Function at 0x440e29
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf0
push ebx
push esi
mov byte [ebp - 0x24], cl
xor esi, esi
mov dword [ebp - 8], 0xfffffffa
inc esi
mov dword [ebp - 0xc], 8
xor ebx, ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x14], 0xfffffffc
push edi
mov dword [ebp - 8], ebx
jmp 0x440ef0
mov dword [ebp - 4], 9
xor ecx, ecx
mov dword [ebp - 0xc], esi
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
test eax, eax
setns cl
xor edx, edx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
cmp ecx, eax
setne dl
mov dword [ebp - 0xc], edx
mov edx, 0xa2c930f8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
sub eax, 0xea3de81d
neg eax
sbb eax, eax
inc eax
sub edx, eax
mov eax, dword [ebp - 8]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 4]
setge cl
dec eax
add ecx, eax
xor edx, edx
imul ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
xor ecx, ecx
cmp edx, esi
setl cl
xor eax, eax
cmp ecx, 0xb72b
setle al
mov dword [ebp - 0x14], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xb
jg 0x440e5d
mov dword [ebp - 0x14], 0xfffffffe
push 3
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 4], ebx
pop edi
jmp 0x440f1e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x38], 0xfffffffa
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x440f10
push 2
pop edx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x440ff2
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x38]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
je 0x440f85
mov dword [ebp - 4], ebx
jmp 0x440f76
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf0], 5
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x440f65
cmp dword [ebp - 0xec], ebx
jne 0x440fef
jmp 0x440fe6
mov dword [ebp - 0x14], 0x589d
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x38], ebx
je 0x440f9c
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add ecx, 9
cmp ecx, esi
mov dword [ebp + eax*4 - 0x38], ecx
mov eax, dword [ebp - 4]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x14]
setle cl
xor edx, edx
cmp ecx, 0xbc62
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x10]
jns 0x440f32
push 2
pop edx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], ebx
jl 0x4410a1
mov dword [ebp - 0xc], 0x808adc70
mov dword [ebp - 0xc], ebx
jmp 0x44108f
mov dword [ebp - 4], 0xfffffff6
mov dword [ebp - 0x14], 0xfffffff9
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x38], ecx
mov dword [ebp - 4], ebx
jmp 0x441087
mov dword [ebp - 0x18], 0xf3bc9fc2
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x38], esi
jle 0x441056
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x38], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
xor ecx, ecx
add eax, 8
cmp eax, esi
setl cl
cmp ecx, dword [ebp - 0x10]
jl 0x44106f
mov eax, esi
cmp dword [ebp - 0xc], ebx
jne 0x441071
mov eax, ebx
add eax, 0x838a6d20
jne 0x44107f
mov eax, ebx
cmp dword [ebp - 0x14], ebx
je 0x441081
mov eax, esi
mov dword [ebp - 0x18], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jle 0x44102e
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jle 0x44100d
dec dword [ebp - 0x10]
jns 0x440ffe
mov dword [ebp - 0x18], 0xffffffff
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], 0x921e124d
mov dword [ebp - 4], ebx
push edi
call fcn.004011bf
mov dword [ebp - 0xc], ebx
mov eax, 0xcb314b81
push 0xfffffffffffffffa
pop edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 4], ebx
jmp 0x441103
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x94]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x4410f3
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 0x27213ec7
je 0x441124
mov ecx, esi
cmp dword [ebp - 0x18], ebx
jne 0x441126
mov ecx, ebx
xor eax, eax
cmp ecx, edx
setle al
xor edx, edx
imul ecx, eax, 0xffff
mov eax, dword [ebp - 0x10]
inc ecx
cmp ecx, eax
setg dl
neg edx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
lea ecx, [ebp - 0x94]
dec dword [ebp - 8]
call fcn.00401291
mov dword [ebp - 0x14], 0xf09c
mov dword [ebp - 0x10], 0xef2c3654
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0xc], 0x6e54ee87
mov dword [ebp - 0x20], 0x7cfaf42
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 4], 0x42477066
mov dword [ebp - 0x28], 0xae65c342
mov dword [ebp - 8], ebx
jmp 0x4411a7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x74], 0xab5457d6
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x441199
mov dword [ebp - 8], ebx
jmp 0x4411c2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xe4], 0xf204795e
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x4411b1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
dec edx
neg edx
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
xor ebx, ebx
cmp ecx, 0xffffffff
setge bl
sub ebx, dword [ebp - 0x18]
neg ebx
sbb ebx, ebx
xor edx, edx
neg ebx
inc dword [ebp - 0xdc]
mov esi, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x74], ecx
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
setl dl
add edx, ebx
xor ebx, ebx
add ecx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge bl
xor edx, edx
imul ebx, esi
cmp eax, ebx
mov eax, dword [ebp - 4]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 4]
setle cl
xor edx, edx
xor esi, esi
inc esi
cmp ecx, esi
setg dl
inc eax
add eax, edx
xor edx, edx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], 0xbeccce1e
mov dword [ebp - 0x18], 6
mov dword [ebp - 8], 0xf4399391
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], 0xc96c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp eax, ecx
setle dl
sub edx, 0x62a96950
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
je 0x4412c8
mov dword [ebp - 0x14], 5
xor ebx, ebx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
jmp 0x4413a1
mov dword [ebp - 4], 7
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], 0x85ca7db
mov dword [ebp - 0x20], 0x43ca3807
mov dword [ebp - 0xc], ebx
jmp 0x4412f5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x50], 0x5b872a60
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x4412e7
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
xor edx, edx
imul eax, ecx, 0xfffa
add eax, 7
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setle dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 8]
je 0x441336
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
cmp eax, 0xe5e2
mov eax, dword [ebp - 4]
setg cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, 0xd594399
imul edx, dword [ebp - 8]
cmp edx, 0x1183
jne 0x441372
mov ecx, ebx
cmp dword [ebp - 0x50], ebx
je 0x441374
mov ecx, esi
mov eax, dword [ebp - 0x20]
add eax, ecx
cmp eax, dword [ebp - 0x10]
je 0x441385
mov eax, esi
cmp dword [ebp - 0x10], ebx
jne 0x441387
mov eax, ebx
add eax, 0x5d478cec
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x4413a1
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x14], 0xfffffffc
push 4
call fcn.004011bf
push 3
mov dword [ebp - 8], ebx
pop edx
jmp 0x4413ce
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x44], 0x8f69f7fd
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x4413c0
mov dword [ebp - 8], ebx
jmp 0x4413e7
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x4413d8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x441409
push 0x19be
push 0x6b9
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub ecx, 7
neg ecx
sbb ecx, ecx
add eax, 9
inc ecx
xor edx, edx
add eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setl dl
mov dword [ebp - 0x14], edx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov ecx, dword [ebp - 0x44]
setne dl
xor eax, eax
cmp edx, 0x6ec7
setne al
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x40]
cmp eax, ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xa0]
setg dl
imul ecx, edx
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xa0]
call fcn.00401291
cmp byte [ebp - 0x24], 0
je 0x4415b6
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 4], ebx
jmp 0x44149e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x7c], 0x710dd01
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x441490
mov dword [ebp - 4], 0xfffffffd
mov dword [ebp - 4], ebx
jmp 0x441591
or eax, 0xffffffff
mov dword [ebp - 8], 0xe64f
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x14], 0x77904128
cmp dword [ebp - 4], esi
mov eax, dword [ebp - 8]
sbb edx, edx
xor ebx, ebx
inc edx
imul edx, eax
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
sub ecx, edx
cmp ecx, eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
setg bl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 8]
setl dl
xor eax, eax
cmp edx, ebx
setne al
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 4]
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x14]
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xff5452fa
setne al
xor ecx, ecx
cmp eax, 0xfffffff9
mov eax, 0xf58aae07
setl cl
cmp eax, ecx
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, dword [ebp - 0x14]
jle 0x44155f
mov dword [ebp - 0x20], 0xc3f30b9
cmp dword [ebp - 0x20], ecx
jne 0x44159b
jmp 0x44158e
mov dword [ebp - 8], ecx
jmp 0x441579
mov dword [ebp - 0x14], 0xb8cff26a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x14], ecx
jne 0x44157f
inc dword [ebp - 8]
cmp dword [ebp - 8], 9
jne 0x441564
mov byte [ebp - 0x19], cl
cmp byte [ebp - 0x19], cl
je 0x44158e
push ecx
call dword [sym.imp.USER32.dll_CharUpperW]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffff3
je 0x4414b3
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
test eax, eax
jns 0x4419ec
add eax, 0x100
js 0x4415a8
mov dword [ecx], eax
jmp 0x4419ec
mov dword [ebp - 0x18], 0xea5d6c05
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xc], 8
push esi
call fcn.004011bf
mov dword [ebp - 4], ebx
jmp 0x4415e8
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0xd9964374
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x4415d5
mov dword [ebp - 0x18], 4
jmp 0x4416bf
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x20], 0xb653b1da
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], ebx
jmp 0x44161d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x4c], 0x30a9bca7
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44160f
mov ecx, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xc]
setg dl
add eax, edx
add ecx, eax
imul ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x18]
imul eax, ecx, 0xc821
test eax, eax
jne 0x441653
mov eax, ebx
cmp dword [ebp - 0xc], ebx
je 0x441655
mov eax, esi
xor ecx, ecx
cmp eax, 0x193fe696
mov eax, dword [ebp - 0x18]
setge cl
imul ecx, eax
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0xc]
sub ecx, eax
je 0x441676
mov ecx, esi
cmp dword [ebp - 0x48], ebx
jne 0x441678
mov ecx, ebx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, 0x8c98aac1
cmp eax, ecx
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setge cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
neg eax
cmp eax, dword [ebp - 0xc]
jne 0x4416b1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1d
je 0x4415f9
lea ecx, [ebp - 0x88]
call fcn.00401291
mov dword [ebp - 0x14], 0x24ce5545
mov eax, 0xd29ed7d4
mov dword [ebp - 8], 0x51d52aa0
mov dword [ebp - 0xc], 6
mov dword [ebp - 4], 0x59ea4d59
mov dword [ebp - 0x18], 0x2273
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x14], esi
ja 0x441717
mov dword [ebp - 8], 5
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
sub eax, 0xe507
cmp eax, 0xffffffff
setge cl
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 8], 9
jbe 0x441749
mov eax, esi
cmp dword [ebp - 8], ebx
jne 0x44174b
mov eax, ebx
cmp eax, dword [ebp - 0xc]
je 0x44187d
mov dword [ebp - 0x14], 0x9191d4d0
mov dword [ebp - 0x20], 0x1f7fc01a
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], 0xfffffff9
je 0x441875
push 3
mov eax, 0xfe0855bb
pop edx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edx
jg 0x441868
mov dword [ebp - 8], 0x958a82d8
mov dword [ebp - 8], ebx
jmp 0x4417ec
mov dword [ebp - 0x10], 0x1cd25bb5
dec dword [ebp - 0x10]
mov dword [ebp - 4], ebx
jmp 0x4417e4
mov dword [ebp - 0x10], ebx
jmp 0x4417bb
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x60], ebx
jne 0x4417c0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x4417af
mov dword [ebp - 0x10], ebx
jmp 0x4417dc
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x60], ebx
jne 0x4417e1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
inc ecx
mov dword [ebp + eax*4 - 0x60], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x4417c5
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jle 0x4417aa
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jle 0x44179b
mov eax, dword [ebp - 0x68]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x68]
cmp eax, 0xfffffff6
mov eax, dword [ebp - 0x14]
setl cl
sub ecx, eax
jne 0x44181a
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xfffffff6
jl 0x441839
cmp dword [ebp - 0x6c], ebx
je 0x441839
mov ecx, esi
cmp dword [ebp - 0xc], ebx
jne 0x44183b
mov ecx, ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
imul eax, ecx
test eax, eax
je 0x44184c
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60], 0x57dc510c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x44178f
mov eax, 0xfe0855bb
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffff9
jne 0x441777
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
jmp 0x44188a
mov dword [ebp - 0x20], 0x70d16aae
mov eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0xfffffffb
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x18], ebx
jmp 0x4418ab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c], 0xbdde0bcd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x44189d
mov dword [ebp - 0x18], ebx
jmp 0x4418c2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x4418b5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4418d8
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0xc], ebx
jmp 0x44197b
mov dword [ebp - 0x28], 0xe86a6760
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x2c], ebx
je 0x441941
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x44194f
push 0x5a2
push 0x1e6e
push 0x1a77
push ebx
push 0xc77
push 0x467
call edi
push eax
call esi
push eax
push 0x1b18
push 0x19d9
push 0x4d1
push 0xf05
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
jmp 0x44194f
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x2c], ecx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0x28]
cmp eax, 0xaa47
setg cl
lea eax, [edx + ecx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xc0], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jle 0x4418e6
push 2
lea ecx, [ebp - 0xbc]
call fcn.004011bf
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 4], ebx
jmp 0x4419ad
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xbc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44199d
inc dword [ebp - 0x14]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4419db
push 0x392
push ebx
push 0x1a26
push 0xab
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
lea ecx, [ebp - 0xbc]
call fcn.00401291
mov eax, dword [ebp + 8]
add dword [eax], 0xb
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret