Function at 0x450ecc
Capabilities:
Get disk information
Get file size
Query service status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x634
push esi
mov dword [ebp - 0x48], 0
mov dword [ebp - 0xec], 0
jmp 0x450ef6
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x450f12
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2e8], 0x99ff
jmp 0x450ee9
mov dword [ebp - 0x48], 0
jmp 0x450f22
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x45119d
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x450f43
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x451198
mov dword [ebp - 0x8c], 0x4df6
mov dword [ebp - 0x90], 0xcc1dab97
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x2e8]
cmp dword [ebp - 0x8c], eax
je 0x450f7f
mov dword [ebp - 0x2a4], 1
jmp 0x450f86
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x2a4], eax
jle 0x450f9d
mov dword [ebp - 0x154], 1
jmp 0x450fa4
and dword [ebp - 0x154], 0
imul eax, dword [ebp - 0x154], 0xfffffffc
test eax, eax
je 0x450fc2
push 6
pop eax
test eax, eax
je 0x450fc2
mov dword [ebp - 0x2e0], 1
jmp 0x450fc9
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
add eax, 0x32b96ce0
cmp dword [ebp - 0x44], eax
jle 0x450fe5
mov dword [ebp - 0x15c], 1
jmp 0x450fec
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x44]
mov ecx, 0x507e
sub ecx, dword [ebp - 0x15c]
cmp dword [ebp + eax*4 - 0x2e8], ecx
jne 0x45100f
mov dword [ebp - 0x164], 1
jmp 0x451016
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0x9378
jle 0x45102e
mov dword [ebp - 0x2f0], 1
jmp 0x451035
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x90], 0
jmp 0x45105a
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x451193
mov dword [ebp - 0x8c], 0
jmp 0x451080
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x45118e
mov dword [ebp - 0xa4], 0x806aa1c3
mov dword [ebp - 0x428], 7
mov dword [ebp - 0xa4], 0
jmp 0x4510ba
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jg 0x451189
push 3
lea ecx, [ebp - 0x4a8]
call fcn.00413c51
mov dword [ebp - 0xe0], 0
jmp 0x4510ed
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x45110f
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x4a8]
call fcn.00413d3f
mov dword [eax], 0x2891ba8
jmp 0x4510e0
push 1
lea ecx, [ebp - 0x4a8]
call fcn.00413d3f
and dword [eax], 0
jmp 0x451145
push 1
lea ecx, [ebp - 0x4a8]
call fcn.00413d3f
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x16c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4a8]
call fcn.00413d3f
cmp dword [eax], 0
jg 0x451179
mov dword [ebp - 0x428], 0
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x451177
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
jmp 0x451121
lea ecx, [ebp - 0x4a8]
call fcn.00413d23
jmp 0x4510ad
jmp 0x451073
jmp 0x45104d
jmp 0x450f3c
jmp 0x450f1b
mov dword [ebp - 0x48], 1
jmp 0x4511ad
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe8
je 0x4511ca
mov dword [ebp - 0x470], 0xd32de9e5
cmp dword [ebp - 0x470], 0
je 0x4511c8
jmp 0x4511ca
jmp 0x4511a6
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x45151d
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x94], 0xeb90
push 1
lea ecx, [ebp - 0x50c]
call fcn.00413c51
mov dword [ebp - 0x308], 0xc0e3e763
mov dword [ebp - 0x320], 0x6acb8f2b
mov dword [ebp - 0x480], 0xe81720d7
mov dword [ebp - 0x114], 0xfffffffb
mov dword [ebp - 0x478], 0xfffffffe
mov dword [ebp - 0x1a4], 0x138b36ce
mov dword [ebp - 0xac], 0
jmp 0x45124b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x45126d
push dword [ebp - 0xac]
lea ecx, [ebp - 0x50c]
call fcn.00413d3f
mov dword [eax], 0x63ffaf07
jmp 0x45123e
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x308], eax
jl 0x451287
mov dword [ebp - 0x2f8], 1
jmp 0x45128e
and dword [ebp - 0x2f8], 0
push 0
lea ecx, [ebp - 0x50c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x2f8]
cmp ecx, dword [eax]
jge 0x4512b1
mov dword [ebp - 0x174], 1
jmp 0x4512b8
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x174], eax
jg 0x4512d2
mov dword [ebp - 0x10c], 1
jmp 0x4512d9
and dword [ebp - 0x10c], 0
push 0
lea ecx, [ebp - 0x50c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x10c]
mov dword [eax], ecx
cmp dword [ebp - 0x10c], 0
je 0x451309
cmp dword [ebp - 0x478], 0
jne 0x451309
and dword [ebp - 0x300], 0
jmp 0x451313
mov dword [ebp - 0x300], 1
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x300]
jl 0x45133a
mov dword [ebp - 0x17c], 1
jmp 0x451341
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
dec eax
cmp eax, dword [ebp - 0x94]
jge 0x45135c
mov dword [ebp - 0x184], 1
jmp 0x451363
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x308]
add eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x94]
jl 0x451383
mov dword [ebp - 0x310], 1
jmp 0x45138a
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
neg eax
cmp eax, 1
jb 0x4513a3
mov dword [ebp - 0x18c], 1
jmp 0x4513aa
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x18c]
jl 0x4513c4
mov dword [ebp - 0x318], 1
jmp 0x4513cb
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0x6d20
jl 0x4513e3
mov dword [ebp - 0x194], 1
jmp 0x4513ea
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x194]
jl 0x451404
mov dword [ebp - 0x19c], 1
jmp 0x45140b
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x19c], eax
jle 0x451425
mov dword [ebp - 0x328], 1
jmp 0x45142c
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x480], eax
lea ecx, [ebp - 0x50c]
call fcn.00413d23
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
movzx eax, byte [eax]
test eax, eax
je 0x451472
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 4
lea ecx, [ebp - 0x524]
call fcn.00413c51
mov dword [ebp - 0x68], 0x532fe223
mov dword [ebp - 0xe8], 0
jmp 0x45149f
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 4
jge 0x4514c1
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x524]
call fcn.00413d3f
mov dword [eax], 0xb9b5
jmp 0x451492
mov dword [ebp - 0x68], 0
jmp 0x4514d1
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jg 0x45150d
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x4514e9
call dword [sym.imp.USER32.dll_WaitMessage]
push dword [ebp - 0x68]
lea ecx, [ebp - 0x524]
call fcn.00413d3f
mov esi, eax
push dword [ebp - 0x68]
lea ecx, [ebp - 0x524]
call fcn.00413d3f
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x4514ca
lea ecx, [ebp - 0x524]
call fcn.00413d23
jmp 0x453bab
mov dword [ebp - 0x18], 0x20f89b54
push 3
lea ecx, [ebp - 0x3d4]
call fcn.00413c51
mov dword [ebp - 0x13c], 0
push 1
lea ecx, [ebp - 0x5f8]
call fcn.00413c51
mov dword [ebp - 0x360], 0xae4674e6
mov dword [ebp - 0x10], 0
jmp 0x451562
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x451578
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x540], 0xc85f70ad
jmp 0x45155b
mov dword [ebp - 0x10], 0
jmp 0x451588
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x4515a4
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov dword [eax], 0x62ccd204
jmp 0x451581
mov dword [ebp - 0x10], 0
jmp 0x4515b4
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4515d0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5f8]
call fcn.00413d3f
mov dword [eax], 0xa0349b8a
jmp 0x4515ad
mov dword [ebp - 0x18], 0
jmp 0x4515e0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x4518a4
mov dword [ebp - 0x11c], 0xb8b78acc
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0xb4], 0xa5ea964a
mov eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x540]
cmp dword [ebp + eax*4 - 0x540], ecx
je 0x451697
cmp dword [ebp - 0x11c], 0
jne 0x45163c
cmp dword [ebp - 0x134], 0
jne 0x45163c
and dword [ebp - 0x330], 0
jmp 0x451646
mov dword [ebp - 0x330], 1
cmp dword [ebp - 0x330], 1
jne 0x45165b
mov dword [ebp - 0x1ac], 1
jmp 0x451662
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xb4], eax
je 0x451685
mov dword [ebp - 0x338], 1
jmp 0x45168c
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x338], eax
jge 0x4516a9
mov eax, 0x40c1
test eax, eax
jne 0x4516a9
and dword [ebp - 0x1b4], 0
jmp 0x4516b3
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x1b4]
add eax, 0xffff
jne 0x4516cf
cmp dword [ebp - 0x18], 0
jne 0x4516cf
and dword [ebp - 0x498], 0
jmp 0x4516d9
mov dword [ebp - 0x498], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0xb4], 0
je 0x451713
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x540], 0
je 0x451713
mov dword [ebp - 0x340], 1
jmp 0x45171a
and dword [ebp - 0x340], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x540]
cmp dword [ebp - 0x340], eax
jle 0x45173a
mov dword [ebp - 0x1bc], 1
jmp 0x451741
and dword [ebp - 0x1bc], 0
push 1
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
je 0x451797
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x540]
mov dword [ebp - 0x5cc], eax
push 0
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov eax, 0xacc167df
test eax, eax
je 0x451797
mov dword [ebp - 0x348], 1
jmp 0x45179e
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x348], eax
jge 0x4517b8
mov dword [ebp - 0x1c4], 1
jmp 0x4517bf
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 2
jle 0x4517d4
mov dword [ebp - 0x350], 1
jmp 0x4517db
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x350], eax
je 0x4517f5
mov dword [ebp - 0x1cc], 1
jmp 0x4517fc
and dword [ebp - 0x1cc], 0
push 1
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1cc]
sub ecx, dword [ebp - 0x11c]
cmp dword [eax], ecx
jl 0x451825
mov dword [ebp - 0x358], 1
jmp 0x45182c
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x358], eax
jg 0x45184a
xor eax, eax
je 0x45184a
mov dword [ebp - 0x1d4], 1
jmp 0x451851
and dword [ebp - 0x1d4], 0
push 0
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov esi, eax
push 2
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov ecx, dword [esi]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x1d4]
jle 0x451885
mov dword [ebp - 0x4f8], 1
jmp 0x45188c
and dword [ebp - 0x4f8], 0
push 1
lea ecx, [ebp - 0x3d4]
call fcn.00413d3f
mov dword [eax], 0xfffffff6
jmp 0x4515d9
mov eax, dword [ebp - 0x360]
dec eax
mov dword [ebp - 0x360], eax
lea ecx, [ebp - 0x5f8]
call fcn.00413d23
lea ecx, [ebp - 0x3d4]
call fcn.00413d23
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x464], eax
mov dword [ebp - 8], 0x664d
push 4
lea ecx, [ebp - 0x3e4]
call fcn.00413c51
mov dword [ebp - 0x4c], 0x276cc72b
mov dword [ebp - 0x4ac], 1
mov dword [ebp - 0x38], 0
jmp 0x451905
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x451921
push dword [ebp - 0x38]
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
mov dword [eax], 8
jmp 0x4518fe
mov dword [ebp - 0x38], 0
jmp 0x451931
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x451947
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x434], 0xffffffff
jmp 0x45192a
cmp dword [ebp - 8], 0
jne 0x451a55
cmp dword [ebp - 8], 0
jne 0x451968
xor eax, eax
inc eax
je 0x451968
mov dword [ebp - 0x1dc], 1
jmp 0x45196f
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1dc], eax
jne 0x451986
mov dword [ebp - 0x368], 1
jmp 0x45198d
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x368], eax
jl 0x4519a4
mov dword [ebp - 0x1e4], 1
jmp 0x4519ab
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jne 0x4519cb
cmp dword [ebp - 8], 0
je 0x4519cb
mov dword [ebp - 0x370], 1
jmp 0x4519d2
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x370]
jg 0x4519e9
mov dword [ebp - 0x500], 1
jmp 0x4519f0
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x608], eax
cmp dword [ebp - 8], 0
imul eax, dword [ebp - 8], 0xcb6d
cmp eax, dword [ebp - 8]
jge 0x451a27
mov dword [ebp - 0x124], 1
jmp 0x451a2e
and dword [ebp - 0x124], 0
push 2
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x124]
mov dword [eax], ecx
cmp dword [ebp - 0x124], 0
jne 0x451a55
and dword [ebp - 0x1ec], 0
jmp 0x451a5f
mov dword [ebp - 0x1ec], 1
cmp dword [ebp - 0x1ec], 0x54d8142
jne 0x451a77
mov dword [ebp - 0x378], 1
jmp 0x451a7e
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x378], eax
jge 0x451a95
mov dword [ebp - 0x1f4], 1
jmp 0x451a9c
and dword [ebp - 0x1f4], 0
imul eax, dword [ebp - 0x1f4], 0xebbf
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 3
jmp 0x451ab9
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x451d8e
mov dword [ebp - 0x144], 0xaa4f69a7
mov dword [ebp - 0x3b4], 6
mov dword [ebp - 0x43c], 4
mov dword [ebp - 0xf0], 0
jmp 0x451afa
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x451b16
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x600], 0x6aef
jmp 0x451aed
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 8], 0
jmp 0x451b33
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x451d89
mov dword [ebp - 0x12c], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
cmp dword [eax], 0xa2955e31
jne 0x451b69
mov dword [ebp - 0x380], 1
jmp 0x451b70
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
add eax, 3
cmp eax, 0xc0ba889b
jne 0x451b85
or eax, 0xffffffff
je 0x451b96
or eax, 0xffffffff
je 0x451b96
mov dword [ebp - 0x1fc], 1
jmp 0x451b9d
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
shl eax, 1
imul eax, eax, 0xffff
cmp eax, 0x1e73e4f9
jle 0x451bbe
mov dword [ebp - 0x388], 1
jmp 0x451bc5
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 2
jge 0x451bda
mov dword [ebp - 0x204], 1
jmp 0x451be1
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0x6a952366
jle 0x451bf9
mov dword [ebp - 0x390], 1
jmp 0x451c00
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x4c], 0xc3c7
jl 0x451c21
mov dword [ebp - 0x468], 1
jmp 0x451c28
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x4ac]
cmp eax, 0x8db2edfd
ja 0x451c5a
mov dword [ebp - 0x20c], 1
jmp 0x451c61
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x20c]
jne 0x451c7b
mov dword [ebp - 0x398], 1
jmp 0x451c82
and dword [ebp - 0x398], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x398]
jg 0x451ca6
mov dword [ebp - 0x214], 1
jmp 0x451cad
and dword [ebp - 0x214], 0
push 2
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [eax]
jle 0x451cd0
mov dword [ebp - 0x3ac], 1
jmp 0x451cd7
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
sub eax, 3
je 0x451ce9
cmp dword [ebp - 0x12c], 0
push 2
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
mov esi, eax
push 2
lea ecx, [ebp - 0x3e4]
call fcn.00413d3f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x451d27
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x600], 0
je 0x451d27
mov dword [ebp - 0x21c], 1
jmp 0x451d2e
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0xfffffffc
jl 0x451d4f
mov dword [ebp - 0x224], 1
jmp 0x451d56
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x43c], eax
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x451d84
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x451b2c
jmp 0x451ab2
lea ecx, [ebp - 0x3e4]
call fcn.00413d23
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0xbc], 0x57fd5464
mov dword [ebp - 0x598], 0xfffffffd
mov dword [ebp - 0x5a0], 0xfffffff6
mov dword [ebp - 0xbc], 0
jmp 0x451de2
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xfffffff3
jl 0x451e19
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x3bc]
dec eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x4d4], 0
je 0x451e17
jmp 0x451e19
jmp 0x451dd5
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0xf8], 0x48bbca63
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x451e50
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0xf8], 0xfffffff2
jmp 0x451e69
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 7
jne 0x451ed7
mov dword [ebp - 0x7c], 0x47dc4b4e
mov dword [ebp - 0x7c], 0
jmp 0x451e89
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x1c
jle 0x451eb3
mov byte [ebp - 0x60], 0
movzx eax, byte [ebp - 0x60]
test eax, eax
je 0x451eb1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
jmp 0x451e82
cmp dword [ebp - 0x7c], 0
jne 0x451ec5
mov dword [ebp - 0x3c4], 1
jmp 0x451ecc
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x7c], eax
jmp 0x451e5c
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x20], 0xbeaa
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x334], 0
push 3
lea ecx, [ebp - 0x3f4]
call fcn.00413c51
mov dword [ebp - 0xc4], 0
jmp 0x451f25
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x451f47
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
mov dword [eax], 0xc411
jmp 0x451f18
cmp dword [ebp - 0x20], 0
je 0x452490
mov dword [ebp - 4], 0xbbf9
mov dword [ebp - 0x54], 0xea0c8d46
mov dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 4], eax
jl 0x451f7d
mov dword [ebp - 0x238], 1
jmp 0x451f84
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x238]
jge 0x451f9b
mov dword [ebp - 0x234], 1
jmp 0x451fa2
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x234], eax
jge 0x451fb9
mov dword [ebp - 0x304], 1
jmp 0x451fc0
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x304]
test eax, eax
je 0x451fe0
cmp dword [ebp - 0x20], 0
je 0x451fe0
mov dword [ebp - 0x23c], 1
jmp 0x451fe7
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x452008
cmp dword [ebp - 4], 0
je 0x452008
mov dword [ebp - 0x36c], 1
jmp 0x45200f
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0xfff6
jne 0x452027
mov dword [ebp - 0x244], 1
jmp 0x45202e
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x244]
jge 0x452045
mov dword [ebp - 0x30c], 1
jmp 0x45204c
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x30c], eax
jge 0x452063
mov dword [ebp - 0x24c], 1
jmp 0x45206a
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x24c], eax
jle 0x452081
mov dword [ebp - 0x3d8], 1
jmp 0x452088
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jge 0x4520a3
mov dword [ebp - 0x254], 1
jmp 0x4520aa
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x254], eax
jne 0x4520c1
mov dword [ebp - 0x314], 1
jmp 0x4520c8
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x314], eax
jle 0x4520df
mov dword [ebp - 0x25c], 1
jmp 0x4520e6
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
add eax, 0x16907062
cmp dword [ebp - 0x20], eax
jge 0x452102
mov dword [ebp - 0x374], 1
jmp 0x452109
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x45223d
mov dword [ebp - 0x444], 2
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 4], 1
je 0x452144
mov dword [ebp - 0x264], 1
jmp 0x45214b
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x264]
test eax, eax
jne 0x452166
xor eax, eax
jne 0x452166
and dword [ebp - 0x31c], 0
jmp 0x452170
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x31c], eax
jge 0x452187
mov dword [ebp - 0x26c], 1
jmp 0x45218e
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0x2b357f03
jg 0x4521a6
mov dword [ebp - 0x3b0], 1
jmp 0x4521ad
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3b0], eax
jg 0x4521c4
mov dword [ebp - 0x274], 1
jmp 0x4521cb
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x334]
jne 0x4521e9
mov dword [ebp - 0x324], 1
jmp 0x4521f0
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xaad9
jge 0x452208
mov dword [ebp - 0x27c], 1
jmp 0x45220f
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
sub eax, 0x4087
jne 0x452228
mov dword [ebp - 0x37c], 1
jmp 0x45222f
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
jmp 0x452265
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x45225f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 2
jmp 0x452275
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x45248e
mov dword [ebp - 0x100], 0
jmp 0x452298
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x4522b4
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x530], 0x30f13e0c
jmp 0x45228b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x54], 0
jne 0x4522d1
push dword [ebp - 4]
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x590], eax
push 3
pop eax
test eax, eax
je 0x4522e5
cmp dword [ebp - 0x1c], 0
push 1
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
mov ecx, dword [ebp - 4]
cmp dword [eax], ecx
jl 0x452305
mov dword [ebp - 0x284], 1
jmp 0x45230c
and dword [ebp - 0x284], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x284]
mov dword [ebp + eax - 0x530], ecx
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x530]
push dword [ebp - 4]
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
add esi, dword [eax]
cmp esi, dword [ebp - 4]
jge 0x45234d
mov dword [ebp - 0x32c], 1
jmp 0x452354
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x32c]
jne 0x45237b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x530], 0
je 0x45237b
mov dword [ebp - 0x4bc], 1
jmp 0x452382
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x5c8], eax
push dword [ebp - 4]
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x530]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 8
jg 0x4523c4
mov dword [ebp - 0x28c], 1
jmp 0x4523cb
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 4]
jl 0x4523eb
mov dword [ebp - 0x3c8], 1
jmp 0x4523f2
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp - 0x1c]
imul esi, dword [ebp - 4]
push dword [ebp - 4]
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
cmp dword [eax], esi
je 0x452420
mov dword [ebp - 0x294], 1
jmp 0x452427
and dword [ebp - 0x294], 0
push 1
lea ecx, [ebp - 0x3f4]
call fcn.00413d3f
mov ecx, dword [ebp - 0x294]
cmp ecx, dword [eax]
jg 0x45244a
mov dword [ebp - 0x44c], 1
jmp 0x452451
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x5d0], eax
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x452473
cmp dword [ebp - 0x20], 0
jne 0x452473
and dword [ebp - 0x29c], 0
jmp 0x45247d
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x4dc], eax
jmp 0x45226e
jmp 0x452496
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x3f4]
call fcn.00413d23
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x42c], eax
push 2
lea ecx, [ebp - 0x424]
call fcn.00413c51
mov dword [ebp - 0x24], 0
jmp 0x4524e2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x4524fe
push dword [ebp - 0x24]
lea ecx, [ebp - 0x424]
call fcn.00413d3f
mov dword [eax], 0x1713
jmp 0x4524db
mov dword [ebp - 0x24], 0
jmp 0x45250e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x452521
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x50], 3
jmp 0x452507
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x50], 1
jmp 0x452546
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
jl 0x4526d5
mov dword [ebp - 0x6c], 0x3880e033
mov dword [ebp - 0xcc], 0xfffffff6
mov dword [ebp - 0x4e4], 0xed562b99
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 6
jle 0x45258b
mov dword [ebp - 0x384], 1
jmp 0x452592
and dword [ebp - 0x384], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x50]
lea ecx, [ebp - 0x424]
call fcn.00413d3f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x384]
je 0x4525bd
mov dword [ebp - 0x14c], 1
jmp 0x4525c4
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 4
jle 0x4525d9
mov dword [ebp - 0x33c], 1
jmp 0x4525e0
and dword [ebp - 0x33c], 0
push 1
lea ecx, [ebp - 0x424]
call fcn.00413d3f
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x50]
lea ecx, [ebp - 0x424]
call fcn.00413d3f
mov ecx, dword [ebp - 0x33c]
cmp ecx, dword [eax]
jle 0x452618
mov dword [ebp - 0x2ac], 1
jmp 0x45261f
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x2ac], eax
jg 0x452636
mov dword [ebp - 0x454], 1
jmp 0x45263d
and dword [ebp - 0x454], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0xcc], 0xb0bf2465
mov dword [ebp - 0x6c], 0
jmp 0x452667
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jg 0x4526d0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x424]
call fcn.00413d3f
cmp dword [ebp - 0xcc], 2
jne 0x452690
mov dword [ebp - 0x3b8], 1
jmp 0x452697
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x411a
jne 0x4526bb
mov dword [ebp - 0x2b4], 1
jmp 0x4526c2
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x4e4], eax
jmp 0x452660
jmp 0x452531
lea ecx, [ebp - 0x424]
call fcn.00413d23
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0xc], 0x862fd41e
mov dword [ebp - 0x2d4], 0xddbf4df7
mov dword [ebp - 0x2cc], 0xf402
mov dword [ebp - 0x2dc], 0xbb7a2e25
mov dword [ebp - 0xc], 0
jmp 0x45271e
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x17
je 0x4527da
mov dword [ebp - 0x70], 0xffff
mov dword [ebp - 0x45c], 0xc3d6c1df
cmp dword [ebp - 0x70], 0
je 0x452747
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
jl 0x452756
cmp dword [ebp - 0x70], 0
jne 0x452756
and dword [ebp - 0x344], 0
jmp 0x452760
mov dword [ebp - 0x344], 1
cmp dword [ebp - 0x344], 0x99cd
je 0x452778
mov dword [ebp - 0x2bc], 1
jmp 0x45277f
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x70]
jne 0x452799
mov dword [ebp - 0x38c], 1
jmp 0x4527a0
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x38c]
je 0x4527b7
mov dword [ebp - 0x2c4], 1
jmp 0x4527be
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x70], 0
je 0x4527d5
jmp 0x452717
jmp 0x452717
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
jg 0x4527f1
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
cmp dword [ebp - 0x2cc], 0x64548797
je 0x452809
mov dword [ebp - 0x34c], 1
jmp 0x452810
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
add eax, 0x2ff5ff74
jne 0x45282c
cmp dword [ebp - 0xc], 0
jne 0x45282c
and dword [ebp - 0x4c8], 0
jmp 0x452836
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0xc], eax
jg 0x452859
mov dword [ebp - 0x3e8], 1
jmp 0x452860
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x3e8], eax
je 0x452878
xor eax, eax
jne 0x452878
and dword [ebp - 0x354], 0
jmp 0x452882
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x2d4], 0xbb10
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x354]
jge 0x4528a6
mov dword [ebp - 0x394], 1
jmp 0x4528ad
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x394], eax
jne 0x4528c7
mov dword [ebp - 0x2e4], 1
jmp 0x4528ce
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x3c0], 0xffffffff
mov dword [ebp - 0x4d0], 0x6a56c37f
mov dword [ebp - 0x35c], 1
mov dword [ebp - 0x88], 0x9d3388a0
mov dword [ebp - 0xd4], 0xfffffffc
mov dword [ebp - 0x230], 0xc88fed6c
mov dword [ebp - 0x240], 0xfffffff6
push 4
lea ecx, [ebp - 0x57c]
call fcn.00413c51
mov dword [ebp - 0x108], 0
jmp 0x452971
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 4
jge 0x452993
push dword [ebp - 0x108]
lea ecx, [ebp - 0x57c]
call fcn.00413d3f
mov dword [eax], 0xfffffffb
jmp 0x452964
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
sub eax, dword [ebp - 0x84]
cmp dword [ebp - 0x3c0], eax
jge 0x4529bf
mov dword [ebp - 0x2ec], 1
jmp 0x4529c6
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x2ec], eax
jg 0x4529e0
mov dword [ebp - 0x2f4], 1
jmp 0x4529e7
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x2f4], eax
jge 0x452a01
mov dword [ebp - 0x364], 1
jmp 0x452a08
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x88]
cmp eax, 0x7e71f09a
jg 0x452a27
mov dword [ebp - 0x474], 1
jmp 0x452a2e
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x618], eax
imul eax, dword [ebp - 0x84], 0xfffffff7
test eax, eax
je 0x452a58
cmp dword [ebp - 0x84], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x88], eax
jle 0x452a72
mov dword [ebp - 0x2fc], 1
jmp 0x452a79
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x2fc]
cmp eax, 0x85ba
jl 0x452a98
mov dword [ebp - 0x22c], 1
jmp 0x452a9f
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x22c]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x230], eax
jge 0x452acb
mov dword [ebp - 0x228], 1
jmp 0x452ad2
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x84], eax
jne 0x452af8
mov dword [ebp - 0x248], 1
jmp 0x452aff
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x248], eax
jle 0x452b19
mov dword [ebp - 0x250], 1
jmp 0x452b20
and dword [ebp - 0x250], 0
push 1
lea ecx, [ebp - 0x57c]
call fcn.00413d3f
mov ecx, dword [ebp - 0x250]
mov dword [eax], ecx
lea ecx, [ebp - 0x57c]
call fcn.00413d23
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x28], 0x37d45db3
mov dword [ebp - 0x278], 0xa11600d5
push 3
lea ecx, [ebp - 0x518]
call fcn.00413c51
mov dword [ebp - 0x130], 0xa12afd77
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x140], 0xbd791f9e
mov dword [ebp - 0x620], 0xfffffffa
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x168], 0xb93b5720
mov dword [ebp - 0x40], 0
jmp 0x452bc2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x452bde
push dword [ebp - 0x40]
lea ecx, [ebp - 0x518]
call fcn.00413d3f
mov dword [eax], 1
jmp 0x452bbb
mov dword [ebp - 0x40], 0
jmp 0x452bee
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x452c04
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4f4], 0xffffffff
jmp 0x452be7
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x28], eax
jne 0x452c1b
mov dword [ebp - 0x258], 1
jmp 0x452c22
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xfffffffd
jne 0x452c37
mov dword [ebp - 0x260], 1
jmp 0x452c3e
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x260], eax
jle 0x452c55
mov dword [ebp - 0x268], 1
jmp 0x452c5c
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x268]
test eax, eax
jbe 0x452c76
mov dword [ebp - 0x270], 1
jmp 0x452c7d
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0x2db8e964
jne 0x452c95
mov dword [ebp - 0x110], 1
jmp 0x452c9c
and dword [ebp - 0x110], 0
push 2
lea ecx, [ebp - 0x518]
call fcn.00413d3f
mov ecx, dword [ebp - 0x110]
mov dword [eax], ecx
cmp dword [ebp - 0x110], 0
jne 0x452ccc
cmp dword [ebp - 0x278], 0
jne 0x452ccc
and dword [ebp - 0x280], 0
jmp 0x452cd6
mov dword [ebp - 0x280], 1
mov eax, dword [ebp - 0x280]
add eax, 7
je 0x452cf6
mov eax, 0x13f5
test eax, eax
je 0x452cf6
mov dword [ebp - 0x288], 1
jmp 0x452cfd
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
neg eax
cmp eax, dword [ebp - 0x28]
jle 0x452d22
mov dword [ebp - 0x290], 1
jmp 0x452d29
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x290], eax
jle 0x452d49
mov eax, 0x3acb6d6
test eax, eax
je 0x452d49
mov dword [ebp - 0x298], 1
jmp 0x452d50
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0x99da9727
jne 0x452d68
mov dword [ebp - 0x118], 1
jmp 0x452d6f
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x4f4], ecx
cmp dword [ebp - 0x118], 0
jne 0x452d9a
cmp dword [ebp - 0x28], 0
jne 0x452d9a
and dword [ebp - 0x2a0], 0
jmp 0x452da4
mov dword [ebp - 0x2a0], 1
cmp dword [ebp - 0x2a0], 0xffffffff
jle 0x452db9
mov dword [ebp - 0x2a8], 1
jmp 0x452dc0
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2a8]
jne 0x452dd7
mov dword [ebp - 0x2b0], 1
jmp 0x452dde
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2b0], eax
jl 0x452df5
mov dword [ebp - 0x2b8], 1
jmp 0x452dfc
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2b8], eax
jg 0x452e13
mov dword [ebp - 0x2c0], 1
jmp 0x452e1a
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x140], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4f4], 0
je 0x453094
mov dword [ebp - 0x120], 0xf21ddbc7
push 4
lea ecx, [ebp - 0x410]
call fcn.00413c51
mov dword [ebp - 0x2c], 0
jmp 0x452e6d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x452e89
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x410]
call fcn.00413d3f
mov dword [eax], 0xc927db40
jmp 0x452e66
mov dword [ebp - 0x2c], 0
jmp 0x452e99
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x452eaf
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x634], 0xfffd
jmp 0x452e92
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x624], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4f4], 0xc256
jge 0x452eda
mov dword [ebp - 0x2c8], 1
jmp 0x452ee1
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4f4]
cmp eax, dword [ebp - 0x2c8]
jl 0x452f02
mov dword [ebp - 0x2d0], 1
jmp 0x452f09
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0x120]
push 1
lea ecx, [ebp - 0x410]
call fcn.00413d3f
imul esi, dword [eax]
cmp esi, dword [ebp - 0x140]
jl 0x452f3f
mov dword [ebp - 0x2d8], 1
jmp 0x452f46
and dword [ebp - 0x2d8], 0
push 1
lea ecx, [ebp - 0x410]
call fcn.00413d3f
mov ecx, dword [ebp - 0x2d8]
cmp ecx, dword [eax]
jne 0x452f69
mov dword [ebp - 0x150], 1
jmp 0x452f70
and dword [ebp - 0x150], 0
push 3
lea ecx, [ebp - 0x410]
call fcn.00413d3f
mov ecx, dword [ebp - 0x150]
cmp ecx, dword [eax]
je 0x452f93
mov dword [ebp - 0x128], 1
jmp 0x452f9a
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x634], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4f4]
cmp dword [ebp - 0x128], eax
jle 0x452fcc
mov dword [ebp - 0x158], 1
jmp 0x452fd3
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x158]
sub ecx, dword [ebp + eax - 0x4f4]
mov dword [ebp - 0x160], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x4f4], ecx
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x160], eax
jle 0x453019
mov dword [ebp - 0x4d8], 1
jmp 0x453020
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x5dc], eax
push 2
lea ecx, [ebp - 0x518]
call fcn.00413d3f
mov esi, dword [ebp - 0x130]
push 0
lea ecx, [ebp - 0x410]
call fcn.00413d3f
cmp esi, dword [eax]
je 0x45305c
mov dword [ebp - 0x138], 1
jmp 0x453063
and dword [ebp - 0x138], 0
push 1
lea ecx, [ebp - 0x410]
call fcn.00413d3f
mov ecx, dword [ebp - 0x138]
mov dword [eax], ecx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x140], eax
lea ecx, [ebp - 0x410]
call fcn.00413d23
jmp 0x45311e
mov dword [ebp - 0x59c], 0xd949
mov dword [ebp - 0x60c], 0x9f010208
mov dword [ebp - 0x5a4], 0x9523668f
mov dword [ebp - 0x5e4], 0xfc3c737e
mov dword [ebp - 0xdc], 0
jmp 0x4530d5
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x4530f1
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x5ac], 0x81b93497
jmp 0x4530c8
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x45311e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
lea ecx, [ebp - 0x518]
call fcn.00413d23
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x78], 0xb5cabfc3
mov dword [ebp - 0x3c], 0
jmp 0x453153
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffea
jle 0x453184
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x453182
push 0
push 0x1015
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x45314c
mov dword [ebp - 0x3c], 0
jmp 0x453194
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jl 0x453329
mov dword [ebp - 0xe4], 0xffffffff
push 2
lea ecx, [ebp - 0x558]
call fcn.00413c51
mov dword [ebp - 0xf4], 0
jmp 0x4531ce
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x4531ed
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x558]
call fcn.00413d3f
or dword [eax], 0xffffffff
jmp 0x4531c1
mov dword [ebp - 0xe4], 0
jmp 0x453206
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffff6
jge 0x453319
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x78], eax
mov esi, dword [ebp - 0x78]
push 0
lea ecx, [ebp - 0x558]
call fcn.00413d3f
mov dword [eax], esi
mov dword [ebp - 0x78], 0
jmp 0x45323b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jg 0x453314
mov dword [ebp - 0x104], 0x66a92721
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x453271
push 0
push 0
push 0x1a78
push 0x2127
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0x104], 1
jmp 0x45328a
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x45330f
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x9c], 1
jmp 0x4532b6
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x45330a
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xd0], 1
jmp 0x4532e2
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x453308
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x453306
push 0xeb4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x4532d5
jmp 0x4532a9
jmp 0x45327d
jmp 0x453234
jmp 0x4531f9
lea ecx, [ebp - 0x558]
call fcn.00413d23
jmp 0x45318d
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x404], 9
mov dword [ebp - 0x400], 9
mov dword [ebp - 0x3fc], 9
mov dword [ebp - 0x3f8], 9
mov dword [ebp - 0xd8], 0
jmp 0x453376
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x453392
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x418], 0x62fd
jmp 0x453369
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x404], 1
jmp 0x4533c0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x404]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x404], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x404], 0
jl 0x453660
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x3a4], 0xffffffff
mov dword [ebp - 0x3a0], 0xffffffff
mov dword [ebp - 0x39c], 0xffffffff
mov dword [ebp - 0x48c], 0x4d07ddbf
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x3a8], 1
jmp 0x453434
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a8]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3a8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3a8], 0
jl 0x45365b
push 4
lea ecx, [ebp - 0x54c]
call fcn.00413c51
push 1
lea ecx, [ebp - 0x570]
call fcn.00413c51
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x30], 0
jmp 0x45347c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x453498
push dword [ebp - 0x30]
lea ecx, [ebp - 0x54c]
call fcn.00413d3f
mov dword [eax], 1
jmp 0x453475
mov dword [ebp - 0x30], 0
jmp 0x4534a8
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x4534c4
push dword [ebp - 0x30]
lea ecx, [ebp - 0x570]
call fcn.00413d3f
mov dword [eax], 0xbbd18838
jmp 0x4534a1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a8]
cmp dword [ebp + eax*4 - 0x418], 0
je 0x453587
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a8]
mov eax, dword [ebp + eax*4 - 0x418]
mov dword [ebp - 0x170], eax
push 0
lea ecx, [ebp - 0x570]
call fcn.00413d3f
mov ecx, dword [ebp - 0x170]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x404]
cmp eax, dword [ebp - 0x170]
jl 0x453534
xor eax, eax
inc eax
je 0x453534
mov dword [ebp - 0x178], 1
jmp 0x45353b
and dword [ebp - 0x178], 0
push 1
lea ecx, [ebp - 0x54c]
call fcn.00413d3f
mov dword [eax], 0xbfb66feb
cmp dword [ebp - 0x178], 0xbfb66feb
jg 0x453566
mov dword [ebp - 0x180], 1
jmp 0x45356d
and dword [ebp - 0x180], 0
imul eax, dword [ebp - 0x180], 0xce3d
test eax, eax
je 0x453587
mov dword [ebp - 0x188], 1
jmp 0x45358e
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a8]
mov eax, dword [ebp + eax*4 - 0x418]
cmp dword [ebp - 0x188], eax
jne 0x4535b6
mov dword [ebp - 0x190], 1
jmp 0x4535bd
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x404]
mov eax, dword [ebp + eax*4 - 0x418]
sub eax, dword [ebp - 0x190]
jne 0x4535e9
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3a8], 0
je 0x453605
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x404], 0
je 0x453605
mov dword [ebp - 0x198], 1
jmp 0x45360c
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0x3a4c6382
jne 0x45362d
cmp dword [ebp - 0x48c], 0
je 0x45362d
mov dword [ebp - 0x1a0], 1
jmp 0x453634
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x4c4], eax
lea ecx, [ebp - 0x570]
call fcn.00413d23
lea ecx, [ebp - 0x54c]
call fcn.00413d23
jmp 0x453419
jmp 0x4533a5
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x80], 0xb5cabfc3
mov dword [ebp - 0x34], 0
jmp 0x45368a
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffea
jle 0x4536bb
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x4536b9
push 0
push 0x1015
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x453683
mov dword [ebp - 0x34], 0
jmp 0x4536cb
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jl 0x453860
mov dword [ebp - 0xa8], 0xffffffff
push 2
lea ecx, [ebp - 0x564]
call fcn.00413c51
mov dword [ebp - 0xa0], 0
jmp 0x453705
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x453724
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x564]
call fcn.00413d3f
or dword [eax], 0xffffffff
jmp 0x4536f8
mov dword [ebp - 0xa8], 0
jmp 0x45373d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffff6
jge 0x453850
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x80], eax
mov esi, dword [ebp - 0x80]
push 0
lea ecx, [ebp - 0x564]
call fcn.00413d3f
mov dword [eax], esi
mov dword [ebp - 0x80], 0
jmp 0x453772
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x45384b
mov dword [ebp - 0xb0], 0x66a92721
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x4537a8
push 0
push 0
push 0x1a78
push 0x2127
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0xb0], 1
jmp 0x4537c1
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x453846
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb8], 1
jmp 0x4537ed
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x453841
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xc0], 1
jmp 0x453819
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x45383f
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x45383d
push 0xeb4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x45380c
jmp 0x4537e0
jmp 0x4537b4
jmp 0x45376b
jmp 0x453730
lea ecx, [ebp - 0x564]
call fcn.00413d23
jmp 0x4536c4
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x220], eax
push 3
lea ecx, [ebp - 0x4b8]
call fcn.00413c51
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x1b8], 0x6753f3ac
mov dword [ebp - 0x58c], 0x64ce34aa
mov dword [ebp - 0x588], 0x64ce34aa
mov dword [ebp - 0x584], 0x64ce34aa
mov dword [ebp - 0x580], 0x64ce34aa
mov dword [ebp - 0xc8], 0
jmp 0x4538cb
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x4538ed
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x4b8]
call fcn.00413d3f
mov dword [eax], 0xb9b55bb2
jmp 0x4538be
mov dword [ebp - 0x14], 2
jmp 0x4538fd
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x453aa1
mov dword [ebp - 0x98], 0xf0bc5021
mov dword [ebp - 0x1f0], 9
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x14], eax
jge 0x45393e
mov dword [ebp - 0x49c], 1
jmp 0x453945
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jg 0x453965
mov dword [ebp - 0x1a8], 1
jmp 0x45396c
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0
jle 0x453981
mov dword [ebp - 0x1b0], 1
jmp 0x453988
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x4539b9
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x4539b9
and dword [ebp - 0x1c0], 0
jmp 0x4539c3
mov dword [ebp - 0x1c0], 1
cmp dword [ebp - 0x1c0], 0
jle 0x4539d8
mov dword [ebp - 0x1c8], 1
jmp 0x4539df
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0xb50f6b34
jae 0x4539f7
mov dword [ebp - 0x1d8], 1
jmp 0x4539fe
and dword [ebp - 0x1d8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4b8]
call fcn.00413d3f
mov dword [ebp - 0x1d0], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4b8]
call fcn.00413d3f
mov ecx, dword [ebp - 0x1d0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1d8]
jl 0x453a46
mov dword [ebp - 0x1e0], 1
jmp 0x453a4d
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x1e0], eax
jl 0x453a67
mov dword [ebp - 0x1e8], 1
jmp 0x453a6e
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58c]
add eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1f0], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4b8]
call fcn.00413d3f
cmp dword [eax], 0
je 0x453a9c
jmp 0x453aa1
jmp 0x4538f6
lea ecx, [ebp - 0x4b8]
call fcn.00413d23
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x438]
mov dword [eax], 1
or eax, 0xffffffff
inc eax
mov ecx, dword [ebp - 0x1f8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1f8]
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
push 1
mov ecx, dword [ebp - 0x440]
call fcn.00413d3f
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
imul eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x208]
mov dword [ecx], eax
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x208]
mov ecx, dword [ecx]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
neg eax
cmp eax, ecx
jle 0x453b40
mov dword [ebp - 0x210], 1
jmp 0x453b47
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
cmp dword [ebp - 0x210], eax
jge 0x453b63
mov dword [ebp - 0x218], 1
jmp 0x453b6a
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
cmp dword [ebp - 0x218], eax
je 0x453b86
mov dword [ebp - 0x450], 1
jmp 0x453b8d
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x460]
mov ecx, dword [ecx]
mov dword [eax], ecx
pop esi
mov esp, ebp
pop ebp
ret