Function at 0x441212
Capabilities:
Accept command line arguments
Get disk information
Get graphical window text
Identify system language via api
Resume thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1dc8
call fcn.0046b050
push esi
push edi
push 1
lea ecx, [ebp - 0x1338]
call fcn.004113a6
mov dword [ebp - 0x17e8], 0xfffffff7
push 2
lea ecx, [ebp - 0x19ac]
call fcn.004113a6
mov dword [ebp - 0x90], 0
jmp 0x44125e
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x441280
push dword [ebp - 0x90]
lea ecx, [ebp - 0x1338]
call fcn.00401484
mov dword [eax], 0x53b26bdd
jmp 0x441251
mov dword [ebp - 0x90], 0
jmp 0x441299
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x4412bb
push dword [ebp - 0x90]
lea ecx, [ebp - 0x19ac]
call fcn.00401484
mov dword [eax], 0x5a60d005
jmp 0x44128c
push 0
lea ecx, [ebp - 0x1338]
call fcn.00401484
and dword [eax], 0
jmp 0x4412f1
push 0
lea ecx, [ebp - 0x1338]
call fcn.00401484
mov dword [ebp - 0xe28], eax
mov eax, dword [ebp - 0xe28]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xe28]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1338]
call fcn.00401484
cmp dword [eax], 0xfffffff2
jle 0x441437
mov dword [ebp - 0x1124], 1
mov dword [ebp - 0x1958], 0
mov dword [ebp - 0x1bc8], 0xee28fdeb
mov dword [ebp - 0x1960], 3
push 1
lea ecx, [ebp - 0x199c]
call fcn.004113a6
mov dword [ebp - 0x1b50], 5
mov dword [ebp - 0x1968], 0
mov dword [ebp - 0xfd4], 0
mov dword [ebp - 0x31c], 0
jmp 0x441373
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 1
jge 0x441392
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x199c]
call fcn.00401484
and dword [eax], 0
jmp 0x441366
cmp dword [ebp - 0x1124], 0
je 0x4413e7
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x4413c4
push 0x928
push 0xeea
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov byte [ebp - 0x1c3], 0
movzx eax, byte [ebp - 0x1c3]
test eax, eax
je 0x4413e5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
jmp 0x441408
mov dword [ebp - 0x1c48], 0xffffffff
mov dword [ebp - 0x1970], 1
mov eax, dword [ebp - 0xfd4]
inc eax
mov dword [ebp - 0xfd4], eax
mov byte [ebp - 0x179], 0
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x441427
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
lea ecx, [ebp - 0x199c]
call fcn.00411478
jmp 0x4412cd
lea ecx, [ebp - 0x19ac]
call fcn.00411478
lea ecx, [ebp - 0x1338]
call fcn.00411478
mov dword [ebp - 0x28c], 0x58e469ad
mov dword [ebp - 0x324], 0
jmp 0x441470
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x44148c
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x11a4], 0xffffffff
jmp 0x441463
mov dword [ebp - 0x28c], 0
jmp 0x4414a5
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x4414c1
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x11a4], 0xe57ad95e
jmp 0x441498
mov byte [ebp - 0x1ab], 0
movzx eax, byte [ebp - 0x1ab]
test eax, eax
je 0x4414e2
push 0
push 0x659
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
push 1
lea ecx, [ebp - 0x1398]
call fcn.004113a6
or dword [ebp - 0x15b4], 0xffffffff
or dword [ebp - 0x15b0], 0xffffffff
or dword [ebp - 0x15ac], 0xffffffff
or dword [ebp - 0x15a8], 0xffffffff
lea ecx, [ebp - 0x4f5]
call fcn.00411494
push eax
lea eax, [ebp - 0x15a4]
push eax
lea eax, [ebp - 0x15b4]
push eax
lea ecx, [ebp - 0x1cdc]
call fcn.00411497
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10cc]
call fcn.00411452
mov dword [ebp - 0x1018], 0x1d8b9dbe
mov dword [ebp - 0x11b4], 0xca8cda2a
mov dword [ebp - 0x328], 0
jmp 0x44156d
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jge 0x441589
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0x19bc], 0x2e0cf572
jmp 0x441560
push 2
lea ecx, [ebp - 0x10cc]
call fcn.00401484
and dword [eax], 0
jmp 0x4415bf
push 2
lea ecx, [ebp - 0x10cc]
call fcn.00401484
mov dword [ebp - 0xfdc], eax
mov eax, dword [ebp - 0xfdc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xfdc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x10cc]
call fcn.00401484
cmp dword [eax], 2
jg 0x4416c2
push 3
lea ecx, [ebp - 0x1098]
call fcn.004113a6
mov dword [ebp - 0x49c], 0
jmp 0x4415fb
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 3
jge 0x44161d
push dword [ebp - 0x49c]
lea ecx, [ebp - 0x1098]
call fcn.00401484
mov dword [eax], 0xccbad86e
jmp 0x4415ee
push 0
lea ecx, [ebp - 0x1098]
call fcn.00401484
and dword [eax], 0
jmp 0x441653
push 0
lea ecx, [ebp - 0x1098]
call fcn.00401484
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0x1008]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1008]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1098]
call fcn.00401484
cmp dword [eax], 2
jg 0x441693
mov dword [ebp - 0x11ac], 0
mov esi, dword [ebp - 0x11ac]
add esi, dword [ebp - 0x1018]
push 2
lea ecx, [ebp - 0x10cc]
call fcn.00401484
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x19bc], esi
jmp 0x44162f
push 0
lea ecx, [ebp - 0x1098]
call fcn.00401484
cmp dword [eax], 0
je 0x4416b2
lea ecx, [ebp - 0x1098]
call fcn.00411478
jmp 0x4416c2
lea ecx, [ebp - 0x1098]
call fcn.00411478
jmp 0x44159b
cmp dword [ebp - 0x11b4], 0
je 0x44170f
mov dword [ebp - 0x11bc], 0xbf495e3b
mov dword [ebp - 0x11c4], 0
cmp dword [ebp - 0x11bc], 0x2ba2
jne 0x4416f7
mov dword [ebp - 0x1010], 1
jmp 0x4416fe
and dword [ebp - 0x1010], 0
mov eax, dword [ebp - 0x1010]
mov dword [ebp - 0x11c4], eax
jmp 0x4417e7
mov dword [ebp - 0x1028], 0x7a14
mov dword [ebp - 0x11cc], 0x526c7153
mov byte [ebp - 0x17b], 0
movzx eax, byte [ebp - 0x17b]
test eax, eax
je 0x441755
push 0
push 0xa2d
push 0x113a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
cmp dword [ebp - 0x1018], 0
jb 0x44176a
mov dword [ebp - 0x1020], 1
jmp 0x441771
and dword [ebp - 0x1020], 0
cmp dword [ebp - 0x1020], 0x9a56
jle 0x441789
mov dword [ebp - 0x590], 1
jmp 0x441790
and dword [ebp - 0x590], 0
push 2
lea ecx, [ebp - 0x10cc]
call fcn.00401484
mov ecx, dword [ebp - 0x590]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1028]
cmp dword [ebp - 0x590], eax
jg 0x4417cd
mov eax, dword [ebp - 0x11cc]
add eax, dword [ebp - 0x1028]
je 0x4417cd
mov dword [ebp - 0x628], 1
jmp 0x4417d4
and dword [ebp - 0x628], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x628]
mov dword [ebp + eax - 0x19bc], ecx
lea ecx, [ebp - 0x10cc]
call fcn.00411478
mov dword [ebp - 0x1b58], 0xfffffff7
mov dword [ebp - 0x2cc], 0xbeaa32b1
mov dword [ebp - 0x11d4], 0xffffffff
mov dword [ebp - 0x330], 0
jmp 0x441829
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jge 0x441845
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0x1778], 0xfffffff8
jmp 0x44181c
mov dword [ebp - 0x2cc], 0xffffffff
mov dword [ebp - 0x2cc], 1
jmp 0x441868
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
jl 0x4418bc
mov dword [ebp - 0x294], 5
mov dword [ebp - 0x294], 0
jmp 0x441894
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x4418b0
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x1778], 0x63384304
jmp 0x441887
mov dword [ebp - 0x11d4], 0xb9dd952e
jmp 0x44185b
push 2
lea ecx, [ebp - 0x1a5c]
call fcn.004113a6
mov dword [ebp - 0x118], 1
push 3
lea ecx, [ebp - 0x1714]
call fcn.004113a6
mov dword [ebp - 0x1748], 0xfffffffc
mov dword [ebp - 0xe7c], 8
mov dword [ebp - 0xe4], 0
jmp 0x44190d
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x441929
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x46c], 0x4e2db58
jmp 0x441900
mov dword [ebp - 0xe4], 0
jmp 0x441942
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x441964
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1714]
call fcn.00401484
mov dword [eax], 0xdfb1af9d
jmp 0x441935
mov dword [ebp - 0x118], 0
jmp 0x44197d
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x441b3f
mov dword [ebp - 0x338], 0xa290be4
push 2
lea ecx, [ebp - 0x19cc]
call fcn.004113a6
mov dword [ebp - 0x520], 0xffff
mov dword [ebp - 0x404], 0
jmp 0x4419c4
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 2
jge 0x4419e6
push dword [ebp - 0x404]
lea ecx, [ebp - 0x19cc]
call fcn.00401484
mov dword [eax], 0xbafcb143
jmp 0x4419b7
mov dword [ebp - 0x338], 0
jmp 0x4419ff
mov eax, dword [ebp - 0x338]
dec eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
jl 0x441a2b
mov dword [ebp - 0x174c], 0xfffffffc
mov dword [ebp - 0x1754], 0xffffffff
mov eax, dword [ebp - 0x520]
dec eax
mov dword [ebp - 0x520], eax
jmp 0x4419f2
cmp dword [ebp - 0x520], 0
jne 0x441aa3
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x441a78
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x46c]
mov dword [ebp - 0xe64], eax
push 0
lea ecx, [ebp - 0x1714]
call fcn.00401484
mov ecx, dword [ebp - 0xe64]
mov dword [eax], ecx
cmp dword [ebp - 0xe64], 0
je 0x441a78
mov dword [ebp - 0x630], 1
jmp 0x441a7f
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0x630]
mov ecx, dword [ebp - 0x118]
cmp eax, dword [ebp + ecx*4 - 0x46c]
jl 0x441aa3
and dword [ebp - 0xe6c], 0
jmp 0x441aad
mov dword [ebp - 0xe6c], 1
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0x46c]
imul eax, dword [ebp - 0xe6c]
sub eax, dword [ebp - 0x118]
cmp eax, 0xcef3cf68
je 0x441ada
mov dword [ebp - 0x638], 1
jmp 0x441ae1
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 1
jne 0x441af6
mov dword [ebp - 0xe74], 1
jmp 0x441afd
and dword [ebp - 0xe74], 0
cmp dword [ebp - 0xe74], 0xb5cf
jne 0x441b15
mov dword [ebp - 0x640], 1
jmp 0x441b1c
and dword [ebp - 0x640], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x640]
mov dword [ebp + eax - 0x46c], ecx
lea ecx, [ebp - 0x19cc]
call fcn.00411478
jmp 0x441970
mov eax, dword [ebp - 0xe7c]
dec eax
mov dword [ebp - 0xe7c], eax
lea ecx, [ebp - 0x1714]
call fcn.00411478
mov dword [ebp - 0x128], 0x1078932
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x1cc], 0x99958900
mov dword [ebp - 0x348], 0xfaeb382
mov dword [ebp - 0x78], 0xfffffff7
mov dword [ebp - 0x598], 0xe2e4ed
mov dword [ebp - 0x12a0], 0xfffffffe
mov dword [ebp - 0x4c4], 0xfffffffe
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x12b8], 0
mov dword [ebp - 0x340], 0
jmp 0x441bd1
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 4
jge 0x441bed
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x1d64], 0x4c6454c9
jmp 0x441bc4
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x175c], eax
cmp dword [ebp - 0x128], 0x8e55a441
je 0x441c11
mov dword [ebp - 0x648], 1
jmp 0x441c18
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x648], eax
jl 0x441c32
mov dword [ebp - 0xe84], 1
jmp 0x441c39
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0xe84]
sub eax, dword [ebp - 0x128]
cmp eax, 0xffffffff
jl 0x441c56
mov dword [ebp - 0x650], 1
jmp 0x441c5d
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x650], eax
jge 0x441c77
mov dword [ebp - 0xe8c], 1
jmp 0x441c7e
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
neg eax
sub eax, dword [ebp - 0xe8c]
mov ecx, dword [ebp - 0x148]
sub ecx, eax
jne 0x441cb3
or eax, 0xffffffff
je 0x441cc2
cmp dword [ebp - 0x78], 0
je 0x441cc2
cmp dword [ebp - 0x598], 0
jne 0x441cd4
cmp dword [ebp - 0x1cc], 0
jne 0x441cd4
and dword [ebp - 0x658], 0
jmp 0x441cde
mov dword [ebp - 0x658], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x658], eax
je 0x441cf5
mov dword [ebp - 0xe94], 1
jmp 0x441cfc
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0xe94], eax
jne 0x441d16
mov dword [ebp - 0x660], 1
jmp 0x441d1d
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0xb6b7be2d
ja 0x441d3e
cmp dword [ebp - 0x128], 0
je 0x441d3e
mov dword [ebp - 0xe9c], 1
jmp 0x441d45
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0x348]
imul eax, dword [ebp - 0xe9c]
cmp eax, 0xbc23cea
jne 0x441d6c
cmp dword [ebp - 0x148], 0
jne 0x441d6c
cmp dword [ebp - 0x78], 0
je 0x441ed3
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x5e8], 0x9c1c73b0
mov dword [ebp - 0x22c], 0xadf851f0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x1cc], eax
jge 0x441daa
cmp dword [ebp - 0x1cc], 0
jne 0x441daa
and dword [ebp - 0x1298], 0
jmp 0x441db4
mov dword [ebp - 0x1298], 1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1764], eax
mov dword [ebp - 0x5e8], 1
mov eax, dword [ebp - 0x5e8]
imul eax, dword [ebp - 0x148]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x12a0]
mov dword [ebp - 0x176c], eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x22c]
sub ecx, dword [ebp - 0x22c]
imul eax, ecx
cmp dword [ebp - 0x284], eax
jg 0x441e1a
mov eax, 0xd0c6a332
test eax, eax
jne 0x441e1a
xor eax, eax
inc eax
jne 0x441e1a
and dword [ebp - 0x668], 0
jmp 0x441e24
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x284], eax
jge 0x441e4c
or eax, 0xffffffff
jne 0x441e4c
and dword [ebp - 0xea4], 0
jmp 0x441e56
mov dword [ebp - 0xea4], 1
mov eax, dword [ebp - 0x598]
cmp eax, dword [ebp - 0xea4]
jle 0x441e70
mov dword [ebp - 0x670], 1
jmp 0x441e77
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x670], eax
jge 0x441e91
mov dword [ebp - 0xeac], 1
jmp 0x441e98
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0xeac]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
add eax, dword [ebp - 0x284]
mov dword [ebp - 0x5e8], eax
jmp 0x44224b
mov dword [ebp - 0x29c], 0xce3044b1
mov dword [ebp - 0xecc], 1
mov dword [ebp - 0x12b0], 0xcb0ea5cd
mov dword [ebp - 0x40c], 0
jmp 0x441f0a
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 2
jge 0x441f26
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0x610], 0x3b36
jmp 0x441efd
mov eax, 0x4cd0
test eax, eax
je 0x441fbb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x610], 0xfffffffa
je 0x441f55
mov eax, 0x12742e7f
test eax, eax
jne 0x441f55
and dword [ebp - 0x678], 0
jmp 0x441f5f
mov dword [ebp - 0x678], 1
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x610], 0x1ec3
cmp eax, dword [ebp - 0x678]
jle 0x441f84
mov dword [ebp - 0xeb4], 1
jmp 0x441f8b
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x17cc], eax
cmp dword [ebp - 0x4c4], 0x13f3
jl 0x441fbb
mov dword [ebp - 0x680], 1
jmp 0x441fc2
and dword [ebp - 0x680], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x610]
cmp eax, dword [ebp - 0x680]
jle 0x441fe3
mov dword [ebp - 0xebc], 1
jmp 0x441fea
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x78], 0x673eefd7
jg 0x442219
mov dword [ebp - 0x690], 0x2ec3887d
mov dword [ebp - 0xec4], 0xfffffffc
mov dword [ebp - 0x6a0], 2
mov dword [ebp - 0x78], 0xd
jmp 0x442031
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x1b
je 0x442217
mov dword [ebp - 0x528], 0x18fcd197
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x528], eax
jge 0x442068
mov dword [ebp - 0x688], 1
jmp 0x44206f
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0xec4], eax
mov eax, dword [ebp - 0x528]
imul eax, dword [ebp - 0xec4]
cmp eax, dword [ebp - 0x690]
jne 0x44209c
mov dword [ebp - 0x12a8], 1
jmp 0x4420a3
and dword [ebp - 0x12a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x610]
mov dword [ebp - 0x17d4], eax
mov eax, 0xec10c1a6
test eax, eax
je 0x4420d4
cmp dword [ebp - 0x128], 0
je 0x4420d4
mov dword [ebp - 0x698], 1
jmp 0x4420db
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0xecc], eax
mov eax, dword [ebp - 0xecc]
cmp eax, dword [ebp - 0x698]
jge 0x442101
mov dword [ebp - 0xed4], 1
jmp 0x442108
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0xed4]
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 0xfa32
jne 0x44212c
mov dword [ebp - 0xedc], 1
jmp 0x442133
and dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0xedc]
jle 0x44214d
mov dword [ebp - 0x6a8], 1
jmp 0x442154
and dword [ebp - 0x6a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x610]
cmp dword [ebp - 0x6a8], eax
jle 0x442175
mov dword [ebp - 0xee4], 1
jmp 0x44217c
and dword [ebp - 0xee4], 0
mov eax, dword [ebp - 0xee4]
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 6
jle 0x4421ad
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x4421ad
cmp dword [ebp - 0x528], 0
je 0x4421ad
mov dword [ebp - 0xeec], 1
jmp 0x4421b4
and dword [ebp - 0xeec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x610]
cmp dword [ebp - 0xeec], eax
jl 0x4421de
mov eax, 0x7a8f
test eax, eax
je 0x4421de
mov dword [ebp - 0x6b8], 1
jmp 0x4421e5
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x6b8], eax
jge 0x4421ff
mov dword [ebp - 0xef4], 1
jmp 0x442206
and dword [ebp - 0xef4], 0
mov eax, dword [ebp - 0xef4]
mov dword [ebp - 0x12b0], eax
jmp 0x44202a
jmp 0x44224b
mov byte [ebp - 0x20d], 0
movzx eax, byte [ebp - 0x20d]
test eax, eax
je 0x44224b
push 0
push 0x1739
push 0x19fd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x17dc], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x17e4], eax
mov eax, dword [ebp - 0x4c4]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x1d64]
sub ecx, 0x7bcf7a53
imul eax, ecx
cmp eax, 3
ja 0x442290
mov dword [ebp - 0x6c0], 1
jmp 0x442297
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x12b8], eax
mov dword [ebp - 0x98], 0
jmp 0x4422bc
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x4422de
push dword [ebp - 0x98]
lea ecx, [ebp - 0x1398]
call fcn.00401484
mov dword [eax], 0x53b26bdd
jmp 0x4422af
mov dword [ebp - 0x12c0], 0x69ad59e5
mov dword [ebp - 0x350], 0
jmp 0x442301
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x44231d
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x12c8], 7
jmp 0x4422f4
mov byte [ebp - 0x17d], 0
movzx eax, byte [ebp - 0x17d]
test eax, eax
je 0x442335
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c0]
mov dword [ebp + eax - 0x12c8], ecx
mov dword [ebp - 0x98], 0
jmp 0x442361
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x442383
push dword [ebp - 0x98]
lea ecx, [ebp - 0x1a5c]
call fcn.00401484
mov dword [eax], 0x5a60d005
jmp 0x442354
push 0
lea ecx, [ebp - 0x1398]
call fcn.00401484
and dword [eax], 0
jmp 0x4423b9
push 0
lea ecx, [ebp - 0x1398]
call fcn.00401484
cmp dword [eax], 0xfffffff2
jle 0x4456ca
mov dword [ebp - 0x28], 0x925ef2c3
mov dword [ebp - 0x2d4], 0xfffffffc
mov dword [ebp - 0x6d8], 0x5e19f8c5
mov dword [ebp - 0x26c], 0xd14b4322
mov dword [ebp - 0x1424], 0xe820f90f
mov dword [ebp - 0x1420], 0xe820f90f
mov dword [ebp - 0x141c], 0xe820f90f
mov dword [ebp - 0x1418], 0xe820f90f
mov dword [ebp - 0x6f0], 0x46409ef3
mov dword [ebp - 0x414], 0
jmp 0x44243f
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 3
jge 0x44245b
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x19dc], 0x259dba5c
jmp 0x442432
cmp dword [ebp - 0x28], 0
jne 0x4425e8
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x442479
mov dword [ebp - 0x12d0], 1
jmp 0x442480
and dword [ebp - 0x12d0], 0
cmp dword [ebp - 0x28], 0x8b47
jne 0x442495
mov dword [ebp - 0x6c8], 1
jmp 0x44249c
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x28], eax
jne 0x4424bf
mov dword [ebp - 0x12d8], 1
jmp 0x4424c6
and dword [ebp - 0x12d8], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x17ec], eax
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
jne 0x4424f6
cmp dword [ebp - 0x28], 0
jne 0x4424f6
cmp dword [ebp - 0x2d4], 0
jne 0x4424f6
and dword [ebp - 0xf04], 0
jmp 0x442500
mov dword [ebp - 0xf04], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xf04], eax
jg 0x442517
mov dword [ebp - 0x6d0], 1
jmp 0x44251e
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
inc eax
cmp eax, dword [ebp - 0x28]
je 0x442536
mov dword [ebp - 0xf0c], 1
jmp 0x44253d
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xf0c]
mov dword [ebp - 0x6d8], eax
je 0x442557
mov eax, 0x3279329b
test eax, eax
jne 0x442569
cmp dword [ebp - 0x2d4], 0
jne 0x442569
and dword [ebp - 0xf14], 0
jmp 0x442573
mov dword [ebp - 0xf14], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xf14]
mov dword [ebp + eax - 0x19dc], ecx
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x17f4], eax
mov eax, dword [ebp - 0x28]
add eax, 0xc657
cmp eax, dword [ebp - 0x26c]
jg 0x4425ad
mov dword [ebp - 0x6e0], 1
jmp 0x4425b4
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x6e0]
lea eax, [ecx + eax - 0x40105d1b]
cmp eax, dword [ebp - 0x28]
jg 0x4425d8
mov dword [ebp - 0xf1c], 1
jmp 0x4425df
and dword [ebp - 0xf1c], 0
mov eax, dword [ebp - 0xf1c]
sub eax, dword [ebp - 0x28]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19dc]
mov dword [ebp - 0x6e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp + eax - 0x1424], ecx
cmp dword [ebp - 0x6e8], 1
jg 0x442624
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1424], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26c]
cmp dword [ebp + eax - 0x1424], ecx
jge 0x442645
mov dword [ebp - 0xf24], 1
jmp 0x44264c
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x17fc], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x1804], eax
cmp dword [ebp - 0x26c], 0
je 0x4426de
mov byte [ebp - 0x1ad], 0
movzx eax, byte [ebp - 0x1ad]
test eax, eax
je 0x4426dc
push 0xab2
push 0x1a76
push 0xb5e
push 0
push 0x153b
push 0xced
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1bef
push 0x266d
push 0x202c
push 0x147c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
jmp 0x4426fb
mov dword [ebp - 0x12e0], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12e0]
mov dword [ebp + eax - 0x1424], ecx
mov dword [ebp - 0x1140], 1
mov dword [ebp - 0x358], 0xfffffffc
mov dword [ebp - 0xf54], 1
push 1
lea ecx, [ebp - 0x1450]
call fcn.004113a6
push 3
lea ecx, [ebp - 0x1348]
call fcn.004113a6
mov dword [ebp - 0x710], 0xbb75da2c
mov dword [ebp - 0x12f8], 0xffffffff
mov dword [ebp - 0x40], 0
jmp 0x442757
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x442773
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1450]
call fcn.00401484
mov dword [eax], 0x4215e1ab
jmp 0x442750
mov dword [ebp - 0x40], 0
jmp 0x442783
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x44279f
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1348]
call fcn.00401484
mov dword [eax], 1
jmp 0x44277c
mov dword [ebp - 0x40], 0
jmp 0x4427af
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x4427c5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x19ec], 2
jmp 0x4427a8
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x180c], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xf2c], eax
push 0
lea ecx, [ebp - 0x1450]
call fcn.00401484
mov ecx, dword [ebp - 0xf2c]
mov dword [eax], ecx
cmp dword [ebp - 0xf2c], 0xfff8
jae 0x44280a
mov dword [ebp - 0x6f8], 1
jmp 0x442811
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0xe9f2
jge 0x442829
mov dword [ebp - 0xf34], 1
jmp 0x442830
and dword [ebp - 0xf34], 0
mov eax, dword [ebp - 0x710]
cmp eax, dword [ebp - 0xf34]
jge 0x44284a
mov dword [ebp - 0x700], 1
jmp 0x442851
and dword [ebp - 0x700], 0
cmp dword [ebp - 0x700], 0
jle 0x442866
mov dword [ebp - 0xf3c], 1
jmp 0x44286d
and dword [ebp - 0xf3c], 0
mov eax, dword [ebp - 0xf3c]
sub eax, 4
cmp eax, 0xafd47030
jb 0x442889
mov dword [ebp - 0x708], 1
jmp 0x442890
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
neg eax
mov dword [ebp - 0xf54], eax
mov eax, dword [ebp - 0xf54]
mov dword [ebp - 0x358], eax
mov esi, dword [ebp - 0x358]
push 1
lea ecx, [ebp - 0x1348]
call fcn.00401484
cmp esi, dword [eax]
je 0x4428df
push 0
lea ecx, [ebp - 0x1450]
call fcn.00401484
cmp dword [eax], 0
je 0x4428df
mov dword [ebp - 0xf5c], 1
jmp 0x4428e6
and dword [ebp - 0xf5c], 0
mov eax, dword [ebp - 0x710]
add eax, dword [ebp - 0xf5c]
jne 0x442900
mov dword [ebp - 0x12e8], 1
jmp 0x442907
and dword [ebp - 0x12e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19ec]
inc eax
mov dword [ebp - 0x12f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12f0]
mov dword [ebp + eax - 0x19ec], ecx
push 2
lea ecx, [ebp - 0x1348]
call fcn.00401484
push 2
lea ecx, [ebp - 0x1348]
call fcn.00401484
cmp dword [eax], 0x2e428464
jle 0x44295c
mov dword [ebp - 0x718], 1
jmp 0x442963
and dword [ebp - 0x718], 0
cmp dword [ebp - 0x718], 0
ja 0x442978
mov dword [ebp - 0xf64], 1
jmp 0x44297f
and dword [ebp - 0xf64], 0
cmp dword [ebp - 0xf64], 0
jae 0x442994
mov dword [ebp - 0x720], 1
jmp 0x44299b
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x12f8], eax
lea ecx, [ebp - 0x1348]
call fcn.00411478
lea ecx, [ebp - 0x1450]
call fcn.00411478
mov dword [ebp - 0x1814], 0
mov dword [ebp - 0xec], 0xfffffffc
mov dword [ebp - 0x1d4], 0x10e5e534
mov dword [ebp - 0x530], 0xfffffff6
mov dword [ebp - 0x1300], 1
mov dword [ebp - 0x181c], 1
mov dword [ebp - 0x1824], 0x9b03be46
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x182c], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1834], eax
imul eax, dword [ebp - 0xec], 0
cmp eax, 0x348
jne 0x442a35
mov dword [ebp - 0xf6c], 1
jmp 0x442a3c
and dword [ebp - 0xf6c], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0xf6c], eax
jne 0x442a56
mov dword [ebp - 0x728], 1
jmp 0x442a5d
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x1d4]
jle 0x442a83
mov dword [ebp - 0xf74], 1
jmp 0x442a8a
and dword [ebp - 0xf74], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0xf74], eax
jg 0x442aa4
mov dword [ebp - 0x730], 1
jmp 0x442aab
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x48a2b8ea
jge 0x442ac3
mov dword [ebp - 0xf7c], 1
jmp 0x442aca
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xf7c]
jne 0x442ae4
mov dword [ebp - 0x738], 1
jmp 0x442aeb
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x738]
test eax, eax
je 0x442b11
cmp dword [ebp - 0x1d4], 0
je 0x442b11
mov dword [ebp - 0xf84], 1
jmp 0x442b18
and dword [ebp - 0xf84], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xf84], eax
jne 0x442b32
mov dword [ebp - 0x740], 1
jmp 0x442b39
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 1
jg 0x442b54
cmp dword [ebp - 0xec], 0
jne 0x442b54
and dword [ebp - 0xf8c], 0
jmp 0x442b5e
mov dword [ebp - 0xf8c], 1
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0xf8c]
cmp eax, dword [ebp - 0xec]
jl 0x442b7f
mov dword [ebp - 0x748], 1
jmp 0x442b86
and dword [ebp - 0x748], 0
cmp dword [ebp - 0x748], 0xffffffff
je 0x442b9b
mov dword [ebp - 0xf94], 1
jmp 0x442ba2
and dword [ebp - 0xf94], 0
mov eax, dword [ebp - 0xf94]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x1300]
cmp dword [ebp - 0x530], eax
jg 0x442bc5
cmp dword [ebp - 0x1d4], 0
je 0x442bd1
mov dword [ebp - 0x530], 0
jmp 0x442c4e
mov dword [ebp - 0x183c], 8
mov dword [ebp - 0x1844], 0
mov dword [ebp - 0x750], 3
mov dword [ebp - 0x474], 0
jmp 0x442c08
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 3
jge 0x442c24
mov eax, dword [ebp - 0x474]
mov dword [ebp + eax*4 - 0x1d9c], 0x6a67606e
jmp 0x442bfb
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
mov byte [ebp - 0x17f], 0
movzx eax, byte [ebp - 0x17f]
test eax, eax
je 0x442c4e
push 0xd0f
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x184c], 0xee28fdeb
mov dword [ebp - 0x14e8], 0x5bb2c213
mov dword [ebp - 0x14e4], 0x5bb2c213
mov dword [ebp - 0x14e0], 0x5bb2c213
mov dword [ebp - 0x14dc], 0x5bb2c213
mov dword [ebp - 0x1854], 0x5010f7a7
mov dword [ebp - 0x185c], 0x443ac46d
mov dword [ebp - 0xfbc], 0
mov dword [ebp - 0x1308], 0xffffffff
mov dword [ebp - 0x1864], 0x34bdac84
mov dword [ebp - 0x186c], 0x96753f3a
mov dword [ebp - 0x1874], 0x1ae9a07b
mov dword [ebp - 0x187c], 1
mov dword [ebp - 0x5d0], 3
mov dword [ebp - 0xa0], 0
jmp 0x442cf3
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x442d0f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x1884], 9
jmp 0x442ce6
mov dword [ebp - 0xa0], 0
jmp 0x442d28
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x442d44
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x14a0], 0xffffffff
jmp 0x442d1b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x14e8], 0
je 0x442f15
mov dword [ebp - 0x188c], 1
mov dword [ebp - 0x1894], 0xfbd6c3f0
mov dword [ebp - 0x1310], 0x1c3a23fe
mov dword [ebp - 0x189c], 0x52d0da0b
push 2
lea ecx, [ebp - 0x19fc]
call fcn.004113a6
mov dword [ebp - 0xfa4], 0xf34ffdea
mov dword [ebp - 0x1318], 0
mov dword [ebp - 0x360], 0
jmp 0x442dba
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 2
jge 0x442ddc
push dword [ebp - 0x360]
lea ecx, [ebp - 0x19fc]
call fcn.00401484
mov dword [eax], 0xd95da228
jmp 0x442dad
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x14e8]
cmp dword [ebp - 0x1308], eax
jle 0x442dfd
mov dword [ebp - 0xf9c], 1
jmp 0x442e04
and dword [ebp - 0xf9c], 0
mov eax, dword [ebp - 0xfa4]
cmp dword [ebp - 0xf9c], eax
jg 0x442e1e
mov dword [ebp - 0x760], 1
jmp 0x442e25
and dword [ebp - 0x760], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14a0]
sub eax, 0x6492a415
cmp dword [ebp - 0x1310], eax
jle 0x442e4b
mov dword [ebp - 0x758], 1
jmp 0x442e52
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
sub eax, dword [ebp - 0xfa4]
jne 0x442e72
cmp dword [ebp - 0xfbc], 0
jne 0x442e72
and dword [ebp - 0xfac], 0
jmp 0x442e7c
mov dword [ebp - 0xfac], 1
mov eax, dword [ebp - 0x760]
cmp eax, dword [ebp - 0xfac]
jle 0x442e96
mov dword [ebp - 0x768], 1
jmp 0x442e9d
and dword [ebp - 0x768], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14a0]
cmp dword [ebp - 0x768], eax
jg 0x442ebe
mov dword [ebp - 0xfb4], 1
jmp 0x442ec5
and dword [ebp - 0xfb4], 0
mov eax, dword [ebp - 0x5d0]
dec eax
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x5d0]
cmp eax, dword [ebp - 0xfb4]
jge 0x442ef5
cmp dword [ebp - 0x1318], 0
je 0x442ef5
mov dword [ebp - 0x770], 1
jmp 0x442efc
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0xfbc], eax
lea ecx, [ebp - 0x19fc]
call fcn.00411478
jmp 0x442f59
mov byte [ebp - 0x1c5], 0
movzx eax, byte [ebp - 0x1c5]
test eax, eax
je 0x442f3d
push 0
push 0
push 0x1969
push 0x8e0
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
mov byte [ebp - 0x181], 0
movzx eax, byte [ebp - 0x181]
test eax, eax
je 0x442f59
push 0
push 0
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
mov dword [ebp - 0x18a4], 3
mov dword [ebp - 0x70], 0xffffffff
push 1
lea ecx, [ebp - 0x1368]
call fcn.004113a6
mov dword [ebp - 0x41c], 0
jmp 0x442f90
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 1
jge 0x442faf
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x1368]
call fcn.00401484
and dword [eax], 0
jmp 0x442f83
mov dword [ebp - 0x70], 0xfffffffa
jmp 0x442fbf
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jge 0x443231
mov dword [ebp - 0x1514], 0x69f4288a
mov dword [ebp - 0x1510], 0x69f4288a
mov dword [ebp - 0x150c], 0x69f4288a
mov dword [ebp - 0x1508], 0x69f4288a
lea ecx, [ebp - 0x515]
call fcn.00411494
push eax
lea eax, [ebp - 0x1504]
push eax
lea eax, [ebp - 0x1514]
push eax
lea ecx, [ebp - 0x1d34]
call fcn.00411497
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1358]
call fcn.00411452
push 1
lea ecx, [ebp - 0x1038]
call fcn.004113a6
mov dword [ebp - 0xfcc], 0x39f5fa31
mov dword [ebp - 0x368], 0
jmp 0x443056
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x443075
push dword [ebp - 0x368]
lea ecx, [ebp - 0x1038]
call fcn.00401484
or dword [eax], 0xffffffff
jmp 0x443049
mov byte [ebp - 0x1af], 0
movzx eax, byte [ebp - 0x1af]
test eax, eax
je 0x44308f
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0
lea ecx, [ebp - 0x1038]
call fcn.00401484
mov dword [eax], 3
jmp 0x4430c8
push 0
lea ecx, [ebp - 0x1038]
call fcn.00401484
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x778]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1038]
call fcn.00401484
cmp dword [eax], 0
jl 0x443216
mov dword [ebp - 0x234], 0xc93ee327
mov dword [ebp - 0xc1c], 0
mov dword [ebp - 0x1320], 0
mov dword [ebp - 0x234], 0
jmp 0x443115
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jg 0x443141
mov byte [ebp - 0x183], 0
movzx eax, byte [ebp - 0x183]
test eax, eax
je 0x44313f
push 0
push 0x659
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
jmp 0x443108
push 0
lea ecx, [ebp - 0x1038]
call fcn.00401484
push dword [eax]
lea ecx, [ebp - 0x1358]
call fcn.00401484
cmp dword [eax], 0
jne 0x44316d
push 1
lea ecx, [ebp - 0x1358]
call fcn.00401484
push 0
lea ecx, [ebp - 0x1038]
call fcn.00401484
push 0
lea ecx, [ebp - 0x1358]
call fcn.00401484
cmp dword [eax], 0
jne 0x4431b4
push 0
lea ecx, [ebp - 0x1038]
call fcn.00401484
push dword [eax]
lea ecx, [ebp - 0x1358]
call fcn.00401484
cmp dword [eax], 0
jne 0x4431b4
and dword [ebp - 0xfc4], 0
jmp 0x4431be
mov dword [ebp - 0xfc4], 1
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0xfcc], eax
mov eax, dword [ebp - 0xfcc]
sub eax, 0x110e6b6c
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x16
jg 0x4431f0
mov dword [ebp - 0x784], 1
jmp 0x4431f7
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0xc1c]
neg eax
mov dword [ebp - 0x1320], eax
jmp 0x4430a4
lea ecx, [ebp - 0x1038]
call fcn.00411478
lea ecx, [ebp - 0x1358]
call fcn.00411478
jmp 0x442fb8
mov dword [ebp - 0x70], 0
jmp 0x443241
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x1b
jg 0x4433cc
mov dword [ebp - 0x1dc], 0x82e58099
mov dword [ebp - 0x1400], 0xb1c5adf
mov dword [ebp - 0x1dc], 0
jmp 0x443278
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jg 0x4433c7
mov byte [ebp - 0x1ed], 0
movzx eax, byte [ebp - 0x1ed]
test eax, eax
je 0x4432ab
push 0x168c
push 0
push 0x15e7
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x1368]
call fcn.00401484
cmp dword [eax], 1
jne 0x4432cd
mov dword [ebp - 0x78c], 1
jmp 0x4432d4
and dword [ebp - 0x78c], 0
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x1368]
call fcn.00401484
mov ecx, dword [ebp - 0x78c]
cmp ecx, dword [eax]
jg 0x4432fb
mov dword [ebp - 0xc14], 1
jmp 0x443302
and dword [ebp - 0xc14], 0
imul eax, dword [ebp - 0xc14], 0xb6ba
test eax, eax
jne 0x443320
push 4
pop eax
test eax, eax
jne 0x443320
and dword [ebp - 0x794], 0
jmp 0x44332a
mov dword [ebp - 0x794], 1
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x794]
cmp eax, 0xfffffffc
je 0x443344
mov dword [ebp - 0xc08], 1
jmp 0x44334b
and dword [ebp - 0xc08], 0
push 0
lea ecx, [ebp - 0x1368]
call fcn.00401484
mov ecx, dword [ebp - 0xc08]
cmp ecx, dword [eax]
je 0x44336e
mov dword [ebp - 0x1328], 1
jmp 0x443375
and dword [ebp - 0x1328], 0
cmp dword [ebp - 0x70], 0
jne 0x44338d
cmp dword [ebp - 0x1dc], 0
jne 0x44338d
and dword [ebp - 0x79c], 0
jmp 0x443397
mov dword [ebp - 0x79c], 1
cmp dword [ebp - 0x79c], 0xa9c1c73b
jb 0x4433af
mov dword [ebp - 0xe30], 1
jmp 0x4433b6
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0xe30]
mov dword [ebp - 0x1400], eax
jmp 0x44326b
jmp 0x44323a
lea ecx, [ebp - 0x1368]
call fcn.00411478
push 1
lea ecx, [ebp - 0x1a4c]
call fcn.004113a6
mov dword [ebp - 0x18ac], 0x36173948
mov dword [ebp - 0x18b4], 6
push 1
lea ecx, [ebp - 0x1a1c]
call fcn.004113a6
mov dword [ebp - 0x18bc], 0x703c5764
push 3
lea ecx, [ebp - 0x1a0c]
call fcn.004113a6
mov dword [ebp - 0x18c4], 0xfffffffa
mov dword [ebp - 0x18cc], 0x36a5b5cf
mov dword [ebp - 0x18d4], 0x26cdee94
mov dword [ebp - 0x1408], 1
mov dword [ebp - 0x38], 0
jmp 0x443454
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x443470
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1a1c]
call fcn.00401484
mov dword [eax], 0x28ea388
jmp 0x44344d
mov dword [ebp - 0x38], 0
jmp 0x443480
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x443499
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1a0c]
call fcn.00401484
and dword [eax], 0
jmp 0x443479
mov dword [ebp - 0x38], 0
jmp 0x4434a9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4434bf
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1d78], 0
jmp 0x4434a2
mov dword [ebp - 0x1408], 1
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x4434e5
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
lea ecx, [ebp - 0x1a0c]
call fcn.00411478
lea ecx, [ebp - 0x1a1c]
call fcn.00411478
mov dword [ebp - 0x18dc], 5
mov dword [ebp - 0x18e4], 0
push 1
lea ecx, [ebp - 0x1378]
call fcn.004113a6
mov dword [ebp - 0x68], 0x53d8da8e
mov dword [ebp - 0x1410], 0x63ab1943
mov dword [ebp - 0x4a4], 0
jmp 0x443546
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 1
jge 0x443568
push dword [ebp - 0x4a4]
lea ecx, [ebp - 0x1378]
call fcn.00401484
mov dword [eax], 0x5d6c05ba
jmp 0x443539
mov dword [ebp - 0x68], 0
jmp 0x443578
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x4435a2
push dword [ebp - 0x68]
lea ecx, [ebp - 0x1378]
call fcn.00401484
mov esi, eax
push dword [ebp - 0x68]
lea ecx, [ebp - 0x1378]
call fcn.00401484
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x443571
mov dword [ebp - 0x68], 0xffffffe6
jmp 0x4435b2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xb
jl 0x443769
mov dword [ebp - 0x1e4], 0x2121f90e
mov dword [ebp - 0x1e4], 0
jmp 0x4435df
cmp dword [ebp - 0x1e4], 0
jl 0x443764
mov dword [ebp - 0xf4], 0x754320e3
mov dword [ebp - 0x119c], 1
mov dword [ebp - 0x370], 0
jmp 0x443619
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x443635
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x1790], 6
jmp 0x44360c
mov dword [ebp - 0xf4], 0
jmp 0x44364e
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x443665
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x1410], eax
jmp 0x443641
mov dword [ebp - 0xf4], 0
jmp 0x44367e
cmp dword [ebp - 0xf4], 0
jl 0x44375f
mov dword [ebp - 0x7a4], 5
mov dword [ebp - 0x424], 0
jmp 0x4436ae
jmp 0x4435d2
jmp 0x4435ab
lea ecx, [ebp - 0x1378]
call fcn.00411478
mov dword [ebp - 0xe80], 0
mov dword [ebp - 0x25c], 0x20e83c77
mov dword [ebp - 0x378], 0
jmp 0x4437a1
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 1
jge 0x4437bd
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x7ac], 8
jmp 0x443794
mov dword [ebp - 0x25c], 0
jmp 0x4437d6
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x4437f2
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x7ac], 0
jmp 0x4437c9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7ac]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x11e0], 0xfffffffc
mov dword [ebp - 0x18ec], 0x4adca1a1
mov dword [ebp - 0x540], 0
push 3
lea ecx, [ebp - 0x1a2c]
call fcn.004113a6
mov dword [ebp - 0x5a0], 1
mov dword [ebp - 0x1130], 0
mov dword [ebp - 0x1138], 1
mov dword [ebp - 0xa8], 0
jmp 0x443867
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x443883
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x18f4], 0xfffffff6
jmp 0x44385a
mov dword [ebp - 0xa8], 0
jmp 0x44389c
cmp dword [ebp - 0xa8], 3
jge 0x4438be
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x1a2c]
call fcn.00401484
mov dword [eax], 1
jmp 0x44388f
xor eax, eax
jne 0x4438d4
lea ecx, [ebp - 0x1a5c]
call fcn.00411478
lea ecx, [ebp - 0x1398]
call fcn.00411478
mov dword [ebp - 0x5b0], 0xd3f7bf4
mov dword [ebp - 0xf78], 0
push 4
lea ecx, [ebp - 0x148c]
call fcn.004113a6
mov dword [ebp - 0x95c], 0x986d6dbc
mov dword [ebp - 0x1248], 0xfffffffd
mov dword [ebp - 0x48], 0
jmp 0x445725
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x44573b
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1198], 0xfffffff9
jmp 0x44571e
mov dword [ebp - 0x48], 0
jmp 0x44574b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x445761
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x10a0], 0xab61
jmp 0x445744
mov dword [ebp - 0x48], 0
jmp 0x445771
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x44578d
push dword [ebp - 0x48]
lea ecx, [ebp - 0x148c]
call fcn.00401484
mov dword [eax], 0xa9dade66
jmp 0x44576a
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0xe98], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe98]
mov dword [ebp + eax - 0x1198], ecx
cmp dword [ebp - 0xe98], 0
je 0x4457ca
cmp dword [ebp - 0x5b0], 0
je 0x4457ca
mov dword [ebp - 0x94c], 1
jmp 0x4457d1
and dword [ebp - 0x94c], 0
cmp dword [ebp - 0x5b0], 0
jne 0x44581b
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x10a0], 0xfff8
mov dword [ebp - 0x944], eax
push 1
lea ecx, [ebp - 0x148c]
call fcn.00401484
mov ecx, dword [ebp - 0x944]
mov dword [eax], ecx
cmp dword [ebp - 0x944], 0x8bc0
jge 0x44581b
and dword [ebp - 0xce0], 0
jmp 0x445825
mov dword [ebp - 0xce0], 1
imul eax, dword [ebp - 0xce0], 0x2076
test eax, eax
je 0x445851
push 2
lea ecx, [ebp - 0x148c]
call fcn.00401484
cmp dword [eax], 0
je 0x445851
mov dword [ebp - 0x954], 1
jmp 0x445858
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0xf78]
add eax, dword [ebp - 0x954]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x10a0]
cmp eax, 0x473e
jge 0x445890
mov dword [ebp - 0xce8], 1
jmp 0x445897
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0x95c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10a0]
cmp dword [ebp - 0x95c], eax
jle 0x4458c4
mov dword [ebp - 0xea0], 1
jmp 0x4458cb
and dword [ebp - 0xea0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10a0]
imul eax, dword [ebp - 0xea0]
mov dword [ebp - 0x1248], eax
lea ecx, [ebp - 0x148c]
call fcn.00411478
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x560], 0x4320e32c
mov dword [ebp - 0x5f0], 0x3bd6525
mov dword [ebp - 0x2c4], 0xfffffff7
mov dword [ebp - 0x134], 0x491b
mov dword [ebp - 0x11a0], 0xce68266c
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x124], 0
je 0x445980
mov dword [ebp - 0x5f0], 0x23a266d2
cmp dword [ebp - 0x5f0], 0
je 0x445980
mov dword [ebp - 0x964], 1
jmp 0x445987
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x1c1c], eax
imul eax, dword [ebp - 0x964], 0
cmp eax, dword [ebp - 0x158]
jl 0x4459ae
mov dword [ebp - 0xcf0], 1
jmp 0x4459b5
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0xcf0]
jl 0x4459cf
mov dword [ebp - 0x96c], 1
jmp 0x4459d6
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x96c]
sub eax, dword [ebp - 0x560]
je 0x4459eb
cmp dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2e4], eax
je 0x445a0b
cmp dword [ebp - 0x124], 0
jne 0x445a0b
and dword [ebp - 0xfe0], 0
jmp 0x445a15
mov dword [ebp - 0xfe0], 1
mov eax, dword [ebp - 0xfe0]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x134], 3
ja 0x445da0
mov dword [ebp - 0x11c], 0x253d9751
mov dword [ebp - 0x124], 0xfffffff4
jmp 0x445a51
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x1c
jle 0x445d92
mov dword [ebp - 0xd00], 0xfffffff6
mov dword [ebp - 0x3c0], 0
jmp 0x445a81
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 1
jge 0x445a9d
mov eax, dword [ebp - 0x3c0]
mov dword [ebp + eax*4 - 0x12c], 5
jmp 0x445a74
mov dword [ebp - 0x158], 0xffffffff
jmp 0x445ab6
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x39
jle 0x445b09
mov dword [ebp - 0x134], 0
jmp 0x445ad8
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jg 0x445af5
mov eax, dword [ebp - 0x134]
cmp dword [ebp + eax*4 - 0x12c], 0
je 0x445af3
jmp 0x445af5
jmp 0x445acb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0
je 0x445b07
jmp 0x445b09
jmp 0x445aa9
imul eax, dword [ebp - 0x11c], 0xf725
test eax, eax
jne 0x445b25
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11c]
cmp dword [ebp + eax - 0x12c], ecx
je 0x445b46
mov dword [ebp - 0x974], 1
jmp 0x445b4d
and dword [ebp - 0x974], 0
cmp dword [ebp - 0x974], 1
je 0x445b62
mov dword [ebp - 0xcf8], 1
jmp 0x445b69
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xcf8]
neg eax
jne 0x445b7f
mov dword [ebp - 0x97c], 1
jmp 0x445b86
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x11a0]
cmp dword [ebp - 0x2e4], eax
jl 0x445bac
mov dword [ebp - 0xea8], 1
jmp 0x445bb3
and dword [ebp - 0xea8], 0
cmp dword [ebp - 0xea8], 0xb224
jge 0x445bcb
mov dword [ebp - 0x984], 1
jmp 0x445bd2
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0xd00], eax
imul eax, dword [ebp - 0xd00], 9
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x12c]
jl 0x445c00
mov dword [ebp - 0x98c], 1
jmp 0x445c07
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x98c]
imul eax, dword [ebp - 0x11c]
cmp eax, 0xfffe
jb 0x445c2d
mov dword [ebp - 0x1250], 1
jmp 0x445c34
and dword [ebp - 0x1250], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1c24], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x1c2c], eax
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x11c], eax
jge 0x445c6d
mov dword [ebp - 0xf80], 1
jmp 0x445c74
and dword [ebp - 0xf80], 0
mov eax, dword [ebp - 0xf80]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x2c4], eax
jl 0x445c9a
mov dword [ebp - 0x994], 1
jmp 0x445ca1
and dword [ebp - 0x994], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
cmp eax, dword [ebp - 0x994]
jge 0x445cc2
mov dword [ebp - 0xd08], 1
jmp 0x445cc9
and dword [ebp - 0xd08], 0
cmp dword [ebp - 0xd08], 0xf09d
jge 0x445ce1
mov dword [ebp - 0x99c], 1
jmp 0x445ce8
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x99c], eax
jge 0x445d02
mov dword [ebp - 0xeb0], 1
jmp 0x445d09
and dword [ebp - 0xeb0], 0
cmp dword [ebp - 0xeb0], 0x3e9becc4
jle 0x445d21
mov dword [ebp - 0x11a8], 1
jmp 0x445d28
and dword [ebp - 0x11a8], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1c34], eax
imul eax, dword [ebp - 0x11c], 0xdb9c
cmp eax, 1
jg 0x445d4f
mov dword [ebp - 0x9a4], 1
jmp 0x445d56
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x9a4], eax
jg 0x445d70
mov dword [ebp - 0xd10], 1
jmp 0x445d77
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0xd10]
shl eax, 2
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x12c], eax
jmp 0x445a44
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x5f0], eax
jmp 0x445db8
mov byte [ebp - 0x199], 0
movzx eax, byte [ebp - 0x199]
test eax, eax
je 0x445db8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x13c], 0xcea5d6c0
mov dword [ebp - 0x13c], 5
jmp 0x445ddb
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x445e5d
mov dword [ebp - 0x44c], 8
mov dword [ebp - 0x44c], 0
jmp 0x445e07
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0xfffffffc
jge 0x445e58
mov dword [ebp - 0x3c8], 0
jmp 0x445e29
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 1
jge 0x445e45
mov eax, dword [ebp - 0x3c8]
mov dword [ebp + eax*4 - 0x1258], 0x4bf8
jmp 0x445e1c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1258], 9
jmp 0x445dfa
jmp 0x445dce
mov dword [ebp - 0x13c], 0
jmp 0x445e76
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x1c
jg 0x445eac
mov byte [ebp - 0x1bb], 0
movzx eax, byte [ebp - 0x1bb]
test eax, eax
je 0x445eaa
push 0x2160
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
jmp 0x445e69
mov dword [ebp - 0x74], 0x28ea388
mov dword [ebp - 0x264], 0xdc8dfba2
mov dword [ebp - 0xec0], 0x89e022a5
mov dword [ebp - 0x11b8], 0xb23f
mov dword [ebp - 0x4cc], 0
jmp 0x445eea
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 1
jge 0x445f06
mov eax, dword [ebp - 0x4cc]
mov dword [ebp + eax*4 - 0x220], 0xffffffff
jmp 0x445edd
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
je 0x445f34
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x220], 0
je 0x445f34
mov dword [ebp - 0x9ac], 1
jmp 0x445f3b
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9ac], eax
jle 0x445f52
mov dword [ebp - 0x105c], 1
jmp 0x445f59
and dword [ebp - 0x105c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
cmp dword [ebp - 0x105c], eax
jle 0x445f81
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x445f81
mov dword [ebp - 0x9b4], 1
jmp 0x445f88
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9b4], eax
jl 0x445f9f
mov dword [ebp - 0xd18], 1
jmp 0x445fa6
and dword [ebp - 0xd18], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xd18], eax
jg 0x445fbd
mov dword [ebp - 0x9bc], 1
jmp 0x445fc4
and dword [ebp - 0x9bc], 0
cmp dword [ebp - 0x9bc], 0x220985a9
jle 0x445fdc
mov dword [ebp - 0xeb8], 1
jmp 0x445fe3
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0xeb8]
neg eax
cmp eax, 7
jbe 0x445ffc
mov dword [ebp - 0x9c4], 1
jmp 0x446003
and dword [ebp - 0x9c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
cmp eax, dword [ebp - 0x9c4]
jne 0x44602a
cmp dword [ebp - 0x264], 0
jne 0x44602a
and dword [ebp - 0xd20], 0
jmp 0x446034
mov dword [ebp - 0xd20], 1
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0xec0], eax
mov dword [ebp - 0x74], 0
jmp 0x446050
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jle 0x4463af
mov dword [ebp - 0x304], 0x6a6c
push 4
lea ecx, [ebp - 0x145c]
call fcn.004113a6
mov dword [ebp - 0x1268], 0xd4b3beb
mov dword [ebp - 0xb8], 0
jmp 0x446094
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x4460b0
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1474], 0xffffffff
jmp 0x446087
mov dword [ebp - 0xb8], 0
jmp 0x4460c9
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x4460eb
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x145c]
call fcn.00401484
mov dword [eax], 0xbecc
jmp 0x4460bc
cmp dword [ebp - 0x304], 0x3e731e7b
jne 0x446103
mov dword [ebp - 0x568], 1
jmp 0x44610a
and dword [ebp - 0x568], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x568]
mov dword [ebp + eax - 0x1474], ecx
cmp dword [ebp - 0x568], 0
jne 0x446131
mov dword [ebp - 0x9cc], 1
jmp 0x446138
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x9cc], 0x4ccb090a
jg 0x446150
mov dword [ebp - 0xf88], 1
jmp 0x446157
and dword [ebp - 0xf88], 0
mov eax, dword [ebp - 0x304]
add eax, dword [ebp - 0xf88]
cmp eax, 0xffff
jae 0x446176
mov dword [ebp - 0x9d4], 1
jmp 0x44617d
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x264]
imul ecx, dword [ebp - 0x304]
add eax, ecx
cmp eax, dword [ebp - 0x9d4]
jge 0x4461a6
mov dword [ebp - 0xd28], 1
jmp 0x4461ad
and dword [ebp - 0xd28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
add eax, dword [ebp - 0xd28]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x9dc], eax
push 3
lea ecx, [ebp - 0x145c]
call fcn.00401484
mov ecx, dword [ebp - 0x9dc]
mov dword [eax], ecx
cmp dword [ebp - 0x9dc], 1
ja 0x4461fc
mov dword [ebp - 0x11b0], 1
jmp 0x446203
and dword [ebp - 0x11b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
sub eax, 0xffff
je 0x446234
mov byte [ebp - 0x19b], 0
movzx eax, byte [ebp - 0x19b]
test eax, eax
je 0x44622f
call dword [sym.imp.GDI32.dll_GdiFlush]
jmp 0x446389
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x11c0], 7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1474], 0
je 0x44626d
cmp dword [ebp - 0x1ec], 0
je 0x44626d
mov dword [ebp - 0xd30], 1
jmp 0x446274
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0x1ec]
imul eax, dword [ebp - 0xec0]
cmp eax, 0x5e39
jg 0x446294
mov dword [ebp - 0x9e4], 1
jmp 0x44629b
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x9e4], eax
jle 0x4462be
cmp dword [ebp - 0x1ec], 0
je 0x4462be
mov dword [ebp - 0x1260], 1
jmp 0x4462c5
and dword [ebp - 0x1260], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1474]
mov dword [ebp - 0x1c44], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1c4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
mov dword [ebp - 0x1c54], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1c5c], eax
mov eax, dword [ebp - 0x74]
shl eax, 3
sub eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x11b8]
je 0x44632c
mov dword [ebp - 0x9ec], 1
jmp 0x446333
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0xd30]
add eax, dword [ebp - 0x9ec]
mov dword [ebp - 0xfec], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xfec]
mov dword [ebp + eax - 0x1474], ecx
cmp dword [ebp - 0xfec], 0
jne 0x446373
cmp dword [ebp - 0x1268], 0
jne 0x446373
and dword [ebp - 0x9f4], 0
jmp 0x44637d
mov dword [ebp - 0x9f4], 1
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x11c0], eax
cmp dword [ebp - 0x304], 0
je 0x44639f
lea ecx, [ebp - 0x145c]
call fcn.00411478
jmp 0x4463af
lea ecx, [ebp - 0x145c]
call fcn.00411478
jmp 0x446049
mov dword [ebp - 0x504], 0xd3f7bf4
mov dword [ebp - 0x1270], 0xa9d19ac1
mov dword [ebp - 0xd38], 0x2c9cc141
push 1
lea ecx, [ebp - 0x1648]
call fcn.004113a6
mov dword [ebp - 0x5b8], 4
mov dword [ebp - 0x288], 0xfffffff6
push 1
lea ecx, [ebp - 0x1708]
call fcn.004113a6
mov dword [ebp - 0x30], 0
jmp 0x44640b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x446427
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1648]
call fcn.00401484
mov dword [eax], 0x570a50b5
jmp 0x446404
mov dword [ebp - 0x30], 0
jmp 0x446437
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x44644d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x14f0], 0xbffbefa5
jmp 0x446430
mov dword [ebp - 0x30], 0
jmp 0x44645d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x446479
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1708]
call fcn.00401484
mov dword [eax], 0xcd1b7e2
jmp 0x446456
mov eax, dword [ebp - 0x1270]
mov dword [ebp - 0xd38], eax
cmp dword [ebp - 0xd38], 0
je 0x44655e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14f0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x14f0], eax
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xffff
ja 0x44655e
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x5b8], eax
je 0x4464e4
mov dword [ebp - 0x9fc], 1
jmp 0x4464eb
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0x574b6046
jne 0x44650f
mov dword [ebp - 0xec8], 1
jmp 0x446516
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0xec8], eax
jge 0x446530
mov dword [ebp - 0x570], 1
jmp 0x446537
and dword [ebp - 0x570], 0
push 0
lea ecx, [ebp - 0x1648]
call fcn.00401484
mov ecx, dword [ebp - 0x570]
mov dword [eax], ecx
cmp dword [ebp - 0x570], 0
je 0x44655e
and dword [ebp - 0xa04], 0
jmp 0x446568
mov dword [ebp - 0xa04], 1
mov eax, dword [ebp - 0xa04]
inc eax
imul eax, eax, 0x74a7
imul esi, eax, 0xffffffff
push 0
lea ecx, [ebp - 0x1708]
call fcn.00401484
mov dword [eax], esi
lea ecx, [ebp - 0x1708]
call fcn.00411478
lea ecx, [ebp - 0x1648]
call fcn.00411478
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0x290], 3
mov dword [ebp - 0x88], 5
and dword [ebp - 0x158c], 0
and dword [ebp - 0x1588], 0
and dword [ebp - 0x1584], 0
and dword [ebp - 0x1580], 0
lea ecx, [ebp - 0x5fb]
call fcn.00411494
push eax
lea eax, [ebp - 0x157c]
push eax
lea eax, [ebp - 0x158c]
push eax
lea ecx, [ebp - 0x1d54]
call fcn.00411497
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10e4]
call fcn.00411452
mov dword [ebp - 0x3d0], 0
jmp 0x446625
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 2
jge 0x446641
mov eax, dword [ebp - 0x3d0]
mov dword [ebp + eax*4 - 0x14b0], 0xffffffff
jmp 0x446618
xor eax, eax
jne 0x446657
cmp dword [ebp - 0x88], 0
jne 0x446657
and dword [ebp - 0xd40], 0
jmp 0x446661
mov dword [ebp - 0xd40], 1
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0xd40], eax
jne 0x446787
cmp dword [ebp - 0x290], 0
jne 0x44668e
cmp dword [ebp - 0x290], 0
jne 0x44668e
and dword [ebp - 0xa0c], 0
jmp 0x446698
mov dword [ebp - 0xa0c], 1
push 0
lea ecx, [ebp - 0x10e4]
call fcn.00401484
mov ecx, dword [ebp - 0xa0c]
cmp ecx, dword [eax]
jge 0x4466bb
mov dword [ebp - 0xf90], 1
jmp 0x4466c2
and dword [ebp - 0xf90], 0
cmp dword [ebp - 0xf90], 2
jb 0x4466d7
mov dword [ebp - 0xa14], 1
jmp 0x4466de
and dword [ebp - 0xa14], 0
cmp dword [ebp - 0xa14], 0x5116
jge 0x4466f6
mov dword [ebp - 0xd48], 1
jmp 0x4466fd
and dword [ebp - 0xd48], 0
push 1
lea ecx, [ebp - 0x10e4]
call fcn.00401484
mov ecx, dword [ebp - 0xd48]
cmp ecx, dword [eax]
jg 0x446720
mov dword [ebp - 0xa1c], 1
jmp 0x446727
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0xa1c], 0xfffffffb
jne 0x44673c
mov dword [ebp - 0x5e0], 1
jmp 0x446743
and dword [ebp - 0x5e0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5e0]
mov dword [ebp + eax - 0x14b0], ecx
cmp dword [ebp - 0x5e0], 0
jne 0x44676c
push 3
lea ecx, [ebp - 0x10e4]
call fcn.00401484
mov eax, 0xa2ca335c
test eax, eax
jne 0x44677e
cmp dword [ebp - 0x290], 0
je 0x446787
and dword [ebp - 0xed0], 0
jmp 0x446791
mov dword [ebp - 0xed0], 1
push 0
lea ecx, [ebp - 0x10e4]
call fcn.00401484
mov ecx, dword [ebp - 0xed0]
cmp ecx, dword [eax]
jle 0x4467b4
mov dword [ebp - 0xa24], 1
jmp 0x4467bb
and dword [ebp - 0xa24], 0
mov esi, dword [ebp - 0x290]
push 0
lea ecx, [ebp - 0x10e4]
call fcn.00401484
mov ecx, dword [ebp - 0xa24]
add ecx, dword [eax]
cmp esi, ecx
jle 0x4467e6
mov dword [ebp - 0xd50], 1
jmp 0x4467ed
and dword [ebp - 0xd50], 0
cmp dword [ebp - 0xd50], 0
jbe 0x446905
mov dword [ebp - 0x3d8], 1
mov dword [ebp - 0x1c64], 0
mov dword [ebp - 0x1c38], 0x6a218f0e
mov dword [ebp - 0x1b48], 0xfffffff8
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x1978], 5
mov dword [ebp - 0x454], 0
jmp 0x44684f
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 2
jge 0x44686b
mov eax, dword [ebp - 0x454]
mov dword [ebp + eax*4 - 0x14a8], 5
jmp 0x446842
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14a8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x14a8], eax
mov dword [ebp - 0x88], 0
jmp 0x44689f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x446903
mov dword [ebp - 0x3d8], 0
jmp 0x4468c1
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 3
jg 0x446901
mov dword [ebp - 0x298], 0
jmp 0x4468e3
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 2
jge 0x4468ff
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x14b0], 0x9ff7503a
jmp 0x4468d6
jmp 0x4468b4
jmp 0x446892
jmp 0x446941
mov dword [ebp - 0x11c8], 6
mov dword [ebp - 0x1278], 0x425a33ed
cmp dword [ebp - 0x11c8], 0xfffffff8
jle 0x44692e
mov dword [ebp - 0xa2c], 1
jmp 0x446935
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x1278], eax
mov dword [ebp - 0x88], 0
jmp 0x44695a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x21
jge 0x4469a0
mov byte [ebp - 0x215], 0
movzx eax, byte [ebp - 0x215]
test eax, eax
je 0x44697d
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 0x19d], 0
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x44699e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x44694d
lea ecx, [ebp - 0x10e4]
call fcn.00411478
mov dword [ebp - 0x34], 0x888a
mov dword [ebp - 0x1f4], 9
mov dword [ebp - 0x494], 0xd0043d4f
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0x5c0], 0xfff6
mov dword [ebp - 0x1288], 0x674d9070
mov dword [ebp - 0x578], 0xf40b36fe
mov dword [ebp - 0xd70], 1
mov dword [ebp - 0x15dc], 8
mov dword [ebp - 0x15d8], 8
mov dword [ebp - 0x15d4], 8
mov dword [ebp - 0x15d0], 8
lea ecx, [ebp - 0x5e9]
call fcn.00411494
push eax
lea eax, [ebp - 0x15cc]
push eax
lea eax, [ebp - 0x15dc]
push eax
lea ecx, [ebp - 0x1d6c]
call fcn.00411497
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1a6c]
call fcn.00411452
cmp dword [ebp - 0x34], 0
je 0x446a67
mov dword [ebp - 0x1024], 1
jmp 0x446a6e
and dword [ebp - 0x1024], 0
cmp dword [ebp - 0x34], 0xfffb
jbe 0x446a83
mov dword [ebp - 0xa34], 1
jmp 0x446a8a
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x1024]
cmp eax, dword [ebp - 0xa34]
jg 0x446aa4
mov dword [ebp - 0xd58], 1
jmp 0x446aab
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0xd58]
neg eax
cmp eax, dword [ebp - 0x34]
jne 0x446ac4
mov dword [ebp - 0xa3c], 1
jmp 0x446acb
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa3c], eax
jle 0x446ae2
mov dword [ebp - 0xed8], 1
jmp 0x446ae9
and dword [ebp - 0xed8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xed8], eax
jle 0x446b00
mov dword [ebp - 0xa44], 1
jmp 0x446b07
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0xa44]
cmp dword [ebp - 0x34], eax
je 0x446b21
mov dword [ebp - 0x11d0], 1
jmp 0x446b28
and dword [ebp - 0x11d0], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1744], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x17bc], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jl 0x446b5d
mov dword [ebp - 0xd60], 1
jmp 0x446b64
and dword [ebp - 0xd60], 0
cmp dword [ebp - 0xd60], 0xffffffff
jae 0x446b7c
cmp dword [ebp - 0x34], 0
jne 0x446b7c
and dword [ebp - 0x1280], 0
jmp 0x446b86
mov dword [ebp - 0x1280], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x17c4], eax
cmp dword [ebp - 0x494], 0
je 0x446bad
cmp dword [ebp - 0x494], 0
je 0x446bad
mov dword [ebp - 0xa4c], 1
jmp 0x446bb4
and dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 0xcb1743e6
jbe 0x446bcc
mov dword [ebp - 0xf98], 1
jmp 0x446bd3
and dword [ebp - 0xf98], 0
mov eax, dword [ebp - 0xf98]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa54], eax
jl 0x446bf6
mov dword [ebp - 0xd68], 1
jmp 0x446bfd
and dword [ebp - 0xd68], 0
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0xd68], eax
jg 0x446c17
mov dword [ebp - 0xa5c], 1
jmp 0x446c1e
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x494]
add eax, dword [ebp - 0xa5c]
add eax, dword [ebp - 0x1f4]
cmp eax, 0xffffffff
je 0x446c41
mov dword [ebp - 0x11d8], 1
jmp 0x446c48
and dword [ebp - 0x11d8], 0
cmp dword [ebp - 0x1288], 0x4605dd88
jg 0x446c60
mov dword [ebp - 0xee0], 1
jmp 0x446c67
and dword [ebp - 0xee0], 0
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
add eax, dword [ebp - 0xd70]
sub eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x1f4]
sub ecx, eax
je 0x446ca4
cmp dword [ebp - 0x578], 0
je 0x446ca4
mov dword [ebp - 0xa64], 1
jmp 0x446cab
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0xa64], eax
jle 0x446cce
cmp dword [ebp - 0xd70], 0
je 0x446cce
mov dword [ebp - 0xa6c], 1
jmp 0x446cd5
and dword [ebp - 0xa6c], 0
cmp dword [ebp - 0xa6c], 0xd4f9
jne 0x446ced
mov dword [ebp - 0xff8], 1
jmp 0x446cf4
and dword [ebp - 0xff8], 0
mov eax, dword [ebp - 0xff8]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xffffffff
jb 0x446d15