Function at 0x44f99a
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf2a9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x320
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x450e98
lea eax, [ebp + 0x18]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x24], 0x2e91a04
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x24], 0x19
jmp 0x44f9f2
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x14
jl 0x44fb2c
push 2
lea ecx, [ebp - 0x268]
call fcn.0043557d
mov dword [ebp - 0x34], 0
jmp 0x44fa19
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x44fa35
push dword [ebp - 0x34]
lea ecx, [ebp - 0x268]
call fcn.0043566b
mov dword [eax], 2
jmp 0x44fa12
mov dword [ebp - 0x34], 0
jmp 0x44fa45
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x44fa58
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x7c], 0x5cc25bfc
jmp 0x44fa3e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x44fa7e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0xef5d
jg 0x44fa7e
and dword [ebp - 0xd8], 0
jmp 0x44fa88
mov dword [ebp - 0xd8], 1
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0xd8], 0xffffffff
cmp dword [ebp + eax - 0x7c], ecx
jne 0x44faa7
mov dword [ebp - 0x130], 1
jmp 0x44faae
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0xfffffff6
je 0x44fac3
mov dword [ebp - 0x194], 1
jmp 0x44faca
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x194], eax
jle 0x44fae8
mov dword [ebp - 0x134], 1
jmp 0x44faef
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xbc], eax
push 0
lea ecx, [ebp - 0x268]
call fcn.0043566b
mov ecx, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x134]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x268]
call fcn.0043564f
jmp 0x44f9eb
mov dword [ebp - 0x2c], 0xfffffff3
jmp 0x44fb3c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 7
jne 0x44fcd2
mov dword [ebp - 0x44], 0x23e5
mov dword [ebp - 0x1c0], 0x8f5063f3
mov dword [ebp - 0x68], 0
jmp 0x44fb67
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x44fb7d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x2a8], 0xe80c
jmp 0x44fb60
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
xor eax, eax
sub eax, dword [ebp - 0x2c]
je 0x44fb8e
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x44], eax
je 0x44fba2
mov dword [ebp - 0xc4], 1
jmp 0x44fba9
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0x4e785c2f
jle 0x44fbce
cmp dword [ebp - 0x24], 0
je 0x44fbce
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x44fbce
mov dword [ebp - 0x188], 1
jmp 0x44fbd5
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x188]
add eax, ecx
cmp dword [ebp - 0x44], eax
jge 0x44fbfe
mov dword [ebp - 0xcc], 1
jmp 0x44fc05
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xcc], eax
jg 0x44fc1c
mov dword [ebp - 0x138], 1
jmp 0x44fc23
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
inc eax
jne 0x44fc3b
cmp dword [ebp - 0x24], 0
jne 0x44fc3b
and dword [ebp - 0xd4], 0
jmp 0x44fc45
mov dword [ebp - 0xd4], 1
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0x1c0]
je 0x44fcb0
mov dword [ebp - 0x44], 0xfffffff3
jmp 0x44fc63
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffe6
jl 0x44fc7f
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x44fc7d
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x44fc5c
mov dword [ebp - 0x24], 9
jmp 0x44fc8f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff4
jg 0x44fcae
mov dword [ebp - 0x168], 4
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
jmp 0x44fc88
jmp 0x44fccd
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x44fccd
push 0x47f
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x44fb35
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c8], eax
push 2
lea ecx, [ebp - 0x280]
call fcn.0043557d
push 4
lea ecx, [ebp - 0x1b0]
call fcn.0043557d
mov dword [ebp - 0x290], 0xfffffffe
mov dword [ebp - 0x2d4], 0x164caf14
push 3
lea ecx, [ebp - 0x2a0]
call fcn.0043557d
mov dword [ebp - 0x14], 0
jmp 0x44fd26
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x44fd42
push dword [ebp - 0x14]
lea ecx, [ebp - 0x280]
call fcn.0043566b
mov dword [eax], 0xeac8
jmp 0x44fd1f
mov dword [ebp - 0x14], 0
jmp 0x44fd52
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x44fd6e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1b0]
call fcn.0043566b
mov dword [eax], 0x833fcb50
jmp 0x44fd4b
mov dword [ebp - 0x14], 0
jmp 0x44fd7e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x44fd9a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2a0]
call fcn.0043566b
mov dword [eax], 0x729cf308
jmp 0x44fd77
mov dword [ebp - 0x14], 0
jmp 0x44fdaa
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x44fdc0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x294], 5
jmp 0x44fda3
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x44fdd4
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
push 3
lea ecx, [ebp - 0x1b0]
call fcn.0043566b
and dword [eax], 0
jmp 0x44fe0a
push 3
lea ecx, [ebp - 0x1b0]
call fcn.0043566b
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1b0]
call fcn.0043566b
cmp dword [eax], 1
jg 0x44fe60
mov dword [ebp - 0x2b0], 0x8ef6b8f3
mov dword [ebp - 0x140], 0x947597a6
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
push 3
lea ecx, [ebp - 0x1b0]
call fcn.0043566b
push dword [eax]
lea ecx, [ebp - 0x280]
call fcn.0043566b
cmp dword [eax], 0
je 0x44fe5e
jmp 0x44fde6
jmp 0x44fde6
lea ecx, [ebp - 0x2a0]
call fcn.0043564f
lea ecx, [ebp - 0x1b0]
call fcn.0043564f
lea ecx, [ebp - 0x280]
call fcn.0043564f
push 3
lea ecx, [ebp - 0xac]
call fcn.0043557d
mov dword [ebp - 0x70], 0x18d58162
mov dword [ebp - 0x8c], 0x4015fb26
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x4c], 0x97b2c3cc
mov dword [ebp - 0x30], 0
jmp 0x44febd
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x44fed9
push dword [ebp - 0x30]
lea ecx, [ebp - 0xac]
call fcn.0043566b
mov dword [eax], 1
jmp 0x44feb6
mov dword [ebp - 0x30], 0
jmp 0x44fee9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x44feff
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x22c], 0x9a9b8fa4
jmp 0x44fee2
push 0
lea ecx, [ebp - 0xac]
call fcn.0043566b
and dword [eax], 0
jmp 0x44ff35
push 0
lea ecx, [ebp - 0xac]
call fcn.0043566b
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xac]
call fcn.0043566b
cmp dword [eax], 0xfffffffe
jg 0x4500e5
mov dword [ebp - 0x5c], 0xa2215256
mov dword [ebp - 0x90], 0x720348f4
mov dword [ebp - 0x9c], 0x4a0426a7
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xfe24307a
jb 0x44ff8e
mov dword [ebp - 0x180], 1
jmp 0x44ff95
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jne 0x45001b
cmp dword [ebp - 0x5c], 0
jne 0x44ffcb
push 0
lea ecx, [ebp - 0xac]
call fcn.0043566b
cmp dword [eax], 0
jne 0x44ffcb
and dword [ebp - 0xec], 0
jmp 0x44ffd5
mov dword [ebp - 0xec], 1
cmp dword [ebp - 0xec], 0xfffffff7
jg 0x44ffea
mov dword [ebp - 0x88], 1
jmp 0x44fff1
and dword [ebp - 0x88], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x88]
mov dword [ebp + eax - 0x22c], ecx
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x90]
jne 0x45001b
and dword [ebp - 0x148], 0
jmp 0x450025
mov dword [ebp - 0x148], 1
cmp dword [ebp - 0x148], 1
jle 0x45003a
mov dword [ebp - 0x208], 1
jmp 0x450041
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x8c], eax
jle 0x450064
mov dword [ebp - 0xf4], 1
jmp 0x45006b
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0xf4]
jne 0x450082
mov dword [ebp - 0x170], 1
jmp 0x450089
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x170], eax
jl 0x4500a0
mov dword [ebp - 0xfc], 1
jmp 0x4500a7
and dword [ebp - 0xfc], 0
mov esi, dword [ebp - 0xfc]
add esi, 0xa
push 2
lea ecx, [ebp - 0xac]
call fcn.0043566b
imul esi, dword [eax]
test esi, esi
jne 0x4500d0
mov dword [ebp - 0x150], 1
jmp 0x4500d7
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x58], eax
jmp 0x44ff11
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2ec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22c], 0
je 0x450227
cmp dword [ebp - 0x58], 0
je 0x45017f
push 2
lea ecx, [ebp - 0xac]
call fcn.0043566b
cmp dword [eax], 0
jne 0x450135
mov eax, 0xffff
test eax, eax
jne 0x450135
mov eax, 0x8361cd5c
test eax, eax
jne 0x450135
and dword [ebp - 0x104], 0
jmp 0x45013f
mov dword [ebp - 0x104], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
cmp dword [ebp - 0x104], eax
jge 0x450160
mov dword [ebp - 0x190], 1
jmp 0x450167
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0x82ad
je 0x45017f
mov dword [ebp - 0x10c], 1
jmp 0x450186
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x10c]
jl 0x45019d
mov dword [ebp - 0x158], 1
jmp 0x4501a4
and dword [ebp - 0x158], 0
push 0
lea ecx, [ebp - 0xac]
call fcn.0043566b
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [eax]
jl 0x4501c7
mov dword [ebp - 0x114], 1
jmp 0x4501ce
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0xffff
jb 0x4501e6
mov dword [ebp - 0x178], 1
jmp 0x4501ed
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0
jle 0x450205
cmp dword [ebp - 0x58], 0
jne 0x450205
and dword [ebp - 0x11c], 0
jmp 0x45020f
mov dword [ebp - 0x11c], 1
cmp dword [ebp - 0x11c], 0xc637
je 0x450227
mov dword [ebp - 0x160], 1
jmp 0x45022e
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
neg eax
cmp eax, dword [ebp - 0x70]
jge 0x450247
mov dword [ebp - 0x124], 1
jmp 0x45024e
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x450272
mov eax, 0xf13a4b1f
test eax, eax
je 0x450272
mov dword [ebp - 0x12c], 1
jmp 0x450279
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x69b12db2
je 0x450291
mov dword [ebp - 0xb4], 1
jmp 0x450298
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x8c]
je 0x4502aa
cmp dword [ebp - 0x4c], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x22c], 0xfffffffe
test eax, eax
je 0x4502e6
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x4502e4
push 0x751
push 0x1e43
push 0xe62
push 0x1879
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
jmp 0x45032d
mov dword [ebp - 0x4c], 0
jmp 0x4502f6
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x450315
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x450313
push 0x255e
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x4502ef
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x45032d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
lea ecx, [ebp - 0xac]
call fcn.0043564f
mov dword [ebp - 0x40], 0x5c68ec0a
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x40], 0
jmp 0x450359
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe7
jl 0x4504de
mov dword [ebp - 0x38], 0
jmp 0x450373
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x450389
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xd0], 1
jmp 0x45036c
mov dword [ebp - 0x38], 0
jmp 0x450399
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x4503af
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1a4], 0x57bf5cd5
jmp 0x450392
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1a4], 0
jmp 0x4503da
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1a4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a4], 1
jge 0x450402
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a4]
mov dword [ebp + eax*4 - 0xd0], 0xfff8
jmp 0x4503c1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a4], 0
jne 0x4504bc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a4]
cmp dword [ebp - 0x40], eax
jle 0x450433
mov dword [ebp - 0xb8], 1
jmp 0x45043a
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xb8], eax
jne 0x45045e
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1a4], 0
jne 0x45045e
and dword [ebp - 0xc0], 0
jmp 0x450468
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xc0], eax
je 0x45047f
mov dword [ebp - 0xc8], 1
jmp 0x450486
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 0xb984
jle 0x45049e
mov dword [ebp - 0x210], 1
jmp 0x4504a5
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2b4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a4]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x218], 0x6273d594
jmp 0x450352
mov dword [ebp - 0x40], 0xffffffff
push 2
lea ecx, [ebp - 0x274]
call fcn.0043557d
push 4
lea ecx, [ebp - 0x1bc]
call fcn.0043557d
mov dword [ebp - 0x2c4], 0xfffffffe
mov dword [ebp - 0x248], 5
mov dword [ebp - 0x244], 5
mov dword [ebp - 0x240], 5
mov dword [ebp - 0x23c], 5
mov dword [ebp - 0x54], 0xa2afe01b
mov dword [ebp - 0x54], 0
jmp 0x450548
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x4505bb
mov dword [ebp - 0x84], 0xf1d8987f
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x248], 0
je 0x450567
jmp 0x4505bb
mov dword [ebp - 0x84], 3
jmp 0x450580
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x4505b9
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x78], 3
jmp 0x4505a0
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x4505b7
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x248], 0
je 0x4505b5
jmp 0x4505b7
jmp 0x450599
jmp 0x450573
jmp 0x450541
mov dword [ebp - 0x2f4], 0x164caf14
push 3
lea ecx, [ebp - 0x2e0]
call fcn.0043557d
mov dword [ebp - 0x18], 0
jmp 0x4505e2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4505fe
push dword [ebp - 0x18]
lea ecx, [ebp - 0x274]
call fcn.0043566b
mov dword [eax], 0xeac8
jmp 0x4505db
mov dword [ebp - 0xa0], 0xfffffff9
mov dword [ebp - 0xf8], 0x8bffbefa
mov dword [ebp - 0x288], 0x104272ba
push 1
lea ecx, [ebp - 0x238]
call fcn.0043557d
mov dword [ebp - 0x1d8], 0x11e9a9d0
mov dword [ebp - 0x1e4], 0xa1bca339
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x200], 0xb66c
mov dword [ebp - 0x220], 0x84b0
mov dword [ebp - 0x118], 0xb9abc19a
mov dword [ebp - 0x25c], 0xa4575f7f
mov dword [ebp - 0x258], 0xa4575f7f
mov dword [ebp - 0x254], 0xa4575f7f
mov dword [ebp - 0x250], 0xa4575f7f
lea ecx, [ebp - 0x91]
call fcn.0043567a
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x30c]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2d0]
call fcn.00435629
mov dword [ebp - 0xb0], 0x794c
mov dword [ebp - 0x204], str.kdhhaz_itjeynd_oears_btskg_bxp_lhmc
cmp dword [ebp - 0xb0], 0x7b34
jle 0x45077b
and dword [ebp - 0x80], 0
jmp 0x4506f3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x2c8e
jge 0x45077b
and dword [ebp - 0x74], 0
jmp 0x450709
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1eb9
jge 0x450776
and dword [ebp - 0x60], 0
jmp 0x45071f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1e73
jge 0x450774
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x60]
shl eax, cl
cdq
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], edx
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x330]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x330]
call fcn.00435424
jmp 0x450718
jmp 0x450702
jmp 0x4506ec
and dword [ebp - 4], 0
cmp dword [ebp - 0xb0], 0x76a1
jge 0x450797
push dword [ebp - 0x204]
call fcn.004a9457
pop ecx
jmp 0x4507b3
or dword [ebp - 4], 0xffffffff
jmp 0x4507bd
mov dword [ebp - 0x20], 0
jmp 0x4507cd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4507e3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x318], 0x2c6eed1e
jmp 0x4507c6
mov dword [ebp - 0x20], 0
jmp 0x4507f3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x45080f
push dword [ebp - 0x20]
lea ecx, [ebp - 0x238]
call fcn.0043566b
mov dword [eax], 0xffff
jmp 0x4507ec
mov dword [ebp - 0x20], 0
jmp 0x45081f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x450835
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c0], 0xffffffff
jmp 0x450818
mov eax, 0x9576
test eax, eax
je 0x450854
mov eax, dword [ebp - 0xa0]
neg eax
je 0x450854
mov dword [ebp - 0xe8], 1
jmp 0x45085b
and dword [ebp - 0xe8], 0
mov dword [ebp - 0x1e4], 1
push 0
lea ecx, [ebp - 0x238]
call fcn.0043566b
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0xf8]
neg eax
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x98]
mov edx, dword [edx]
inc edx
mov esi, dword [ebp - 0x98]
mov dword [esi], edx
cmp ecx, eax
jg 0x4508b0
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x4508b0
mov dword [ebp - 0xe0], 1
jmp 0x4508b7
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
cmp dword [ebp - 0xe0], eax
jge 0x4508d8
mov dword [ebp - 0xf0], 1
jmp 0x4508df
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0xf0]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2c0]
jl 0x450906
mov dword [ebp - 0x1d4], 1
jmp 0x45090d
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0xf8], 0xeeb
push 0
lea ecx, [ebp - 0x238]
call fcn.0043566b
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x1d8], eax
jg 0x45094a
mov dword [ebp - 0x100], 1
jmp 0x450951
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x100], eax
jne 0x45096b
mov dword [ebp - 0x108], 1
jmp 0x450972
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x220]
imul eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0xa0]
jle 0x450993
mov dword [ebp - 0x110], 1
jmp 0x45099a
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
mov esi, dword [ebp - 0x118]
push 2
lea ecx, [ebp - 0x2d0]
call fcn.0043566b
mov dword [eax], esi
lea ecx, [ebp - 0x2d0]
call fcn.0043564f
lea ecx, [ebp - 0x238]
call fcn.0043564f
mov dword [ebp - 0x18], 0
jmp 0x4509e1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x4509fd
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1bc]
call fcn.0043566b
mov dword [eax], 0x833fcb50
jmp 0x4509da
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x1f4], 6
mov dword [ebp - 0x3c], 0
jmp 0x450a25
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x450a38
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x28], 6
jmp 0x450a1e
mov dword [ebp - 0x3c], 0
jmp 0x450a48
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x450a5e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1fc], 0xa27289ff
jmp 0x450a41
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xb7d8cf4c
jbe 0x450a87
mov dword [ebp - 0x128], 1
jmp 0x450a8e
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x450aaa
cmp dword [ebp - 0x6c], 0
jne 0x450aaa
and dword [ebp - 0x120], 0
jmp 0x450ab4
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1fc], 4
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
sub ecx, dword [ebp + eax - 0x28]
cmp ecx, 4
jge 0x450aff
mov dword [ebp - 0x13c], 1
jmp 0x450b06
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x13c]
jne 0x450b27
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x450b27
and dword [ebp - 0x144], 0
jmp 0x450b31
mov dword [ebp - 0x144], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x1c]
je 0x450b4c
mov dword [ebp - 0x14c], 1
jmp 0x450b53
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x14c], eax
jle 0x450b71
mov dword [ebp - 0x154], 1
jmp 0x450b78
and dword [ebp - 0x154], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
add eax, dword [ebp - 0x154]
je 0x450c6d
mov dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x2f0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1fc], 0x9a1d
jle 0x450c0f
mov dword [ebp - 0x1e0], 0xffff
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e0]
cmp dword [ebp + eax - 0x1fc], ecx
jl 0x450be6
mov dword [ebp - 0x15c], 1
jmp 0x450bed
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x20c], eax
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x450c0d
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
jmp 0x450c68
mov dword [ebp - 0x64], 0
jmp 0x450c1f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x450c35
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x304], 0xce17c927
jmp 0x450c18
mov dword [ebp - 0x1c], 0
jmp 0x450c45
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x450c68
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x304], eax
jmp 0x450c3e
jmp 0x450d5d
mov dword [ebp - 0x214], 0xa8f9
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], 0
jmp 0x450c8e
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x450d5d
mov dword [ebp - 0x1e8], 0x9f010208
mov eax, dword [ebp - 0x1e8]
sub eax, 0x6a95
cmp eax, 6
jb 0x450cbe
mov dword [ebp - 0x164], 1
jmp 0x450cc5
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x164], eax
jl 0x450ce3
mov dword [ebp - 0x16c], 1
jmp 0x450cea
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x16c]
jge 0x450d01
mov dword [ebp - 0x174], 1
jmp 0x450d08
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0
jae 0x450d1d
mov dword [ebp - 0x21c], 1
jmp 0x450d24
and dword [ebp - 0x21c], 0
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x1f4]
cmp eax, 0xfffffffd
ja 0x450d45
mov dword [ebp - 0x17c], 1
jmp 0x450d4c
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x214], eax
jmp 0x450c87
mov dword [ebp - 0x18], 0
jmp 0x450d6d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x450d89
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2e0]
call fcn.0043566b
mov dword [eax], 0x729cf308
jmp 0x450d66
mov dword [ebp - 0x18], 0
jmp 0x450d99
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x450daf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2ac], 5
jmp 0x450d92
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x450dc3
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
push 3
lea ecx, [ebp - 0x1bc]
call fcn.0043566b
and dword [eax], 0
jmp 0x450df9
push 3
lea ecx, [ebp - 0x1bc]
call fcn.0043566b
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x184]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1bc]
call fcn.0043566b
cmp dword [eax], 1
jg 0x450e4f
mov dword [ebp - 0x28c], 0x8ef6b8f3
mov dword [ebp - 0x18c], 0x947597a6
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
push 3
lea ecx, [ebp - 0x1bc]
call fcn.0043566b
push dword [eax]
lea ecx, [ebp - 0x274]
call fcn.0043566b
cmp dword [eax], 0
je 0x450e4d
jmp 0x450dd5
jmp 0x450dd5
lea ecx, [ebp - 0x2e0]
call fcn.0043564f
lea ecx, [ebp - 0x1bc]
call fcn.0043564f
lea ecx, [ebp - 0x274]
call fcn.0043564f
push 0x7a14
push 1
push 0
push dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x1cc]
movzx eax, byte [eax]
push eax
push 0x63d3
call fcn.00455b47
add esp, 0x18
jmp 0x450ec7
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1c4], eax
push 0x566d
push dword [ebp - 0x1c4]
push 1
push 0
push dword [ebp - 0x1dc]
call fcn.0046a780
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret