Function at 0x4198a7
Capabilities:
Get graphical window text
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x49c
push esi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x419fcf
push 1
lea ecx, [ebp - 0x3b8]
call fcn.004113a6
mov dword [ebp - 0x394], 0x9000d4e7
mov dword [ebp - 0x390], 0x9000d4e7
mov dword [ebp - 0x38c], 0x9000d4e7
mov dword [ebp - 0x388], 0x9000d4e7
lea ecx, [ebp - 0xc1]
call fcn.00411494
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp - 0x480]
call fcn.00411497
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x164]
call fcn.00411452
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x70], 0
jmp 0x419941
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x41995d
push dword [ebp - 0x70]
lea ecx, [ebp - 0x3b8]
call fcn.00401484
mov dword [eax], 0x9102071b
jmp 0x41993a
push 2
lea ecx, [ebp - 0x164]
call fcn.00401484
and dword [eax], 0
jmp 0x419993
push 2
lea ecx, [ebp - 0x164]
call fcn.00401484
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x164]
call fcn.00401484
cmp dword [eax], 0
jg 0x419cab
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x124], 0xe35fe57b
push 4
lea ecx, [ebp - 0x3ac]
call fcn.004113a6
mov dword [ebp - 0xa0], 0
jmp 0x4199e0
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x419a02
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x3ac]
call fcn.00401484
mov dword [eax], 1
jmp 0x4199d3
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x419a22
push 0x588
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [ebp - 0x2c], 0
jmp 0x419a32
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jg 0x419c9b
mov dword [ebp - 0x44], 0x9d43467
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x7c], 0
jmp 0x419a5d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x419a73
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xdc], 1
jmp 0x419a56
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x458], eax
push 3
lea ecx, [ebp - 0x164]
call fcn.00401484
mov ecx, dword [ebp - 0x44]
cmp dword [eax], ecx
jl 0x419aa9
cmp dword [ebp - 0x2c], 0
jne 0x419aa9
mov dword [ebp - 0x2b0], 1
jmp 0x419ab0
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x2b0], eax
je 0x419ac7
mov dword [ebp - 0x258], 1
jmp 0x419ace
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
dec eax
cmp eax, dword [ebp - 0x44]
jl 0x419ae6
mov dword [ebp - 0x10c], 1
jmp 0x419aed
and dword [ebp - 0x10c], 0
mov dword [ebp - 0x260], 0xabb7
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x260], eax
jge 0x419b14
mov dword [ebp - 0x114], 1
jmp 0x419b1b
and dword [ebp - 0x114], 0
push 2
lea ecx, [ebp - 0x164]
call fcn.00401484
mov ecx, dword [ebp - 0x114]
add ecx, dword [eax]
cmp ecx, 9
je 0x419b41
mov dword [ebp - 0x268], 1
jmp 0x419b48
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
sub esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x3b8]
call fcn.00401484
cmp dword [eax], esi
jl 0x419b81
mov dword [ebp - 0x270], 1
jmp 0x419b88
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x419bbb
push 2
lea ecx, [ebp - 0x164]
call fcn.00401484
cmp dword [eax], 0
je 0x419bbb
mov dword [ebp - 0x278], 1
jmp 0x419bc2
and dword [ebp - 0x278], 0
push 1
lea ecx, [ebp - 0x164]
call fcn.00401484
mov ecx, dword [ebp - 0x278]
cmp ecx, dword [eax]
jg 0x419be5
mov dword [ebp - 0x12c], 1
jmp 0x419bec
and dword [ebp - 0x12c], 0
mov eax, 0x821c760f
cmp eax, 2
jae 0x419c02
mov dword [ebp - 0x280], 1
jmp 0x419c09
and dword [ebp - 0x280], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x280], eax
jg 0x419c2a
mov dword [ebp - 0x134], 1
jmp 0x419c31
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x134], eax
jge 0x419c52
mov dword [ebp - 0x288], 1
jmp 0x419c59
and dword [ebp - 0x288], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x288], eax
jle 0x419c7a
mov dword [ebp - 0x13c], 1
jmp 0x419c81
and dword [ebp - 0x13c], 0
push 1
lea ecx, [ebp - 0x3ac]
call fcn.00401484
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
jmp 0x419a2b
lea ecx, [ebp - 0x3ac]
call fcn.00411478
jmp 0x41996f
lea ecx, [ebp - 0x164]
call fcn.00411478
lea ecx, [ebp - 0x3b8]
call fcn.00411478
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x36c], 0x5bb2c213
mov dword [ebp - 0x368], 0x5bb2c213
mov dword [ebp - 0x364], 0x5bb2c213
mov dword [ebp - 0x360], 0x5bb2c213
mov dword [ebp - 0x3d0], 0x5010f7a7
mov dword [ebp - 0x3ec], 0x443ac46d
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x2cc], 0xffffffff
mov dword [ebp - 0x3f4], 0x34bdac84
mov dword [ebp - 0x3fc], 0x96753f3a
mov dword [ebp - 0x404], 0x1ae9a07b
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0xcc], 3
mov dword [ebp - 0x20], 0
jmp 0x419d5c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x419d72
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x414], 9
jmp 0x419d55
mov dword [ebp - 0x20], 0
jmp 0x419d82
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x419d98
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x35c], 0xffffffff
jmp 0x419d7b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x36c], 0
je 0x419f69
mov dword [ebp - 0x41c], 1
mov dword [ebp - 0x450], 0xfbd6c3f0
mov dword [ebp - 0x344], 0x1c3a23fe
mov dword [ebp - 0x3cc], 0x52d0da0b
push 2
lea ecx, [ebp - 0x42c]
call fcn.004113a6
mov dword [ebp - 0x298], 0xf34ffdea
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x9c], 0
jmp 0x419e0e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x419e30
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x42c]
call fcn.00401484
mov dword [eax], 0xd95da228
jmp 0x419e01
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x36c]
cmp dword [ebp - 0x2cc], eax
jle 0x419e51
mov dword [ebp - 0x290], 1
jmp 0x419e58
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x290], eax
jg 0x419e72
mov dword [ebp - 0x14c], 1
jmp 0x419e79
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
sub eax, 0x6492a415
cmp dword [ebp - 0x344], eax
jle 0x419e9f
mov dword [ebp - 0x144], 1
jmp 0x419ea6
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x298]
jne 0x419ec6
cmp dword [ebp - 0x20c], 0
jne 0x419ec6
and dword [ebp - 0x2a0], 0
jmp 0x419ed0
mov dword [ebp - 0x2a0], 1
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x2a0]
jle 0x419eea
mov dword [ebp - 0x2a8], 1
jmp 0x419ef1
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
cmp dword [ebp - 0x2a8], eax
jg 0x419f12
mov dword [ebp - 0x154], 1
jmp 0x419f19
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x154]
jge 0x419f49
cmp dword [ebp - 0x34c], 0
je 0x419f49
mov dword [ebp - 0x158], 1
jmp 0x419f50
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x20c], eax
lea ecx, [ebp - 0x42c]
call fcn.00411478
jmp 0x419fa1
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x419f8b
push 0
push 0
push 0x1969
push 0x8e0
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x419fa1
push 0
push 0
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
push 0x7094
push 0
push dword [ebp - 0x354]
push 0x5e5c
push 0x3986
push 0x3b52
push 0x48d4
call fcn.0041ce29
add esp, 0x1c
jmp 0x41b729
push 3
lea ecx, [ebp - 0x2c8]
call fcn.004113a6
mov dword [ebp - 0x60], 4
mov dword [ebp - 0x380], 0x5ce9
mov dword [ebp - 0x37c], 0x5ce9
mov dword [ebp - 0x378], 0x5ce9
mov dword [ebp - 0x374], 0x5ce9
lea ecx, [ebp - 0xb9]
call fcn.00411494
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x488]
call fcn.00411497
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x478]
call fcn.00411452
mov dword [ebp - 0x18], 0
jmp 0x41a050
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x41a066
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x49c], 5
jmp 0x41a049
mov dword [ebp - 0x18], 0
jmp 0x41a076
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x41a08f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2c8]
call fcn.00401484
or dword [eax], 0xffffffff
jmp 0x41a06f
push 0
lea ecx, [ebp - 0x2c8]
call fcn.00401484
and dword [eax], 0
jmp 0x41a0c5
push 0
lea ecx, [ebp - 0x2c8]
call fcn.00401484
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x16c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2c8]
call fcn.00401484
cmp dword [eax], 2
jg 0x41a129
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x84], 2
jmp 0x41a0fa
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x41a124
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x41a11b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x60], 0xfffffffc
jmp 0x41a0ed
jmp 0x41a0a1
mov dword [ebp - 0x60], 0xffffffee
jmp 0x41a139
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x16
jge 0x41a180
mov dword [ebp - 0x328], 0x31d2
mov esi, dword [ebp - 0x328]
push 0
lea ecx, [ebp - 0x2c8]
call fcn.00401484
mov dword [eax], esi
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x41a17e
push 0x588
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x41a132
lea ecx, [ebp - 0x478]
call fcn.00411478
lea ecx, [ebp - 0x2c8]
call fcn.00411478
lea eax, [ebp + 0x18]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x10], 0xd1454bcd
mov dword [ebp - 0x4c], 0xfffffffb
mov dword [ebp - 0x8c], 1
push 1
lea ecx, [ebp - 0x2bc]
call fcn.004113a6
mov dword [ebp - 0x2d8], 0x5fef4072
mov dword [ebp - 0xec], 0x4f5fdfda
mov dword [ebp - 0x3c8], 0x1af53c8c
mov dword [ebp - 0x3c4], 0x1af53c8c
mov dword [ebp - 0x3c0], 0x1af53c8c
mov dword [ebp - 0x3bc], 0x1af53c8c
mov dword [ebp - 0xac], 0
jmp 0x41a219
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x41a23b
push dword [ebp - 0xac]
lea ecx, [ebp - 0x2bc]
call fcn.00401484
mov dword [eax], 0x73ed1322
jmp 0x41a20c
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x41a251
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jl 0x41a26b
mov dword [ebp - 0x29c], 1
jmp 0x41a272
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4c], eax
jne 0x41a290
xor eax, eax
jne 0x41a290
and dword [ebp - 0x174], 0
jmp 0x41a29a
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x4c], 0xfffffffd
jl 0x41a2b5
mov dword [ebp - 0x214], 1
jmp 0x41a2bc
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x10]
cmp eax, 0x87b35f19
jb 0x41a2d8
mov dword [ebp - 0x17c], 1
jmp 0x41a2df
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x17c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8c], eax
jge 0x41a306
mov dword [ebp - 0x264], 1
jmp 0x41a30d
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x264]
lea esi, [ecx + eax + 0x6c7a]
push 0
lea ecx, [ebp - 0x2bc]
call fcn.00401484
mov dword [eax], esi
cmp dword [ebp - 0x8c], 0xfffffff6
jl 0x41a341
mov dword [ebp - 0x31c], 1
jmp 0x41a348
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3dc], eax
push 0
lea ecx, [ebp - 0x2bc]
call fcn.00401484
cmp dword [eax], 1
jae 0x41a378
mov dword [ebp - 0x184], 1
jmp 0x41a37f
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2d8], eax
mov esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0x2bc]
call fcn.00401484
sub esi, dword [eax]
je 0x41a3b4
cmp dword [ebp - 0x8c], 0
je 0x41a3b4
mov dword [ebp - 0x21c], 1
jmp 0x41a3bb
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x21c], eax
jne 0x41a3d2
mov dword [ebp - 0x33c], 1
jmp 0x41a3d9
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x4c], 0
je 0x41a3f1
mov eax, 0x5534fd39
test eax, eax
jne 0x41a40c
push 0
lea ecx, [ebp - 0x2bc]
call fcn.00401484
cmp dword [eax], 0
jne 0x41a40c
and dword [ebp - 0x18c], 0
jmp 0x41a416
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
jne 0x41a442
cmp dword [ebp - 0xec], 0
jne 0x41a442
and dword [ebp - 0x28c], 0
jmp 0x41a44c
mov dword [ebp - 0x28c], 1
cmp dword [ebp - 0x28c], 9
jne 0x41a473
push 0
lea ecx, [ebp - 0x2bc]
call fcn.00401484
cmp dword [eax], 0
je 0x41a473
mov dword [ebp - 0x194], 1
jmp 0x41a47a
and dword [ebp - 0x194], 0
imul eax, dword [ebp - 0x194], 0xfff8
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3c8], eax
lea ecx, [ebp - 0x2bc]
call fcn.00411478
lea eax, [ebp + 0xc]
mov dword [ebp - 0x348], eax
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0xa4], 0
jmp 0x41a4d8
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x41a4f4
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x418], 1
jmp 0x41a4cb
cmp dword [ebp - 4], 0
je 0x41a51a
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x41a515
push 0
push 0xd22
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
jmp 0x41a6bb
mov dword [ebp - 0x58], 0xb441791e
mov dword [ebp - 0x2e8], 3
cmp dword [ebp - 4], 0
je 0x41a5a5
mov eax, dword [ebp - 4]
add eax, 0x8068
imul eax, dword [ebp - 4]
sub eax, 0x478c9dff
mov dword [ebp - 0x224], eax
jne 0x41a558
or eax, 0xffffffff
jne 0x41a558
and dword [ebp - 0x19c], 0
jmp 0x41a562
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x94], eax
jne 0x41a585
mov dword [ebp - 0x2e0], 1
jmp 0x41a58c
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3e0], eax
mov eax, 0x512d
test eax, eax
je 0x41a5a5
cmp dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 4]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 4]
jne 0x41a5c4
mov dword [ebp - 0x26c], 1
jmp 0x41a5cb
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x26c], eax
jle 0x41a5e2
mov dword [ebp - 0x1a4], 1
jmp 0x41a5e9
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1a4], eax
jl 0x41a600
mov dword [ebp - 0x340], 1
jmp 0x41a607
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jge 0x41a628
mov dword [ebp - 0x22c], 1
jmp 0x41a62f
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0xffffffff
je 0x41a644
mov dword [ebp - 0x1ac], 1
jmp 0x41a64b
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1ac], eax
jg 0x41a662
mov dword [ebp - 0x2ac], 1
jmp 0x41a669
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0
jl 0x41a67e
mov dword [ebp - 0x1b4], 1
jmp 0x41a685
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 4], 0
jmp 0x41a6a1
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x1a
jle 0x41a6bb
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x41a6b9
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x41a69a
mov dword [ebp - 4], 0
jmp 0x41a6cb
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x41a6f3
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x41a6f1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetParent]
jmp 0x41a6c4
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x310], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x74], 0xdb3ae355
mov dword [ebp - 0x74], 0
jmp 0x41a71c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xe
jl 0x41a7aa
mov dword [ebp - 0x78], 0xa473eb90
mov dword [ebp - 0x2f0], 7
mov dword [ebp - 0x78], 0
jmp 0x41a747
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffeb
jge 0x41a785
mov dword [ebp - 0x330], 0xffffffff
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x41a777
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x2f0], eax
jmp 0x41a740
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x41a7a5
push 0
push 0x563
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x41a715
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x14], 2
mov dword [ebp - 0x1bc], 0x780eec29
mov dword [ebp - 0x350], 0xdc509ca4
mov dword [ebp - 0x80], 0
jmp 0x41a7de
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x41a7f4
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x46c], 2
jmp 0x41a7d7
mov dword [ebp - 0x14], 0
jmp 0x41a804
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff8
jge 0x41aa12
mov dword [ebp - 0x88], 0xfffffff8
mov dword [ebp - 0x2f8], 0x7b187b35
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x41a836
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x41a84a
mov dword [ebp - 0x234], 1
jmp 0x41a851
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x274], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax - 0x46c], ecx
cmp dword [ebp - 0x274], 0x3e75
jge 0x41a8a8
cmp dword [ebp - 0x88], 0
jne 0x41a8a8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x46c], 0
jne 0x41a8a8
and dword [ebp - 0x1c4], 0
jmp 0x41a8b2
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x1c4], eax
jle 0x41a8cc
mov dword [ebp - 0x23c], 1
jmp 0x41a8d3
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0xffffffff
jae 0x41a8e8
mov dword [ebp - 0x1cc], 1
jmp 0x41a8ef
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0xfff9
jne 0x41a910
cmp dword [ebp - 0x88], 0
je 0x41a910
mov dword [ebp - 0x294], 1
jmp 0x41a917
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0x75ff
jg 0x41a92f
mov dword [ebp - 0x1d4], 1
jmp 0x41a936
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 1
jbe 0x41a94b
mov dword [ebp - 0x244], 1
jmp 0x41a952
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x244]
jg 0x41a969
mov dword [ebp - 0x1dc], 1
jmp 0x41a970
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1dc], eax
jne 0x41a987
mov dword [ebp - 0x27c], 1
jmp 0x41a98e
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
sub eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x14]
jge 0x41a9ab
mov dword [ebp - 0x1e4], 1
jmp 0x41a9b2
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1e4], eax
jne 0x41a9c9
mov dword [ebp - 0x24c], 1
jmp 0x41a9d0
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x350], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x46c], 0xbf5cd53b
ja 0x41a9fa
mov dword [ebp - 0x1ec], 1
jmp 0x41aa01
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x2f8], eax
jmp 0x41a7fd
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x41aa34
push 0
push 0
push 0x1dae
push 0x32e
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
mov eax, dword [ebp - 0x338]
movzx eax, byte [eax]
test eax, eax
je 0x41ad9f
mov dword [ebp - 0x3e8], 0x1928c176
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x41aa78
push 0
push 0x1c84
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x41aa91
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x308], 0x69ad59e5
mov dword [ebp - 0x68], 0
jmp 0x41aac3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x41aad9
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x324], 7
jmp 0x41aabc
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x41aaeb
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x324], ecx
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x334], eax
push 1
lea ecx, [ebp - 0x43c]
call fcn.004113a6
mov dword [ebp - 0x90], 0
jmp 0x41ab30
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x41ab52
push dword [ebp - 0x90]
lea ecx, [ebp - 0x43c]
call fcn.00401484
mov dword [eax], 1
jmp 0x41ab23
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x41ab86
push 0x1dc1
push 0x1e42
push 0xca6
push 0x1bad
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x41ab9f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
lea ecx, [ebp - 0x43c]
call fcn.00411478
mov eax, dword [ebp - 0x32c]
mov eax, dword [eax]
dec eax
not eax
mov ecx, dword [ebp - 0x318]
and eax, dword [ecx]
mov ecx, dword [ebp - 0x334]
mov dword [ecx], eax
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x64], 0xc42206dd
mov dword [ebp - 0x98], 0
jmp 0x41abec
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x41ac08
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x490], 0xfffffff7
jmp 0x41abdf
mov dword [ebp - 0x1c], 0
jmp 0x41ac18
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe6
jne 0x41ad11
mov dword [ebp - 0x54], 0xfffffffc
cmp dword [ebp - 0x54], 0
je 0x41ac44
mov eax, 0xbe4438b
test eax, eax
je 0x41ac44
mov dword [ebp - 0x284], 1
jmp 0x41ac4b
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x1c], 0x74952f34
jg 0x41ac72
mov dword [ebp - 0x100], 1
jmp 0x41ac79
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x54]
imul ecx, dword [ebp - 0x100], 0xffff
sub eax, ecx
cmp eax, 1
jbe 0x41ac99
mov dword [ebp - 0x1f4], 1
jmp 0x41aca0
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
dec eax
dec eax
cmp eax, dword [ebp - 0x54]
jle 0x41acb9
mov dword [ebp - 0x254], 1
jmp 0x41acc0
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0xdebf889e
jbe 0x41acd8
mov dword [ebp - 0x1fc], 1
jmp 0x41acdf
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x284], eax
jle 0x41acfc
mov dword [ebp - 0x204], 1
jmp 0x41ad03
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x64], eax
jmp 0x41ac11
mov dword [ebp - 0x1c], 0
jmp 0x41ad21
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffeb
jg 0x41ad95
mov dword [ebp - 0x25c], 0x886a6c65
mov dword [ebp - 0x64], 1
jmp 0x41ad41
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x41ad93
mov dword [ebp - 0x6c], 4
mov dword [ebp - 0x6c], 1
jmp 0x41ad5e
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x41ad84
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x41ad82
push 0x1709
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
jmp 0x41ad57
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
jmp 0x41ad3a
jmp 0x41ad1a
jmp 0x41b729
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x44c], 0x45f1dbec
mov dword [ebp - 0x3f8], 0x37ad4351
mov dword [ebp - 0x430], 0xe923e64f
mov dword [ebp - 0xa8], 0x11
jmp 0x41ade0
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffeb
je 0x41ae06
mov dword [ebp - 0xd4], 2
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
je 0x41ae04
jmp 0x41add3
jmp 0x41add3
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x28], 1
push 4
lea ecx, [ebp - 0xfc]
call fcn.004113a6
mov dword [ebp - 0x1a8], 0x8f9c3281
mov dword [ebp - 0x50], 0xf47f
push 3
lea ecx, [ebp - 0x3a0]
call fcn.004113a6
mov dword [ebp - 0xb0], 0xfc0266d9
mov dword [ebp - 0x1d0], 0xae883781
mov dword [ebp - 0xc], 0
jmp 0x41ae68
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x41ae84
push dword [ebp - 0xc]
lea ecx, [ebp - 0xfc]
call fcn.00401484
mov dword [eax], 0xa3df603f
jmp 0x41ae61
mov dword [ebp - 0xc], 0
jmp 0x41ae94
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x41aeaa
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xc8], 0xfffffffe
jmp 0x41ae8d
mov dword [ebp - 0xc], 0
jmp 0x41aeba
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x41aed6
push dword [ebp - 0xc]
lea ecx, [ebp - 0x3a0]
call fcn.00401484
mov dword [eax], 0xf947f9f4
jmp 0x41aeb3
mov dword [ebp - 0x28], 0
jmp 0x41aee6
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe4
jl 0x41b06a
mov dword [ebp - 0x24], 0x654fddd3
mov dword [ebp - 0x198], 0x68cd5467
mov dword [ebp - 0x24], 0
jmp 0x41af11
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x41b065
mov dword [ebp - 0x2d0], 2
mov dword [ebp - 0x2d4], 0xfffffffd
push dword [ebp - 0x24]
lea ecx, [ebp - 0xfc]
call fcn.00401484
cmp dword [eax], 0
jne 0x41b020
push dword [ebp - 0x24]
lea ecx, [ebp - 0xfc]
call fcn.00401484
cmp dword [eax], 0
je 0x41af6b
cmp dword [ebp - 0x24], 1
jle 0x41af6b
mov dword [ebp - 0x150], 1
jmp 0x41af72
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x150], eax
jne 0x41af8f
mov eax, 0xe76d
test eax, eax
jne 0x41af8f
and dword [ebp - 0x168], 0
jmp 0x41af99
mov dword [ebp - 0x168], 1
cmp dword [ebp - 0x168], 1
jle 0x41afae
mov dword [ebp - 0x170], 1
jmp 0x41afb5
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0
jl 0x41afca
mov dword [ebp - 0x178], 1
jmp 0x41afd1
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 8
jb 0x41afe6
mov dword [ebp - 0x180], 1
jmp 0x41afed
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0
jg 0x41b002
mov dword [ebp - 0x188], 1
jmp 0x41b009
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x188], eax
jg 0x41b020
and dword [ebp - 0x190], 0
jmp 0x41b02a
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x198], eax
jg 0x41b04d
mov dword [ebp - 0x1a0], 1
jmp 0x41b054
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x2d4], eax
jmp 0x41af0a
jmp 0x41aedf
cmp dword [ebp - 0x28], 0
je 0x41b1d7
push 0
lea ecx, [ebp - 0xfc]
call fcn.00401484
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x400], eax
mov esi, dword [ebp - 0x50]
push 2
lea ecx, [ebp - 0xfc]
call fcn.00401484
cmp esi, dword [eax]
jge 0x41b0b5
mov dword [ebp - 0xe4], 1
jmp 0x41b0bc
and dword [ebp - 0xe4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe4]
mov dword [ebp + eax - 0xc8], ecx
mov esi, dword [ebp - 0x50]
imul esi, dword [ebp - 0xe4]
push 1
lea ecx, [ebp - 0xfc]
call fcn.00401484
cmp dword [eax], esi
jne 0x41b0f6
mov dword [ebp - 0x1b0], 1
jmp 0x41b0fd
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xfffffff7
jne 0x41b112
mov dword [ebp - 0x1b8], 1
jmp 0x41b119
and dword [ebp - 0x1b8], 0
push 0
lea ecx, [ebp - 0xfc]
call fcn.00401484
mov ecx, dword [ebp - 0x1b8]
cmp ecx, dword [eax]
jl 0x41b13c
mov dword [ebp - 0xc0], 1
jmp 0x41b143
and dword [ebp - 0xc0], 0
push 2
lea ecx, [ebp - 0x3a0]
call fcn.00401484
mov ecx, dword [ebp - 0xc0]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0xfc]
call fcn.00401484
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
jne 0x41b17b
mov dword [ebp - 0x1c0], 1
jmp 0x41b182
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x28], eax
jge 0x41b1a5
mov dword [ebp - 0x1c8], 1
jmp 0x41b1ac
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x41b1d7
mov dword [ebp - 0x45c], 0xffd02046
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
jmp 0x41b2cf
mov dword [ebp - 0x2dc], 0xfffffffb
mov dword [ebp - 0x1e0], 0x49dda4ad
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x1d8], 3
mov dword [ebp - 0x50], 0
jmp 0x41b20f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x31
jge 0x41b2b8
mov dword [ebp - 0x2e4], 0xca5e
mov dword [ebp - 0x2fc], 0xd35
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x440], eax
mov eax, 0xa8b0
sub eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x1d8], eax
jge 0x41b283
mov dword [ebp - 0x2f4], 1
jmp 0x41b28a
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x410], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc8], 0
jmp 0x41b208
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x41b2cf
push 0x6fb
call dword [sym.imp.GDI32.dll_GetStockObject]
lea ecx, [ebp - 0x3a0]
call fcn.00411478
lea ecx, [ebp - 0xfc]
call fcn.00411478
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x5c], 4
mov dword [ebp - 0x230], 0x8c83b913
mov dword [ebp - 0xe0], 0xba27438e
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0x108], 9
mov dword [ebp - 0x444], 1
mov dword [ebp - 0xb8], 0
jmp 0x41b34a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x41b366
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x240], 0x3e7a3298
jmp 0x41b33d
mov dword [ebp - 8], 0
jmp 0x41b376
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x13
jl 0x41b55b
mov dword [ebp - 0xb4], 0x213a
mov dword [ebp - 0xd0], 0x3380ee91
mov dword [ebp - 0x200], 0x74defc7
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x228], 6
mov dword [ebp - 0x314], 3
cmp dword [ebp - 8], 1
jae 0x41b3ce
mov dword [ebp - 0x208], 1
jmp 0x41b3d5
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
add eax, dword [ebp - 8]
je 0x41b3e8
cmp dword [ebp - 0xb4], 0
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffc
jne 0x41b410
mov dword [ebp - 0x1e8], 1
jmp 0x41b417
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb4]
jg 0x41b42f
cmp dword [ebp - 8], 0
cmp dword [ebp - 0x5c], 0xfffffffa
jb 0x41b441
mov dword [ebp - 0x1f0], 1
jmp 0x41b448
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x1f0]
dec eax
cmp eax, 0xffffffff
je 0x41b466
mov dword [ebp - 0x1f8], 1
jmp 0x41b46d
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x208], eax
jl 0x41b493
mov dword [ebp - 0x210], 1
jmp 0x41b49a
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xfc1c5751
jb 0x41b4ac
cmp dword [ebp - 8], 0
je 0x41b4be
cmp dword [ebp - 0xd0], 0
je 0x41b4be
and dword [ebp - 0x218], 0
jmp 0x41b4c8
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0xd8], eax
je 0x41b4ee
mov dword [ebp - 0x220], 1
jmp 0x41b4f5
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x220]
sub ecx, dword [ebp - 0x228]
sub eax, ecx
je 0x41b51d
cmp dword [ebp - 0xd8], 0
je 0x41b51d
mov dword [ebp - 0x30c], 1
jmp 0x41b524
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x230]
sub eax, 0x7d436f9d
cmp eax, dword [ebp - 0x230]
jge 0x41b543
mov dword [ebp - 0x238], 1
jmp 0x41b54a
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x314], eax
jmp 0x41b36f
mov eax, 0x2e43
test eax, eax
je 0x41b62b
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
mov dword [ebp - 0x248], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x240], ecx
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x248]
sub eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 8]
jne 0x41b5c1
mov dword [ebp - 0x250], 1
jmp 0x41b5c8
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 0xff0f
jg 0x41b5e8
xor eax, eax
je 0x41b5e8
xor eax, eax
je 0x41b5e8
mov dword [ebp - 0x104], 1
jmp 0x41b5ef
and dword [ebp - 0x104], 0
imul eax, dword [ebp - 0x104], 0xc659
cmp eax, dword [ebp - 0x108]
jle 0x41b60d
mov dword [ebp - 0x110], 1
jmp 0x41b614
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 8]
je 0x41b62b
mov dword [ebp - 0x118], 1
jmp 0x41b632
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xffffffff
jae 0x41b653
mov dword [ebp - 0x120], 1
jmp 0x41b65a
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 0
jne 0x41b66f
mov dword [ebp - 0x128], 1
jmp 0x41b676
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x128], eax
jge 0x41b68d
mov dword [ebp - 0x130], 1
jmp 0x41b694
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x130]
jge 0x41b6bb
mov dword [ebp - 0x138], 1
jmp 0x41b6c2
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x138], eax
jne 0x41b6d9
mov dword [ebp - 0x140], 1
jmp 0x41b6e0
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x140], eax
je 0x41b6f7
mov dword [ebp - 0x148], 1
jmp 0x41b6fe
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xf0]
cmp dword [eax], 0
jge 0x41b729
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
add eax, 0x100
mov ecx, dword [ebp - 0xf0]
mov dword [ecx], eax
jmp 0x41b707
pop esi
mov esp, ebp
pop ebp
ret