Function at 0x4510b6
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf04
push esi
push edi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x4510dc
push 0x3979
push 0
call fcn.00457757
pop ecx
pop ecx
jmp 0x457534
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x800], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x8e4]
movzx eax, byte [eax]
test eax, eax
je 0x457504
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0xdb4], 0xffffffff
mov dword [ebp - 0x154], 4
push 2
lea ecx, [ebp - 0xab0]
call fcn.00422862
mov dword [ebp - 0x38], 0
jmp 0x451179
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x45118f
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xe34], 0xf0ea
jmp 0x451172
lea eax, [ebp - 0x38]
push eax
push 0
lea eax, [ebp - 0xab0]
push eax
push 0x37c8
push 0x513e
call fcn.0045fb91
add esp, 0x14
mov dword [ebp - 0x38], 0
jmp 0x4511be
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x4511d4
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xdc8], 0xffffffff
jmp 0x4511b7
mov dword [ebp - 0x148], 0
jmp 0x4511ed
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jg 0x451281
mov dword [ebp - 0xc1c], 0x5121
mov dword [ebp - 0xd14], 0xffffffff
mov dword [ebp - 0xc24], 0
mov dword [ebp - 0xd2c], 0xfffffff6
mov dword [ebp - 0xc2c], 0x5b054dbb
mov dword [ebp - 0x204], 0
jmp 0x451245
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x451261
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xf04], 9
jmp 0x451238
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdc8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xdc8], eax
jmp 0x4511e0
mov dword [ebp - 0x154], 0
jmp 0x45129a
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xffffffff
jl 0x451313
push 2
lea ecx, [ebp - 0xad4]
call fcn.00422862
mov dword [ebp - 0x1b4], 0
jmp 0x4512c9
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x4512eb
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0xad4]
call fcn.00422927
mov dword [eax], 0xc58f5537
jmp 0x4512bc
push 0
lea eax, [ebp - 0xab0]
push eax
lea eax, [ebp - 0xad4]
push eax
call fcn.0045ed0b
add esp, 0xc
lea ecx, [ebp - 0xad4]
call fcn.00422922
jmp 0x45128d
lea ecx, [ebp - 0xab0]
call fcn.00422922
mov dword [ebp - 0x130], 0x9dada439
mov dword [ebp - 0x15c], 0
jmp 0x451341
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x45135d
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x904], 1
jmp 0x451334
mov byte [ebp - 0xc7], 0
push 0
push 0x81d
lea eax, [ebp - 0xc7]
push eax
push 0x2524
push 1
push 0
push 0x1512
call fcn.00457671
add esp, 0x1c
mov dword [ebp - 0x130], 0
jmp 0x4513a1
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jg 0x45153c
xor eax, eax
je 0x451510
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0x904], 0
je 0x4514f7
mov dword [ebp - 0x164], 0xfffffff7
mov dword [ebp - 0x1e4], 0
jmp 0x4513ed
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x451409
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x2b8], 0
jmp 0x4513e0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2b8], 2
jmp 0x451437
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b8], 0
jl 0x451498
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2b8]
mov eax, dword [ebp + eax*4 - 0x904]
mov dword [ebp + ecx*4 - 0x904], eax
mov byte [ebp - 0x92], 0
lea eax, [ebp - 0x92]
push eax
push 0x1fc3
push 0x3f8b
push 0x4bbf
push 0
call fcn.0045782a
add esp, 0x14
jmp 0x45141c
mov dword [ebp - 0x164], 2
jmp 0x4514b1
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jl 0x4514f5
push 0xd00
push 0x4ae2
push 0
push 0x2bbb
push 1
push 0x763
push 0x6bd1
push 0x51ae
push 0x1508
push 0x7166
push 0x2f1b
call fcn.0044c1f4
add esp, 0x2c
jmp 0x4514a4
jmp 0x45150e
mov dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
jmp 0x451522
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x904], 0
je 0x451522
jmp 0x45153c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x904], 0
je 0x451537
jmp 0x451394
jmp 0x451394
mov dword [ebp - 0x118], 0x30f94f37
mov dword [ebp - 0x1bc], 0
jmp 0x45155f
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x45157b
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x808], 0
jmp 0x451552
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x808], 0
je 0x4515b0
mov dword [ebp - 0x8a4], 0x98a59c17
mov dword [ebp - 0x8ac], 0xffffffff
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8ac], eax
jmp 0x45168a
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x74], 0xffffffe4
jmp 0x4515c7
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffee
je 0x451646
push 1
lea ecx, [ebp - 0xac8]
call fcn.00422862
push 0x25c1
push 1
push 0x52e2
lea eax, [ebp - 0xc3c]
push eax
push 1
lea eax, [ebp - 0xac8]
push eax
push 0xb1e
push 0x32fc
push 0x4def
push 0x6dcb
call fcn.0044b829
add esp, 0x28
push 0
lea ecx, [ebp - 0xac8]
call fcn.00422927
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x700]
mov dword [ecx], eax
lea ecx, [ebp - 0xac8]
call fcn.00422922
jmp 0x4515c0
mov dword [ebp - 0x74], 0
jmp 0x451656
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 8
jle 0x45168a
mov byte [ebp - 0x94], 0
push 0x52fe
push 0
lea eax, [ebp - 0x94]
push eax
push 0x743a
push 0x2a3f
push 0x7256
call fcn.00461318
add esp, 0x18
jmp 0x45164f
mov dword [ebp - 0x6c4], 8
mov dword [ebp - 0x8d4], 0xca8cda2a
mov dword [ebp - 0x8b4], 0x9b55bb2c
push 0
push 0
push 0x6daf
lea eax, [ebp - 0x8b4]
push eax
push 0x167a
call fcn.00458314
add esp, 0x14
mov dword [ebp - 0x8dc], 0xcd329b3a
mov dword [ebp - 0x16c], 0x928c176b
mov dword [ebp - 0x16c], 0
jmp 0x4516f2
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x11
jl 0x4517e1
mov dword [ebp - 0x174], 8
push 4
lea ecx, [ebp - 0xaf8]
call fcn.00422862
mov dword [ebp - 0x1fc], 0
jmp 0x45172f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 4
jge 0x451751
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0xaf8]
call fcn.00422927
mov dword [eax], 0xfffffffc
jmp 0x451722
mov dword [ebp - 0x174], 0x18
jmp 0x45176a
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xfffffffa
jg 0x4517d1
push 1
lea ecx, [ebp - 0xae0]
call fcn.00422862
push 0x35e
push 0x4e3f
push 1
push 0
lea eax, [ebp - 0xae0]
push eax
lea eax, [ebp - 0xd30]
push eax
call fcn.004587ec
add esp, 0x18
push 0
lea ecx, [ebp - 0xae0]
call fcn.00422927
mov esi, eax
push 2
lea ecx, [ebp - 0xaf8]
call fcn.00422927
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [ebp - 0xae0]
call fcn.00422922
jmp 0x45175d
lea ecx, [ebp - 0xaf8]
call fcn.00422922
jmp 0x4516e5
mov dword [ebp - 0xa38], 0x13f08700
mov dword [ebp - 0xa34], 0x13f08700
mov dword [ebp - 0xa30], 0x13f08700
mov dword [ebp - 0xa2c], 0x13f08700
lea ecx, [ebp - 0x2ae]
call fcn.00401b47
push eax
lea eax, [ebp - 0xa28]
push eax
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0xe2c]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc90]
call fcn.004228fc
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xc44], 0xfffffffb
push 4
lea ecx, [ebp - 0xc80]
call fcn.00422862
push 0x1dbc
lea eax, [ebp - 0xdac]
push eax
push 0
lea eax, [ebp - 0xc80]
push eax
call fcn.0045efb0
add esp, 0x10
mov dword [ebp - 0xa4], 0xffffffe2
jmp 0x451895
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x16
je 0x451a71
push 2
lea ecx, [ebp - 0x974]
call fcn.00422862
mov dword [ebp - 0x50], 0
jmp 0x4518bf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x4518d5
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xea4], 0x9c3f
jmp 0x4518b8
mov dword [ebp - 0x50], 0
jmp 0x4518e5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x451901
push dword [ebp - 0x50]
lea ecx, [ebp - 0x974]
call fcn.00422927
mov dword [eax], 0x23371247
jmp 0x4518de
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xea4], 0
jne 0x45191f
or eax, 0xffffffff
jne 0x45191f
and dword [ebp - 0x71c], 0
jmp 0x451929
mov dword [ebp - 0x71c], 1
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0x708], eax
push 0
lea ecx, [ebp - 0x974]
call fcn.00422927
mov ecx, dword [ebp - 0x708]
mov dword [eax], ecx
cmp dword [ebp - 0x708], 0xfff6
ja 0x451963
mov dword [ebp - 0x724], 1
jmp 0x45196a
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x71c]
cmp eax, dword [ebp - 0x724]
jg 0x451984
mov dword [ebp - 0x72c], 1
jmp 0x45198b
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x72c]
je 0x4519be
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x4519b9
push 0x56a6
push 0
call fcn.00457d3e
pop ecx
pop ecx
jmp 0x451a4b
mov dword [ebp - 0xc4c], 0xe012d2c8
mov dword [ebp - 0xd38], 7
mov dword [ebp - 0xc54], 0xd40a1650
mov dword [ebp - 0xd8c], 0x1a7a81a8
push 3
lea ecx, [ebp - 0xc70]
call fcn.00422862
mov dword [ebp - 0x8bc], 0x25189d9e
lea eax, [ebp - 0xc5c]
push eax
push 0x2b85
lea eax, [ebp - 0xc70]
push eax
push 0
push 0
call fcn.00460204
add esp, 0x14
push 0x187a
push 0
push 0x3b25
call fcn.0045753a
add esp, 0xc
lea eax, [ebp - 0x8bc]
push eax
push 0
call fcn.0045992e
pop ecx
pop ecx
lea ecx, [ebp - 0xc70]
call fcn.00422922
cmp dword [ebp - 0xa4], 0
je 0x451a61
lea ecx, [ebp - 0x974]
call fcn.00422922
jmp 0x451a71
lea ecx, [ebp - 0x974]
call fcn.00422922
jmp 0x451888
lea ecx, [ebp - 0xc80]
call fcn.00422922
push 4
lea ecx, [ebp - 0x754]
call fcn.00422862
mov dword [ebp - 0xc], 0xfffffffb
mov dword [ebp - 0x58], 0xfffffffc
mov dword [ebp - 0x68], 0
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0x1c4], 0
jmp 0x451ac1
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
jge 0x451ae3
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x754]
call fcn.00422927
mov dword [eax], 4
jmp 0x451ab4
mov dword [ebp - 0xc], 3
jmp 0x451af3
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x451dba
mov dword [ebp - 0xac], 0xd013d0bb
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00422862
push 0x4764
lea eax, [ebp - 0xd40]
push eax
push 0
push 0x610c
push 0
push 0x33d
push 0x2e08
lea eax, [ebp - 0x2d8]
push eax
call fcn.0045add9
add esp, 0x20
push dword [ebp - 0xc]
lea ecx, [ebp - 0x754]
call fcn.00422927
cmp dword [eax], 0
je 0x451cd1
push 0
lea ecx, [ebp - 0x754]
call fcn.00422927
push dword [ebp - 0xc]
lea ecx, [ebp - 0x754]
call fcn.00422927
mov dword [ebp - 0x734], eax
push dword [ebp - 0xc]
lea ecx, [ebp - 0x754]
call fcn.00422927
mov ecx, dword [ebp - 0x734]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x734]
cmp dword [eax], 0
je 0x451be4
push dword [ebp - 0xc]
lea ecx, [ebp - 0x754]
call fcn.00422927
cmp dword [eax], 0
jne 0x451bbf
cmp dword [ebp - 0xc], 0
jne 0x451bbf
and dword [ebp - 0x73c], 0
jmp 0x451bc9
mov dword [ebp - 0x73c], 1
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x451be4
mov dword [ebp - 0x6f8], 1
jmp 0x451beb
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xac], eax
mov esi, dword [ebp - 0xac]
push 1
lea ecx, [ebp - 0x2d8]
call fcn.00422927
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x2d8]
call fcn.00422927
add esi, dword [eax]
cmp esi, dword [ebp - 0xc]
jg 0x451c2d
mov dword [ebp - 0x2e8], 1
jmp 0x451c34
and dword [ebp - 0x2e8], 0
push 0
lea ecx, [ebp - 0x2d8]
call fcn.00422927
mov ecx, dword [ebp - 0x2e8]
add ecx, dword [eax]
jne 0x451c57
mov dword [ebp - 0x248], 1
jmp 0x451c5e
and dword [ebp - 0x248], 0
push 1
lea ecx, [ebp - 0x2d8]
call fcn.00422927
mov ecx, dword [ebp - 0x248]
mov dword [eax], ecx
cmp dword [ebp - 0x248], 0
je 0x451c80
cmp dword [ebp - 0xc], 0
cmp dword [ebp - 0xc], 0x4128
jne 0x451c95
mov dword [ebp - 0x520], 1
jmp 0x451c9c
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x520]
cmp dword [ebp - 0xc], eax
jle 0x451cb6
mov dword [ebp - 0x2f0], 1
jmp 0x451cbd
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x68], eax
jne 0x451cf9
mov dword [ebp - 0x8c4], 0xffffffff
cmp dword [ebp - 0x8c4], 0
je 0x451cf4
lea ecx, [ebp - 0x2d8]
call fcn.00422922
jmp 0x451dba
jmp 0x451daa
mov dword [ebp - 0x8cc], 0xd37f4a1d
mov dword [ebp - 0xac], 1
jmp 0x451d1c
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x451da0
mov dword [ebp - 0x68], 1
jmp 0x451d35
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x451d9b
push dword [ebp - 0xac]
lea ecx, [ebp - 0x2d8]
call fcn.00422927
cmp dword [eax], 0
je 0x451d53
jmp 0x451d9b
mov dword [ebp - 0x58], 3
jmp 0x451d63
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x451d99
push dword [ebp - 0x68]
lea ecx, [ebp - 0x2d8]
call fcn.00422927
and dword [eax], 0
mov byte [ebp - 0x98], 0
push 0
push 0x24fb
lea eax, [ebp - 0x98]
push eax
call fcn.0045af74
add esp, 0xc
jmp 0x451d5c
jmp 0x451d2e
jmp 0x451d0f
mov dword [ebp - 0x8cc], 0xfffffffe
lea ecx, [ebp - 0x2d8]
call fcn.00422922
jmp 0x451aec
mov dword [ebp - 0x58], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x58], eax
jle 0x451dd5
mov dword [ebp - 0x648], 1
jmp 0x451ddc
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x648], eax
jle 0x451df6
mov dword [ebp - 0x2f8], 1
jmp 0x451dfd
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x2f8], eax
jne 0x451e14
mov dword [ebp - 0x528], 1
jmp 0x451e1b
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x528]
jne 0x451e3e
cmp dword [ebp - 0x58], 0
jne 0x451e3e
and dword [ebp - 0x300], 0
jmp 0x451e48
mov dword [ebp - 0x300], 1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x300]
jge 0x451e6e
push 0
lea ecx, [ebp - 0x754]
call fcn.00422927
cmp dword [eax], 0
jne 0x451e6e
and dword [ebp - 0x640], 0
jmp 0x451e78
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x640]
sub eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xf8]
jne 0x451e98
mov dword [ebp - 0x308], 1
jmp 0x451e9f
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x754]
call fcn.00422922
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0x6c4]
push eax
push 0
push 0x27b9
push 0
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.0045f1bc
add esp, 0x20
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x24c], 6
mov dword [ebp - 0x17c], 0
jmp 0x451f11
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x451f2d
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x8ec], 1
jmp 0x451f04
mov byte [ebp - 0x9a], 0
lea eax, [ebp - 0x9a]
push eax
push 0x5ee0
push 0x68bd
push 1
push 1
push 0x1777
push 0
push 0x7533
push 0x429e
call fcn.0044ba50
add esp, 0x24
mov dword [ebp - 0x2c], 0
jmp 0x451f72
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff5
je 0x4520dc
mov dword [ebp - 0x1ec], 0xffffffff
mov dword [ebp - 0x538], 0x9beab1d6
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jl 0x451fa4
mov dword [ebp - 0x530], 1
jmp 0x451fab
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xc64], eax
cmp dword [ebp - 0x2c], 0xb441
je 0x451fcc
mov dword [ebp - 0x310], 1
jmp 0x451fd3
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x530]
cmp eax, dword [ebp - 0x310]
jg 0x451fed
mov dword [ebp - 0x790], 1
jmp 0x451ff4
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc74], eax
mov dword [ebp - 0x24c], 0xffffffff
cmp dword [ebp - 0x24c], 0
je 0x452037
cmp dword [ebp - 0x1ec], 0
je 0x452037
cmp dword [ebp - 0x24c], 0
je 0x452037
mov dword [ebp - 0x644], 1
jmp 0x45203e
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1ec], eax
jg 0x452061
mov dword [ebp - 0x318], 1
jmp 0x452068
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x538], eax
jge 0x45208b
mov dword [ebp - 0x320], 1
jmp 0x452092
and dword [ebp - 0x320], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x320]
mov dword [ebp + eax - 0x8ec], ecx
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x4520d7
push 0x4e23
push 0x31c2
push 0
push 0x560
push 0
push 0x5c52
call fcn.00457d5a
add esp, 0x18
jmp 0x451f6b
mov dword [ebp - 0x118], 0xa
jmp 0x4520f5
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
je 0x45210b
cmp dword [ebp - 0x6c4], 0
je 0x452109
jmp 0x45210b
jmp 0x4520e8
lea ecx, [ebp - 0xc90]
call fcn.00422922
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0xd58], 0x48d327cb
mov dword [ebp - 0xd54], 0x48d327cb
mov dword [ebp - 0xd50], 0x48d327cb
mov dword [ebp - 0xd4c], 0x48d327cb
mov dword [ebp - 0xd48], 0x8fc558ba
mov dword [ebp - 0x328], 2
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x45218a
push 0
push 0x1aa6
push 0x8aa
push 0x1f72
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
push 3
lea ecx, [ebp - 0x2a8]
call fcn.00422862
mov dword [ebp - 0x100], 0xcd9d7540
mov dword [ebp - 0x44], 0xe55a
mov dword [ebp - 0x184], 0
jmp 0x4521ce
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x4521f0
push dword [ebp - 0x184]
lea ecx, [ebp - 0x2a8]
call fcn.00422927
mov dword [eax], 1
jmp 0x4521c1
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
cmp dword [eax], 0
jne 0x4522ed
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xc84], eax
mov esi, dword [ebp - 0x100]
imul esi, dword [ebp - 0x44]
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
cmp esi, dword [eax]
jge 0x452254
cmp dword [ebp - 0x100], 0
je 0x452254
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
cmp dword [eax], 0
je 0x452254
mov dword [ebp - 0x540], 1
jmp 0x45225b
and dword [ebp - 0x540], 0
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
mov ecx, dword [ebp - 0x540]
cmp ecx, dword [eax]
jg 0x45227e
mov dword [ebp - 0x8f4], 1
jmp 0x452285
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xb90], eax
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
xor eax, eax
inc eax
cmp eax, 0xf393
je 0x4522b4
mov dword [ebp - 0x330], 1
jmp 0x4522bb
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x330], eax
jne 0x4522d2
mov dword [ebp - 0x64c], 1
jmp 0x4522d9
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
sub eax, 6
jne 0x4522ed
and dword [ebp - 0x338], 0
jmp 0x4522f7
mov dword [ebp - 0x338], 1
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
mov ecx, dword [ebp - 0x338]
cmp ecx, dword [eax]
je 0x45231a
mov dword [ebp - 0x7e8], 1
jmp 0x452321
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x44], 0
jne 0x452335
or eax, 0xffffffff
jne 0x452335
and dword [ebp - 0x548], 0
jmp 0x45233f
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x548], eax
jne 0x45235a
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x45235a
and dword [ebp - 0x340], 0
jmp 0x452364
mov dword [ebp - 0x340], 1
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00422927
mov eax, dword [eax]
mov ecx, dword [ebp - 0x340]
lea eax, [ecx + eax - 6]
test eax, eax
je 0x452419
push 3
lea ecx, [ebp - 0xb10]
call fcn.00422862
mov dword [ebp - 0x79c], 0x37d437f1
mov dword [ebp - 0x1cc], 0
jmp 0x4523b5
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x4523d7
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xb10]
call fcn.00422927
mov dword [eax], 0x860b
jmp 0x4523a8
push 0x14c2
lea eax, [ebp - 0xb10]
push eax
push 0x1cfb
push 1
push 0
call fcn.00460204
add esp, 0x14
lea eax, [ebp - 0x2a8]
push eax
push 0
lea eax, [ebp - 0x79c]
push eax
call fcn.0045ec0c
add esp, 0xc
lea ecx, [ebp - 0xb10]
call fcn.00422922
jmp 0x452482
mov dword [ebp - 0x824], 0x9dfeee83
mov dword [ebp - 0x704], 0x404e5477
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x824]
push eax
push 0
push 0x1936
lea eax, [ebp - 0x2a8]
push eax
push 0x4c41
push 0x43c
call fcn.00457a21
add esp, 0x20
mov dword [ebp - 0x44], 0xffffffe5
jmp 0x45246f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x19
jl 0x452482
cmp dword [ebp - 0x704], 0
je 0x452480
jmp 0x452482
jmp 0x452468
lea eax, [ebp - 0x44]
push eax
push 0x5a41
push 0
push 0x527
push 1
lea eax, [ebp - 0x100]
push eax
push 0x4f56
push 0x4a1
call fcn.0045add9
add esp, 0x20
lea ecx, [ebp - 0x2a8]
call fcn.00422922
mov dword [ebp - 0x7a4], 0xb0f7
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x82c], 1
push 4
lea ecx, [ebp - 0xb40]
call fcn.00422862
mov dword [ebp - 0x254], 0xdcb0c7b2
mov dword [ebp - 0xb98], 0xfd90538e
mov dword [ebp - 0xba0], 0x6aece011
mov dword [ebp - 0xa10], 0x22354120
mov dword [ebp - 0xa0c], 0x22354120
mov dword [ebp - 0xa08], 0x22354120
mov dword [ebp - 0xa04], 0x22354120
lea ecx, [ebp - 0x21d]
call fcn.00401b47
push eax
lea eax, [ebp - 0xa00]
push eax
lea eax, [ebp - 0xa10]
push eax
lea ecx, [ebp - 0xe44]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x914]
call fcn.004228fc
and dword [ebp - 0x9c0], 0
and dword [ebp - 0x9bc], 0
and dword [ebp - 0x9b8], 0
and dword [ebp - 0x9b4], 0
lea ecx, [ebp - 0x2ad]
call fcn.00401b47
push eax
lea eax, [ebp - 0x9b0]
push eax
lea eax, [ebp - 0x9c0]
push eax
lea ecx, [ebp - 0xeb4]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xca0]
call fcn.004228fc
mov dword [ebp - 0xba8], 0xcdb5cf63
mov dword [ebp - 0xbb0], 0xb2933530
mov dword [ebp - 0x7b4], 0
mov dword [ebp - 0x70], 0
jmp 0x4525dd
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x4525f3
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xb28], 0xf07b4bc6
jmp 0x4525d6
mov dword [ebp - 0x70], 0
jmp 0x452603
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x45261f
push dword [ebp - 0x70]
lea ecx, [ebp - 0xb40]
call fcn.00422927
mov dword [eax], 0x422d
jmp 0x4525fc
cmp dword [ebp - 0x7a4], 0
je 0x45278a
mov dword [ebp - 0xb4], 0xfffffff7
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x452654
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
jne 0x45268a
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x82c], eax
jne 0x452681
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb28], 0
jne 0x45268a
and dword [ebp - 0x7ac], 0
jmp 0x452694
mov dword [ebp - 0x7ac], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbb8], eax
cmp dword [ebp - 0xb4], 0
jne 0x4526b5
mov dword [ebp - 0x348], 1
jmp 0x4526bc
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x348], eax
jle 0x4526d6
mov dword [ebp - 0x550], 1
jmp 0x4526dd
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x550], eax
jle 0x4526f7
mov dword [ebp - 0x350], 1
jmp 0x4526fe
and dword [ebp - 0x350], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb28]
cmp eax, dword [ebp - 0x350]
jle 0x45271e
mov dword [ebp - 0x654], 1
jmp 0x452725
and dword [ebp - 0x654], 0
imul eax, dword [ebp - 0x654], 0xffff
test eax, eax
jne 0x45273f
mov dword [ebp - 0x834], 1
jmp 0x452746
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jle 0x45276c
mov dword [ebp - 0x358], 1
jmp 0x452773
and dword [ebp - 0x358], 0
push 2
lea ecx, [ebp - 0xb40]
call fcn.00422927
mov ecx, dword [ebp - 0x358]
mov dword [eax], ecx
jmp 0x4527c3
push 0x4065
push 0x408f
push 0
call fcn.0045d110
add esp, 0xc
push 0x5c1b
push 0x5354
push 0
push 0x4139
push 1
push 0x2203
push 0x6b37
call fcn.0045978d
add esp, 0x1c
push 3
lea ecx, [ebp - 0x914]
call fcn.00422927
mov eax, dword [eax]
inc eax
jne 0x4527e7
push 0
lea ecx, [ebp - 0x914]
call fcn.00422927
cmp dword [eax], 0
je 0x452800
push 3
lea ecx, [ebp - 0x914]
call fcn.00422927
cmp dword [eax], 0
je 0x452800
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x452824
mov eax, 0xffff
test eax, eax
jne 0x452824
push 0
lea ecx, [ebp - 0xca0]
call fcn.00422927
cmp dword [eax], 0
jne 0x452824
and dword [ebp - 0x558], 0
jmp 0x45282e
mov dword [ebp - 0x558], 1
mov eax, dword [ebp - 0x254]
imul eax, dword [ebp - 0x558]
sub eax, dword [ebp - 0x7b4]
jne 0x45284f
mov dword [ebp - 0x29c], 1
jmp 0x452856
and dword [ebp - 0x29c], 0
push 1
lea ecx, [ebp - 0x914]
call fcn.00422927
mov ecx, dword [ebp - 0x29c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x254], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0xb28], ecx
lea ecx, [ebp - 0xca0]
call fcn.00422922
lea ecx, [ebp - 0x914]
call fcn.00422922
lea ecx, [ebp - 0xb40]
call fcn.00422922
mov dword [ebp - 0x20c], 0x928c176b
mov dword [ebp - 0x20c], 0
jmp 0x4528ce
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x11
jl 0x45299f
mov dword [ebp - 0x194], 8
push 4
lea ecx, [ebp - 0xb70]
call fcn.00422862
push 0
lea eax, [ebp - 0xb70]
push eax
push 0x7cc3
lea eax, [ebp - 0xbc8]
push eax
call fcn.0045ebe0
add esp, 0x10
mov dword [ebp - 0x194], 0x18
jmp 0x452928
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffffa
jg 0x45298f
push 1
lea ecx, [ebp - 0xb58]
call fcn.00422862
lea eax, [ebp - 0xb58]
push eax
lea eax, [ebp - 0xbd0]
push eax
push 0
push 0xdd3
call fcn.0045811b
add esp, 0x10
lea eax, [ebp - 0xb70]
push eax
push 0
push 0x4841
push 0x5ffc
lea eax, [ebp - 0xb58]
push eax
push 0x1343
call fcn.0044deeb
add esp, 0x18
lea ecx, [ebp - 0xb58]
call fcn.00422922
jmp 0x45291b
lea ecx, [ebp - 0xb70]
call fcn.00422922
jmp 0x4528c1
mov dword [ebp - 0x10], 0x256915a
mov dword [ebp - 0x128], 0x9dada439
mov dword [ebp - 0x1d4], 0
jmp 0x4529c9
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x4529e5
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x924], 1
jmp 0x4529bc
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x452a12
push 0x463c
push 0
push 0x7c29
push 0x3aae
push 0
call fcn.0045806f
add esp, 0x14
mov dword [ebp - 0x128], 0
jmp 0x452a2b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x452b91
xor eax, eax
je 0x452b65
mov eax, dword [ebp - 0x128]
cmp dword [ebp + eax*4 - 0x924], 0
je 0x452b4c
mov dword [ebp - 0x1f4], 0xfffffff7
mov dword [ebp - 0x19c], 0
jmp 0x452a77
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x452a93
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x2c0], 0
jmp 0x452a6a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c0], 2
jmp 0x452ac1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c0], 0
jl 0x452b18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2c0]
mov eax, dword [ebp + eax*4 - 0x924]
mov dword [ebp + ecx*4 - 0x924], eax
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x452b16
push 1
push 0
call fcn.004588b7
pop ecx
pop ecx
jmp 0x452aa6
mov dword [ebp - 0x1f4], 2
jmp 0x452b31
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jl 0x452b4a
push 0
push 0x7dbd
call fcn.0045d31c
pop ecx
pop ecx
jmp 0x452b24
jmp 0x452b63
mov dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
jmp 0x452b77
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x924], 0
je 0x452b77
jmp 0x452b91
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x924], 0
je 0x452b8c
jmp 0x452a1e
jmp 0x452a1e
mov dword [ebp - 0x140], 0x7673ed13
mov dword [ebp - 0x6cc], 0
push 3
lea ecx, [ebp - 0xb88]
call fcn.00422862
mov dword [ebp - 8], 0
jmp 0x452bc2
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x452bd5
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3c], 0
jmp 0x452bbb
mov dword [ebp - 8], 0
jmp 0x452be5
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x452bfb
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x844], 1
jmp 0x452bde
mov dword [ebp - 8], 0
jmp 0x452c0b
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x452c21
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xe7c], 0
jmp 0x452c04
mov dword [ebp - 8], 0
jmp 0x452c31
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x452c4d
push dword [ebp - 8]
lea ecx, [ebp - 0xb88]
call fcn.00422927
mov dword [eax], 1
jmp 0x452c2a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3c], 0xffffffe3
jmp 0x452c72
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0x11
je 0x452eaa
mov dword [ebp - 0x83c], 0x5931
mov dword [ebp - 0x378], 0xfffffffb
mov dword [ebp - 0x7bc], 0xe6a0
mov dword [ebp - 0x1a4], 0
jmp 0x452cba
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x452cd6
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xdf4], 4
jmp 0x452cad
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x6cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x6cc], eax
jle 0x452d04
mov dword [ebp - 0x390], 1
jmp 0x452d0b
and dword [ebp - 0x390], 0
xor eax, eax
inc eax
je 0x452d2c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe7c], 0
je 0x452d2c
mov dword [ebp - 0x368], 1
jmp 0x452d33
and dword [ebp - 0x368], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x368], eax
jle 0x452d51
mov dword [ebp - 0x560], 1
jmp 0x452d58
and dword [ebp - 0x560], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x560], eax
jl 0x452d76
mov dword [ebp - 0x370], 1
jmp 0x452d7d
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x83c]
cmp eax, dword [ebp - 0x370]
jne 0x452d97
mov dword [ebp - 0x65c], 1
jmp 0x452d9e
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
imul eax, dword [ebp - 0x7bc]
test eax, eax
je 0x452dd9
push 2
lea ecx, [ebp - 0xb88]
call fcn.00422927
cmp dword [eax], 0
je 0x452dd9
mov dword [ebp - 0x568], 1
jmp 0x452de0
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 1
je 0x452df5
mov dword [ebp - 0x380], 1
jmp 0x452dfc
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0x76ac
je 0x452e14
mov dword [ebp - 0x728], 1
jmp 0x452e1b
and dword [ebp - 0x728], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x844]
cmp dword [ebp - 0x728], eax
jge 0x452e3c
mov dword [ebp - 0x388], 1
jmp 0x452e43
and dword [ebp - 0x388], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x388], eax
jl 0x452e61
mov dword [ebp - 0x570], 1
jmp 0x452e68
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x570]
sub ecx, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x390], ecx
jle 0x452e8c
mov dword [ebp - 0x664], 1
jmp 0x452e93
and dword [ebp - 0x664], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x664]
mov dword [ebp + eax - 0xdf4], ecx
jmp 0x452c5d
mov byte [ebp - 0x91], 0
push 0x4cc
push 0x6447
push 0
lea eax, [ebp - 0x91]
push eax
call fcn.0046035e
add esp, 0x10
lea ecx, [ebp - 0xb88]
call fcn.00422922
mov dword [ebp - 0x1dc], 0
jmp 0x452ef0
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x452f0c
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x13c], 0xffffffff
jmp 0x452ee3
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x28c], 0x7a3d58e5
mov eax, 0xfe7d8a87
test eax, eax
je 0x452f38
cmp dword [ebp - 0x24], 0
je 0x452f38
mov dword [ebp - 0x3b0], 1
jmp 0x452f3f
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x452f53
mov dword [ebp - 0x398], 1
jmp 0x452f5a
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x398], eax
jle 0x452f71
mov dword [ebp - 0x578], 1
jmp 0x452f78
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x578], eax
jg 0x452f8f
mov dword [ebp - 0x3a0], 1
jmp 0x452f96
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xfffffff8
jne 0x452fab
mov dword [ebp - 0x6d4], 1
jmp 0x452fb2
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x6d4], eax
jge 0x452fc9
mov dword [ebp - 0x3a8], 1
jmp 0x452fd0
and dword [ebp - 0x3a8], 0
imul eax, dword [ebp - 0x3a8], 0xffff
cmp eax, dword [ebp - 0x24]
jge 0x452feb
mov dword [ebp - 0x580], 1
jmp 0x452ff2
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0x3b9da4d0
jle 0x45300a
mov dword [ebp - 0x66c], 1
jmp 0x453011
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x66c]
jne 0x45306a
mov dword [ebp - 0x84c], 0xffffffff
mov dword [ebp - 0x7c4], 0xfffffff6
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x45304d
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
push 0
lea eax, [ebp - 0x7c4]
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.00450c54
add esp, 0xc
jmp 0x453320
push 1
lea ecx, [ebp - 0x760]
call fcn.00422862
mov dword [ebp - 0x9d4], 0x70aacc70
mov dword [ebp - 0x9d0], 0x70aacc70
mov dword [ebp - 0x9cc], 0x70aacc70
mov dword [ebp - 0x9c8], 0x70aacc70
lea ecx, [ebp - 0x271]
call fcn.00401b47
push eax
lea eax, [ebp - 0x9c4]
push eax
lea eax, [ebp - 0x9d4]
push eax
lea ecx, [ebp - 0xe64]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xcb0]
call fcn.004228fc
push 1
lea eax, [ebp - 0xbd8]
push eax
push 0x5df8
push 0x6f4e
push 0x7b9a
push 0
push 1
push 0x7471
lea eax, [ebp - 0x760]
push eax
call fcn.00457874
add esp, 0x24
push 0
lea ecx, [ebp - 0x760]
call fcn.00422927
cmp dword [eax], 0
je 0x453128
cmp dword [ebp - 0x24], 0
je 0x453128
mov dword [ebp - 0x3b8], 1
jmp 0x45312f
and dword [ebp - 0x3b8], 0
push 0
lea ecx, [ebp - 0x760]
call fcn.00422927
mov ecx, dword [ebp - 0x3b8]
cmp ecx, dword [eax]
jl 0x453152
mov dword [ebp - 0x588], 1
jmp 0x453159
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
add eax, 0x375f3f70
je 0x453177
xor eax, eax
inc eax
je 0x453177
mov dword [ebp - 0x3c0], 1
jmp 0x45317e
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 3
jg 0x453199
cmp dword [ebp - 0x24], 0
je 0x453199
mov dword [ebp - 0x70c], 1
jmp 0x4531a0
and dword [ebp - 0x70c], 0
cmp dword [ebp - 0x70c], 0
jae 0x4531b5
mov dword [ebp - 0x3c8], 1
jmp 0x4531bc
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0xfffffff8
jb 0x4531d1
mov dword [ebp - 0x590], 1
jmp 0x4531d8
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x590]
je 0x4531f5
cmp dword [ebp - 0x24], 0
je 0x4531f5
mov dword [ebp - 0x3d0], 1
jmp 0x4531fc
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3d0]
lea esi, [ecx + eax + 3]
push 0
lea ecx, [ebp - 0x760]
call fcn.00422927
cmp esi, dword [eax]
jl 0x453226
mov dword [ebp - 0x674], 1
jmp 0x45322d
and dword [ebp - 0x674], 0
mov esi, dword [ebp - 0x674]
sub esi, 6
push 0
lea ecx, [ebp - 0x760]
call fcn.00422927
cmp esi, dword [eax]
jl 0x453253
mov dword [ebp - 0x3d8], 1
jmp 0x45325a
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0xffffffff
jbe 0x45326f
mov dword [ebp - 0x598], 1
jmp 0x453276
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x598]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28c]
je 0x4532a9
push 0
lea ecx, [ebp - 0x760]
call fcn.00422927
cmp dword [eax], 0
je 0x4532a9
mov dword [ebp - 0x3e0], 1
jmp 0x4532b0
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 1
ja 0x4532c5
mov dword [ebp - 0x6dc], 1
jmp 0x4532cc
and dword [ebp - 0x6dc], 0
mov esi, dword [ebp - 0x6dc]
neg esi
push 3
lea ecx, [ebp - 0xcb0]
call fcn.00422927
cmp esi, dword [eax]
je 0x4532f1
mov dword [ebp - 0x3e8], 1
jmp 0x4532f8
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x28c]
add eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x28c], eax
lea ecx, [ebp - 0xcb0]
call fcn.00422922
lea ecx, [ebp - 0x760]
call fcn.00422922
mov dword [ebp - 0x10], 0
jmp 0x453330
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x453f48
push 0x6d77
push 0x7d21
push 0x144
push 1
push 1
push 0x53c
push 1
push 0x1e93
push 0x5df1
call fcn.0044ba50
add esp, 0x24
mov dword [ebp - 0x138], 0xcd53bc6e
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0xbe0], 0xffffffff
mov dword [ebp - 0x150], 4
push 2
lea ecx, [ebp - 0xaa4]
call fcn.00422862
mov dword [ebp - 0x20], 0
jmp 0x4533ab
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x4533c1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe3c], 0xf0ea
jmp 0x4533a4
mov dword [ebp - 0x20], 0
jmp 0x4533d1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x4533ed
push dword [ebp - 0x20]
lea ecx, [ebp - 0xaa4]
call fcn.00422927
mov dword [eax], 0x999d94b4
jmp 0x4533ca
mov dword [ebp - 0x20], 0
jmp 0x4533fd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x453413
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdd8], 0xffffffff
jmp 0x4533f6
mov dword [ebp - 0x1ac], 0
jmp 0x45342c
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jg 0x4534c0
mov dword [ebp - 0xbe8], 0x5121
mov dword [ebp - 0xbf0], 0xffffffff
mov dword [ebp - 0xbf8], 0
mov dword [ebp - 0xc00], 0xfffffff6
mov dword [ebp - 0xc08], 0x5b054dbb
mov dword [ebp - 0x144], 0
jmp 0x453484
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 4
jge 0x4534a0
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0xef4], 9
jmp 0x453477
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdd8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xdd8], eax
jmp 0x45341f
mov dword [ebp - 0x150], 0
jmp 0x4534d9
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffff
jl 0x45353b
push 2
lea ecx, [ebp - 0xb4c]
call fcn.00422862
push 1
push 0
lea eax, [ebp - 0xc10]
push eax
push 0x2189
lea eax, [ebp - 0xb4c]
push eax
call fcn.00458314
add esp, 0x14
push 1
lea ecx, [ebp - 0xb4c]
call fcn.00422927
mov esi, eax
push 0
lea ecx, [ebp - 0xaa4]
call fcn.00422927
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [ebp - 0xb4c]
call fcn.00422922
jmp 0x4534cc
lea ecx, [ebp - 0xaa4]
call fcn.00422922
mov dword [ebp - 0x138], 0
jmp 0x45355f
cmp dword [ebp - 0x138], 0
jg 0x453f43
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x7d4], 0x4f84b811
mov dword [ebp - 0x854], 0xffffffff
push 3
lea ecx, [ebp - 0x284]
call fcn.00422862
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x60], 0
jmp 0x4535ae
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x4535ca
push dword [ebp - 0x60]
lea ecx, [ebp - 0x284]
call fcn.00422927
mov dword [eax], 0x4eea
jmp 0x4535a7
mov dword [ebp - 0x60], 0
jmp 0x4535da
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x4535f0
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x9ac], 0x7617c0ec
jmp 0x4535d3
mov dword [ebp - 0x18], 0xffffffe2
jmp 0x453600
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe3
je 0x453636
mov dword [ebp - 0x7cc], 0xfff6
push 0
push 0x7a91
push 0x36dc
push 0x4a43
push 1
push 1
lea eax, [ebp - 0x7cc]
push eax
call fcn.00457671
add esp, 0x1c
jmp 0x4535f9
mov dword [ebp - 0x18], 0
jmp 0x453646
cmp dword [ebp - 0x18], 2
jg 0x453916
mov dword [ebp - 0x108], 0x86f25db2
mov dword [ebp - 0xd0], 0x169ff4ca
push dword [ebp - 0x18]
lea ecx, [ebp - 0x284]
call fcn.00422927
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc18], eax
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0xc20], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x284]
call fcn.00422927
mov eax, dword [eax]
mov dword [ebp - 0x7d4], eax
mov eax, 0xd8af
cmp eax, 5
jbe 0x4536b3
mov dword [ebp - 0x5a0], 1
jmp 0x4536ba
and dword [ebp - 0x5a0], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x284]
call fcn.00422927
mov eax, dword [eax]
add eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x108]
jl 0x4536e4
mov dword [ebp - 0x3f0], 1
jmp 0x4536eb
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x3f0], eax
jle 0x45370e
cmp dword [ebp - 0x108], 0
je 0x45370e
mov dword [ebp - 0x67c], 1
jmp 0x453715
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x67c], eax
jl 0x45372c
mov dword [ebp - 0x3f8], 1
jmp 0x453733
and dword [ebp - 0x3f8], 0
push 2
lea ecx, [ebp - 0x284]
call fcn.00422927
mov ecx, dword [ebp - 0x3f8]
cmp ecx, dword [eax]
jl 0x453756
mov dword [ebp - 0x5a8], 1
jmp 0x45375d
and dword [ebp - 0x5a8], 0
push 2
lea ecx, [ebp - 0x284]
call fcn.00422927
mov ecx, dword [ebp - 0x5a8]
add ecx, dword [eax]
add ecx, dword [ebp - 0xd0]
cmp ecx, dword [ebp - 0xd0]
jg 0x45378c
lea ecx, [ebp - 0x284]
call fcn.00422922
mov dword [ebp - 0x6c], 0xe566
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x448], 0xa7f4ea14
mov dword [ebp - 0x864], 4
push 3
lea ecx, [ebp - 0xcc0]
call fcn.00422862
mov dword [ebp - 0x158], 0
jmp 0x453969
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x45398b
push dword [ebp - 0x158]
lea ecx, [ebp - 0xcc0]
call fcn.00422927
mov dword [eax], 0x1aa1
jmp 0x45395c
cmp dword [ebp - 0x6c], 0
je 0x453a52
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xd24], eax
cmp dword [ebp - 0x6c], 0xfffffffc
jae 0x4539b2
xor eax, eax
inc eax
jne 0x4539b2
and dword [ebp - 0x420], 0
jmp 0x4539bc
mov dword [ebp - 0x420], 1
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x420]
jg 0x4539d3
mov dword [ebp - 0x6e4], 1
jmp 0x4539da
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6e4], eax
jg 0x4539f1
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
sub eax, 0xf799b5f
cmp dword [ebp - 0x6c], eax
jle 0x453a75
mov dword [ebp - 0x438], 1
jmp 0x453a7c
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 1
jb 0x453a91
mov dword [ebp - 0x5c8], 1
jmp 0x453a98
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0x3e623b47
jge 0x453ab0
jmp 0x453329
mov dword [ebp - 0x804], 0xffffffff
mov dword [ebp - 0x88c], 0x73ede5c4
mov dword [ebp - 0x160], 0
jmp 0x453f75
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x453f8e
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x34], 0x9fdf99ff
jmp 0x453f68
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x34], 0x13
jmp 0x453fb3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0x1d
jge 0x454293
push 1
lea ecx, [ebp - 0x2cc]
call fcn.00422862
mov dword [ebp - 0x9fc], 0x1d9
mov dword [ebp - 0x9f8], 0x1d9
mov dword [ebp - 0x9f4], 0x1d9
mov dword [ebp - 0x9f0], 0x1d9
lea ecx, [ebp - 0x231]
call fcn.00401b47
push eax
lea eax, [ebp - 0x9ec]
push eax
lea eax, [ebp - 0x9fc]
push eax
lea ecx, [ebp - 0xe4c]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x998]
call fcn.004228fc
mov dword [ebp - 0x4a8], 0x9e17716e
mov dword [ebp - 0x168], 0
jmp 0x454051
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x454073
push dword [ebp - 0x168]
lea ecx, [ebp - 0x2cc]
call fcn.00422927
mov dword [eax], 0xe66c619a
jmp 0x454044
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp dword [eax], ecx
jge 0x4540a7
mov dword [ebp - 0x884], 1
jmp 0x4540ae
and dword [ebp - 0x884], 0
push 1
lea ecx, [ebp - 0x998]
call fcn.00422927
cmp dword [eax], 0
jne 0x4540cd
push 1
lea ecx, [ebp - 0x998]
call fcn.00422927
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x34]
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
imul esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
add esi, dword [ebp + eax - 0x34]
push 4
pop eax
imul eax, eax, 0
cmp esi, dword [ebp + eax - 0x34]
je 0x454109
mov dword [ebp - 0x5f0], 1
jmp 0x454110
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 0xf68e
jge 0x454128
mov dword [ebp - 0x490], 1
jmp 0x45412f
and dword [ebp - 0x490], 0
push 1
lea ecx, [ebp - 0x998]
call fcn.00422927
mov esi, dword [ebp - 0x490]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
cmp esi, dword [eax]
jl 0x454161
mov dword [ebp - 0x6a4], 1
jmp 0x454168
and dword [ebp - 0x6a4], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6a4]
jle 0x45419a
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
cmp dword [eax], 0
jne 0x45419a
and dword [ebp - 0x498], 0
jmp 0x4541a4
mov dword [ebp - 0x498], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
imul eax, dword [ebp - 0x498]
test eax, eax
je 0x4541c0
cmp dword [ebp - 0x804], 0
cmp dword [ebp - 0x4a8], 0
je 0x4541da
xor eax, eax
inc eax
je 0x4541da
mov dword [ebp - 0x5f8], 1
jmp 0x4541e1
and dword [ebp - 0x5f8], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.00422927
mov ecx, dword [ebp - 0x5f8]
cmp ecx, dword [eax]
jne 0x454204
mov dword [ebp - 0x4a0], 1
jmp 0x45420b
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 2
je 0x454220
mov dword [ebp - 0x6f4], 1
jmp 0x454227
and dword [ebp - 0x6f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
imul eax, dword [ebp - 0x6f4]
test eax, eax
je 0x454245
cmp dword [ebp - 0x4a8], 0
jne 0x454252
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x454265
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x454265
mov dword [ebp - 0x600], 1
jmp 0x45426c
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x88c], eax
lea ecx, [ebp - 0x998]
call fcn.00422922
lea ecx, [ebp - 0x2cc]
call fcn.00422922
jmp 0x453f9e
mov dword [ebp - 0x10], 0
jmp 0x4542a3
cmp dword [ebp - 0x10], 0
jl 0x4552f7
mov dword [ebp - 0xd8], 0xbf8b243e
mov dword [ebp - 0x170], 0xdf75dcec
mov dword [ebp - 0x170], 0xffffffef
jmp 0x4542da
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x15
jg 0x454356
mov dword [ebp - 0x178], 0x394a2a4f
mov dword [ebp - 0x178], 0xe
jmp 0x454306
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 8
jge 0x454351
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x454335
push 0x6d79
push 0
push 0xdd3
call fcn.0045764d
add esp, 0xc
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x45434f
push 0
call fcn.004602b6
pop ecx
jmp 0x4542f9
jmp 0x4542cd
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x608], 0xfffffff7
mov dword [ebp - 0x894], 0x36544d18
mov dword [ebp - 0x264], 0
push 3
lea ecx, [ebp - 0x780]
call fcn.00422862
mov dword [ebp - 0xa24], 0xd8fb8cef
mov dword [ebp - 0xa20], 0xd8fb8cef
mov dword [ebp - 0xa1c], 0xd8fb8cef
mov dword [ebp - 0xa18], 0xd8fb8cef
lea ecx, [ebp - 0x296]
call fcn.00401b47
push eax
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0xa24]
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00422936
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb1c]
call fcn.004228fc
mov dword [ebp - 0xec], 0
jmp 0x45440b
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x454427
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x180], 0
jmp 0x4543fe
lea eax, [ebp - 0xec]
push eax
push 1
push 1
push 0x3b9c
push 0x28d4
push 0x10a1
push 0x2285
lea eax, [ebp - 0x780]
push eax
push 0x7dba
push 0x7628
push 0x3cfe
call fcn.0044bd1b
add esp, 0x2c
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x180]
push 2
lea ecx, [ebp - 0x780]
call fcn.00422927
cmp esi, dword [eax]
jne 0x45448e
mov dword [ebp - 0x4b0], 1
jmp 0x454495
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x4b0]
jge 0x4544af
mov dword [ebp - 0x6ac], 1
jmp 0x4544b6
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0xc38], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp + eax - 0x180], ecx
push 2
lea ecx, [ebp - 0xb1c]
call fcn.00422927
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
cmp dword [ebp + eax - 0x180], ecx
jge 0x454503
mov dword [ebp - 0x4b8], 1
jmp 0x45450a
and dword [ebp - 0x4b8], 0
push 2
lea ecx, [ebp - 0x780]
call fcn.00422927
mov ecx, dword [ebp - 0x4b8]
cmp ecx, dword [eax]
jne 0x454536
cmp dword [ebp - 0x608], 0
je 0x454536
mov dword [ebp - 0x80c], 1
jmp 0x45453d
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
push 2
lea ecx, [ebp - 0x780]
call fcn.00422927
cmp dword [eax], 0
je 0x454584
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x180], 0
je 0x454584
mov dword [ebp - 0x4c0], 1
jmp 0x45458b
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x4c0]
jg 0x4545a5
mov dword [ebp - 0x720], 1
jmp 0x4545ac
and dword [ebp - 0x720], 0
cmp dword [ebp - 0x720], 0xd3650dfa
jae 0x4545c4
mov dword [ebp - 0x4c8], 1
jmp 0x4545cb
and dword [ebp - 0x4c8], 0
push 1
lea ecx, [ebp - 0xb1c]
call fcn.00422927
mov ecx, dword [ebp - 0x4c8]
cmp ecx, dword [eax]
jl 0x4545ee
mov dword [ebp - 0x610], 1
jmp 0x4545f5
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x610]
jle 0x454618
cmp dword [ebp - 0x894], 0
je 0x454618
mov dword [ebp - 0x4d0], 1
jmp 0x45461f
and dword [ebp - 0x4d0], 0
push 1
lea ecx, [ebp - 0x780]
call fcn.00422927
mov ecx, dword [ebp - 0x4d0]
mov dword [eax], ecx
lea ecx, [ebp - 0xb1c]
call fcn.00422922
lea ecx, [ebp - 0x780]
call fcn.00422922
mov dword [ebp - 0xc4], 0xfffffff8
mov dword [ebp - 0x294], 0xdc7555b7
push 2
lea ecx, [ebp - 0x934]
call fcn.00422862
mov dword [ebp - 0x4e0], 0x36fe5ab0
mov dword [ebp - 0x6fc], 0x632c5b64
mov dword [ebp - 0x4f0], 1
mov dword [ebp - 0x89c], 0x574b6046
push 2
lea ecx, [ebp - 0x980]
call fcn.00422862
mov dword [ebp - 0x8b8], 0xbb66efe0
mov dword [ebp - 0xe8], 0
jmp 0x4546c3
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x4546e5
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x934]
call fcn.00422927
mov dword [eax], 0x4272ba75
jmp 0x4546b6
push 0x2b48
push 0
lea eax, [ebp - 0x980]
push eax
lea eax, [ebp - 0xe8]
push eax
push 1
call fcn.0044be23
add esp, 0x14
mov esi, dword [ebp - 0x294]
push 0
lea ecx, [ebp - 0x934]
call fcn.00422927
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x934]
call fcn.00422927
cmp dword [eax], 0
je 0x454749
push 0
lea ecx, [ebp - 0x934]
call fcn.00422927
cmp dword [eax], 0
je 0x454749
mov dword [ebp - 0x6b4], 1
jmp 0x454750
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x6b4], 0x9a733e34
jae 0x454768
mov dword [ebp - 0x4d8], 1
jmp 0x45476f
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 1
jne 0x454784
mov dword [ebp - 0x618], 1
jmp 0x45478b
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
jne 0x4547b9
xor eax, eax
jne 0x4547b9
mov dword [ebp - 0x4e8], 1
cmp dword [ebp - 0x4e8], 0x4ad744d0
jge 0x4547db
mov dword [ebp - 0x14], 7
push 2
lea ecx, [ebp - 0xa80]
call fcn.00422862
push 3
lea ecx, [ebp - 0xb7c]
call fcn.00422862
mov dword [ebp - 0x250], 0x38425739
push 1
lea ecx, [ebp - 0x78c]
call fcn.00422862
mov dword [ebp - 0xdb0], 7
push 0x7e49
push 1
push 0x49e9
push 0x593d
push 0
lea eax, [ebp - 0x30]
push eax
push 0x2763
lea eax, [ebp - 0xa80]
push eax
call fcn.0044e203
add esp, 0x20
lea eax, [ebp - 0xb7c]
push eax
lea eax, [ebp - 0x30]
push eax
push 0x6e3d
push 2
push 1
push 0
call fcn.0044bf20
add esp, 0x18
mov dword [ebp - 0x30], 0
jmp 0x455392
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x4553ae
push dword [ebp - 0x30]
lea ecx, [ebp - 0x78c]
call fcn.00422927
mov dword [eax], 0xe2e4ed
jmp 0x45538b
mov dword [ebp - 0x30], 0
jmp 0x4553be
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x4553d4
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xe0c], 0xfffffffd
jmp 0x4553b7
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x4553e8
mov dword [ebp - 0x3f4], 1
jmp 0x4553ef
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 1
jg 0x455404
mov dword [ebp - 0x3fc], 1
jmp 0x45540b
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
sub eax, 0x16
cmp eax, dword [ebp - 0x14]
jne 0x455425
mov dword [ebp - 0x404], 1
jmp 0x45542c
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x14]
jg 0x455447
mov dword [ebp - 0x40c], 1
jmp 0x45544e
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x40c]
jl 0x455465
mov dword [ebp - 0x240], 1
jmp 0x45546c
and dword [ebp - 0x240], 0
push 0
lea ecx, [ebp - 0xb7c]
call fcn.00422927
mov ecx, dword [ebp - 0x240]
mov dword [eax], ecx
cmp dword [ebp - 0x240], 0xfffffffc
jae 0x455496
mov dword [ebp - 0x414], 1
jmp 0x45549d
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x414], eax
je 0x4554b4
mov dword [ebp - 0x41c], 1
jmp 0x4554bb
and dword [ebp - 0x41c], 0
push 1
lea ecx, [ebp - 0xa80]
call fcn.00422927
mov dword [eax], 0x66c93ee3
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x66c93ee3
jne 0x4554f2
mov dword [ebp - 0x860], 1
jmp 0x4554f9
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xdb8], eax
push 0
lea ecx, [ebp - 0x78c]
call fcn.00422927
mov esi, eax
push 0
lea ecx, [ebp - 0x78c]
call fcn.00422927
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x455531
push 0
lea ecx, [ebp - 0x78c]
call fcn.00422927
push 0
lea ecx, [ebp - 0x78c]
call fcn.00422927
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
je 0x455551
mov dword [ebp - 0x424], 1
jmp 0x455558
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x455579
cmp dword [ebp - 0x250], 0
jne 0x455579
and dword [ebp - 0x42c], 0
jmp 0x455583
mov dword [ebp - 0x42c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x42c]
mov dword [ebp + eax - 0xe0c], ecx
mov dword [ebp - 0x14], 0
jmp 0x4555a6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x4555c8
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x4555c6
push 0
call fcn.00450f0d
pop ecx
jmp 0x45559f
lea ecx, [ebp - 0x78c]
call fcn.00422922
lea ecx, [ebp - 0xb7c]
call fcn.00422922
lea ecx, [ebp - 0xa80]
call fcn.00422922
mov dword [ebp - 0xe0], 0xffffffff
push 1
lea ecx, [ebp - 0xb34]
call fcn.00422862
mov dword [ebp - 0x45c], 0xfffffff8
mov dword [ebp - 0x8d8], 1
mov dword [ebp - 0x1a0], 0
jmp 0x45562d
cmp dword [ebp - 0x1a0], 1
jge 0x45564f
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xb34]
call fcn.00422927
mov dword [eax], 0xc405b401
jmp 0x455620
cmp dword [ebp - 0xe0], 0
je 0x455697
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x7e0]
movzx eax, byte [eax]
test eax, eax
je 0x457534
push 0x1d37
call dword [sym.imp.USER32.dll_GetSysColor]
pop edi
pop esi
mov esp, ebp
pop ebp
ret