Function at 0x422980
Capabilities:
Check for time delay via gettickcount
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a8c38
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
push esi
push edi
mov eax, dword [0x4c97a0]
xor eax, esp
push eax
lea eax, [esp + 0x68]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x54]
push eax
push ecx
mov dword [ebx + 0xca8], esi
call dword [sym.imp.USER32.dll_GetClientRect]
xor edi, edi
cmp esi, 0xb
ja case.default.0x4229cd
jmp dword [esi*4 + 0x42553c]
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x422a00
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422a00
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x422a2c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422a2c
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x422a58
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422a58
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
mov ecx, eax
and ecx, 1
je 0x422a84
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422a84
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
je 0x422ab0
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422ab0
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2780
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x422ae7
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x422ae7
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea esi, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
jne 0x422b13
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x422b13
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, 0x9d82
call fcn.0046c8c0
mov dword [esp + 0x70], 0
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0xc]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
lea esi, [esp + 0x10]
call fcn.00451ef0
lea edi, [ebx + 0x1b0]
mov dword [esp + 0x70], 1
call fcn.0046aff0
mov ecx, esi
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
test al, 1
jne 0x422b9a
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x422b9a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x422bcc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422bcc
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbb8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [ebx + 0xb54]
push 5
push ecx
call esi
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
test al, 1
je 0x422c13
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422c13
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x422c3e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422c3e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea edx, [ebx + 0x414]
test al, 1
je 0x422c69
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422c69
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x422c94
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422c94
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x422cbf
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422cbf
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x422cea
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422cea
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x422d15
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422d15
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x422d40
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422d40
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x422d6b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422d6b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x548]
lea edx, [ebx + 0x544]
test al, 1
je 0x422d96
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422d96
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [ebx + 0x590]
mov eax, dword [edx + 4]
test al, 1
je 0x422dbe
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422dbe
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7a8]
lea edx, [ebx + 0x7a4]
test al, 1
je 0x422de9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422de9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x710]
lea edx, [ebx + 0x70c]
test al, 1
je 0x422e14
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422e14
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x75c]
lea edx, [ebx + 0x758]
test al, 1
je 0x422e3f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422e3f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x678]
lea edx, [ebx + 0x674]
test al, 1
je 0x422e6a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422e6a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6c4]
lea edx, [ebx + 0x6c0]
test al, 1
je 0x422e95
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x422e95
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [ebx + 0x628]
mov eax, dword [edx + 4]
test al, 1
jne 0x422ebd
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x422ebd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [0x4cc778], 0
je case.default.0x4229cd
push str.popform_msb
push str.action_s
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
push 0x4cd998
call fcn.0047e9e0
add esp, 0x14
mov dword [0x4cc778], 0
jmp case.default.0x4229cd
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x422f23
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422f23
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x422f4f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422f4f
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x422f7b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422f7b
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
je 0x422fa7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x422fa7
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2780
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
je 0x422fde
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
cmp ecx, edi
je 0x422fde
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea esi, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
jne 0x42300a
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x42300a
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
lea ecx, [esp + 0x14]
push ecx
mov ecx, 0x9d6b
call fcn.0046c8c0
mov dword [esp + 0x70], 2
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x14]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
lea esi, [esp + 0x18]
call fcn.00451ef0
lea edi, [ebx + 0x1b0]
mov dword [esp + 0x70], 3
call fcn.0046aff0
mov ecx, esi
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
test al, 1
jne 0x423091
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x423091
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x4230c3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4230c3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x4230ee
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4230ee
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x423119
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423119
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbb8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [ebx + 0xb54]
push 5
push ecx
call esi
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
test al, 1
je 0x423160
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423160
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x42318b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42318b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x4231b6
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4231b6
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x4231e1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4231e1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x42320c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42320c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x423237
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423237
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x594]
lea edx, [ebx + 0x590]
test al, 1
je 0x423262
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423262
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x548]
lea edx, [ebx + 0x544]
test al, 1
je 0x42328d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42328d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x62c]
lea edx, [ebx + 0x628]
test al, 1
je 0x4232b8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4232b8
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7a8]
lea edx, [ebx + 0x7a4]
test al, 1
je 0x4232e3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4232e3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x710]
lea edx, [ebx + 0x70c]
test al, 1
je 0x42330e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42330e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x75c]
lea edx, [ebx + 0x758]
test al, 1
je 0x423339
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423339
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x678]
lea edx, [ebx + 0x674]
test al, 1
je 0x423364
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423364
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6c4]
lea edx, [ebx + 0x6c0]
test al, 1
je 0x42338f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42338f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
test al, 1
jne 0x4233ba
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x4233ba
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea esi, [ebx + 0x414]
mov ecx, eax
shr ecx, 2
not ecx
test cl, 1
je 0x4233ed
or eax, 4
mov ecx, dword [esi + 0x1c]
mov dword [esi + 4], eax
test ecx, ecx
je 0x4233ed
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 0
push 0
push esi
call eax
mov eax, dword [esi + 4]
test al, 1
jne 0x422ebd
or eax, 1
mov dword [esi + 4], eax
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x422ebd
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
jmp 0x422ebd
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x423448
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423448
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x423474
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423474
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x4234a0
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4234a0
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
mov ecx, eax
and ecx, 1
je 0x4234cc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4234cc
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
je 0x4234f8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4234f8
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2780
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x42352f
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x42352f
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea esi, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
jne 0x42355b
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x42355b
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, 0x9d85
call fcn.0046c8c0
mov dword [esp + 0x70], 4
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x1c]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
lea esi, [esp + 0x20]
call fcn.00451ef0
lea edi, [ebx + 0x1b0]
mov dword [esp + 0x70], 5
call fcn.0046aff0
mov ecx, esi
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
test al, 1
jne 0x4235e2
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x4235e2
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x423614
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423614
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x42363f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42363f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbb8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [ebx + 0xb54]
push 5
push ecx
call esi
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x423686
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423686
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
test al, 1
je 0x4236b1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4236b1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x4236dc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4236dc
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea edx, [ebx + 0x414]
test al, 1
je 0x423707
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423707
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x423732
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423732
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x42375d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42375d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x423788
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423788
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x4237b3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4237b3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x594]
lea edx, [ebx + 0x590]
test al, 1
je 0x4237de
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4237de
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [ebx + 0x544]
jmp 0x422d9c
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x423815
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423815
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x423841
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423841
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x42386d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x42386d
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
mov ecx, eax
and ecx, 1
je 0x423899
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423899
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
jne 0x4238c5
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4238c5
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2748
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x4238fc
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x4238fc
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea esi, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
jne 0x423928
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x423928
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x9d5b
call fcn.0046c8c0
mov dword [esp + 0x70], 6
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
lea esi, [esp + 0x28]
call fcn.00451ef0
lea edi, [ebx + 0x1b0]
mov dword [esp + 0x70], 7
call fcn.0046aff0
mov ecx, esi
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
test al, 1
jne 0x4239af
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x4239af
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x4239e1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4239e1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x423a0c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423a0c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x423a37
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423a37
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbb8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [ebx + 0xb54]
push 5
push ecx
call esi
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
test al, 1
je 0x423a7e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423a7e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x423aa9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423aa9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea edx, [ebx + 0x414]
test al, 1
je 0x423ad4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423ad4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x423aff
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423aff
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x423b2a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423b2a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x423b55
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423b55
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x423b80
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423b80
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x548]
lea edx, [ebx + 0x544]
test al, 1
je 0x423bab
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423bab
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x62c]
lea edx, [ebx + 0x628]
test al, 1
je 0x423bd6
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423bd6
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7a8]
lea edx, [ebx + 0x7a4]
test al, 1
je 0x423c01
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423c01
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x710]
lea edx, [ebx + 0x70c]
test al, 1
je 0x423c2c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423c2c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x75c]
lea edx, [ebx + 0x758]
test al, 1
je 0x423c57
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423c57
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x678]
lea edx, [ebx + 0x674]
test al, 1
je 0x423c82
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423c82
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6c4]
lea edx, [ebx + 0x6c0]
test al, 1
je 0x423cad
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x423cad
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [ebx + 0x590]
jmp 0x422e9b
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
mov ecx, eax
and ecx, 1
jne 0x423ce4
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423ce4
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x423d17
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423d17
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x423d43
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423d43
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x423d6f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423d6f
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
mov ecx, eax
and ecx, 1
je 0x423d9b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423d9b
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
jne 0x423dc7
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423dc7
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d26f4
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x423dfe
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x423dfe
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea esi, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
jne 0x423e2a
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x423e2a
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
lea ecx, [esp + 0x2c]
push ecx
mov ecx, 0x9d77
call fcn.0046c8c0
mov dword [esp + 0x70], 8
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x423e84
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423e84
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x423ead
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423ead
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb54]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push edi
push eax
call esi
mov ecx, dword [ebx + 0xbb8]
push 1
push ecx
call esi
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
test al, 1
je 0x423ef1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423ef1
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x423f1a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423f1a
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea edx, [ebx + 0x414]
test al, 1
je 0x423f43
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423f43
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x423f6c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423f6c
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x423f95
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423f95
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x423fbe
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423fbe
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x423fe7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x423fe7
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x424010
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424010
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x548]
lea edx, [ebx + 0x544]
test al, 1
je 0x424039
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424039
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x62c]
lea edx, [ebx + 0x628]
test al, 1
je 0x424062
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424062
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7a8]
lea edx, [ebx + 0x7a4]
test al, 1
je 0x42408b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x42408b
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x710]
lea edx, [ebx + 0x70c]
test al, 1
je 0x4240b4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4240b4
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x75c]
lea edx, [ebx + 0x758]
test al, 1
je 0x4240dd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4240dd
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x678]
lea edx, [ebx + 0x674]
test al, 1
je 0x424106
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424106
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6c4]
lea edx, [ebx + 0x6c0]
test al, 1
je 0x42412f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x42412f
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x594]
lea edx, [ebx + 0x590]
test al, 1
jne case.default.0x4229cd
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, edi
je case.default.0x4229cd
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
jmp case.default.0x4229cd
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x424191
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424191
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x4241bd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4241bd
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x4241e9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4241e9
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
mov ecx, eax
and ecx, 1
je 0x424215
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424215
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
jne 0x424241
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424241
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2748
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
je 0x424278
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
cmp ecx, edi
je 0x424278
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea edx, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
je 0x4242a4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4242a4
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [esp + 0x30]
call fcn.00451e30
lea edi, [ebx + 0x1b0]
mov dword [esp + 0x70], 9
call fcn.0046aff0
mov ecx, esi
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
test al, 1
jne 0x4242fa
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x4242fa
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x42432c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42432c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x424357
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424357
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x424382
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424382
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbb8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [ebx + 0xb54]
push 5
push ecx
call esi
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x4243c9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4243c9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x4243f4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4243f4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x42441f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42441f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x42444a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42444a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x548]
lea edx, [ebx + 0x544]
test al, 1
je 0x424475
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424475
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x62c]
lea edx, [ebx + 0x628]
test al, 1
je 0x4244a0
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4244a0
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7a8]
lea edx, [ebx + 0x7a4]
test al, 1
je 0x4244cb
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4244cb
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x710]
lea edx, [ebx + 0x70c]
test al, 1
je 0x4244f6
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4244f6
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x75c]
lea edx, [ebx + 0x758]
test al, 1
je 0x424521
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424521
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x678]
lea edx, [ebx + 0x674]
test al, 1
je 0x42454c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42454c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6c4]
lea edx, [ebx + 0x6c0]
test al, 1
je 0x424577
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424577
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x4245a2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4245a2
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
test al, 1
je 0x4245cd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4245cd
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea edx, [ebx + 0x414]
test al, 1
je 0x4245f8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4245f8
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x594]
lea edx, [ebx + 0x590]
test al, 1
jne 0x424623
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x424623
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [0x4cc778], 0
je case.default.0x4229cd
push str.popform_v3notice
jmp 0x422ecf
mov eax, dword [ebx + 0xcec]
lea edx, [ebx + 0xce8]
mov ecx, eax
and ecx, 1
je 0x424666
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424666
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x29c]
lea edx, [ebx + 0x298]
mov ecx, eax
and ecx, 1
je 0x424692
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424692
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x2e8]
lea edx, [ebx + 0x2e4]
mov ecx, eax
and ecx, 1
je 0x4246be
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4246be
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xdc]
lea edx, [ebx + 0xd8]
mov ecx, eax
and ecx, 1
je 0x4246ea
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x4246ea
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7f4]
lea edx, [ebx + 0x7f0]
mov ecx, eax
and ecx, 1
je 0x424716
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424716
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2748
mov edx, esi
call fcn.004618f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x42474d
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x42474d
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
mov eax, dword [ebx + 0x250]
lea esi, [ebx + 0x24c]
mov ecx, eax
and ecx, 1
jne 0x424779
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, edi
je 0x424779
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push edi
push 1
push edi
push esi
call eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, 0x9d00
call fcn.0046c8c0
mov dword [esp + 0x70], 0xa
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x34]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
lea esi, [esp + 0x38]
call fcn.00451ef0
lea edi, [ebx + 0x1b0]
mov dword [esp + 0x70], 0xb
call fcn.0046aff0
mov ecx, esi
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
test al, 1
jne 0x424800
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x424800
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xad0]
lea edx, [ebx + 0xacc]
test al, 1
je 0x424832
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424832
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4b0]
lea edx, [ebx + 0x4ac]
test al, 1
je 0x42485d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42485d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xb1c]
lea edx, [ebx + 0xb18]
test al, 1
je 0x424888
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424888
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0xbb8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [ebx + 0xb54]
push 5
push ecx
call esi
mov eax, dword [ebx + 0x380]
lea edx, [ebx + 0x37c]
test al, 1
je 0x4248cf
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4248cf
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x464]
lea edx, [ebx + 0x460]
test al, 1
je 0x4248fa
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4248fa
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x4fc]
lea edx, [ebx + 0x4f8]
test al, 1
je 0x424925
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424925
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x5e0]
lea edx, [ebx + 0x5dc]
test al, 1
je 0x424950
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424950
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x594]
lea edx, [ebx + 0x590]
test al, 1
je 0x42497b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x42497b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x548]
lea edx, [ebx + 0x544]
test al, 1
je 0x4249a6
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4249a6
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x62c]
lea edx, [ebx + 0x628]
test al, 1
je 0x4249d1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4249d1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x7a8]
lea edx, [ebx + 0x7a4]
test al, 1
je 0x4249fc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x4249fc
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x710]
lea edx, [ebx + 0x70c]
test al, 1
je 0x424a27
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424a27
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x75c]
lea edx, [ebx + 0x758]
test al, 1
je 0x424a52
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424a52
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x678]
lea edx, [ebx + 0x674]
test al, 1
je 0x424a7d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424a7d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x6c4]
lea edx, [ebx + 0x6c0]
test al, 1
je 0x424aa8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424aa8
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x3cc]
lea edx, [ebx + 0x3c8]
test al, 1
je 0x424ad3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x424ad3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [ebx + 0xbc], 0
mov eax, dword [ebx + 0x334]
lea edx, [ebx + 0x330]
je 0x424af1
test al, 1
jne 0x424b10
or eax, 1
jmp 0x424af8
test al, 1
je 0x424b10
and eax, 0xfffffffe
mov ecx, dword [edx + 0x1c]
mov dword [edx + 4], eax
test ecx, ecx
je 0x424b10
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [ebx + 0x418]
lea esi, [ebx + 0x414]
mov ecx, eax
shr ecx, 2
not ecx
test cl, 1
jne 0x4233ed
and eax, 0xfffffffb
jmp 0x4233d5
mov eax, dword [ebx + 0x204]
lea edx, [ebx + 0x200]
mov ecx, eax
and ecx, 1
jne 0x424b60
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, edi
je 0x424b60
mov eax, dword [ecx]
push edi
push 1
push edi
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, ebx
call fcn.0041ffe0
mov ecx, dword [ebx + 0xcec]
lea eax, [ebx + 0xce8]
mov edx, ecx
and edx, 1
je 0x424b93
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [eax + 0x1c]
cmp ecx, edi
je 0x424b93
mov edx, dword [ecx]
push edi
push 1
push edi
push eax
mov eax, dword [edx + 0x28]
call eax
lea edx, [ebx + 0x298]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x2e4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xd8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7f0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xacc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4ac]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xb18]
xor ecx, ecx
call fcn.004686c0
mov ecx, dword [ebx + 0xb54]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push edi
push ecx
call esi
mov edx, dword [ebx + 0xbb8]
push 1
push edx
call esi
lea edx, [ebx + 0x4f8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x5dc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x590]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x544]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x628]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x330]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x3c8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x414]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7a4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x70c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x758]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x674]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x6c0]
xor ecx, ecx
call fcn.004686c0
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2748
mov edx, esi
call fcn.004618f0
mov ecx, 1
mov edx, esi
call fcn.004686c0
lea eax, [esp + 0x3c]
push eax
mov ecx, 0x9d00
call fcn.0046c8c0
mov dword [esp + 0x70], 0xc
mov eax, dword [eax]
push eax
lea esi, [ebx + 0x24c]
push esi
call fcn.00465db0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov ecx, 1
mov edx, esi
call fcn.004686c0
lea edx, [ebx + 0x37c]
cmp dword [ebx + 0xbc], edi
je 0x424d2a
mov ecx, 1
jmp 0x424d2c
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x460]
mov ecx, 1
call fcn.004686c0
cmp dword [0x4cc774], edi
je case.default.0x4229cd
cmp dword [0x4d0d90], edi
je 0x424da0
lea ecx, [esp + 0x40]
push ecx
call fcn.00451b30
mov esi, eax
mov dword [esp + 0x70], 0xd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [esi]
push eax
push edx
push str.actionpopform_c__st_d
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
push 0x4cd998
call fcn.0047e9e0
add esp, 0x18
lea ecx, [esp + 0x40]
call fcn.004710f0
mov dword [0x4cc774], edi
jmp case.default.0x4229cd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.popform
push str.action_st_d
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
push 0x4cd998
call fcn.0047e9e0
add esp, 0x18
mov dword [0x4cc774], edi
jmp case.default.0x4229cd
lea edx, [ebx + 0x200]
mov ecx, 1
call fcn.004686c0
mov eax, ebx
call fcn.0041ffe0
lea edx, [ebx + 0x24c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x108]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7f0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xacc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xb18]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xce8]
mov ecx, 1
call fcn.004686c0
lea edx, [ebx + 0x298]
mov ecx, 1
call fcn.004686c0
lea edx, [ebx + 0x2e4]
mov ecx, 1
call fcn.004686c0
lea edx, [ebx + 0xd8]
mov ecx, 1
call fcn.004686c0
mov eax, dword [ebx + 0xb54]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push edi
push eax
call esi
mov ecx, dword [ebx + 0xbb8]
push 1
push ecx
call esi
lea edx, [ebx + 0x330]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x3c8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x414]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x37c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x460]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4ac]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x590]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x544]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x628]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7a4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x70c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x758]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x674]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x6c0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4f8]
mov ecx, 1
call fcn.004686c0
lea edx, [ebx + 0x5dc]
mov ecx, 1
call fcn.004686c0
cmp dword [0x4cc774], edi
je case.default.0x4229cd
cmp dword [0x4d0d90], edi
je 0x424da0
lea edx, [esp + 0x44]
push edx
call fcn.00451b30
mov esi, eax
mov dword [esp + 0x70], 0xe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
mov eax, dword [esi]
push eax
push str.actionpopform_c__st_d
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
push 0x4cd998
call fcn.0047e9e0
add esp, 0x18
lea ecx, [esp + 0x44]
call fcn.004710f0
mov dword [0x4cc774], edi
jmp case.default.0x4229cd
push edi
push ebx
call fcn.00425570
lea edx, [ebx + 0x200]
mov ecx, 1
call fcn.004686c0
mov eax, ebx
call fcn.0041ffe0
lea edx, [ebx + 0xce8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x298]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x2e4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xd8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7f0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xacc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xb18]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4ac]
xor ecx, ecx
call fcn.004686c0
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d26f4
mov edx, esi
call fcn.004618f0
mov ecx, 1
mov edx, esi
call fcn.004686c0
lea esi, [ebx + 0x24c]
mov ecx, 1
mov edx, esi
call fcn.004686c0
lea ecx, [esp + 0x48]
push ecx
mov ecx, 0x9d72
call fcn.0046c8c0
mov dword [esp + 0x70], 0xf
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x48]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov edx, dword [ebx + 0xb54]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push edi
push edx
call esi
mov eax, dword [ebx + 0xbb8]
push 1
push eax
call esi
lea edx, [ebx + 0x330]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x3c8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x414]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x37c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x460]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4f8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x5dc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x628]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x544]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7a4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x70c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x758]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x674]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x6c0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x590]
jmp 0x42550d
push edi
push ebx
call fcn.00425570
lea edx, [ebx + 0x200]
mov ecx, 1
call fcn.004686c0
mov eax, ebx
call fcn.0041ffe0
lea edx, [ebx + 0xce8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x298]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x2e4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xd8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7f0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4ac]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xb18]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xacc]
xor ecx, ecx
call fcn.004686c0
lea esi, [ebx + 0x108]
xor eax, eax
mov ecx, 0x4d2710
mov edx, esi
call fcn.004618f0
mov ecx, 1
mov edx, esi
call fcn.004686c0
lea esi, [ebx + 0x24c]
mov ecx, 1
mov edx, esi
call fcn.004686c0
lea ecx, [esp + 0x4c]
push ecx
mov ecx, 0x9d8c
call fcn.0046c8c0
mov dword [esp + 0x70], 0x10
mov eax, dword [eax]
push eax
push esi
call fcn.00465db0
lea ecx, [esp + 0x4c]
mov dword [esp + 0x70], 0xffffffff
call fcn.004710f0
mov edx, dword [ebx + 0xb54]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push edi
push edx
call esi
mov eax, dword [ebx + 0xbb8]
push 1
push eax
call esi
lea edx, [ebx + 0x330]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x3c8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x414]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x37c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x460]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x628]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4f8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x5dc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x544]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7a4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x70c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x758]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x674]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x6c0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x590]
jmp 0x42550d
lea edx, [ebx + 0xacc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xce8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x298]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x2e4]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xd8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7f0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x108]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x24c]
xor ecx, ecx
call fcn.004686c0
mov ecx, dword [ebx + 0xb54]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push edi
push ecx
call esi
mov edx, dword [ebx + 0xbb8]
push edi
push edx
call esi
lea edx, [ebx + 0x330]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x3c8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x414]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4ac]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x37c]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x460]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x628]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x4f8]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x5dc]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x544]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x7a4]
xor ecx, ecx
call fcn.004686c0
lea edi, [ebx + 0x70c]
xor ecx, ecx
mov edx, edi
call fcn.004686c0
lea edx, [ebx + 0x758]
xor ecx, ecx
call fcn.004686c0
lea esi, [ebx + 0x674]
xor ecx, ecx
mov edx, esi
call fcn.004686c0
lea edx, [ebx + 0x6c0]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0x590]
xor ecx, ecx
call fcn.004686c0
lea edx, [ebx + 0xb18]
xor ecx, ecx
call fcn.004686c0
push 1
push ebx
call fcn.00425570
lea edx, [ebx + 0x200]
mov ecx, 1
call fcn.004686c0
mov eax, ebx
call fcn.0041ffe0
mov eax, dword [ebx + 0xcac]
sub eax, 4
mov ecx, 1
je 0x425504
sub eax, ecx
je 0x4254fc
sub eax, 2
je 0x4254e9
lea edx, [ebx + 0x590]
jmp 0x425512
lea edx, [ebx + 0x7a4]
call fcn.004686c0
lea edx, [ebx + 0x6c0]
jmp 0x42550d
lea edx, [ebx + 0x758]
jmp 0x425506
mov edx, edi
call fcn.004686c0
mov edx, esi
mov ecx, 1
call fcn.004686c0
mov eax, dword [ebx + 4]
push 0x105
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret