Function at 0x10044b04
Capabilities:
Get geographical location
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x534
push esi
push edi
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x38], 0
jmp 0x10044b29
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10044b3f
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x4c4], 0x2eac4530
jmp 0x10044b22
mov dword [ebp - 0x38], 0
jmp 0x10044b4f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10044b65
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x4f4], 0
jmp 0x10044b48
cmp dword [ebp - 0xb4], 0
je 0x10044b89
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4c4], 0
je 0x10044b89
mov dword [ebp - 0x228], 1
jmp 0x10044b90
and dword [ebp - 0x228], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0x4f4], ecx
mov dword [ebp - 0xb4], 0
jmp 0x10044bbc
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x10044bec
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x134], 0xfffffff6
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
je 0x10044bea
jmp 0x10044bec
jmp 0x10044baf
mov dword [ebp - 0xf8], 0x48261f9c
mov dword [ebp - 0xf8], 0xfffffffa
jmp 0x10044c0f
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffec
je 0x10044e1b
mov dword [ebp - 0x12c], 0xe1c97412
mov dword [ebp - 0x2c], 0
jmp 0x10044c36
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10044c4c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x358], 0x446df37d
jmp 0x10044c2f
mov dword [ebp - 0x2c], 0
jmp 0x10044c5c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10044c72
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x41c], 0xd4f2887c
jmp 0x10044c55
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x41c], 0
jmp 0x10044ca0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x41c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x41c], 1
jg 0x10044cc7
mov dword [ebp - 0x368], 8
cmp dword [ebp - 0x368], 0
je 0x10044cc5
jmp 0x10044cc7
jmp 0x10044c85
mov dword [ebp - 0x12c], 2
jmp 0x10044ce0
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x10044e16
mov dword [ebp - 0x114], 0
jmp 0x10044d06
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x10044d22
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x364], 3
jmp 0x10044cf9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x364], 0
jmp 0x10044d50
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x364]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x364], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x364], 1
jg 0x10044df7
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0xb0], 0
jmp 0x10044d87
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x10044df2
mov dword [ebp - 0xa8], 0x5b1b6fd4
mov eax, dword [ebp - 0xb0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x364]
mov eax, dword [ebp + eax*4 - 0x358]
mov dword [ebp + ecx*4 - 0x358], eax
mov dword [ebp - 0xa8], 0
jmp 0x10044dd4
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x10044df0
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x358], 0xdca27289
jmp 0x10044dc7
jmp 0x10044d7a
jmp 0x10044d35
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x358]
mov dword [ebp + ecx - 0x364], eax
jmp 0x10044cd3
jmp 0x10044c02
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x24], 0xa906
mov dword [ebp - 0x3f0], 0xfffffffd
mov dword [ebp - 0x498], 0
mov dword [ebp - 0xd8], 0
jmp 0x10044e56
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10044e72
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x124], 0xdfddae9
jmp 0x10044e49
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x10044e86
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
cmp dword [ebp - 0x14], 0
jne 0x10044e98
mov dword [ebp - 0x3d8], 1
jmp 0x10044e9f
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x14], 0
je 0x10044ef8
cmp dword [ebp - 0x14], 0
je 0x10044ebd
cmp dword [ebp - 0x24], 0
je 0x10044ebd
mov dword [ebp - 0x2b0], 1
jmp 0x10044ec4
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0x383c
jge 0x10044edc
mov dword [ebp - 0x28c], 1
jmp 0x10044ee3
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 0
je 0x10044ef8
mov dword [ebp - 0x164], 1
jmp 0x10044eff
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x164], eax
jle 0x10044f16
mov dword [ebp - 0x294], 1
jmp 0x10044f1d
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x294], eax
je 0x10044f34
mov dword [ebp - 0x16c], 1
jmp 0x10044f3b
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0xffffffff
jl 0x10044f50
mov dword [ebp - 0x29c], 1
jmp 0x10044f57
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x29c], eax
jg 0x10044f67
or eax, 0xffffffff
je 0x10044f7c
mov eax, 0xfff8
test eax, eax
je 0x10044f7c
mov dword [ebp - 0x3e0], 1
jmp 0x10044f83
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
je 0x1004525b
mov dword [ebp - 0x42c], 0xffbe6269
mov dword [ebp - 0x428], 0xffbe6269
mov dword [ebp - 0x424], 0xffbe6269
mov dword [ebp - 0x420], 0xffbe6269
mov dword [ebp - 0x24], 0
jmp 0x10044fc7
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10045259
mov dword [ebp - 0x3f4], 0x20a048c8
mov dword [ebp - 0x3d0], 0xb265d632
mov dword [ebp - 0x374], 4
mov dword [ebp - 0x3c4], 9
mov dword [ebp - 0x37c], 0xaadaf8d9
mov dword [ebp - 0x14], 0
jmp 0x10045013
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x10045254
mov dword [ebp - 0x64], 0x7ea4c570
mov dword [ebp - 0x64], 0
jmp 0x10045034
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1004524f
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x124], 0
je 0x100451de
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x124], 0
je 0x10045078
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x42c], 0
je 0x10045078
mov dword [ebp - 0x2a4], 1
jmp 0x1004507f
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x3f4], 1
jl 0x10045094
mov dword [ebp - 0x174], 1
jmp 0x1004509b
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0xa3b
je 0x100450b3
mov dword [ebp - 0x3fc], 1
jmp 0x100450ba
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x124]
mov ecx, dword [ebp - 0x14]
imul eax, dword [ebp + ecx*4 - 0x124]
cmp dword [ebp - 0x2a4], eax
jl 0x100450ec
mov dword [ebp - 0x17c], 1
jmp 0x100450f3
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x3d0]
jle 0x10045116
cmp dword [ebp - 0x14], 0
je 0x10045116
mov dword [ebp - 0x2ac], 1
jmp 0x1004511d
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2ac], eax
jne 0x10045134
mov dword [ebp - 0x184], 1
jmp 0x1004513b
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x184], eax
jl 0x10045155
mov dword [ebp - 0x2b4], 1
jmp 0x1004515c
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0x942f
jl 0x10045174
mov dword [ebp - 0x18c], 1
jmp 0x1004517b
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
cmp dword [ebp - 0x18c], eax
jg 0x1004519c
mov dword [ebp - 0x2bc], 1
jmp 0x100451a3
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x2bc], eax
jg 0x100451c3
mov eax, 0x435d
test eax, eax
jne 0x100451c3
and dword [ebp - 0x194], 0
jmp 0x100451cd
mov dword [ebp - 0x194], 1
xor eax, eax
inc eax
je 0x100451de
mov dword [ebp - 0x2c4], 1
jmp 0x100451e5
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0xffffffff
jl 0x100451fa
mov dword [ebp - 0x19c], 1
jmp 0x10045201
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x19c], eax
jle 0x1004521b
mov dword [ebp - 0x2cc], 1
jmp 0x10045222
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 9
je 0x10045237
mov dword [ebp - 0x1a4], 1
jmp 0x1004523e
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x3f0], eax
jmp 0x1004502d
jmp 0x1004500c
jmp 0x10044fc0
jmp 0x1004527b
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1004527b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
mov dword [ebp - 0x3bc], 0x796a0b59
mov dword [ebp - 0x90], 0xfffffff8
mov dword [ebp - 0x90], 8
jmp 0x100452a8
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 6
jne 0x10045391
mov dword [ebp - 0x94], 0xfffffffd
mov dword [ebp - 0xe0], 0
jmp 0x100452d8
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x100452f4
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x494], 0x1220985a
jmp 0x100452cb
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x94], eax
jne 0x1004530e
mov dword [ebp - 0x2d4], 1
jmp 0x10045315
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x2d4]
jle 0x1004532f
mov dword [ebp - 0x1ac], 1
jmp 0x10045336
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp + eax - 0x494], ecx
mov dword [ebp - 0x94], 2
jmp 0x10045362
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x2c
jge 0x1004538c
cmp dword [ebp - 0x94], 0
je 0x10045376
jmp 0x1004538c
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x1004538a
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
jmp 0x10045355
jmp 0x1004529b
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x100453bf
push 0x1669
push 0
push 0x1f53
push 0x7d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x20], 0x63785551
mov dword [ebp - 0x154], 0x5d1cb6a7
mov eax, dword [ebp - 0x1c]
sub eax, 6
je 0x100453f4
mov eax, 0xe964
test eax, eax
je 0x100453f4
mov dword [ebp - 0x2dc], 1
jmp 0x100453fb
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jae 0x10045416
mov dword [ebp - 0x1b4], 1
jmp 0x1004541d
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1b4]
jg 0x10045434
mov dword [ebp - 0x2e4], 1
jmp 0x1004543b
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2e4]
jl 0x10045453
xor eax, eax
jne 0x10045453
and dword [ebp - 0x1bc], 0
jmp 0x1004545d
mov dword [ebp - 0x1bc], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1bc], eax
je 0x10045474
mov dword [ebp - 0x384], 1
jmp 0x1004547b
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x43c], eax
imul eax, dword [ebp - 0x1c], 0x2f3c
cmp dword [ebp - 0x1c], eax
jne 0x1004549c
mov dword [ebp - 0x2ec], 1
jmp 0x100454a3
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2ec]
cmp eax, 0xd5493e6
je 0x100454cf
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x100454cd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x100454de
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x154], 0
je 0x10045538
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jge 0x100454fb
mov dword [ebp - 0x1c4], 1
jmp 0x10045502
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c4], eax
jge 0x10045519
mov dword [ebp - 0x2f4], 1
jmp 0x10045520
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0xfff9
jbe 0x10045538
mov dword [ebp - 0x1cc], 1
jmp 0x1004553f
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1cc]
jl 0x10045556
mov dword [ebp - 0x3cc], 1
jmp 0x1004555d
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x154], eax
jg 0x10045574
mov dword [ebp - 0x2fc], 1
jmp 0x1004557b
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2fc], eax
jne 0x10045592
mov dword [ebp - 0x1d4], 1
jmp 0x10045599
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x3c], 0
jmp 0x100455b2
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x100455c8
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x350], 1
jmp 0x100455ab
mov dword [ebp - 0x3c], 0
jmp 0x100455d8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x100455ee
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x474], 1
jmp 0x100455d1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x350], 0xffffffe6
jmp 0x1004561c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x350], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x350], 0xffffffe9
je 0x10045dfc
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x11c], 0
jmp 0x1004565a
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x10045676
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x438], 9
jmp 0x1004564d
mov dword [ebp - 0x6c], 0
jmp 0x10045686
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x100457be
mov dword [ebp - 0x30], 0
jmp 0x100456a0
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x100456b6
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x4b8], 1
jmp 0x10045699
mov dword [ebp - 0x30], 0
jmp 0x100456c6
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100456dc
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x404], 0x6c218e99
jmp 0x100456bf
mov eax, dword [ebp - 0x6c]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x4b8]
cmp dword [ebp + eax*4 - 0x438], ecx
jge 0x10045701
mov dword [ebp - 0x304], 1
jmp 0x10045708
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x438], 1
ja 0x10045722
xor eax, eax
jne 0x10045722
and dword [ebp - 0x1dc], 0
jmp 0x1004572c
mov dword [ebp - 0x1dc], 1
mov eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0x1dc]
jg 0x10045746
mov dword [ebp - 0x38c], 1
jmp 0x1004574d
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x6c]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x4b8]
cmp dword [ebp + eax*4 - 0x438], ecx
je 0x1004577e
mov dword [ebp - 0x1e4], 1
jmp 0x10045785
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x1e4], eax
je 0x1004579f
mov dword [ebp - 0x314], 1
jmp 0x100457a6
and dword [ebp - 0x314], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x314]
mov dword [ebp + eax - 0x404], ecx
jmp 0x1004567f
mov dword [ebp - 0x110], 8
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x45c], 0x21ded680
mov dword [ebp - 0x32c], 0xfffffff9
mov dword [ebp - 0x3f8], 9
mov dword [ebp - 0x394], 0xe0710dd0
mov dword [ebp - 0xbc], 0x7904
mov dword [ebp - 0xc], 0x5cc7c44d
mov dword [ebp - 0x148], 4
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 8], 0
jmp 0x1004582f
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x10045842
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], 0xffffffff
jmp 0x10045828
mov dword [ebp - 8], 0
jmp 0x10045852
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x10045868
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x50c], 0x32d7af2c
jmp 0x1004584b
mov dword [ebp - 8], 0
jmp 0x10045878
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x1004588e
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3ec], 1
jmp 0x10045871
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x3d4]
cmp eax, dword [ebp - 0x39c]
jge 0x100458cd
mov dword [ebp - 0x31c], 1
jmp 0x100458d4
and dword [ebp - 0x31c], 0
mov dword [ebp - 0x150], 0
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x32c]
jg 0x100458fb
mov dword [ebp - 0x1ec], 1
jmp 0x10045902
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
sub eax, dword [ebp - 0x148]
add eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0xc]
jne 0x1004592e
cmp dword [ebp - 0x3f8], 0
je 0x1004592e
mov dword [ebp - 0x1f4], 1
jmp 0x10045935
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x1f4], eax
jl 0x1004594f
mov dword [ebp - 0x324], 1
jmp 0x10045956
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x324]
sub ecx, dword [ebp + eax - 0x4c]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3ec], ecx
mov dword [ebp - 0xc], 0
jmp 0x10045983
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10045c2e
mov dword [ebp - 0xe8], 0xfffffff7
mov dword [ebp - 0x10c], 5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3ec], 0
je 0x10045a13
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0xc]
add eax, dword [ebp + ecx*4 - 0x4c]
add eax, dword [ebp - 0x148]
cmp dword [ebp - 0xe8], eax
cmp dword [ebp - 0xbc], 9
je 0x100459eb
mov dword [ebp - 0x204], 1
jmp 0x100459f2
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3ec]
sub eax, dword [ebp - 0x204]
je 0x10045a13
mov dword [ebp - 0x334], 1
jmp 0x10045a1a
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0xfffffffe
ja 0x10045a2f
mov dword [ebp - 0x20c], 1
jmp 0x10045a36
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp dword [ebp - 0x20c], eax
jg 0x10045a51
mov dword [ebp - 0x33c], 1
jmp 0x10045a58
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x33c]
sub ecx, dword [ebp - 0x10c]
cmp dword [ebp + eax*4 - 0x4c], ecx
jge 0x10045a79
mov dword [ebp - 0x344], 1
jmp 0x10045a80
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0x4c], ecx
mov eax, 0x5823
test eax, eax
je 0x10045b9a
cmp dword [ebp - 0xbc], 0
jne 0x10045aba
imul eax, dword [ebp - 0x10c], 0xffffffff
cmp eax, 0x538e5efb
jle 0x10045aba
and dword [ebp - 0x214], 0
jmp 0x10045ac4
mov dword [ebp - 0x214], 1
cmp dword [ebp - 0x214], 1
jne 0x10045ae0
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x4c], 0
jne 0x10045ae0
and dword [ebp - 0x21c], 0
jmp 0x10045aea
mov dword [ebp - 0x21c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50c]
cmp dword [ebp - 0x21c], eax
jge 0x10045b0b
mov dword [ebp - 0x3a4], 1
jmp 0x10045b12
and dword [ebp - 0x3a4], 0
mov eax, 0xfc39
test eax, eax
je 0x10045b30
mov eax, 0x237f
test eax, eax
je 0x10045b30
mov dword [ebp - 0x220], 1
jmp 0x10045b37
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x220], eax
jl 0x10045b51
mov dword [ebp - 0x320], 1
jmp 0x10045b58
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x320], eax
je 0x10045b72
mov dword [ebp - 0x3dc], 1
jmp 0x10045b79
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp + eax*4 - 0x4c], 0xffffffff
test eax, eax
je 0x10045b9a
mov dword [ebp - 0x140], 1
jmp 0x10045ba1
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x4c], ecx
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x140], eax
jg 0x10045bd1
mov eax, 0xb13122e3
test eax, eax
jne 0x10045bd1
and dword [ebp - 0x158], 0
jmp 0x10045bdb
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x158]
je 0x10045bf5
mov dword [ebp - 0x2b8], 1
jmp 0x10045bfc
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2b8], eax
jl 0x10045c16
mov dword [ebp - 0x230], 1
jmp 0x10045c1d
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x150], eax
jmp 0x1004597c
mov dword [ebp - 0x240], 3
mov dword [ebp - 0x3e4], 2
mov dword [ebp - 0xf0], 4
mov dword [ebp - 0xf0], 0x11
jmp 0x10045c65
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffffb
jg 0x10045ce1
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x400], 0x568d526d
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x3ac], 0xffffffff
jle 0x10045cb0
mov dword [ebp - 0x300], 1
jmp 0x10045cb7
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x400], eax
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10045cdc
push 0x25b9
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x10045c58
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x440], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x110]
cmp dword [ebp + eax - 0x350], ecx
jge 0x10045d0e
mov dword [ebp - 0x3b4], 1
jmp 0x10045d15
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x238], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x474], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
cmp dword [ebp - 0x238], eax
je 0x10045d55
mov dword [ebp - 0x2c0], 1
jmp 0x10045d5c
and dword [ebp - 0x2c0], 0
imul eax, dword [ebp - 0x2c0], 0x8064
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0xfff7
jb 0x10045d84
mov dword [ebp - 0x340], 1
jmp 0x10045d8b
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x340]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x350]
jle 0x10045db2
mov dword [ebp - 0x248], 1
jmp 0x10045db9
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0
jne 0x10045dd4
mov eax, 0xc9dffbe5
test eax, eax
jne 0x10045dd4
and dword [ebp - 0x2c8], 0
jmp 0x10045dde
mov dword [ebp - 0x2c8], 1
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3bc], 0
jmp 0x10045601
mov dword [ebp - 0x48], 0
mov dword [ebp - 0xcc], 0
jmp 0x10045e1c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10045e38
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x454], 0
jmp 0x10045e0f
mov dword [ebp - 0x48], 0
jmp 0x10045e48
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x10046066
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0x250], 0x7f19
mov dword [ebp - 0x268], 0x1fa4c821
mov dword [ebp - 0x370], 0xfffffffa
mov dword [ebp - 0x118], 0
jmp 0x10045e93
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x10045eaf
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x4a8], 0
jmp 0x10045e86
mov dword [ebp - 0x9c], 0
jmp 0x10045ec8
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jg 0x10046061
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x250]
cmp dword [ebp - 0x9c], eax
jge 0x10045ef5
mov dword [ebp - 0x308], 1
jmp 0x10045efc
and dword [ebp - 0x308], 0
imul eax, dword [ebp - 0x308], 0xfffd
cmp eax, dword [ebp - 0x48]
jge 0x10045f20
mov eax, 0xfffe
test eax, eax
je 0x10045f20
mov dword [ebp - 0x258], 1
jmp 0x10045f27
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xec3
jl 0x10045f3f
mov dword [ebp - 0x2d0], 1
jmp 0x10045f46
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0x97e7c14a
jae 0x10045f5e
mov dword [ebp - 0x260], 1
jmp 0x10045f65
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 1
jne 0x10045f7a
mov dword [ebp - 0x328], 1
jmp 0x10045f81
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x454]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x454], ecx
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x444], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4a8], 0xe6966ef3
jb 0x10045fd7
mov dword [ebp - 0x2d8], 1
jmp 0x10045fde
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x2d8], eax
jne 0x10045ff5
mov dword [ebp - 0x270], 1
jmp 0x10045ffc
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0x1188
jne 0x10046014
mov dword [ebp - 0x13c], 1
jmp 0x1004601b
and dword [ebp - 0x13c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x4a8], ecx
imul eax, dword [ebp - 0x13c], 0xffff
cmp eax, 2
je 0x10046049
mov dword [ebp - 0x310], 1
jmp 0x10046050
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x370], eax
jmp 0x10045ebb
jmp 0x10045e41
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1004607a
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov byte [ebp - 0x85], 0
mov dword [ebp - 4], 1
mov dword [ebp - 0x98], 0x83648bd9
mov dword [ebp - 0x398], 0xfffffffe
mov eax, dword [ebp - 4]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jle 0x100460b9
mov dword [ebp - 0x378], 1
jmp 0x100460c0
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jg 0x100460d4
mov dword [ebp - 0x278], 1
jmp 0x100460db
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x278], eax
jl 0x100460f5
mov dword [ebp - 0x380], 1
jmp 0x100460fc
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
je 0x10046110
mov dword [ebp - 0x2e0], 1
jmp 0x10046117
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0xffffffff
jl 0x1004612c
mov dword [ebp - 0x280], 1
jmp 0x10046133
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x1004615d
mov eax, 0x5378
test eax, eax
je 0x1004615d
mov dword [ebp - 0x338], 1
jmp 0x10046164
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
sub eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
je 0x10046186
mov dword [ebp - 0x288], 1
jmp 0x1004618d
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0x5dea
jl 0x100461a5
mov dword [ebp - 0x2e8], 1
jmp 0x100461ac
and dword [ebp - 0x2e8], 0
xor eax, eax
sub eax, dword [ebp - 0x2e8]
sub eax, dword [ebp - 4]
je 0x1004631c
mov dword [ebp - 0x390], 0xe0d6
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x100], 0
jmp 0x100461ea
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x10046206
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x500], 0x662b0a94
jmp 0x100461dd
cmp dword [ebp - 0x98], 0xd925
jge 0x1004621e
mov dword [ebp - 0x388], 1
jmp 0x10046225
and dword [ebp - 0x388], 0
mov eax, 0xffff
cmp eax, 0x5806
jne 0x1004623d
mov dword [ebp - 0x290], 1
jmp 0x10046244
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x10046268
cmp dword [ebp - 4], 0
jne 0x10046268
and dword [ebp - 0x318], 0
jmp 0x10046272
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x318]
neg eax
sub eax, dword [ebp - 0x390]
mov dword [ebp - 0x298], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0x500], ecx
cmp dword [ebp - 0x298], 0xffffffff
je 0x100462ae
mov dword [ebp - 0x2f0], 1
jmp 0x100462b5
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x2f0]
add eax, 4
cmp eax, 0xbf085fff
jbe 0x100462d4
mov dword [ebp - 0x2a0], 1
jmp 0x100462db
and dword [ebp - 0x2a0], 0
cmp dword [ebp - 0x2a0], 0xfd0a
je 0x100462f3
mov dword [ebp - 0x330], 1
jmp 0x100462fa
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x330]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
add eax, 0xc1cc
mov dword [ebp - 0x398], eax
jmp 0x10046348
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x10046348
push 0
push 0x1d69
push 0x200f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
lea eax, [ebp - 0x85]
push eax
call fcn.10042528
pop ecx
push 1
lea eax, [ebp - 0x524]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.10041dab
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x4dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x4dc]
lea edi, [ebp - 0x410]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x478], 0x862f
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x100463a7
push 0
push 0x10e6
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x100463c9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x120], 0
jmp 0x100463f0
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x10046409
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x7c], 7
jmp 0x100463e3
mov dword [ebp - 0x74], 0
jmp 0x10046419
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x10046442
mov dword [ebp - 0x2f8], 0xffffffff
mov eax, dword [ebp - 0x2f8]
dec eax
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x34], eax
jmp 0x10046412
mov eax, 0xaae4
test eax, eax
je 0x10046471
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7c]
cmp dword [ebp + eax - 0x7c], ecx
jl 0x10046471
xor eax, eax
je 0x10046471
mov dword [ebp - 0x218], 1
jmp 0x10046478
and dword [ebp - 0x218], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x218], eax
jg 0x10046496
mov dword [ebp - 0x210], 1
jmp 0x1004649d
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x210], eax
je 0x100464bb
mov dword [ebp - 0x224], 1
jmp 0x100464c2
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x224]
jl 0x100464e5
mov dword [ebp - 0x22c], 1
jmp 0x100464ec
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x22c], eax
je 0x10046525
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10046523
push 0x1fe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x10046586
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10046540
push 0
push 1
push 0x674
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x34], 0
jmp 0x10046550
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x10046586
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10046578
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x7c], 0
je 0x10046584
jmp 0x10046549
jmp 0x10046549
mov dword [ebp - 0x108], 0x7e2799ac
mov dword [ebp - 0x108], 0
jmp 0x100465a9
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xe
jg 0x100465f9
mov dword [ebp - 0x3a0], 0xfd4914d2
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x100465ec
push 0x10c9
push 0
push 0
push 0x1423
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
cmp dword [ebp - 0x3a0], 0
je 0x100465f7
jmp 0x1004659c
jmp 0x1004659c
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0
jmp 0x10046610
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe8
jl 0x10046658
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x128], 0
jmp 0x10046639
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
je 0x10046656
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10046654
call dword [sym.imp.USER32.dll_CreateMenu]
jmp 0x1004662c
jmp 0x10046609
cmp dword [ebp - 0x10], 0
jne 0x100466b2
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jg 0x10046675
mov dword [ebp - 0x234], 1
jmp 0x1004667c
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x10]
jle 0x10046696
mov dword [ebp - 0x3a8], 1
jmp 0x1004669d
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x10], 0
jne 0x100466b2
cmp dword [ebp - 0x10], 0
jne 0x100466b2
and dword [ebp - 0x23c], 0
jmp 0x100466bc
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa0], 0xffffffff
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa0], 0xffffffea
jmp 0x100466fe
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x17
jne 0x10047017
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x144], 6
mov dword [ebp - 0x130], 0
jmp 0x10046735
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x10046751
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0xc8], 0x9e57ad95
jmp 0x10046728
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0
jmp 0x10046768
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x10046ab9
mov dword [ebp - 0x84], 0x4438bea1
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0xd0], 0
jmp 0x1004679f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x100467bb
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xa4], 5
jmp 0x10046792
mov dword [ebp - 0x84], 0
jmp 0x100467d4
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x100468dc
mov dword [ebp - 0x44], 0x41b66baf
mov dword [ebp - 0x44], 1
jmp 0x100467f8
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1004682c
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x1004681b
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0xc8], 0
je 0x1004682a
jmp 0x1004682c
jmp 0x100467f1
mov dword [ebp - 0x44], 0
jmp 0x1004683c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x100468d7
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ebp + ecx*4 - 0xc8]
cmp dword [ebp + eax*4 - 0xc8], ecx
jne 0x100468bc
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp + ecx*4 - 0xc8]
push 4
pop edx
shl edx, 0
add ecx, dword [ebp + edx - 0xc8]
imul ecx, ecx, 0xfffd
cmp dword [ebp + eax - 0xc8], ecx
jg 0x10046897
mov dword [ebp - 0x244], 1
jmp 0x1004689e
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x100468bc
and dword [ebp - 0x24c], 0
jmp 0x100468c6
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x144], eax
jmp 0x10046835
jmp 0x100467c7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
jne 0x10046a76
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10046a6d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x144], 0
jne 0x10046926
cmp dword [ebp - 0x28], 0
jne 0x10046926
and dword [ebp - 0x3b0], 0
jmp 0x10046930
mov dword [ebp - 0x3b0], 1
mov eax, 0xcc33bab7
test eax, eax
jb 0x10046945
mov dword [ebp - 0x254], 1
jmp 0x1004694c
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x254]
test eax, eax
je 0x10046972
cmp dword [ebp - 0x84], 0
je 0x10046972
mov dword [ebp - 0x25c], 1
jmp 0x10046979
and dword [ebp - 0x25c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
cmp dword [ebp - 0x25c], eax
je 0x1004699a
mov dword [ebp - 0x264], 1
jmp 0x100469a1
and dword [ebp - 0x264], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x264], eax
jl 0x100469cf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
jne 0x100469cf
and dword [ebp - 0x26c], 0
jmp 0x100469d9
mov dword [ebp - 0x26c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26c]
sub ecx, dword [ebp + eax - 0xc8]
mov dword [ebp - 0xd4], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xd4], eax
jge 0x10046a09
mov dword [ebp - 0x274], 1
jmp 0x10046a10
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x274]
sub ecx, dword [ebp + eax - 0xa4]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xa4]
jle 0x10046a3e
mov dword [ebp - 0x27c], 1
jmp 0x10046a45
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0xfffffffb
jg 0x10046a5a
mov dword [ebp - 0x284], 1
jmp 0x10046a61
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0xd9de360a
je 0x10046a76
and dword [ebp - 0x15c], 0
jmp 0x10046a80
mov dword [ebp - 0x15c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
cmp dword [ebp - 0x15c], eax
jge 0x10046aa1
mov dword [ebp - 0x160], 1
jmp 0x10046aa8
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x84], eax
jmp 0x10046761
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x188], 0xcbbbc25
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x3c0], 0x8607
mov dword [ebp - 0x3c8], 0xf4846e1d
mov dword [ebp - 0x8c], 0
jmp 0x10046b04
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffea
jne 0x10046e1b
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x3b8], 0x6e85fcb
mov dword [ebp - 0x18], 0
jmp 0x10046b32
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 6
jl 0x10046b70
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x10046b51
push 0
push 0x250d
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x10046b6e
push 0x251
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
jmp 0x10046b2b
mov dword [ebp - 0x18], 9
jmp 0x10046b80
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jg 0x10046e16
mov dword [ebp - 0xdc], 0x272a727
mov dword [ebp - 0x170], 4
mov dword [ebp - 0x168], 0
mov dword [ebp - 0xe4], 0x70fc
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10046bc6
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0xdc], 0xffffffeb
jmp 0x10046bdf
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xfffffffb
jl 0x10046e11
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x1a8], 0x2305aba9
cmp dword [ebp - 0x170], 0x1ec2
jne 0x10046d1b
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
neg eax
cmp dword [ebp - 0x170], eax
jne 0x10046c38
mov dword [ebp - 0x178], 1
jmp 0x10046c3f
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x178], eax
jle 0x10046c59
mov dword [ebp - 0x180], 1
jmp 0x10046c60
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x180]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x190], eax
jge 0x10046c9f
cmp dword [ebp - 0xe4], 0
jne 0x10046c9f
and dword [ebp - 0x198], 0
jmp 0x10046ca9
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
je 0x10046cd3
cmp dword [ebp - 0x3c0], 0
je 0x10046cd3
mov dword [ebp - 0x1b0], 1
jmp 0x10046cda
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x1b0], eax
jge 0x10046cf4
mov dword [ebp - 0x1b8], 1
jmp 0x10046cfb
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1b8], eax
jl 0x10046d1b
cmp dword [ebp - 0x8c], 0
je 0x10046d1b
mov dword [ebp - 0x1c0], 1
jmp 0x10046d22
and dword [ebp - 0x1c0], 0
mov eax, 0xf57a5575
test eax, eax
jne 0x10046d3d
mov eax, 0xc437ffe
test eax, eax
jne 0x10046d3d
and dword [ebp - 0x1c8], 0
jmp 0x10046d47
mov dword [ebp - 0x1c8], 1
cmp dword [ebp - 0x1c8], 0xffffffff
jge 0x10046d5c
mov dword [ebp - 0x1d0], 1
jmp 0x10046d63
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d0], eax
jle 0x10046d7a
mov dword [ebp - 0x1d8], 1
jmp 0x10046d81
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xfffffff6
jg 0x10046d96
mov dword [ebp - 0x1e0], 1
jmp 0x10046d9d
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x1e0], eax
jne 0x10046db7
mov dword [ebp - 0x1e8], 1
jmp 0x10046dbe
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x1e8], eax
jne 0x10046dd8
mov dword [ebp - 0x1f0], 1
jmp 0x10046ddf
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x1f0], eax
jg 0x10046df9
mov dword [ebp - 0x1f8], 1
jmp 0x10046e00
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x3c8], eax
jmp 0x10046bd2
jmp 0x10046b79
jmp 0x10046af7
mov dword [ebp - 0xec], 0
jmp 0x10046e34
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x10046e50
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x488], 0x405b4019
jmp 0x10046e27
mov dword [ebp - 0xac], 0
jmp 0x10046e69
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
je 0x10047012
mov dword [ebp - 0x480], 0x37bc7528
mov dword [ebp - 0x200], 0x5f4b
mov dword [ebp - 0x458], 1
mov dword [ebp - 0xf4], 0
jmp 0x10046ead
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x10046ec9
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x518], 3
jmp 0x10046ea0
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x10046eea
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xc0], 0
jmp 0x10046f0d
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x1004700d
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x40], 0
jmp 0x10046f34
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10046f4a
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4e8], 0x2eac4530
jmp 0x10046f2d
mov dword [ebp - 0x40], 0
jmp 0x10046f5a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10046f70
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4d0], 0
jmp 0x10046f53
cmp dword [ebp - 0xb8], 0
je 0x10046f94
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4e8], 0
je 0x10046f94
mov dword [ebp - 0x208], 1
jmp 0x10046f9b
and dword [ebp - 0x208], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x4d0], ecx
mov dword [ebp - 0xb8], 0
jmp 0x10046fc7
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jg 0x10046ff7
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x14c], 0xfffffff6
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
je 0x10046ff5
jmp 0x10046ff7
jmp 0x10046fba
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x488], 0x2e6e7f73
jmp 0x10046f00
jmp 0x10046e5c
jmp 0x100466f1
mov dword [ebp - 0x104], 0x22ba3946
mov dword [ebp - 0xfc], 0
jmp 0x1004703a
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 4
jge 0x10047056
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x534], 0xffffffff
jmp 0x1004702d
mov dword [ebp - 0x104], 3
jmp 0x1004706f
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x100470ad
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x10047091
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x100470ab
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x10047062
cmp dword [ebp - 0x410], 0
je 0x100470ca
push 3
push dword [ebp - 0x408]
push dword [ebp - 0x40c]
call dword [ebp - 0x410]
pop edi
pop esi
mov esp, ebp
pop ebp
ret