Function at 0x43b130
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0xfc]
sub esp, 0x144
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0x1e0
mov dword [esp + 0x18], 0x280
mov dword [esp + 0x14], 0xa
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0xcf0000
mov dword [esp + 8], 0x55e380
mov dword [esp + 4], 0x55e38b
mov dword [esp], 0
call dword [sym.imp.user32.dll_CreateWindowExA]
sub esp, 0x30
mov edi, eax
mov dword [ebp - 0x120], eax
mov dword [esp + 4], 5
mov dword [esp], eax
call dword [sym.imp.user32.dll_ShowWindow]
sub esp, 8
call fcn.0040a6e0
mov esi, eax
mov dword [ebp - 0x11c], eax
mov eax, 0x41f
call fcn.0040adb0
xor eax, eax
test esi, esi
mov dword [esp + 4], 0x55e6e4
setne al
mov dword [esp], eax
call fcn.0040b610
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetClientRect]
sub esp, 8
mov dword [ebp - 0x100], eax
mov eax, 0x422
call fcn.0040adb0
mov dword [esp + 4], 0x563e66
mov eax, dword [ebp - 0x100]
mov dword [esp], eax
call fcn.0040b610
mov dword [esp + 8], ebx
mov dword [esp], edi
mov dword [esp + 0xc], 2
mov dword [esp + 4], 0
call dword [sym.imp.user32.dll_MapWindowPoints]
sub esp, 0x10
mov dword [ebp - 0x100], eax
mov eax, 0x424
call fcn.0040adb0
mov dword [esp + 4], 0x563e82
mov eax, dword [ebp - 0x100]
mov dword [esp], eax
call fcn.0040b610
mov eax, dword [esi]
mov dword [esp + 4], edi
mov dword [esp], esi
mov dword [esp + 8], 8
call dword [eax + 0x50]
sub esp, 0xc
mov ebx, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x427
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x55e708
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [esi]
lea edx, [ebp - 0x104]
mov dword [esp], esi
mov dword [esp + 8], edx
lea esi, [ebp - 0x100]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0
call dword [eax + 0x10]
sub esp, 0x10
mov ebx, eax
mov eax, 0x42a
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x5604fc
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x42c
xor eax, eax
cmp ebx, 0x887600cd
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x55e733
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 8], edi
lea edi, [ebp - 0x100]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x20]
sub esp, 0xc
mov ebx, eax
mov eax, 0x42e
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x560520
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
mov eax, 0x430
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x563ea0
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x100]
mov esi, dword [sym.imp.msvcrt.dll_malloc]
mov dword [esp], eax
call esi
mov ebx, eax
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov edi, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x433
mov dword [esp + 8], edi
not edi
shr edi, 0x1f
mov dword [esp + 4], 0x563ec8
mov dword [esp], edi
call fcn.0040b610
mov eax, 0x434
call fcn.0040adb0
mov eax, dword [ebx]
mov dword [esp + 4], 0x563eec
cmp eax, 0x20
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0040b610
mov eax, 0x435
call fcn.0040adb0
mov eax, dword [ebx + 4]
mov dword [esp + 4], 0x563f11
cmp eax, 1
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0040b610
mov eax, 0x436
call fcn.0040adb0
mov eax, dword [ebx + 8]
mov dword [esp + 4], 0x563f2c
test eax, eax
mov dword [esp + 8], eax
setne al
movzx eax, al
mov dword [esp], eax
call fcn.0040b610
mov eax, 0x437
call fcn.0040adb0
mov eax, dword [ebp - 0xf0]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0xf4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xf8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xfc]
mov dword [esp], 0x55e3d4
mov dword [esp + 4], eax
call fcn.0040add0
mov edi, eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x10]
mov dword [esp], 0x55e3d4
mov dword [esp + 4], eax
call fcn.0040add0
mov ecx, dword [ebp - 0xfc]
xor edx, edx
cmp dword [ebx + 0x10], ecx
je 0x43c130
mov dword [esp], edx
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x563f48
call fcn.0040b610
mov eax, dword [sym.imp.msvcrt.dll_free]
mov dword [esp], ebx
mov dword [ebp - 0x110], eax
call eax
mov edi, dword [sym.imp.gdi32.dll_CreateRectRgn]
mov dword [esp + 0xc], 0xf0
mov dword [esp + 8], 0x140
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
sub esp, 0x10
mov ebx, eax
mov eax, 0x43d
call fcn.0040adb0
xor eax, eax
test ebx, ebx
mov dword [esp + 4], 0x563f77
setne al
mov dword [esp], eax
call fcn.0040b610
mov dword [esp + 0xc], 0x1e0
mov dword [esp + 8], 0x280
mov dword [esp + 4], 0xf0
mov dword [esp], 0x140
call edi
sub esp, 0x10
mov edi, eax
mov eax, 0x43f
call fcn.0040adb0
xor eax, eax
test edi, edi
mov dword [esp + 4], 0x563f77
setne al
mov dword [esp], eax
call fcn.0040b610
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp], ebx
mov dword [esp + 0xc], 2
call dword [sym.imp.gdi32.dll_CombineRgn]
mov ecx, dword [sym.imp.gdi32.dll_GetRegionData]
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x118], ecx
call ecx
sub esp, 0xc
mov dword [ebp - 0x100], eax
mov dword [esp], eax
mov dword [ebp - 0x114], eax
call esi
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x114]
mov esi, eax
mov dword [esp], ebx
mov dword [esp + 4], edx
mov ecx, dword [ebp - 0x118]
call ecx
sub esp, 0xc
mov dword [ebp - 0x100], eax
mov eax, 0x444
call fcn.0040adb0
mov dword [esp + 4], 0x563f91
xor eax, eax
mov ecx, dword [ebp - 0x100]
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0040b610
mov dword [esp], edi
mov edi, dword [sym.imp.gdi32.dll_DeleteObject]
call edi
sub esp, 4
mov dword [esp], ebx
call edi
mov eax, dword [ebp - 0x104]
sub esp, 4
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [edx + 0x1c]
sub esp, 0xc
mov ebx, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x44a
xor eax, eax
cmp ebx, 0x88760237
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], 0x55e733
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x20]
sub esp, 0xc
mov ebx, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x44c
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x560520
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 4], esi
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [edx + 0x1c]
sub esp, 0xc
mov ebx, eax
mov eax, 0x44e
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x563fb0
mov dword [esp], ebx
lea ebx, [ebp - 0x78]
call fcn.0040b610
mov dword [esp], esi
xor esi, esi
mov eax, dword [ebp - 0x110]
call eax
lea edx, [ebp - 0x68]
mov eax, esi
mov ecx, 0x16
mov edi, edx
mov dword [ebp - 0x78], 0x6c
lea edx, [ebp - 0x10c]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x11c]
mov dword [ebp - 0x74], 0x1007
mov dword [ebp - 0x10], 0x40
mov dword [ebp - 0x6c], 0x280
mov dword [ebp - 0x70], 0x1e0
mov dword [ebp - 0x30], 0x20
mov dword [ebp - 0x2c], 0x40
mov dword [ebp - 0x24], 0x20
mov dword [ebp - 0x20], 0xff0000
mov dword [ebp - 0x1c], 0xff00
mov dword [ebp - 0x18], 0xff
mov eax, dword [edi]
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp], edi
mov dword [esp + 0xc], 0
call dword [eax + 0x18]
sub esp, 0x10
mov edi, eax
mov eax, 0x460
call fcn.0040adb0
mov dword [esp + 8], edi
not edi
shr edi, 0x1f
mov dword [esp + 4], 0x561030
mov dword [esp], edi
call fcn.0040b610
mov edi, dword [ebp - 0x11c]
lea edx, [ebp - 0x108]
mov eax, dword [edi]
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp], edi
mov dword [esp + 0xc], 0
call dword [eax + 0x18]
sub esp, 0x10
mov edi, eax
mov eax, 0x462
call fcn.0040adb0
mov dword [esp + 8], edi
not edi
shr edi, 0x1f
mov dword [esp + 4], 0x56105c
mov dword [esp], edi
call fcn.0040b610
lea edx, [ebp - 0xd8]
mov eax, esi
mov ecx, 0x18
mov edi, edx
lea esi, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x64
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x10c]
lea edi, [ebp - 0xdc]
mov edx, dword [eax]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x1000400
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x18
mov esi, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x467
mov dword [esp + 8], esi
not esi
shr esi, 0x1f
mov dword [esp + 4], 0x561f2c
mov dword [esp], esi
call fcn.0040b610
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], 0x1000400
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x18
mov esi, eax
mov eax, 0x469
call fcn.0040adb0
mov dword [esp + 8], esi
not esi
shr esi, 0x1f
mov dword [esp + 4], 0x561c7c
mov dword [esp], esi
call fcn.0040b610
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax]
mov dword [esp + 8], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x64]
sub esp, 0x14
mov ebx, eax
mov eax, 0x46c
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x5623bc
mov dword [esp], ebx
call fcn.0040b610
mov eax, 0x46d
call fcn.0040adb0
mov eax, dword [ebp - 0x68]
mov dword [esp + 4], 0x563fd4
cmp eax, 0xa00
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0040b610
mov eax, dword [ebp - 0x54]
mov dword [eax], 0xff0000ff
mov dword [eax + 4], 0xff0000ff
mov dword [eax + 8], 0xff00ff00
mov dword [eax + 0xc], 0xffff0000
mov dword [eax + 0x10], 0xffffffff
mov dword [eax + 0x14], 0xffffffff
mov dword [eax + 0xa00], 0xff0000ff
mov dword [eax + 0xa04], 0xff0000ff
mov dword [eax + 0xa08], 0xff00ff00
mov dword [eax + 0xa0c], 0xffff0000
mov dword [eax + 0xa10], 0xffffffff
mov dword [eax + 0xa14], 0xffffffff
mov dword [eax + 0x1400], 0xff0000ff
mov dword [eax + 0x1404], 0xff0000ff
mov dword [eax + 0x1408], 0xff00ff00
mov dword [eax + 0x140c], 0xffff0000
mov dword [eax + 0x1410], 0xffffffff
mov dword [eax + 0x1414], 0xffffffff
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + pe_nt_image_headers32]
sub esp, 8
mov ebx, eax
mov eax, 0x473
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x5623e8
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x70]
sub esp, 8
mov ebx, eax
call fcn.0054f6e0
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x476
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x561f08
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x108]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], 1
mov dword [ebp - 0xe4], 5
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xe0], 2
mov edx, dword [eax]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000000
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp - 0x10c]
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x18
mov ebx, eax
mov eax, 0x47a
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x5607fd
mov dword [esp], ebx
xor ebx, ebx
mov edi, ebx
call fcn.0040b610
mov ecx, 0x3c
mov dword [ebp - 0x110], ecx
lea ebx, [edi*4]
mov esi, 0x50
mov dword [ebp - 0x118], edi
mov edi, ebx
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x108]
mov edx, esi
call fcn.0040b9d0
mov ebx, eax
call fcn.0054f6e0
mov ecx, 1
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x482
mov eax, dword [edi + 0x5670c0]
mov edx, eax
mov dword [ebp - 0x114], eax
mov eax, ebx
call fcn.0040a1f0
mov edx, eax
mov eax, 1
test edx, edx
jne 0x43bc43
mov edx, dword [edi + 0x567080]
mov ecx, 1
mov eax, ebx
call fcn.0040a1f0
mov edx, dword [0x628750]
test edx, edx
sete dl
test eax, eax
setne al
movzx eax, al
and eax, edx
mov dword [esp + 0x14], ebx
mov ecx, dword [ebp - 0x110]
add edi, 4
mov dword [esp + 0xc], esi
add esi, 0xa0
mov dword [esp + 0x10], ecx
mov ecx, dword [ebp - 0x114]
mov dword [esp + 4], 0x563ff8
mov dword [esp + 8], ecx
mov dword [esp], eax
call fcn.0040b610
cmp esi, 0x2d0
jne 0x43bbd0
mov edi, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x110]
add edi, 4
add ecx, 0x78
cmp edi, 0x10
jne 0x43bbb6
mov eax, dword [ebp - 0x108]
lea esi, [ebp - 0xdc]
mov dword [ebp - 0x8c], 0xff0000ff
mov edx, dword [eax]
mov dword [esp + 0x14], esi
xor esi, esi
mov dword [esp + 0x10], 0x1000400
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x18
mov ebx, eax
mov eax, 0x48a
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x561c7c
mov dword [esp], ebx
call fcn.0040b610
mov ecx, 0x3c
mov dword [ebp - 0x118], esi
lea edi, [esi*4 + 0x567040]
mov ebx, 0x50
mov dword [ebp - 0x110], ecx
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x108]
mov edx, ebx
add edi, 4
call fcn.0040b9d0
mov esi, eax
call fcn.0054f6e0
mov ecx, 1
mov dword [eax], 0x55e3cb
mov dword [eax + 4], 0x492
mov edx, dword [edi - 4]
mov eax, esi
mov dword [ebp - 0x114], edx
call fcn.0040a1f0
mov dword [esp + 0x14], esi
mov ecx, dword [ebp - 0x110]
mov dword [esp + 0xc], ebx
add ebx, 0xa0
mov dword [esp + 0x10], ecx
mov edx, dword [ebp - 0x114]
mov dword [esp + 4], 0x563ff8
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.0040b610
cmp ebx, 0x2d0
jne 0x43bd28
mov esi, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x110]
add esi, 4
add ecx, 0x78
cmp esi, 0x10
jne 0x43bd10
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x10], 0
mov ecx, dword [ebp - 0x10c]
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x1c]
sub esp, 0x18
mov ebx, eax
mov eax, 0x498
call fcn.0040adb0
mov eax, 1
cmp ebx, 0x8876023e
je 0x43be27
mov eax, dword [0x628750]
test eax, eax
sete dl
xor eax, eax
cmp ebx, 0x80004001
sete al
and eax, edx
mov dword [esp + 8], ebx
lea esi, [ebp - 0x100]
mov dword [esp], eax
mov dword [esp + 4], 0x55e733
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edi, dword [ebp - 0x120]
mov edx, dword [eax]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x20]
sub esp, 0xc
mov ebx, eax
mov eax, 0x49b
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x560520
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
mov eax, 0x49d
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x563ea0
mov dword [esp], ebx
call fcn.0040b610
mov dword [esp], edi
lea edi, [ebp - 0xdc]
call dword [sym.imp.user32.dll_DestroyWindow]
mov eax, dword [ebp - 0x104]
sub esp, 4
mov edx, dword [eax]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
mov eax, 0x4a0
call fcn.0040adb0
xor eax, eax
cmp ebx, 0x80004005
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], 0x55e733
mov dword [esp], eax
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x20]
sub esp, 0xc
mov ebx, eax
mov eax, 0x4a2
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x560520
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
mov eax, 0x4a4
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x563ea0
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x1c]
sub esp, 0xc
mov ebx, eax
mov eax, 0x4a6
call fcn.0040adb0
mov dword [esp + 8], ebx
not ebx
shr ebx, 0x1f
mov dword [esp + 4], 0x563fb0
mov dword [esp], ebx
call fcn.0040b610
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov ebx, eax
mov eax, 0x4a8
call fcn.0040adb0
xor eax, eax
cmp ebx, 0x887600cd
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], 0x55e733
mov dword [esp], eax
call fcn.0040b610
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], 0x1000400
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x18
mov ebx, eax
mov eax, 0x4aa
call fcn.0040adb0
xor eax, eax
cmp ebx, 0x887600cd
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], 0x55e733
mov dword [esp], eax
call fcn.0040b610
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebp - 0x10c]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebp - 0x104]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
mov ebx, eax
mov eax, 0x4af
call fcn.0040adb0
xor eax, eax
test ebx, ebx
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], 0x564028
mov dword [esp], eax
call fcn.0040b610
mov edi, dword [ebp - 0x11c]
mov eax, dword [edi]
mov dword [esp], edi
call dword [eax + 8]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [ebp - 0xf4]
cmp dword [ebx + 0x18], ecx
jne 0x43b544
mov ecx, dword [ebp - 0xf8]
cmp dword [ebx + 0x14], ecx
jne 0x43b544
xor edx, edx
mov ecx, dword [ebp - 0xf0]
cmp dword [ebx + 0x1c], ecx
sete dl
jmp 0x43b544