Function at 0x44c96c
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Create process on windows
Get file attributes
Get keyboard layout
Get memory capacity
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3904
call fcn.00483b20
push esi
push edi
mov dword [ebp - 0x2078], 0x725245f5
mov dword [ebp - 0x21cc], 1
mov dword [ebp - 0x21b4], 0xffffffff
mov dword [ebp - 0x2470], 0xcb6d64bd
mov dword [ebp - 0x228], 0
jmp 0x44c9bc
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x44c9d8
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x32e4], 0xffff
jmp 0x44c9af
mov dword [ebp - 0x228], 0
jmp 0x44c9f1
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x44ca0d
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x2200], 0xd9ee1c97
jmp 0x44c9e4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2200], 0
je 0x44ca29
mov dword [ebp - 0x2184], 1
jmp 0x44ca30
and dword [ebp - 0x2184], 0
mov dword [ebp - 0x2078], 0x5551
mov eax, dword [ebp - 0x2078]
cmp eax, dword [ebp - 0x2184]
je 0x44ca54
mov dword [ebp - 0x218c], 1
jmp 0x44ca5b
and dword [ebp - 0x218c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2200]
add eax, dword [ebp - 0x218c]
cmp eax, 0x310c
jge 0x44ca87
mov eax, 0xd5493e
test eax, eax
jne 0x44ca87
and dword [ebp - 0x2194], 0
jmp 0x44ca91
mov dword [ebp - 0x2194], 1
cmp dword [ebp - 0x2194], 1
je 0x44caa6
mov dword [ebp - 0x219c], 1
jmp 0x44caad
and dword [ebp - 0x219c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2200]
cmp dword [ebp - 0x219c], eax
jl 0x44cace
mov dword [ebp - 0x21a4], 1
jmp 0x44cad5
and dword [ebp - 0x21a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2200]
cmp eax, dword [ebp - 0x21a4]
jge 0x44caf6
mov dword [ebp - 0x21ac], 1
jmp 0x44cafd
and dword [ebp - 0x21ac], 0
mov eax, dword [ebp - 0x21cc]
cmp dword [ebp - 0x21ac], eax
jne 0x44cb17
mov dword [ebp - 0x9a8], 1
jmp 0x44cb1e
and dword [ebp - 0x9a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x32e4]
inc eax
mov dword [ebp - 0x21bc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x21bc]
mov dword [ebp + eax - 0x32e4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9a8]
mov dword [ebp + eax - 0x2200], ecx
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x21b4], eax
mov eax, dword [ebp - 0x21b4]
cmp dword [ebp - 0x21bc], eax
jne 0x44cb7e
mov dword [ebp - 0x21c4], 1
jmp 0x44cb85
and dword [ebp - 0x21c4], 0
mov eax, dword [ebp - 0x21c4]
sub eax, 0x3d1a
cmp eax, dword [ebp - 0x21cc]
jge 0x44cbad
mov eax, 0x77cc
test eax, eax
je 0x44cbad
mov dword [ebp - 0x21d4], 1
jmp 0x44cbb4
and dword [ebp - 0x21d4], 0
cmp dword [ebp - 0x21d4], 0xa0a9f4f9
ja 0x44cbcc
mov dword [ebp - 0x21dc], 1
jmp 0x44cbd3
and dword [ebp - 0x21dc], 0
mov eax, dword [ebp - 0x21dc]
mov dword [ebp - 0x2470], eax
mov byte [ebp - 0x413], 0
movzx eax, byte [ebp - 0x413]
test eax, eax
je 0x44cbfb
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov dword [ebp - 0x21f4], 0xa624cdb8
mov dword [ebp - 0x26d4], 0xffffffff
mov dword [ebp - 0x2278], 0x245c8100
mov dword [ebp - 0x352c], 0x4a90
mov dword [ebp - 0x2e40], 0xfffffff9
mov dword [ebp - 0x2e48], 0xe0710dd0
mov dword [ebp - 0x26dc], 0xffffffff
mov dword [ebp - 0x26cc], 0xffffffff
mov dword [ebp - 0x21ec], 0xff839e07
mov dword [ebp - 0x2e50], 0xfffffff7
mov dword [ebp - 0x359c], 1
mov dword [ebp - 0x3598], 1
mov dword [ebp - 0x3594], 1
mov dword [ebp - 0x3590], 1
mov dword [ebp - 0x35bc], 0xfffffff6
mov dword [ebp - 0x35b8], 0xfffffff6
mov dword [ebp - 0x35b4], 0xfffffff6
mov dword [ebp - 0x35b0], 0xfffffff6
mov byte [ebp - 0x3fc], 0
movzx eax, byte [ebp - 0x3fc]
test eax, eax
je 0x44ccce
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, 0x9635
test eax, eax
je 0x44ccec
cmp dword [ebp - 0x26cc], 0
je 0x44ccec
mov dword [ebp - 0x21e4], 1
jmp 0x44ccf3
and dword [ebp - 0x21e4], 0
mov eax, dword [ebp - 0x21e4]
mov dword [ebp - 0x21ec], eax
mov eax, dword [ebp - 0x21ec]
add eax, dword [ebp - 0x21f4]
cmp dword [ebp - 0x21f4], eax
jg 0x44cd1f
mov dword [ebp - 0x2268], 1
jmp 0x44cd26
and dword [ebp - 0x2268], 0
mov eax, dword [ebp - 0x26d4]
cmp dword [ebp - 0x2268], eax
jle 0x44cd40
mov dword [ebp - 0x2270], 1
jmp 0x44cd47
and dword [ebp - 0x2270], 0
mov eax, dword [ebp - 0x2270]
mov dword [ebp - 0x2278], eax
cmp dword [ebp - 0x2278], 0
je 0x44cd71
mov eax, 0x90b2
test eax, eax
je 0x44cd71
mov dword [ebp - 0x2280], 1
jmp 0x44cd78
and dword [ebp - 0x2280], 0
cmp dword [ebp - 0x2280], 0x1ffbe626
jle 0x44cd90
mov dword [ebp - 0x2288], 1
jmp 0x44cd97
and dword [ebp - 0x2288], 0
mov eax, dword [ebp - 0x2288]
mov dword [ebp - 0x26dc], eax
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x2290], 0xb6890635
mov dword [ebp - 0xb4c], 0xfffffffb
mov dword [ebp - 0x54], 0
jmp 0x44cdd1
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x44cde7
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xc2c], 0xfffffffb
jmp 0x44cdca
mov dword [ebp - 0x54], 0
jmp 0x44cdf7
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x44ce0d
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2b4c], 1
jmp 0x44cdf0
mov dword [ebp - 0x54], 0
jmp 0x44ce1d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x44ce33
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2fb4], 0x1e07ad4
jmp 0x44ce16
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc2c], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc2c]
cmp dword [ebp + eax - 0xc2c], ecx
je 0x44ce6c
mov dword [ebp - 0xb44], 1
jmp 0x44ce73
and dword [ebp - 0xb44], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb44]
mov dword [ebp + eax - 0xc2c], ecx
mov eax, dword [ebp - 0xb44]
sub eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0xbc]
jle 0x44cea6
mov dword [ebp - 0x26e4], 1
jmp 0x44cead
and dword [ebp - 0x26e4], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x2e58], eax
mov dword [ebp - 0x2290], 0x6c89
imul eax, dword [ebp - 0x2290], 0xaa3e
imul eax, dword [ebp - 0xbc]
cmp eax, 0x616d21b1
je 0x44cee7
mov dword [ebp - 0x2298], 1
jmp 0x44ceee
and dword [ebp - 0x2298], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x2298], eax
jl 0x44cf08
mov dword [ebp - 0x22a0], 1
jmp 0x44cf0f
and dword [ebp - 0x22a0], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x22a0], eax
jg 0x44cf29
mov dword [ebp - 0x22a8], 1
jmp 0x44cf30
and dword [ebp - 0x22a8], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x22a8], eax
jl 0x44cf4a
mov dword [ebp - 0x227c], 1
jmp 0x44cf51
and dword [ebp - 0x227c], 0
mov eax, dword [ebp - 0x227c]
dec eax
mov dword [ebp - 0xb4c], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xb4c], eax
jg 0x44cf85
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc2c], 0
jne 0x44cf85
and dword [ebp - 0xc40], 0
jmp 0x44cf8f
mov dword [ebp - 0xc40], 1
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0xc40]
jge 0x44cfa9
mov dword [ebp - 0x1b6c], 1
jmp 0x44cfb0
and dword [ebp - 0x1b6c], 0
cmp dword [ebp - 0x1b6c], 0x99bf
jge 0x44cfc8
mov dword [ebp - 0xc48], 1
jmp 0x44cfcf
and dword [ebp - 0xc48], 0
imul eax, dword [ebp - 0xc48], 0xb792
mov dword [ebp - 0x1b74], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b74]
mov dword [ebp + eax - 0x2b4c], ecx
cmp dword [ebp - 0x1b74], 0
jne 0x44d00b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc2c], 0
je 0x44d01b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b4c], 0
jne 0x44d02d
cmp dword [ebp - 0xb4c], 0
jne 0x44d02d
and dword [ebp - 0xc50], 0
jmp 0x44d037
mov dword [ebp - 0xc50], 1
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xc50], eax
jge 0x44d051
mov dword [ebp - 0x1b7c], 1
jmp 0x44d058
and dword [ebp - 0x1b7c], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x1b7c]
cmp dword [ebp - 0xbc], eax
jle 0x44d078
mov dword [ebp - 0xc58], 1
jmp 0x44d07f
and dword [ebp - 0xc58], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc58]
mov dword [ebp + eax - 0x2fb4], ecx
mov dword [ebp - 0x245c], 0xf9b3198a
mov dword [ebp - 0x2458], 0xf9b3198a
mov dword [ebp - 0x2454], 0xf9b3198a
mov dword [ebp - 0x2450], 0xf9b3198a
mov dword [ebp - 0xb54], 0xffffffff
mov dword [ebp - 0x26f4], 0xa7eb8e13
mov dword [ebp - 0x940], 0
jmp 0x44d0e7
mov eax, dword [ebp - 0x940]
inc eax
mov dword [ebp - 0x940], eax
cmp dword [ebp - 0x940], 2
jge 0x44d103
mov eax, dword [ebp - 0x940]
mov dword [ebp + eax*4 - 0x5b0], 0xa18885c6
jmp 0x44d0da
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x5b0], 3
jmp 0x44d131
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5b0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5b0], 0
jl 0x44d2ba
mov dword [ebp - 0xb5c], 1
mov dword [ebp - 0x26ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b0]
cmp dword [ebp + eax*4 - 0x245c], 0
jne 0x44d1c7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b0]
mov eax, dword [ebp + eax*4 - 0x245c]
mov dword [ebp - 0x2e60], eax
cmp dword [ebp - 0xb54], 1
je 0x44d19f
mov dword [ebp - 0x1b84], 1
jmp 0x44d1a6
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x1b84]
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0xb54], 0x921b0ae2
ja 0x44d1c7
and dword [ebp - 0xc60], 0
jmp 0x44d1d1
mov dword [ebp - 0xc60], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b0]
mov eax, dword [ebp + eax*4 - 0x245c]
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xb5c]
cmp eax, dword [ebp - 0xc60]
jg 0x44d205
mov dword [ebp - 0x1b8c], 1
jmp 0x44d20c
and dword [ebp - 0x1b8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b0]
mov eax, dword [ebp + eax*4 - 0x245c]
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x1b8c]
sub edx, dword [ebp + ecx - 0x5b0]
add eax, edx
je 0x44d24c
cmp dword [ebp - 0xb5c], 0
je 0x44d24c
mov dword [ebp - 0xc68], 1
jmp 0x44d253
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x26ec]
cmp dword [ebp - 0xc68], eax
jne 0x44d26d
mov dword [ebp - 0x1b94], 1
jmp 0x44d274
and dword [ebp - 0x1b94], 0
cmp dword [ebp - 0x1b94], 0
jne 0x44d289
mov dword [ebp - 0xc70], 1
jmp 0x44d290
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
mov dword [ebp - 0x26f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b0]
cmp dword [ebp + eax*4 - 0x245c], 0
je 0x44d2b5
jmp 0x44d2ba
jmp 0x44d116
mov dword [ebp - 0x6c], 0x80e3580d
mov dword [ebp - 0x2b5c], 0
mov dword [ebp - 0x2b58], 0
mov dword [ebp - 0x2b54], 0
mov dword [ebp - 0x2b50], 0
mov dword [ebp - 0x1ba4], 0
mov dword [ebp - 0x1bc4], 0xd6cad8e6
mov dword [ebp - 0xca8], 0x6369dda3
mov dword [ebp - 0x270c], 0x3674f9af
mov dword [ebp - 0x948], 0
jmp 0x44d32a
mov eax, dword [ebp - 0x948]
inc eax
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 2
jge 0x44d346
mov eax, dword [ebp - 0x948]
mov dword [ebp + eax*4 - 0x2b84], 0xe81de98
jmp 0x44d31d
mov byte [ebp - 0x341], 0
movzx eax, byte [ebp - 0x341]
test eax, eax
je 0x44d367
push 0x16f6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2e68], eax
cmp dword [ebp - 0x6c], 0
je 0x44d471
cmp dword [ebp - 0x6c], 0xb16aac89
jae 0x44d38f
mov dword [ebp - 0x26fc], 1
jmp 0x44d396
and dword [ebp - 0x26fc], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2e70], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2e78], eax
cmp dword [ebp - 0x6c], 1
jl 0x44d3ba
mov dword [ebp - 0x1b9c], 1
jmp 0x44d3c1
and dword [ebp - 0x1b9c], 0
mov eax, dword [ebp - 0x1b9c]
imul eax, dword [ebp - 0x6c]
mov dword [ebp - 0xc78], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc78]
mov dword [ebp + eax - 0x2b84], ecx
cmp dword [ebp - 0xc78], 0xb07fb07d
jae 0x44d3fc
mov dword [ebp - 0xc80], 1
jmp 0x44d403
and dword [ebp - 0xc80], 0
mov dword [ebp - 0x1ba4], 0xa00d
mov eax, dword [ebp - 0x1ba4]
cmp eax, dword [ebp - 0xc80]
jne 0x44d427
mov dword [ebp - 0x1bac], 1
jmp 0x44d42e
and dword [ebp - 0x1bac], 0
cmp dword [ebp - 0x1bac], 0x1d847576
jl 0x44d446
mov dword [ebp - 0x2704], 1
jmp 0x44d44d
and dword [ebp - 0x2704], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2e80], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2e88], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b84]
add eax, dword [ebp - 0x6c]
jne 0x44d483
mov eax, 0x951fe511
test eax, eax
jne 0x44d483
and dword [ebp - 0xc88], 0
jmp 0x44d48d
mov dword [ebp - 0xc88], 1
mov eax, dword [ebp - 0xc88]
inc eax
cmp eax, dword [ebp - 0x6c]
jge 0x44d4a5
mov dword [ebp - 0x1bb4], 1
jmp 0x44d4ac
and dword [ebp - 0x1bb4], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2b5c], 0x6d0374c7
cmp dword [ebp - 0x1bb4], 0x6d0374c7
jle 0x44d4d5
mov dword [ebp - 0xc90], 1
jmp 0x44d4dc
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xc90], eax
jge 0x44d4f3
mov dword [ebp - 0x1bbc], 1
jmp 0x44d4fa
and dword [ebp - 0x1bbc], 0
cmp dword [ebp - 0x1bbc], 0x200d40a7
jle 0x44d512
mov dword [ebp - 0xc98], 1
jmp 0x44d519
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x1bc4], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1bc4], eax
je 0x44d53c
mov dword [ebp - 0xca0], 1
jmp 0x44d543
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xca0], eax
je 0x44d55e
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2b5c], 0
jne 0x44d570
mov eax, 0xe0f61949
test eax, eax
jne 0x44d570
and dword [ebp - 0x1bcc], 0
jmp 0x44d57a
mov dword [ebp - 0x1bcc], 1
mov eax, dword [ebp - 0x1bcc]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0x270c], eax
mov dword [ebp - 0xdd8], 0x725245f5
mov dword [ebp - 0xcd0], 1
mov dword [ebp - 0x1bdc], 0x69f30cc2
mov dword [ebp - 0x958], 0
mov dword [ebp - 0xb64], 0xd5fac122
mov dword [ebp - 0x418], 0x831eb239
mov dword [ebp - 0xcc0], 0xaf9f7c8b
mov dword [ebp - 0x1bf4], 7
mov dword [ebp - 0x271c], 0xee91b76e
mov dword [ebp - 0x950], 0
jmp 0x44d605
mov eax, dword [ebp - 0x950]
inc eax
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x950], 1
jge 0x44d621
mov eax, dword [ebp - 0x950]
mov dword [ebp + eax*4 - 0x1bec], 0xfffffff6
jmp 0x44d5f8
cmp dword [ebp - 0xcd0], 0xfffa
jb 0x44d639
mov dword [ebp - 0x1be4], 1
jmp 0x44d640
and dword [ebp - 0x1be4], 0
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x418]
inc ecx
mov dword [ebp - 0x418], ecx
cmp eax, 0x971867b8
jbe 0x44d701
push 9
pop eax
test eax, eax
je 0x44d67a
cmp dword [ebp - 0x958], 0
je 0x44d67a
mov dword [ebp - 0x1bd4], 1
jmp 0x44d681
and dword [ebp - 0x1bd4], 0
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x1bd4], eax
jge 0x44d69b
mov dword [ebp - 0xcb0], 1
jmp 0x44d6a2
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0x1bdc], eax
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x1bdc], eax
jl 0x44d6e0
mov dword [ebp - 0xcb8], 1
jmp 0x44d6e7
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0xcb8]
jg 0x44d701
mov dword [ebp - 0x2714], 1
jmp 0x44d708
and dword [ebp - 0x2714], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x2e90], eax
imul eax, dword [ebp - 0x1be4], 0x1932
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0x2e98], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1bec]
cmp dword [ebp + eax - 0x1bec], ecx
je 0x44d758
mov dword [ebp - 0xcc8], 1
jmp 0x44d75f
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x1bf4], eax
mov eax, dword [ebp - 0x1bf4]
mov dword [ebp - 0x271c], eax
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0xb64], eax
mov dword [ebp - 0xe00], 1
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x960], 0
jmp 0x44d7b0
mov eax, dword [ebp - 0x960]
inc eax
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0x960], 3
jge 0x44d7cc
mov eax, dword [ebp - 0x960]
mov dword [ebp + eax*4 - 0x3654], 0x64a6847d
jmp 0x44d7a3
mov dword [ebp - 0x15c], 2
jmp 0x44d7e5
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jl 0x44d820
mov byte [ebp - 0x408], 0
movzx eax, byte [ebp - 0x408]
test eax, eax
je 0x44d81e
push 0xa99
push 0x207f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
jmp 0x44d7d8
mov dword [ebp - 0x15c], 4
jmp 0x44d839
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 9
jl 0x44d884
mov dword [ebp - 0x2724], 0xffffffff
cmp dword [ebp - 0x15c], 1
je 0x44d861
mov dword [ebp - 0x1bfc], 1
jmp 0x44d868
and dword [ebp - 0x1bfc], 0
mov eax, dword [ebp - 0x2724]
imul eax, dword [ebp - 0x1bfc]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3654], eax
jmp 0x44d82c
mov dword [ebp - 0x1d1c], 0xffffffff
mov dword [ebp - 0xcc], 0xfffffff7
mov dword [ebp - 0x1c0c], 0xd2a7e9f2
mov dword [ebp - 0x56c], 0x956a218f
mov dword [ebp - 0xcf8], 0xfffffffe
mov dword [ebp - 0xcc], 0
jmp 0x44d8cf
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffff5
jg 0x44da54
mov dword [ebp - 0xb74], 0xb5934215
mov dword [ebp - 0xb7c], 0xfffffff8
mov eax, dword [ebp - 0xb74]
mov dword [ebp - 0x2ea0], eax
mov eax, dword [ebp - 0xb74]
mov dword [ebp - 0x2ea8], eax
cmp dword [ebp - 0xcc], 1
jge 0x44d91d
mov dword [ebp - 0x1c14], 1
jmp 0x44d924
and dword [ebp - 0x1c14], 0
mov eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0xcc], eax
jl 0x44d93e
mov dword [ebp - 0xcd8], 1
jmp 0x44d945
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 0x75da2ca3
jge 0x44d95d
mov dword [ebp - 0x1c04], 1
jmp 0x44d964
and dword [ebp - 0x1c04], 0
mov eax, dword [ebp - 0xb74]
cmp dword [ebp - 0x1c04], eax
jge 0x44d97e
mov dword [ebp - 0x272c], 1
jmp 0x44d985
and dword [ebp - 0x272c], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2eb0], eax
mov eax, 0xe2bf
cmp eax, 0x7582
jne 0x44d9a9
mov dword [ebp - 0xce0], 1
jmp 0x44d9b0
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0x1c0c], eax
cmp dword [ebp - 0x1c0c], 1
jae 0x44d9d8
push 6
pop eax
test eax, eax
je 0x44d9d8
mov dword [ebp - 0xce8], 1
jmp 0x44d9df
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0xce8]
cmp eax, dword [ebp - 0xb7c]
jl 0x44da00
mov dword [ebp - 0xcf0], 1
jmp 0x44da07
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0x1c14]
add eax, dword [ebp - 0xcf0]
je 0x44da2a
cmp dword [ebp - 0xb7c], 0
je 0x44da2a
mov dword [ebp - 0x1c1c], 1
jmp 0x44da31
and dword [ebp - 0x1c1c], 0
mov eax, dword [ebp - 0x1c1c]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
sub eax, dword [ebp - 0xcc]
mov dword [ebp - 0xcf8], eax
jmp 0x44d8c2
mov eax, dword [ebp - 0x56c]
add eax, 0xde0f
imul eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 1
je 0x44da81
mov dword [ebp - 0x2734], 1
jmp 0x44da88
and dword [ebp - 0x2734], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2eb8], eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x278c], 0xcb6d64bd
mov dword [ebp - 0x5c], 0xfffffffb
mov dword [ebp - 0xb84], 0xfffffff7
mov dword [ebp - 0xb8c], 0xfffffffb
mov dword [ebp - 0x970], 0xade7
mov dword [ebp - 0x968], 0
jmp 0x44dae6
mov eax, dword [ebp - 0x968]
inc eax
mov dword [ebp - 0x968], eax
cmp dword [ebp - 0x968], 1
jge 0x44db02
mov eax, dword [ebp - 0x968]
mov dword [ebp + eax*4 - 0x98], 0x8ec0ae97
jmp 0x44dad9
mov dword [ebp - 0x5c], 0
jmp 0x44db12
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x44db28
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x98], 3
jmp 0x44db0b
cmp dword [ebp - 0x5c], 0
je 0x44db3f
xor eax, eax
inc eax
je 0x44db3f
mov dword [ebp - 0xd28], 1
jmp 0x44db46
and dword [ebp - 0xd28], 0
mov eax, 0xb445
test eax, eax
je 0x44dcaf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
mov ecx, dword [ebp - 0x5c]
lea eax, [eax + ecx + 1]
cmp eax, dword [ebp - 0x5c]
jg 0x44db78
mov dword [ebp - 0x273c], 1
jmp 0x44db7f
and dword [ebp - 0x273c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
mov dword [ebp - 0x2ec0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x98]
cmp dword [ebp + eax - 0x98], ecx
jl 0x44dbba
mov dword [ebp - 0x1c24], 1
jmp 0x44dbc1
and dword [ebp - 0x1c24], 0
mov eax, dword [ebp - 0x1c24]
mov dword [ebp - 0xb84], eax
mov eax, dword [ebp - 0xb84]
add eax, dword [ebp - 0x5c]
cmp eax, 0xffffffff
je 0x44dbe7
mov dword [ebp - 0xd00], 1
jmp 0x44dbee
and dword [ebp - 0xd00], 0
cmp dword [ebp - 0xd00], 0x7eed050b
je 0x44dc06
mov dword [ebp - 0x1c2c], 1
jmp 0x44dc0d
and dword [ebp - 0x1c2c], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x1c2c]
cmp eax, dword [ebp - 0x5c]
jge 0x44dc28
mov dword [ebp - 0xd08], 1
jmp 0x44dc2f
and dword [ebp - 0xd08], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
cmp dword [ebp - 0xd08], eax
jg 0x44dc50
mov dword [ebp - 0x1c34], 1
jmp 0x44dc57
and dword [ebp - 0x1c34], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
imul eax, dword [ebp - 0x1c34]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x98]
jg 0x44dc86
mov dword [ebp - 0xd10], 1
jmp 0x44dc8d
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0xb8c]
add eax, dword [ebp - 0xd10]
imul eax, eax, 0xffff
test eax, eax
je 0x44dcaf
mov dword [ebp - 0x1c3c], 1
jmp 0x44dcb6
and dword [ebp - 0x1c3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
cmp dword [ebp - 0x1c3c], eax
jle 0x44dcd2
cmp dword [ebp - 0x970], 0
mov eax, dword [ebp - 0xb84]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x98]
jne 0x44dcf9
cmp dword [ebp - 0xb8c], 0
jne 0x44dcf9
and dword [ebp - 0xd18], 0
jmp 0x44dd03
mov dword [ebp - 0xd18], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xd18], eax
jle 0x44dd1a
mov dword [ebp - 0x1c44], 1
jmp 0x44dd21
and dword [ebp - 0x1c44], 0
mov eax, dword [ebp - 0x970]
cmp dword [ebp - 0x1c44], eax
jl 0x44dd3f
xor eax, eax
je 0x44dd3f
mov dword [ebp - 0xd20], 1
jmp 0x44dd46
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x970]
cmp dword [ebp - 0xd20], eax
jne 0x44dd60
mov dword [ebp - 0x1c4c], 1
jmp 0x44dd67
and dword [ebp - 0x1c4c], 0
mov eax, dword [ebp - 0xb8c]
cmp dword [ebp - 0x1c4c], eax
jge 0x44dd81
mov dword [ebp - 0x2744], 1
jmp 0x44dd88
and dword [ebp - 0x2744], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
mov dword [ebp - 0x2ec8], eax
mov eax, 0x1140
cmp eax, 0x7762
jl 0x44ddb3
mov dword [ebp - 0x1c54], 1
jmp 0x44ddba
and dword [ebp - 0x1c54], 0
mov eax, dword [ebp - 0xd28]
imul eax, dword [ebp - 0x1c54]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x98]
jg 0x44dde2
mov dword [ebp - 0xd30], 1
jmp 0x44dde9
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xd30], eax
jg 0x44de00
mov dword [ebp - 0x1c5c], 1
jmp 0x44de07
and dword [ebp - 0x1c5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
cmp dword [ebp - 0x1c5c], eax
jg 0x44de28
mov dword [ebp - 0xd38], 1
jmp 0x44de2f
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0xd38]
inc eax
je 0x44de4d
cmp dword [ebp - 0x970], 0
je 0x44de4d
mov dword [ebp - 0x1c64], 1
jmp 0x44de54
and dword [ebp - 0x1c64], 0
mov eax, dword [ebp - 0x1c64]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x1c8c], 1
mov dword [ebp - 0xd48], 0x69f30cc2
mov dword [ebp - 0x98c], 0
mov dword [ebp - 0xba0], 0xd5fac122
mov dword [ebp - 0x4a8], 0x831eb239
mov dword [ebp - 0x1c7c], 0xaf9f7c8b
mov dword [ebp - 0xd60], 7
mov dword [ebp - 0x2754], 0xee91b76e
mov dword [ebp - 0x978], 0
jmp 0x44dec6
mov eax, dword [ebp - 0x978]
inc eax
mov dword [ebp - 0x978], eax
cmp dword [ebp - 0x978], 1
jge 0x44dee2
mov eax, dword [ebp - 0x978]
mov dword [ebp + eax*4 - 0xd58], 0xfffffff6
jmp 0x44deb9
cmp dword [ebp - 0x1c8c], 0xfffa
jb 0x44defa
mov dword [ebp - 0xd50], 1
jmp 0x44df01
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [ebp - 0x4a8]
inc ecx
mov dword [ebp - 0x4a8], ecx
cmp eax, 0x971867b8
jbe 0x44dfc2
push 9
pop eax
test eax, eax
je 0x44df3b
cmp dword [ebp - 0x98c], 0
je 0x44df3b
mov dword [ebp - 0xd40], 1
jmp 0x44df42
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0xd40], eax
jge 0x44df5c
mov dword [ebp - 0x1c6c], 1
jmp 0x44df63
and dword [ebp - 0x1c6c], 0
mov eax, dword [ebp - 0x1c6c]
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0xd48], eax
jl 0x44dfa1
mov dword [ebp - 0x1c74], 1
jmp 0x44dfa8
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [ebp - 0x1c74]
jg 0x44dfc2
mov dword [ebp - 0x274c], 1
jmp 0x44dfc9
and dword [ebp - 0x274c], 0
mov eax, dword [ebp - 0x1c7c]
mov dword [ebp - 0x2ed0], eax
imul eax, dword [ebp - 0xd50], 0x1932
mov dword [ebp - 0x1c7c], eax
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x2ed8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd58]
cmp dword [ebp + eax - 0xd58], ecx
je 0x44e019
mov dword [ebp - 0x1c84], 1
jmp 0x44e020
and dword [ebp - 0x1c84], 0
mov eax, dword [ebp - 0x1c84]
mov dword [ebp - 0xd60], eax
mov eax, dword [ebp - 0xd60]
mov dword [ebp - 0x2754], eax
mov eax, dword [ebp - 0x1c8c]
mov dword [ebp - 0xba0], eax
mov dword [ebp - 0x208], 0
jmp 0x44e05d
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x44e079
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x32f4], 0xffff
jmp 0x44e050
mov dword [ebp - 0x2e8], 0x9dada439
mov dword [ebp - 0xba8], 0xc67ee39f
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x277c], 0xffffffff
mov dword [ebp - 0x7e8], 0
jmp 0x44e0ba
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 3
jge 0x44e0d6
mov eax, dword [ebp - 0x7e8]
mov dword [ebp + eax*4 - 0x2aa4], 5
jmp 0x44e0ad
mov dword [ebp - 0x2e8], 0
jmp 0x44e0ef
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 2
jg 0x44e4cd
mov dword [ebp - 0x574], 0xfffffffc
mov dword [ebp - 0x275c], 0xffffffff
mov dword [ebp - 0x2ee0], 0x5452fa81
mov dword [ebp - 0xd68], 4
mov dword [ebp - 0xd70], 5
mov byte [ebp - 0x349], 0
movzx eax, byte [ebp - 0x349]
test eax, eax
je 0x44e150
push 0xa7
push 0x12fb
call dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x574], 0
jmp 0x44e169
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 2
jg 0x44e4c8
mov dword [ebp - 0x57c], 0x7ab3921d
mov dword [ebp - 0x2764], 0xffffffff
mov dword [ebp - 0x5c8], 0
jmp 0x44e1a3
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 1
jge 0x44e1bf
mov eax, dword [ebp - 0x5c8]
mov dword [ebp + eax*4 - 0x584], 0x5706b379
jmp 0x44e196
mov dword [ebp - 0x57c], 2
jmp 0x44e1d8
mov eax, dword [ebp - 0x57c]
dec eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 0
jl 0x44e217
mov byte [ebp - 0x3fe], 0
movzx eax, byte [ebp - 0x3fe]
test eax, eax
je 0x44e1fb
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov eax, dword [ebp - 0x574]
mov ecx, dword [ebp - 0x57c]
mov eax, dword [ebp + eax*4 - 0x2aa4]
mov dword [ebp + ecx*4 - 0x2aa4], eax
jmp 0x44e1cb
xor eax, eax
inc eax
je 0x44e28f
mov dword [ebp - 0x2ee8], 0xbf58
mov dword [ebp - 0x2ef0], 0x1ee4cff1
mov dword [ebp - 0x2ef8], 0x271dbcab
mov dword [ebp - 0x7f0], 0
jmp 0x44e253
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 3
jge 0x44e26f
mov eax, dword [ebp - 0x7f0]
mov dword [ebp + eax*4 - 0x387c], 9
jmp 0x44e246
mov eax, dword [ebp - 0xd68]
dec eax
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0xd70], 0
je 0x44e28a
jmp 0x44e4c8
jmp 0x44e4c3
mov dword [ebp - 0xd80], 0xffffffff
mov dword [ebp - 0xac4], 0xfffffffb
cmp dword [ebp - 0x2e8], 0
jne 0x44e363
xor eax, eax
inc eax
sub eax, dword [ebp - 0x275c]
je 0x44e2c2
cmp dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2764], 0x59f32f52
jl 0x44e2da
mov dword [ebp - 0x1c94], 1
jmp 0x44e2e1
and dword [ebp - 0x1c94], 0
mov eax, dword [ebp - 0x1c94]
sub eax, 0x8406
cmp eax, 0xffffffff
jne 0x44e306
cmp dword [ebp - 0xd80], 0
je 0x44e306
mov dword [ebp - 0x1c9c], 1
jmp 0x44e30d
and dword [ebp - 0x1c9c], 0
mov eax, dword [ebp - 0xd70]
cmp dword [ebp - 0x1c9c], eax
jle 0x44e327
mov dword [ebp - 0xd78], 1
jmp 0x44e32e
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0xd78]
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0
jne 0x44e34f
mov dword [ebp - 0x1ca4], 1
jmp 0x44e356
and dword [ebp - 0x1ca4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
cmp dword [ebp - 0xd80], 0
je 0x44e37f
push 4
pop eax
test eax, eax
je 0x44e37f
mov dword [ebp - 0x276c], 1
jmp 0x44e386
and dword [ebp - 0x276c], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0xba8], eax
jl 0x44e3a0
mov dword [ebp - 0x2774], 1
jmp 0x44e3a7
and dword [ebp - 0x2774], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
mov dword [ebp - 0x2f00], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
mov dword [ebp - 0x2f08], eax
mov dword [ebp - 0xac4], 0xe942fafe
cmp dword [ebp - 0xac4], 0
jne 0x44e4ad
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2aa4]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0xba8], eax
jg 0x44e411
mov dword [ebp - 0x1cb4], 1
jmp 0x44e418
and dword [ebp - 0x1cb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
cmp dword [ebp - 0xba8], eax
jge 0x44e439
mov dword [ebp - 0x1cac], 1
jmp 0x44e440
and dword [ebp - 0x1cac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2aa4]
cmp eax, dword [ebp - 0x1cac]
jg 0x44e461
mov dword [ebp - 0xd88], 1
jmp 0x44e468
and dword [ebp - 0xd88], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd88]
sub ecx, dword [ebp + eax - 0x584]
cmp ecx, dword [ebp - 0xac4]
jl 0x44e48f
mov dword [ebp - 0xd90], 1
jmp 0x44e496
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0x1cb4]
add eax, dword [ebp - 0xd90]
jne 0x44e4ad
and dword [ebp - 0x1cbc], 0
jmp 0x44e4b7
mov dword [ebp - 0x1cbc], 1
mov eax, dword [ebp - 0x1cbc]
mov dword [ebp - 0x277c], eax
jmp 0x44e15c
jmp 0x44e0e2
mov dword [ebp - 0x208], 0
jmp 0x44e4e6
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x44e502
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x220c], 0xd9ee1c97
jmp 0x44e4d9
mov dword [ebp - 0x164], 0xffffffff
mov dword [ebp - 0x5d8], 0x5537c57f
mov dword [ebp - 0x29bc], 3
mov dword [ebp - 0x29b8], 3
mov dword [ebp - 0x29b4], 3
mov dword [ebp - 0x29b0], 3
mov dword [ebp - 0xdb8], 0x214f1636
mov dword [ebp - 0x1ce4], 0xfffffff8
mov dword [ebp - 0x2784], 0xffffffff
mov dword [ebp - 0x7f8], 0
jmp 0x44e575
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 3
jge 0x44e591
mov eax, dword [ebp - 0x7f8]
mov dword [ebp + eax*4 - 0x22b8], 0
jmp 0x44e568
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x22b8], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x22b8]
mov dword [ebp - 0x5d8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22b8]
add eax, dword [ebp - 0x5d8]
cmp eax, dword [ebp - 0x164]
jne 0x44e5dd
mov dword [ebp - 0xd98], 1
jmp 0x44e5e4
and dword [ebp - 0xd98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22b8]
cmp eax, dword [ebp - 0xd98]
jne 0x44e605
mov dword [ebp - 0x1cc4], 1
jmp 0x44e60c
and dword [ebp - 0x1cc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22b8]
cmp dword [ebp - 0x1cc4], eax
jl 0x44e62d
mov dword [ebp - 0xda0], 1
jmp 0x44e634
and dword [ebp - 0xda0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x22b8]
cmp dword [ebp - 0xda0], eax
jge 0x44e661
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22b8], 0
jne 0x44e661
and dword [ebp - 0x9b4], 0
jmp 0x44e66b
mov dword [ebp - 0x9b4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9b4]
mov dword [ebp + eax - 0x22b8], ecx
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x9b4], eax
jl 0x44e698
mov dword [ebp - 0x1ccc], 1
jmp 0x44e69f
and dword [ebp - 0x1ccc], 0
mov eax, dword [ebp - 0x1ccc]
sub eax, dword [ebp - 0x164]
cmp eax, 0x27d373ee
jl 0x44e6be
mov dword [ebp - 0xda8], 1
jmp 0x44e6c5
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xda8], eax
jne 0x44e6e5
cmp dword [ebp - 0x5d8], 0
jne 0x44e6e5
and dword [ebp - 0x1cd4], 0
jmp 0x44e6ef
mov dword [ebp - 0x1cd4], 1
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x1cd4], eax
je 0x44e709
mov dword [ebp - 0xdb0], 1
jmp 0x44e710
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xdb0], eax
jle 0x44e737
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29bc], 0
jne 0x44e737
and dword [ebp - 0x1cdc], 0
jmp 0x44e741
mov dword [ebp - 0x1cdc], 1
mov eax, 0x17e5c285
sub eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0xdb8]
mov dword [ebp - 0x1ce4], eax
cmp dword [ebp - 0x1ce4], 0
je 0x44e77c
cmp dword [ebp - 0x5d8], 0
je 0x44e77c
mov dword [ebp - 0xdc0], 1
jmp 0x44e783
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0xdc0]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x29bc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x29bc]
jge 0x44e7b8
mov dword [ebp - 0x1cec], 1
jmp 0x44e7bf
and dword [ebp - 0x1cec], 0
cmp dword [ebp - 0x1cec], 0xfffffff8
jne 0x44e7d4
mov dword [ebp - 0xdc8], 1
jmp 0x44e7db
and dword [ebp - 0xdc8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29bc]
cmp dword [ebp - 0xdc8], eax
jge 0x44e7fc
mov dword [ebp - 0x1cf4], 1
jmp 0x44e803
and dword [ebp - 0x1cf4], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x1cf4], eax
jne 0x44e81d
mov dword [ebp - 0xdd0], 1
jmp 0x44e824
and dword [ebp - 0xdd0], 0
cmp dword [ebp - 0xdd0], 0xa4a104ac
ja 0x44e83c
mov dword [ebp - 0x1cfc], 1
jmp 0x44e843
and dword [ebp - 0x1cfc], 0
mov eax, dword [ebp - 0x1cfc]
mov dword [ebp - 0x2784], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x220c], 0
je 0x44e86b
mov dword [ebp - 0x1d04], 1
jmp 0x44e872
and dword [ebp - 0x1d04], 0
mov dword [ebp - 0xdd8], 0x5551
mov eax, dword [ebp - 0xdd8]
cmp eax, dword [ebp - 0x1d04]
je 0x44e896
mov dword [ebp - 0xde0], 1
jmp 0x44e89d
and dword [ebp - 0xde0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220c]
add eax, dword [ebp - 0xde0]
cmp eax, 0x310c
jge 0x44e8c9
mov eax, 0xd5493e
test eax, eax
jne 0x44e8c9
and dword [ebp - 0x1d0c], 0
jmp 0x44e8d3
mov dword [ebp - 0x1d0c], 1
cmp dword [ebp - 0x1d0c], 1
je 0x44e8e8
mov dword [ebp - 0xde8], 1
jmp 0x44e8ef
and dword [ebp - 0xde8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220c]
cmp dword [ebp - 0xde8], eax
jl 0x44e910
mov dword [ebp - 0x1d14], 1
jmp 0x44e917
and dword [ebp - 0x1d14], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x220c]
cmp eax, dword [ebp - 0x1d14]
jge 0x44e938
mov dword [ebp - 0xdf0], 1
jmp 0x44e93f
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0xe00]
cmp dword [ebp - 0xdf0], eax
jne 0x44e959
mov dword [ebp - 0xb50], 1
jmp 0x44e960
and dword [ebp - 0xb50], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x32f4]
inc eax
mov dword [ebp - 0xdf8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdf8]
mov dword [ebp + eax - 0x32f4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb50]
mov dword [ebp + eax - 0x220c], ecx
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0x1d1c], eax
mov eax, dword [ebp - 0x1d1c]
cmp dword [ebp - 0xdf8], eax
jne 0x44e9c0
mov dword [ebp - 0x1d24], 1
jmp 0x44e9c7
and dword [ebp - 0x1d24], 0
mov eax, dword [ebp - 0x1d24]
sub eax, 0x3d1a
cmp eax, dword [ebp - 0xe00]
jge 0x44e9ef
mov eax, 0x77cc
test eax, eax
je 0x44e9ef
mov dword [ebp - 0x1d2c], 1
jmp 0x44e9f6
and dword [ebp - 0x1d2c], 0
cmp dword [ebp - 0x1d2c], 0xa0a9f4f9
ja 0x44ea0e
mov dword [ebp - 0xe08], 1
jmp 0x44ea15
and dword [ebp - 0xe08], 0
mov eax, dword [ebp - 0xe08]
mov dword [ebp - 0x278c], eax
mov dword [ebp - 0x248], 0
jmp 0x44ea3a
cmp dword [ebp - 0x248], 2
jge 0x44ea56