mov eax, dword [ebp - 0x2574]
add eax, dword [ebp - 0xe8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xd0]
jle 0x44dc19
mov dword [ebp - 0x137c], 1
jmp 0x44dc20
and dword [ebp - 0x137c], 0
cmp dword [ebp - 0x137c], 0x5465
jge 0x44dc38
mov dword [ebp - 0x1f94], 1
jmp 0x44dc3f
and dword [ebp - 0x1f94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x1f94], eax
jge 0x44dc60
mov dword [ebp - 0x1384], 1
jmp 0x44dc67
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0x1384]
inc eax
cmp dword [ebp - 0xe8], eax
jl 0x44dc82
mov dword [ebp - 0x2a9c], 1
jmp 0x44dc89
and dword [ebp - 0x2a9c], 0
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x2a9c]
lea eax, [ecx + eax - 1]
cmp eax, dword [ebp - 0xe8]
jl 0x44dcad
mov dword [ebp - 0x138c], 1
jmp 0x44dcb4
and dword [ebp - 0x138c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x138c], eax
jl 0x44dcd5
mov dword [ebp - 0x1f9c], 1
jmp 0x44dcdc
and dword [ebp - 0x1f9c], 0
cmp dword [ebp - 0x1f9c], 9
jne 0x44dcf1
mov dword [ebp - 0x34b4], 1
jmp 0x44dcf8
and dword [ebp - 0x34b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp - 0x44b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp - 0x44c0], eax
mov dword [ebp - 0xe8], 0xfffffff9
push 0xc6a
push 1
push 0x6102
push 0x3c2
push 1
push 1
push 0x71d1
push 1
push 1
call fcn.00442dec
add esp, 0x24
push 1
push 0x3d3
push 0x3752
push 1
push 0
call fcn.00441993
add esp, 0x14
mov dword [ebp - 0x1394], 0
mov dword [ebp - 0xbe8], 0
jmp 0x44dd89
mov eax, dword [ebp - 0xbe8]
inc eax
mov dword [ebp - 0xbe8], eax
cmp dword [ebp - 0xbe8], 2
jge 0x44dda5
mov eax, dword [ebp - 0xbe8]
mov dword [ebp + eax*4 - 0x4048], 0x29bf39
jmp 0x44dd7c
mov byte [ebp - 0x549], 0
movzx eax, byte [ebp - 0x549]
test eax, eax
je 0x44ddcd
push 0xf2e
push 0x6f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [ebp - 0x1394]
inc eax
mov dword [ebp - 0x1394], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4048], 1
mov dword [ebp - 0x82c], 0x73838a1f
mov dword [ebp - 0x914], 0
jmp 0x44de0e
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 3
jge 0x44de2a
mov eax, dword [ebp - 0x914]
mov dword [ebp + eax*4 - 0x4948], 0xffffffff
jmp 0x44de01
mov dword [ebp - 0x82c], 0
jmp 0x44de43
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 2
jg 0x44de60
mov eax, dword [ebp - 0x82c]
cmp dword [ebp + eax*4 - 0x4948], 0
je 0x44de5e
jmp 0x44de60
jmp 0x44de36
mov byte [ebp - 0x471], 0
movzx eax, byte [ebp - 0x471]
test eax, eax
je 0x44de8b
push 0x135e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x1128], 0x71a05132
mov dword [ebp - 0x47a4], 0xffffffff
mov dword [ebp - 0x47a0], 0xffffffff
mov dword [ebp - 0x479c], 0xffffffff
mov dword [ebp - 0x4798], 0xffffffff
mov dword [ebp - 0x298], 0
jmp 0x44ded6
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 2
jge 0x44def2
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x4054], 0xa6318529
jmp 0x44dec9
mov dword [ebp - 0x298], 0
jmp 0x44df0b
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x44df27
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x387c], 0xeb0647dc
jmp 0x44defe
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x387c], 0
jmp 0x44df55
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x387c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x387c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x387c], 1
jg 0x44e13f
mov dword [ebp - 0x398], 0
mov dword [ebp - 0xe7c], 0xfffffff9
mov dword [ebp - 0x34cc], 0xffffffff
mov dword [ebp - 0x398], 0
jmp 0x44dfa0
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 1
jg 0x44e13a
mov dword [ebp - 0x71c], 0x8e41
cmp dword [ebp - 0x398], 0xfffffff7
jne 0x44dfcc
mov dword [ebp - 0x257c], 1
jmp 0x44dfd3
and dword [ebp - 0x257c], 0
mov eax, dword [ebp - 0x257c]
sub eax, 0xa7fe
je 0x44dff1
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0xe7c], eax
jmp 0x44e129
mov dword [ebp - 0x34c4], 0x7ea4c570
mov dword [ebp - 0x71c], 0
jmp 0x44e014
mov eax, dword [ebp - 0x71c]
inc eax
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 1
jg 0x44e114
mov dword [ebp - 0x13a4], 0x14b11f38
cmp dword [ebp - 0xe7c], 0xb35886fc
jle 0x44e043
mov dword [ebp - 0x34bc], 1
jmp 0x44e04a
and dword [ebp - 0x34bc], 0
mov dword [ebp - 0x1128], 1
mov eax, dword [ebp - 0x1128]
mov dword [ebp - 0x44c8], eax
mov eax, dword [ebp - 0x34c4]
cmp dword [ebp - 0x13a4], eax
jg 0x44e07a
mov dword [ebp - 0x139c], 1
jmp 0x44e081
and dword [ebp - 0x139c], 0
cmp dword [ebp - 0x139c], 0x2f3f6085
jne 0x44e099
mov dword [ebp - 0x1fa4], 1
jmp 0x44e0a0
and dword [ebp - 0x1fa4], 0
mov eax, dword [ebp - 0x34cc]
cmp dword [ebp - 0x1fa4], eax
jne 0x44e0ba
mov dword [ebp - 0x286c], 1
jmp 0x44e0c1
and dword [ebp - 0x286c], 0
mov eax, dword [ebp - 0x13a4]
cmp dword [ebp - 0x286c], eax
je 0x44e0db
mov dword [ebp - 0x13ac], 1
jmp 0x44e0e2
and dword [ebp - 0x13ac], 0
mov eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x13ac]
jg 0x44e0fc
mov dword [ebp - 0x1fac], 1
jmp 0x44e103
and dword [ebp - 0x1fac], 0
mov eax, dword [ebp - 0x1fac]
mov dword [ebp - 0xe7c], eax
jmp 0x44e007
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4054], 0
je 0x44e129
jmp 0x44df93
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x1128], eax
jmp 0x44df93
jmp 0x44df3a
mov dword [ebp - 0x354], 4
mov dword [ebp - 0x35bc], 0xffffffff
mov dword [ebp - 0x35b8], 0xffffffff
mov dword [ebp - 0x35b4], 0xffffffff
mov dword [ebp - 0x35b0], 0xffffffff
mov dword [ebp - 0x1190], 0x928c176b
mov dword [ebp - 0x118c], 0x928c176b
mov dword [ebp - 0x1188], 0x928c176b
mov dword [ebp - 0x1184], 0x928c176b
mov dword [ebp - 0xe84], 0
mov dword [ebp - 0x1b4], 0
jmp 0x44e1bc
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x44e1d8
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x372c], 0x580849f8
jmp 0x44e1af
mov dword [ebp - 0x1b4], 0
jmp 0x44e1f1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x44e20d
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x34dc], 0xffffffff
jmp 0x44e1e4
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1190], 0xfffffff4
jmp 0x44e238
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1190]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1190], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1190], 0xfffffff3
je 0x44e521
mov dword [ebp - 0x2d0], 0xb4bc662a
mov dword [ebp - 0x13b4], 0xc6578637
mov dword [ebp - 0xbf0], 0
jmp 0x44e278
mov eax, dword [ebp - 0xbf0]
inc eax
mov dword [ebp - 0xbf0], eax
cmp dword [ebp - 0xbf0], 2
jge 0x44e294
mov eax, dword [ebp - 0xbf0]
mov dword [ebp + eax*4 - 0x36a4], 0xfffffff6
jmp 0x44e26b
mov dword [ebp - 0x2d0], 0
jmp 0x44e2ad
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 1
jg 0x44e51c
mov dword [ebp - 0x31c], 0x38dd44ad
mov dword [ebp - 0x31c], 1
jmp 0x44e2dd
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jl 0x44e338
mov dword [ebp - 0x91c], 0
jmp 0x44e2ff
mov eax, dword [ebp - 0x91c]
inc eax
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x91c], 2
jge 0x44e31b
mov eax, dword [ebp - 0x91c]
mov dword [ebp + eax*4 - 0x3694], 0
jmp 0x44e2f2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3694]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3694], eax
jmp 0x44e2d0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x13b4], eax
mov eax, dword [ebp - 0x13b4]
cmp dword [ebp - 0x31c], eax
jge 0x44e35e
mov dword [ebp - 0x34d4], 1
jmp 0x44e365
and dword [ebp - 0x34d4], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1190], 0
jne 0x44e380
mov dword [ebp - 0x2584], 1
jmp 0x44e387
and dword [ebp - 0x2584], 0
mov eax, dword [ebp - 0x2584]
dec eax
jne 0x44e3a2
cmp dword [ebp - 0x31c], 0
jne 0x44e3a2
and dword [ebp - 0x13bc], 0
jmp 0x44e3ac
mov dword [ebp - 0x13bc], 1
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x13bc], eax
je 0x44e3c6
mov dword [ebp - 0x1fb4], 1
jmp 0x44e3cd
and dword [ebp - 0x1fb4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1190]
cmp dword [ebp - 0x1fb4], eax
je 0x44e3f6
cmp dword [ebp - 0x31c], 0
je 0x44e3f6
mov dword [ebp - 0x13c4], 1
jmp 0x44e3fd
and dword [ebp - 0x13c4], 0
mov eax, dword [ebp - 0x13c4]
mov dword [ebp - 0xe84], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1190]
cmp dword [ebp - 0xe84], eax
jle 0x44e429
mov dword [ebp - 0x29e4], 1
jmp 0x44e430
and dword [ebp - 0x29e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1190]
mov dword [ebp - 0x44d0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x29e4]
mov dword [ebp + eax - 0x36a4], ecx
mov eax, dword [ebp - 0x2d0]
mov eax, dword [ebp + eax*4 - 0x372c]
mov dword [ebp - 0x13cc], eax
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x13cc]
mov dword [ebp + eax*4 - 0x372c], ecx
mov eax, dword [ebp - 0xe84]
imul eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x13cc], eax
je 0x44e49c
mov dword [ebp - 0x1fbc], 1
jmp 0x44e4a3
and dword [ebp - 0x1fbc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1190]
cmp dword [ebp - 0x1fbc], eax
jg 0x44e4c3
mov dword [ebp - 0xfe4], 1
jmp 0x44e4ca
and dword [ebp - 0xfe4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfe4]
mov dword [ebp + eax - 0x34dc], ecx
cmp dword [ebp - 0xfe4], 0
jne 0x44e4ff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x36a4], 0
jne 0x44e4ff
and dword [ebp - 0x13d4], 0
jmp 0x44e509
mov dword [ebp - 0x13d4], 1
mov eax, dword [ebp - 0x13d4]
neg eax
mov dword [ebp - 0x31c], eax
jmp 0x44e2a0
jmp 0x44e21f
mov dword [ebp - 0x44d8], 0xa05132d7
mov dword [ebp - 0xea4], 4
mov dword [ebp - 0x140], 0x7223b16a
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x1bc], 0x4d14b718
mov dword [ebp - 0xbf8], 0
jmp 0x44e569
mov eax, dword [ebp - 0xbf8]
inc eax
mov dword [ebp - 0xbf8], eax
cmp dword [ebp - 0xbf8], 4
jge 0x44e585
mov eax, dword [ebp - 0xbf8]
mov dword [ebp + eax*4 - 0x6f0], 0x416db6d0
jmp 0x44e55c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6f0]
mov dword [ebp - 0x140], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f0]
sub eax, dword [ebp - 0x140]
cmp eax, 0x953526c7
jb 0x44e5c3
mov eax, 0xffff
test eax, eax
jne 0x44e5c3
and dword [ebp - 0x34e4], 0
jmp 0x44e5cd
mov dword [ebp - 0x34e4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
mov dword [ebp - 0x44e0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f0]
mov dword [ebp - 0x44e8], eax
mov eax, 0x2570
cmp eax, 0x1de9
jne 0x44e60a
mov dword [ebp - 0x258c], 1
jmp 0x44e611
and dword [ebp - 0x258c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f0]
cmp dword [ebp - 0x258c], eax
jg 0x44e631
mov dword [ebp - 0x13dc], 1
jmp 0x44e638
and dword [ebp - 0x13dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
cmp dword [ebp - 0x13dc], eax
je 0x44e659
mov dword [ebp - 0x1fc4], 1
jmp 0x44e660
and dword [ebp - 0x1fc4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
cmp dword [ebp - 0x1fc4], eax
je 0x44e681
mov dword [ebp - 0x13e4], 1
jmp 0x44e688
and dword [ebp - 0x13e4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
cmp dword [ebp - 0x13e4], eax
jne 0x44e6a9
mov dword [ebp - 0x2874], 1
jmp 0x44e6b0
and dword [ebp - 0x2874], 0
cmp dword [ebp - 0x2874], 0xfffe
je 0x44e6c8
mov dword [ebp - 0x34ec], 1
jmp 0x44e6cf
and dword [ebp - 0x34ec], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
mov dword [ebp - 0x44f0], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x6f0], 0x3e35
cmp dword [ebp + eax - 0x6f0], ecx
jg 0x44e70e
mov dword [ebp - 0x13ec], 1
jmp 0x44e715
and dword [ebp - 0x13ec], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
cmp eax, dword [ebp - 0x13ec]
je 0x44e736
mov dword [ebp - 0x1fcc], 1
jmp 0x44e73d
and dword [ebp - 0x1fcc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
imul eax, dword [ebp - 0x1fcc]
test eax, eax
jne 0x44e76e
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6f0], 0
jne 0x44e76e
and dword [ebp - 0x13f4], 0
jmp 0x44e778
mov dword [ebp - 0x13f4], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x13f4]
sub ecx, dword [ebp + eax - 0x6f0]
mov dword [ebp - 0x74], ecx
jne 0x44e796
cmp dword [ebp - 0x74], 0
je 0x44e7ab
mov eax, 0xfffc
test eax, eax
je 0x44e7ab
mov dword [ebp - 0x2594], 1
jmp 0x44e7b2
and dword [ebp - 0x2594], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f0]
cmp dword [ebp - 0x2594], eax
jg 0x44e7e0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6f0], 0
jne 0x44e7e0
and dword [ebp - 0x13fc], 0
jmp 0x44e7ea
mov dword [ebp - 0x13fc], 1
mov eax, dword [ebp - 0x13fc]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x74], 3
jmp 0x44e806
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x44eaea
mov dword [ebp - 0xe8c], 0x2f5726b0
mov dword [ebp - 0x3524], 0
mov dword [ebp - 0x924], 0
jmp 0x44e83d
mov eax, dword [ebp - 0x924]
inc eax
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x924], 4
jge 0x44e859
mov eax, dword [ebp - 0x924]
mov dword [ebp + eax*4 - 0x4a44], 0x1194
jmp 0x44e830
mov dword [ebp - 0x140], 0
jmp 0x44e872
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jg 0x44e956
mov dword [ebp - 0x1bc], 3
jmp 0x44e898
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x44e951
mov dword [ebp - 0xc00], 0xfffffffe
mov dword [ebp - 0xc00], 0
jmp 0x44e8c8
mov eax, dword [ebp - 0xc00]
inc eax
mov dword [ebp - 0xc00], eax
cmp dword [ebp - 0xc00], 3
jg 0x44e94c
mov dword [ebp - 0x92c], 0xc25c5395
mov dword [ebp - 0x92c], 0
jmp 0x44e8f4
mov eax, dword [ebp - 0x92c]
inc eax
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 3
jg 0x44e947
mov dword [ebp - 0xc08], 0x4db9bec7
mov dword [ebp - 0xc08], 3
jmp 0x44e920
mov eax, dword [ebp - 0xc08]
dec eax
mov dword [ebp - 0xc08], eax
cmp dword [ebp - 0xc08], 0
jl 0x44e945
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp + eax*4 - 0x6f0]
mov dword [ebp + ecx*4 - 0x6f0], eax
jmp 0x44e913
jmp 0x44e8e7
jmp 0x44e8bb
jmp 0x44e88b
jmp 0x44e865
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x6f0]
mov dword [ebp - 0x44f8], eax
cmp dword [ebp - 0x140], 0
je 0x44e984
cmp dword [ebp - 0x1bc], 0
je 0x44e984
mov dword [ebp - 0x1fd4], 1
jmp 0x44e98b
and dword [ebp - 0x1fd4], 0
cmp dword [ebp - 0x1fd4], 0x81c4
jl 0x44e9a7
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x44e9a7
and dword [ebp - 0x34f4], 0
jmp 0x44e9b1
mov dword [ebp - 0x34f4], 1
mov eax, dword [ebp - 0xe8c]
mov ecx, dword [ebp - 0x74]
imul eax, dword [ebp + ecx*4 - 0x6f0]
test eax, eax
jne 0x44e9d2
mov dword [ebp - 0x1404], 1
jmp 0x44e9d9
and dword [ebp - 0x1404], 0
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x6f0]
cmp dword [ebp - 0x1404], eax
jle 0x44e9f7
mov dword [ebp - 0x2b14], 1
jmp 0x44e9fe
and dword [ebp - 0x2b14], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2b14], eax
je 0x44ea15
mov dword [ebp - 0x140c], 1
jmp 0x44ea1c
and dword [ebp - 0x140c], 0
mov eax, dword [ebp - 0x140c]
mov dword [ebp - 0xe8c], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x6f0]
cmp eax, dword [ebp - 0xe8c]
jl 0x44ea46
mov dword [ebp - 0x1fdc], 1
jmp 0x44ea4d
and dword [ebp - 0x1fdc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4a44]
cmp dword [ebp - 0x1fdc], eax
jle 0x44ea6d
mov dword [ebp - 0x351c], 1
jmp 0x44ea74
and dword [ebp - 0x351c], 0
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x6f0]
mov dword [ebp - 0x4500], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x4508], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1bc], eax
je 0x44eaa7
mov dword [ebp - 0x1414], 1
jmp 0x44eaae
and dword [ebp - 0x1414], 0
mov eax, dword [ebp - 0x1414]
inc eax
sub eax, dword [ebp - 0x140]
je 0x44ead2
cmp dword [ebp - 0x1bc], 0
je 0x44ead2
mov dword [ebp - 0x259c], 1
jmp 0x44ead9
and dword [ebp - 0x259c], 0
mov eax, dword [ebp - 0x259c]
mov dword [ebp - 0x3524], eax
jmp 0x44e7ff
mov dword [ebp - 0x2074], 0x58aa
mov dword [ebp - 0x207c], 6
mov dword [ebp - 0x3a0], 0xffffffff
mov dword [ebp - 0x6ac], 0x3d4e677b
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x934], 0
jmp 0x44eb3c
mov eax, dword [ebp - 0x934]
inc eax
mov dword [ebp - 0x934], eax
cmp dword [ebp - 0x934], 2
jge 0x44eb58
mov eax, dword [ebp - 0x934]
mov dword [ebp + eax*4 - 0x2ad4], 0x61d594d0
jmp 0x44eb2f
mov dword [ebp - 0x6ac], 0x2ab6
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x6ac], eax
jge 0x44eb7c
mov dword [ebp - 0x142c], 1
jmp 0x44eb83
and dword [ebp - 0x142c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x44eba1
cmp dword [ebp - 0x40], 0
jne 0x44eba1
and dword [ebp - 0x1fe4], 0
jmp 0x44ebab
mov dword [ebp - 0x1fe4], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x141c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x141c]
mov dword [ebp + eax - 0x2ad4], ecx
mov eax, dword [ebp - 0x141c]
cmp eax, dword [ebp - 0x1fe4]
je 0x44ebe4
mov dword [ebp - 0x1424], 1
jmp 0x44ebeb
and dword [ebp - 0x1424], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1424], eax
jl 0x44ec05
mov dword [ebp - 0x287c], 1
jmp 0x44ec0c
and dword [ebp - 0x287c], 0
cmp dword [ebp - 0x287c], 0xffffffff
jne 0x44ec21
mov dword [ebp - 0x1fec], 1
jmp 0x44ec28
and dword [ebp - 0x1fec], 0
mov eax, dword [ebp - 0x142c]
cmp eax, dword [ebp - 0x1fec]
jg 0x44ec4f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ad4], 0
jne 0x44ec4f
and dword [ebp - 0x1434], 0
jmp 0x44ec59
mov dword [ebp - 0x1434], 1
mov dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x1434]
sub eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x3a0], eax
jle 0x44ec89
cmp dword [ebp - 0x11c], 0
jne 0x44ec89
and dword [ebp - 0x25a4], 0
jmp 0x44ec93
mov dword [ebp - 0x25a4], 1
mov eax, dword [ebp - 0x25a4]
sub eax, 0xaf12
je 0x44ecc3
mov dword [ebp - 0x352c], 0xfffffffd
mov dword [ebp - 0x11c], 0xc5ec
mov dword [ebp - 0x352c], 1
jmp 0x44ee1e
mov dword [ebp - 0x6ac], 0
jmp 0x44ecdc
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 0xa
jne 0x44edf2
mov dword [ebp - 0x11c], 1
jmp 0x44ed02
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jl 0x44eded
mov dword [ebp - 0x3a0], 0
jmp 0x44ed28
cmp dword [ebp - 0x3a0], 1
jg 0x44ede8
mov dword [ebp - 0x40], 0
jmp 0x44ed45
cmp dword [ebp - 0x40], 1
jg 0x44edab
mov dword [ebp - 0xc10], 0x59f89f2e
mov dword [ebp - 0xc10], 1
jmp 0x44ed6e
mov dword [ebp - 0x40], 0
jmp 0x44edbb
jmp 0x44ecf5
jmp 0x44eccf
mov dword [ebp - 0x40], 0
jmp 0x44ee02
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x44ee1e
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x2ad4]
mov dword [ebp + ecx*4 - 0x2ad4], eax
jmp 0x44edfb
mov dword [ebp - 0x109c], 0xf26af903
mov dword [ebp - 0x7d4], 0xffffffff
mov dword [ebp - 0x1094], 0xb59008cf
mov dword [ebp - 0x391c], 1
mov dword [ebp - 0x3918], 1
mov dword [ebp - 0x3914], 1
mov dword [ebp - 0x3910], 1
mov dword [ebp - 0x3534], 0xfffffff7
mov dword [ebp - 0x1464], 0
mov dword [ebp - 0x353c], 0x277ebd00
mov byte [ebp - 0x54d], 0
movzx eax, byte [ebp - 0x54d]
test eax, eax
je 0x44eea1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
cmp dword [ebp - 0x7d4], 0
jne 0x44eeb6
mov dword [ebp - 0x1444], 1
jmp 0x44eebd
and dword [ebp - 0x1444], 0
cmp dword [ebp - 0x7d4], 0
je 0x44eed9
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x44eed9
mov dword [ebp - 0x143c], 1
jmp 0x44eee0
and dword [ebp - 0x143c], 0
mov eax, dword [ebp - 0x7d4]
sub eax, dword [ebp - 0x7d4]
cmp eax, dword [ebp - 0x143c]
jle 0x44ef00
mov dword [ebp - 0x1ff4], 1
jmp 0x44ef07
and dword [ebp - 0x1ff4], 0
mov eax, dword [ebp - 0x1ff4]
sub eax, dword [ebp - 0x1094]
mov dword [ebp - 0x29ec], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x29ec]
mov dword [ebp + eax - 0x391c], ecx
mov eax, dword [ebp - 0x1444]
cmp eax, dword [ebp - 0x29ec]
jne 0x44ef4c