Function at 0x49d570
Capabilities:
Get common file path
Get disk size
Get session user name
Modify service
Query or enumerate registry key
Query service status
Set registry value
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x30e0
call fcn.004c70f0
push esi
push edi
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x510], 0x1c
jmp 0x49d5a2
mov eax, dword [ebp - 0x510]
dec eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0xe
jle 0x49d7a6
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0x75c], 0
jmp 0x49d5d2
mov eax, dword [ebp - 0x75c]
inc eax
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 2
jge 0x49d5ee
mov eax, dword [ebp - 0x75c]
mov dword [ebp + eax*4 - 0x2788], 0x30a9bca7
jmp 0x49d5c5
mov dword [ebp - 0x398], 0
jmp 0x49d607
mov eax, dword [ebp - 0x398]
dec eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0xfffffff0
jle 0x49d7a1
mov dword [ebp - 0x8dc], 0
jmp 0x49d62d
mov eax, dword [ebp - 0x8dc]
inc eax
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 2
jge 0x49d649
mov eax, dword [ebp - 0x8dc]
mov dword [ebp + eax*4 - 0xa98], 0xc4c8d3c8
jmp 0x49d620
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa98], 0xffffffe6
jmp 0x49d677
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa98], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa98], 0xfffffff5
je 0x49d79c
mov dword [ebp - 0x1f10], 0x39ee491b
mov dword [ebp - 0x594], 0
jmp 0x49d6ae
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 3
jge 0x49d6ca
mov eax, dword [ebp - 0x594]
mov dword [ebp + eax*4 - 0x2a50], 0xffff
jmp 0x49d6a1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a50]
mov dword [ebp - 0x2bec], eax
cmp dword [ebp - 0x398], 0x31d14cd4
jge 0x49d6f6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa98], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa98], 0
je 0x49d71b
mov eax, 0x5bef
test eax, eax
je 0x49d71b
mov dword [ebp - 0xea0], 1
jmp 0x49d722
and dword [ebp - 0xea0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa98]
cmp dword [ebp - 0xea0], eax
jne 0x49d743
mov dword [ebp - 0x1a60], 1
jmp 0x49d74a
and dword [ebp - 0x1a60], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x1a60], eax
jl 0x49d764
mov dword [ebp - 0x1a68], 1
jmp 0x49d76b
and dword [ebp - 0x1a68], 0
mov eax, dword [ebp - 0x510]
imul eax, dword [ebp - 0x1a68]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2788], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a50]
mov dword [ebp - 0x1f10], eax
jmp 0x49d65c
jmp 0x49d5fa
jmp 0x49d595
mov dword [ebp - 0x584], 1
mov dword [ebp - 0x8a4], 0xfffffffa
mov dword [ebp - 0x59c], 0xfff7
mov dword [ebp - 0xa8c], 0xe2f9d44c
mov dword [ebp - 0x1e38], 0
mov dword [ebp - 0x1e40], 0xffffffff
mov dword [ebp - 0x1e48], 4
mov dword [ebp - 0x82c], 0
jmp 0x49d805
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 1
jge 0x49d821
mov eax, dword [ebp - 0x82c]
mov dword [ebp + eax*4 - 0xa84], 2
jmp 0x49d7f8
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x2634], eax
mov dword [ebp - 0x8a4], 1
cmp dword [ebp - 0x8a4], 0xa5043c4a
jne 0x49d84f
mov dword [ebp - 0x1a78], 1
jmp 0x49d856
and dword [ebp - 0x1a78], 0
cmp dword [ebp - 0x59c], 0
jne 0x49d871
cmp dword [ebp - 0x59c], 0
jne 0x49d871
and dword [ebp - 0x1a70], 0
jmp 0x49d87b
mov dword [ebp - 0x1a70], 1
mov eax, dword [ebp - 0x584]
cmp dword [ebp - 0x1a70], eax
jl 0x49d895
mov dword [ebp - 0x928], 1
jmp 0x49d89c
and dword [ebp - 0x928], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x928]
mov dword [ebp + eax - 0xa84], ecx
mov eax, dword [ebp - 0x1a78]
sub eax, dword [ebp - 0x584]
add eax, dword [ebp - 0x928]
jne 0x49d8d5
cmp dword [ebp - 0x8a4], 0
jne 0x49d8d5
and dword [ebp - 0x1a80], 0
jmp 0x49d8df
mov dword [ebp - 0x1a80], 1
mov eax, dword [ebp - 0x1a80]
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0x584], 0
je 0x49d92f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa84]
mov dword [ebp - 0x1a88], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a88]
mov dword [ebp + eax - 0xa84], ecx
cmp dword [ebp - 0x1a88], 0
jne 0x49d92f
mov dword [ebp - 0x1a98], 1
jmp 0x49d936
and dword [ebp - 0x1a98], 0
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x263c], eax
mov eax, dword [ebp - 0x59c]
imul eax, dword [ebp - 0x59c]
test eax, eax
jne 0x49d965
mov eax, 0x938f
test eax, eax
jne 0x49d965
and dword [ebp - 0x1a90], 0
jmp 0x49d96f
mov dword [ebp - 0x1a90], 1
cmp dword [ebp - 0x1a90], 1
jae 0x49d984
mov dword [ebp - 0x1e30], 1
jmp 0x49d98b
and dword [ebp - 0x1e30], 0
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x2644], eax
mov eax, dword [ebp - 0x1a98]
sub eax, dword [ebp - 0x1e38]
imul eax, dword [ebp - 0xa8c]
cmp eax, 0xfffffff7
jle 0x49d9bb
mov dword [ebp - 0x1aa0], 1
jmp 0x49d9c2
and dword [ebp - 0x1aa0], 0
mov eax, dword [ebp - 0x584]
cmp dword [ebp - 0x1aa0], eax
je 0x49d9dc
mov dword [ebp - 0x1af0], 1
jmp 0x49d9e3
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x1e40]
cmp dword [ebp - 0x1af0], eax
je 0x49d9fd
mov dword [ebp - 0x1af8], 1
jmp 0x49da04
and dword [ebp - 0x1af8], 0
mov eax, dword [ebp - 0x1af8]
mov dword [ebp - 0x1e48], eax
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x4a0], 0x1c
jmp 0x49da33
mov eax, dword [ebp - 0x4a0]
dec eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 0xe
jle 0x49dc37
mov dword [ebp - 0x464], 0xffffffff
mov dword [ebp - 0x5a4], 0
jmp 0x49da63
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 2
jge 0x49da7f
mov eax, dword [ebp - 0x5a4]
mov dword [ebp + eax*4 - 0x2794], 0x30a9bca7
jmp 0x49da56
mov dword [ebp - 0x464], 0
jmp 0x49da98
mov eax, dword [ebp - 0x464]
dec eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0xfffffff0
jle 0x49dc32
mov dword [ebp - 0x834], 0
jmp 0x49dabe
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 2
jge 0x49dada
mov eax, dword [ebp - 0x834]
mov dword [ebp + eax*4 - 0xaa4], 0xc4c8d3c8
jmp 0x49dab1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xaa4], 0xffffffe6
jmp 0x49db08
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xaa4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaa4], 0xfffffff5
je 0x49dc2d
mov dword [ebp - 0x1e50], 0x39ee491b
mov dword [ebp - 0x5ac], 0
jmp 0x49db3f
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 3
jge 0x49db5b
mov eax, dword [ebp - 0x5ac]
mov dword [ebp + eax*4 - 0x2a60], 0xffff
jmp 0x49db32
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a60]
mov dword [ebp - 0x264c], eax
cmp dword [ebp - 0x464], 0x31d14cd4
jge 0x49db87
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaa4], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaa4], 0
je 0x49dbac
mov eax, 0x5bef
test eax, eax
je 0x49dbac
mov dword [ebp - 0x1b00], 1
jmp 0x49dbb3
and dword [ebp - 0x1b00], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa4]
cmp dword [ebp - 0x1b00], eax
jne 0x49dbd4
mov dword [ebp - 0x1b08], 1
jmp 0x49dbdb
and dword [ebp - 0x1b08], 0
mov eax, dword [ebp - 0x464]
cmp dword [ebp - 0x1b08], eax
jl 0x49dbf5
mov dword [ebp - 0x1b10], 1
jmp 0x49dbfc
and dword [ebp - 0x1b10], 0
mov eax, dword [ebp - 0x4a0]
imul eax, dword [ebp - 0x1b10]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2794], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a60]
mov dword [ebp - 0x1e50], eax
jmp 0x49daed
jmp 0x49da8b
jmp 0x49da26
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x1e4], 0xffffffee
jmp 0x49dc64
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xfffffffb
jl 0x49e05a
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0x8fc], 0xbf90350d
mov dword [ebp - 0x1f00], 0x63f3734b
mov dword [ebp - 0xf4], 0
jmp 0x49dca8
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x49dcc4
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x1f74], 0x124f84b8
jmp 0x49dc9b
mov dword [ebp - 0xf4], 0
jmp 0x49dcdd
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x49dcf9
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x260], 0xaa39ed08
jmp 0x49dcd0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x260], 0
jmp 0x49dd27
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x260], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x260], 1
jg 0x49e055
mov dword [ebp - 0x1ee8], 0xffff
mov dword [ebp - 0x1f08], 0xc9751580
mov dword [ebp - 0x1ee0], 0xfffffff8
mov dword [ebp - 0x2654], 0x6b3e713e
mov dword [ebp - 0x1ef8], 0
mov dword [ebp - 0x1a58], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8fc]
imul ecx, dword [ebp + eax - 0x260]
sub ecx, 0x1955e9ac
mov eax, dword [ebp - 0x8fc]
dec eax
mov dword [ebp - 0x8fc], eax
test ecx, ecx
je 0x49ddf9
mov eax, dword [ebp - 0x1ee0]
cmp dword [ebp - 0x8fc], eax
jge 0x49ddc2
cmp dword [ebp - 0xac0], 0
jne 0x49ddc2
and dword [ebp - 0x1714], 0
jmp 0x49ddcc
mov dword [ebp - 0x1714], 1
mov eax, dword [ebp - 0x1714]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0x1a58], eax
cmp dword [ebp - 0x1a58], 0
je 0x49ddf9
mov dword [ebp - 0xb30], 1
jmp 0x49de00
and dword [ebp - 0xb30], 0
imul eax, dword [ebp - 0xb30], 0x1d7f
add eax, 0x169ff4ca
jne 0x49de23
cmp dword [ebp - 0x1e4], 0
jne 0x49de23
and dword [ebp - 0xb34], 0
jmp 0x49de2d
mov dword [ebp - 0xb34], 1
mov eax, dword [ebp - 0x1ee8]
cmp eax, dword [ebp - 0xb34]
jne 0x49de47
mov dword [ebp - 0x1358], 1
jmp 0x49de4e
and dword [ebp - 0x1358], 0
cmp dword [ebp - 0x1358], 0x2ae8
je 0x49de66
mov dword [ebp - 0xb3c], 1
jmp 0x49de6d
and dword [ebp - 0xb3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
mov eax, dword [ebp + eax*4 - 0x1f74]
cmp eax, dword [ebp - 0xb3c]
jl 0x49dfe6
mov dword [ebp - 0x930], 0xffffffff
mov dword [ebp - 0x5b4], 0
jmp 0x49deb0
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 4
jge 0x49decc
mov eax, dword [ebp - 0x5b4]
mov dword [ebp + eax*4 - 0x2dec], 7
jmp 0x49dea3
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x265c], eax
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x2664], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f74]
mov dword [ebp - 0x266c], eax
cmp dword [ebp - 0x930], 0
je 0x49df07
cmp dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x4e78
jle 0x49df1f
mov dword [ebp - 0x1ef0], 1
jmp 0x49df26
and dword [ebp - 0x1ef0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0x2674], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1ef8]
cmp dword [ebp + eax - 0x1f74], ecx
jl 0x49df5a
mov dword [ebp - 0x1334], 1
jmp 0x49df61
and dword [ebp - 0x1334], 0
cmp dword [ebp - 0x1334], 0x8ef5
jl 0x49df79
mov dword [ebp - 0xb44], 1
jmp 0x49df80
and dword [ebp - 0xb44], 0
cmp dword [ebp - 0xb44], 0xbd1a6f32
jne 0x49df98
mov dword [ebp - 0x1a7c], 1
jmp 0x49df9f
and dword [ebp - 0x1a7c], 0
mov eax, dword [ebp - 0x930]
cmp eax, dword [ebp - 0x1a7c]
jg 0x49dfb9
mov dword [ebp - 0xb4c], 1
jmp 0x49dfc0
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
sub eax, dword [ebp - 0x1f00]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2dec], eax
cmp dword [ebp - 0x1f08], 0
je 0x49dfe4
jmp 0x49e055
jmp 0x49e050
mov dword [ebp - 0x758], 0
jmp 0x49dfff
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 4
jge 0x49e01b
mov eax, dword [ebp - 0x758]
mov dword [ebp + eax*4 - 0x2e04], 0
jmp 0x49dff2
mov byte [ebp - 0x262], 0
movzx eax, byte [ebp - 0x262]
test eax, eax
je 0x49e03b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e04], 0
je 0x49e050
jmp 0x49dd0c
jmp 0x49dd0c
jmp 0x49dc57
mov dword [ebp - 0x4b8], 0x1c
jmp 0x49e073
mov eax, dword [ebp - 0x4b8]
dec eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0xe
jle 0x49fb72
mov dword [ebp - 0x760], 0x99841b3c
mov dword [ebp - 0x5bc], 0
jmp 0x49e0a3
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 1
jge 0x49e0bf
mov eax, dword [ebp - 0x5bc]
mov dword [ebp + eax*4 - 0x267c], 0x102d
jmp 0x49e096
mov dword [ebp - 0x760], 0
jmp 0x49e0d8
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0x13
jge 0x49e1fd
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5cc], 0xa29c1464
mov dword [ebp - 0x5c4], 0
jmp 0x49e112
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0
jg 0x49e1f8
mov dword [ebp - 0x768], 0xffffffff
mov dword [ebp - 0x768], 0
jmp 0x49e142
mov eax, dword [ebp - 0x768]
inc eax
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
jg 0x49e1f3
mov dword [ebp - 0x3a4], 0x182a
mov eax, dword [ebp - 0x3a4]
dec eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a4], 0
jmp 0x49e17f
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
jg 0x49e1ee
mov dword [ebp - 0x5cc], 0
jmp 0x49e1a1
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 0
jg 0x49e1c6
mov byte [ebp - 0x248], 0
movzx eax, byte [ebp - 0x248]
test eax, eax
je 0x49e1c4
push 0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
jmp 0x49e194
mov byte [ebp - 0x24a], 0
movzx eax, byte [ebp - 0x24a]
test eax, eax
je 0x49e1ec
push 0x19a3
push 0
push 0
push 0xdbe
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
jmp 0x49e172
jmp 0x49e135
jmp 0x49e105
jmp 0x49e0cb
mov byte [ebp - 0x24c], 0
movzx eax, byte [ebp - 0x24c]
test eax, eax
je 0x49e217
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [ebp - 0x474], 0xffffffff
mov dword [ebp - 0x2684], 1
mov dword [ebp - 0x268c], 0
mov dword [ebp - 0x2694], 0xffffffff
mov dword [ebp - 0x269c], 0xa9ac70c3
mov dword [ebp - 0x26a4], 0xedca8fec
mov dword [ebp - 0x26ac], 0x5fba2522
mov dword [ebp - 0x133c], 0x5d840dfe
mov dword [ebp - 0x26b4], 0xdacb314b
mov dword [ebp - 0x194], 0
jmp 0x49e28a
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x49e2a6
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x2fdc], 0xfffffffe
jmp 0x49e27d
mov dword [ebp - 0x194], 0
jmp 0x49e2bf
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 4
jge 0x49e2db
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x2c9c], 0x6310fec
jmp 0x49e2b2
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2c9c]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2c9c], eax
mov eax, dword [ebp - 0x133c]
dec eax
mov dword [ebp - 0x133c], eax
mov dword [ebp - 0x568], 0x52f76ec7
mov dword [ebp - 0xb64], 0xfff6
mov dword [ebp - 0x134c], 0xffffffff
mov dword [ebp - 0x414], 1
cmp dword [ebp - 0x568], 0x1d8f
jl 0x49e343
mov dword [ebp - 0xb54], 1
jmp 0x49e34a
and dword [ebp - 0xb54], 0
cmp dword [ebp - 0xb54], 1
jle 0x49e35f
mov dword [ebp - 0x171c], 1
jmp 0x49e366
and dword [ebp - 0x171c], 0
mov eax, dword [ebp - 0x171c]
add eax, 0x6c218e99
cmp eax, 6
jge 0x49e386
push 5
pop eax
test eax, eax
jne 0x49e386
and dword [ebp - 0xb5c], 0
jmp 0x49e390
mov dword [ebp - 0xb5c], 1
cmp dword [ebp - 0xb5c], 0x17b722ba
jge 0x49e3a8
mov dword [ebp - 0x1344], 1
jmp 0x49e3af
and dword [ebp - 0x1344], 0
mov eax, dword [ebp - 0x1344]
sub eax, 9
cmp eax, dword [ebp - 0xb64]
je 0x49e3cc
mov dword [ebp - 0x190c], 1
jmp 0x49e3d3
and dword [ebp - 0x190c], 0
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x190c], eax
jl 0x49e3ed
mov dword [ebp - 0xb6c], 1
jmp 0x49e3f4
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0x134c], eax
mov eax, dword [ebp - 0x134c]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x568], 0xffffffe4
jmp 0x49e425
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0xa
je 0x49e492
mov dword [ebp - 0x1ba8], 7
mov byte [ebp - 0x24e], 0
movzx eax, byte [ebp - 0x24e]
test eax, eax
je 0x49e45c
push 0xe4d
push 0x9e4
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov dword [ebp - 0x414], 0xb
jmp 0x49e475
mov eax, dword [ebp - 0x414]
dec eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0xfffffff4
jle 0x49e490
imul eax, dword [ebp - 0x414], 0xffff
mov dword [ebp - 0x1ba8], eax
jmp 0x49e468
jmp 0x49e418
mov dword [ebp - 0x26bc], 9
mov dword [ebp - 0x26c4], 0xe85a7b05
mov dword [ebp - 0x3ac], 0x556123d4
mov dword [ebp - 0x770], 0
jmp 0x49e4c9
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 4
jge 0x49e4e5
mov eax, dword [ebp - 0x770]
mov dword [ebp + eax*4 - 0x3010], 0x833fcb50
jmp 0x49e4bc
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3ac], 0
jmp 0x49e50b
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 6
jg 0x49e537
mov byte [ebp - 0x250], 0
movzx eax, byte [ebp - 0x250]
test eax, eax
je 0x49e535
push 0
push 0x1281
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
jmp 0x49e4fe
mov dword [ebp - 0x5d4], 0
jmp 0x49e550
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 2
jge 0x49e56c
mov eax, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x27a0], 0x30a9bca7
jmp 0x49e543
mov dword [ebp - 0x20ac], 0xfffffff8
mov dword [ebp - 0x20a8], 0xfffffff8
mov dword [ebp - 0x20a4], 0xfffffff8
mov dword [ebp - 0x20a0], 0xfffffff8
mov dword [ebp - 0xa6c], 0xfffffff8
mov dword [ebp - 0x778], 0
jmp 0x49e5b7
mov eax, dword [ebp - 0x778]
inc eax
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x778], 4
jge 0x49e5d3
mov eax, dword [ebp - 0x778]
mov dword [ebp + eax*4 - 0x2e1c], 0xfffffffe
jmp 0x49e5aa
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20ac], 0
je 0x49e6ba
mov dword [ebp - 0x1f18], 9
mov dword [ebp - 0x5dc], 0
jmp 0x49e609
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 2
jge 0x49e625
mov eax, dword [ebp - 0x5dc]
mov dword [ebp + eax*4 - 0x1f80], 0xfffffffa
jmp 0x49e5fc
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1f18]
cmp dword [ebp + eax - 0x1f80], ecx
jl 0x49e646
mov dword [ebp - 0xb74], 1
jmp 0x49e64d
and dword [ebp - 0xb74], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f80]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x1f80]
cmp eax, dword [ebp - 0xb74]
jne 0x49e67b
mov dword [ebp - 0x1724], 1
jmp 0x49e682
and dword [ebp - 0x1724], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20ac]
cmp eax, dword [ebp - 0x1724]
jl 0x49e6a2
mov dword [ebp - 0xb7c], 1
jmp 0x49e6a9
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0xa6c], eax
jmp 0x49e78e
mov dword [ebp - 0x780], 0
jmp 0x49e6d3
mov eax, dword [ebp - 0x780]
inc eax
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 2
jge 0x49e6ef
mov eax, dword [ebp - 0x780]
mov dword [ebp + eax*4 - 0x1b58], 5
jmp 0x49e6c6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b58], 0
jne 0x49e778
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b58], 0
je 0x49e76f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20ac], 0
jge 0x49e72b
mov dword [ebp - 0x1354], 1
jmp 0x49e732
and dword [ebp - 0x1354], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b58]
cmp dword [ebp - 0x1354], eax
jne 0x49e753
mov dword [ebp - 0xb84], 1
jmp 0x49e75a
and dword [ebp - 0xb84], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b58]
cmp dword [ebp - 0xb84], eax
je 0x49e778
and dword [ebp - 0x1a04], 0
jmp 0x49e782
mov dword [ebp - 0x1a04], 1
mov eax, dword [ebp - 0x1a04]
mov dword [ebp - 0xa6c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e1c]
mov dword [ebp - 0xa6c], eax
mov dword [ebp - 0x474], 0
jmp 0x49e7ba
mov eax, dword [ebp - 0x474]
dec eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0xfffffff0
jle 0x49fb6d
mov dword [ebp - 0x26cc], 5
mov byte [ebp - 0x252], 0
movzx eax, byte [ebp - 0x252]
test eax, eax
je 0x49e7f5
push 0xe4d
push 0x9e4
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 0x254], 0
movzx eax, byte [ebp - 0x254]
test eax, eax
je 0x49e822
push 0
push 0
push 0x1bc7
push 0x1e31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
mov dword [ebp - 0x22c], 4
mov dword [ebp - 0x208c], 0xffffffff
mov dword [ebp - 0x2088], 0xffffffff
mov dword [ebp - 0x2084], 0xffffffff
mov dword [ebp - 0x2080], 0xffffffff
mov dword [ebp - 0x26d4], 0xa05132d7
mov dword [ebp - 0x938], 4
mov dword [ebp - 0xb94], 0x58aa
mov dword [ebp - 0xba4], 6
mov dword [ebp - 0xa7c], 0xf26af903
mov dword [ebp - 0xbac], 0x4a1d2daf
mov dword [ebp - 0xbb4], 0xcbdb62b2
mov dword [ebp - 0x1f30], 0x2633933b
mov dword [ebp - 0x5e4], 0
jmp 0x49e8bd
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 3
jge 0x49e8d9
mov eax, dword [ebp - 0x5e4]
mov dword [ebp + eax*4 - 0x2d18], 0xdd3ed23c
jmp 0x49e8b0
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0x22c], eax
je 0x49e8f3
mov dword [ebp - 0x172c], 1
jmp 0x49e8fa
and dword [ebp - 0x172c], 0
mov eax, dword [ebp - 0x938]
add eax, 0xca77
mov dword [ebp - 0x1f20], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1f28], eax
mov eax, dword [ebp - 0x938]
inc eax
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0x1f20]
cmp eax, dword [ebp - 0x1f28]
jle 0x49e93e
mov dword [ebp - 0xb8c], 1
jmp 0x49e945
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0xb94]
cmp dword [ebp - 0xb8c], eax
jne 0x49e95f
mov dword [ebp - 0x135c], 1
jmp 0x49e966
and dword [ebp - 0x135c], 0
mov eax, dword [ebp - 0x135c]
sub eax, dword [ebp - 0xb94]
imul eax, dword [ebp - 0xba4]
cmp dword [ebp - 0x172c], eax
jge 0x49e98d
mov dword [ebp - 0xb9c], 1
jmp 0x49e994
and dword [ebp - 0xb9c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb9c]
sub ecx, dword [ebp + eax - 0x208c]
cmp ecx, 0xcff1
jle 0x49e9ba
mov dword [ebp - 0x1364], 1
jmp 0x49e9c1
and dword [ebp - 0x1364], 0
cmp dword [ebp - 0x1364], 0x64974402
jge 0x49e9d9
mov dword [ebp - 0xa08], 1
jmp 0x49e9e0
and dword [ebp - 0xa08], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa08]
mov dword [ebp + eax - 0x208c], ecx
mov eax, dword [ebp - 0xa08]
sub eax, dword [ebp - 0xba4]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0xa7c], eax
jl 0x49ea1f
mov dword [ebp - 0x940], 1
jmp 0x49ea26
and dword [ebp - 0x940], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x940]
mov dword [ebp + eax - 0x2d18], ecx
mov eax, dword [ebp - 0x22c]
imul eax, dword [ebp - 0x940]
mov ecx, dword [ebp - 0x22c]
imul ecx, eax
test ecx, ecx
jne 0x49ea64
cmp dword [ebp - 0x22c], 0
jne 0x49ea64
and dword [ebp - 0x1914], 0
jmp 0x49ea6e
mov dword [ebp - 0x1914], 1
mov eax, dword [ebp - 0x1914]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xbac]
cmp dword [ebp - 0x22c], eax
jg 0x49ea94
mov dword [ebp - 0x136c], 1
jmp 0x49ea9b
and dword [ebp - 0x136c], 0
mov eax, dword [ebp - 0x136c]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0xbb4]
neg eax
je 0x49eaba
cmp dword [ebp - 0xa7c], 0
jne 0x49eacc
mov eax, 0x1b36
test eax, eax
jne 0x49eacc
and dword [ebp - 0x1734], 0
jmp 0x49ead6
mov dword [ebp - 0x1734], 1
mov eax, dword [ebp - 0x1734]
mov dword [ebp - 0x1f30], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x208c], 0xfffffff9
mov dword [ebp - 0x788], 0
jmp 0x49eb0b
mov eax, dword [ebp - 0x788]
inc eax
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 2
jge 0x49eb27
mov eax, dword [ebp - 0x788]
mov dword [ebp + eax*4 - 0xab0], 0xc4c8d3c8
jmp 0x49eafe
mov dword [ebp - 0x44c], 0xfffffffa
mov dword [ebp - 0xbbc], 0xfffffffd
mov dword [ebp - 0xbd4], 0xdc164f94
mov dword [ebp - 0x1f40], 1
mov dword [ebp - 0x227c], 1
mov dword [ebp - 0x2278], 1
mov dword [ebp - 0x2274], 1
mov dword [ebp - 0x2270], 1
mov dword [ebp - 0xfc], 0
jmp 0x49eb90
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x49ebac
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x2a70], 4
jmp 0x49eb83
mov dword [ebp - 0xfc], 0
jmp 0x49ebc5
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x49ebe1
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x5ec], 0xfffffff6
jmp 0x49ebb8
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x26dc], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x26e4], eax
mov eax, dword [ebp - 0x44c]
cmp dword [ebp - 0xbbc], eax
jl 0x49ec13
mov dword [ebp - 0x948], 1
jmp 0x49ec1a
and dword [ebp - 0x948], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x948]
mov dword [ebp + eax - 0x2a70], ecx
cmp dword [ebp - 0x948], 0
jne 0x49ec42
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2a70], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ec]
cmp dword [ebp - 0x44c], eax
je 0x49ec73
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5ec], 0
je 0x49ec73
mov dword [ebp - 0x1374], 1
jmp 0x49ec7a
and dword [ebp - 0x1374], 0
mov eax, dword [ebp - 0xbbc]
cmp dword [ebp - 0x1374], eax
jne 0x49ec94
mov dword [ebp - 0xbc4], 1
jmp 0x49ec9b
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0xbd4]
cmp dword [ebp - 0xbc4], eax
jne 0x49ecb5
mov dword [ebp - 0x1ac8], 1
jmp 0x49ecbc
and dword [ebp - 0x1ac8], 0
cmp dword [ebp - 0x1ac8], 0x806a
je 0x49ecd4
mov dword [ebp - 0xbcc], 1
jmp 0x49ecdb
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0x44c]
add eax, dword [ebp - 0xbcc]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x5ec]
cmp eax, 0xf215
jl 0x49ed07
mov dword [ebp - 0x137c], 1
jmp 0x49ed0e
and dword [ebp - 0x137c], 0
mov eax, dword [ebp - 0x44c]
cmp eax, dword [ebp - 0x137c]
jge 0x49ed28
mov dword [ebp - 0x1f38], 1
jmp 0x49ed2f
and dword [ebp - 0x1f38], 0
mov eax, dword [ebp - 0xbd4]
mov dword [ebp - 0x26ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ec]
mov dword [ebp - 0x26f4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f40]
mov dword [ebp + eax - 0x227c], ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xab0], 0xffffffe6
jmp 0x49ed8f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xab0], 0xfffffff5
je 0x49fb68
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x790], 0
jmp 0x49edcd
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 3
jge 0x49ede9
mov eax, dword [ebp - 0x790]
mov dword [ebp + eax*4 - 0xad8], 0x7633efc0
jmp 0x49edc0
mov byte [ebp - 0x256], 0
movzx eax, byte [ebp - 0x256]
test eax, eax
je 0x49ee05
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x173c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x173c]
mov dword [ebp + eax - 0xad8], ecx
cmp dword [ebp - 0x173c], 0xfffffff8
jge 0x49ee35
mov dword [ebp - 0xbdc], 1
jmp 0x49ee3c
and dword [ebp - 0xbdc], 0
mov eax, 0x72ca
test eax, eax
je 0x49ee55
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x26fc], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jl 0x49ee72
mov dword [ebp - 0x1384], 1
jmp 0x49ee79
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0xbdc]
imul eax, dword [ebp - 0x1384]
test eax, eax
je 0x49eee9
mov dword [ebp - 0x1f48], 0
cmp dword [ebp - 0x1f48], 0xffffffff
jle 0x49eea9
mov dword [ebp - 0xbe4], 1
jmp 0x49eeb0
and dword [ebp - 0xbe4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbe4]
mov dword [ebp + eax - 0xad8], ecx
mov byte [ebp - 0x258], 0
movzx eax, byte [ebp - 0x258]
test eax, eax
je 0x49eee4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x49f14f
mov dword [ebp - 0x139c], 0x5dbc
mov dword [ebp - 0x2704], 0x14a1
mov dword [ebp - 0x270c], 0
mov dword [ebp - 0x174c], 0x83ce
mov dword [ebp - 0x18], 0
jmp 0x49ef21
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x49f142
mov dword [ebp - 0x3b4], 3
mov dword [ebp - 0x1f50], 0x1361131e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0xad8]
cmp dword [ebp + eax*4 - 0xad8], ecx
jge 0x49ef61
mov dword [ebp - 0x1744], 1
jmp 0x49ef68
and dword [ebp - 0x1744], 0
mov dword [ebp - 0x3b4], 0xfff8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xad8]
cmp dword [ebp - 0x3b4], eax
jl 0x49ef90
mov dword [ebp - 0x191c], 1
jmp 0x49ef97
and dword [ebp - 0x191c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xad8]
cmp dword [ebp - 0x191c], eax
jl 0x49efb5
mov dword [ebp - 0xbec], 1
jmp 0x49efbc
and dword [ebp - 0xbec], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xbec]
sub ecx, dword [ebp + eax - 0xad8]
cmp dword [ebp - 0x139c], ecx
jle 0x49efe2
mov dword [ebp - 0x138c], 1
jmp 0x49efe9
and dword [ebp - 0x138c], 0
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x138c], eax
jne 0x49f003
mov dword [ebp - 0xbf4], 1
jmp 0x49f00a
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0xbf4]
sub eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x1744], eax
je 0x49f02a
mov dword [ebp - 0xbfc], 1
jmp 0x49f031
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xbfc], eax
jle 0x49f048
mov dword [ebp - 0x1394], 1
jmp 0x49f04f
and dword [ebp - 0x1394], 0
cmp dword [ebp - 0x1394], 0x5e45
je 0x49f067
mov dword [ebp - 0xc04], 1
jmp 0x49f06e
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xad8]
cmp dword [ebp - 0xc04], eax
jge 0x49f08c
mov dword [ebp - 0x1a0c], 1
jmp 0x49f093
and dword [ebp - 0x1a0c], 0
mov eax, dword [ebp - 0x1f50]
imul eax, dword [ebp - 0x1a0c]
cmp eax, 1
jae 0x49f0b1
mov dword [ebp - 0xc0c], 1
jmp 0x49f0b8
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xad8]
cmp eax, dword [ebp - 0xc0c]
jge 0x49f0df
cmp dword [ebp - 0x139c], 0
je 0x49f0df
mov dword [ebp - 0xc14], 1
jmp 0x49f0e6
and dword [ebp - 0xc14], 0
cmp dword [ebp - 0xc14], 0
jne 0x49f109
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xad8], 0x8deb256
mov dword [ebp - 0x41c], 0x8deb256
jmp 0x49f13d
mov dword [ebp - 0x3b4], 0
jmp 0x49f122
mov eax, dword [ebp - 0x3b4]
dec eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0xffffffef
jge 0x49f13d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xad8]
mov dword [ebp - 0x41c], eax
jmp 0x49f115
jmp 0x49ef1a
mov eax, dword [ebp - 0x174c]
inc eax
mov dword [ebp - 0x174c], eax
mov dword [ebp - 0x5f4], 0
jmp 0x49f168
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 2
jge 0x49f184
mov eax, dword [ebp - 0x5f4]
mov dword [ebp + eax*4 - 0x1b28], 0x3342eb9
jmp 0x49f15b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1b28], 0
jmp 0x49f1b2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b28]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1b28], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b28], 8
jg 0x49f208
mov dword [ebp - 0x4a8], 0x9aed23b6
mov dword [ebp - 0x1f58], 1
mov dword [ebp - 0x4a8], 0
jmp 0x49f1ef
mov eax, dword [ebp - 0x4a8]
inc eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x16
jne 0x49f206
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x1f58], eax
jmp 0x49f1e2
jmp 0x49f197
mov dword [ebp - 0x2044], 0x39ee491b
mov dword [ebp - 0x268], 3
mov dword [ebp - 0x950], 0xd8d9
mov dword [ebp - 0xc34], 0x5fc1
mov dword [ebp - 0x5fc], 0x93c3
mov dword [ebp - 0x1d8], 0
jmp 0x49f253
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x49f26f
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x2f28], 1
jmp 0x49f246
mov dword [ebp - 0x1d8], 0
jmp 0x49f288
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x49f2a4
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x104], 0x3f4f46db
jmp 0x49f27b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x104], 0
jmp 0x49f2d2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x104], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 2
jg 0x49f33f
mov byte [ebp - 0x233], 0
movzx eax, byte [ebp - 0x233]
test eax, eax
je 0x49f319
push 0x1219
push 0xde9
push 0x3c
push 0x84a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov byte [ebp - 0x37a], 0
movzx eax, byte [ebp - 0x37a]
test eax, eax
je 0x49f33a
push 0
push 0
push 0x229e
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x49f2b7
mov dword [ebp - 0x268], 0
jmp 0x49f358
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 7
jge 0x49f75c
mov dword [ebp - 0x1f4], 0xedfa831e
mov dword [ebp - 0xd0], 0x76ab2aee
mov dword [ebp - 0x798], 0
jmp 0x49f392
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 3
jge 0x49f3ae
mov eax, dword [ebp - 0x798]
mov dword [ebp + eax*4 - 0x21ec], 0
jmp 0x49f385
imul eax, dword [ebp - 0x950], 0
cmp eax, dword [ebp - 0xd0]
jge 0x49f3c9
mov dword [ebp - 0xc1c], 1
jmp 0x49f3d0
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x268]
cmp dword [ebp - 0xc1c], eax
je 0x49f3f3
cmp dword [ebp - 0xd0], 0
je 0x49f3f3
mov dword [ebp - 0x1f60], 1
jmp 0x49f3fa
and dword [ebp - 0x1f60], 0
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0x2714], eax
xor eax, eax
inc eax
je 0x49f420
cmp dword [ebp - 0xd0], 0
je 0x49f420
mov dword [ebp - 0x13a4], 1
jmp 0x49f427
and dword [ebp - 0x13a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
imul eax, dword [ebp - 0x13a4]
cmp eax, dword [ebp - 0xd0]
jle 0x49f44f
mov dword [ebp - 0x1f68], 1
jmp 0x49f456
and dword [ebp - 0x1f68], 0
mov eax, dword [ebp - 0x268]
cmp dword [ebp - 0xd0], eax
jne 0x49f470
mov dword [ebp - 0x1fb8], 1
jmp 0x49f477
and dword [ebp - 0x1fb8], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x271c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21ec]
cmp dword [ebp - 0x268], eax
je 0x49f4a4
mov dword [ebp - 0xc24], 1
jmp 0x49f4ab
and dword [ebp - 0xc24], 0
cmp dword [ebp - 0xc24], 4
jge 0x49f4c0
mov dword [ebp - 0x1924], 1
jmp 0x49f4c7
and dword [ebp - 0x1924], 0
cmp dword [ebp - 0x1924], 0xd88c
jg 0x49f4df
mov dword [ebp - 0xc2c], 1
jmp 0x49f4e6
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0xc2c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x104]
jg 0x49f50e
mov dword [ebp - 0x13ac], 1
jmp 0x49f515
and dword [ebp - 0x13ac], 0
mov eax, dword [ebp - 0x1f4]
imul eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x13ac]
mov dword [ebp - 0x1fc0], eax
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0x1fc8], eax
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1fc0]
cmp eax, dword [ebp - 0x1fc8]
je 0x49f561
mov dword [ebp - 0x1754], 1
jmp 0x49f568
and dword [ebp - 0x1754], 0
cmp dword [ebp - 0x1754], 0xfffffffd
jne 0x49f586
cmp dword [ebp - 0xd0], 0
je 0x49f586
mov dword [ebp - 0xc3c], 1
jmp 0x49f58d
and dword [ebp - 0xc3c], 0
mov eax, dword [ebp - 0x5fc]
cmp dword [ebp - 0xc3c], eax
jge 0x49f5a7
mov dword [ebp - 0x13b4], 1
jmp 0x49f5ae
and dword [ebp - 0x13b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13b4]
mov dword [ebp + eax - 0x104], ecx
mov dword [ebp - 0x1f4], 0
jmp 0x49f5da
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x34
jne 0x49f757
mov dword [ebp - 0x518], 0x2a53
mov dword [ebp - 0x175c], 0x1937da87
mov dword [ebp - 0x1fd0], 0xe43232af
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
je 0x49f719
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x2724], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x272c], eax
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x2734], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21ec]
cmp dword [ebp - 0x518], eax
jle 0x49f65e
mov dword [ebp - 0xa10], 1
jmp 0x49f665
and dword [ebp - 0xa10], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa10]
mov dword [ebp + eax - 0x104], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x518]
add ecx, dword [ebp - 0xa10]
cmp ecx, dword [ebp + eax - 0x21ec]
je 0x49f69f
mov dword [ebp - 0xc44], 1
jmp 0x49f6a6
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0x5fc]
cmp dword [ebp - 0xc44], eax
jle 0x49f6c0
mov dword [ebp - 0x1a84], 1
jmp 0x49f6c7
and dword [ebp - 0x1a84], 0
mov eax, dword [ebp - 0x518]
mov ecx, dword [ebp - 0x1a84]
sub ecx, dword [ebp - 0x950]
sub eax, ecx
neg eax
cmp eax, dword [ebp - 0x518]
jg 0x49f6f1
mov dword [ebp - 0xc4c], 1
jmp 0x49f6f8
and dword [ebp - 0xc4c], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0xc4c], eax
jle 0x49f712
mov dword [ebp - 0x13bc], 1
jmp 0x49f719
and dword [ebp - 0x13bc], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x950], eax
jl 0x49f733
mov dword [ebp - 0xc54], 1
jmp 0x49f73a
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0x175c], eax
mov eax, dword [ebp - 0x175c]
mov dword [ebp - 0x1fd0], eax
jmp 0x49f5cd
jmp 0x49f34b
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0xc5c], 0xffffffff
mov dword [ebp - 0x3bc], 0x948708ef
mov dword [ebp - 0x7a0], 0
jmp 0x49f793
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 3
jge 0x49f7af
mov eax, dword [ebp - 0x7a0]
mov dword [ebp + eax*4 - 0x2d84], 0xfffffff6
jmp 0x49f786
mov dword [ebp - 0x4b0], 2
jmp 0x49f7c8
mov eax, dword [ebp - 0x4b0]
dec eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
jl 0x49f7eb
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0x3bc], eax
jmp 0x49f7bb
mov dword [ebp - 0x3bc], 0
jmp 0x49f804
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 3
jge 0x49f820
mov eax, dword [ebp - 0x3bc]
mov dword [ebp + eax*4 - 0x2d84], 0
jmp 0x49f7f7
mov dword [ebp - 0x604], 0
jmp 0x49f839
mov eax, dword [ebp - 0x604]
inc eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 3
jge 0x49f855
mov eax, dword [ebp - 0x604]
mov dword [ebp + eax*4 - 0x2a80], 0xffff
jmp 0x49f82c
mov dword [ebp - 0x550], 4
mov dword [ebp - 0x958], 0xffffffff
mov dword [ebp - 0xa74], 8
mov dword [ebp - 0x7a8], 0
jmp 0x49f88c
mov eax, dword [ebp - 0x7a8]
inc eax
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 3
jge 0x49f8a8
mov eax, dword [ebp - 0x7a8]
mov dword [ebp + eax*4 - 0x1b78], 1
jmp 0x49f87f
mov byte [ebp - 0x235], 0
movzx eax, byte [ebp - 0x235]
test eax, eax
je 0x49f8c5
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x273c], eax
mov eax, 0x870
sub eax, dword [ebp - 0x958]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1b78]
je 0x49f8f9
mov dword [ebp - 0x13c4], 1
jmp 0x49f900
and dword [ebp - 0x13c4], 0
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0x13c4], eax
je 0x49f91a
mov dword [ebp - 0x1fd8], 1
jmp 0x49f921
and dword [ebp - 0x1fd8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1b78]
add eax, 0x671c
imul eax, eax, 0x4c20
test eax, eax
jne 0x49f954
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b78], 0
jne 0x49f954
and dword [ebp - 0xc64], 0
jmp 0x49f95e
mov dword [ebp - 0xc64], 1
mov eax, dword [ebp - 0xa74]
inc eax
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0xa74]
cmp eax, dword [ebp - 0xc64]
jg 0x49f985
mov dword [ebp - 0x192c], 1
jmp 0x49f98c
and dword [ebp - 0x192c], 0
mov eax, dword [ebp - 0x192c]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x1b78]
cmp eax, dword [ebp - 0x550]
jl 0x49f9bf
mov dword [ebp - 0xc6c], 1
jmp 0x49f9c6
and dword [ebp - 0xc6c], 0
cmp dword [ebp - 0xc6c], 1
jne 0x49f9db
mov dword [ebp - 0x13cc], 1
jmp 0x49f9e2
and dword [ebp - 0x13cc], 0
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0x13cc], eax
jg 0x49f9fc
mov dword [ebp - 0xc74], 1
jmp 0x49fa03
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0xc74], eax
jge 0x49fa1d
mov dword [ebp - 0x1764], 1
jmp 0x49fa24
and dword [ebp - 0x1764], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1b78]
add eax, dword [ebp - 0x1764]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b78], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a80]
mov dword [ebp - 0x2744], eax
cmp dword [ebp - 0x474], 0x31d14cd4
jge 0x49fa6f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xab0], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xab0], 0
je 0x49fa94
mov eax, 0x5bef
test eax, eax
je 0x49fa94
mov dword [ebp - 0xc7c], 1
jmp 0x49fa9b
and dword [ebp - 0xc7c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xab0]
cmp dword [ebp - 0xc7c], eax
jne 0x49fabc
mov dword [ebp - 0x13d4], 1
jmp 0x49fac3
and dword [ebp - 0x13d4], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x13d4], eax
jl 0x49fadd
mov dword [ebp - 0xc84], 1
jmp 0x49fae4
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4b8]
imul eax, dword [ebp - 0xc84]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x27a0], eax
mov dword [ebp - 0x274c], 0x13ec
mov byte [ebp - 0x362], 0
movzx eax, byte [ebp - 0x362]
test eax, eax
je 0x49fb30
push 0
push 0
push 0x5e3
push 0x1700
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
mov byte [ebp - 0x237], 0
movzx eax, byte [ebp - 0x237]
test eax, eax
je 0x49fb51
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a80]
mov dword [ebp - 0x2044], eax
jmp 0x49ed74
jmp 0x49e7ad
jmp 0x49e066
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x10c], 0x62395e2d
mov dword [ebp - 0x2754], 1
mov dword [ebp - 0x275c], 0xff81308f
mov dword [ebp - 0x2764], 0x713981d
mov dword [ebp - 0x276c], 0xd6c332e4
mov dword [ebp - 0x2774], 1
mov dword [ebp - 0x277c], 0xfffffff8
mov dword [ebp - 0x2998], 0xffffffff
mov dword [ebp - 0xcc4], 0
mov dword [ebp - 0x19c], 0
jmp 0x49fbec
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x49fc08
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x2db4], 0xfffffffc
jmp 0x49fbdf
mov dword [ebp - 0x19c], 0
jmp 0x49fc21
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x49fc3d
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x2f7c], 1
jmp 0x49fc14
or eax, 0xffffffff
sub eax, dword [ebp - 0x74]
cmp dword [ebp - 0x74], eax
je 0x49fc54
mov dword [ebp - 0x1a14], 1
jmp 0x49fc5b
and dword [ebp - 0x1a14], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1a14], eax
je 0x49fc7b
mov eax, 0x78f1e0c8
test eax, eax
je 0x49fc7b
mov dword [ebp - 0xc8c], 1
jmp 0x49fc82
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0xc8c]
add eax, dword [ebp - 0x74]
neg eax
cmp eax, dword [ebp - 0x74]
jge 0x49fca4
mov dword [ebp - 0x13dc], 1
jmp 0x49fcab
and dword [ebp - 0x13dc], 0
cmp dword [ebp - 0x13dc], 1
je 0x49fcc0
mov dword [ebp - 0x204c], 1
jmp 0x49fcc7
and dword [ebp - 0x204c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x29a0], eax
imul eax, dword [ebp - 0x74], 0
cmp eax, dword [ebp - 0x74]
jne 0x49fce5
mov dword [ebp - 0xc94], 1
jmp 0x49fcec
and dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0xc94]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x74], eax
je 0x49fd0c
mov dword [ebp - 0x176c], 1
jmp 0x49fd13
and dword [ebp - 0x176c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x176c], eax
jne 0x49fd2d
mov dword [ebp - 0xc9c], 1
jmp 0x49fd34
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0xc9c]
test eax, eax
jne 0x49fd54
cmp dword [ebp - 0x74], 0
jne 0x49fd54
and dword [ebp - 0x13e4], 0
jmp 0x49fd5e
mov dword [ebp - 0x13e4], 1
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x13e4]
je 0x49fd97
cmp dword [ebp - 0x10c], 0
je 0x49fd97
mov byte [ebp - 0x390], 0
movzx eax, byte [ebp - 0x390]
test eax, eax
je 0x49fd92
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x4a0030
mov dword [ebp - 0x1e0], 0x8597a0b8
mov dword [ebp - 0x114], 0x1996
mov dword [ebp - 0xcbc], 0xc77a5c6a
mov dword [ebp - 0x29a8], 0
mov dword [ebp - 0x29b0], 1
mov dword [ebp - 0x60c], 0
jmp 0x49fde2
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 1
jge 0x49fdfe
mov eax, dword [ebp - 0x60c]
mov dword [ebp + eax*4 - 0x29b8], 1
jmp 0x49fdd5
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x29c0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x29c8], eax
cmp dword [ebp - 0x10c], 0xfffffffe
jge 0x49fe2b
mov dword [ebp - 0xca4], 1
jmp 0x49fe32
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0xca4]
add eax, 0xb5df
cmp eax, dword [ebp - 0x114]
jge 0x49fe51
mov dword [ebp - 0x2054], 1
jmp 0x49fe58
and dword [ebp - 0x2054], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x29d0], eax
cmp dword [ebp - 0x1e0], 0
jl 0x49fe79
mov dword [ebp - 0x1934], 1
jmp 0x49fe80
and dword [ebp - 0x1934], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x1934], eax
jg 0x49fea3
cmp dword [ebp - 0x114], 0
je 0x49fea3
mov dword [ebp - 0x205c], 1
jmp 0x49feaa
and dword [ebp - 0x205c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x29d8], eax
imul eax, dword [ebp - 0x74], 0xfffffffd
mov ecx, dword [ebp - 0x114]
add ecx, dword [ebp - 0x1e0]
cmp eax, ecx
jne 0x49fed6
mov dword [ebp - 0x2064], 1
jmp 0x49fedd
and dword [ebp - 0x2064], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x29e0], eax
cmp dword [ebp - 0x1e0], 0x34ef
jg 0x49ff01
mov dword [ebp - 0xcac], 1
jmp 0x49ff08
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0x1e0]
imul eax, dword [ebp - 0xcac]
test eax, eax
jne 0x49ff2b
cmp dword [ebp - 0x114], 0
jne 0x49ff2b
and dword [ebp - 0x13ec], 0
jmp 0x49ff35
mov dword [ebp - 0x13ec], 1
mov eax, dword [ebp - 0xcbc]
add eax, dword [ebp - 0x13ec]
cmp eax, dword [ebp - 0x74]
jl 0x49ff52
mov dword [ebp - 0xcb4], 1
jmp 0x49ff59
and dword [ebp - 0xcb4], 0
cmp dword [ebp - 0xcb4], 0xb08f
jge 0x49ff71
mov dword [ebp - 0x1774], 1
jmp 0x49ff78
and dword [ebp - 0x1774], 0
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x1774]
cmp eax, dword [ebp - 0xcbc]
jg 0x49ff99
mov dword [ebp - 0x13f4], 1
jmp 0x49ffa0
and dword [ebp - 0x13f4], 0
mov eax, dword [ebp - 0x13f4]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x114], 0
jmp 0x49ffc5
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x34
jne 0x4a0030
mov dword [ebp - 0x29e8], 0xfffffff7
mov dword [ebp - 0x29f0], 0
mov dword [ebp - 0x29f8], 0x3adeb0cc
mov dword [ebp - 0x7b0], 0
jmp 0x4a0005
mov eax, dword [ebp - 0x7b0]
inc eax
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x7b0], 2
jge 0x4a0021
mov eax, dword [ebp - 0x7b0]
mov dword [ebp + eax*4 - 0x2dcc], 0x8275baed
jmp 0x49fff8
mov eax, dword [ebp - 0xcc4]
inc eax
mov dword [ebp - 0xcc4], eax
jmp 0x49ffb8
cmp dword [ebp + 8], 2
jl 0x4aac15
mov dword [ebp - 0xa18], 0xb871c7bf
mov dword [ebp - 0x3c4], 0x39924432
mov dword [ebp - 0x225c], 4
mov dword [ebp - 0x2258], 4
mov dword [ebp - 0x2254], 4
mov dword [ebp - 0x2250], 4
mov dword [ebp - 0x1e28], 1
mov dword [ebp - 0x1bb4], 0xaea1dc7e
mov dword [ebp - 0x614], 0
jmp 0x4a00a3
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 1
jge 0x4a00bf
mov eax, dword [ebp - 0x614]
mov dword [ebp + eax*4 - 0x270], 0xad2086bd
jmp 0x4a0096
cmp dword [ebp - 0xa18], 0
jne 0x4a00dd
cmp dword [ebp - 0x3c4], 0x1b7e8336
jl 0x4a00dd
and dword [ebp - 0x1af4], 0
jmp 0x4a00e7
mov dword [ebp - 0x1af4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1af4]
mov dword [ebp + eax - 0x270], ecx
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0xccc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xccc]
mov dword [ebp + eax - 0x270], ecx
cmp dword [ebp - 0xccc], 0
je 0x4a03f3
mov dword [ebp - 0x7b8], 0x5bd5
mov dword [ebp - 0x424], 0xfffffffb
mov dword [ebp - 0x2018], 0x2506ed55
mov dword [ebp - 0x3c4], 0xffffffeb
jmp 0x4a015d
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0x28
jl 0x4a02a2
mov dword [ebp - 0xce4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x270], 1
jg 0x4a0190
mov dword [ebp - 0x193c], 1
jmp 0x4a0197
and dword [ebp - 0x193c], 0
cmp dword [ebp - 0xce4], 0xfffffffb
jae 0x4a01ac
mov dword [ebp - 0x13fc], 1
jmp 0x4a01b3
and dword [ebp - 0x13fc], 0
imul eax, dword [ebp - 0x13fc], 0x3f29
cmp eax, 0xf9db
jne 0x4a01d0
mov dword [ebp - 0xcd4], 1
jmp 0x4a01d7
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 0x7b8]
imul eax, dword [ebp - 0xcd4]
cmp eax, dword [ebp - 0x7b8]
je 0x4a01f8
mov dword [ebp - 0x177c], 1
jmp 0x4a01ff
and dword [ebp - 0x177c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
cmp eax, dword [ebp - 0x177c]
jg 0x4a0220
mov dword [ebp - 0xcdc], 1
jmp 0x4a0227
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x7b8]
cmp dword [ebp - 0xcdc], eax
jge 0x4a0241
mov dword [ebp - 0x1404], 1
jmp 0x4a0248
and dword [ebp - 0x1404], 0
mov eax, dword [ebp - 0x1404]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 1
jl 0x4a0269
mov dword [ebp - 0x206c], 1
jmp 0x4a0270
and dword [ebp - 0x206c], 0
mov eax, dword [ebp - 0xce4]
mov dword [ebp - 0x2a00], eax
mov eax, dword [ebp - 0x3c4]
imul eax, dword [ebp - 0xa18]
imul eax, dword [ebp - 0x193c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x270], eax
jmp 0x4a0150
mov dword [ebp - 0x424], 0xffffffed
jmp 0x4a02bb
mov eax, dword [ebp - 0x424]
dec eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0xffffffe2
jl 0x4a03f1
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0x1784], 0xc3ebe155
mov dword [ebp - 0x960], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
mov dword [ebp - 0x2a08], eax
mov eax, dword [ebp - 0x7b8]
cmp dword [ebp - 0xa78], eax
jl 0x4a0313
mov dword [ebp - 0xcec], 1
jmp 0x4a031a
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x2018], eax
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x2a10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x225c]
cmp dword [ebp - 0x960], eax
jl 0x4a0353
mov dword [ebp - 0x140c], 1
jmp 0x4a035a
and dword [ebp - 0x140c], 0
mov eax, dword [ebp - 0x960]
neg eax
imul eax, eax, 0x24d
cmp eax, dword [ebp - 0x140c]
jne 0x4a037c
mov dword [ebp - 0xcf4], 1
jmp 0x4a0383
and dword [ebp - 0xcf4], 0
cmp dword [ebp - 0xcf4], 0xce2e
jle 0x4a039b
mov dword [ebp - 0xcfc], 1
jmp 0x4a03a2
and dword [ebp - 0xcfc], 0
mov dword [ebp - 0xa78], 0xfbc6a687
mov eax, dword [ebp - 0xa78]
mov dword [ebp - 0x1784], eax
mov eax, dword [ebp - 0x1784]
cmp eax, dword [ebp - 0xcfc]
jg 0x4a03d2
mov dword [ebp - 0x1414], 1
jmp 0x4a03d9
and dword [ebp - 0x1414], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1414]
mov dword [ebp + eax - 0x270], ecx
jmp 0x4a02ae
jmp 0x4a03ff
mov eax, dword [ebp - 0x1e28]
mov dword [ebp - 0x1bb4], eax
mov dword [ebp - 0x520], 0xf951fe7
mov dword [ebp - 0x1e54], 0x2a1e9487
mov dword [ebp - 0x2a18], 0xe790e864
mov dword [ebp - 0x2a20], 0x3735b263
mov dword [ebp - 0xd04], 0xd203
mov eax, dword [ebp - 0x520]
dec eax
imul eax, eax, 0xca4f
mov dword [ebp - 0x1e54], eax
mov dword [ebp - 0x520], 0xfffffff5
jmp 0x4a045d
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 3
jg 0x4a04e2
mov dword [ebp - 0x2a28], 0xffffffff
mov dword [ebp - 0x2a30], 1
mov dword [ebp - 0x61c], 0
jmp 0x4a0493
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 2
jge 0x4a04af
mov eax, dword [ebp - 0x61c]
mov dword [ebp + eax*4 - 0x2e7c], 0xfffffffd
jmp 0x4a0486
mov byte [ebp - 0x239], 0
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x4a04d0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0xd04]
inc eax
mov dword [ebp - 0xd04], eax
jmp 0x4a0450
mov dword [ebp - 0x54], 0x42a1
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x1ed8], 3
mov dword [ebp - 0x4c0], 0x302aff63
mov dword [ebp - 0x2a38], 0x22a1efe0
mov dword [ebp - 0x2a40], 1
mov dword [ebp - 0x2b48], 0xb2d505bc
mov dword [ebp - 0x2b50], 6
cmp dword [ebp - 0x54], 0
je 0x4a059d
cmp dword [ebp - 0x54], 0
jne 0x4a059d
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jge 0x4a054f
mov dword [ebp - 0x1a1c], 1
jmp 0x4a0556
and dword [ebp - 0x1a1c], 0
mov eax, dword [ebp - 0x1a1c]
neg eax
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jl 0x4a0572
mov dword [ebp - 0xd0c], 1
jmp 0x4a0579
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xd0c], eax
jne 0x4a0590
mov dword [ebp - 0x141c], 1
jmp 0x4a0597
and dword [ebp - 0x141c], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x54], 0
jne 0x4a05b5
cmp dword [ebp - 0x278], 0
jne 0x4a05b5
and dword [ebp - 0xd14], 0
jmp 0x4a05bf
mov dword [ebp - 0xd14], 1
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0xd14]
jl 0x4a05d6
mov dword [ebp - 0x178c], 1
jmp 0x4a05dd
and dword [ebp - 0x178c], 0
cmp dword [ebp - 0x178c], 1
jge 0x4a05f2
mov dword [ebp - 0x1bbc], 1
jmp 0x4a05f9
and dword [ebp - 0x1bbc], 0
mov eax, dword [ebp - 0x1ed8]
mov dword [ebp - 0x2b58], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x2b60], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x54], 0
jmp 0x4a062a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xe
jle 0x4a078c
mov dword [ebp - 0x2b68], 0xfffffffc
mov dword [ebp - 0x2b70], 0xfffffffb
mov dword [ebp - 0x7c0], 0
jmp 0x4a0661
mov eax, dword [ebp - 0x7c0]
inc eax
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 3
jge 0x4a067d
mov eax, dword [ebp - 0x7c0]
mov dword [ebp + eax*4 - 0x2f34], 0x23e46920
jmp 0x4a0654
mov dword [ebp - 0x278], 0
jmp 0x4a0696
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x1b
jg 0x4a074b
mov dword [ebp - 0x2b78], 0x1f0dfbc4
mov dword [ebp - 0x2b80], 0x1e13ca4d
mov dword [ebp - 0x2b88], 1
mov dword [ebp - 0x2b90], 6
mov dword [ebp - 0x2b98], 0x403132d6
mov dword [ebp - 0x2ba0], 0xffffffff
mov dword [ebp - 0x2ba8], 0xa1dd7933
mov dword [ebp - 0x2bb0], 6
mov dword [ebp - 0x2bb8], 0x21692869
mov dword [ebp - 0x2bc0], 0x983c17a3
mov dword [ebp - 0x2bc8], 1
mov dword [ebp - 0x2bd0], 1
mov dword [ebp - 0x2bd8], 0xfffffff8
mov dword [ebp - 0x2be0], 0x1f51b437
mov dword [ebp - 0xd1c], 9
mov eax, dword [ebp - 0xd1c]
dec eax
mov dword [ebp - 0xd1c], eax
jmp 0x4a0689
mov dword [ebp - 0x4c0], 0
jmp 0x4a0764
mov eax, dword [ebp - 0x4c0]
dec eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0xffffffee
jne 0x4a0787
mov byte [ebp - 0x364], 0
movzx eax, byte [ebp - 0x364]
test eax, eax
je 0x4a0785
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x4a0757
jmp 0x4a0623
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x578], 4
mov dword [ebp - 0xa20], 0xffffffff
mov dword [ebp - 0x968], 8
mov dword [ebp - 0x624], 0
jmp 0x4a07ca
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 3
jge 0x4a07e6
mov eax, dword [ebp - 0x624]
mov dword [ebp + eax*4 - 0x1b6c], 1
jmp 0x4a07bd
mov byte [ebp - 0x23b], 0
movzx eax, byte [ebp - 0x23b]
test eax, eax
je 0x4a0803
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x2be8], eax
mov eax, 0x870
sub eax, dword [ebp - 0xa20]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1b6c]
je 0x4a0837
mov dword [ebp - 0x1424], 1
jmp 0x4a083e
and dword [ebp - 0x1424], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x1424], eax
je 0x4a0858
mov dword [ebp - 0x1bc4], 1
jmp 0x4a085f
and dword [ebp - 0x1bc4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1b6c]
add eax, 0x671c
imul eax, eax, 0x4c20
test eax, eax
jne 0x4a0892
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b6c], 0
jne 0x4a0892
and dword [ebp - 0xd24], 0
jmp 0x4a089c
mov dword [ebp - 0xd24], 1
mov eax, dword [ebp - 0x968]
inc eax
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x968]
cmp eax, dword [ebp - 0xd24]
jg 0x4a08c3
mov dword [ebp - 0x1944], 1
jmp 0x4a08ca
and dword [ebp - 0x1944], 0
mov eax, dword [ebp - 0x1944]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x1b6c]
cmp eax, dword [ebp - 0x578]
jl 0x4a08fd
mov dword [ebp - 0xd2c], 1
jmp 0x4a0904
and dword [ebp - 0xd2c], 0
cmp dword [ebp - 0xd2c], 1
jne 0x4a0919
mov dword [ebp - 0x142c], 1
jmp 0x4a0920
and dword [ebp - 0x142c], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x142c], eax
jg 0x4a093a
mov dword [ebp - 0xd34], 1
jmp 0x4a0941
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0xd34], eax
jge 0x4a095b
mov dword [ebp - 0x1794], 1
jmp 0x4a0962
and dword [ebp - 0x1794], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1b6c]
add eax, dword [ebp - 0x1794]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b6c], eax
mov dword [ebp - 0xe0], 0x62395e2d
mov dword [ebp - 0x2bf0], 0x22124f84
mov dword [ebp - 0x2bf8], 0xfffffff6
mov dword [ebp - 0x2c00], 0xfffffffa
mov dword [ebp - 0x2c08], 0xd509978f
mov dword [ebp - 0x2c24], 1
mov dword [ebp - 0x2c20], 1
mov dword [ebp - 0x2c1c], 1
mov dword [ebp - 0x2c18], 1
mov dword [ebp - 0x2c10], 0x4edf6b3e
mov dword [ebp - 0x2a84], 0
mov dword [ebp - 0x22e8], 0xd7feae21
mov dword [ebp - 0x281c], 9
mov dword [ebp - 0xd3c], 0xfff6
mov dword [ebp - 0x1a4], 0
jmp 0x4a0a26
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x4a0a42
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x2ddc], 0x387fb0b0
jmp 0x4a0a19
mov dword [ebp - 0x1a4], 0
jmp 0x4a0a5b
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x4a0a77
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x22f0], 0xffffffff
jmp 0x4a0a4e
mov eax, dword [ebp - 0xd3c]
dec eax
mov dword [ebp - 0xd3c], eax
mov dword [ebp - 0x2940], 1
mov dword [ebp - 0x34], 0x6d0374c7
mov dword [ebp - 0x970], 0xf6a715cc
mov dword [ebp - 0x1434], 0x2ba29f58
mov dword [ebp - 0x7c8], 1
mov dword [ebp - 0x3cc], 0xfffffffe
mov dword [ebp - 0x11c], 0
jmp 0x4a0ad6
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x4a0af2
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x20e8], 0xf803
jmp 0x4a0ac9
mov dword [ebp - 0x11c], 0
jmp 0x4a0b0b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x4a0b27
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x27ac], 0x11c25c53
jmp 0x4a0afe
cmp dword [ebp - 0x34], 0
je 0x4a0c99
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1434], eax
mov eax, dword [ebp - 0x1434]
neg eax
cmp dword [ebp - 0x970], eax
jge 0x4a0b5f
mov dword [ebp - 0x143c], 1
jmp 0x4a0b66
and dword [ebp - 0x143c], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 0
jne 0x4a0b93
cmp dword [ebp - 0x7c8], 0
jne 0x4a0b93
and dword [ebp - 0xd44], 0
jmp 0x4a0b9d
mov dword [ebp - 0xd44], 1
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0xd44]
test eax, eax
je 0x4a0bbd
cmp dword [ebp - 0x34], 0
je 0x4a0bbd
mov dword [ebp - 0x1a8c], 1
jmp 0x4a0bc4
and dword [ebp - 0x1a8c], 0
mov eax, dword [ebp - 0x1a8c]
sub eax, 0x3672
cmp eax, dword [ebp - 0x34]
je 0x4a0be0
mov dword [ebp - 0x1eb8], 1
jmp 0x4a0be7
and dword [ebp - 0x1eb8], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x22f8], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jge 0x4a0c11
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20e8], 0
jne 0x4a0c11
and dword [ebp - 0xd4c], 0
jmp 0x4a0c1b
mov dword [ebp - 0xd4c], 1
mov eax, dword [ebp - 0xd4c]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0xfcc6
jle 0x4a0c3f
mov dword [ebp - 0xd54], 1
jmp 0x4a0c46
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0x143c]
cmp eax, dword [ebp - 0xd54]
je 0x4a0c60
mov dword [ebp - 0x179c], 1
jmp 0x4a0c67
and dword [ebp - 0x179c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x179c], eax
jne 0x4a0c7e
mov dword [ebp - 0xd5c], 1
jmp 0x4a0c85
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xd5c], eax
jle 0x4a0c99
and dword [ebp - 0x1444], 0
jmp 0x4a0ca3
mov dword [ebp - 0x1444], 1
imul eax, dword [ebp - 0x1444], 0xffffffff
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x20e8]
jle 0x4a0cc5
mov dword [ebp - 0x1bcc], 1
jmp 0x4a0ccc
and dword [ebp - 0x1bcc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20e8]
mov dword [ebp - 0x2828], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2300], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20e8]
mov dword [ebp - 0x2948], eax
mov eax, dword [ebp - 0x970]
add eax, dword [ebp - 0x34]
shl eax, 2
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x27ac], eax
mov dword [ebp - 0x3cc], 0
jmp 0x4a0d2c
mov eax, dword [ebp - 0x3cc]
dec eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0xfffffffb
jge 0x4a0d85
mov byte [ebp - 0x37c], 0
movzx eax, byte [ebp - 0x37c]
test eax, eax
je 0x4a0d54
push 0x1c02
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov byte [ebp - 0x23d], 0
movzx eax, byte [ebp - 0x23d]
test eax, eax
je 0x4a0d83
push 0x1f27
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
jmp 0x4a0d1f
mov dword [ebp - 0x2308], 0xff81308f
mov dword [ebp - 0x4c8], 0xb72f
mov dword [ebp - 0x454], 0xffffffff
mov dword [ebp - 0xd6c], 0xffffffff
mov dword [ebp - 0x62c], 0
jmp 0x4a0dc6
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 2
jge 0x4a0de2
mov eax, dword [ebp - 0x62c]
mov dword [ebp + eax*4 - 0x27b8], 4
jmp 0x4a0db9
cmp dword [ebp - 0x4c8], 0x89a6
je 0x4a0dfa
mov dword [ebp - 0xd64], 1
jmp 0x4a0e01
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x454], eax
imul eax, dword [ebp - 0xd64], 0xbf3384b0
mov ecx, dword [ebp - 0x454]
sub ecx, eax
mov eax, dword [ebp - 0x4c8]
sub eax, ecx
cmp eax, dword [ebp - 0x4c8]
jne 0x4a0e3b
mov dword [ebp - 0x194c], 1
jmp 0x4a0e42
and dword [ebp - 0x194c], 0
mov eax, dword [ebp - 0x194c]
mov dword [ebp - 0xd6c], eax
mov dword [ebp - 0x454], 0x1c
jmp 0x4a0e67
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0xffffffec
jge 0x4a10a1
mov dword [ebp - 0x88], 0xb8bffbef
mov dword [ebp - 0xd74], 6
mov dword [ebp - 0x7d0], 0
jmp 0x4a0ea1
mov eax, dword [ebp - 0x7d0]
inc eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 2
jge 0x4a0ebd
mov eax, dword [ebp - 0x7d0]
mov dword [ebp + eax*4 - 0x21a4], 0xbb66efe0
jmp 0x4a0e94
mov dword [ebp - 0x88], 0xffffffff
cmp dword [ebp - 0x88], 0
je 0x4a1067
mov dword [ebp - 0x1e64], 0xffffffff
mov dword [ebp - 0x634], 0
jmp 0x4a0ef7
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 4
jge 0x4a0f13
mov eax, dword [ebp - 0x634]
mov dword [ebp + eax*4 - 0x2cdc], 0
jmp 0x4a0eea
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xd6c], eax
jne 0x4a0f2d
mov dword [ebp - 0xd7c], 1
jmp 0x4a0f34
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2834], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27b8], 0
jne 0x4a0f62
cmp dword [ebp - 0x4c8], 0
jne 0x4a0f62
and dword [ebp - 0x7d8], 0
jmp 0x4a0f6c
mov dword [ebp - 0x7d8], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp + eax - 0x21a4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp + eax - 0x2cdc], ecx
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x7d8], eax
jne 0x4a0fac
mov dword [ebp - 0x144c], 1
jmp 0x4a0fb3
and dword [ebp - 0x144c], 0
mov eax, dword [ebp - 0x144c]
mov dword [ebp - 0xd74], eax
cmp dword [ebp - 0xd74], 1
jbe 0x4a0fd4
mov dword [ebp - 0x17a4], 1
jmp 0x4a0fdb
and dword [ebp - 0x17a4], 0
imul eax, dword [ebp - 0x17a4], 0x1a1f
cmp eax, dword [ebp - 0x88]
jg 0x4a0ff9
mov dword [ebp - 0x1454], 1
jmp 0x4a1000
and dword [ebp - 0x1454], 0
mov eax, dword [ebp - 0xd7c]
add eax, dword [ebp - 0x1454]
imul eax, dword [ebp - 0x88]
test eax, eax
je 0x4a1033
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2cdc], 0
je 0x4a1033
mov dword [ebp - 0xd84], 1
jmp 0x4a103a
and dword [ebp - 0xd84], 0
cmp dword [ebp - 0xd84], 0x11b55e9
je 0x4a1052
mov dword [ebp - 0x1a24], 1
jmp 0x4a1059
and dword [ebp - 0x1a24], 0
mov eax, dword [ebp - 0x1a24]
mov dword [ebp - 0x1e64], eax
jmp 0x4a109c
mov dword [ebp - 0x88], 0
jmp 0x4a1080
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jg 0x4a109c
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x21a4], 0x64e62b50
jmp 0x4a1073
jmp 0x4a0e5a
mov dword [ebp - 0x2310], 0x713981d
mov dword [ebp - 0x94], 0x24ec2e0c
mov dword [ebp - 0x1be4], 0xffff
mov dword [ebp - 0x44], 0
jmp 0x4a10cf
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x4a10e5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x3d4], 0x3526c715
jmp 0x4a10c8
mov dword [ebp - 0x44], 0
jmp 0x4a10f5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x4a110b
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2cbc], 0xffffffff
jmp 0x4a10ee
mov dword [ebp - 0x44], 0
jmp 0x4a111b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x4a1131
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2e34], 0x65dd4d14
jmp 0x4a1114
mov dword [ebp - 0x94], 0xfffffff3
jmp 0x4a114a
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xd
jle 0x4a1310
mov dword [ebp - 0x978], 0xa2b82c44
mov dword [ebp - 0x1f6c], 1
mov dword [ebp - 0x1bdc], 0xffffffff
cmp dword [ebp - 0x94], 0
jne 0x4a12d4
cmp dword [ebp - 0x94], 0x746e33a7
je 0x4a119a
mov dword [ebp - 0x1bd4], 1
jmp 0x4a11a1
and dword [ebp - 0x1bd4], 0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x2950], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2318], eax
mov eax, dword [ebp - 0x1f6c]
mov dword [ebp - 0x2840], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xd8c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8c]
mov dword [ebp + eax - 0x3d4], ecx
mov eax, dword [ebp - 0xd8c]
shl eax, 2
cmp eax, 0x752570e
jg 0x4a1200
mov dword [ebp - 0xaa8], 1
jmp 0x4a1207
and dword [ebp - 0xaa8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp + eax - 0x2cbc], ecx
cmp dword [ebp - 0xaa8], 0
jne 0x4a122f
mov dword [ebp - 0x145c], 1
jmp 0x4a1236
and dword [ebp - 0x145c], 0
mov eax, dword [ebp - 0x1bdc]
imul eax, dword [ebp - 0x145c]
test eax, eax
jne 0x4a1259
cmp dword [ebp - 0x978], 0
jne 0x4a1259
and dword [ebp - 0xd94], 0
jmp 0x4a1263
mov dword [ebp - 0xd94], 1
cmp dword [ebp - 0xd94], 0xfffffffc
je 0x4a1278
mov dword [ebp - 0x17ac], 1
jmp 0x4a127f
and dword [ebp - 0x17ac], 0
imul eax, dword [ebp - 0x17ac], 0xffffffff
cmp eax, 0xffffffff
jle 0x4a1297
mov dword [ebp - 0x1e6c], 1
jmp 0x4a129e
and dword [ebp - 0x1e6c], 0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x2320], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d4]
mov dword [ebp - 0x2958], eax
or eax, 0xffffffff
jne 0x4a12d4
cmp dword [ebp - 0x1be4], 0
jne 0x4a12d4
and dword [ebp - 0xd9c], 0
jmp 0x4a12de
mov dword [ebp - 0xd9c], 1
cmp dword [ebp - 0xd9c], 0xfffffff8
je 0x4a12f3
mov dword [ebp - 0x2058], 1
jmp 0x4a12fa
and dword [ebp - 0x2058], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2e34], 0xffffffff
jmp 0x4a113d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d4], 0
jne 0x4a132c
mov dword [ebp - 0xda4], 1
jmp 0x4a1333
and dword [ebp - 0xda4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d4], 0
je 0x4a135f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d4], 0
je 0x4a135f
mov dword [ebp - 0x1954], 1
jmp 0x4a1366
and dword [ebp - 0x1954], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d4]
mov dword [ebp - 0x2328], eax
cmp dword [ebp - 0x94], 0x6511c25c
jl 0x4a1391
mov dword [ebp - 0x1464], 1
jmp 0x4a1398
and dword [ebp - 0x1464], 0
mov eax, dword [ebp - 0x1464]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xda4]
sub eax, dword [ebp - 0x1954]
cmp eax, dword [ebp - 0x94]
je 0x4a13c4
mov dword [ebp - 0xdac], 1
jmp 0x4a13cb
and dword [ebp - 0xdac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdac]
mov dword [ebp + eax - 0x2cbc], ecx
mov dword [ebp - 0x284c], 0xd6c332e4
mov dword [ebp - 0x209c], 1
mov dword [ebp - 0x2098], 1
mov dword [ebp - 0x2094], 1
mov dword [ebp - 0x2090], 1
mov dword [ebp - 0x63c], 0
jmp 0x4a1429
mov eax, dword [ebp - 0x63c]
inc eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 1
jge 0x4a1445
mov eax, dword [ebp - 0x63c]
mov dword [ebp + eax*4 - 0x528], 0
jmp 0x4a141c
mov byte [ebp - 0x366], 0
movzx eax, byte [ebp - 0x366]
test eax, eax
je 0x4a1461
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x528], 0
jmp 0x4a148f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x528]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x528], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x528], 0x1a
jg 0x4a15ec
mov dword [ebp - 0x280], 0xfffffffd
mov dword [ebp - 0x2330], 0xfffffffb
mov dword [ebp - 0x280], 0
jmp 0x4a14d0
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jg 0x4a15e7
mov dword [ebp - 0x146c], 0x8c9dffbe
mov dword [ebp - 0x7e0], 0
jmp 0x4a1500
mov eax, dword [ebp - 0x7e0]
inc eax
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 1
jge 0x4a151c
mov eax, dword [ebp - 0x7e0]
mov dword [ebp + eax*4 - 0x1bec], 0xffffffff
jmp 0x4a14f3
mov eax, dword [ebp - 0x280]
mov eax, dword [ebp + eax*4 - 0x209c]
mov dword [ebp - 0x2960], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x528]
mov dword [ebp - 0x146c], eax
mov eax, dword [ebp - 0x146c]
mov ecx, dword [ebp - 0x280]
imul eax, dword [ebp + ecx*4 - 0x209c]
mov ecx, dword [ebp - 0x280]
cmp eax, dword [ebp + ecx*4 - 0x209c]
jl 0x4a1571
mov dword [ebp - 0xdb4], 1
jmp 0x4a1578
and dword [ebp - 0xdb4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdb4]
mov dword [ebp + eax - 0x1bec], ecx
mov eax, 0x96a0b597
test eax, eax
je 0x4a15ab
mov dword [ebp - 0x1e74], 0x1791
cmp dword [ebp - 0x1e74], 0
je 0x4a15a9
jmp 0x4a15e7
jmp 0x4a15e2
mov byte [ebp - 0x23f], 0
movzx eax, byte [ebp - 0x23f]
test eax, eax
je 0x4a15e2
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0x253b
push 0xc71
push 0x1723
push 0x22e0
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x4a14c3
jmp 0x4a1474
mov dword [ebp - 0x2338], 1
mov dword [ebp - 0x2858], 5
mov byte [ebp - 0x388], 0
movzx eax, byte [ebp - 0x388]
test eax, eax
je 0x4a1624
push 0xe4d
push 0x9e4
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 0x241], 0
movzx eax, byte [ebp - 0x241]
test eax, eax
je 0x4a1651
push 0
push 0
push 0x1bc7
push 0x1e31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
mov dword [ebp - 0x2340], 0xfffffff8
mov dword [ebp - 0x4d0], 0x73838a1f
mov dword [ebp - 0x644], 0
jmp 0x4a167e
mov eax, dword [ebp - 0x644]
inc eax
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 3
jge 0x4a169a
mov eax, dword [ebp - 0x644]
mov dword [ebp + eax*4 - 0x2d30], 0xffffffff
jmp 0x4a1671
mov dword [ebp - 0x4d0], 0
jmp 0x4a16b3
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 2
jg 0x4a16d0
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp + eax*4 - 0x2d30], 0
je 0x4a16ce
jmp 0x4a16d0
jmp 0x4a16a6
mov byte [ebp - 0x368], 0
movzx eax, byte [ebp - 0x368]
test eax, eax
je 0x4a16fb
push 0x135e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x2968], 0xffffffff
mov dword [ebp - 0x2348], 9
mov dword [ebp - 0x2864], 0xe85a7b05
mov dword [ebp - 0x42c], 0x556123d4
mov dword [ebp - 0x7e8], 0
jmp 0x4a173c
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 4
jge 0x4a1758
mov eax, dword [ebp - 0x7e8]
mov dword [ebp + eax*4 - 0x30c0], 0x833fcb50
jmp 0x4a172f
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x42c], 0
jmp 0x4a177e
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 6
jg 0x4a17aa
mov byte [ebp - 0x243], 0
movzx eax, byte [ebp - 0x243]
test eax, eax
je 0x4a17a8
push 0
push 0x1281
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
jmp 0x4a1771
mov dword [ebp - 0x17b4], 0
mov dword [ebp - 0x64c], 0
jmp 0x4a17cd
mov eax, dword [ebp - 0x64c]
inc eax
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 2
jge 0x4a17e9
mov eax, dword [ebp - 0x64c]
mov dword [ebp + eax*4 - 0x27c4], 0x29bf39
jmp 0x4a17c0
mov byte [ebp - 0x37e], 0
movzx eax, byte [ebp - 0x37e]
test eax, eax
je 0x4a1811
push 0xf2e
push 0x6f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [ebp - 0x17b4]
inc eax
mov dword [ebp - 0x17b4], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x27c4], 1
mov dword [ebp - 0x1654], 0
mov dword [ebp - 0x7f0], 0xe1757117
mov dword [ebp - 0x7f0], 8
jmp 0x4a185c
mov eax, dword [ebp - 0x7f0]
dec eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 0xfffffffa
jne 0x4a1904
mov dword [ebp - 0x1bf4], 0xccce1e2c
mov dword [ebp - 0x654], 0
jmp 0x4a188c
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 3
jge 0x4a18a8
mov eax, dword [ebp - 0x654]
mov dword [ebp + eax*4 - 0x2d90], 0xcdcb363f
jmp 0x4a187f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1bf4]
mov dword [ebp + eax - 0x2d90], ecx
mov byte [ebp - 0x245], 0
movzx eax, byte [ebp - 0x245]
test eax, eax
je 0x4a18ff
push 0x1b10
push 0xe3a
push 0x1fa4
push 0x1212
push 0x791
push 0x1409
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x4a184f
mov dword [ebp - 0x2350], 3
mov dword [ebp - 0x2970], 0xffffffff
mov dword [ebp - 0x2358], 0xd4e7937
mov dword [ebp - 0x2870], 0x38462751
mov dword [ebp - 0x2360], 0xe7e55059
mov dword [ebp - 0x2978], 0x8e1b61ba
mov dword [ebp - 0x2368], 0x15e1abe8
mov dword [ebp - 0x287c], 0xffffffff
mov dword [ebp - 0x2370], 0xa10aa43b
mov dword [ebp - 0x2980], 0x8b6b0e1b
mov dword [ebp - 0x2378], 0x3880e033
mov dword [ebp - 0x2888], 0
mov dword [ebp - 0x2380], 0x23ccde6b
mov dword [ebp - 0x2988], 1
mov dword [ebp - 0x2388], 0x860a421e
mov dword [ebp - 0x2990], 0x93826a05
mov dword [ebp - 0x2390], 3
mov dword [ebp - 0x2894], 0x335c22c9
mov dword [ebp - 0xdbc], 0xffffffff
mov dword [ebp - 0x7f8], 0
jmp 0x4a19db
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 1
jge 0x4a19f7
mov eax, dword [ebp - 0x7f8]
mov dword [ebp + eax*4 - 0x2398], 0x59b504db
jmp 0x4a19ce
mov eax, dword [ebp - 0xdbc]
inc eax
mov dword [ebp - 0xdbc], eax
mov dword [ebp - 0x124], 0
jmp 0x4a1a1d
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x4a1a39
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x2efc], 0xfffffffc
jmp 0x4a1a10
mov dword [ebp - 0x214], 0x68ec0ae9
mov dword [ebp - 0x3dc], 3
mov dword [ebp - 0x1c04], 0xfffffffe
mov dword [ebp - 0x2b08], 0x6b59229a
mov dword [ebp - 0xddc], 0xffffffff
mov dword [ebp - 0x1bfc], 0xe5ec3521
mov dword [ebp - 0x65c], 0
jmp 0x4a1a8e
cmp dword [ebp - 0x65c], 1
jge 0x4a1aaa
mov eax, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0x195c], 0xbf261718
jmp 0x4a1a81
mov dword [ebp - 0x214], 0xb
jmp 0x4a1ac3
cmp dword [ebp + 8], 1
jne 0x4b26ec
mov dword [ebp - 0xa8], 0x24ec2e0c
mov dword [ebp - 0x1e04], 0xffff
mov dword [ebp - 0x48], 0
jmp 0x4aac43
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x4aac59
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3d0], 0x3526c715
jmp 0x4aac3c
mov dword [ebp - 0x48], 0
jmp 0x4aac69
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x4aac7f
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2c8c], 0xffffffff
jmp 0x4aac62
mov dword [ebp - 0x48], 0
jmp 0x4aac8f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x4aaca5
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2e74], 0x65dd4d14
jmp 0x4aac88
mov dword [ebp - 0xa8], 0xfffffff3
jmp 0x4aacbe
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xd
jle 0x4aae84
mov dword [ebp - 0x99c], 0xa2b82c44
mov dword [ebp - 0x1e78], 1
mov dword [ebp - 0x1dfc], 0xffffffff
cmp dword [ebp - 0xa8], 0
jne 0x4aae48
cmp dword [ebp - 0xa8], 0x746e33a7
je 0x4aad0e
mov dword [ebp - 0x1df4], 1
jmp 0x4aad15
and dword [ebp - 0x1df4], 0
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x2688], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x2b74], eax
mov eax, dword [ebp - 0x1e78]
mov dword [ebp - 0x2690], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xf80], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf80]
mov dword [ebp + eax - 0x3d0], ecx
mov eax, dword [ebp - 0xf80]
shl eax, 2
cmp eax, 0x752570e
jg 0x4aad74
mov dword [ebp - 0x994], 1
jmp 0x4aad7b
and dword [ebp - 0x994], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x994]
mov dword [ebp + eax - 0x2c8c], ecx
cmp dword [ebp - 0x994], 0
jne 0x4aada3
mov dword [ebp - 0xf88], 1
jmp 0x4aadaa
and dword [ebp - 0xf88], 0
mov eax, dword [ebp - 0x1dfc]
imul eax, dword [ebp - 0xf88]
test eax, eax
jne 0x4aadcd
cmp dword [ebp - 0x99c], 0
jne 0x4aadcd
and dword [ebp - 0xf90], 0
jmp 0x4aadd7
mov dword [ebp - 0xf90], 1
cmp dword [ebp - 0xf90], 0xfffffffc
je 0x4aadec
mov dword [ebp - 0xf98], 1
jmp 0x4aadf3
and dword [ebp - 0xf98], 0
imul eax, dword [ebp - 0xf98], 0xffffffff
cmp eax, 0xffffffff
jle 0x4aae0b
mov dword [ebp - 0x1e80], 1
jmp 0x4aae12
and dword [ebp - 0x1e80], 0
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x2a14], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
mov dword [ebp - 0x2698], eax
or eax, 0xffffffff
jne 0x4aae48
cmp dword [ebp - 0x1e04], 0
jne 0x4aae48
and dword [ebp - 0xfa0], 0
jmp 0x4aae52
mov dword [ebp - 0xfa0], 1
cmp dword [ebp - 0xfa0], 0xfffffff8
je 0x4aae67
mov dword [ebp - 0x1e88], 1
jmp 0x4aae6e
and dword [ebp - 0x1e88], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2e74], 0xffffffff
jmp 0x4aacb1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d0], 0
jne 0x4aaea0
mov dword [ebp - 0xfb0], 1
jmp 0x4aaea7
and dword [ebp - 0xfb0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d0], 0
je 0x4aaed3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d0], 0
je 0x4aaed3
mov dword [ebp - 0xfb8], 1
jmp 0x4aaeda
and dword [ebp - 0xfb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
mov dword [ebp - 0x2bd4], eax
cmp dword [ebp - 0xa8], 0x6511c25c
jl 0x4aaf05
mov dword [ebp - 0xfa8], 1
jmp 0x4aaf0c
and dword [ebp - 0xfa8], 0
mov eax, dword [ebp - 0xfa8]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xfb0]
sub eax, dword [ebp - 0xfb8]
cmp eax, dword [ebp - 0xa8]
je 0x4aaf38
mov dword [ebp - 0xfc0], 1
jmp 0x4aaf3f
and dword [ebp - 0xfc0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xfc0]
mov dword [ebp + eax - 0x2c8c], ecx
mov dword [ebp - 0x26a0], 5
mov dword [ebp - 0xfc8], 7
mov dword [ebp - 0x10], 0
jmp 0x4aaf76
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4aaf8c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2a1c], 0xfe387fb0
jmp 0x4aaf6f
mov dword [ebp - 0x10], 0
jmp 0x4aaf9c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4aafb2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x26a8], 0x70cd5099
jmp 0x4aaf95
mov dword [ebp - 0x10], 0
jmp 0x4aafc2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x4aafd8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x30d0], 0x3656
jmp 0x4aafbb
mov dword [ebp - 0x10], 0
jmp 0x4aafe8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x4aaffe
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2fc4], 0x4207647f
jmp 0x4aafe1
mov eax, dword [ebp - 0xfc8]
dec eax
mov dword [ebp - 0xfc8], eax
mov dword [ebp - 0x1e0c], 0xcb8ce3e
mov dword [ebp - 0x7dc], 0
jmp 0x4ab02e
mov eax, dword [ebp - 0x7dc]
inc eax
mov dword [ebp - 0x7dc], eax
cmp dword [ebp - 0x7dc], 3
jge 0x4ab04a
mov eax, dword [ebp - 0x7dc]
mov dword [ebp + eax*4 - 0x210c], 0xb110c93b
jmp 0x4ab021
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x210c], 0
jmp 0x4ab078
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x210c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x210c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x210c], 0xc
jle 0x4ab0c5
mov dword [ebp - 0x228c], 1
mov dword [ebp - 0x2288], 1
mov dword [ebp - 0x2284], 1
mov dword [ebp - 0x2280], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228c]
mov dword [ebp - 0x1e0c], eax
jmp 0x4ab05d
mov dword [ebp - 0x804], 0x99841b3c
mov dword [ebp - 0x2b7c], 0x5dcec3d7
mov byte [ebp - 0x2b1], 0
movzx eax, byte [ebp - 0x2b1]
test eax, eax
je 0x4ab0f3
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov byte [ebp - 0x369], 0
movzx eax, byte [ebp - 0x369]
test eax, eax
je 0x4ab117
push 0x1a54
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x1c8], 0x62395e2d
mov dword [ebp - 0x26b0], 1
mov dword [ebp - 0x2a24], 0xff81308f
mov dword [ebp - 0x26b8], 0x713981d
mov dword [ebp - 0x2c04], 0xd6c332e4
mov dword [ebp - 0x26c0], 1
mov dword [ebp - 0x2a2c], 0xfffffff8
mov dword [ebp - 0x26c8], 0xffffffff
mov dword [ebp - 0x1048], 0
mov dword [ebp - 0x17c], 0
jmp 0x4ab191
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x4ab1ad
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2f14], 0xfffffffc
jmp 0x4ab184
mov dword [ebp - 0x17c], 0
jmp 0x4ab1c6
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x4ab1e2
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2f94], 1
jmp 0x4ab1b9
or eax, 0xffffffff
sub eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
je 0x4ab1f9
mov dword [ebp - 0xfd0], 1
jmp 0x4ab200
and dword [ebp - 0xfd0], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xfd0], eax
je 0x4ab220
mov eax, 0x78f1e0c8
test eax, eax
je 0x4ab220
mov dword [ebp - 0xfd8], 1
jmp 0x4ab227
and dword [ebp - 0xfd8], 0
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0xfd8]
add eax, dword [ebp - 0x80]
neg eax
cmp eax, dword [ebp - 0x80]
jge 0x4ab249
mov dword [ebp - 0xfe0], 1
jmp 0x4ab250
and dword [ebp - 0xfe0], 0
cmp dword [ebp - 0xfe0], 1
je 0x4ab265
mov dword [ebp - 0x1e90], 1
jmp 0x4ab26c
and dword [ebp - 0x1e90], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x2b84], eax
imul eax, dword [ebp - 0x80], 0
cmp eax, dword [ebp - 0x80]
jne 0x4ab28a
mov dword [ebp - 0xfe8], 1
jmp 0x4ab291
and dword [ebp - 0xfe8], 0
mov eax, dword [ebp - 0xfe8]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x80], eax
je 0x4ab2b1
mov dword [ebp - 0xff0], 1
jmp 0x4ab2b8
and dword [ebp - 0xff0], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0xff0], eax
jne 0x4ab2d2
mov dword [ebp - 0xff8], 1
jmp 0x4ab2d9
and dword [ebp - 0xff8], 0
mov eax, dword [ebp - 0x1c8]
imul eax, dword [ebp - 0xff8]
test eax, eax
jne 0x4ab2f9
cmp dword [ebp - 0x80], 0
jne 0x4ab2f9
and dword [ebp - 0x1000], 0
jmp 0x4ab303
mov dword [ebp - 0x1000], 1
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x1000]
je 0x4ab33c
cmp dword [ebp - 0x1c8], 0
je 0x4ab33c
mov byte [ebp - 0x2b9], 0
movzx eax, byte [ebp - 0x2b9]
test eax, eax
je 0x4ab337
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x4ab5d5
mov dword [ebp - 0x184], 0x8597a0b8
mov dword [ebp - 0x1d0], 0x1996
mov dword [ebp - 0x1038], 0xc77a5c6a
mov dword [ebp - 0x26d0], 0
mov dword [ebp - 0x2a34], 1
mov dword [ebp - 0x87c], 0
jmp 0x4ab387
mov eax, dword [ebp - 0x87c]
inc eax
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 1
jge 0x4ab3a3
mov eax, dword [ebp - 0x87c]
mov dword [ebp + eax*4 - 0x26d8], 1
jmp 0x4ab37a
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2bdc], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x26e0], eax
cmp dword [ebp - 0x1c8], 0xfffffffe
jge 0x4ab3d0
mov dword [ebp - 0x1008], 1
jmp 0x4ab3d7
and dword [ebp - 0x1008], 0
mov eax, dword [ebp - 0x1008]
add eax, 0xb5df
cmp eax, dword [ebp - 0x1d0]
jge 0x4ab3f6
mov dword [ebp - 0x1e14], 1
jmp 0x4ab3fd
and dword [ebp - 0x1e14], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2a3c], eax
cmp dword [ebp - 0x184], 0
jl 0x4ab41e
mov dword [ebp - 0x1010], 1
jmp 0x4ab425
and dword [ebp - 0x1010], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x1010], eax
jg 0x4ab448
cmp dword [ebp - 0x1d0], 0
je 0x4ab448
mov dword [ebp - 0x1e98], 1
jmp 0x4ab44f
and dword [ebp - 0x1e98], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x26e8], eax
imul eax, dword [ebp - 0x80], 0xfffffffd
mov ecx, dword [ebp - 0x1d0]
add ecx, dword [ebp - 0x184]
cmp eax, ecx
jne 0x4ab47b
mov dword [ebp - 0x1e1c], 1
jmp 0x4ab482
and dword [ebp - 0x1e1c], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2b8c], eax
cmp dword [ebp - 0x184], 0x34ef
jg 0x4ab4a6
mov dword [ebp - 0x1018], 1
jmp 0x4ab4ad
and dword [ebp - 0x1018], 0
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x1018]
test eax, eax
jne 0x4ab4d0
cmp dword [ebp - 0x1d0], 0
jne 0x4ab4d0
and dword [ebp - 0x1020], 0
jmp 0x4ab4da
mov dword [ebp - 0x1020], 1
mov eax, dword [ebp - 0x1038]
add eax, dword [ebp - 0x1020]
cmp eax, dword [ebp - 0x80]
jl 0x4ab4f7
mov dword [ebp - 0x1028], 1
jmp 0x4ab4fe
and dword [ebp - 0x1028], 0
cmp dword [ebp - 0x1028], 0xb08f
jge 0x4ab516
mov dword [ebp - 0x1030], 1
jmp 0x4ab51d
and dword [ebp - 0x1030], 0
mov eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x1030]
cmp eax, dword [ebp - 0x1038]
jg 0x4ab53e
mov dword [ebp - 0x1040], 1
jmp 0x4ab545
and dword [ebp - 0x1040], 0
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1d0], 0
jmp 0x4ab56a
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x34
jne 0x4ab5d5
mov dword [ebp - 0x26f0], 0xfffffff7
mov dword [ebp - 0x2a44], 0
mov dword [ebp - 0x26f8], 0x3adeb0cc
mov dword [ebp - 0x7e4], 0
jmp 0x4ab5aa
mov eax, dword [ebp - 0x7e4]
inc eax
mov dword [ebp - 0x7e4], eax
cmp dword [ebp - 0x7e4], 2
jge 0x4ab5c6
mov eax, dword [ebp - 0x7e4]
mov dword [ebp + eax*4 - 0x2e64], 0x8275baed
jmp 0x4ab59d
mov eax, dword [ebp - 0x1048]
inc eax
mov dword [ebp - 0x1048], eax
jmp 0x4ab55d
mov dword [ebp - 0x8cc], 0x5b57fd54
mov dword [ebp - 0x8cc], 0xffffffe2
jmp 0x4ab5f8
mov eax, dword [ebp - 0x8cc]
inc eax
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 9
je 0x4ab6bb
mov dword [ebp - 0x7ec], 0
mov dword [ebp - 0x7ec], 0xfffffff7
jmp 0x4ab628
mov eax, dword [ebp - 0x7ec]
inc eax
mov dword [ebp - 0x7ec], eax
cmp dword [ebp - 0x7ec], 0x15
je 0x4ab677
mov byte [ebp - 0x36b], 0
movzx eax, byte [ebp - 0x36b]
test eax, eax
je 0x4ab659
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov byte [ebp - 0x36d], 0
movzx eax, byte [ebp - 0x36d]
test eax, eax
je 0x4ab675
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x4ab61b
mov byte [ebp - 0x2c9], 0
movzx eax, byte [ebp - 0x2c9]
test eax, eax
je 0x4ab6b6
push 0x130d
push 0x24e
push 0x21b1
push 0x14d2
push 0x68d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
jmp 0x4ab5eb
mov dword [ebp - 0x884], 0
jmp 0x4ab6d4
mov eax, dword [ebp - 0x884]
inc eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 1
jge 0x4ab6f0
mov eax, dword [ebp - 0x884]
mov dword [ebp + eax*4 - 0x2aec], 0x102d
jmp 0x4ab6c7
mov dword [ebp - 0x8f4], 0xfdf99ff6
mov dword [ebp - 0x7f4], 0
jmp 0x4ab713
mov eax, dword [ebp - 0x7f4]
inc eax
mov dword [ebp - 0x7f4], eax
cmp dword [ebp - 0x7f4], 3
jge 0x4ab72f
mov eax, dword [ebp - 0x7f4]
mov dword [ebp + eax*4 - 0x2ff4], 0x9cf1813f
jmp 0x4ab706
mov dword [ebp - 0x8f4], 0xffffffe8
jmp 0x4ab748
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 7
je 0x4ab7e7
mov dword [ebp - 0x7fc], 0
mov dword [ebp - 0x7fc], 0
jmp 0x4ab778
mov eax, dword [ebp - 0x7fc]
inc eax
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 0x1d
je 0x4ab7e2
mov dword [ebp - 0x88c], 0xffffffff
mov dword [ebp - 0x88c], 0
jmp 0x4ab7a4
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0x12
je 0x4ab7e0
mov byte [ebp - 0x371], 0
movzx eax, byte [ebp - 0x371]
test eax, eax
je 0x4ab7de
push 0
push 0
push 0x1009
push 0
push 0x1b65
push 0
push 0x9e0
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x4ab797
jmp 0x4ab76b
jmp 0x4ab73b
mov dword [ebp - 0x804], 0
jmp 0x4ab800
mov eax, dword [ebp - 0x804]
inc eax
mov dword [ebp - 0x804], eax
cmp dword [ebp - 0x804], 0x13
jge 0x4ad958
mov dword [ebp - 0x2e8], 0xfffffffa
mov dword [ebp - 0x8d4], 0
jmp 0x4ab830
mov eax, dword [ebp - 0x8d4]
inc eax
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 1
jge 0x4ab84c
mov eax, dword [ebp - 0x8d4]
mov dword [ebp + eax*4 - 0x1050], 1
jmp 0x4ab823
mov dword [ebp - 0x2e8], 0
jmp 0x4ab865
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
jg 0x4ab8d8
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4cc], 0
jmp 0x4ab891
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 0
jg 0x4ab8d6
mov dword [ebp - 0x1ea0], 0x16b471df
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp + eax*4 - 0x1050], 0
je 0x4ab8b6
jmp 0x4ab8d6
mov eax, dword [ebp - 0x2e8]
imul eax, dword [ebp + eax*4 - 0x1050], 0x2972
imul eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x1ea0], eax
jmp 0x4ab884
jmp 0x4ab858
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x814], 0
mov dword [ebp - 0x1058], 0xc23afc37
mov dword [ebp - 0x80c], 0
jmp 0x4ab90f
mov eax, dword [ebp - 0x80c]
inc eax
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 3
jge 0x4ab92b
mov eax, dword [ebp - 0x80c]
mov dword [ebp + eax*4 - 0x2d24], 1
jmp 0x4ab902
mov byte [ebp - 0x2d9], 0
movzx eax, byte [ebp - 0x2d9]
test eax, eax
je 0x4ab94a
push 0
push 0x1267
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov eax, dword [ebp - 0x1058]
mov dword [ebp - 0x2700], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1058]
mov dword [ebp + eax - 0x2d24], ecx
mov dword [ebp - 0x598], 0xa29c1464
mov dword [ebp - 0x2f0], 0xeaa29c14
mov dword [ebp - 0x2f8], 0xc865b49d
mov dword [ebp - 0x1060], 0xf2fdad5a
mov dword [ebp - 0x894], 0
jmp 0x4ab9aa
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 1
jge 0x4ab9c6
mov eax, dword [ebp - 0x894]
mov dword [ebp + eax*4 - 0x1ea8], 0x479b69b2
jmp 0x4ab99d
mov eax, 0xfff80008
test eax, eax
je 0x4ab9e4
cmp dword [ebp - 0x2f8], 0
je 0x4ab9e4
mov dword [ebp - 0x1e24], 1
jmp 0x4ab9eb
and dword [ebp - 0x1e24], 0
mov dword [ebp - 0x2f0], 1
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2a54], eax
mov eax, dword [ebp - 0x2f0]
add eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0x2f8], 0
jmp 0x4aba2c
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jg 0x4abaab
mov dword [ebp - 0x2f0], 0
jmp 0x4aba4e
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
jg 0x4aba91
mov byte [ebp - 0x373], 0
movzx eax, byte [ebp - 0x373]
test eax, eax
je 0x4aba8f
push 0
push 0
push 0
push 0x130d
push 0x19cb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
jmp 0x4aba41
mov eax, dword [ebp - 0x2f8]
mov eax, dword [ebp + eax*4 - 0x1ea8]
dec eax
dec eax
mov dword [ebp - 0x1060], eax
jmp 0x4aba1f
mov dword [ebp - 0x814], 0
jmp 0x4abac4
cmp dword [ebp - 0x814], 0
jg 0x4ad953
mov dword [ebp - 0x300], 0xfffffffa
mov dword [ebp - 0x90c], 0
jmp 0x4abaf4
cmp dword [ebp - 0x90c], 1
jge 0x4abb10
mov eax, dword [ebp - 0x90c]
mov dword [ebp + eax*4 - 0x1068], 1
jmp 0x4abae7
mov dword [ebp - 0x300], 0
jmp 0x4abb29
jmp 0x4ab7f3
mov dword [ebp - 0x1c48], 0xcb8ce3e
mov dword [ebp - 0x5e8], 0
jmp 0x4ad97b
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 3
jge 0x4ad997
mov eax, dword [ebp - 0x5e8]
mov dword [ebp + eax*4 - 0x2100], 0xb110c93b
jmp 0x4ad96e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2100], 0
jmp 0x4ad9c5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2100]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2100], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2100], 0xc
jle 0x4ada12
mov dword [ebp - 0x22ac], 1
mov dword [ebp - 0x22a8], 1
mov dword [ebp - 0x22a4], 1
mov dword [ebp - 0x22a0], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x22ac]
mov dword [ebp - 0x1c48], eax
jmp 0x4ad9aa
mov byte [ebp - 0x37f], 0
mov dword [ebp - 0x13f8], 0x299dada4
mov dword [ebp - 0x28c8], 0xe77ab392
mov dword [ebp - 0x2778], 0xffffffff
mov dword [ebp - 0x28d0], 6
mov dword [ebp - 0x2780], 1
mov dword [ebp - 0x28d8], 0xe4a90611
mov dword [ebp - 0x108], 0
jmp 0x4ada6e
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x4ada8a
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x2dd4], 0x10977a12
jmp 0x4ada61
mov dword [ebp - 0x108], 0
jmp 0x4adaa3
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x4adabf
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x214c], 0xffffffff
jmp 0x4ada96
cmp dword [ebp - 0x13f8], 0
je 0x4adaff
mov dword [ebp - 0x1c50], 0xe1265ab3
mov eax, dword [ebp - 0x1c50]
mov dword [ebp - 0x13f8], eax
mov byte [ebp - 0x309], 0
movzx eax, byte [ebp - 0x309]
test eax, eax
je 0x4adafa
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
jmp 0x4adb8e
mov dword [ebp - 0x278c], 0
mov dword [ebp - 0x110], 0
jmp 0x4adb22
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x4adb3e
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x3070], 0
jmp 0x4adb15
mov dword [ebp - 0x110], 0
jmp 0x4adb57
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x4adb73
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x28e0], 1
jmp 0x4adb4a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x214c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x214c], eax
movzx eax, byte [ebp - 0x37f]
test eax, eax
je 0x4adba1
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [ebp - 4], 0xfffffff7
mov dword [ebp - 8], 7
mov dword [ebp - 0x4fc], 0xda2e
mov dword [ebp - 0x14d8], 0x7c409728
mov dword [ebp - 0x1ca8], 0x2f563ed
mov dword [ebp - 0x2798], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x28e8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x27a4], eax
imul eax, dword [ebp - 4], 0
cmp eax, dword [ebp - 4]
jge 0x4adbfe
mov dword [ebp - 0x1c58], 1
jmp 0x4adc05
and dword [ebp - 0x1c58], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x28f0], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jl 0x4adc22
mov dword [ebp - 0x1400], 1
jmp 0x4adc29
and dword [ebp - 0x1400], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1400]
jg 0x4adc40
mov dword [ebp - 0x750], 0
jmp 0x4b2705
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 2
jge 0x4b2721
mov eax, dword [ebp - 0x750]
mov dword [ebp + eax*4 - 0x1b38], 0x3342eb9
jmp 0x4b26f8
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1b38], 0
jmp 0x4b274f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b38]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1b38], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b38], 8
jg 0x4b27a5
mov dword [ebp - 0x57c], 0x9aed23b6
mov dword [ebp - 0x1e20], 1
mov dword [ebp - 0x57c], 0
jmp 0x4b278c
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 0x16
jne 0x4b27a3
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x1e20], eax
jmp 0x4b277f
jmp 0x4b2734
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0049d570
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret