Function at 0x41bbaa
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x472fd1
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
push ebx
push esi
mov eax, dword [0x48a3c0]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov ecx, dword [edi + 4]
lea eax, [esp + 0x64]
push eax
push ecx
mov dword [edi + 0xb00], esi
call dword [sym.imp.USER32.dll_GetClientRect]
cmp esi, 0xb
ja case.default.0x41b0f1
jmp dword [esi*4 + 0x41dc4c]
mov eax, dword [edi + 0x1a4]
lea ebx, [edi + 0x1a0]
mov edx, eax
and edx, 1
jne 0x41b124
mov ecx, dword [ebx + 0x1c]
or eax, 1
mov dword [ebx + 4], eax
test ecx, ecx
je 0x41b124
mov eax, dword [ecx]
push edx
push 1
push edx
mov edx, dword [eax + 0x28]
push ebx
call edx
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41b152
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b152
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41b180
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b180
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41b1ae
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b1ae
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41b1dc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b1dc
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
je 0x41b20a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b20a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 4
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
je 0x41b246
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b246
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea edx, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
je 0x41b274
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b274
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xc4]
push eax
lea esi, [esp + 0x1c]
call fcn.00440ec0
mov dword [esp + 0x80], 0
mov eax, dword [eax]
push eax
push ebx
call fcn.00452eb0
or ebx, 0xffffffff
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov ecx, dword [edi + 0xa10]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push ecx
call esi
mov edx, dword [edi + 0x9c8]
push 5
push edx
call esi
mov eax, dword [edi + 0xc4]
push eax
lea esi, [esp + 0x20]
call fcn.00440e90
mov dword [esp + 0x80], 1
mov eax, dword [eax]
push eax
push edi
call fcn.0041a8e0
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov ecx, dword [edi + 0xc4]
push ecx
lea esi, [esp + 0x28]
call fcn.00440e60
mov dword [esp + 0x80], 2
mov edx, dword [eax]
mov eax, dword [edx - 0xc]
mov dword [esp + 0x14], 1
test eax, eax
jle 0x41b348
mov eax, dword [edi + 0xc4]
push eax
lea esi, [esp + 0x24]
call fcn.00440e30
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
mov dword [esp + 0x14], 3
mov byte [esp + 0x13], 1
jg 0x41b34d
mov byte [esp + 0x13], 0
test byte [esp + 0x14], 2
je 0x41b362
and dword [esp + 0x14], 0xfffffffd
lea eax, [esp + 0x20]
call fcn.004568e0
mov dword [esp + 0x80], ebx
test byte [esp + 0x14], 1
je 0x41b379
lea eax, [esp + 0x24]
call fcn.004568e0
cmp byte [esp + 0x13], 0
je 0x41b3eb
mov edx, dword [edi + 0xc4]
push edx
lea esi, [esp + 0x2c]
call fcn.00440e60
mov dword [esp + 0x80], 3
mov eax, dword [eax]
push eax
push 0x8009
lea esi, [edi + 0x944]
push str.underlineabutton:_d_s_a_underline
push esi
call fcn.0044f030
add esp, 0x10
lea eax, [esp + 0x28]
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov eax, dword [esi + 4]
test al, 1
jne 0x41b416
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
test ecx, ecx
je 0x41b416
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
jmp 0x41b416
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41b416
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b416
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
test al, 1
je 0x41b441
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b441
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41b46c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b46c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea edx, [edi + 0x3a8]
test al, 1
je 0x41b497
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b497
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41b4c2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b4c2
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41b4ed
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b4ed
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41b518
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b518
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41b543
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b543
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41b56e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b56e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ec]
lea edx, [edi + 0x4e8]
test al, 1
je 0x41b599
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b599
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x56c]
lea edx, [edi + 0x568]
test al, 1
je 0x41b5c4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b5c4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41b5ef
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b5ef
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x62c]
lea edx, [edi + 0x628]
test al, 1
je 0x41b61a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b61a
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ec]
lea edx, [edi + 0x5e8]
test al, 1
je 0x41b645
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b645
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ac]
lea edx, [edi + 0x5a8]
test al, 1
je 0x41b670
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b670
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
jne 0x41b69b
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b69b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [0x48cc58], 0
je case.default.0x41b0f1
push str.popform_special
push str.action_s
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
mov ecx, 0x490040
call fcn.0045dc00
add esp, 0x10
mov dword [0x48cc58], 0
jmp case.default.0x41b0f1
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41b701
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41b701
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41b72d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41b72d
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41b759
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41b759
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41b785
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41b785
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41b7b1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41b7b1
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
je 0x41b7dd
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41b7dd
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 4
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41b817
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41b817
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41b843
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41b843
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x2c]
push ecx
mov ecx, 0x9d82
call fcn.00454940
mov dword [esp + 0x80], 4
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
or ebx, 0xffffffff
lea eax, [esp + 0x2c]
mov dword [esp + 0x80], ebx
call fcn.004568e0
lea esi, [esp + 0x30]
call fcn.00440e10
mov dword [esp + 0x80], 5
mov eax, dword [eax]
push eax
lea eax, [edi + 0x1a0]
push eax
call fcn.00452eb0
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41b8d5
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b8d5
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xa10]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [edi + 0x9c8]
push 5
push ecx
call esi
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
test al, 1
je 0x41b91c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b91c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41b947
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b947
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea edx, [edi + 0x3a8]
test al, 1
je 0x41b972
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b972
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41b99d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b99d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41b9c8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b9c8
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41b9f3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41b9f3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41ba1e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ba1e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41ba49
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ba49
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41ba74
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ba74
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41ba9f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41ba9f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [edi + 0x4e8]
mov eax, dword [edx + 4]
test al, 1
je 0x41bac7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bac7
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x62c]
lea edx, [edi + 0x628]
test al, 1
je 0x41baf2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41baf2
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ec]
lea edx, [edi + 0x5e8]
test al, 1
je 0x41bb1d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bb1d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ac]
lea edx, [edi + 0x5a8]
test al, 1
je 0x41bb48
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bb48
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [edi + 0x568]
mov eax, dword [edx + 4]
test al, 1
jne 0x41bb70
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bb70
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [0x48cc60], 0
je case.default.0x41b0f1
push str.popform_msb
push str.action_s
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
mov ecx, 0x490040
call fcn.0045dc00
add esp, 0x10
mov dword [0x48cc60], 0
jmp case.default.0x41b0f1
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41bbd6
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41bbd6
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41bc02
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41bc02
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41bc2e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41bc2e
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41bc5a
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41bc5a
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
je 0x41bc86
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41bc86
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 4
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
je 0x41bcc0
mov ecx, dword [esi + 0x1c]
and eax, 0xfffffffe
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41bcc0
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41bcec
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41bcec
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, 0x9d6b
call fcn.00454940
mov dword [esp + 0x80], 6
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
or ebx, 0xffffffff
lea eax, [esp + 0x34]
mov dword [esp + 0x80], ebx
call fcn.004568e0
lea esi, [esp + 0x38]
call fcn.00440e10
mov dword [esp + 0x80], 7
mov eax, dword [eax]
push eax
lea eax, [edi + 0x1a0]
push eax
call fcn.00452eb0
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41bd7e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bd7e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41bda9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bda9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41bdd4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bdd4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xa10]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [edi + 0x9c8]
push 5
push ecx
call esi
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
test al, 1
je 0x41be1b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41be1b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41be46
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41be46
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41be71
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41be71
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41be9c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41be9c
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41bec7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bec7
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41bef2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bef2
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ec]
lea edx, [edi + 0x4e8]
test al, 1
je 0x41bf1d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bf1d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41bf48
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bf48
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x56c]
lea edx, [edi + 0x568]
test al, 1
je 0x41bf73
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bf73
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x62c]
lea edx, [edi + 0x628]
test al, 1
je 0x41bf9e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bf9e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ec]
lea edx, [edi + 0x5e8]
test al, 1
je 0x41bfc9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bfc9
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ac]
lea edx, [edi + 0x5a8]
test al, 1
je 0x41bff4
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41bff4
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
test al, 1
jne 0x41c01f
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c01f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea esi, [edi + 0x3a8]
mov ecx, eax
shr ecx, 2
not ecx
test cl, 1
je 0x41c052
or eax, 4
mov ecx, dword [esi + 0x1c]
mov dword [esi + 4], eax
test ecx, ecx
je 0x41c052
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 0
push 0
push esi
call eax
mov eax, dword [esi + 4]
test al, 1
jne 0x41bb70
or eax, 1
mov dword [esi + 4], eax
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x41bb70
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push 0
push 1
push 0
push esi
call eax
jmp 0x41bb70
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41c0ad
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c0ad
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41c0d9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c0d9
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41c105
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c105
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41c131
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c131
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41c15d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c15d
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
je 0x41c189
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c189
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 4
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41c1c3
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41c1c3
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41c1ef
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41c1ef
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x3c]
push ecx
mov ecx, 0x9d85
call fcn.00454940
mov dword [esp + 0x80], 8
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
or ebx, 0xffffffff
lea eax, [esp + 0x3c]
mov dword [esp + 0x80], ebx
call fcn.004568e0
lea esi, [esp + 0x40]
call fcn.00440e10
mov dword [esp + 0x80], 9
mov eax, dword [eax]
push eax
lea eax, [edi + 0x1a0]
push eax
call fcn.00452eb0
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41c281
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c281
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41c2ac
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c2ac
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xa10]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [edi + 0x9c8]
push 5
push ecx
call esi
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41c2f3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c2f3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
test al, 1
je 0x41c31e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c31e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41c349
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c349
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea edx, [edi + 0x3a8]
test al, 1
je 0x41c374
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c374
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41c39f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c39f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41c3ca
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c3ca
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41c3f5
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c3f5
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41c420
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c420
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ec]
lea edx, [edi + 0x4e8]
test al, 1
je 0x41c44b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c44b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [edi + 0x4a8]
jmp 0x41baa5
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41c482
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c482
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41c4ae
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c4ae
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41c4da
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c4da
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41c506
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c506
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41c532
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c532
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
jne 0x41c55e
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c55e
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 2
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41c598
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41c598
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41c5c4
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41c5c4
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x44]
push ecx
mov ecx, 0x9d5b
call fcn.00454940
mov dword [esp + 0x80], 0xa
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
or ebx, 0xffffffff
lea eax, [esp + 0x44]
mov dword [esp + 0x80], ebx
call fcn.004568e0
lea esi, [esp + 0x48]
call fcn.00440e10
mov dword [esp + 0x80], 0xb
mov eax, dword [eax]
push eax
lea eax, [edi + 0x1a0]
push eax
call fcn.00452eb0
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41c656
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c656
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41c681
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c681
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41c6ac
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c6ac
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xa10]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [edi + 0x9c8]
push 5
push ecx
call esi
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
test al, 1
je 0x41c6f3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c6f3
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41c71e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c71e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea edx, [edi + 0x3a8]
test al, 1
je 0x41c749
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c749
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41c774
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c774
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41c79f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c79f
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41c7ca
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c7ca
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41c7f5
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c7f5
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41c820
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c820
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x56c]
lea edx, [edi + 0x568]
test al, 1
je 0x41c84b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c84b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x62c]
lea edx, [edi + 0x628]
test al, 1
je 0x41c876
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c876
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ec]
lea edx, [edi + 0x5e8]
test al, 1
je 0x41c8a1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c8a1
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ac]
lea edx, [edi + 0x5a8]
test al, 1
je 0x41c8cc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41c8cc
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [edi + 0x4e8]
jmp 0x41bb4e
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41c903
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c903
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov ecx, edi
call fcn.00418a30
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41c936
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c936
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41c962
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c962
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41c98e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c98e
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41c9ba
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c9ba
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
jne 0x41c9e6
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41c9e6
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
xor eax, eax
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41ca1d
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41ca1d
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41ca49
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41ca49
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x4c]
push ecx
mov ecx, 0x9d77
call fcn.00454940
mov dword [esp + 0x80], 0xc
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
lea eax, [esp + 0x4c]
mov dword [esp + 0x80], 0xffffffff
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41caa9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41caa9
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41cad2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cad2
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x9c8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push eax
call esi
mov ecx, dword [edi + 0xa10]
push 1
push ecx
call esi
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
test al, 1
je 0x41cb16
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cb16
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41cb3f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cb3f
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea edx, [edi + 0x3a8]
test al, 1
je 0x41cb68
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cb68
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41cb91
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cb91
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41cbba
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cbba
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41cbe3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cbe3
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41cc0c
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cc0c
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41cc35
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cc35
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41cc5e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cc5e
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x56c]
lea edx, [edi + 0x568]
test al, 1
je 0x41cc87
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cc87
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x62c]
lea edx, [edi + 0x628]
test al, 1
je 0x41ccb0
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41ccb0
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ec]
lea edx, [edi + 0x5e8]
test al, 1
je 0x41ccd9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41ccd9
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ac]
lea edx, [edi + 0x5a8]
test al, 1
je 0x41cd02
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cd02
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ec]
lea edx, [edi + 0x4e8]
test al, 1
jne case.default.0x41b0f1
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je case.default.0x41b0f1
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
jmp case.default.0x41b0f1
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41cd64
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cd64
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41cd90
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cd90
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41cdbc
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cdbc
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41cde8
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41cde8
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41ce14
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41ce14
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
je 0x41ce40
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41ce40
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 2
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41ce7a
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41ce7a
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41cea6
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41cea6
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x50]
push ecx
mov ecx, 0x9d00
call fcn.00454940
mov dword [esp + 0x80], 0xd
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
or ebx, 0xffffffff
lea eax, [esp + 0x50]
mov dword [esp + 0x80], ebx
call fcn.004568e0
lea esi, [esp + 0x54]
call fcn.00440e10
mov dword [esp + 0x80], 0xe
mov eax, dword [eax]
push eax
lea eax, [edi + 0x1a0]
push eax
call fcn.00452eb0
mov eax, esi
mov dword [esp + 0x80], ebx
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41cf38
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41cf38
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41cf63
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41cf63
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41cf8e
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41cf8e
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xa10]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [edi + 0x9c8]
push 5
push ecx
call esi
mov eax, dword [edi + 0x31c]
lea edx, [edi + 0x318]
test al, 1
je 0x41cfd5
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41cfd5
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ec]
lea edx, [edi + 0x3e8]
test al, 1
je 0x41d000
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d000
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41d02b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d02b
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41d056
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d056
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ec]
lea edx, [edi + 0x4e8]
test al, 1
je 0x41d081
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d081
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41d0ac
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d0ac
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x56c]
lea edx, [edi + 0x568]
test al, 1
je 0x41d0d7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d0d7
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x62c]
lea edx, [edi + 0x628]
test al, 1
je 0x41d102
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d102
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ec]
lea edx, [edi + 0x5e8]
test al, 1
je 0x41d12d
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d12d
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x5ac]
lea edx, [edi + 0x5a8]
test al, 1
je 0x41d158
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d158
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x364]
lea edx, [edi + 0x360]
test al, 1
je 0x41d183
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d183
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
cmp dword [0x490c30], 0
mov eax, dword [edi + 0x2d4]
lea edx, [edi + 0x2d0]
je 0x41d1a1
test al, 1
je 0x41d1c0
and eax, 0xfffffffe
jmp 0x41d1a8
test al, 1
jne 0x41d1c0
or eax, 1
mov ecx, dword [edx + 0x1c]
mov dword [edx + 4], eax
test ecx, ecx
je 0x41d1c0
mov eax, dword [ecx]
push 0
push 1
push 0
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x3ac]
lea esi, [edi + 0x3a8]
mov ecx, eax
shr ecx, 2
not ecx
test cl, 1
jne 0x41c052
and eax, 0xfffffffb
jmp 0x41c03a
mov eax, dword [edi + 0x1a4]
lea edx, [edi + 0x1a0]
mov ecx, eax
and ecx, 1
jne 0x41d210
mov ecx, dword [edx + 0x1c]
or eax, 1
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d210
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov ecx, edi
call fcn.00418a30
mov eax, dword [edi + 0xb44]
lea edx, [edi + 0xb40]
mov ecx, eax
and ecx, 1
je 0x41d243
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d243
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x23c]
lea edx, [edi + 0x238]
mov ecx, eax
and ecx, 1
je 0x41d26f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d26f
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x288]
lea edx, [edi + 0x284]
mov ecx, eax
and ecx, 1
je 0x41d29b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d29b
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0xcc]
lea edx, [edi + 0xc8]
mov ecx, eax
and ecx, 1
je 0x41d2c7
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d2c7
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x66c]
lea edx, [edi + 0x668]
mov ecx, eax
and ecx, 1
je 0x41d2f3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d2f3
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea esi, [edi + 0xf8]
mov eax, 2
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 1
jne 0x41d32d
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41d32d
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
mov eax, dword [edi + 0x1f0]
lea esi, [edi + 0x1ec]
mov ecx, eax
and ecx, 1
jne 0x41d359
mov ecx, dword [esi + 0x1c]
or eax, 1
mov dword [esi + 4], eax
cmp ecx, ebx
je 0x41d359
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
push ebx
push 1
push ebx
push esi
call eax
lea ecx, [esp + 0x58]
push ecx
mov ecx, 0x9d00
call fcn.00454940
mov dword [esp + 0x80], 0xf
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
lea eax, [esp + 0x58]
mov dword [esp + 0x80], 0xffffffff
call fcn.004568e0
mov eax, dword [edi + 0x948]
lea edx, [edi + 0x944]
test al, 1
je 0x41d3b9
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d3b9
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x42c]
lea edx, [edi + 0x428]
test al, 1
je 0x41d3e2
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d3e2
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x994]
lea edx, [edi + 0x990]
test al, 1
je 0x41d40b
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d40b
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x9c8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push eax
call esi
mov ecx, dword [edi + 0xa10]
push 5
push ecx
call esi
mov eax, dword [edi + 0x46c]
lea edx, [edi + 0x468]
test al, 1
je 0x41d44f
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d44f
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x52c]
lea edx, [edi + 0x528]
test al, 1
je 0x41d478
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d478
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ec]
lea edx, [edi + 0x4e8]
test al, 1
je 0x41d4a1
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d4a1
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x4ac]
lea edx, [edi + 0x4a8]
test al, 1
je 0x41d4ca
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d4ca
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
mov eax, dword [edi + 0x56c]
lea edx, [edi + 0x568]
test al, 1
je 0x41d4f3
mov ecx, dword [edx + 0x1c]
and eax, 0xfffffffe
mov dword [edx + 4], eax
cmp ecx, ebx
je 0x41d4f3
mov eax, dword [ecx]
push ebx
push 1
push ebx
push edx
mov edx, dword [eax + 0x28]
call edx
lea edx, [edi + 0x2d0]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x360]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x628]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5a8]
xor ecx, ecx
call fcn.004502b0
cmp dword [0x490c30], ebx
jne 0x41d558
cmp dword [edi + 0xb0], ebx
jne 0x41d558
mov ecx, 1
jmp 0x41d55a
xor ecx, ecx
lea edx, [edi + 0x318]
call fcn.004502b0
lea edx, [edi + 0x3e8]
mov ecx, 1
call fcn.004502b0
cmp dword [0x48cc5c], ebx
je case.default.0x41b0f1
mov esi, str.popform_c
cmp dword [0x491260], ebx
jne 0x41d593
mov esi, str.popform
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
push str.action_st_d
push str.http:__update.360safe.com_safe_leakpop.html_
push 1
mov ecx, 0x490040
call fcn.0045dc00
add esp, 0x14
mov dword [0x48cc5c], ebx
jmp case.default.0x41b0f1
lea edx, [edi + 0x1a0]
mov ecx, 1
call fcn.004502b0
mov ecx, edi
call fcn.00418a30
lea edx, [edi + 0x1ec]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xf8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x668]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x944]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x990]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xb40]
mov ecx, 1
call fcn.004502b0
lea edx, [edi + 0x238]
mov ecx, 1
call fcn.004502b0
lea edx, [edi + 0x284]
mov ecx, 1
call fcn.004502b0
lea edx, [edi + 0xc8]
mov ecx, 1
call fcn.004502b0
mov eax, dword [edi + 0x9c8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push eax
call esi
mov ecx, dword [edi + 0xa10]
push 5
push ecx
call esi
lea edx, [edi + 0x2d0]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x360]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x318]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x428]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x568]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x628]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x468]
mov ecx, 1
call fcn.004502b0
lea edx, [edi + 0x528]
jmp 0x41d56b
push ebx
push edi
call fcn.0041dc80
lea edx, [edi + 0x1a0]
mov ecx, 1
call fcn.004502b0
mov ecx, edi
call fcn.00418a30
lea edx, [edi + 0xb40]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x238]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x284]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xc8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x668]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x944]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x990]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x428]
xor ecx, ecx
call fcn.004502b0
lea esi, [edi + 0xf8]
xor eax, eax
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov ecx, 1
mov edx, esi
call fcn.004502b0
lea esi, [edi + 0x1ec]
mov ecx, 1
mov edx, esi
call fcn.004502b0
lea edx, [esp + 0x5c]
push edx
mov ecx, 0x9d72
call fcn.00454940
mov dword [esp + 0x80], 0x10
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
lea eax, [esp + 0x5c]
mov dword [esp + 0x80], 0xffffffff
call fcn.004568e0
mov eax, dword [edi + 0x9c8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push eax
call esi
mov ecx, dword [edi + 0xa10]
push 5
push ecx
call esi
lea edx, [edi + 0x2d0]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x360]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x318]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x468]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x528]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x568]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x628]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4e8]
jmp 0x41dc1c
push ebx
push edi
call fcn.0041dc80
lea edx, [edi + 0x1a0]
mov ecx, 1
call fcn.004502b0
mov ecx, edi
call fcn.00418a30
lea edx, [edi + 0xb40]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x238]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x284]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xc8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x668]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x428]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x990]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x944]
xor ecx, ecx
call fcn.004502b0
lea esi, [edi + 0xf8]
mov eax, 3
mov ecx, 0x491bf0
mov edx, esi
call fcn.0044f7f0
mov ecx, 1
mov edx, esi
call fcn.004502b0
lea esi, [edi + 0x1ec]
mov ecx, 1
mov edx, esi
call fcn.004502b0
lea edx, [esp + 0x60]
push edx
mov ecx, 0x9d8c
call fcn.00454940
mov dword [esp + 0x80], 0x11
mov eax, dword [eax]
push eax
push esi
call fcn.00452eb0
lea eax, [esp + 0x60]
mov dword [esp + 0x80], 0xffffffff
call fcn.004568e0
mov eax, dword [edi + 0x9c8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push eax
call esi
mov ecx, dword [edi + 0xa10]
push 5
push ecx
call esi
lea edx, [edi + 0x2d0]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x360]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x318]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x568]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x468]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x528]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x628]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x5a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4e8]
jmp 0x41dc1c
lea edx, [edi + 0x1a0]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x944]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xb40]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x238]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x284]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xc8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x668]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0xf8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x1ec]
xor ecx, ecx
call fcn.004502b0
mov edx, dword [edi + 0x9c8]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push edx
call esi
mov eax, dword [edi + 0xa10]
push 0
push eax
call esi
lea edx, [edi + 0x2d0]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x360]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x428]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x318]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x3e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x568]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x468]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x528]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x4a8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x628]
xor ecx, ecx
call fcn.004502b0
lea ebx, [edi + 0x5e8]
xor ecx, ecx
mov edx, ebx
call fcn.004502b0
lea esi, [edi + 0x5a8]
xor ecx, ecx
mov edx, esi
call fcn.004502b0
lea edx, [edi + 0x4e8]
xor ecx, ecx
call fcn.004502b0
lea edx, [edi + 0x990]
xor ecx, ecx
call fcn.004502b0
push 1
push edi
call fcn.0041dc80
mov eax, dword [edi + 0xb04]
sub eax, 4
mov ecx, 1
je 0x41dc13
sub eax, 2
je 0x41dc0b
lea edx, [edi + 0x4e8]
jmp 0x41dc21
lea edx, [edi + 0x628]
jmp 0x41dc15
mov edx, ebx
call fcn.004502b0
mov edx, esi
mov ecx, 1
call fcn.004502b0
mov ecx, dword [edi + 4]
push 0x105
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_RedrawWindow]
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret