Function at 0x40102a
Capabilities:
Check for unmoving mouse cursor
Enumerate gui resources
Enumerate process modules
Query environment variable
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x6b44
call fcn.0040de70
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov dword [esp + 0x18], ebx
mov dword [0x44bbe0], esi
mov dword [esp + 0xc], ebx
cmp esi, ebx
jne 0x401270
push 0x3c
lea eax, [esp + 0x480]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
push ebx
lea ecx, [esp + 0x225c]
mov eax, 0x158
push ecx
push eax
push 0x29
mov dword [esp + 0x2268], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test eax, eax
je 0x4010a2
push 0xf
pop ecx
lea esi, [esp + 0x22f8]
lea edi, [esp + 0x47c]
rep movsd dword es:[edi], dword [esi]
jmp 0x4010c9
lea eax, [esp + 0x47c]
push eax
push 0x3c
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
jne 0x4010c9
mov eax, dword [0x44bbdc]
mov dword [0x44bbd8], eax
lea eax, [esp + 0x47c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
lea eax, [esp + 0x58]
push eax
push dword [esp + 0xe8]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 8]
cmp esi, ebx
jne 0x401270
mov ecx, dword [0x44bbd8]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [0x44bbf0]
mov edi, eax
mov eax, dword [0x44bbdc]
sar edi, 1
add edi, eax
cmp edi, edx
jle 0x401126
dec eax
mov dword [0x44bbdc], eax
movzx edi, al
mov dword [esp + 0xc], edi
lea edi, [ecx + eax - 0x120]
cmp edi, edx
jle 0x40113e
inc eax
mov dword [0x44bbdc], eax
mov edx, dword [0x44bbe8]
cmp edx, ebx
jle 0x401152
movzx edi, cl
imul edi, edx
add dword [esp + 0xc], edi
mov dword [esp + 0x100], str.fasterAgile
mov dword [esp + 0x104], str.cranked_superuser
cmp cl, byte [0x44bbec]
jne 0x40117e
mov edx, 0x120
sub edx, ecx
add eax, edx
mov dword [0x44bbdc], eax
add ecx, eax
cmp ecx, dword [0x44bbf0]
mov dword [esp + 0x108], str.cutter_execution_sales_distributing
mov dword [esp + 0x10c], str.NetWeave_BGA
mov dword [esp + 0x110], str.elated_widespread_adventure_bargaining
mov dword [esp + 0x114], str.Any_AdvantagePlus_14
mov dword [esp + 0x118], str.Scalability_PowerPoint_SeaMonkey_JNI
mov dword [esp + 0x11c], str.cards_EventDate_stretch_Transparency
mov dword [esp + 0x120], str.Microsofts_desktops_hyperlinks_led
mov dword [esp + 0x124], str.Installation_hertz_Lecture
jle 0x4011e6
dec eax
mov dword [0x44bbdc], eax
mov dword [esp + 0x128], str.referenced_Everyday
mov dword [esp + 0x12c], str.QuickTime_awesome_FWH_container
mov dword [esp + 0x130], str.Criticizing_attend_VIP
mov dword [0x44bbd8], ebx
mov dword [esp + 0x134], str.Army_Uploade
mov dword [esp + 0x138], str.Factors_jagged_probes
mov dword [esp + 0x13c], str.1930_River
mov dword [esp + 0x140], str.Interaction_related_Pri_eighteen
mov dword [esp + 0x144], str.NetTcpBinding_abilities_maximise_bothering
mov dword [esp + 0x148], str.Trendy
mov dword [esp + 0x14c], str.WSDL_purchasing
mov dword [esp + 0x150], str.ContractDescription_Null_doctor_untangled_projection
mov dword [esp + 0x154], str.annealing_Tourism
mov eax, dword [0x44bbe4]
mov edi, dword [str.unknown]
push 0xfc
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x79c]
mov dword [esp + 0x7c], esi
mov esi, dword [0x43f220]
push ebx
push eax
mov dword [esp + 0x79c], edi
mov dword [esp + 0x7a0], esi
call fcn.0040aac0
add esp, 0xc
push 0xfc
lea eax, [esp + 0x8a4]
push ebx
push eax
mov dword [esp + 0x8a4], edi
mov dword [esp + 0x8a8], esi
call fcn.0040aac0
mov ecx, dword [esp + 0x18]
mov eax, dword [0x44bbec]
add esp, 0xc
push dword [esp + 0x38]
lea eax, [ecx + eax*2 + 0xc8]
push ebx
push 0x400
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
lea eax, [esp + 0x14]
push eax
push 4
lea eax, [esp + 0xf0]
push eax
push esi
call sub.PSAPI.DLL_EnumProcessModules
push 0x104
lea eax, [esp + 0x794]
push eax
push dword [esp + 0xf0]
push esi
call sub.PSAPI.DLL_GetModuleBaseNameA
inc dword [0x44bbd8]
push 0x3e8
lea eax, [esp + 0x89c]
push eax
push dword [esp + 0xf0]
push esi
call sub.PSAPI.DLL_GetModuleFileNameExA
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
push ebx
call edi
push ebx
mov esi, 0x43ecdf
push esi
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov eax, dword [0x44bbe8]
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x78]
add eax, ecx
mov ecx, dword [0x44bbdc]
lea eax, [ecx + eax + 1]
push 0x64
mov dword [0x44bbe4], ebx
mov dword [0x44bbdc], eax
call edi
lea eax, [esp + 0xb4]
push eax
push esi
call sub.VERSION.dll_GetFileVersionInfoSizeA
push 0x10
call edi
lea eax, [esp + 0xb4]
push eax
mov esi, str.shell.dll
push esi
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov eax, dword [0x44bbe8]
mov dword [esp + 0xb4], eax
push ebx
call edi
lea eax, [esp + 0xb4]
push eax
push esi
call sub.VERSION.dll_GetFileVersionInfoSizeA
push dword [esp + 0x38]
lea eax, [esp + 0x794]
push eax
push str._s__PID:__u__n
call fcn.00405289
add esp, 0xc
lea eax, [esp + 0x898]
push eax
push 0x43f240
call fcn.00405289
pop ecx
pop ecx
push ebx
push ebx
push 0xc
push 0x23
push dword [0x44bbec]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 0x1c00
call fcn.00404f5b
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 8]
pop ecx
mov dword [esp + 0x38], 1
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [esp + 0x2c], eax
lea eax, [esi + 0x96]
add esi, 0x230
mov dword [esp + 0x28], esi
cmp eax, 6
ja 0x401453
mov dword [esp + 0x34], ebx
sub dword [0x44bbdc], 4
mov esi, dword [esp + 0x14]
inc eax
push esi
mov dword [0x44bbd8], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push dword [0x44bbd8]
mov edi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
lea eax, [eax + esi + 1]
mov esi, dword [0x44bbec]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x40]
imul eax, eax, 3
add eax, dword [0x44bbe4]
push esi
mov dword [0x44bbf0], eax
call edi
push dword [0x44bbdc]
push esi
call edi
mov ecx, dword [esp + 0xc]
push dword [0x44bbdc]
lea eax, [ecx + 0xc8]
mov dword [0x44bbd8], eax
shl eax, 4
add eax, dword [ebp + 0x14]
add ecx, 0xffffff6b
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x2c]
push esi
mov dword [0x44bbe8], eax
mov dword [esp + 0x18], ecx
call edi
mov edi, dword [sym.imp.USER32.dll_GetDlgItemTextA]
push ebx
cmp eax, 1
jne 0x40151d
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0xbf4]
add eax, 0xa
push ecx
push eax
push esi
mov dword [0x44bbd8], eax
call edi
push dword [0x44bbe4]
lea eax, [esp + 0xbf4]
push eax
push dword [0x44bbdc]
mov dword [esp + 0x44], 0xfffffc01
jmp 0x40154c
lea eax, [esp + 0x23b4]
push eax
push dword [esp + 0x18]
push esi
call edi
push dword [0x44bbe4]
lea eax, [esp + 0x23b4]
push eax
push dword [esp + 0x14]
mov dword [0x44bbd8], 0x96
mov dword [esp + 0x40], ebx
push esi
call edi
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x38]
cmp dword [esp + 0x78], eax
jbe 0x401588
mov eax, dword [0x44bbdc]
mov ecx, dword [esp + 0x3c]
mov esi, eax
imul esi, esi, 0xe3
add esi, dword [0x44bbd8]
inc ecx
imul ecx, eax
imul ecx, ecx, 3
inc esi
mov dword [0x44bbd8], ecx
mov dword [esp + 0x10], esi
jmp 0x40158c
mov esi, dword [esp + 0x10]
push dword [esp + 0xb0]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x44
pop ecx
lea eax, [esp + 0xdf8]
mov byte [eax], bl
inc eax
dec ecx
jne 0x4015a3
mov eax, dword [0x44bbf0]
cmp dword [0x44bbdc], eax
mov dword [esp + 0x100], str.corporations_mediation_ie_Regeneration
mov dword [esp + 0x104], str.Grabbing_inadvertently_home_firms_ado
mov dword [esp + 0x108], str.CreationDate_The_7
mov dword [esp + 0x10c], str.Validate_CamelCase_prescribed_Bar
mov dword [esp + 0x110], str.translates_Foreseeable
mov dword [esp + 0x114], str.free
mov dword [esp + 0x118], str.tourism
mov dword [esp + 0x11c], str.inherently_externally_readout_3M
mov dword [esp + 0x120], str.Logitech_CRB_bits_00am_above
mov dword [esp + 0x124], str.capita_unobserved_relaxing
mov dword [esp + 0x128], str.minInclusive
mov dword [esp + 0x12c], str.yea_factors_iterative_interpreted
mov dword [0x44bbd8], ebx
mov dword [esp + 0x130], str.especial_MX
mov dword [esp + 0x134], str.Defining_VC_Walk_What
mov dword [esp + 0x138], str.UMAX
mov dword [esp + 0x13c], str.authorized_consonant
mov dword [esp + 0x140], str.overlap
mov dword [esp + 0x144], str.painful_strategic_predefined
mov dword [esp + 0x148], str.VCPI_confidently_YT_Credit_below
mov dword [esp + 0x14c], str.Avalons
mov dword [esp + 0x150], str.OBrien_disparity_Timeline_unpack
mov dword [esp + 0x154], str.Behind_Debevec
mov dword [esp + 0x158], str.subscribers_exchanged
jle 0x4016bf
dec dword [0x44bbdc]
mov ecx, dword [0x44bbdc]
sub ecx, esi
cmp ecx, eax
mov dword [esp + 0x15c], str.fill_conclude_Exchange_incompatible
mov dword [esp + 0x160], str.stakes_begs_Shawn_residing
mov dword [esp + 0x164], str.promise
mov dword [esp + 0x168], str.290_pictre
jle 0x4016fd
inc dword [0x44bbdc]
mov eax, dword [0x44bbe4]
cmp eax, dword [0x44bbe8]
mov dword [esp + 0x16c], str.Layers_SYSTEM
jle 0x401720
mov dword [esp + 0x170], str.lawsuit_engages_enthusiastically
cmp dword [0x44bbdc], ebx
mov dword [esp + 0x174], str._CurrentState_Donald_impressive_Maricopa
jge 0x40173b
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x178], str.resonance_Froogle_chaining
mov dword [esp + 0x17c], str.CannotCheckin_Garrison_RW_Throughout_cheated
cmp byte [0x44bbec], bl
jne 0x40175f
inc dword [0x44bbdc]
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov dword [esp + 0x180], str.Loadhigh_Wordyottabyte_customers_Tru64_NAPT
call esi
mov edi, eax
push ebx
push edi
call dword [sym.imp.USER32.dll_GetSystemMenu]
push 1
push 0xf020
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
push edi
mov edi, dword [sym.imp.USER32.dll_DrawMenuBar]
call edi
call esi
mov esi, eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xfffdffff
push eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov esi, dword [0x44bbe8]
cmp esi, dword [0x44bbe4]
jbe 0x40193c
mov eax, dword [esp + 0x28]
shl eax, 4
cmp eax, ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x44], eax
jle 0x40193c
cmp dword [0x44bbe4], ebx
jne 0x401924
push dword [0x44bbd8]
mov esi, dword [0x44bbec]
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push dword [0x44bbe8]
mov dword [esp + 0x20], eax
push eax
call dword [sym.imp.USER32.dll_SetMenu]
push dword [esp + 0x1c]
call edi
push ebx
call dword [sym.imp.USER32.dll_GetMenu]
push ebx
push ebx
push 0x50
push eax
call dword [sym.imp.USER32.dll_AppendMenuA]
push ebx
mov dword [esp + 0x68], eax
call edi
push ebx
push ebx
push esi
push dword [esp + 0x28]
push dword [esp + 0x24]
call dword [sym.imp.ole32.dll_OleSetMenuDescriptor]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x28]
push eax
push 0x400
lea eax, [esp + 0x675c]
push eax
push ebx
push 5
push ebx
mov dword [esp + 0x40], ebx
call dword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov esi, eax
cmp dword [esp + 0x24], ebx
jbe 0x40188d
lea eax, [esp + 0x74]
push eax
push ebx
push 0xc2
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [0x44bbec]
cmp esi, ebx
jne 0x4018ae
cmp dword [esp + 0x64], eax
jne 0x4018ae
mov esi, dword [esp + 0x28]
cmp dword [esp + 0x1c], esi
jbe 0x4018b2
mov ecx, dword [0x44bbf0]
jmp 0x4018b4
mov esi, dword [esp + 0x28]
xor ecx, ecx
cmp ecx, ebx
je 0x40198d
mov dword [0x44bbfc], eax
mov eax, 0x104
push 0x44bbf8
mov dword [0x44bbf8], 0x28
mov dword [0x44bc00], ebx
mov dword [0x44bc04], 0x1c000
mov word [0x44bc12], ax
mov dword [0x44bc14], ebx
mov dword [0x44bc18], ebx
mov dword [0x44bc1c], ebx
call dword [sym.imp.COMDLG32.dll_ReplaceTextA]
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x10], eax
jle 0x401913
inc dword [0x44bbdc]
cmp esi, ebx
je 0x401994
cmp dword [esp + 0x2c], ebx
jne 0x401924
mov eax, dword [0x44bbf0]
mov dword [eax], esi
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x44]
jl 0x4017d8
mov esi, dword [0x44bbe8]
mov edi, dword [0x44bbf0]
mov ecx, dword [0x44bbdc]
cmp edi, ebx
je 0x401962
cmp dword [esp + 0x28], ebx
je 0x401962
cmp esi, ebx
je 0x401962
mov eax, dword [0x44bbe4]
add eax, 2
mov dword [esp + 0x18], eax
cmp dword [esp + 0x10], ebx
jle 0x40196c
dec dword [esp + 0xc]
mov eax, dword [0x44bbd8]
cmp eax, ebx
jle 0x401983
mov edx, dword [esp + 0xc]
lea ecx, [ecx + edx + 1]
mov dword [0x44bbdc], ecx
cmp dword [0x44bbe4], ebx
je 0x40199b
jmp 0x40198b
xor eax, eax
jmp 0x404adf
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cdq
sub eax, edx
sar eax, 1
add eax, ecx
cmp eax, edi
jle 0x4019ad
dec ecx
mov dword [0x44bbdc], ecx
mov eax, dword [esp + 0x18]
lea edi, [eax + 1]
mov eax, esi
cdq
idiv edi
mov edi, eax
cmp edi, ebx
jle 0x4019cd
movzx eax, byte [0x44bbd8]
imul eax, edi
add dword [esp + 0x10], eax
cmp dword [0x44bbd8], ebx
jle 0x4019e3
mov eax, dword [esp + 0xc]
lea ecx, [ecx + eax + 1]
mov dword [0x44bbdc], ecx
movzx eax, cl
add dword [esp + 0xc], eax
cmp esi, ebx
jge 0x4019f9
mov dword [esp + 0x120], str.Results_Transformer_decent_tremendously
mov eax, dword [ebp + 8]
cdq
lea edi, [esi + 1]
idiv edi
cmp dword [esp + 0x10], ebx
jle 0x401a0c
dec dword [esp + 0xc]
cmp eax, ebx
jle 0x401a1e
mov edx, dword [esp + 0xc]
lea ecx, [ecx + edx + 1]
mov dword [0x44bbdc], ecx
mov edx, eax
sub edx, dword [esp + 0x10]
add edx, ecx
cmp edx, dword [0x44bbf0]
jle 0x401a35
inc ecx
mov dword [0x44bbdc], ecx
cmp ecx, eax
jl 0x401a3b
add eax, eax
inc eax
imul eax, ecx
mov dword [0x44bbd8], eax
mov eax, esi
cdq
mov esi, 0xa0
idiv esi
cmp eax, ebx
jle 0x401a68
movzx edx, byte [0x44bbd8]
sub edx, dword [esp + 0x18]
imul edx, eax
add ecx, edx
mov dword [0x44bbdc], ecx
push 0x42
pop edi
push edi
lea eax, [esp + 0x2fc]
push ebx
xor esi, esi
push eax
mov dword [esp + 0x170], str.XT_areas_Partnership_Reports_striking
inc esi
call fcn.0040aac0
mov dword [esp + 0x304], edi
xor eax, eax
lea edi, [esp + 0x270]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
mov dword [esp + 0x2fc], ebx
mov dword [esp + 0x30c], 0x100
mov dword [esp + 0x264], 0x14
mov dword [esp + 0x268], str.printingTest
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x270], ebx
xor eax, eax
cmp eax, ebx
jle 0x401ae2
mov dword [0x44bbec], ebx
inc eax
cmp eax, 0x66
jl 0x401ad8
cmp dword [esp + 0x28], 0x63
jle 0x401b03
push 0xb
pop eax
sub eax, dword [ebp + 0x14]
mov dword [0x44bbd8], ebx
add dword [0x44bbdc], eax
jmp 0x401b0d
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0xc]
lea esi, [ecx + eax]
lea eax, [esp + 0x264]
push eax
push dword [esp + 0x30c]
mov dword [esp + 0x27c], ebx
call dword [sym.imp.GDI32.dll_StartDocA]
push dword [esp + 0x308]
call dword [sym.imp.GDI32.dll_StartPage]
push 9
call fcn.00404f5b
mov edi, eax
mov eax, dword [0x44bbd8]
sub eax, dword [esp + 0x10]
pop ecx
imul eax, dword [ebp + 0x14]
push ebx
push edi
push 5
sub eax, esi
mov esi, dword [sym.imp.GDI32.dll_Escape]
push 0x13
mov byte [edi], bl
mov byte [edi + 1], 3
mov byte [edi + 2], 0x1b
mov byte [edi + 3], 0x40
mov byte [edi + 4], bl
push dword [esp + 0x318]
inc eax
mov dword [0x44bbdc], eax
call esi
push 0x5d
call fcn.00404f5b
pop ecx
push ebx
push eax
push 9
push 0x13
mov byte [eax], bl
mov byte [eax + 1], 7
mov byte [eax + 2], 0x1b
mov byte [eax + 3], 0x50
mov byte [eax + 4], 0x74
mov byte [eax + 5], 0x65
mov byte [eax + 6], 0x73
mov byte [eax + 0x4b], 0x74
mov byte [eax + 8], bl
push dword [esp + 0x318]
call esi
push ebx
push edi
push 5
push 0x13
push dword [esp + 0x318]
call esi
push dword [esp + 0x308]
call dword [sym.imp.GDI32.dll_EndPage]
push dword [esp + 0x308]
call dword [sym.imp.GDI32.dll_EndDoc]
push dword [esp + 0x300]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [esp + 0x304]
call esi
mov esi, dword [ebp + 8]
xor eax, eax
mov dword [esp + 0xdc], ebx
lea edi, [esp + 0xe0]
push 1
stosd dword es:[edi], eax
lea eax, [esp + 0x571c]
push 0x43f618
push eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x70], ebx
call dword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
mov word [esp + 0x634c], ax
add esp, 0xc
lea eax, [esp + 0xdc]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0x70
pop edi
push edi
lea eax, [esp + 0x59c]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbec]
add esp, 0xc
lea ecx, [esp + 0xaa8]
push ecx
push eax
mov dword [esp + 0x5a0], edi
call dword [sym.imp.USER32.dll_BeginPaint]
push eax
mov dword [esp + 0x24], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov edi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x5a
push dword [esp + 0x24]
call edi
push 0x43f620
push ebx
mov eax, dword [ebp + 0x14]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x1f4
push ebx
push ebx
push ebx
add eax, esi
push 0x5a
push dword [esp + 0x58]
shr eax, 1
mov dword [0x44bbd8], eax
mov dword [0x44bbdc], 1
call edi
imul eax, eax, 0x2d0
cdq
push 0x48
pop ecx
idiv ecx
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fabs
fdiv qword [0x440368]
fadd qword [0x440360]
call fcn.00438e90
neg eax
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
push dword [esp + 0x24]
mov dword [0x44bbf4], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x1c], ebx
xor eax, eax
mov dword [esp + 0xec], ebx
lea edi, [esp + 0xf0]
stosd dword es:[edi], eax
lea eax, [esp + 0xec]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 2
push 0x43f624
push 0x64
push 0x64
push dword [esp + 0x30]
call dword [sym.imp.GDI32.dll_TextOutA]
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xf0]
cmp eax, ecx
jne 0x401d73
cmp edx, dword [esp + 0xe0]
jne 0x401d73
push dword [0x44bbf4]
push dword [esp + 0x24]
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, dword [esp + 0x10]
jmp 0x401d98
mov edi, dword [esp + 0x10]
add ecx, esi
add edi, ecx
inc dword [esp + 0x24]
mov dword [esp + 0xdc], eax
mov eax, edi
imul eax, eax, 3
mov dword [esp + 0x10], edi
mov dword [esp + 0xe0], edx
add esi, eax
push 0xffffffffffffffff
push dword [esp + 0x24]
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp dword [esp + 0x24], 1
jb 0x401dc0
inc dword [esp + 0x64]
lea eax, [edi*4 + 0x1b4]
sub eax, dword [esp + 0x2c]
add dword [0x44bbd8], eax
mov eax, dword [esp + 0x64]
cmp eax, 5
je 0x401e05
cmp dword [esp + 0x24], 2
je 0x401dec
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xf
jb 0x401d00
jmp 0x401e05
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5a0], ecx
mov ecx, dword [esp + 0x18]
add eax, ecx
lea edi, [edi + eax + 1]
mov dword [esp + 0x10], edi
mov eax, dword [0x44bbd8]
mov esi, dword [0x44bbdc]
mov ecx, dword [0x44bbe4]
inc eax
imul eax, esi
cmp ecx, dword [0x44bbe8]
mov dword [esp + 0x100], str.ordering_Roman_Ubisoft_Barker
mov dword [esp + 0x104], str.Womack_Chcp
mov dword [0x44bbd8], eax
mov dword [esp + 0x108], str.Uninstaller_intising_practitioners_filmstrip_QNX
mov dword [esp + 0x10c], str.casts_Wack
mov dword [esp + 0x110], str.Scheeler_Supertwisted_Uber_few_guarded
mov dword [esp + 0x114], str.codeshere_reformatting
mov dword [esp + 0x118], str.places_systems
mov dword [esp + 0x11c], str.elements_GigaByte
jle 0x401e8a
mov dword [esp + 0x120], str.sales_Module_resident
mov ecx, dword [0x44bbec]
mov dword [esp + 0x124], str.Polyinstantiation_Germany
cmp al, cl
jne 0x401eab
mov edx, edi
sub edx, eax
add esi, edx
mov dword [0x44bbdc], esi
mov edx, eax
sub edx, edi
lea edi, [edx + esi]
mov esi, dword [0x44bbf0]
cmp edi, esi
mov dword [esp + 0x128], str.AES_Blacher_stores
mov dword [esp + 0x12c], str.constant_AutoPlay_Chernobyl_hasnt
mov dword [esp + 0x130], str.established_Leaps_recommendations
mov dword [esp + 0x134], str.needs_MessagePad_i386_residents
jle 0x401eee
inc dword [0x44bbdc]
cmp eax, ebx
mov dword [esp + 0x138], str.individually
mov dword [esp + 0x13c], str.believe_semiconductor_megabytes_GENERAL_Most
mov dword [esp + 0x140], str.recycle_hovering_pragmas
mov dword [esp + 0x144], str.collector_fear_Setver_NearPlaneDistance_UNINSTALLING
jle 0x401f23
mov dword [0x44bbdc], eax
cmp eax, ebx
mov dword [esp + 0x148], str.IWICMetadataBlockReader_description_WDDM_hinged
jle 0x401f37
mov dword [0x44bbdc], eax
mov edi, dword [0x44bbdc]
add edx, edi
cmp edx, esi
mov dword [esp + 0x14c], str.major_appointment_addicted
mov dword [esp + 0x150], str.Autodesk_undying_harmonic_Standard
mov dword [esp + 0x154], str.InTransition_Eye_ZIPI_PDP_identifiers
mov dword [esp + 0x158], str.Yu_Serial
mov dword [esp + 0x15c], str.JCI_disclosure_skinning_learn
jle 0x401f80
inc dword [0x44bbdc]
mov edx, dword [0x44bbe8]
cmp dword [0x44bbe4], edx
mov dword [esp + 0x160], str.Create_cryptographic_NE1_skinny_Estimation
jle 0x401fa4
mov dword [esp + 0x164], str.unnecessarily_Gupta
cmp ecx, ebx
je 0x401fb3
mov dword [esp + 0x168], str.surmising_ScanSoft_Age
mov edx, dword [esp + 0x10]
mov edi, dword [sym.imp.USER32.dll_DialogBoxParamA]
push ebx
push section..text
mov dword [esp + 0x28], ecx
push dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 8]
xor esi, esi
push eax
inc esi
push ecx
mov dword [esp + 0x180], str.distinctive
mov dword [esp + 0x184], str.adjustment_fbe_Index
mov dword [esp + 0x188], str.Ninja_appropriating
mov dword [esp + 0x38], esi
mov dword [esp + 0x58], ecx
mov dword [esp + 0x6c], edx
call edi
movzx eax, word [0x44bbdc]
push ebx
push section..text
push dword [esp + 0x28]
push eax
push dword [esp + 0x54]
call edi
lea eax, [esp + 0x558]
push eax
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [esp + 0x74], eax
cmp dword [esp + 0x14], ebx
je 0x402066
cmp dword [esp + 0x1c], ebx
je 0x402066
mov eax, dword [0x44bbdc]
lea eax, [eax + eax - 4]
mov dword [0x44bbdc], eax
mov dword [0x44bbd8], eax
mov eax, dword [esp + 0xc]
imul eax, eax, 0x12
mov dword [esp + 0x10], eax
jmp 0x4021b6
mov edi, dword [sym.imp.GDI32.dll_CreatePen]
push ebx
push 2
push ebx
call edi
mov eax, dword [esp + 0x10]
add eax, 4
imul eax, dword [ebp + 0x14]
mov dword [esp + 0x64], eax
mov eax, dword [0x44bbe4]
cmp eax, 3
jge 0x4020da
mov ecx, dword [0x44bbec]
mov edx, dword [esp + 0x18]
lea ecx, [ecx + edx + 0x14]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x1c], 3
mov edx, dword [0x44bbd8]
mov ecx, esi
shl ecx, 8
lea ecx, [ecx + eax + 0x10]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x2c]
lea ecx, [ecx + edx*4]
add ecx, dword [esp + 0x18]
shl esi, 4
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x44]
add dword [0x44bbd8], ecx
dec dword [esp + 0x1c]
jne 0x4020a5
mov eax, dword [0x44bbdc]
lea eax, [eax + eax - 4]
mov dword [0x44bbdc], eax
mov eax, esi
imul eax, eax, 0x27
push 0xff
push 2
push ebx
mov dword [esp + 0x50], eax
call edi
push 0xff00
push 2
push ebx
call edi
mov eax, dword [esp + 0x10]
add dword [0x44bbd8], eax
push 0xff0000
push 2
push ebx
call edi
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
lea eax, [ecx + eax + 1]
mov ecx, dword [0x44bbe4]
mov edi, esi
imul edi, edi, 0x60
inc ecx
imul eax, ecx
imul eax, dword [esp + 0x64]
shl eax, 4
add eax, dword [esp + 0x24]
push 0x43f9b4
push str.kernel32
mov dword [0x44bbdc], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push dword [esp + 0x18]
mov dword [esp + 0x24], eax
push dword [esp + 0x1c]
shl esi, 6
push dword [esp + 0x80]
call dword [sym.imp.GDI32.dll_MoveToEx]
push dword [esp + 0x14]
push dword [esp + 0x18]
push dword [esp + 0x7c]
call dword [sym.imp.GDI32.dll_LineTo]
push edi
push dword [esp + 0x48]
push esi
call dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov eax, dword [0x44bbdc]
imul eax, eax, 0x3e8
push ebx
push eax
push dword [0x44bbd8]
push dword [esp + 0x2c]
call dword [sym.imp.USER32.dll_SetTimer]
mov edi, dword [esp + 0x20]
lea eax, [esp + 0x558]
push eax
push edi
call dword [sym.imp.USER32.dll_EndPaint]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 1
push ebx
push edi
call esi
push dword [0x44bbd8]
push edi
call dword [sym.imp.USER32.dll_KillTimer]
push 1
push ebx
push edi
call esi
push dword [esp + 0xc]
push dword [esp + 0x5c]
push ebx
push edi
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov eax, dword [0x44bbe4]
cmp dword [0x44bbec], eax
jne 0x40220a
mov ecx, dword [ebp + 8]
jmp 0x402214
mov ecx, dword [esp + 0x18]
imul ecx, ecx, 0x230
cmp ecx, ebx
mov ecx, dword [0x44bbdc]
jge 0x40222f
mov edx, dword [esp + 0x14]
imul edx, dword [esp + 0x10]
add ecx, edx
mov dword [0x44bbdc], ecx
mov esi, dword [0x44bbe8]
cmp esi, eax
jbe 0x4023ff
cmp dword [esp + 0x28], ebx
mov dword [esp + 0x1c], ebx
jle 0x4023ff
cmp eax, ebx
jne 0x4023ed
lea eax, [esp + 0x25c]
push eax
push 1
mov edi, 0x100
push 0x11
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x268], edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov esi, eax
lea eax, [esp + 0x30]
push eax
push esi
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
mov dword [esp + 0x58], eax
xor eax, eax
lea ecx, [eax + 0x21]
and ecx, 0x800000ff
jns 0x40229f
dec ecx
or ecx, 0xffffff00
inc ecx
mov edx, dword [esp + 0x30]
mov byte [eax + edx], cl
inc eax
cmp eax, edi
jl 0x40228c
mov eax, dword [esp + 0x30]
push esi
mov byte [eax + 1], bl
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x44], eax
cmp dword [0x44bbe8], edi
je 0x4022d0
push esi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov eax, dword [0x44bbe4]
cmp dword [0x44bbec], ebx
jne 0x4022e5
cmp eax, ebx
jne 0x4022e5
cmp edi, ebx
jne 0x402339
lea esi, [eax + 4]
push esi
push ebx
push 3
mov dword [0x44bbd8], eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopyData]
cmp esi, ebx
mov edi, eax
mov dword [esp + 0x20], ebx
jle 0x402332
mov eax, dword [esp + 0x20]
lea eax, [esp + eax*4 + 0xbf0]
push eax
lea eax, [esp + 0x24]
push eax
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
test eax, eax
jl 0x402329
inc dword [esp + 0x20]
cmp dword [esp + 0x20], esi
jl 0x402301
jmp 0x402332
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
xor edi, edi
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
cmp dword [esp + 0x58], ebx
jne 0x402352
mov eax, dword [0x44bbec]
cmp dword [esp + 0x44], eax
jne 0x402352
mov edi, dword [0x44bbf0]
jmp 0x402354
xor edi, edi
lea eax, [esp + 0x4c8]
push eax
push ebx
call dword [sym.imp.USER32.dll_BeginPaint]
cmp dword [esp + 0x58], 1
mov esi, eax
jne 0x40237f
push dword [esp + 0x14]
lea eax, [esp + 0x4d4]
push eax
push esi
call dword [sym.imp.USER32.dll_FillRect]
cmp dword [esp + 0x58], 2
jne 0x402399
push dword [esp + 0x14]
lea eax, [esp + 0x4d4]
push eax
push esi
call dword [sym.imp.USER32.dll_FillRect]
lea eax, [esp + 0x4c8]
push eax
push ebx
call dword [sym.imp.USER32.dll_EndPaint]
cmp edi, ebx
je 0x40198d
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0xc]
mov ecx, dword [0x44bbdc]
jle 0x4023c7
inc ecx
mov dword [0x44bbdc], ecx
cmp dword [esp + 0x28], ebx
je 0x401994
mov esi, dword [0x44bbe8]
cmp dword [esp + 0x2c], ebx
jne 0x4023e8
mov eax, dword [0x44bbf0]
mov edx, dword [esp + 0x28]
mov dword [eax], edx
mov eax, dword [0x44bbe4]
inc dword [esp + 0x1c]
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x1c], edx
jl 0x40224b
cmp dword [0x44bbf0], ebx
je 0x40241d
cmp dword [esp + 0x28], ebx
je 0x40241d
cmp esi, ebx
je 0x40241d
mov edx, dword [esp + 0x18]
lea eax, [edx + eax + 1]
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0x18]
mov eax, esi
inc edi
cdq
idiv edi
mov edx, dword [0x44bbd8]
cmp eax, ebx
jle 0x40243b
movzx edi, dl
imul edi, eax
add dword [esp + 0x10], edi
cmp edx, ebx
jle 0x40244d
mov eax, dword [esp + 0xc]
lea ecx, [ecx + eax + 1]
mov dword [0x44bbdc], ecx
cmp edx, ecx
jle 0x402459
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
cmp dl, byte [0x44bbec]
jne 0x402468
inc ecx
mov dword [0x44bbdc], ecx
cmp edx, ebx
jle 0x402474
mov ecx, edx
mov dword [0x44bbdc], ecx
mov eax, dword [0x44bbf0]
add edx, ecx
cmp edx, eax
jle 0x402486
dec ecx
mov dword [0x44bbdc], ecx
movzx edx, cl
add dword [esp + 0xc], edx
lea edx, [ecx + ecx]
sub edx, dword [esp + 0x10]
cmp edx, eax
jle 0x40249f
inc ecx
mov dword [0x44bbdc], ecx
cmp dword [esp + 0x10], ebx
jle 0x4024a9
dec dword [esp + 0xc]
mov eax, dword [ebp + 8]
cdq
lea edi, [esi + 1]
idiv edi
mov edi, eax
sub eax, dword [esp + 0x10]
mov dword [esp + 0x58], edi
add eax, ecx
cmp eax, dword [0x44bbf0]
jle 0x4024cd
inc ecx
mov dword [0x44bbdc], ecx
lea eax, [edi + 1]
imul eax, ecx
cmp esi, ebx
jle 0x4024e5
movzx eax, al
sub eax, dword [esp + 0x18]
imul eax, esi
add dword [esp + 0xc], eax
cmp dword [0x44bbe4], ebx
je 0x4024ef
jmp 0x4024ed
mov edx, dword [esp + 0x10]
movzx eax, cl
add dword [esp + 0xc], eax
lea eax, [ecx + edx]
mov dword [esp + 0x44], eax
imul eax, dword [esp + 0xc]
cmp edx, ebx
jle 0x40250e
dec dword [esp + 0xc]
cmp esi, ebx
jle 0x402524
mov edi, dword [esp + 0x58]
movzx edx, al
sub edx, dword [esp + 0x18]
imul edx, esi
add dword [esp + 0xc], edx
mov edx, dword [esp + 0xc]
add eax, edx
imul eax, dword [esp + 0x44]
cmp ecx, eax
mov dword [esp + 0x15c], str.Dyess_even_BullGuard
jl 0x402540
add eax, eax
cmp al, byte [0x44bbec]
jne 0x40254f
inc ecx
mov dword [0x44bbdc], ecx
push 2
pop eax
lea ecx, [esp + 0x298]
push ecx
push eax
push 3
mov dword [0x44bbd8], edi
mov dword [esp + 0x2a4], 5
mov dword [esp + 0x2a8], ebx
mov dword [esp + 0x2ac], eax
mov dword [esp + 0x2b0], ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov edi, eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], 1
xor esi, esi
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x254], eax
mov eax, dword [esp + 0x24]
add eax, esi
mov dword [esp + 0xbc], eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x258]
push eax
push edi
mov dword [esp + 0x264], esi
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
inc esi
cmp esi, 2
jb 0x402599
inc dword [esp + 0x1c]
add dword [esp + 0x24], 0xa
cmp dword [esp + 0x24], 0x33
jb 0x402597
lea eax, [esp + 0x6c]
push eax
push edi
mov dword [esp + 0x74], ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
push 0x58
pop esi
xor eax, eax
push esi
mov word [esp + 0x5104], ax
lea eax, [esp + 0x424]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
mov ecx, dword [0x44bbec]
add ecx, eax
add esp, 0xc
lea eax, [esp + 0x5100]
mov dword [esp + 0x420], esi
mov dword [esp + 0x424], ecx
mov dword [esp + 0x42c], 0x43f9e4
mov dword [esp + 0x43c], eax
mov dword [esp + 0x440], 0x10
mov dword [esp + 0x450], 0x43ece0
mov dword [esp + 0x454], 0x1000
mov dword [esp + 0x45c], 0x43fa00
cmp dword [0x44bbf0], ebx
jne 0x4026a7
lea eax, [esp + 0x420]
push eax
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
jne 0x4026a7
xor ecx, ecx
inc ecx
mov dword [0x44bbdc], ecx
jmp 0x4026ad
mov ecx, dword [0x44bbdc]
mov eax, dword [0x44bbd8]
cmp eax, ecx
mov dword [esp + 0x100], str.QLogic_Guns
jle 0x4026c9
mov edx, dword [esp + 0xc]
mov dword [esp + 0x10], edx
cmp eax, ebx
mov dword [esp + 0x104], str.moderately
jle 0x4026e0
mov ecx, eax
mov dword [0x44bbdc], ecx
mov dword [esp + 0x108], str.Started_lame_Skype_Avatar
mov dword [esp + 0x10c], str.co_platter_no
mov dword [esp + 0x110], str.KB950050_Creative
mov dword [esp + 0x114], str.impairing
mov dword [esp + 0x118], str.Elevated_colour
mov dword [esp + 0x11c], str.Tasks_Foley_apprentice_appraisal
mov dword [esp + 0x120], str.TIC_listened
mov dword [esp + 0x124], str.since_CDFS
mov dword [esp + 0x128], str.FAWC_decompose
cmp byte [0x44bbec], bl
jne 0x402752
inc ecx
mov dword [0x44bbdc], ecx
mov eax, dword [0x44bbe8]
cdq
mov edi, 0xa0
idiv edi
mov dword [esp + 0x12c], str.FinFET_Certificates
mov dword [esp + 0x130], str.compensate_FORM
mov dword [esp + 0x134], str.carrying_09_whereas_Managers
mov esi, ecx
mov dword [esp + 0x138], str.Add_regimen
mov dword [esp + 0x13c], str.Subscriber_Sameer_Worldest
mov dword [esp + 0x140], str.GIMP_Yoke
cmp eax, ebx
jle 0x4027b9
movzx edx, cl
sub edx, dword [esp + 0x18]
imul edx, eax
add ecx, edx
mov dword [0x44bbdc], ecx
cmp dword [esp + 0x10], ebx
mov dword [esp + 0x144], str.illustrations_dollars
mov dword [esp + 0x148], str.learner_legacy_photo
jle 0x4027d9
dec dword [esp + 0xc]
mov dword [esp + 0x14c], str.Frequent_co
mov dword [esp + 0x150], str.Never_Aneta_fascinated
mov dword [esp + 0x154], str.STYLESHEET_millisec_slope
mov dword [esp + 0x158], str.beg_ideals_Throwaway_Kathryn_falling
cmp dword [0x44bbe4], ebx
je 0x40280f
jmp 0x40280d
cmp esi, ebx
mov dword [esp + 0x160], str.AUDIOTRAK
mov dword [esp + 0x164], str.plotter_Wins_Believers
mov dword [esp + 0x168], str.Dogsis_sickly_Allow
mov dword [esp + 0x16c], str.check_AuthenticationError_t
mov dword [esp + 0x170], str.Incorrect_spirits_SLR_monkeys_RJ
mov dword [esp + 0x174], str.GZipStream_concealed_few_quarterly_emphasizing
jle 0x402863
mov eax, dword [esp + 0xc]
lea ecx, [ecx + eax + 1]
mov dword [0x44bbdc], ecx
cmp ecx, esi
mov dword [esp + 0x178], str.Edutainment_fight
jl 0x402874
add esi, esi
or dword [esp + 0x3f8], 0xffffffff
lea eax, [esi + ecx - 4]
mov dword [0x44bbd8], eax
mov eax, dword [ebp + 0x14]
add ecx, 0xe
add eax, 0xfffffff1
imul ecx, eax
push 0x15000
push 8
push dword [esp + 0x7c]
mov dword [esp + 0x188], str.Polarity_inhabited_Shelveset_Cracking
mov dword [esp + 0x18c], str.reeled_BDN_occasions_Structured
mov dword [esp + 0x190], str.Sara_composeris_Wirelessrouter
mov dword [esp + 0x194], str.tries_Cooperative_GAC
mov dword [esp + 0x1c], 0xe
mov dword [esp + 0x3f0], 0xb
mov dword [esp + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [0x44bbd8]
mov dword [esp + 0x58], eax
mov eax, dword [0x44bbdc]
lea eax, [eax + eax - 4]
mov dword [0x44bbdc], eax
lea eax, [ecx + eax - 4]
mov dword [0x44bbd8], eax
lea eax, [esp + 0x3e4]
push eax
push ebx
push 0x1007
push ebx
mov dword [esp + 0x404], ebx
mov dword [esp + 0x3fc], ebx
mov dword [esp + 0x400], ebx
mov dword [esp + 0x3f8], ebx
mov dword [esp + 0x410], ebx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0xffffffff
jne 0x40294b
mov dword [esp + 0x10], 0xf
mov esi, dword [0x44bbe8]
mov eax, dword [ebp + 8]
cdq
lea ecx, [esi + 1]
idiv ecx
mov ecx, eax
mov eax, esi
cdq
mov esi, edi
idiv esi
mov dword [0x44bbd8], ecx
cmp eax, ebx
jle 0x40297d
movzx edx, cl
sub edx, dword [esp + 0x18]
imul edx, eax
add dword [0x44bbdc], edx
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, dword [0x44bbdc]
cmp eax, dword [0x44bbf0]
jle 0x402998
dec dword [0x44bbdc]
mov esi, dword [0x44bbe4]
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x14]
lea eax, [esi + 4]
imul eax, dword [0x44bbdc]
add edi, edx
cmp edi, eax
jne 0x4029ca
mov eax, dword [0x44bbe8]
imul eax, dword [0x44bbf0]
imul eax, ecx
mov dword [0x44bbdc], eax
mov eax, esi
imul eax, ecx
cmp eax, dword [0x44bbf0]
jb 0x4029ef
mov eax, dword [esp + 0x14]
xor edx, edx
lea edi, [esi + 5]
div edi
movzx edx, word [esp + 0x14]
add eax, edx
sub dword [0x44bbdc], eax
mov eax, dword [0x44bbec]
mov dword [esp + 0x6c], ecx
mov ecx, esi
sub ecx, 0x111
mov edi, eax
je 0x402a3d
sub ecx, 5
jne 0x402a4e
push ebx
push ebx
push 0x488
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
movzx eax, ax
shl eax, 2
not eax
and eax, 8
push eax
push dword [0x44bbd8]
push edi
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov esi, dword [0x44bbe4]
cmp dword [esp + 0x6c], 0xb
jne 0x402a4e
mov dword [0x44bbd8], 1
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
cmp esi, ebx
je 0x402a7c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x4ce0]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov esi, dword [0x44bbe4]
push 0x1fe
lea eax, [esp + 0x2946]
push ebx
push eax
mov word [esp + 0x294c], si
call fcn.0040aac0
add esp, 0xc
cmp esi, ebx
je 0x402ac2
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x44b0]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov esi, dword [0x44bbe4]
sub esi, 0x111
mov eax, dword [0x44bbec]
mov dword [esp + 0x6c], eax
mov eax, dword [0x44bbd8]
mov dword [esp + 0xbc], eax
je 0x402b1a
sub esi, 5
jne 0x402b2e
push ebx
push ebx
push 0x488
push dword [0x44bbec]
call dword [sym.imp.USER32.dll_SendMessageA]
movzx eax, ax
shl eax, 2
not eax
and eax, 8
push eax
push dword [0x44bbd8]
push dword [esp + 0x74]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [esp + 0xbc], 0xb
jne 0x402b2e
mov dword [0x44bbd8], 1
push 0x104
lea eax, [esp + 0x530c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0xa0]
push eax
mov esi, 0x43ecf8
push esi
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x402c03
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax]
lea edx, [esp + 0x5308]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax]
lea edx, [esp + 0x2940]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax]
lea edx, [esp + 0xd4]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x402bf6
push 0x1f
pop eax
mov word [esp + 0x360], ax
lea edx, [esp + 0x360]
lea eax, [esp + 0x2940]
push edx
mov dword [esp + 0x36c], eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ax, word [0x44bbe4]
push 0x1fe
mov word [esp + 0x1c5c], ax
lea eax, [esp + 0x1c5e]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
push 0x104
lea eax, [esp + 0x4adc]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0xa8]
push eax
push esi
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x402cf7
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax]
lea edx, [esp + 0x4ad8]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax]
lea edx, [esp + 0x1c58]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax]
lea edx, [esp + 0xcc]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x402cea
push 0x1f
pop eax
mov word [esp + 0x390], ax
lea edx, [esp + 0x390]
lea eax, [esp + 0x1c58]
push edx
mov dword [esp + 0x39c], eax
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0x84]
push eax
push esi
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x402d7c
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
lea edx, [esp + 0x6138]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
lea edx, [esp + 0x1c58]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x402d5c
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x84]
push dword [0x44bbe4]
call dword [sym.imp.SHELL32.dll_SHAddToRecentDocs]
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [0x44bbe4]
mov esi, dword [0x44bbe8]
mov edx, dword [esp + 0x14]
lea ecx, [eax + esi*2]
add ecx, dword [0x44bbec]
imul ecx, dword [0x44bbdc]
sub edx, ecx
lea ecx, [eax + 4]
imul ecx, dword [0x44bbdc]
sub edx, esi
add edx, dword [esp + 0x14]
cmp edx, ecx
jne 0x402dc7
mov ecx, esi
imul ecx, dword [0x44bbf0]
imul ecx, dword [0x44bbd8]
mov dword [0x44bbdc], ecx
push 0x1fe
mov word [esp + 0x2744], ax
lea eax, [esp + 0x2746]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
push 0xff
lea eax, [esp + 0x175d]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
push 0x104
lea eax, [esp + 0x3464]
push eax
push ebx
mov dword [esp + 0x1764], esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0xb8]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x402ed6
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax]
lea edx, [esp + 0x3460]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax]
lea edx, [esp + 0x2740]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x402ec9
push 0x1f
pop eax
mov word [esp + 0x350], ax
lea edx, [esp + 0x350]
lea eax, [esp + 0x2740]
push edx
mov dword [esp + 0x35c], eax
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0xd8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [0x44bbe4], ebx
je 0x402efc
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x4ef0]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov eax, dword [0x44bbec]
cmp eax, ebx
je 0x402f68
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2e8]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0x176c]
push ecx
lea ecx, [esp + 0x690]
push ecx
push dword [esp + 0x310]
push dword [esp + 0x310]
push dword [esp + 0x310]
push dword [esp + 0x310]
push dword [esp + 0x6c]
push eax
call sub.MSVFW32.dll_DrawDibDraw
mov esi, dword [0x44bbe4]
push 0x1fe
lea eax, [esp + 0x2546]
push ebx
push eax
mov word [esp + 0x254c], si
call fcn.0040aac0
add esp, 0xc
cmp esi, ebx
je 0x402fae
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x48c8]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
push 0x104
lea eax, [esp + 0x366c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x9c]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x403076
mov eax, dword [esp + 0x9c]
mov ecx, dword [eax]
lea edx, [esp + 0x3668]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x9c]
mov ecx, dword [eax]
lea edx, [esp + 0x2540]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x9c]
mov ecx, dword [eax]
lea edx, [esp + 0x68]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x403069
push 0x1f
pop eax
mov word [esp + 0x3a0], ax
lea edx, [esp + 0x3a0]
lea eax, [esp + 0x2540]
push edx
mov dword [esp + 0x3ac], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x9c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [0x44bbe4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
lea eax, [esi + 4]
imul eax, dword [0x44bbdc]
add edx, ecx
cmp edx, eax
jne 0x4030ac
mov eax, dword [0x44bbe8]
imul eax, dword [0x44bbf0]
imul eax, dword [0x44bbd8]
mov dword [0x44bbdc], eax
push 0xff
lea eax, [esp + 0xe45]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
add esp, 0xc
mov dword [esp + 0xe40], eax
cmp dword [0x44bbec], ebx
je 0x403143
mov esi, dword [0x44bbec]
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2d8]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0xe54]
push ecx
lea ecx, [esp + 0x6b8]
push ecx
push dword [esp + 0x300]
push dword [esp + 0x300]
push dword [esp + 0x300]
push dword [esp + 0x300]
push dword [esp + 0x6c]
push eax
call sub.MSVFW32.dll_DrawDibDraw
mov esi, dword [0x44bbe4]
cmp esi, ebx
je 0x40316b
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x4ff8]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov esi, dword [0x44bbe4]
push 0xff
lea eax, [esp + 0xf45]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
add esp, 0xc
mov dword [esp + 0xf40], eax
cmp esi, ebx
je 0x4031b5
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x3870]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov esi, dword [0x44bbe4]
cmp dword [0x44bbec], ebx
je 0x40322a
mov esi, dword [0x44bbec]
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2b8]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0xf54]
push ecx
lea ecx, [esp + 0x6e0]
push ecx
push dword [esp + 0x2e0]
push dword [esp + 0x2e0]
push dword [esp + 0x2e0]
push dword [esp + 0x2e0]
push dword [esp + 0x6c]
push eax
call sub.MSVFW32.dll_DrawDibDraw
mov esi, dword [0x44bbe4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
lea eax, [esi + 4]
imul eax, dword [0x44bbdc]
add edx, ecx
cmp edx, eax
jne 0x40325a
mov eax, dword [0x44bbe8]
imul eax, dword [0x44bbf0]
imul eax, dword [0x44bbd8]
mov dword [0x44bbdc], eax
mov eax, dword [0x44bbec]
mov dword [esp + 0x40], eax
mov eax, dword [0x44bbd8]
mov dword [esp + 0x6c], eax
mov eax, esi
sub eax, 0x111
je 0x4032b6
sub eax, 5
jne 0x4032c7
push ebx
push ebx
push 0x488
push dword [0x44bbec]
call dword [sym.imp.USER32.dll_SendMessageA]
movzx eax, ax
shl eax, 2
not eax
and eax, 8
push eax
push dword [0x44bbd8]
push dword [esp + 0x48]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov esi, dword [0x44bbe4]
cmp dword [esp + 0x6c], 0xb
jne 0x4032c7
mov dword [0x44bbd8], 1
push 0xff
lea eax, [esp + 0x145d]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
add esp, 0xc
mov dword [esp + 0x1458], eax
cmp dword [0x44bbec], ebx
je 0x40335e
mov esi, dword [0x44bbec]
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2a8]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0x146c]
push ecx
lea ecx, [esp + 0x730]
push ecx
push dword [esp + 0x2d0]
push dword [esp + 0x2d0]
push dword [esp + 0x2d0]
push dword [esp + 0x2d0]
push dword [esp + 0x6c]
push eax
call sub.MSVFW32.dll_DrawDibDraw
mov esi, dword [0x44bbe4]
mov eax, dword [0x44bbe8]
lea ecx, [esi + eax*2]
add ecx, dword [0x44bbec]
imul ecx, dword [0x44bbdc]
add ecx, eax
sub dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x68]
imul ecx, eax
cmp dword [esp + 0x40], ecx
jne 0x40339e
cdq
push 3
pop ecx
idiv ecx
movzx ecx, word [0x44bbe8]
add eax, ecx
imul eax, dword [esp + 0x30]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x68]
lea eax, [esi + 4]
imul eax, dword [0x44bbdc]
add ecx, edx
cmp ecx, eax
jne 0x4033ce
mov eax, dword [0x44bbe8]
imul eax, dword [0x44bbf0]
imul eax, dword [0x44bbd8]
mov dword [0x44bbdc], eax
mov eax, esi
imul eax, dword [0x44bbd8]
cmp eax, dword [0x44bbf0]
jb 0x4033f7
mov eax, dword [esp + 0x40]
lea ecx, [esi + 5]
xor edx, edx
div ecx
movzx ecx, word [esp + 0x30]
add eax, ecx
sub dword [0x44bbdc], eax
cmp esi, ebx
je 0x40341f
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x4de8]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov esi, dword [0x44bbe4]
push 0x1fe
lea eax, [esp + 0x1a5e]
push ebx
push eax
mov word [esp + 0x1a64], si
call fcn.0040aac0
mov eax, esi
imul eax, dword [0x44bbd8]
add esp, 0xc
cmp eax, dword [0x44bbf0]
jb 0x403466
mov eax, dword [esp + 0x14]
add esi, 5
xor edx, edx
div esi
movzx ecx, word [esp + 0x14]
add eax, ecx
sub dword [0x44bbdc], eax
lea eax, [esp + 0x88]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x4034f5
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
lea edx, [esp + 0x5d28]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
lea edx, [esp + 0x1a58]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
lea edx, [esp + 0x8c]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x4034d5
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x88]
push dword [0x44bbe4]
call dword [sym.imp.SHELL32.dll_SHAddToRecentDocs]
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x44bbd8]
mov eax, dword [0x44bbec]
mov dword [esp + 0x8c], ecx
mov ecx, dword [0x44bbe4]
sub ecx, 0x111
mov esi, eax
je 0x40354a
sub ecx, 5
jne 0x40355e
push ebx
push ebx
push 0x488
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
movzx eax, ax
shl eax, 2
not eax
and eax, 8
push eax
push dword [0x44bbd8]
push esi
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
cmp dword [esp + 0x8c], 0xb
jne 0x40355e
mov dword [0x44bbd8], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x104
lea eax, [esp + 0x397c]
push eax
push ebx
call esi
lea eax, [esp + 0xac]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x403634
mov eax, dword [esp + 0xac]
mov ecx, dword [eax]
lea edx, [esp + 0x3978]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0xac]
mov ecx, dword [eax]
lea edx, [esp + 0x1a58]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0xac]
mov ecx, dword [eax]
lea edx, [esp + 0xc8]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x403627
push 0x1f
pop eax
mov word [esp + 0x3b0], ax
lea edx, [esp + 0x3b0]
lea eax, [esp + 0x1a58]
push edx
mov dword [esp + 0x3bc], eax
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0xac]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ax, word [0x44bbe4]
push 0x1fe
mov word [esp + 0x205c], ax
lea eax, [esp + 0x205e]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
cmp dword [0x44bbe4], ebx
je 0x40367e
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x3b80]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
push 0x104
lea eax, [esp + 0x3c8c]
push eax
push ebx
call esi
lea eax, [esp + 0xa4]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x40374e
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
lea edx, [esp + 0x3c88]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
lea edx, [esp + 0x2058]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
lea edx, [esp + 0xd0]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x403741
push 0x1f
pop eax
mov word [esp + 0x3d0], ax
lea edx, [esp + 0x3d0]
lea eax, [esp + 0x2058]
push edx
mov dword [esp + 0x3dc], eax
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0xd0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [esp + 0x90]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x4037dd
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
lea edx, [esp + 0x6548]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
lea edx, [esp + 0x2058]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
lea edx, [esp + 0xc0]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x4037bd
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x90]
push dword [0x44bbe4]
call dword [sym.imp.SHELL32.dll_SHAddToRecentDocs]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [0x44bbd8]
mov esi, dword [0x44bbe4]
mov eax, dword [0x44bbec]
mov dword [esp + 0x8c], ecx
mov ecx, esi
sub ecx, 0x111
mov dword [esp + 0xc0], eax
je 0x403845
sub ecx, 5
jne 0x403859
push ebx
push ebx
push 0x488
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
movzx eax, ax
shl eax, 2
not eax
and eax, 8
push eax
push dword [0x44bbd8]
push dword [esp + 0xc8]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov esi, dword [0x44bbe4]
cmp dword [esp + 0x8c], 0xb
jne 0x403859
mov dword [0x44bbd8], 1
push 0x1fe
lea eax, [esp + 0x1e5e]
push ebx
push eax
mov word [esp + 0x1e64], si
call fcn.0040aac0
add esp, 0xc
cmp esi, ebx
je 0x403899
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x47c0]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
lea eax, [esp + 0x7c]
push eax
push 0x43ecf8
push 3
push ebx
mov esi, 0x43d320
push esi
call edi
test eax, eax
jl 0x403911
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
lea edx, [esp + 0x5918]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
lea edx, [esp + 0x1e58]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
lea edx, [esp + 0x60]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x4038f7
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x7c]
push dword [0x44bbe4]
call dword [sym.imp.SHELL32.dll_SHAddToRecentDocs]
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x104
lea eax, [esp + 0x3f9c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x94]
push eax
push 0x43ecf8
push 3
push ebx
push esi
call edi
test eax, eax
jl 0x4039e1
mov eax, dword [esp + 0x94]
mov ecx, dword [eax]
lea edx, [esp + 0x3f98]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x94]
mov ecx, dword [eax]
lea edx, [esp + 0x1e58]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x94]
mov ecx, dword [eax]
lea edx, [esp + 0xc4]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x4039d4
push 0x1f
pop eax
mov word [esp + 0x380], ax
lea edx, [esp + 0x380]
lea eax, [esp + 0x1e58]
push edx
mov dword [esp + 0x38c], eax
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x94]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ax, word [0x44bbe4]
push 0x1fe
mov word [esp + 0x185c], ax
lea eax, [esp + 0x185e]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
push 0xff
lea eax, [esp + 0x155d]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
add esp, 0xc
mov dword [esp + 0x1558], eax
lea eax, [esp + 0x48]
push eax
push 0x43ecf8
push 3
push ebx
push esi
call edi
test eax, eax
jl 0x403a9a
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x5b20]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x1858]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
lea edx, [esp + 0x54]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x403a80
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x48]
push dword [0x44bbe4]
call dword [sym.imp.SHELL32.dll_SHAddToRecentDocs]
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [0x44bbec]
cmp eax, ebx
je 0x403b0e
push eax
mov dword [esp + 0x58], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x2c8]
push eax
push dword [esp + 0x58]
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0x156c]
push ecx
lea ecx, [esp + 0x758]
push ecx
push dword [esp + 0x2f0]
push dword [esp + 0x2f0]
push dword [esp + 0x2f0]
push dword [esp + 0x2f0]
push dword [esp + 0x8c]
push eax
call sub.MSVFW32.dll_DrawDibDraw
cmp dword [0x44bbe4], ebx
je 0x403b34
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x3e90]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
push 0x104
lea eax, [esp + 0x42ac]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x98]
push eax
push 0x43ecf8
push 3
push ebx
push esi
call edi
test eax, eax
jl 0x403bf8
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
lea edx, [esp + 0x42a8]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
lea edx, [esp + 0x1858]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
lea edx, [esp + 0x70]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x403beb
push 0x1f
pop eax
mov word [esp + 0x3c0], ax
lea edx, [esp + 0x3c0]
lea eax, [esp + 0x1858]
push edx
mov dword [esp + 0x3cc], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [0x44bbe4]
mov esi, dword [0x44bbdc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
add eax, 4
mov dword [esp + 0x70], eax
imul eax, esi
add edx, ecx
cmp edx, eax
jne 0x403c35
mov esi, dword [0x44bbe8]
imul esi, dword [0x44bbf0]
imul esi, dword [0x44bbd8]
mov dword [0x44bbdc], esi
mov ax, word [0x44bbe4]
push 0x1fe
mov word [esp + 0x2d44], ax
lea eax, [esp + 0x2d46]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
mov ecx, dword [0x44bbe4]
mov edx, dword [esp + 0x20]
lea ecx, [ecx + eax*2]
add ecx, dword [0x44bbec]
add esp, 0xc
imul ecx, esi
sub edx, ecx
sub edx, eax
mov eax, dword [esp + 0x70]
add edx, dword [esp + 0x14]
imul eax, esi
cmp edx, eax
jne 0x403c9f
mov eax, dword [0x44bbe8]
imul eax, dword [0x44bbf0]
imul eax, dword [0x44bbd8]
mov dword [0x44bbdc], eax
cmp dword [0x44bbe4], ebx
je 0x403cc5
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x49d0]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
push 0x104
lea eax, [esp + 0x45bc]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x3c]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x403d7e
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
lea edx, [esp + 0x45b8]
push edx
push eax
call dword [ecx + 0x50]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
lea edx, [esp + 0x2d40]
push edx
push eax
call dword [ecx + 0x2c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
lea edx, [esp + 0x50]
push edx
push 0x43d300
push eax
call dword [ecx]
test eax, eax
jl 0x403d74
push 0x1f
pop eax
mov word [esp + 0x340], ax
lea edx, [esp + 0x340]
lea eax, [esp + 0x2d40]
push edx
mov dword [esp + 0x34c], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push 0x43ece4
push eax
call dword [ecx + 0x18]
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0xff
lea eax, [esp + 0x1255]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
add esp, 0xc
mov dword [esp + 0x1250], eax
cmp dword [0x44bbe4], ebx
je 0x403dc6
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x41a0]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
mov esi, dword [0x44bbec]
cmp esi, ebx
je 0x403e3a
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x288]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0x1264]
push ecx
lea ecx, [esp + 0x708]
push ecx
push dword [esp + 0x2b0]
push dword [esp + 0x2b0]
push dword [esp + 0x2b0]
push dword [esp + 0x2b0]
push dword [esp + 0x80]
push eax
call sub.MSVFW32.dll_DrawDibDraw
mov esi, dword [0x44bbec]
mov ax, word [0x44bbe4]
push 0x1fe
mov word [esp + 0x315c], ax
lea eax, [esp + 0x315e]
push ebx
push eax
call fcn.0040aac0
add esp, 0xc
push 0xff
lea eax, [esp + 0x165d]
push ebx
push eax
call fcn.0040aac0
mov eax, dword [0x44bbe8]
add esp, 0xc
mov dword [esp + 0x1658], eax
cmp esi, ebx
je 0x403ee8
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x278]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
call sub.MSVFW32.dll_DrawDibOpen
mov ecx, dword [0x44bbe8]
push 4
push ecx
push ecx
push ebx
push ebx
lea ecx, [esp + 0x166c]
push ecx
lea ecx, [esp + 0x780]
push ecx
push dword [esp + 0x2a0]
push dword [esp + 0x2a0]
push dword [esp + 0x2a0]
push dword [esp + 0x2a0]
push dword [esp + 0x80]
push eax
call sub.MSVFW32.dll_DrawDibDraw
cmp dword [0x44bbe4], ebx
je 0x403f0e
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x3358]
push eax
push 0x43d310
push 1
push ebx
push 0x43d330
call edi
lea eax, [esp + 0x4c]
push eax
push 0x43ecf8
push 3
push ebx
push 0x43d320
call edi
test eax, eax
jl 0x403f85
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10