Function at 0x45676f
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14c
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x456b65
mov dword [ebp - 0x10], 0xb9f9b31
mov dword [ebp - 0x2c], 0xd686a37b
mov dword [ebp - 0x10], 0xffffffe6
jmp 0x4567a3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff4
jle 0x456b58
mov dword [ebp - 0x18], 0xc6f1bf50
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x18], 0
jmp 0x4567cb
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffffc
jne 0x456b2e
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x44], 0xfffe
push 4
lea ecx, [ebp - 0x12c]
call fcn.004133eb
mov dword [ebp - 0x40], 0
jmp 0x456800
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x45681c
push dword [ebp - 0x40]
lea ecx, [ebp - 0x12c]
call fcn.004134d9
mov dword [eax], 0xe497d6a5
jmp 0x4567f9
mov eax, 0xa98815cb
sub eax, dword [ebp - 0x10]
neg eax
je 0x4568d4
cmp dword [ebp - 0x18], 0
jne 0x4568a9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x10], 0
cmp dword [ebp - 0x20], 0xfffc
jne 0x456854
mov dword [ebp - 0xa8], 1
jmp 0x45685b
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0xe136dc99
ja 0x456873
mov dword [ebp - 0x108], 1
jmp 0x45687a
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x108], eax
jne 0x456891
mov dword [ebp - 0xfc], 1
jmp 0x456898
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x20]
jne 0x4568a9
and dword [ebp - 0x70], 0
jmp 0x4568b0
mov dword [ebp - 0x70], 1
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x70]
test eax, eax
jne 0x4568c2
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x4568d4
cmp dword [ebp - 0x44], 0
je 0x4568d4
mov dword [ebp - 0xf8], 1
jmp 0x4568db
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x148], eax
or eax, 0xffffffff
je 0x456afe
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x68], 0
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x45691c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
cmp dword [ebp - 0x20], 0
jne 0x45692b
mov dword [ebp - 0x78], 1
jmp 0x45692f
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x78], eax
jne 0x456943
mov dword [ebp - 0x100], 1
jmp 0x45694a
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x456968
cmp dword [ebp - 0x10], 0
je 0x456968
mov dword [ebp - 0x80], 1
jmp 0x45696c
and dword [ebp - 0x80], 0
cmp dword [ebp - 0x80], 0x643d
je 0x456981
mov dword [ebp - 0xdc], 1
jmp 0x456988
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
shl eax, 2
cmp eax, dword [ebp - 0x2c]
jg 0x4569a8
cmp dword [ebp - 0x3c], 0
je 0x4569a8
mov dword [ebp - 0x88], 1
jmp 0x4569af
and dword [ebp - 0x88], 0
push 2
lea ecx, [ebp - 0x12c]
call fcn.004134d9
mov ecx, dword [ebp - 0x88]
cmp ecx, dword [eax]
jne 0x4569d2
mov dword [ebp - 0xf4], 1
jmp 0x4569d9
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0xf4]
test eax, eax
je 0x4569f9
cmp dword [ebp - 0x3c], 0
je 0x4569f9
mov dword [ebp - 0x90], 1
jmp 0x456a00
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x90]
jl 0x456a17
mov dword [ebp - 0xe4], 1
jmp 0x456a1e
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x3c], eax
jg 0x456a3c
cmp dword [ebp - 0x4c], 0
jne 0x456a3c
and dword [ebp - 0x98], 0
jmp 0x456a46
mov dword [ebp - 0x98], 1
cmp dword [ebp - 0x98], 0xcda2
jg 0x456a5e
mov dword [ebp - 0x104], 1
jmp 0x456a65
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x104], eax
jge 0x456a7c
mov dword [ebp - 0xa0], 1
jmp 0x456a83
and dword [ebp - 0xa0], 0
push 2
lea ecx, [ebp - 0x12c]
call fcn.004134d9
mov ecx, dword [ebp - 0xa0]
cmp ecx, dword [eax]
jne 0x456aa6
mov dword [ebp - 0xec], 1
jmp 0x456aad
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xec]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x68], eax
jge 0x456acd
mov dword [ebp - 0xd4], 1
jmp 0x456ad4
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0xe3b9
je 0x456aec
mov dword [ebp - 0xb0], 1
jmp 0x456af3
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x2c], eax
jmp 0x456b1e
mov dword [ebp - 0x10c], 0xc867
cmp dword [ebp - 0x10c], 0
je 0x456b1e
lea ecx, [ebp - 0x12c]
call fcn.004134bd
jmp 0x456b2e
lea ecx, [ebp - 0x12c]
call fcn.004134bd
jmp 0x4567c4
mov byte [ebp - 9], 0
movzx eax, byte [ebp - 9]
test eax, eax
je 0x456b53
push 0x2471
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
jmp 0x45679c
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x457064
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0xd8], 0xe76d238e
mov dword [ebp - 0xe8], 0x8ef068cd
mov dword [ebp - 4], 0xdedfc3e8
mov dword [ebp - 0x38], 0
jmp 0x456ba9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x456bbc
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x64], 0
jmp 0x456ba2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x64], 0
je 0x456c81
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x64], 0
je 0x456be4
mov dword [ebp - 0xb8], 1
jmp 0x456beb
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xd8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0xd8], eax
jle 0x456c17
mov dword [ebp - 0xe0], 1
jmp 0x456c1e
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xe0]
jle 0x456c38
mov dword [ebp - 0xc0], 1
jmp 0x456c3f
and dword [ebp - 0xc0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc0]
mov dword [ebp + eax - 0x64], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 4]
lea eax, [eax + ecx - 0x56a0b349]
cmp eax, 0xfc2e607d
jbe 0x456c81
mov dword [ebp - 0xc8], 1
jmp 0x456c88
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 0xfffb
je 0x456ca0
mov dword [ebp - 0xf0], 1
jmp 0x456ca7
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xf0], eax
je 0x456cbe
mov dword [ebp - 0xd0], 1
jmp 0x456cc5
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0xd0]
jle 0x456cdf
mov dword [ebp - 0x6c], 1
jmp 0x456ce3
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x6c], eax
jle 0x456cf4
mov dword [ebp - 0x74], 1
jmp 0x456cf8
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
neg eax
cmp eax, dword [ebp - 4]
jg 0x456d14
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x64], 0
jne 0x456d14
and dword [ebp - 0x7c], 0
jmp 0x456d1b
mov dword [ebp - 0x7c], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x7c], eax
jle 0x456d2f
mov dword [ebp - 0x84], 1
jmp 0x456d36
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov dword [ebp - 4], 2
jmp 0x456d52
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x456d68
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp + ecx*4 - 0x64], eax
jmp 0x456d4b
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
push 3
lea ecx, [ebp - 0x138]
call fcn.004133eb
push 3
lea ecx, [ebp - 0x58]
call fcn.004133eb
mov dword [ebp - 0x28], 1
mov dword [ebp - 8], 0
jmp 0x456dab
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x456dc7
push dword [ebp - 8]
lea ecx, [ebp - 0x138]
call fcn.004134d9
mov dword [eax], 0xcff0
jmp 0x456da4
mov dword [ebp - 8], 0
jmp 0x456dd7
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x456df0
push dword [ebp - 8]
lea ecx, [ebp - 0x58]
call fcn.004134d9
mov dword [eax], 0xd1e1e87d
jmp 0x456dd0
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
and dword [eax], 0
jmp 0x456e20
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
cmp dword [eax], 2
jg 0x456fcf
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xb4], 0xc70ab227
mov dword [ebp - 0xc4], 0xfffffffd
push 2
lea ecx, [ebp - 0x144]
call fcn.004133eb
mov dword [ebp - 0x34], 0
jmp 0x456e6e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x456e8a
push dword [ebp - 0x34]
lea ecx, [ebp - 0x144]
call fcn.004134d9
mov dword [eax], 1
jmp 0x456e67
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
push dword [eax]
lea ecx, [ebp - 0x138]
call fcn.004134d9
cmp dword [ebp - 0x9c], 0
jne 0x456ecf
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
push dword [eax]
lea ecx, [ebp - 0x138]
call fcn.004134d9
cmp dword [eax], 0
jne 0x456ecf
and dword [ebp - 0x94], 0
jmp 0x456ed9
mov dword [ebp - 0x94], 1
mov eax, dword [ebp - 0x94]
dec eax
cmp eax, dword [ebp - 0x9c]
jl 0x456ef4
mov dword [ebp - 0xa4], 1
jmp 0x456efb
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 1
jbe 0x456f10
mov dword [ebp - 0xac], 1
jmp 0x456f17
and dword [ebp - 0xac], 0
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
mov ecx, dword [ebp - 0xac]
sub ecx, dword [eax]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xb4], eax
mov esi, dword [ebp - 0xb4]
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
cmp dword [eax], esi
jl 0x456f55
mov dword [ebp - 0xbc], 1
jmp 0x456f5c
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xc4], eax
mov esi, dword [ebp - 0xc4]
push 0
lea ecx, [ebp - 0x58]
call fcn.004134d9
cmp esi, dword [eax]
jg 0x456f88
mov dword [ebp - 0xcc], 1
jmp 0x456f8f
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.004134d9
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x456fbf
push 0
push 0x1e40
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
lea ecx, [ebp - 0x144]
call fcn.004134bd
jmp 0x456dff
mov dword [ebp - 0x28], 0
jmp 0x456fdf
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
je 0x45701b
mov dword [ebp - 0x110], 0x1be360de
mov dword [ebp - 0x118], 0xffffffff
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
mov byte [ebp - 0x11], 0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x457019
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x456fd8
lea ecx, [ebp - 0x58]
call fcn.004134bd
lea ecx, [ebp - 0x138]
call fcn.004134bd
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
jmp 0x457044
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
cmp dword [eax], 2
jge 0x457064
mov eax, dword [ebp - 0x30]
push dword [eax]
mov ecx, dword [ebp - 0x120]
call fcn.004134d9
mov dword [eax], 0xd69f4288
jmp 0x457039
pop esi
mov esp, ebp
pop ebp
ret