Function at 0x44edc7
Capabilities:
Clear file content
Compare security identifiers
Create pipe
Get geographical location
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3384
call fcn.004844c0
push esi
push edi
mov dword [ebp - 0x2cc], 0xe7a6
mov dword [ebp - 0x2964], 0x40fc0272
mov dword [ebp - 0x2a40], 0x951ea66e
mov dword [ebp - 0x1dc], 0
jmp 0x44ee0d
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x44ee29
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x2a48], 0x35e1f6f0
jmp 0x44ee00
mov dword [ebp - 0x1dc], 0
jmp 0x44ee42
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x44ee5e
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x31c0], 1
jmp 0x44ee35
cmp dword [ebp - 0x2cc], 0
je 0x44f033
mov dword [ebp - 0x2a50], 7
mov dword [ebp - 0x2a58], 0xffffffff
mov dword [ebp - 0x2a60], 0xffffffff
mov dword [ebp - 0x2a68], 0xfffffffb
mov dword [ebp - 0x2a70], 0xffffffff
mov dword [ebp - 0x2a78], 0xfffffffd
mov dword [ebp - 0x5c], 0
jmp 0x44eeb7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x44eecd
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x26e8], 0x13dce9d
jmp 0x44eeb0
mov dword [ebp - 0x5c], 0
jmp 0x44eedd
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x44eef3
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x2a80], 0x86992f1e
jmp 0x44eed6
mov dword [ebp - 0x5c], 0
jmp 0x44ef03
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x44ef19
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x2a88], 0x2057
jmp 0x44eefc
mov dword [ebp - 0x2cc], 0
jmp 0x44ef32
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jg 0x44f031
mov dword [ebp - 0x140], 0
jmp 0x44ef58
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x44ef74
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x30a8], 0xe704f3d4
jmp 0x44ef4b
mov dword [ebp - 0x140], 0
jmp 0x44ef8d
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x44efa9
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x2e88], 0xfffa
jmp 0x44ef80
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e88]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2e88], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp + eax*4 - 0x26e8], 0
jne 0x44efe0
mov dword [ebp - 0x1d8c], 1
jmp 0x44efe7
and dword [ebp - 0x1d8c], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x30a8], 0x8436
mov ecx, dword [ebp - 0x1d8c]
add ecx, eax
mov dword [ebp - 0x1e10], ecx
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x1e10]
mov dword [ebp + eax*4 - 0x26e8], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1e10]
mov dword [ebp + eax - 0x31c0], ecx
jmp 0x44ef25
jmp 0x44f062
mov byte [ebp - 0x3bf], 0
movzx eax, byte [ebp - 0x3bf]
test eax, eax
je 0x44f062
push 0
push 0x929
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov dword [ebp - 0x93c], 0xffffffff
mov dword [ebp - 0x93c], 0
jmp 0x44f085
mov eax, dword [ebp - 0x93c]
inc eax
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x93c], 0x16
jge 0x44f0d2
mov byte [ebp - 0x2ae], 0
movzx eax, byte [ebp - 0x2ae]
test eax, eax
je 0x44f0af
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
mov byte [ebp - 0x2b0], 0
movzx eax, byte [ebp - 0x2b0]
test eax, eax
je 0x44f0d0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
jmp 0x44f078
mov dword [ebp - 0x2dc], 0x167fa5c6
mov dword [ebp - 0x5ac], 0xb4c8f0d0
mov dword [ebp - 0xb44], 0xfffffff6
mov dword [ebp - 0x5a4], 0x6de0184d
mov dword [ebp - 0x2d4], 0xfffffffc
mov dword [ebp - 0x944], 0
jmp 0x44f11d
mov eax, dword [ebp - 0x944]
inc eax
mov dword [ebp - 0x944], eax
cmp dword [ebp - 0x944], 1
jge 0x44f139
mov eax, dword [ebp - 0x944]
mov dword [ebp + eax*4 - 0x94c], 0xfffffffd
jmp 0x44f110
mov eax, 0x960f
test eax, eax
je 0x44f303
cmp dword [ebp - 0x2dc], 0
je 0x44f23b
mov eax, 0xaa08
cmp eax, 1
jle 0x44f169
mov dword [ebp - 0x1e18], 1
jmp 0x44f170
and dword [ebp - 0x1e18], 0
mov eax, dword [ebp - 0x5ac]
cmp dword [ebp - 0x1e18], eax
je 0x44f18a
mov dword [ebp - 0x1e20], 1
jmp 0x44f191
and dword [ebp - 0x1e20], 0
mov eax, dword [ebp - 0x5a4]
add eax, dword [ebp - 0x1e20]
cmp eax, 0xa4c6
jl 0x44f1b0
mov dword [ebp - 0x2094], 1
jmp 0x44f1b7
and dword [ebp - 0x2094], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x2a90], eax
mov eax, dword [ebp - 0x5a4]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x94c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x94c]
je 0x44f1f2
mov dword [ebp - 0x9ac], 1
jmp 0x44f1f9
and dword [ebp - 0x9ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp + eax - 0x94c], ecx
mov eax, dword [ebp - 0x5ac]
add eax, dword [ebp - 0x9ac]
mov ecx, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x2d4]
dec edx
mov dword [ebp - 0x2d4], edx
cmp ecx, eax
je 0x44f23b
mov dword [ebp - 0x1e28], 1
jmp 0x44f242
and dword [ebp - 0x1e28], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x1e28], eax
jg 0x44f25c
mov dword [ebp - 0x1e30], 1
jmp 0x44f263
and dword [ebp - 0x1e30], 0
mov eax, dword [ebp - 0x5ac]
cmp dword [ebp - 0x1e30], eax
jg 0x44f27d
mov dword [ebp - 0x1e38], 1
jmp 0x44f284
and dword [ebp - 0x1e38], 0
cmp dword [ebp - 0x1e38], 0xc3c3
jle 0x44f29c
mov dword [ebp - 0x1e40], 1
jmp 0x44f2a3
and dword [ebp - 0x1e40], 0
mov eax, dword [ebp - 0x1e40]
sub eax, dword [ebp - 0x5a4]
je 0x44f2c1
xor eax, eax
je 0x44f2c1
mov dword [ebp - 0x1e48], 1
jmp 0x44f2c8
and dword [ebp - 0x1e48], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x1e48], eax
je 0x44f2e2
mov dword [ebp - 0x1e50], 1
jmp 0x44f2e9
and dword [ebp - 0x1e50], 0
mov eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x1e50]
jne 0x44f303
mov dword [ebp - 0x1e58], 1
jmp 0x44f30a
and dword [ebp - 0x1e58], 0
mov eax, dword [ebp - 0x1e58]
sub eax, dword [ebp - 0xb44]
mov dword [ebp - 0xb44], eax
je 0x44f32d
mov dword [ebp - 0x5a4], 0xfffffff9
jmp 0x44f443
mov dword [ebp - 0x2374], 1
cmp dword [ebp - 0x5ac], 0x97ec
je 0x44f34f
mov dword [ebp - 0xb4c], 1
jmp 0x44f356
and dword [ebp - 0xb4c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4c]
mov dword [ebp + eax - 0x94c], ecx
cmp dword [ebp - 0xb4c], 0
je 0x44f3d5
cmp dword [ebp - 0x2374], 0
je 0x44f3d5
mov dword [ebp - 0x1e60], 0
mov byte [ebp - 0x2b2], 0
movzx eax, byte [ebp - 0x2b2]
test eax, eax
je 0x44f3a2
push 0x2560
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x2d4], 0
jmp 0x44f3bb
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0
jg 0x44f3d3
mov eax, dword [ebp - 0x1e60]
dec eax
mov dword [ebp - 0x1e60], eax
jmp 0x44f3ae
jmp 0x44f3f9
mov byte [ebp - 0x2b4], 0
movzx eax, byte [ebp - 0x2b4]
test eax, eax
je 0x44f3f9
push 0
push 0x2019
push 0x2ff
call dword [sym.imp.GDI32.dll_CreatePen]
mov dword [ebp - 0x2dc], 0
jmp 0x44f412
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jg 0x44f443
mov byte [ebp - 0x2b6], 0
movzx eax, byte [ebp - 0x2b6]
test eax, eax
je 0x44f441
push 0x25df
push 0
push 0x14dd
push 0x4d
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
jmp 0x44f405
mov dword [ebp - 0x30c], 0xe7a6
mov dword [ebp - 0x2a98], 0x40fc0272
mov dword [ebp - 0x960], 0
mov dword [ebp - 0x960], 0xffffffed
jmp 0x44f47a
mov eax, dword [ebp - 0x960]
inc eax
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0x960], 0x13
jg 0x44f513
mov dword [ebp - 0x968], 9
mov dword [ebp - 0x968], 0
jmp 0x44f4aa
mov eax, dword [ebp - 0x968]
dec eax
mov dword [ebp - 0x968], eax
cmp dword [ebp - 0x968], 0xfffffff1
jle 0x44f4dd
mov byte [ebp - 0x2b8], 0
movzx eax, byte [ebp - 0x2b8]
test eax, eax
je 0x44f4db
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
jmp 0x44f49d
mov byte [ebp - 0x2ba], 0
movzx eax, byte [ebp - 0x2ba]
test eax, eax
je 0x44f50e
push 0
push 0
push 0x261c
push 0
push 0x1b
push 0
push 0x3bd
push 0x1737
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x44f46d
mov dword [ebp - 0x2aa0], 0x951ea66e
mov dword [ebp - 0x3f8], 0x7cb3f4f4
mov dword [ebp - 0x2384], 0xfffffff6
mov dword [ebp - 0x970], 0
jmp 0x44f54a
mov eax, dword [ebp - 0x970]
inc eax
mov dword [ebp - 0x970], eax
cmp dword [ebp - 0x970], 1
jge 0x44f566
mov eax, dword [ebp - 0x970]
mov dword [ebp + eax*4 - 0x237c], 0x62d5
jmp 0x44f53d
mov dword [ebp - 0x3f8], 0
jmp 0x44f57f
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 1
jge 0x44f59b
mov eax, dword [ebp - 0x3f8]
mov dword [ebp + eax*4 - 0x237c], 0xb505
jmp 0x44f572
mov dword [ebp - 0x3f8], 0xffffffff
mov dword [ebp - 0x2384], 0xc04ee7d2
mov dword [ebp - 0x1e70], 0xe60
mov dword [ebp - 0x1e68], 0x6942
mov dword [ebp - 0x5d8], 0
jmp 0x44f5dc
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 3
jge 0x44f5f8
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x3168], 0xef6b8f3d
jmp 0x44f5cf
mov byte [ebp - 0x2bc], 0
movzx eax, byte [ebp - 0x2bc]
test eax, eax
je 0x44f623
push 0x183d
push 0x8d5
push 0
push 0
push 0x3b2
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov eax, dword [ebp - 0x1e70]
mov dword [ebp - 0x1e68], eax
mov eax, dword [ebp - 0x1e68]
cmp dword [ebp - 0x1e70], eax
jg 0x44f649
mov dword [ebp - 0x1e78], 1
jmp 0x44f650
and dword [ebp - 0x1e78], 0
cmp dword [ebp - 0x1e78], 1
je 0x44f665
mov dword [ebp - 0x1e80], 1
jmp 0x44f66c
and dword [ebp - 0x1e80], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e80]
mov dword [ebp + eax - 0x3168], ecx
mov dword [ebp - 0x844], 0
mov dword [ebp - 0x844], 2
jmp 0x44f6a2
mov eax, dword [ebp - 0x844]
dec eax
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 0xfffffff0
jge 0x44f788
mov dword [ebp - 0x204], 0
jmp 0x44f6c8
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x44f6e4
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x31d8], 0x638e
jmp 0x44f6bb
mov dword [ebp - 0x204], 0
jmp 0x44f6fd
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x44f719
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xc64], 0x69aed23b
jmp 0x44f6f0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc64], 0
jmp 0x44f747
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc64]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc64], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc64], 4
jge 0x44f771
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc64]
mov dword [ebp + eax*4 - 0x31d8], 3
jmp 0x44f72c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc64], 0
je 0x44f783
jmp 0x44f788
jmp 0x44f695
mov dword [ebp - 0x2aa8], 0x847dfa86
mov byte [ebp - 0x2be], 0
movzx eax, byte [ebp - 0x2be]
test eax, eax
je 0x44f7af
push 0x26b8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x2c0], 0
movzx eax, byte [ebp - 0x2c0]
test eax, eax
je 0x44f7f3
push 0x1988
push 0x1028
push 0x1f53
push 0x98
push 0x8a1
push 0x7c7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov dword [ebp - 0x1e4], 0
jmp 0x44f80c
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x44f828
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x2ab0], 0x35e1f6f0
jmp 0x44f7ff
mov dword [ebp - 0x5b4], 0x42a1e948
mov dword [ebp - 0x1e88], 0xfffffffb
mov dword [ebp - 0x1ea0], 0x43e
mov dword [ebp - 0x148], 0
jmp 0x44f85f
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x44f87b
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x1e98], 0xfb6f65e7
jmp 0x44f852
mov dword [ebp - 0x148], 0
jmp 0x44f894
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x44f8b0
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x2ba4], 0x63d18804
jmp 0x44f887
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x2ab8], eax
mov eax, dword [ebp - 0x5b4]
neg eax
mov dword [ebp - 0x1e88], eax
mov eax, dword [ebp - 0x5b4]
cmp dword [ebp - 0x1e88], eax
jl 0x44f8e4
mov dword [ebp - 0x1e90], 1
jmp 0x44f8eb
and dword [ebp - 0x1e90], 0
mov eax, dword [ebp - 0x5b4]
cmp eax, dword [ebp - 0x1e90]
jg 0x44f905
mov dword [ebp - 0x238c], 1
jmp 0x44f90c
and dword [ebp - 0x238c], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1e98], 0x1dfd9475
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x2ac0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x1e98]
mov dword [ebp + ecx - 0x2ba4], eax
mov eax, dword [ebp - 0x1ea0]
inc eax
mov dword [ebp - 0x1ea0], eax
mov dword [ebp - 0x1e4], 0
jmp 0x44f969
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 4
jge 0x44f985
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x3208], 1
jmp 0x44f95c
mov dword [ebp - 0xb6c], 0xfffffffc
mov dword [ebp - 0x2ac8], 0x5c62e089
mov dword [ebp - 0x2440], 0
mov dword [ebp - 0x23a4], 0
mov dword [ebp - 0x2394], 0x96bb6454
mov dword [ebp - 0xb64], 0x5f03
mov dword [ebp - 0x2430], 0x4c2e3979
mov dword [ebp - 0x150], 0
jmp 0x44f9e4
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x44fa00
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0xc2c], 0x60477862
jmp 0x44f9d7
mov dword [ebp - 0x150], 0
jmp 0x44fa19
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x44fa35
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x265c], 0xfffffffd
jmp 0x44fa0c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc2c], 0
jmp 0x44fa63
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc2c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc2c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc2c], 7
jg 0x44fd18
mov dword [ebp - 0x2ad0], 3
mov dword [ebp - 0x2ad8], 0
mov dword [ebp - 0x2420], 0xfffffff6
mov dword [ebp - 0x2ae0], 0
mov dword [ebp - 0xb54], 0xffffffff
mov dword [ebp - 0x2ae8], 0
mov dword [ebp - 0x2af0], 1
mov dword [ebp - 0x2af8], 0
mov dword [ebp - 0x540], 0x41ac3dc9
mov dword [ebp - 0x239c], 0x77509cb0
mov dword [ebp - 0x2b00], 0xffffffff
mov dword [ebp - 0x2b08], 0xfffffffe
mov dword [ebp - 0xb5c], 0xfeb1ec6c
mov dword [ebp - 0x224], 0
jmp 0x44fb12
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x44fb2e
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x2b10], 1
jmp 0x44fb05
mov dword [ebp - 0x224], 0
jmp 0x44fb47
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x44fb63
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x276c], 0xfffffff9
jmp 0x44fb3a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x276c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x276c], eax
mov dword [ebp - 0x540], 0
jmp 0x44fb95
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 2
jg 0x44fd13
mov dword [ebp - 0x5e0], 0
jmp 0x44fbbb
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 2
jge 0x44fbd7
mov eax, dword [ebp - 0x5e0]
mov dword [ebp + eax*4 - 0x2bb0], 0xb09c821f
jmp 0x44fbae
mov dword [ebp - 0x2394], 0x71081b2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x265c]
cmp dword [ebp - 0x239c], eax
jl 0x44fc01
mov dword [ebp - 0x1ea8], 1
jmp 0x44fc08
and dword [ebp - 0x1ea8], 0
mov eax, dword [ebp - 0xb54]
cmp dword [ebp - 0x1ea8], eax
je 0x44fc22
mov dword [ebp - 0x1f18], 1
jmp 0x44fc29
and dword [ebp - 0x1f18], 0
mov eax, dword [ebp - 0x540]
push 4
pop ecx
shl ecx, 1
mov edx, dword [ebp - 0x1f18]
sub edx, dword [ebp + ecx - 0x276c]
add edx, dword [ebp - 0x23a4]
cmp dword [ebp + eax*4 - 0x265c], edx
jl 0x44fc5c
mov dword [ebp - 0x1f20], 1
jmp 0x44fc63
and dword [ebp - 0x1f20], 0
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x1f20], eax
jne 0x44fc7d
mov dword [ebp - 0x1f28], 1
jmp 0x44fc84
and dword [ebp - 0x1f28], 0
imul eax, dword [ebp - 0x1f28], 0xcbc8
add eax, dword [ebp - 0x2420]
cmp eax, 0xfffffffe
jle 0x44fcab
mov eax, 0xcf39
test eax, eax
jne 0x44fcab
and dword [ebp - 0x1f30], 0
jmp 0x44fcb5
mov dword [ebp - 0x1f30], 1
mov eax, dword [ebp - 0x1f30]
mov dword [ebp - 0xb54], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2bb0]
cmp dword [ebp - 0xb54], eax
je 0x44fce2
mov dword [ebp - 0x1f94], 1
jmp 0x44fce9
and dword [ebp - 0x1f94], 0
mov eax, dword [ebp - 0xb5c]
dec eax
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xb5c]
sub eax, dword [ebp - 0x1f94]
imul eax, eax, 0xc7e4
mov dword [ebp - 0xb6c], eax
jmp 0x44fb88
jmp 0x44fa48
cmp dword [ebp - 0xb64], 0
jne 0x44fd33
mov eax, 0x47e08a84
test eax, eax
jne 0x44fd33
and dword [ebp - 0x2428], 0
jmp 0x44fd3d
mov dword [ebp - 0x2428], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x265c], 0xfffb
cmp eax, dword [ebp - 0xb64]
jle 0x44fd62
mov dword [ebp - 0x1f9c], 1
jmp 0x44fd69
and dword [ebp - 0x1f9c], 0
mov eax, dword [ebp - 0x2430]
cmp dword [ebp - 0x1f9c], eax
jge 0x44fd83
mov dword [ebp - 0x2438], 1
jmp 0x44fd8a
and dword [ebp - 0x2438], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc2c]
mov dword [ebp - 0x2b18], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x265c]
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0x2440]
sub eax, dword [ebp - 0xb6c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc2c], eax
cmp dword [ebp - 0x30c], 0
je 0x452bde
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x84c], 0
jmp 0x44fdf8
mov eax, dword [ebp - 0x84c]
inc eax
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 1
jge 0x44fe14
mov eax, dword [ebp - 0x84c]
mov dword [ebp + eax*4 - 0x49c], 0x2799ac78
jmp 0x44fdeb
mov byte [ebp - 0x2c2], 0
movzx eax, byte [ebp - 0x2c2]
test eax, eax
je 0x44fe37
push 0x22ed
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov dword [ebp - 0x11c], 0
jmp 0x44fe50
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x44ffa1
mov dword [ebp - 0x59c], 0x4b64b5c6
mov dword [ebp - 0x2b20], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0x49c], 0
jne 0x44ff19
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0x49c], 0
jne 0x44ff19
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0x49c], 0
je 0x44feed
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x11c]
mov ecx, dword [ebp + ecx*4 - 0x49c]
cmp dword [ebp + eax*4 - 0x49c], ecx
jle 0x44fed1
mov dword [ebp - 0x1fa4], 1
jmp 0x44fed8
and dword [ebp - 0x1fa4], 0
cmp dword [ebp - 0x1fa4], 0xffffffff
jne 0x44feed
mov dword [ebp - 0x1fac], 1
jmp 0x44fef4
and dword [ebp - 0x1fac], 0
cmp dword [ebp - 0x1fac], 0xb101
jle 0x44ff19
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0x49c], 0
jne 0x44ff19
and dword [ebp - 0x1fb4], 0
jmp 0x44ff23
mov dword [ebp - 0x1fb4], 1
mov eax, dword [ebp - 0x1fb4]
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x59c], 0
jmp 0x44ff48
mov eax, dword [ebp - 0x59c]
inc eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 0
jg 0x44ff9c
mov dword [ebp - 0x1fbc], 0xffffffff
mov eax, dword [ebp - 0x1fbc]
dec eax
mov dword [ebp - 0x1fbc], eax
mov byte [ebp - 0x2c4], 0
movzx eax, byte [ebp - 0x2c4]
test eax, eax
je 0x44ff9a
push 0
push 0x1fd1
push 0x26a5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x44ff3b
jmp 0x44fe43
mov dword [ebp - 0x2b28], 7
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x158], 0
jmp 0x44ffce
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x44ffea
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x3188], 1
jmp 0x44ffc1
mov dword [ebp - 0x158], 0
jmp 0x450003
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x45001f
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x2bbc], 0x59af2c67
jmp 0x44fff6
mov dword [ebp - 0x5e8], 0
jmp 0x450038
mov eax, dword [ebp - 0x5e8]
dec eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0xfffffffa
jge 0x450341
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x2458], 0
mov dword [ebp - 0x10c], 0
jmp 0x450072
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jg 0x4502fb
mov dword [ebp - 0x854], 0xfffffffa
mov dword [ebp - 0x854], 0
jmp 0x4500a2
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 1
jg 0x4502f6
mov dword [ebp - 0x400], 0x328f6c74
mov dword [ebp - 0x400], 1
jmp 0x4500d2
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
jl 0x4502f1
mov dword [ebp - 0x5f0], 0
jmp 0x4500f8
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 2
jge 0x450114
mov eax, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0x9a0], 0x41fc9a57
jmp 0x4500eb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9a0], 1
jmp 0x450142
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x9a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a0], 0
jl 0x4502ec
mov dword [ebp - 0x2e4], 0x6ce4a6f4
mov dword [ebp - 0x2e4], 0
jmp 0x450179
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 1
jg 0x4502e7
mov byte [ebp - 0x27f], 0
movzx eax, byte [ebp - 0x27f]
test eax, eax
je 0x4501a5
push 0x11f2
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
mov ecx, dword [ebp - 0x10c]
add ecx, 0x35b0f990
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x9a0]
jge 0x4501db
mov dword [ebp - 0x2448], 1
jmp 0x4501e2
and dword [ebp - 0x2448], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a0], 0xfffffffb
jae 0x4501fb
cmp dword [ebp - 0x400], 0
jne 0x45020d
cmp dword [ebp - 0x2e4], 0
jne 0x45020d
and dword [ebp - 0x1fc4], 0
jmp 0x450217
mov dword [ebp - 0x1fc4], 1
cmp dword [ebp - 0x1fc4], 0xc6a81d68
jb 0x45022f
mov dword [ebp - 0x1fcc], 1
jmp 0x450236
and dword [ebp - 0x1fcc], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x1fcc], eax
je 0x450250
mov dword [ebp - 0x2450], 1
jmp 0x450257
and dword [ebp - 0x2450], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x400]
cmp dword [ebp + eax - 0x9a0], ecx
jg 0x450278
mov dword [ebp - 0x1fc8], 1
jmp 0x45027f
and dword [ebp - 0x1fc8], 0
mov eax, dword [ebp - 0x1fc8]
sub eax, dword [ebp - 0x2e4]
add eax, 0xffff
cmp eax, 0x50b7
jne 0x4502a3
mov dword [ebp - 0xc88], 1
jmp 0x4502aa
and dword [ebp - 0xc88], 0
mov eax, 0xd7d3
sub eax, dword [ebp - 0xc88]
cmp eax, 0x6d4f
jne 0x4502c8
mov dword [ebp - 0x1b18], 1
jmp 0x4502cf
and dword [ebp - 0x1b18], 0
mov eax, dword [ebp - 0x2e4]
imul eax, dword [ebp - 0x1b18]
mov dword [ebp - 0x2458], eax
jmp 0x45016c
jmp 0x450127
jmp 0x4500c5
jmp 0x450095
jmp 0x450065
mov dword [ebp - 0x10c], 0
jmp 0x450314
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1b
je 0x45033c
mov dword [ebp - 0x2460], 3
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2460]
mov dword [ebp + eax - 0x2bbc], ecx
jmp 0x450307
jmp 0x45002b
mov byte [ebp - 0x3d0], 0
movzx eax, byte [ebp - 0x3d0]
test eax, eax
je 0x450370
push 0x16
push 0x1501
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x2b30], 0xffffffff
mov dword [ebp - 0x5f8], 2
mov dword [ebp - 0x85c], 0
jmp 0x45039d
mov eax, dword [ebp - 0x85c]
inc eax
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 3
jge 0x4503b9
mov eax, dword [ebp - 0x85c]
mov dword [ebp + eax*4 - 0x2e98], 0xffffffff
jmp 0x450390
mov byte [ebp - 0x281], 0
movzx eax, byte [ebp - 0x281]
test eax, eax
je 0x4503df
push 0
push 0x5e6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0x5f8], 0
jmp 0x4503f8
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0x16
jge 0x450456
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x2ec], 0
jmp 0x450424
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jg 0x450454
mov eax, dword [ebp - 0x2ec]
mov ecx, dword [ebp - 0x2ec]
mov eax, dword [ebp + eax*4 - 0x2e98]
mov dword [ebp + ecx*4 - 0x2e98], eax
cmp dword [ebp - 0x2ec], 0
je 0x450452
jmp 0x450454
jmp 0x450417
jmp 0x4503eb
mov dword [ebp - 0x2b38], 0xffffffff
mov dword [ebp - 0x2b40], 0x1124
mov dword [ebp - 0x2b48], 0x1f2c29a
mov dword [ebp - 0x2b50], 0
mov dword [ebp - 0x2b58], 0xa654fddd
mov dword [ebp - 0x2b60], 0xfffffffb
mov dword [ebp - 0xc90], 0x5fcc58a0
mov dword [ebp - 0x864], 0
jmp 0x4504b5
mov eax, dword [ebp - 0x864]
inc eax
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 1
jge 0x4504d1
mov eax, dword [ebp - 0x864]
mov dword [ebp + eax*4 - 0x2b68], 0x29ea4144
jmp 0x4504a8
mov eax, dword [ebp - 0xc90]
inc eax
mov dword [ebp - 0xc90], eax
mov dword [ebp - 0x2b70], 0xfffffffb
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x600], 0
jmp 0x45050b
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 2
jge 0x450527
mov eax, dword [ebp - 0x600]
mov dword [ebp + eax*4 - 0x2730], 0x13b91020
jmp 0x4504fe
mov dword [ebp - 0x4cc], 0
jmp 0x450540
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 1
jg 0x45059d
mov dword [ebp - 0x4d0], 0x2751c76d
mov dword [ebp - 0x4d0], 0
jmp 0x45056c
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 1
jg 0x45059b
mov eax, dword [ebp - 0x4cc]
cmp dword [ebp + eax*4 - 0x2730], 0
je 0x450587
jmp 0x45059b
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp + eax*4 - 0x2730], 0
je 0x450599
jmp 0x45055f
jmp 0x45055f
jmp 0x450533
mov dword [ebp - 0x2b78], 0xffffffff
mov dword [ebp - 0x86c], 0
mov dword [ebp - 0x2808], 0
mov dword [ebp - 0x2804], 0
mov dword [ebp - 0x2800], 0
mov dword [ebp - 0x27fc], 0
mov dword [ebp - 0x450], 0x4caf
mov eax, dword [ebp - 0x450]
dec eax
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x450], 0
jmp 0x450609
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0x26
jg 0x450663
mov dword [ebp - 0x86c], 0
jmp 0x45062b
mov eax, dword [ebp - 0x86c]
dec eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0xfffffff3
jne 0x450647
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2808], 0
je 0x450645
jmp 0x450647
jmp 0x45061e
mov byte [ebp - 0x36d], 0
movzx eax, byte [ebp - 0x36d]
test eax, eax
je 0x450661
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x4505fc
mov dword [ebp - 0x2b80], 0xfffffffd
mov dword [ebp - 0x598], 0x5a136951
mov dword [ebp - 0x608], 0
jmp 0x450690
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 1
jge 0x4506ac
mov eax, dword [ebp - 0x608]
mov dword [ebp + eax*4 - 0x2468], 0x8ec0ae97
jmp 0x450683
mov dword [ebp - 0x598], 0
jmp 0x4506c5
mov eax, dword [ebp - 0x598]
dec eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jl 0x4506e2
mov eax, dword [ebp - 0x598]
cmp dword [ebp + eax*4 - 0x2468], 0
je 0x4506e0
jmp 0x4506e2
jmp 0x4506b8
mov byte [ebp - 0x283], 0
movzx eax, byte [ebp - 0x283]
test eax, eax
je 0x4506fc
push 0
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
mov dword [ebp - 0x258], 0x999fb023
mov dword [ebp - 0x87c], 0x78fa8f90
mov dword [ebp - 0x4d8], 0xf33f23e9
mov dword [ebp - 0x1b28], 1
mov dword [ebp - 0x874], 0
jmp 0x45073d
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 2
jge 0x450759
mov eax, dword [ebp - 0x874]
mov dword [ebp + eax*4 - 0x1eb4], 0xfffffffd
jmp 0x450730
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x2b88], eax
cmp dword [ebp - 0x258], 0
je 0x45079b
mov dword [ebp - 0x258], 1
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x87c], eax
push 0xfffffffffffffffa
pop eax
sub eax, dword [ebp - 0x4d8]
je 0x45079b
mov dword [ebp - 0x1b20], 1
jmp 0x4507a2
and dword [ebp - 0x1b20], 0
mov eax, dword [ebp - 0x1b20]
neg eax
cmp eax, 1
jge 0x4507cd
cmp dword [ebp - 0x258], 0
je 0x4507cd
mov eax, 0x5256ee97
test eax, eax
je 0x4507cd
mov dword [ebp - 0xc98], 1
jmp 0x4507d4
and dword [ebp - 0xc98], 0
mov eax, 0xbe8e
sub eax, dword [ebp - 0xc98]
cmp eax, dword [ebp - 0x4d8]
jne 0x450814
mov byte [ebp - 0x3d2], 0
movzx eax, byte [ebp - 0x3d2]
test eax, eax
je 0x45080f
push 0
push 0
push 0x1e03
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x450a94
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x2490], 0xfffffffc
mov dword [ebp - 0x2488], 0x26c4f32b
mov dword [ebp - 0x2498], 0x5ecce35a
mov dword [ebp - 0x610], 0
jmp 0x450855
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 1
jge 0x450871
mov eax, dword [ebp - 0x610]
mov dword [ebp + eax*4 - 0x618], 0xfffffff9
jmp 0x450848
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x2b90], eax
mov dword [ebp - 0x1b28], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1eb4]
mov dword [ebp - 0x2470], eax
mov eax, dword [ebp - 0x1b28]
mov dword [ebp - 0x2478], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1eb4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1eb4], eax
mov eax, dword [ebp - 0x2470]
cmp eax, dword [ebp - 0x2478]
jne 0x4508db
mov dword [ebp - 0x2480], 1
jmp 0x4508e2
and dword [ebp - 0x2480], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x2b98], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x618]
cmp dword [ebp - 0x258], eax
jle 0x45090f
mov dword [ebp - 0xca0], 1
jmp 0x450916
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x4d8]
cmp dword [ebp - 0xca0], eax
jg 0x450930
mov dword [ebp - 0x1b30], 1
jmp 0x450937
and dword [ebp - 0x1b30], 0
mov eax, dword [ebp - 0x4d8]
add eax, dword [ebp - 0x1b30]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x618]
cmp dword [ebp - 0x548], eax
jle 0x450964
mov dword [ebp - 0xca8], 1
jmp 0x45096b
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0xca8], eax
jle 0x450985
mov dword [ebp - 0x1b38], 1
jmp 0x45098c
and dword [ebp - 0x1b38], 0
mov eax, dword [ebp - 0x1b38]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x2db0], eax
cmp dword [ebp - 0x4d8], 0
jne 0x4509df
mov eax, dword [ebp - 0x2488]
mov dword [ebp - 0x2db8], eax
mov eax, dword [ebp - 0x2490]
mov dword [ebp - 0x2dc0], eax
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x2dc8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1eb4], 0
mov eax, dword [ebp - 0x2498]
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 0
jne 0x450a06
mov eax, 0xe89b93b3
test eax, eax
jne 0x450a06
and dword [ebp - 0xcb0], 0
jmp 0x450a10
mov dword [ebp - 0xcb0], 1
mov eax, dword [ebp - 0x548]
cmp dword [ebp - 0xcb0], eax
jle 0x450a2a
mov dword [ebp - 0x1b40], 1
jmp 0x450a31
and dword [ebp - 0x1b40], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x618]
cmp dword [ebp - 0x1b40], eax
jg 0x450a52
mov dword [ebp - 0xcb8], 1
jmp 0x450a59
and dword [ebp - 0xcb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1eb4]
cmp dword [ebp - 0xcb8], eax
je 0x450a7a
mov dword [ebp - 0x1b48], 1
jmp 0x450a81
and dword [ebp - 0x1b48], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b48]
mov dword [ebp + eax - 0x618], ecx
mov dword [ebp - 0xc8], 0x477862fd
mov dword [ebp - 0x620], 0xffffffff
mov dword [ebp - 0xc8], 0
jmp 0x450ac1
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffff3
jle 0x450e2d
mov dword [ebp - 0xe8], 0x98070ade
mov dword [ebp - 0x238], 0xdd78f4f8
mov dword [ebp - 0xbcc], 0xb4f5ac3d
mov dword [ebp - 0x884], 0
jmp 0x450b05
mov eax, dword [ebp - 0x884]
inc eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 1
jge 0x450b21
mov eax, dword [ebp - 0x884]
mov dword [ebp + eax*4 - 0xcf0], 0x867a7bf7
jmp 0x450af8
mov dword [ebp - 0xe8], 0x13
jmp 0x450b3a
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 8
jg 0x450cba
mov dword [ebp - 0xbc4], 0xffffffff
cmp dword [ebp - 0xc8], 0
je 0x450b7b
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xbcc], eax
cmp dword [ebp - 0xbcc], 0
je 0x450b7b
mov dword [ebp - 0xcc0], 1
jmp 0x450b82
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xcc0], eax
jle 0x450b9c
mov dword [ebp - 0x1b50], 1
jmp 0x450ba3
and dword [ebp - 0x1b50], 0
mov dword [ebp - 0xbc4], 0x184
mov eax, dword [ebp - 0xbc4]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0x1b50]
cmp dword [ebp - 0x238], eax
je 0x450bda
mov dword [ebp - 0xcc8], 1
jmp 0x450be1
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xcc8], eax
jge 0x450bfb
mov dword [ebp - 0x1b58], 1
jmp 0x450c02
and dword [ebp - 0x1b58], 0
cmp dword [ebp - 0x1b58], 1
jge 0x450c1d
mov eax, 0x335c0de4
test eax, eax
jne 0x450c1d
and dword [ebp - 0x24a0], 0
jmp 0x450c27
mov dword [ebp - 0x24a0], 1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2dd0], eax
cmp dword [ebp - 0xbc4], 0
je 0x450c51
cmp dword [ebp - 0xbcc], 0
je 0x450c51
mov dword [ebp - 0xcd0], 1
jmp 0x450c58
and dword [ebp - 0xcd0], 0
cmp dword [ebp - 0xcd0], 0
jl 0x450c6d
mov dword [ebp - 0x1b60], 1
jmp 0x450c74
and dword [ebp - 0x1b60], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x1b60], eax
je 0x450c97
cmp dword [ebp - 0xc8], 0
je 0x450c97
mov dword [ebp - 0xcd8], 1
jmp 0x450c9e
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0xe8], 0
je 0x450cb5
jmp 0x450cba
jmp 0x450b2d
mov dword [ebp - 0xe8], 0xfffffff5
jmp 0x450cd3
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x1d
je 0x450e28
mov dword [ebp - 0x24a8], 0x5c7e
mov byte [ebp - 0x285], 0
movzx eax, byte [ebp - 0x285]
test eax, eax
je 0x450d19
push 0x16
push 0x1501
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x238], 0
jmp 0x450d32
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jg 0x450e23
mov eax, dword [ebp - 0x238]
cmp dword [ebp + eax*4 - 0xcf0], 0
je 0x450dda
cmp dword [ebp - 0x24a8], 0x939401b2
jle 0x450d6b
mov dword [ebp - 0x1b68], 1
jmp 0x450d72
and dword [ebp - 0x1b68], 0
cmp dword [ebp - 0x1b68], 0xa21b
jne 0x450d8a
mov dword [ebp - 0xce0], 1
jmp 0x450d91
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0x620]
cmp dword [ebp - 0xce0], eax
jge 0x450db1
mov eax, 0xec151d1a
test eax, eax
jne 0x450db1
and dword [ebp - 0x1b70], 0
jmp 0x450dbb
mov dword [ebp - 0x1b70], 1
mov eax, 0x652f093d
sub eax, dword [ebp - 0x620]
add eax, dword [ebp - 0x1b70]
js 0x450dda
mov dword [ebp - 0xce8], 1
jmp 0x450de1
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xce8]
jne 0x450e01
cmp dword [ebp - 0x620], 0
jne 0x450e01
and dword [ebp - 0x1b78], 0
jmp 0x450e0b
mov dword [ebp - 0x1b78], 1
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x1b78]
mov dword [ebp + eax*4 - 0xcf0], ecx
jmp 0x450d25
jmp 0x450cc6
jmp 0x450ab4
mov dword [ebp - 0x88c], 1
mov dword [ebp - 0x2dd8], 0xffffffff
mov dword [ebp - 0x2de0], 0
mov dword [ebp - 0x2de8], 0x51328f6c
mov dword [ebp - 0x2df0], 0x72276b87
mov dword [ebp - 0x2df8], 0xffffffff
mov dword [ebp - 0x1b80], 0xc299
mov dword [ebp - 0x1ec], 0
jmp 0x450e8c
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x450ea8
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x3308], 4
jmp 0x450e7f
mov dword [ebp - 0x1ec], 0
jmp 0x450ec1
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x450edd
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x32b0], 9
jmp 0x450eb4
mov dword [ebp - 0x88c], 3
jmp 0x450ef6
mov eax, dword [ebp - 0x88c]
dec eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0
jl 0x450f20
mov byte [ebp - 0x375], 0
movzx eax, byte [ebp - 0x375]
test eax, eax
je 0x450f1e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x450ee9
mov eax, dword [ebp - 0x1b80]
dec eax
mov dword [ebp - 0x1b80], eax
mov dword [ebp - 0x94], 0
jmp 0x450f46
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x450f62
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x2708], 0x13dce9d
jmp 0x450f39
mov dword [ebp - 0x10], 0xfffe
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x630], 0xffffffff
mov dword [ebp - 0x24c0], 0xffffffff
mov dword [ebp - 0x24c8], 0xfffffff7
cmp dword [ebp - 0x10], 0
je 0x450fa3
mov dword [ebp - 0xcf8], 1
jmp 0x450faa
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x4510f3
mov dword [ebp - 0x24b0], 0
mov dword [ebp - 0xb4], 0
jmp 0x450fe6
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jle 0x4510ee
mov dword [ebp - 0xbd4], 9
mov dword [ebp - 0x10], 0x12
jmp 0x45100d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x23
jg 0x45106d
mov byte [ebp - 0x287], 0
movzx eax, byte [ebp - 0x287]
test eax, eax
je 0x451045
push 0
push 0xbbc
push 0xf4
push 0
push 0x23a9
push 0x1697
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov byte [ebp - 0x3d4], 0
movzx eax, byte [ebp - 0x3d4]
test eax, eax
je 0x45106b
push 0x25df
push 0
push 0x14dd
push 0x4d
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
jmp 0x451006
cmp dword [ebp - 0x24b0], 0
jne 0x4510ab
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x10], eax
jg 0x45108d
mov dword [ebp - 0x1b88], 1
jmp 0x451094
and dword [ebp - 0x1b88], 0
mov eax, dword [ebp - 0xbd4]
cmp eax, dword [ebp - 0x1b88]
je 0x4510ab
and dword [ebp - 0xd00], 0
jmp 0x4510b5
mov dword [ebp - 0xd00], 1
mov eax, dword [ebp - 0xbd4]
imul eax, dword [ebp - 0xbd4]
cmp dword [ebp - 0xd00], eax
jg 0x4510d6
mov dword [ebp - 0x1b90], 1
jmp 0x4510dd
and dword [ebp - 0x1b90], 0
mov eax, dword [ebp - 0x1b90]
mov dword [ebp - 0x630], eax
jmp 0x450fd9
jmp 0x4514c1
mov dword [ebp - 0x89c], 0x8d34
mov dword [ebp - 0x408], 0x1e758769
mov dword [ebp - 0x628], 0
jmp 0x451120
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 4
jge 0x45113c
mov eax, dword [ebp - 0x628]
mov dword [ebp + eax*4 - 0xc7c], 0
jmp 0x451113
mov dword [ebp - 0x10], 0
jmp 0x45114c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x4513bf
mov dword [ebp - 0x894], 0
jmp 0x45116f
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 3
jge 0x45118b
mov eax, dword [ebp - 0x894]
mov dword [ebp + eax*4 - 0x3180], 0
jmp 0x451162
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xc7c], 0
je 0x451382
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xc7c], 0
jne 0x45125e
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xd08], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd08]
mov dword [ebp + eax - 0x3180], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc7c]
cmp eax, dword [ebp - 0xd08]
jg 0x4511e7
mov dword [ebp - 0x1b98], 1
jmp 0x4511ee
and dword [ebp - 0x1b98], 0
mov eax, dword [ebp - 0x1b98]
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
je 0x451216
push 7
pop eax
test eax, eax
je 0x451216
mov dword [ebp - 0xd10], 1
jmp 0x45121d
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xd10], eax
jle 0x451237
mov dword [ebp - 0x1ba0], 1
jmp 0x45123e
and dword [ebp - 0x1ba0], 0
mov eax, dword [ebp - 0x1ba0]
sub eax, dword [ebp - 0xb4]
jne 0x45125e
cmp dword [ebp - 0x89c], 0
jne 0x45125e
and dword [ebp - 0xd18], 0
jmp 0x451268
mov dword [ebp - 0xd18], 1
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov ecx, dword [ebp - 0x10]
sub eax, dword [ebp + ecx*4 - 0xc7c]
cmp eax, dword [ebp - 0xb4]
jge 0x4512a1
cmp dword [ebp - 0x408], 0
je 0x4512a1
mov dword [ebp - 0x1ba8], 1
jmp 0x4512a8
and dword [ebp - 0x1ba8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc7c]
cmp dword [ebp - 0x1ba8], eax
jle 0x4512c6
mov dword [ebp - 0x24b8], 1
jmp 0x4512cd
and dword [ebp - 0x24b8], 0
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x2e00], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x2e08], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc7c]
mov dword [ebp - 0x2e10], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0xc7c]
cmp dword [ebp + eax - 0xc7c], ecx
jle 0x45131a
mov dword [ebp - 0xd20], 1
jmp 0x451321
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xd20], eax
jg 0x451338
mov dword [ebp - 0x1bb0], 1
jmp 0x45133f
and dword [ebp - 0x1bb0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc7c]
imul eax, dword [ebp - 0x1bb0]
cmp eax, 9
jl 0x451361
mov dword [ebp - 0xd28], 1
jmp 0x451368
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0xd28]
sub eax, dword [ebp - 0xb4]
je 0x451382
mov dword [ebp - 0x1bb8], 1
jmp 0x451389
and dword [ebp - 0x1bb8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc7c]
cmp dword [ebp - 0x1bb8], eax
je 0x4513a7
mov dword [ebp - 0xd30], 1
jmp 0x4513ae
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0xd30]
mov dword [ebp - 0xb4], eax
jmp 0x451145
imul eax, dword [ebp - 0x630], 0xfe83
test eax, eax
je 0x45148f
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
jne 0x451483
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2e18], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc7c]
mov dword [ebp - 0x2e20], eax
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x24c0], eax
jne 0x451420
mov dword [ebp - 0x1bc0], 1
jmp 0x451427
and dword [ebp - 0x1bc0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc7c]
cmp dword [ebp - 0x1bc0], eax
jne 0x45144b
xor eax, eax
je 0x45144b
mov dword [ebp - 0xd38], 1
jmp 0x451452
and dword [ebp - 0xd38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc7c]
cmp dword [ebp - 0xd38], eax
jg 0x451473
mov dword [ebp - 0x1bc8], 1
jmp 0x45147a
and dword [ebp - 0x1bc8], 0
mov eax, dword [ebp - 0x1bc8]
inc eax
je 0x45148f
mov dword [ebp - 0xd40], 1
jmp 0x451496
and dword [ebp - 0xd40], 0
cmp dword [ebp - 0xd40], 0xd90c37c
jg 0x4514ae
mov dword [ebp - 0x1bd0], 1
jmp 0x4514b5
and dword [ebp - 0x1bd0], 0
mov eax, dword [ebp - 0x1bd0]
mov dword [ebp - 0x24c8], eax
mov dword [ebp - 0x94], 0
jmp 0x4514da
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x4514f6
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x2e28], 0x86992f1e
jmp 0x4514cd
mov dword [ebp - 0x9b4], 0xfffffffc
mov dword [ebp - 0x2e30], 0x5c62e089
mov dword [ebp - 0x2544], 0
mov dword [ebp - 0x251c], 0
mov dword [ebp - 0x24d0], 0x96bb6454
mov dword [ebp - 0xb08], 0x5f03
mov dword [ebp - 0x2534], 0x4c2e3979
mov dword [ebp - 0x160], 0
jmp 0x451555
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x451571
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xc6c], 0x60477862
jmp 0x451548
mov dword [ebp - 0x160], 0
jmp 0x45158a
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x4515a6
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x2698], 0xfffffffd
jmp 0x45157d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc6c], 0
jmp 0x4515d4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc6c], 7
jg 0x451889
mov dword [ebp - 0x2e38], 3
mov dword [ebp - 0x2e40], 0
mov dword [ebp - 0x2524], 0xfffffff6
mov dword [ebp - 0x2e48], 0
mov dword [ebp - 0xbdc], 0xffffffff
mov dword [ebp - 0x2e50], 0
mov dword [ebp - 0x2e58], 1
mov dword [ebp - 0x2e60], 0
mov dword [ebp - 0x4e0], 0x41ac3dc9
mov dword [ebp - 0x2514], 0x77509cb0
mov dword [ebp - 0x2e68], 0xffffffff
mov dword [ebp - 0x2e70], 0xfffffffe
mov dword [ebp - 0xbe4], 0xfeb1ec6c
mov dword [ebp - 0x20c], 0
jmp 0x451683
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x45169f
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x2e78], 1
jmp 0x451676
mov dword [ebp - 0x20c], 0
jmp 0x4516b8
cmp dword [ebp - 0x20c], 3
jge 0x4516d4
cmp dword [ebp - 0xb08], 0
jne 0x4518a4
mov eax, 0x47e08a84
test eax, eax
jne 0x4518a4
and dword [ebp - 0x252c], 0
jmp 0x4518ae
mov dword [ebp - 0x252c], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x2698], 0xfffb
cmp eax, dword [ebp - 0xb08]
jle 0x4518d3
mov dword [ebp - 0xd60], 1
jmp 0x4518da
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x2534]
cmp dword [ebp - 0xd60], eax
jge 0x4518f4
mov dword [ebp - 0x253c], 1
jmp 0x4518fb
and dword [ebp - 0x253c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc6c]
mov dword [ebp - 0x2f64], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2698]
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x2544]
sub eax, dword [ebp - 0x9b4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc6c], eax
mov dword [ebp - 0x94], 0
jmp 0x451952
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0x1cb0], 0x256a9ef7
mov dword [ebp - 0x261c], 1
mov dword [ebp - 0x8dc], 0
jmp 0x452c15
mov eax, dword [ebp - 0x8dc]
inc eax
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 2
jge 0x452c31
mov eax, dword [ebp - 0x8dc]
mov dword [ebp + eax*4 - 0x2bd4], 0x43836745
jmp 0x452c08
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3038], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], eax
je 0x452c57
mov dword [ebp - 0x2614], 1
jmp 0x452c5e
and dword [ebp - 0x2614], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3040], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3048], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3050], eax
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0xf8]
add eax, 0xffff
cmp eax, 0xfffa
jb 0x452ca7
mov dword [ebp - 0x1ca8], 1
jmp 0x452cae
and dword [ebp - 0x1ca8], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x1ca8], eax
jne 0x452cc8
mov dword [ebp - 0xe20], 1
jmp 0x452ccf
and dword [ebp - 0xe20], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe20]
mov dword [ebp + eax - 0x2bd4], ecx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1cb0], eax
mov eax, 0xde57
add eax, 0x1be3
cmp dword [ebp - 0x1cb0], eax
jne 0x452d0c
mov dword [ebp - 0xe28], 1
jmp 0x452d13
and dword [ebp - 0xe28], 0
cmp dword [ebp - 0xe28], 0xfffffffb
je 0x452d28
mov dword [ebp - 0x1cb8], 1
jmp 0x452d2f
and dword [ebp - 0x1cb8], 0
mov eax, dword [ebp - 0x1cb8]
mov dword [ebp - 0x261c], eax
mov byte [ebp - 0x3d8], 0
movzx eax, byte [ebp - 0x3d8]
test eax, eax
je 0x452d62
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov byte [ebp - 0x291], 0
mov dword [ebp - 0x678], 5
mov dword [ebp - 0x3058], 0xbf33880e
mov dword [ebp - 0x3060], 0xfffffffb
mov dword [ebp - 0x3068], 1
mov dword [ebp - 0x678], 0x17
jmp 0x452daa
mov eax, dword [ebp - 0x678]
dec eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0xffffffef
jge 0x452e74
mov dword [ebp - 0x8e4], 0xd4e7937
mov dword [ebp - 0x3070], 0x5e1abe8f
mov dword [ebp - 0x3078], 0x434678dc
mov dword [ebp - 0x3080], 0x15546710
mov dword [ebp - 0xe30], 1
mov dword [ebp - 0x8e4], 0xffffffe6
jmp 0x452e02
mov eax, dword [ebp - 0x8e4]
inc eax
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x8e4], 0x10
jne 0x452e6f
mov dword [ebp - 0x2624], 0xfffffff7
mov dword [ebp - 0x262c], 3
mov dword [ebp - 0x680], 0
jmp 0x452e38
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 1
jge 0x452e54
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x3088], 0x43b2b74c
jmp 0x452e2b
mov eax, dword [ebp - 0x2624]
mov dword [ebp - 0x262c], eax
mov eax, dword [ebp - 0xe30]
inc eax
mov dword [ebp - 0xe30], eax
jmp 0x452df5
jmp 0x452d9d
movzx eax, byte [ebp - 0x291]
test eax, eax
je 0x452ef9
mov dword [ebp - 0x8ec], 1
mov dword [ebp - 0x2634], 0x3245f1db
mov dword [ebp - 0x8ec], 0x13
jmp 0x452eac
mov eax, dword [ebp - 0x8ec]
dec eax
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 0xfffffffd
je 0x452edc
cmp dword [ebp - 0x2634], 0
je 0x452ec0
jmp 0x452edc
mov byte [ebp - 0x38d], 0
movzx eax, byte [ebp - 0x38d]
test eax, eax
je 0x452eda
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
jmp 0x452e9f
push 0
push 0x929
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov dword [ebp - 0x309c], 5
mov dword [ebp - 0x3098], 5
mov dword [ebp - 0x3094], 5
mov dword [ebp - 0x3090], 5
mov dword [ebp - 0x688], 6
mov dword [ebp - 0x688], 3
jmp 0x452f44
mov eax, dword [ebp - 0x688]
dec eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 0
jl 0x452f73
mov byte [ebp - 0x293], 0
movzx eax, byte [ebp - 0x293]
test eax, eax
je 0x452f71
push 0xe5d
push 0x195
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
jmp 0x452f37
cmp dword [ebp + 8], 2
jl 0x462c02
mov dword [ebp - 0x8f4], 0x170cd509
mov dword [ebp - 0xe40], 0xc34eea2a
mov dword [ebp - 0x9c4], 0
mov dword [ebp - 0x1cd0], 5
mov dword [ebp - 0x263c], 2
mov dword [ebp - 0x236c], 6
mov dword [ebp - 0x1c8], 0
jmp 0x452fd2
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x452fee
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x26e0], 7
jmp 0x452fc5
mov dword [ebp - 0x1c8], 0
jmp 0x453007
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
jge 0x453023
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x30cc], 0xd5feaf86
jmp 0x452ffa
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x9c4], eax
cmp dword [ebp - 0x9c4], 0
jne 0x45308f
mov eax, dword [ebp - 0x8f4]
cmp dword [ebp - 0x8f4], eax
je 0x453052
mov dword [ebp - 0x1cc0], 1
jmp 0x453059
and dword [ebp - 0x1cc0], 0
mov eax, dword [ebp - 0x9c4]
cmp dword [ebp - 0x1cc0], eax
jle 0x453073
mov dword [ebp - 0xe38], 1
jmp 0x45307a
and dword [ebp - 0xe38], 0
cmp dword [ebp - 0xe38], 0x64fda7ef
jne 0x45308f
and dword [ebp - 0xae4], 0
jmp 0x453099
mov dword [ebp - 0xae4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x26e0], ecx
cmp dword [ebp - 0xae4], 0
je 0x4530d1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26e0], 0
je 0x4530d1
mov dword [ebp - 0x1cc8], 1
jmp 0x4530d8
and dword [ebp - 0x1cc8], 0
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0xe40], eax
mov eax, dword [ebp - 0x1cc8]
sub eax, 0x13e19f23
mov dword [ebp - 0x1cd0], eax
mov eax, dword [ebp - 0xe40]
mov dword [ebp - 0x2844], eax
mov eax, dword [ebp - 0x1cd0]
mov dword [ebp - 0x2d90], eax
or eax, 0xffffffff
je 0x453127
cmp dword [ebp - 0x263c], 0
je 0x453127
mov dword [ebp - 0xe48], 1
jmp 0x45312e
and dword [ebp - 0xe48], 0
mov eax, dword [ebp - 0x236c]
add eax, dword [ebp - 0xe48]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x30cc], eax
mov byte [ebp - 0x3da], 0
movzx eax, byte [ebp - 0x3da]
test eax, eax
je 0x453160
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0x180], 0xc68ec0ae
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x690], 0
jmp 0x45318d
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 2
jge 0x4531a9
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x2be0], 0xffffffff
jmp 0x453180
mov dword [ebp - 0x180], 0xfffffff5
jmp 0x4531c2
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xffffffeb
jge 0x4532f2
mov dword [ebp - 0x9cc], 0x57b5bf2d
mov dword [ebp - 0x1ce0], 6
cmp dword [ebp - 0x9cc], 0
jne 0x45325c
cmp dword [ebp - 0x9cc], 0
je 0x453253
cmp dword [ebp - 0x180], 0
jae 0x45320a
mov dword [ebp - 0x1cd8], 1
jmp 0x453211
and dword [ebp - 0x1cd8], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x1cd8], eax
je 0x45322b
mov dword [ebp - 0xe50], 1
jmp 0x453232
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0xe50]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x1ce0], eax
cmp dword [ebp - 0x1ce0], 0
jne 0x45325c
and dword [ebp - 0xe58], 0
jmp 0x453266
mov dword [ebp - 0xe58], 1
cmp dword [ebp - 0xe58], 0x31fadacd
jne 0x45327e
mov dword [ebp - 0x1ce8], 1
jmp 0x453285
and dword [ebp - 0x1ce8], 0
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x1ce8]
jle 0x45329f
mov dword [ebp - 0xe60], 1
jmp 0x4532a6
and dword [ebp - 0xe60], 0
mov eax, dword [ebp - 0x180]
imul ecx, dword [ebp - 0xe60], 0x393e
imul eax, ecx
cmp eax, dword [ebp - 0x180]
jle 0x4532cd
mov dword [ebp - 0x1cf0], 1
jmp 0x4532d4
and dword [ebp - 0x1cf0], 0
mov eax, dword [ebp - 0x1cf0]
sub eax, dword [ebp - 0x9cc]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2be0], eax
jmp 0x4531b5
mov dword [ebp - 0x498], 0x14
jmp 0x45330b
mov eax, dword [ebp - 0x498]
dec eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 0xfffffff8
jle 0x45332b
mov dword [ebp - 0x20a0], 0x7c629c4d
cmp dword [ebp - 0x20a0], 0
je 0x453329
jmp 0x45332b
jmp 0x4532fe
mov dword [ebp - 0xa8], 0x351a
mov dword [ebp - 0x240], 0xd04cd021
mov dword [ebp - 0x9d4], 0
mov dword [ebp - 0xb1c], 1
mov dword [ebp - 0x1d08], 4
mov dword [ebp - 0xe90], 0xfffffff6
mov dword [ebp - 0xe98], 0x27682c5a
mov dword [ebp - 0x23f8], 2
mov dword [ebp - 0x284c], 0x52196db3
mov dword [ebp - 0x8fc], 0
jmp 0x45339e
mov eax, dword [ebp - 0x8fc]
inc eax
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 1
jge 0x4533ba
mov eax, dword [ebp - 0x8fc]
mov dword [ebp + eax*4 - 0x1d00], 8
jmp 0x453391
mov eax, dword [ebp - 0xa8]
neg eax
cmp dword [ebp - 0xa8], eax
jle 0x4533d6
mov dword [ebp - 0xe68], 1
jmp 0x4533dd
and dword [ebp - 0xe68], 0
cmp dword [ebp - 0xe68], 1
jge 0x4533f2
mov dword [ebp - 0x1cf8], 1
jmp 0x4533f9
and dword [ebp - 0x1cf8], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1cf8], eax
jle 0x453413
mov dword [ebp - 0xe70], 1
jmp 0x45341a
and dword [ebp - 0xe70], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0xe70], eax
jl 0x453434
mov dword [ebp - 0x2418], 1
jmp 0x45343b
and dword [ebp - 0x2418], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2cec], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2854], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x2d98], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x285c], eax
cmp dword [ebp - 0x240], 7
jne 0x453480
mov dword [ebp - 0x20a8], 1
jmp 0x453487
and dword [ebp - 0x20a8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2cf8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1d00], 6
mov dword [ebp - 0x9d4], 3
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x2864], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d00]
imul eax, dword [ebp - 0x240]
test eax, eax
je 0x4534e7
mov eax, 0x69eed08e
test eax, eax
je 0x4534e7
mov dword [ebp - 0xe78], 1
jmp 0x4534ee
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0xb1c]
sub eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x240]
mov dword [ebp - 0x1d08], eax
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x1d08], eax
je 0x45352c
mov dword [ebp - 0xe80], 1
jmp 0x453533
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xe80], eax
jne 0x45354d
mov dword [ebp - 0x1d10], 1
jmp 0x453554
and dword [ebp - 0x1d10], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1d10], eax
jne 0x45356e
mov dword [ebp - 0xe88], 1
jmp 0x453575
and dword [ebp - 0xe88], 0
cmp dword [ebp - 0xe88], 1
jb 0x45358a
mov dword [ebp - 0x1d18], 1
jmp 0x453591
and dword [ebp - 0x1d18], 0
mov eax, dword [ebp - 0x1d18]
mov dword [ebp - 0xe90], eax
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xe90], eax
jle 0x4535b7
mov dword [ebp - 0x1d20], 1
jmp 0x4535be
and dword [ebp - 0x1d20], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1d20], eax
jg 0x4535d5
cmp dword [ebp - 0xb1c], 0
je 0x4535dc
cmp dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0xe98], eax
cmp dword [ebp - 0xe98], 0
je 0x453606
cmp dword [ebp - 0x240], 0
je 0x453606
mov dword [ebp - 0x1d28], 1
jmp 0x45360d
and dword [ebp - 0x1d28], 0
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x23f8], eax
mov dword [ebp - 0x12c], 0x78ab
mov dword [ebp - 0x4e8], 0xa3d7f191
mov dword [ebp - 0x64], 0
jmp 0x45363d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x453653
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x20b0], 0xfffc
jmp 0x453636
mov dword [ebp - 0x64], 0
jmp 0x453663
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x453679
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc3c], 0x7c7ce53d
jmp 0x45365c
mov dword [ebp - 0x64], 0
jmp 0x453689
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x45369f
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x23b4], 9
jmp 0x453682
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc3c], 0
jmp 0x4536cd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc3c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc3c], 0
jg 0x45383f
mov dword [ebp - 0x260], 0x6f5a9c4c
mov dword [ebp - 0x2da0], 0
mov dword [ebp - 0xea0], 0xfffffff9
mov dword [ebp - 0x698], 0
jmp 0x453718
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 1
jge 0x453734
mov eax, dword [ebp - 0x698]
mov dword [ebp + eax*4 - 0x286c], 0x108531d1
jmp 0x45370b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc3c]
cmp dword [ebp + eax*4 - 0x20b0], 0
je 0x453750
jmp 0x45383f
mov dword [ebp - 0x260], 0
jmp 0x453769
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jl 0x4537ee
mov dword [ebp - 0x904], 0xf0aa6e6f
mov dword [ebp - 0x904], 0
jmp 0x453795
mov eax, dword [ebp - 0x904]
inc eax
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x904], 0
jg 0x4537ba
mov byte [ebp - 0x295], 0
movzx eax, byte [ebp - 0x295]
test eax, eax
je 0x4537b8
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x453788
mov byte [ebp - 0x395], 0
movzx eax, byte [ebp - 0x395]
test eax, eax
je 0x4537e9
push 0
push 0x22ae
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x45375c
mov dword [ebp - 0x260], 0
jmp 0x453807
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jg 0x45383a
mov dword [ebp - 0x2da8], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x23b4], 0x754320e3
mov eax, dword [ebp - 0xea0]
inc eax
mov dword [ebp - 0xea0], eax
jmp 0x4537fa
jmp 0x4536b2
mov dword [ebp - 0x4e8], 1
jmp 0x453858
mov eax, dword [ebp - 0x4e8]
dec eax
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
jl 0x453875
mov eax, dword [ebp - 0x4e8]
cmp dword [ebp + eax*4 - 0xc3c], 0
je 0x453873
jmp 0x453875
jmp 0x45384b
mov dword [ebp - 0x9fc], 0x7f6fb807
mov dword [ebp - 0x20b8], 0x9cb6
mov dword [ebp - 0x2874], 0
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x2f5c], 0
mov dword [ebp - 0x550], 4
push 3
pop eax
sub eax, dword [ebp - 0x20b8]
cmp eax, 0x6ce
jl 0x4538cd
mov dword [ebp - 0x1d30], 1
jmp 0x4538d4
and dword [ebp - 0x1d30], 0
mov eax, dword [ebp - 0x1d30]
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x550], 0
jmp 0x4538f9
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 3
jl 0x45395f
mov dword [ebp - 0xea8], 0xffffffff
mov dword [ebp - 0x20c0], 0x592840cc
mov eax, dword [ebp - 0xea8]
inc eax
mov dword [ebp - 0xea8], eax
mov dword [ebp - 0x6a0], 0
jmp 0x45393c
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 0xe
je 0x45395d
mov dword [ebp - 0x2510], 0xab0c
mov eax, dword [ebp - 0x2510]
mov dword [ebp - 0x20c0], eax
jmp 0x45392f
jmp 0x4538ec
mov dword [ebp - 4], 0xb4ffb87
mov dword [ebp - 0xbc], 0x8f738f58
mov dword [ebp - 0x420], 0xb816e149
mov dword [ebp - 0x6c0], 1
mov dword [ebp - 0x27e8], 0x40c50340
mov dword [ebp - 0x27e4], 0x40c50340
mov dword [ebp - 0x27e0], 0x40c50340
mov dword [ebp - 0x27dc], 0x40c50340
mov dword [ebp - 0xf64], 2
mov dword [ebp - 0x90c], 0
jmp 0x4539cf
mov eax, dword [ebp - 0x90c]
inc eax
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 1
jge 0x4539e8
mov eax, dword [ebp - 0x90c]
mov dword [ebp + eax*4 - 0xc], 0
jmp 0x4539c2
mov dword [ebp - 4], 0
jmp 0x4539f8
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x453c0c
mov dword [ebp - 0x1d60], 0x63abefa0
mov dword [ebp - 0x20c8], 0x42ad015b
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0xc]
cmp dword [ebp + eax*4 - 0xc], ecx
jle 0x453a32
mov dword [ebp - 0x1d38], 1
jmp 0x453a39
and dword [ebp - 0x1d38], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0xc]
cmp dword [ebp + eax*4 - 0xc], ecx
je 0x453a55
mov dword [ebp - 0x23bc], 1
jmp 0x453a5c
and dword [ebp - 0x23bc], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1d38], eax
jle 0x453a73
mov dword [ebp - 0xeb0], 1
jmp 0x453a7a
and dword [ebp - 0xeb0], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp dword [ebp - 0xeb0], eax
je 0x453a95
mov dword [ebp - 0x1d40], 1
jmp 0x453a9c
and dword [ebp - 0x1d40], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp dword [ebp - 0x1d40], eax
jne 0x453ab7
mov dword [ebp - 0xeb8], 1
jmp 0x453abe
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0xeb8]
add eax, 0x2401dbda
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0xc]
jle 0x453ade
mov dword [ebp - 0x1d48], 1
jmp 0x453ae5
and dword [ebp - 0x1d48], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp dword [ebp - 0x1d48], eax
jne 0x453b07
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xc], 0
jne 0x453b07
and dword [ebp - 0xec0], 0
jmp 0x453b11
mov dword [ebp - 0xec0], 1
cmp dword [ebp - 0xec0], 0x284868fd
jge 0x453b36
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x453b36
mov dword [ebp - 0x1d50], 1
jmp 0x453b3d
and dword [ebp - 0x1d50], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1d50], eax
jle 0x453b54
mov dword [ebp - 0xec8], 1
jmp 0x453b5b
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp eax, dword [ebp - 0xec8]
jg 0x453b76
mov dword [ebp - 0x1d58], 1
jmp 0x453b7d
and dword [ebp - 0x1d58], 0
mov eax, dword [ebp - 0x1d58]
mov dword [ebp - 0xbc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0xbc], eax
jne 0x453ba7
mov dword [ebp - 0xed0], 1
jmp 0x453bae
and dword [ebp - 0xed0], 0
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0x1d60], eax
cmp dword [ebp - 0x1d60], 0x74bf90ed
jl 0x453bd2
mov dword [ebp - 0xed8], 1
jmp 0x453bd9
and dword [ebp - 0xed8], 0
cmp dword [ebp - 0xed8], 0xec560449
jne 0x453bf1
mov dword [ebp - 0x1d68], 1
jmp 0x453bf8
and dword [ebp - 0x1d68], 0
mov eax, dword [ebp - 0x1d68]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x20c8], eax
jmp 0x4539f1
mov dword [ebp - 0xbc], 0xfffffffd
jmp 0x453c25
cmp dword [ebp - 0xbc], 0x14
jl 0x45436c
mov dword [ebp - 0xf0], 0x21817887
mov dword [ebp - 0x924], 0xfffffff6
mov dword [ebp - 0x1de0], 0x2b9925c1
mov dword [ebp - 0x1e00], 0xfced7161
mov dword [ebp - 0x4f0], 0xfffffffd
mov dword [ebp - 0x6a8], 0
jmp 0x453c7d
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 2
jge 0x453c99
mov eax, dword [ebp - 0x6a8]
mov dword [ebp + eax*4 - 0x2bec], 0x7b9e3ec4
jmp 0x453c70
mov dword [ebp - 4], 0
jmp 0x453ca9
cmp dword [ebp - 4], 0
jg 0x454151
mov dword [ebp - 0x6b8], 0x85efbe72
mov dword [ebp - 0x6b0], 0xf96354d1
mov dword [ebp - 0x2518], 0
mov dword [ebp - 0x914], 0
jmp 0x453cea
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 1
jge 0x453d06
mov eax, dword [ebp - 0x914]
mov dword [ebp + eax*4 - 0x23c4], 0
jmp 0x453cdd
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
mov dword [ebp - 0x287c], eax
mov dword [ebp - 0x420], 0xfffffffa
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp dword [ebp - 0x420], eax
jle 0x453d38
mov dword [ebp - 0xee0], 1
jmp 0x453d3f
and dword [ebp - 0xee0], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0xee0]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x6b8], eax
jge 0x453d6b
mov dword [ebp - 0x1d70], 1
jmp 0x453d72
and dword [ebp - 0x1d70], 0
cmp dword [ebp - 0x1d70], 1
jl 0x453d87
mov dword [ebp - 0x2608], 1
jmp 0x453d8e
and dword [ebp - 0x2608], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2d14], eax
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x6b0], eax
jg 0x453db4
mov dword [ebp - 0xee8], 1
jmp 0x453dbb
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0xee8], eax
jle 0x453dd5
mov dword [ebp - 0x1d78], 1
jmp 0x453ddc
and dword [ebp - 0x1d78], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp eax, dword [ebp - 0x1d78]
jne 0x453df7
mov dword [ebp - 0xef0], 1
jmp 0x453dfe
and dword [ebp - 0xef0], 0
cmp dword [ebp - 0xef0], 0x5505
jle 0x453e16
mov dword [ebp - 0x1d80], 1
jmp 0x453e1d
and dword [ebp - 0x1d80], 0
mov eax, dword [ebp - 0x1d80]
sub eax, dword [ebp - 0x6b0]
mov ecx, dword [ebp - 4]
imul eax, dword [ebp + ecx*4 - 0xc]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
mov dword [ebp - 0x2884], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x6c0], eax
jg 0x453e62
mov dword [ebp - 0xef8], 1
jmp 0x453e69
and dword [ebp - 0xef8], 0
cmp dword [ebp - 0xef8], 0x5879
jg 0x453e87
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x1e00]
cmp eax, dword [ebp - 0xf0]
jl 0x454169
cmp dword [ebp - 4], 0
cmp dword [ebp - 0xbc], 0xa3b2
jge 0x454181
mov dword [ebp - 0xf38], 1
jmp 0x454188
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0xf38]
jl 0x4541ae
mov dword [ebp - 0x20e0], 1
jmp 0x4541b5
and dword [ebp - 0x20e0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x2fd0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x289c], eax
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x1de0], eax
cmp dword [ebp - 0x1de0], 2
jae 0x4541ee
mov dword [ebp - 0xf40], 1
jmp 0x4541f5
and dword [ebp - 0xf40], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0xf40]
cmp eax, dword [ebp - 0x4f0]
jg 0x45421c
mov eax, 0xb5922496
test eax, eax
jne 0x45421c
and dword [ebp - 0x1de8], 0
jmp 0x454226
mov dword [ebp - 0x1de8], 1
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x1de8], eax
jne 0x454240
mov dword [ebp - 0xf48], 1
jmp 0x454247
and dword [ebp - 0xf48], 0
cmp dword [ebp - 0xf48], 7
jne 0x45425c
mov dword [ebp - 0x1df0], 1
jmp 0x454263
and dword [ebp - 0x1df0], 0
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0x1df0], eax
jl 0x454287
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x454287
and dword [ebp - 0xf50], 0
jmp 0x454291
mov dword [ebp - 0xf50], 1
mov eax, dword [ebp - 0xf50]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 4], eax
jle 0x4542b1
mov dword [ebp - 0x1df8], 1
jmp 0x4542b8
and dword [ebp - 0x1df8], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x1df8]
je 0x4542db
cmp dword [ebp - 0x420], 0
je 0x4542db
and dword [ebp - 0xf58], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0xf58]
cmp eax, 0x1d7d
jg 0x45430b
mov dword [ebp - 0xc0], 0x477862fd
mov dword [ebp - 0x934], 0xffffffff
mov dword [ebp - 0xc0], 0
jmp 0x454399
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xfffffff3
jle 0x454705
mov dword [ebp - 0xd8], 0x98070ade
mov dword [ebp - 0x248], 0xdd78f4f8
mov dword [ebp - 0x9dc], 0xb4f5ac3d
mov dword [ebp - 0x92c], 0
jmp 0x4543dd
mov eax, dword [ebp - 0x92c]
inc eax
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 1
jge 0x4543f9
mov eax, dword [ebp - 0x92c]
mov dword [ebp + eax*4 - 0x17ac], 0x867a7bf7
jmp 0x4543d0
mov dword [ebp - 0xd8], 0x13
jmp 0x454412
cmp dword [ebp - 0xd8], 8
jg 0x454592
mov dword [ebp - 0xaec], 0xffffffff
cmp dword [ebp - 0xc0], 0
je 0x454453
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x9dc], eax
cmp dword [ebp - 0x9dc], 0
je 0x454453
mov dword [ebp - 0x1794], 1
jmp 0x45445a
and dword [ebp - 0x1794], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x1794], eax
jle 0x454474
mov dword [ebp - 0xf6c], 1
jmp 0x45447b
and dword [ebp - 0xf6c], 0
mov dword [ebp - 0xaec], 0x184
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0xf6c]
cmp dword [ebp - 0x248], eax
je 0x4544b2
mov dword [ebp - 0x1bac], 1
jmp 0x4544b9
and dword [ebp - 0x1bac], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x1bac], eax
jge 0x4544d3
mov dword [ebp - 0xf74], 1
jmp 0x4544da
and dword [ebp - 0xf74], 0
cmp dword [ebp - 0xf74], 1
jge 0x4544f5
mov eax, 0x335c0de4
test eax, eax
jne 0x4544f5
and dword [ebp - 0x20e8], 0
jmp 0x4544ff
mov dword [ebp - 0x20e8], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x28a4], eax
cmp dword [ebp - 0xaec], 0
je 0x454529
cmp dword [ebp - 0x9dc], 0
je 0x454529
mov dword [ebp - 0x179c], 1
jmp 0x454530
and dword [ebp - 0x179c], 0
cmp dword [ebp - 0x179c], 0
jl 0x454545
mov dword [ebp - 0xf7c], 1
jmp 0x45454c
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xf7c], eax
je 0x45456f
cmp dword [ebp - 0xc0], 0
je 0x45456f
and dword [ebp - 0x1dc8], 0
mov eax, dword [ebp - 0x1dc8]
mov dword [ebp - 0x934], eax
cmp dword [ebp - 0xd8], 0
je 0x45458d
mov dword [ebp - 0xd8], 0xfffffff5
jmp 0x4545ab
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x1d
je 0x454700
mov dword [ebp - 0x25d0], 0x5c7e
mov byte [ebp - 0x3dc], 0
movzx eax, byte [ebp - 0x3dc]
test eax, eax
je 0x4545f1
push 0x16
push 0x1501
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x248], 0
jmp 0x45460a
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jg 0x4546fb
mov eax, dword [ebp - 0x248]
cmp dword [ebp + eax*4 - 0x17ac], 0
je 0x4546b2
cmp dword [ebp - 0x25d0], 0x939401b2
jle 0x454643
mov dword [ebp - 0xf84], 1
jmp 0x45464a
and dword [ebp - 0xf84], 0
cmp dword [ebp - 0xf84], 0xa21b
jne 0x454662
mov dword [ebp - 0x17a4], 1
jmp 0x454669
and dword [ebp - 0x17a4], 0
mov eax, dword [ebp - 0x934]
cmp dword [ebp - 0x17a4], eax
jge 0x454689
and dword [ebp - 0x1bb4], 0
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0x1bb4]
jne 0x4546d9
cmp dword [ebp - 0x934], 0
jne 0x4546d9
and dword [ebp - 0xf94], 0
jmp 0x4546e3
mov dword [ebp - 0xf94], 1
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0xf94]
mov dword [ebp + eax*4 - 0x17ac], ecx
jmp 0x4545fd
jmp 0x45459e
jmp 0x45438c
mov dword [ebp - 0x186c], 0x3b94
mov dword [ebp - 0x4c], 0xffff
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x1d0], 0xc437ffea
mov dword [ebp - 0x6e4], 0
jmp 0x454743
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 1
jge 0x45475f
mov eax, dword [ebp - 0x6e4]
mov dword [ebp + eax*4 - 0x314], 0x5aba9a9
jmp 0x454736
mov eax, 0x73ff82f
test eax, eax
je 0x454897
cmp dword [ebp - 0x4c], 0x1ec2
jge 0x454781
mov dword [ebp - 0xf9c], 1
jmp 0x454788
and dword [ebp - 0xf9c], 0
cmp dword [ebp - 0xf9c], 3
jg 0x45479d
mov dword [ebp - 0x1dbc], 1
jmp 0x4547a4
and dword [ebp - 0x1dbc], 0
imul eax, dword [ebp - 0x1dbc], 0xfff9
cmp eax, dword [ebp - 0x84]
jne 0x4547c2
mov dword [ebp - 0xfa4], 1
jmp 0x4547c9
and dword [ebp - 0xfa4], 0
cmp dword [ebp - 0xfa4], 0xf0f
jne 0x4547e1
mov dword [ebp - 0x17b4], 1
jmp 0x4547e8
and dword [ebp - 0x17b4], 0
cmp dword [ebp - 0x17b4], 0xc5ec
jne 0x454800
mov dword [ebp - 0xfac], 1
jmp 0x454807
and dword [ebp - 0xfac], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xfac]
jl 0x454827
cmp dword [ebp - 0x84], 0
je 0x454827
mov dword [ebp - 0x20f0], 1
jmp 0x45482e
and dword [ebp - 0x20f0], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2f20], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jle 0x45484b
mov dword [ebp - 0x23d4], 1
jmp 0x454852
and dword [ebp - 0x23d4], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28ac], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2d2c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28b4], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3064], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x84], eax
jle 0x454897
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x454897
mov dword [ebp - 0x20f8], 1
jmp 0x45489e
and dword [ebp - 0x20f8], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28bc], eax
cmp dword [ebp - 0x4c], 0xf9a4d91f
ja 0x4548bf
mov dword [ebp - 0x1bbc], 1
jmp 0x4548c6
and dword [ebp - 0x1bbc], 0
cmp dword [ebp - 0x1bbc], 0x59f8
jle 0x454975
mov dword [ebp - 0xb24], 0x8607f470
mov dword [ebp - 0x84], 0
jmp 0x4548f9
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jg 0x454923
mov eax, dword [ebp - 0xb24]
inc eax
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x314], 0
je 0x454921
jmp 0x4548ec
jmp 0x4548ec
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb24]
add ecx, 0x5278
cmp dword [ebp + eax - 0x314], ecx
jne 0x45494a
mov dword [ebp - 0x9e4], 1
jmp 0x454951
and dword [ebp - 0x9e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp + eax - 0x314], ecx
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0x1d0], eax
jmp 0x454b79
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0xfc4], 9
mov dword [ebp - 0x84], 0
jmp 0x4549a2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x33
je 0x454b79
cmp dword [ebp - 0x1d0], 0
jne 0x4549e2
mov dword [ebp - 0x4c], 0
jmp 0x4549c8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x4549dd
mov eax, dword [ebp - 0x8c8]
dec eax
mov dword [ebp - 0x8c8], eax
jmp 0x4549c1
jmp 0x454b66
mov dword [ebp - 0xfbc], 0xffff
mov dword [ebp - 0x1eb8], 0x5881f6c9
mov dword [ebp - 0x1d0], 0
jmp 0x454a0f
cmp dword [ebp - 0x1d0], 0
jg 0x454b66
mov dword [ebp - 0xaf4], 0xe31b5465
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp + eax*4 - 0x314], 1
jne 0x454a42
mov dword [ebp - 0xfb4], 1
jmp 0x454a49
and dword [ebp - 0xfb4], 0
mov eax, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0xfbc]
mov dword [ebp - 0x17bc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17bc]
mov dword [ebp + eax - 0x314], ecx
mov eax, dword [ebp - 0x17bc]
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0xfc4], 0
je 0x454a95
xor eax, eax
inc eax
je 0x454a95
and dword [ebp - 0x17c4], 0
mov eax, dword [ebp - 0xfbc]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0x1eb8], eax
cmp dword [ebp - 0x1eb8], 0
je 0x454ad2
cmp dword [ebp - 0x8c8], 0
je 0x454b74
jmp 0x454995
jmp 0x454995
mov dword [ebp - 0x111c], 0x1ca7bc41
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x460], 0xfffffffa
mov dword [ebp - 0x5a8], 0xe7550730
mov eax, 0x4f402e31
test eax, eax
je 0x454cf1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2d34], eax
imul eax, dword [ebp - 0x460], 0xfffa
test eax, eax
jne 0x454bda
cmp dword [ebp - 0xc4], 0
jne 0x454bda
and dword [ebp - 0xfdc], 0
jmp 0x454be4
mov dword [ebp - 0xfdc], 1
cmp dword [ebp - 0xfdc], 0xffffffff
jge 0x454bf9
mov dword [ebp - 0x1dc4], 1
jmp 0x454c00
and dword [ebp - 0x1dc4], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x1dc4], eax
jg 0x454c1a
mov dword [ebp - 0xfe4], 1
jmp 0x454c21
and dword [ebp - 0xfe4], 0
cmp dword [ebp - 0xfe4], 0xc12a7b09
je 0x454c39
mov dword [ebp - 0x17d4], 1
jmp 0x454c40
and dword [ebp - 0x17d4], 0
cmp dword [ebp - 0x17d4], 0x7bc8b421
jg 0x454c58
and dword [ebp - 0x17dc], 0
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0x17dc], eax
jg 0x454d12
mov dword [ebp - 0xffc], 1
jmp 0x454d19
and dword [ebp - 0xffc], 0
mov eax, dword [ebp - 0xffc]
add eax, 0xffff
cmp eax, dword [ebp - 0x460]
jl 0x454d68
mov dword [ebp - 0x2100], 0xfff6
mov byte [ebp - 0x299], 0
movzx eax, byte [ebp - 0x299]
test eax, eax
je 0x454d57
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2100], eax
jmp 0x454ee6
mov dword [ebp - 0x6e0], 0x43f3
mov dword [ebp - 0x9ec], 0xd2bab91e
cmp dword [ebp - 0x5a8], 1
jl 0x454d91
mov dword [ebp - 0x1f64], 1
jmp 0x454d98
and dword [ebp - 0x1f64], 0
cmp dword [ebp - 0x1f64], 0x5008d6db
jg 0x454db4
push 4
pop eax
test eax, eax
jne 0x454db4
mov dword [ebp - 0x1004], 1
cmp dword [ebp - 0x1004], 0
ja 0x454dd3
mov dword [ebp - 0x1874], 0
mov dword [ebp - 0x828], 0
jmp 0x454f09
cmp dword [ebp + 8], 1
jne 0x465740
mov dword [ebp - 0x514], 0x15252cb1
mov dword [ebp - 0x7fc], 0
jmp 0x462c2f
mov eax, dword [ebp - 0x7fc]
inc eax
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 3
jge 0x462c4b
mov eax, dword [ebp - 0x7fc]
mov dword [ebp + eax*4 - 0x2f08], 0x334
jmp 0x462c22
mov dword [ebp - 0x514], 2
jmp 0x462c64
mov eax, dword [ebp - 0x514]
dec eax
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
jl 0x462ca1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x514]
mov eax, dword [ebp + eax - 0x2f08]
mov dword [ebp + ecx*4 - 0x2f08], eax
mov byte [ebp - 0x3ca], 0
movzx eax, byte [ebp - 0x3ca]
test eax, eax
je 0x462c9f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x462c57
mov byte [ebp - 0x355], 0
movzx eax, byte [ebp - 0x355]
test eax, eax
je 0x462cb9
call dword [sym.imp.GDI32.dll_GdiFlush]
mov dword [ebp - 0x80c], 2
mov dword [ebp - 0x1810], 0xbbbdebf8
mov dword [ebp - 0x804], 0
jmp 0x462ce6
mov eax, dword [ebp - 0x804]
inc eax
mov dword [ebp - 0x804], eax
cmp dword [ebp - 0x804], 3
jge 0x462d02
mov eax, dword [ebp - 0x804]
mov dword [ebp + eax*4 - 0x3120], 0
jmp 0x462cd9
mov dword [ebp - 0x80c], 2
jmp 0x462d1b
mov eax, dword [ebp - 0x80c]
inc eax
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0xc
jne 0x462d71
mov dword [ebp - 0x2184], 0x290be443
mov dword [ebp - 0x218c], 0x76c3
imul eax, dword [ebp - 0x2184], 0xea12
cmp eax, dword [ebp - 0x218c]
jle 0x462d56
mov dword [ebp - 0x1808], 1
jmp 0x462d5d
and dword [ebp - 0x1808], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1808]
mov dword [ebp + eax - 0x3120], ecx
jmp 0x462d0e
mov eax, dword [ebp - 0x1810]
inc eax
mov dword [ebp - 0x1810], eax
mov dword [ebp - 0x51c], 0xa0029bf3
mov dword [ebp - 0x2194], 0xfffffff9
mov dword [ebp - 0x814], 0
jmp 0x462dab
mov eax, dword [ebp - 0x814]
inc eax
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 4
jge 0x462dc7
mov eax, dword [ebp - 0x814]
mov dword [ebp + eax*4 - 0x1efc], 0xac204e2
jmp 0x462d9e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1efc], 0
jmp 0x462df2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1efc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1efc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1efc], 0x1c
je 0x462e50
mov byte [ebp - 0x3cc], 0
movzx eax, byte [ebp - 0x3cc]
test eax, eax
je 0x462e28
push 0
push 0
push 0x24a5
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov byte [ebp - 0x35d], 0
movzx eax, byte [ebp - 0x35d]
test eax, eax
je 0x462e4e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
jmp 0x462dd9
mov dword [ebp - 0x51c], 0
jmp 0x462e69
mov eax, dword [ebp - 0x51c]
dec eax
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0xffffffe6
jl 0x463096
mov dword [ebp - 0x1828], 3
mov dword [ebp - 0x81c], 0
jmp 0x462e99
mov eax, dword [ebp - 0x81c]
inc eax
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 3
jge 0x462eb5
mov eax, dword [ebp - 0x81c]
mov dword [ebp + eax*4 - 0xc0c], 0xffffffff
jmp 0x462e8c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc0c], 3
jmp 0x462ee3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc0c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc0c], 0
jl 0x463091
mov dword [ebp - 0xa50], 0x361a6b71
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
mov eax, dword [ebp + eax*4 - 0x1efc]
mov dword [ebp - 0x2d60], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc0c]
mov ecx, dword [ebp + ecx*4 - 0x1efc]
cmp dword [ebp + eax - 0xc0c], ecx
jge 0x462f49
mov dword [ebp - 0x1830], 1
jmp 0x462f50
and dword [ebp - 0x1830], 0
mov dword [ebp - 0xa50], 0xfffffff9
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0x2194], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
cmp dword [ebp + eax*4 - 0x1efc], 0xcad
jne 0x462f8c
mov dword [ebp - 0x219c], 1
jmp 0x462f93
and dword [ebp - 0x219c], 0
mov eax, dword [ebp - 0x51c]
sub eax, 0x6a6c65b0
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1efc]
jge 0x462fbe
mov eax, 0x87292079
test eax, eax
jne 0x462fbe
and dword [ebp - 0x1818], 0
jmp 0x462fc8
mov dword [ebp - 0x1818], 1
cmp dword [ebp - 0x1818], 1
jne 0x462fdd
mov dword [ebp - 0x1820], 1
jmp 0x462fe4
and dword [ebp - 0x1820], 0
mov eax, dword [ebp - 0x1820]
mov dword [ebp - 0x1828], eax
mov eax, dword [ebp - 0x1828]
cmp dword [ebp - 0x1830], eax
jl 0x46300a
mov dword [ebp - 0x1838], 1
jmp 0x463011
and dword [ebp - 0x1838], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1efc]
cmp dword [ebp - 0x1838], eax
jg 0x463031
mov dword [ebp - 0x1840], 1
jmp 0x463038
and dword [ebp - 0x1840], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
mov eax, dword [ebp + eax*4 - 0x1efc]
cmp dword [ebp - 0x1840], eax
jge 0x463060
mov dword [ebp - 0x1848], 1
jmp 0x463067
and dword [ebp - 0x1848], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
mov ecx, dword [ebp - 0x1848]
mov dword [ebp + eax*4 - 0x1efc], ecx
cmp dword [ebp - 0xa50], 0
je 0x46308c
jmp 0x463091
jmp 0x462ec8
jmp 0x462e5c
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0x2ca4], 0xcb51dba3
mov dword [ebp - 0x824], 0
jmp 0x4630c3
mov eax, dword [ebp - 0x824]
inc eax
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x824], 1
jge 0x4630df
mov eax, dword [ebp - 0x824]
mov dword [ebp + eax*4 - 0x1850], 0x47df
jmp 0x4630b6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1850]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1850], eax
mov byte [ebp - 0x3ce], 0
movzx eax, byte [ebp - 0x3ce]
test eax, eax
je 0x46311b
push 0
push 0x1dac
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 0x82c], 0xffffffed
jmp 0x463134
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0x13
jg 0x4644cc
mov dword [ebp - 0x834], 0
jmp 0x46315a
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 3
jge 0x463176
mov eax, dword [ebp - 0x834]
mov dword [ebp + eax*4 - 0x32d4], 2
jmp 0x46314d
mov byte [ebp - 0x365], 0
movzx eax, byte [ebp - 0x365]
test eax, eax
je 0x4631d1
push 0
push 0x23d7
push 0x1cc9
push 0x22df
push 0xe0c
push 0xb22
push 0x1d04
push 0x1411
push 0x920
push 0xd99
push 0x1099
push 0x1c9b
push 0x7ca
push 0x1db2
call dword [sym.imp.GDI32.dll_CreateFontA]
mov byte [ebp - 0x27e], 0
movzx eax, byte [ebp - 0x27e]
test eax, eax
je 0x4631fc
push 0x1b91
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x83c], 9
mov dword [ebp - 0x524], 4
mov dword [ebp - 0x21a4], 5
cmp dword [ebp - 0x524], 0x647dc4b4
jne 0x463232
mov dword [ebp - 0x1858], 1
jmp 0x463239
and dword [ebp - 0x1858], 0
mov eax, dword [ebp - 0x1858]
mov dword [ebp - 0x21a4], eax
mov dword [ebp - 0x524], 0
jmp 0x46325e
mov eax, dword [ebp - 0x524]
inc eax
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0x21
jne 0x463283
mov byte [ebp - 0x280], 0
movzx eax, byte [ebp - 0x280]
test eax, eax
je 0x463281
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
jmp 0x463251
mov dword [ebp - 0x83c], 0
jmp 0x46329c
mov eax, dword [ebp - 0x83c]
dec eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 0xfffffff1
jle 0x464002
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0x52c], 0xfffffff8
mov dword [ebp - 0x464], 0xfffffffb
mov dword [ebp - 0x18c8], 0xfffffff6
mov dword [ebp - 0x21bc], 0xffffffff
mov dword [ebp - 0x5d4], 0
jmp 0x4632f4
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 4
jge 0x463310
mov eax, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x2030], 0xfffffffa
jmp 0x4632e7
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x3b4], eax
jle 0x46332a
mov dword [ebp - 0x1888], 1
jmp 0x463331
and dword [ebp - 0x1888], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x2d68], eax
cmp dword [ebp - 0x3b4], 0
je 0x463356
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2030], 0
jne 0x46336f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2030], 0
jne 0x46336f
and dword [ebp - 0x1860], 0
jmp 0x463379
mov dword [ebp - 0x1860], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2030]
cmp dword [ebp - 0x1860], eax
jne 0x46339a
mov dword [ebp - 0x1868], 1
jmp 0x4633a1
and dword [ebp - 0x1868], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2030]
cmp dword [ebp - 0x1868], eax
jge 0x4633c2
mov dword [ebp - 0x1870], 1
jmp 0x4633c9
and dword [ebp - 0x1870], 0
mov eax, dword [ebp - 0x1870]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
jne 0x4633eb
xor eax, eax
jne 0x4633eb
and dword [ebp - 0x1878], 0
jmp 0x4633f5
mov dword [ebp - 0x1878], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2030]
cmp dword [ebp - 0x1878], eax
je 0x463416
mov dword [ebp - 0x1880], 1
jmp 0x46341d
and dword [ebp - 0x1880], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
imul eax, dword [ebp - 0x1880]
test eax, eax
je 0x46344f
cmp dword [ebp - 0x3b4], 0
je 0x46344f
mov dword [ebp - 0x1890], 1
jmp 0x463456
and dword [ebp - 0x1890], 0
mov eax, dword [ebp - 0x1888]
cmp eax, dword [ebp - 0x1890]
jl 0x463470
mov dword [ebp - 0x21ac], 1
jmp 0x463477
and dword [ebp - 0x21ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2030]
inc eax
jne 0x463495
or eax, 0xffffffff
jne 0x463495
and dword [ebp - 0x1898], 0
jmp 0x46349f
mov dword [ebp - 0x1898], 1
mov eax, dword [ebp - 0x1898]
mov dword [ebp - 0x18c8], eax
cmp dword [ebp - 0x464], 0
je 0x4635c2
cmp dword [ebp - 0x464], 0
je 0x4634d6
mov eax, 0x7230
test eax, eax
je 0x4634d6
mov dword [ebp - 0x18a8], 1
jmp 0x4634dd
and dword [ebp - 0x18a8], 0
mov eax, 0x89be67e7
test eax, eax
je 0x4634fb
cmp dword [ebp - 0x464], 0
je 0x4634fb
mov dword [ebp - 0x18a0], 1
jmp 0x463502
and dword [ebp - 0x18a0], 0
mov eax, dword [ebp - 0x18a0]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2030]
cmp dword [ebp - 0x18a8], eax
jne 0x463536
mov dword [ebp - 0x18b0], 1
jmp 0x46353d
and dword [ebp - 0x18b0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2030]
cmp dword [ebp - 0x18b0], eax
jne 0x46355e
mov dword [ebp - 0x18b8], 1
jmp 0x463565
and dword [ebp - 0x18b8], 0
mov eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0x18b8]
jl 0x46357f
mov dword [ebp - 0x21b4], 1
jmp 0x463586
and dword [ebp - 0x21b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2030]
mov dword [ebp - 0x2cb0], eax
mov eax, dword [ebp - 0x21bc]
mov dword [ebp - 0x2d70], eax
mov eax, dword [ebp - 0x52c]
imul eax, dword [ebp - 0x3b4]
test eax, eax
je 0x4635c2
mov dword [ebp - 0x18c0], 1
jmp 0x4635c9
and dword [ebp - 0x18c0], 0
mov eax, dword [ebp - 0x18c0]
mov dword [ebp - 0x18c8], eax
mov byte [ebp - 0x284], 0
mov dword [ebp - 0x21cc], 1
mov dword [ebp - 0x1940], 0xffffffff
mov dword [ebp - 0x2cbc], 0x218e9934
mov dword [ebp - 0x5e4], 1
mov dword [ebp - 0x26d8], 1
mov dword [ebp - 0x26d4], 1
mov dword [ebp - 0x26d0], 1
mov dword [ebp - 0x26cc], 1
mov dword [ebp - 0xa60], 0x68f928d9
mov dword [ebp - 0x21d4], 0xfffffffb
mov dword [ebp - 0xa70], 0x5a7ab5bf
mov dword [ebp - 0xa58], 0xfffffffa
mov dword [ebp - 0x1958], 8
mov dword [ebp - 0x19c], 0
jmp 0x463677
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x463693
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x21dc], 0xffffffff
jmp 0x46366a
mov dword [ebp - 0x19c], 0
jmp 0x4636ac
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x4636c8
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xb84], 0
jmp 0x46369f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb84], 0
jmp 0x4636f6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb84], 0
jg 0x463bda
mov dword [ebp - 0x1ff8], 0xfffffff6
mov dword [ebp - 0x1ff4], 0xfffffff6
mov dword [ebp - 0x1ff0], 0xfffffff6
mov dword [ebp - 0x1fec], 0xfffffff6
mov dword [ebp - 0x21c4], 0x6ec7516a
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0x2d78], 6
mov dword [ebp - 0xa80], 0x477
mov dword [ebp - 0x21e4], 0xccc76bf0
mov dword [ebp - 0x5dc], 0
jmp 0x46377d
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 2
jge 0x463799
mov eax, dword [ebp - 0x5dc]
mov dword [ebp + eax*4 - 0x2718], 0x28784865
jmp 0x463770
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1ff8], 0
jmp 0x4637c7
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1ff8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1ff8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1ff8], 0
jg 0x46380e
mov dword [ebp - 0x2cc8], 0xc516
mov dword [ebp - 0x2d80], 0x69f4981f
mov dword [ebp - 0x2cd4], 1
mov dword [ebp - 0x2d88], 0x331c587c
mov eax, dword [ebp - 0xa60]
inc eax
mov dword [ebp - 0xa60], eax
jmp 0x4637ac
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa78]
cmp dword [ebp + eax - 0x26d8], ecx
jne 0x46382f
mov dword [ebp - 0x18d0], 1
jmp 0x463836
and dword [ebp - 0x18d0], 0
cmp dword [ebp - 0x18d0], 1
jne 0x46384b
mov dword [ebp - 0x18d8], 1
jmp 0x463852
and dword [ebp - 0x18d8], 0
mov eax, dword [ebp - 0xa58]
inc eax
mov dword [ebp - 0xa58], eax
mov eax, dword [ebp - 0xa58]
cmp eax, dword [ebp - 0x18d8]
jge 0x463879
mov dword [ebp - 0x18e0], 1
jmp 0x463880
and dword [ebp - 0x18e0], 0
mov eax, dword [ebp - 0x18e0]
sub eax, 0x5a9d
cmp eax, dword [ebp - 0x5e4]
jge 0x46389f
mov dword [ebp - 0x18e8], 1
jmp 0x4638a6
and dword [ebp - 0x18e8], 0
cmp dword [ebp - 0x18e8], 0x104e0bbe
je 0x4638be
mov dword [ebp - 0x18f0], 1
jmp 0x4638c5
and dword [ebp - 0x18f0], 0
mov eax, dword [ebp - 0xa60]
imul eax, dword [ebp - 0x18f0]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2718]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb84]
je 0x4638fa
mov dword [ebp - 0x18f8], 1
jmp 0x463901
and dword [ebp - 0x18f8], 0
mov eax, dword [ebp - 0x18f8]
sub eax, dword [ebp - 0x21c4]
inc eax
cmp eax, 0x6dae
jne 0x46392e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb84], 0
jne 0x46392e
and dword [ebp - 0x1900], 0
jmp 0x463938
mov dword [ebp - 0x1900], 1
mov eax, dword [ebp - 0x21cc]
cmp dword [ebp - 0x1900], eax
jle 0x463952
mov dword [ebp - 0xa68], 1
jmp 0x463959
and dword [ebp - 0xa68], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa68]
mov dword [ebp + eax - 0x26d8], ecx
cmp dword [ebp - 0xa68], 1
jg 0x463981
mov dword [ebp - 0x1908], 1
jmp 0x463988
and dword [ebp - 0x1908], 0
mov eax, dword [ebp - 0x21d4]
imul eax, dword [ebp - 0x1908]
test eax, eax
jle 0x4639a5
movzx eax, byte [ebp - 0x284]
test eax, eax
je 0x463ffd
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0xa88], 0x9d01078
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x5ec], 0
jmp 0x463c1d
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 2
jge 0x463c39
mov eax, dword [ebp - 0x5ec]
mov dword [ebp + eax*4 - 0xb90], 0xffffffff
jmp 0x463c10
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2840], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x463c56
mov dword [ebp - 0x1980], 1
jmp 0x463c5d
and dword [ebp - 0x1980], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa88], eax
jl 0x463c7d
mov dword [ebp - 0x1970], 1
jmp 0x463c84
and dword [ebp - 0x1970], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1970], eax
jl 0x463c9b
mov dword [ebp - 0x1978], 1
jmp 0x463ca2
and dword [ebp - 0x1978], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1978], eax
jl 0x463cb9
mov dword [ebp - 0x1988], 1
jmp 0x463cc0
and dword [ebp - 0x1988], 0
mov eax, dword [ebp - 0x1980]
add eax, dword [ebp - 0x1988]
cmp eax, dword [ebp - 0x28]
jle 0x463cdd
mov dword [ebp - 0x1990], 1
jmp 0x463ce4
and dword [ebp - 0x1990], 0
cmp dword [ebp - 0x1990], 1
jge 0x463cff
cmp dword [ebp - 0x28], 0
je 0x463cff
mov dword [ebp - 0x1998], 1
jmp 0x463d06
and dword [ebp - 0x1998], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1998], eax
jge 0x463d1d
mov dword [ebp - 0x19a0], 1
jmp 0x463d24
and dword [ebp - 0x19a0], 0
mov eax, dword [ebp - 0x19a0]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2848], eax
mov eax, dword [ebp - 0xa88]
sub eax, dword [ebp - 0x28]
je 0x463d55
mov eax, dword [ebp - 0x28]
neg eax
inc eax
mov dword [ebp - 0xf4], eax
jmp 0x463fe7
mov dword [ebp - 0x19c0], 0xffffffff
mov dword [ebp - 0xf4], 0
jmp 0x463d78
cmp dword [ebp - 0xf4], 1
jg 0x463fe7
mov dword [ebp - 0x21ec], 3
mov dword [ebp - 0x21fc], 8
mov dword [ebp - 0x28], 0
jmp 0x463da9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
jmp 0x46328f
mov dword [ebp - 0x19f8], 0x5ae649f6
mov dword [ebp - 0x1a10], 0xd0714ad
mov dword [ebp - 0x2204], 6
mov dword [ebp - 0x2870], 0xf9c77509
mov dword [ebp - 0x1a4], 0
jmp 0x464043
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x46405f
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x1f70], 0
jmp 0x464036
mov dword [ebp - 0x1a4], 0
jmp 0x464078
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jge 0x464094
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x3358], 0xfffffffd
jmp 0x46406b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f70]
mov dword [ebp - 0x2878], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1f70]
cmp dword [ebp + eax - 0x1f70], ecx
jl 0x464113
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1f70]
cmp dword [ebp + eax - 0x1f70], ecx
jne 0x4640e6
mov dword [ebp - 0x19f0], 1
jmp 0x4640ed
and dword [ebp - 0x19f0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f70]
add eax, dword [ebp - 0x19f0]
mov dword [ebp - 0x19f8], eax
je 0x464113
mov dword [ebp - 0x1a00], 1
jmp 0x46411a
and dword [ebp - 0x1a00], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f70]
cmp dword [ebp - 0x1a00], eax
jle 0x46413a
mov dword [ebp - 0x1a08], 1
jmp 0x464141
and dword [ebp - 0x1a08], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1a08]
sub ecx, dword [ebp + eax - 0x1f70]
mov dword [ebp - 0x1a10], ecx
mov eax, dword [ebp - 0x2204]
cmp dword [ebp - 0x1a10], eax
jg 0x46418d
mov byte [ebp - 0x28a], 0
movzx eax, byte [ebp - 0x28a]
test eax, eax
je 0x46418b
push 0x25f1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
jmp 0x4641a4
mov dword [ebp - 0x1a18], 0x6febfb2c
mov eax, dword [ebp - 0x1a18]
inc eax
mov dword [ebp - 0x1a18], eax
mov byte [ebp - 0x28c], 0
movzx eax, byte [ebp - 0x28c]
test eax, eax
je 0x4644c7
mov dword [ebp - 0xac], 0x351a
mov dword [ebp - 0x27c], 0xd04cd021
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0x1a48], 4
mov dword [ebp - 0x1a70], 0xfffffff6
mov dword [ebp - 0x1a80], 0x27682c5a
mov dword [ebp - 0x221c], 2
mov dword [ebp - 0x2880], 0x52196db3
mov dword [ebp - 0x5fc], 0
jmp 0x46422d
mov eax, dword [ebp - 0x5fc]
inc eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 1
jge 0x464249
mov eax, dword [ebp - 0x5fc]
mov dword [ebp + eax*4 - 0x1a38], 8
jmp 0x464220
mov eax, dword [ebp - 0xac]
neg eax
cmp dword [ebp - 0xac], eax
jle 0x464265
mov dword [ebp - 0x1a20], 1
jmp 0x46426c
and dword [ebp - 0x1a20], 0
cmp dword [ebp - 0x1a20], 1
jge 0x464281
mov dword [ebp - 0x1a28], 1
jmp 0x464288
and dword [ebp - 0x1a28], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1a28], eax
jle 0x4642a2
mov dword [ebp - 0x1a30], 1
jmp 0x4642a9
and dword [ebp - 0x1a30], 0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x1a30], eax
jl 0x4642c3
mov dword [ebp - 0x220c], 1
jmp 0x4642ca
and dword [ebp - 0x220c], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x2888], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x2890], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2898], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x28a0], eax
cmp dword [ebp - 0x27c], 7
jne 0x46430f
mov dword [ebp - 0x2214], 1
jmp 0x464316
and dword [ebp - 0x2214], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x28a8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1a38], 6
mov dword [ebp - 0xa98], 3
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0x28b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a38]
imul eax, dword [ebp - 0x27c]
test eax, eax
je 0x464376
mov eax, 0x69eed08e
test eax, eax
je 0x464376
mov dword [ebp - 0x1a40], 1
jmp 0x46437d
and dword [ebp - 0x1a40], 0
mov eax, dword [ebp - 0x1a40]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0xa90]
sub eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1a48], eax
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x1a48], eax
je 0x4643bb
mov dword [ebp - 0x1a50], 1
jmp 0x4643c2
and dword [ebp - 0x1a50], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1a50], eax
jne 0x4643dc
mov dword [ebp - 0x1a58], 1
jmp 0x4643e3
and dword [ebp - 0x1a58], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1a58], eax
jne 0x4643fd
mov dword [ebp - 0x1a60], 1
jmp 0x464404
and dword [ebp - 0x1a60], 0
cmp dword [ebp - 0x1a60], 1
jb 0x464419
mov dword [ebp - 0x1a68], 1
jmp 0x464420
and dword [ebp - 0x1a68], 0
mov eax, dword [ebp - 0x1a68]
mov dword [ebp - 0x1a70], eax
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1a70], eax
jle 0x464446
mov dword [ebp - 0x1a78], 1
jmp 0x46444d
and dword [ebp - 0x1a78], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1a78], eax
jg 0x464464
cmp dword [ebp - 0xa90], 0
je 0x46446b
cmp dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1a80], eax
cmp dword [ebp - 0x1a80], 0
je 0x464495
cmp dword [ebp - 0x27c], 0
je 0x464495
mov dword [ebp - 0x1a88], 1
jmp 0x46449c
and dword [ebp - 0x1a88], 0
mov eax, dword [ebp - 0x1a88]
mov dword [ebp - 0x221c], eax
push 0
push 0
push 0x261c
push 0
push 0x1b
push 0
push 0x3bd
push 0x1737
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x463127
mov dword [ebp - 0xd0], 0x9e57ad95
mov dword [ebp - 0x28b8], 0xfffffff7
mov dword [ebp - 0x604], 0
jmp 0x4644f9
mov eax, dword [ebp - 0x604]
inc eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 3
jge 0x464515
mov eax, dword [ebp - 0x604]
mov dword [ebp + eax*4 - 0x1f80], 0x204e2db5
jmp 0x4644ec
mov byte [ebp - 0x28e], 0
movzx eax, byte [ebp - 0x28e]
test eax, eax
je 0x464540
push 0x14b7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
mov dword [ebp - 0xd0], 0
jmp 0x464559
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jg 0x464734
mov dword [ebp - 0x1ab8], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f80], 0
jg 0x46458c
mov dword [ebp - 0x1a90], 1
jmp 0x464593
and dword [ebp - 0x1a90], 0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp + eax*4 - 0x1f80]
cmp dword [ebp - 0x1a90], eax
je 0x4645b4
mov dword [ebp - 0x1a98], 1
jmp 0x4645bb
and dword [ebp - 0x1a98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f80]
cmp dword [ebp - 0x1a98], eax
jl 0x4645dc
mov dword [ebp - 0x1aa0], 1
jmp 0x4645e3
and dword [ebp - 0x1aa0], 0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp + eax*4 - 0x1f80]
cmp dword [ebp - 0x1aa0], eax
jg 0x464604
mov dword [ebp - 0x1aa8], 1
jmp 0x46460b
and dword [ebp - 0x1aa8], 0
push 9
pop eax
sub eax, dword [ebp - 0x1aa8]
je 0x46462b
cmp dword [ebp - 0x1ab8], 0
je 0x46462b
mov dword [ebp - 0x1ab0], 1
jmp 0x464632
and dword [ebp - 0x1ab0], 0
cmp dword [ebp - 0x1ab0], 0xc80a
jle 0x46464a
mov dword [ebp - 0x2224], 1
jmp 0x464651
and dword [ebp - 0x2224], 0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp + eax*4 - 0x1f80]
mov dword [ebp - 0x28c0], eax
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0x1ab8]
cmp eax, 1
jl 0x464682
mov dword [ebp - 0x1ac0], 1
jmp 0x464689
and dword [ebp - 0x1ac0], 0
mov eax, dword [ebp - 0x1ac0]
neg eax
cmp eax, 0x9338
jle 0x4646a4
mov dword [ebp - 0x1ac8], 1
jmp 0x4646ab
and dword [ebp - 0x1ac8], 0
cmp dword [ebp - 0x1ac8], 0xa6c65b0b
jb 0x4646c3
mov dword [ebp - 0x222c], 1
jmp 0x4646ca
and dword [ebp - 0x222c], 0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp + eax*4 - 0x1f80]
mov dword [ebp - 0x28c8], eax
push 8
pop eax
test eax, eax
jne 0x4646f6
mov eax, 0x6559653e
test eax, eax
jne 0x4646f6
and dword [ebp - 0x1ad0], 0
jmp 0x464700
mov dword [ebp - 0x1ad0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f80]
add eax, dword [ebp - 0x1ad0]
imul eax, dword [ebp - 0xd0]
add eax, 7
sub eax, dword [ebp - 0xd0]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1f80], eax
jmp 0x46454c
call fcn.0044edc2
mov dword [ebp - 0x980], 7
mov dword [ebp - 0x97c], 7
mov dword [ebp - 0x978], 7
mov dword [ebp - 0x974], 7
mov dword [ebp - 0x2040], 5
mov dword [ebp - 0x203c], 5
mov dword [ebp - 0x2038], 5
mov dword [ebp - 0x2034], 5
mov dword [ebp - 0x614], 0x57a8360e
mov dword [ebp - 0xc9c], 0x438315ea
mov dword [ebp - 0x2264], 0x50170a2c
mov byte [ebp - 0x290], 0
movzx eax, byte [ebp - 0x290]
test eax, eax
je 0x4647c1
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x980], 0
jne 0x4647ea
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x980], 0
jne 0x4647ea
and dword [ebp - 0x2234], 0
jmp 0x4647f4
mov dword [ebp - 0x2234], 1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2040], 0x85a7
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x980], 0x85a7
jge 0x464824
mov dword [ebp - 0x1ad8], 1
jmp 0x46482b
and dword [ebp - 0x1ad8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
cmp dword [ebp - 0x1ad8], eax
jg 0x46484c
mov dword [ebp - 0x223c], 1
jmp 0x464853
and dword [ebp - 0x223c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
mov dword [ebp - 0x28d0], eax
mov eax, 0x956e
cmp eax, 0xe800
jge 0x46487e
mov dword [ebp - 0x2244], 1
jmp 0x464885
and dword [ebp - 0x2244], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x980]
mov dword [ebp - 0x28d8], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x980]
cmp dword [ebp + eax - 0x2040], ecx
jne 0x4648c0
mov dword [ebp - 0x1ae0], 1
jmp 0x4648c7
and dword [ebp - 0x1ae0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x980]
cmp dword [ebp - 0x1ae0], eax
je 0x4648e8
mov dword [ebp - 0x1ae8], 1
jmp 0x4648ef
and dword [ebp - 0x1ae8], 0
cmp dword [ebp - 0x1ae8], 0
jne 0x46490c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x980], 0
je 0x464aec
mov dword [ebp - 0x53c], 0xd0c11e04
mov dword [ebp - 0xc84], 0xa1ef
mov dword [ebp - 0x224c], 2
mov dword [ebp - 0x53c], 4
jmp 0x464943
mov eax, dword [ebp - 0x53c]
inc eax
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x53c], 4
jg 0x464ac3
mov dword [ebp - 0x60c], 0x72f2
mov dword [ebp - 0x1b08], 1
cmp dword [ebp - 0xc84], 0xfffffffd
jge 0x464979
mov dword [ebp - 0x1b00], 1
jmp 0x464980
and dword [ebp - 0x1b00], 0
mov eax, dword [ebp - 0x224c]
imul eax, dword [ebp - 0x53c]
test eax, eax
je 0x4649ac
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x980], 0
je 0x4649ac
mov dword [ebp - 0x1af0], 1
jmp 0x4649b3
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x1af0], eax
jge 0x4649cd
mov dword [ebp - 0x1af8], 1
jmp 0x4649d4
and dword [ebp - 0x1af8], 0
mov eax, dword [ebp - 0x1af8]
mov dword [ebp - 0x1b08], eax
mov eax, dword [ebp - 0x1b00]
add eax, dword [ebp - 0x1b08]
mov dword [ebp - 0x2254], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2254]
mov dword [ebp + eax - 0x2040], ecx
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x28e0], eax
cmp dword [ebp - 0x60c], 0
jne 0x464a2c
mov eax, 0xe6b7
test eax, eax
jne 0x464a2c
and dword [ebp - 0x1b10], 0
jmp 0x464a36
mov dword [ebp - 0x1b10], 1
mov eax, dword [ebp - 0x60c]
imul eax, dword [ebp - 0x1b10]
cmp eax, 7
jae 0x464a54
mov dword [ebp - 0x225c], 1
jmp 0x464a5b
and dword [ebp - 0x225c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x980]
mov dword [ebp - 0x28e8], eax
xor eax, eax
cmp eax, 0xfffa
jb 0x464a89
cmp dword [ebp - 0xc84], 0
jne 0x464a89
and dword [ebp - 0xc8c], 0
jmp 0x464a93
mov dword [ebp - 0xc8c], 1
cmp dword [ebp - 0xc8c], 0x96e6
je 0x464aab
mov dword [ebp - 0xc94], 1
jmp 0x464ab2
and dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0xc94]
mov dword [ebp - 0x614], eax
jmp 0x464936
mov byte [ebp - 0x292], 0
movzx eax, byte [ebp - 0x292]
test eax, eax
je 0x464ae7
push 0x381
push 0x9a1
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x464cff
mov dword [ebp - 0x1ac], 0
jmp 0x464b05
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x464b21
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x544], 7
jmp 0x464af8
mov dword [ebp - 0x1ac], 0
jmp 0x464b3a
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x464b56
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x2cb8], 0xcdb7a897
jmp 0x464b2d
mov eax, dword [ebp - 0xc9c]
push 4
pop ecx
imul ecx, ecx, 3
add eax, dword [ebp + ecx - 0x980]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2040], eax
mov eax, dword [ebp - 0xc9c]
inc eax
jne 0x464b97
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x544], 0
jne 0x464b97
and dword [ebp - 0xca4], 0
jmp 0x464ba1
mov dword [ebp - 0xca4], 1
imul eax, dword [ebp - 0xca4], 0xffff
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x2040]
je 0x464bc6
mov dword [ebp - 0xcac], 1
jmp 0x464bcd
and dword [ebp - 0xcac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
imul eax, dword [ebp - 0xcac]
cmp eax, 0x35eb
jg 0x464bf4
mov dword [ebp - 0xcb4], 1
jmp 0x464bfb
and dword [ebp - 0xcb4], 0
mov eax, dword [ebp - 0x614]
cmp dword [ebp - 0xcb4], eax
jl 0x464c15
mov dword [ebp - 0xcbc], 1
jmp 0x464c1c
and dword [ebp - 0xcbc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x980]
cmp dword [ebp - 0xcbc], eax
jge 0x464c3d
mov dword [ebp - 0xcc4], 1
jmp 0x464c44
and dword [ebp - 0xcc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x544]
cmp dword [ebp - 0xcc4], eax
jge 0x464c65
mov dword [ebp - 0xccc], 1
jmp 0x464c6c
and dword [ebp - 0xccc], 0
cmp dword [ebp - 0xccc], 0
jae 0x464c8e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x544], 0
jne 0x464c8e
and dword [ebp - 0xcd4], 0
jmp 0x464c98
mov dword [ebp - 0xcd4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x980]
sub eax, dword [ebp - 0xcd4]
mov dword [ebp - 0x614], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x544]
cmp dword [ebp - 0x614], eax
jge 0x464cd2
mov dword [ebp - 0xcdc], 1
jmp 0x464cd9
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0x2264], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x544]
mov dword [ebp + ecx - 0x2cb8], eax
mov dword [ebp - 0x46c], 0xf57a7c20
mov dword [ebp - 0x2284], 0xffffffff
mov dword [ebp - 0x28f0], 0xfffffffa
mov dword [ebp - 0x28f8], 0x99fa9ef8
mov dword [ebp - 0x61c], 0
jmp 0x464d40
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 2
jge 0x464d5c
mov eax, dword [ebp - 0x61c]
mov dword [ebp + eax*4 - 0x2000], 0xffffffff
jmp 0x464d33
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2000]
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x46c], 0xe
jmp 0x464d88
mov eax, dword [ebp - 0x46c]
dec eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0xfffffffa
je 0x464f1c
mov dword [ebp - 0xaa0], 7
mov dword [ebp - 0xcf4], 0x336de018
mov dword [ebp - 0xd04], 0
mov dword [ebp - 0xce4], 0xffffffff
mov dword [ebp - 0x2274], 0xffffffff
mov dword [ebp - 0x2900], 0xa9c79ebe
mov dword [ebp - 0xd1c], 0x9e96bb64
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2000], 0x95a
jg 0x464dfa
mov dword [ebp - 0xcfc], 1
jmp 0x464e01
and dword [ebp - 0xcfc], 0
cmp dword [ebp - 0xd04], 0xb4f5
jne 0x464e19
mov dword [ebp - 0x226c], 1
jmp 0x464e20
and dword [ebp - 0x226c], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x2908], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x2910], eax
mov dword [ebp - 0xce4], 2
mov eax, dword [ebp - 0xce4]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x2000]
jne 0x464e69
cmp dword [ebp - 0x2274], 0
jne 0x464e69
and dword [ebp - 0xcec], 0
jmp 0x464e73
mov dword [ebp - 0xcec], 1
cmp dword [ebp - 0xcec], 0xac3a6081
je 0x464e8b
mov dword [ebp - 0x227c], 1
jmp 0x464e92
and dword [ebp - 0x227c], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x2918], eax
mov eax, dword [ebp - 0xaa0]
cmp dword [ebp - 0xcfc], eax
jg 0x464ec4
mov dword [ebp - 0xd0c], 1
jmp 0x464ecb
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0xd04]
add eax, dword [ebp - 0xd0c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2000]
je 0x464ef2
mov dword [ebp - 0xd14], 1
jmp 0x464ef9
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0xd14]
sub eax, 0x5300ce3d
mov dword [ebp - 0x2284], eax
mov eax, dword [ebp - 0xd1c]
inc eax
mov dword [ebp - 0xd1c], eax
jmp 0x464d7b
mov dword [ebp - 0x54c], 7
mov dword [ebp - 0x554], 7
mov dword [ebp - 0x624], 0
jmp 0x464f49
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 4
jge 0x464f65
mov eax, dword [ebp - 0x624]
mov dword [ebp + eax*4 - 0x3298], 1
jmp 0x464f3c
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x54c], 0
jmp 0x464f8a
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 3
jg 0x46501b
mov byte [ebp - 0x294], 0
movzx eax, byte [ebp - 0x294]
test eax, eax
je 0x464fb3
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [ebp - 0x554], 3
jmp 0x464fcc
mov eax, dword [ebp - 0x554]
dec eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
jl 0x465016
mov dword [ebp - 0x55c], 0x51328f6c
mov dword [ebp - 0x55c], 0
jmp 0x464ff8
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 4
jge 0x465014
mov eax, dword [ebp - 0x55c]
mov dword [ebp + eax*4 - 0x3298], 0xaa0d
jmp 0x464feb
jmp 0x464fbf
jmp 0x464f7d
mov dword [ebp - 0x120], 0xffffffff
mov dword [ebp - 0xd34], 0x256a9ef7
mov dword [ebp - 0x2294], 1
mov dword [ebp - 0x62c], 0
jmp 0x465052
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 2
jge 0x46506e
mov eax, dword [ebp - 0x62c]
mov dword [ebp + eax*4 - 0x2cc4], 0x43836745
jmp 0x465045
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x2920], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x120], eax
je 0x465094
mov dword [ebp - 0x228c], 1
jmp 0x46509b
and dword [ebp - 0x228c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x2928], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x2930], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x2938], eax
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x120]
add eax, 0xffff
cmp eax, 0xfffa
jb 0x4650e4
mov dword [ebp - 0xd24], 1
jmp 0x4650eb
and dword [ebp - 0xd24], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0xd24], eax
jne 0x465105
mov dword [ebp - 0xd2c], 1
jmp 0x46510c
and dword [ebp - 0xd2c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd2c]
mov dword [ebp + eax - 0x2cc4], ecx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xd34], eax
mov eax, 0xde57
add eax, 0x1be3
cmp dword [ebp - 0xd34], eax
jne 0x465149
mov dword [ebp - 0xd3c], 1
jmp 0x465150
and dword [ebp - 0xd3c], 0
cmp dword [ebp - 0xd3c], 0xfffffffb
je 0x465165
mov dword [ebp - 0xd44], 1
jmp 0x46516c
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0x2294], eax
mov byte [ebp - 0x296], 0
movzx eax, byte [ebp - 0x296]
test eax, eax
je 0x46519f
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov dword [ebp - 0x47c], 0x7cb3f4f4
mov dword [ebp - 0x22c], 0xa971
mov dword [ebp - 0x564], 0xf3d47941
mov dword [ebp - 0xab0], 0x6e2c9bf5
mov dword [ebp - 0x63c], 0xba5b0420
mov dword [ebp - 0x474], 0x9687fd07
mov dword [ebp - 0x634], 0
jmp 0x4651f4
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 2
jge 0x465210
mov eax, dword [ebp - 0x634]
mov dword [ebp + eax*4 - 0xb9c], 0x8213af72
jmp 0x4651e7
cmp dword [ebp - 0x22c], 0
jne 0x465225
mov dword [ebp - 0x229c], 1
jmp 0x46522c
and dword [ebp - 0x229c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x2940], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0xd4c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd4c]
mov dword [ebp + eax - 0xb9c], ecx
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0xd4c], eax
je 0x465281
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb9c], 0
je 0x465281
mov dword [ebp - 0xd54], 1
jmp 0x465288
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xd54]
sub eax, 0x86e6525
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0xb5af9f7c
jne 0x4652b1
mov dword [ebp - 0xd5c], 1
jmp 0x4652b8
and dword [ebp - 0xd5c], 0
cmp dword [ebp - 0xd5c], 0x66c1932e
jl 0x4652d0
mov dword [ebp - 0x22a4], 1
jmp 0x4652d7
and dword [ebp - 0x22a4], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x2948], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb9c], 0xfffb
jbe 0x4652fd
cmp dword [ebp - 0x564], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb9c]
mov dword [ebp - 0x2950], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x2958], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb9c]
mov dword [ebp - 0x2960], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb9c]
sub eax, dword [ebp - 0xab0]
sub eax, 0x726aa59f
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0xab0], 0
je 0x465377
cmp dword [ebp - 0x474], 0
je 0x465377
and dword [ebp - 0xaa8], 0
cmp dword [ebp - 0x474], 0xfffffff8
jb 0x465393
mov dword [ebp - 0xdc4], 0xe60
mov dword [ebp - 0xdbc], 0x6942
mov dword [ebp - 0x654], 0
jmp 0x46576d
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 3
jge 0x465789
mov eax, dword [ebp - 0x654]
mov dword [ebp + eax*4 - 0x3138], 0xef6b8f3d
jmp 0x465760
mov byte [ebp - 0x29c], 0
movzx eax, byte [ebp - 0x29c]
test eax, eax
je 0x4657b4
push 0x183d
push 0x8d5
push 0
push 0
push 0x3b2
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0xdbc]
cmp dword [ebp - 0xdc4], eax
jg 0x4657da
mov dword [ebp - 0xdcc], 1
jmp 0x4657e1
and dword [ebp - 0xdcc], 0
cmp dword [ebp - 0xdcc], 1
je 0x4657f6
mov dword [ebp - 0xdd4], 1
jmp 0x4657fd
and dword [ebp - 0xdd4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdd4]
mov dword [ebp + eax - 0x3138], ecx
xor ecx, ecx
call fcn.004275b6
push eax
call fcn.00468bd3
pop ecx
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x65c], 2
jmp 0x465841
mov eax, dword [ebp - 0x65c]
dec eax
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 0xfffffff0
jge 0x465927
mov dword [ebp - 0x1b4], 0
jmp 0x465867
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x465883
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x31a0], 0x638e
jmp 0x46585a
mov dword [ebp - 0x1b4], 0
jmp 0x46589c
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x4658b8
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xc44], 0x69aed23b
jmp 0x46588f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc44], 0
jmp 0x4658e6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc44]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc44], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc44], 4
jge 0x465910
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc44]
mov dword [ebp + eax*4 - 0x31a0], 3
jmp 0x4658cb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc44], 0
je 0x465922
jmp 0x465927
jmp 0x465834
mov dword [ebp - 0x2978], 0x847dfa86
mov byte [ebp - 0x29e], 0
movzx eax, byte [ebp - 0x29e]
test eax, eax
je 0x46594e
push 0x26b8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x2a0], 0
movzx eax, byte [ebp - 0x2a0]
test eax, eax
je 0x465992
push 0x1988
push 0x1028
push 0x1f53
push 0x98
push 0x8a1
push 0x7c7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa7fa3c
push 0xa7fa3c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 0x574], 0x42a1e948
mov dword [ebp - 0xddc], 0xfffffffb
mov dword [ebp - 0xdf4], 0x43e
mov dword [ebp - 0x1bc], 0
jmp 0x4659fc
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x465a18
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xdec], 0xfb6f65e7
jmp 0x4659ef
mov dword [ebp - 0x1bc], 0
jmp 0x465a31
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x465a4d
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x2cd0], 0x63d18804
jmp 0x465a24
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x2980], eax
mov eax, dword [ebp - 0x574]
neg eax
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x574]
cmp dword [ebp - 0xddc], eax
jl 0x465a81
mov dword [ebp - 0xde4], 1
jmp 0x465a88
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0xde4]
jg 0x465aa2
mov dword [ebp - 0x22bc], 1
jmp 0x465aa9
and dword [ebp - 0x22bc], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xdec], 0x1dfd9475
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x2988], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xdec]
mov dword [ebp + ecx - 0x2cd0], eax
mov eax, dword [ebp - 0xdf4]
inc eax
mov dword [ebp - 0xdf4], eax
push 5
push dword [ebp - 0xad8]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0xad0], 0xfffffffc
mov dword [ebp - 0x2990], 0x5c62e089
mov dword [ebp - 0x22fc], 0
mov dword [ebp - 0x22d4], 0
mov dword [ebp - 0x22c4], 0x96bb6454
mov dword [ebp - 0xac8], 0x5f03
mov dword [ebp - 0x22ec], 0x4c2e3979
mov dword [ebp - 0x218], 0
jmp 0x465b5a
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x465b76
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xc54], 0x60477862
jmp 0x465b4d
mov dword [ebp - 0x218], 0
jmp 0x465b8f
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x465bab
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x2680], 0xfffffffd
jmp 0x465b82
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc54], 0
jmp 0x465bd9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc54], 7
jg 0x465e8e
mov dword [ebp - 0x2998], 3
mov dword [ebp - 0x29a0], 0
mov dword [ebp - 0x22dc], 0xfffffff6
mov dword [ebp - 0x29a8], 0
mov dword [ebp - 0xab8], 0xffffffff
mov dword [ebp - 0x29b0], 0
mov dword [ebp - 0x29b8], 1
mov dword [ebp - 0x29c0], 0
mov dword [ebp - 0x57c], 0x41ac3dc9
mov dword [ebp - 0x22cc], 0x77509cb0
mov dword [ebp - 0x29c8], 0xffffffff
mov dword [ebp - 0x29d0], 0xfffffffe
mov dword [ebp - 0xac0], 0xfeb1ec6c
mov dword [ebp - 0x220], 0
jmp 0x465c88
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x465ca4
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x29d8], 1
jmp 0x465c7b
mov dword [ebp - 0x220], 0
jmp 0x465cbd
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x465cd9
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x2790], 0xfffffff9
jmp 0x465cb0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2790]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2790], eax
mov dword [ebp - 0x57c], 0
jmp 0x465d0b
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 2
jg 0x465e89
mov dword [ebp - 0x664], 0
jmp 0x465d31
mov eax, dword [ebp - 0x664]
inc eax
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 2
jge 0x465d4d
mov eax, dword [ebp - 0x664]
mov dword [ebp + eax*4 - 0x2cdc], 0xb09c821f
jmp 0x465d24
mov dword [ebp - 0x22c4], 0x71081b2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2680]
cmp dword [ebp - 0x22cc], eax
jl 0x465d77
mov dword [ebp - 0xdfc], 1
jmp 0x465d7e
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0xab8]
cmp dword [ebp - 0xdfc], eax
je 0x465d98
mov dword [ebp - 0xe04], 1
jmp 0x465d9f
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0x57c]
push 4
pop ecx
shl ecx, 1
mov edx, dword [ebp - 0xe04]
sub edx, dword [ebp + ecx - 0x2790]
add edx, dword [ebp - 0x22d4]
cmp dword [ebp + eax*4 - 0x2680], edx
jl 0x465dd2
mov dword [ebp - 0xe0c], 1
jmp 0x465dd9
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0xac8]
cmp dword [ebp - 0xe0c], eax
jne 0x465df3
mov dword [ebp - 0xe14], 1
jmp 0x465dfa
and dword [ebp - 0xe14], 0
imul eax, dword [ebp - 0xe14], 0xcbc8
add eax, dword [ebp - 0x22dc]
cmp eax, 0xfffffffe
jle 0x465e21
mov eax, 0xcf39
test eax, eax
jne 0x465e21
and dword [ebp - 0xe1c], 0
jmp 0x465e2b
mov dword [ebp - 0xe1c], 1
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0xab8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2cdc]
cmp dword [ebp - 0xab8], eax
je 0x465e58
mov dword [ebp - 0xe24], 1
jmp 0x465e5f
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0xac0]
dec eax
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
sub eax, dword [ebp - 0xe24]
imul eax, eax, 0xc7e4
mov dword [ebp - 0xad0], eax
jmp 0x465cfe
jmp 0x465bbe
cmp dword [ebp - 0xac8], 0
jne 0x465ea9
mov eax, 0x47e08a84
test eax, eax
jne 0x465ea9
and dword [ebp - 0x22e4], 0
jmp 0x465eb3
mov dword [ebp - 0x22e4], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x2680], 0xfffb
cmp eax, dword [ebp - 0xac8]
jle 0x465ed8
mov dword [ebp - 0xe2c], 1
jmp 0x465edf
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 0x22ec]
cmp dword [ebp - 0xe2c], eax
jge 0x465ef9
mov dword [ebp - 0x22f4], 1
jmp 0x465f00
and dword [ebp - 0x22f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc54]
mov dword [ebp - 0x29e0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2680]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0x22fc]
sub eax, dword [ebp - 0xad0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc54], eax
push dword [ebp - 0xad8]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x66c], 0
jmp 0x465f6d
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 1
jge 0x465f89
mov eax, dword [ebp - 0x66c]
mov dword [ebp + eax*4 - 0x48c], 0x2799ac78
jmp 0x465f60
mov byte [ebp - 0x2a2], 0
movzx eax, byte [ebp - 0x2a2]
test eax, eax
je 0x465fac
push 0x22ed
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov dword [ebp - 0x130], 0
jmp 0x465fc5
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jg 0x466116
mov dword [ebp - 0x584], 0x4b64b5c6
mov dword [ebp - 0x29e8], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0x48c], 0
jne 0x46608e
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0x48c], 0
jne 0x46608e
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0x48c], 0
je 0x466062
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x130]
mov ecx, dword [ebp + ecx*4 - 0x48c]
cmp dword [ebp + eax*4 - 0x48c], ecx
jle 0x466046
mov dword [ebp - 0xe34], 1
jmp 0x46604d
and dword [ebp - 0xe34], 0
cmp dword [ebp - 0xe34], 0xffffffff
jne 0x466062
mov dword [ebp - 0xe3c], 1
jmp 0x466069
and dword [ebp - 0xe3c], 0
cmp dword [ebp - 0xe3c], 0xb101
jle 0x46608e
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0x48c], 0
jne 0x46608e
and dword [ebp - 0xe44], 0
jmp 0x466098
mov dword [ebp - 0xe44], 1
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x584], 0
jmp 0x4660bd
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0
jg 0x466111
mov dword [ebp - 0xe4c], 0xffffffff
mov eax, dword [ebp - 0xe4c]
dec eax
mov dword [ebp - 0xe4c], eax
mov byte [ebp - 0x2a4], 0
movzx eax, byte [ebp - 0x2a4]
test eax, eax
je 0x46610f
push 0
push 0x1fd1
push 0x26a5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x4660b0
jmp 0x465fb8
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp - 0x2304], eax
lea eax, [ebp - 0x2304]
push eax
push fcn.0044edc7
lea ecx, [ebp - 0x2700]
call fcn.00467008
push 0
push 0
push 0
lea eax, [ebp - 0x3384]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x4662a9
push 0
push 0
push 0x10
push dword [ebp - 0xad8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x29f0], 0x1124
mov dword [ebp - 0x29f8], 0x1f2c29a
mov dword [ebp - 0x2a00], 0
mov dword [ebp - 0x2a08], 0xa654fddd
mov dword [ebp - 0x2a10], 0xfffffffb
mov dword [ebp - 0xe54], 0x5fcc58a0
mov dword [ebp - 0x674], 0
jmp 0x4661b9
mov eax, dword [ebp - 0x674]
inc eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 1
jge 0x4661d5
mov eax, dword [ebp - 0x674]
mov dword [ebp + eax*4 - 0x2a18], 0x29ea4144
jmp 0x4661ac
mov eax, dword [ebp - 0xe54]
inc eax
mov dword [ebp - 0xe54], eax
lea ecx, [ebp - 0x2700]
call fcn.0044ed62
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x67c], 0
jmp 0x466210
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 2
jge 0x46622c
mov eax, dword [ebp - 0x67c]
mov dword [ebp + eax*4 - 0x26f8], 0x13b91020
jmp 0x466203
mov dword [ebp - 0x58c], 0
jmp 0x466245
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 1
jg 0x4662a2
mov dword [ebp - 0x594], 0x2751c76d
mov dword [ebp - 0x594], 0
jmp 0x466271
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 1
jg 0x4662a0
mov eax, dword [ebp - 0x58c]
cmp dword [ebp + eax*4 - 0x26f8], 0
je 0x46628c
jmp 0x4662a0
mov eax, dword [ebp - 0x594]
cmp dword [ebp + eax*4 - 0x26f8], 0
je 0x46629e
jmp 0x466264
jmp 0x466264
jmp 0x466238
jmp 0x4662a9
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x228], 0
jmp 0x4662cc
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x4662e8
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x31e0], 1
jmp 0x4662bf
mov dword [ebp - 0x228], 0
jmp 0x466301
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x46631d
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x2ce8], 0x59af2c67
jmp 0x4662f4
mov dword [ebp - 0x684], 0
jmp 0x466336
mov eax, dword [ebp - 0x684]
dec eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 0xfffffffa
jge 0x46663f
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x231c], 0
mov dword [ebp - 0xfc], 0
jmp 0x466370
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jg 0x4665f9
mov dword [ebp - 0x68c], 0xfffffffa
mov dword [ebp - 0x68c], 0
jmp 0x4663a0
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 1
jg 0x4665f4
mov dword [ebp - 0x494], 0x328f6c74
mov dword [ebp - 0x494], 1
jmp 0x4663d0
mov eax, dword [ebp - 0x494]
dec eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jl 0x4665ef
mov dword [ebp - 0x694], 0
jmp 0x4663f6
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 2
jge 0x466412
mov eax, dword [ebp - 0x694]
mov dword [ebp + eax*4 - 0x998], 0x41fc9a57
jmp 0x4663e9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x998], 1
jmp 0x466440
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x998]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x998], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x998], 0
jl 0x4665ea
mov dword [ebp - 0x3bc], 0x6ce4a6f4
mov dword [ebp - 0x3bc], 0
jmp 0x466477
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 1
jg 0x4665e5
mov byte [ebp - 0x2a6], 0
movzx eax, byte [ebp - 0x2a6]
test eax, eax
je 0x4664a3
push 0x11f2
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x998]
mov ecx, dword [ebp - 0xfc]
add ecx, 0x35b0f990
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x998]
jge 0x4664d9
mov dword [ebp - 0x230c], 1
jmp 0x4664e0
and dword [ebp - 0x230c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x998], 0xfffffffb
jae 0x4664f9
cmp dword [ebp - 0x494], 0
jne 0x46650b
cmp dword [ebp - 0x3bc], 0
jne 0x46650b
and dword [ebp - 0xe5c], 0
jmp 0x466515
mov dword [ebp - 0xe5c], 1
cmp dword [ebp - 0xe5c], 0xc6a81d68
jb 0x46652d
mov dword [ebp - 0xe64], 1
jmp 0x466534
and dword [ebp - 0xe64], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xe64], eax
je 0x46654e
mov dword [ebp - 0x2314], 1
jmp 0x466555
and dword [ebp - 0x2314], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x494]
cmp dword [ebp + eax - 0x998], ecx
jg 0x466576
mov dword [ebp - 0xe6c], 1
jmp 0x46657d
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0xe6c]
sub eax, dword [ebp - 0x3bc]
add eax, 0xffff
cmp eax, 0x50b7
jne 0x4665a1
mov dword [ebp - 0xe74], 1
jmp 0x4665a8
and dword [ebp - 0xe74], 0
mov eax, 0xd7d3
sub eax, dword [ebp - 0xe74]
cmp eax, 0x6d4f
jne 0x4665c6
mov dword [ebp - 0xe7c], 1
jmp 0x4665cd
and dword [ebp - 0xe7c], 0
mov eax, dword [ebp - 0x3bc]
imul eax, dword [ebp - 0xe7c]
mov dword [ebp - 0x231c], eax
jmp 0x46646a
jmp 0x466425
jmp 0x4663c3
jmp 0x466393
jmp 0x466363
mov dword [ebp - 0xfc], 0
jmp 0x466612
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1b
je 0x46663a
mov dword [ebp - 0x2324], 3
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2324]
mov dword [ebp + eax - 0x2ce8], ecx
jmp 0x466605
jmp 0x466329
mov byte [ebp - 0x2a8], 0
movzx eax, byte [ebp - 0x2a8]
test eax, eax
je 0x46666e
push 0x16
push 0x1501
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
lea ecx, [ebp - 0x2700]
call fcn.0044ed57
jmp 0x466f0a
pop edi
pop esi
mov esp, ebp
pop ebp
ret