Function at 0x42bb5c
Capabilities:
Get file system object information

Disassembly:
enter 0, 0
mov ebx, dword [0x43b41b]
push edx
push ebx
push 1
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
mov dword [0x43f0ad], ebx
mov ebx, dword [0x43b41b]
push edx
push ebx
push 2
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
mov dword [0x43f0b1], ebx
mov ebx, dword [0x43b41b]
mov edx, dword [0x43b41b]
push edx
push ebx
push 3
push edx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov edx, eax
add ebx, edx
mov dword [0x43f0a5], ebx
mov ebx, dword [0x43f0a5]
push edx
push ebx
push 2
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
mov dword [0x43f0b5], ebx
mov edx, dword [0x43f0a5]
mov ebx, dword [0x43f0a5]
push edx
push ebx
push 2
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
add edx, ebx
mov dword [0x43f0d9], edx
mov ebx, dword [0x43b477]
neg ebx
push ebx
push 2
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
mov dword [0x43f0dd], ebx
mov eax, dword [0x43f0ad]
add eax, dword [0x43f0ad]
add eax, dword [0x43f0a5]
add eax, dword [0x43f0a5]
add eax, dword [0x43f0a5]
add eax, dword [0x43f0b5]
add eax, dword [0x43f0b5]
mov dword [0x43ea8e], eax
mov eax, dword [0x43ea8e]
cmp dword [0x43ea76], eax
jae 0x42bc56
mov eax, dword [0x43ea8e]
mov dword [0x43ea76], eax
mov eax, dword [0x43f0b1]
add eax, dword [0x43f0a5]
add eax, dword [0x43f0dd]
add eax, dword [0x43f0e1]
add eax, dword [0x43eaa6]
add eax, dword [0x43eaaa]
mov dword [0x43ea7a], eax
mov eax, dword [0x4447f1]
sub eax, dword [0x43ea76]
shr eax, 1
mov dword [0x43ea6e], eax
mov eax, dword [0x4447f5]
sub eax, dword [0x43ea7a]
shr eax, 1
mov dword [0x43ea72], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43ea6e]
mov dword [0x44873b], eax
mov eax, dword [0x43ea72]
mov dword [0x44873f], eax
mov eax, dword [0x43ea76]
mov dword [0x448743], eax
mov eax, dword [0x43ea7a]
mov dword [0x448747], eax
mov eax, dword [0x43ea92]
mov dword [0x44877b], eax
mov eax, dword [0x43ea8a]
mov dword [0x448787], eax
mov eax, dword [0x43ea96]
mov dword [0x4487ff], eax
mov eax, dword [0x43ea96]
mov dword [0x4487f7], eax
mov eax, dword [0x43ea96]
mov dword [0x4487fb], eax
mov eax, dword [0x43ea96]
mov dword [0x448803], eax
mov dword [0x44878f], 5
mov dword [0x448793], 4
mov dword [0x44877f], 0xff
mov eax, dword [0x43ea92]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487ef], 1
mov dword [0x4487d7], 1
mov dword [0x44880b], 0x190
mov dword [0x4487f3], 6
mov dword [0x4487cb], 0x43ead2
mov dword [0x448807], 0x44788c
mov dword [0x4488d3], 2
mov dword [0x4488cf], 0x42f1f0
mov dword [0x4487c7], 0x22
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43ee6c
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43ea76]
sub eax, dword [0x43eaa2]
sub eax, dword [0x43f080]
sub eax, dword [0x43f08e]
sub eax, dword [0x43ea86]
sub eax, dword [0x43ea8a]
mov dword [0x43ea9a], eax
mov eax, dword [0x43ea7a]
sub eax, dword [0x43eaa6]
sub eax, dword [0x43ea8a]
sub eax, dword [0x43eaaa]
mov dword [0x43ea9e], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43ea9a]
mov dword [0x44873b], eax
mov eax, dword [0x43ea9e]
mov dword [0x44873f], eax
mov eax, dword [0x43eaa2]
mov dword [0x448743], eax
mov eax, dword [0x43eaa6]
mov dword [0x448747], eax
mov eax, dword [0x43eaae]
mov dword [0x44877b], eax
mov dword [0x44878f], 0
mov dword [0x448793], 0
mov eax, dword [0x43eab6]
mov dword [0x44877f], eax
mov eax, dword [0x43eaae]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov dword [0x4487cb], 0x43eace
mov dword [0x448807], 0x4478a0
mov dword [0x4487c7], 0x1006
mov eax, dword [0x43ee6c]
mov dword [0x448863], eax
push 0x43ee70
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43ea9a]
add eax, dword [0x43eaa2]
sub eax, 2
mov dword [0x43f07c], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43f07c]
mov dword [0x44873b], eax
mov eax, dword [0x43ea9e]
mov dword [0x44873f], eax
mov eax, dword [0x43f080]
mov dword [0x448743], eax
mov eax, dword [0x43eaa6]
mov dword [0x448747], eax
mov eax, dword [0x43eaae]
mov dword [0x44877b], eax
mov dword [0x44878f], 0
mov dword [0x448793], 0
mov eax, dword [0x43eab6]
mov dword [0x44877f], eax
mov eax, dword [0x43eaae]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov dword [0x4487cb], 0x43f084
mov dword [0x448807], 0x4478a0
mov dword [0x4487c7], 0x1006
mov eax, dword [0x43ee6c]
mov dword [0x448863], eax
push 0x43f086
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43f07c]
add eax, dword [0x43f080]
mov dword [0x43f08a], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43f08a]
mov dword [0x44873b], eax
mov eax, dword [0x43ea9e]
mov dword [0x44873f], eax
mov eax, dword [0x43f08e]
mov dword [0x448743], eax
mov eax, dword [0x43eaa6]
mov dword [0x448747], eax
mov eax, dword [0x43eaae]
mov dword [0x44877b], eax
mov dword [0x44878f], 0
mov dword [0x448793], 0
mov eax, dword [0x43eab6]
mov dword [0x44877f], eax
mov eax, dword [0x43eaae]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov dword [0x4487cb], 0x43f092
mov dword [0x448807], 0x4478a0
mov dword [0x4487c7], 0x1006
mov eax, dword [0x43ee6c]
mov dword [0x448863], eax
push 0x43f099
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x43b1bf]
mov eax, dword [edi]
mov dword [0x43f0b9], eax
mov dword [0x43f0bd], 0
mov eax, dword [0x43f0ad]
mov dword [0x43f09d], eax
mov eax, dword [0x43f0b1]
mov dword [0x43f0a1], eax
mov dword [0x43f0c1], 0x43ee74
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43f09d]
mov dword [0x44873b], eax
mov eax, dword [0x43f0a1]
mov dword [0x44873f], eax
mov eax, dword [0x43f0a5]
mov dword [0x448743], eax
mov eax, dword [0x43f0a5]
mov dword [0x448747], eax
mov eax, dword [0x43f0a9]
mov dword [0x44877b], eax
mov dword [0x448813], 0x7b
mov dword [0x4487c7], 0x1002
mov eax, dword [0x43ee6c]
mov dword [0x448863], eax
push dword [0x43f0c1]
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43f0a5]
sub eax, dword [0x43b41b]
shr eax, 1
mov dword [0x43f0c9], eax
mov dword [0x43f0cd], eax
mov edi, dword [0x43b1bf]
mov ebx, dword [edi]
cmp ebx, 0
jne 0x42cb93
mov dword [0x43eabe], 0x12c
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43eabe
push 0x43eae2
push 0
push dword [ebp + 8]
push 2
push 0
call sub.SHLWAPI.dll_AssocQueryStringA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
jne 0x4139a0
jmp 0x42cbc9
mov esi, dword [0x43b1bf]
add esi, 0x130
mov edx, 0x12c
push ebx
push dword [0x43f0bd]
push edx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov edx, eax
add esi, edx
pushal
push 0x12c
push 0x43eae2
push esi
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43eae2
call dword [0x43a05c]
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43eac6], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push eax
call dword [0x43a060]
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
push eax
push 0x43ed3a
push dword [0x43eac6]
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
mov edi, 0x43eae2
push ebx
push ecx
push edx
push esi
push edi
push ebp
push pe_nt_image_headers32
push 0x160
push 0x4483fd
push 0
push edi
call sub.SHELL32.dll_SHGetFileInfo
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x4139a0
mov esi, dword [0x43f0c1]
mov edi, dword [esi]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 3
push 0
push 0
push dword [0x43b41b]
push dword [0x43b41b]
push dword [0x4483fd]
push dword [0x43f0cd]
push dword [0x43f0c9]
push dword [edi + 0x68]
call sub.user32.dll_DrawIconEx
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x4139a0
pushal
mov edi, edi
mov esi, dword [edi + 0x128]
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [esi + 0x114]
push dword [esi + 0x1c]
push dword [esi + 0x18]
push dword [edi + 4]
push dword [edi]
call fcn.00434d99
popal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x4483fd]
call sub.user32.dll_DestroyIcon
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov eax, dword [0x43f0d9]
sub eax, dword [0x43f0a5]
shr eax, 1
mov ebx, dword [0x43f09d]
sub ebx, eax
mov dword [0x43f0d1], ebx
mov eax, dword [0x43f0a1]
add eax, dword [0x43f0a5]
mov dword [0x43f0d5], eax
add dword [0x43f0c1], 4
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43f0d1]
mov dword [0x44873b], eax
mov eax, dword [0x43f0d5]
mov dword [0x44873f], eax
mov eax, dword [0x43f0d9]
mov dword [0x448743], eax
mov eax, dword [0x43f0dd]
mov dword [0x448747], eax
mov eax, dword [0x43f0e5]
mov dword [0x44877b], eax
mov dword [0x44878f], 0
mov dword [0x448793], 0
mov dword [0x44877f], 0
mov eax, dword [0x43f0e5]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487d7], 1
mov dword [0x4487f3], 2
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov dword [0x4487cb], 0x43ed3a
mov dword [0x448807], 0x4478a0
mov dword [0x4487c7], 0x11006
mov eax, dword [0x43ee6c]
mov dword [0x448863], eax
push dword [0x43f0c1]
push 0x44873b
call fcn.00430ca3
add dword [0x43f0c1], 4
mov eax, dword [0x43f0a5]
add dword [0x43f09d], eax
mov eax, dword [0x43f0b5]
add dword [0x43f09d], eax
inc dword [0x43f0bd]
dec dword [0x43f0b9]
js 0x42d00a
jne 0x42c8c8
pushal
mov edi, dword [0x43ee6c]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [edi + 0x68]
push dword [edi + 0xc]
push dword [edi + 8]
push 0
push 0
push dword [edi + 0x64]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov esi, dword [edi + 0x128]
cmp esi, 0
jne 0x42d057
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
jmp 0x42d08a
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x447bae
push dword [0x44471b]
push dword [esi + 0x94]
call sub.user32.dll_MapWindowPoints
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [0x43a7d6]
push dword [0x43a7d2]
push dword [0x43a7ce]
push dword [0x447bb2]
push dword [0x447bae]
call fcn.00434d99
popal
pushal
mov edi, dword [0x43ee6c]
mov eax, dword [0x444733]
mov dword [edi + 0x1e4], eax
mov eax, dword [0x444737]
mov dword [edi + 0x1e8], eax
mov eax, dword [0x4447f9]
mov dword [edi + 0x1ec], eax
mov eax, edi
mov dword [0x444733], eax
popal
leave
ret 4