Function at 0x401000
Capabilities:
Create thread
Get common file path
Get file size
Get program files directory
Hide graphical window
Link many functions at runtime
Read file on windows
Set current directory
Write file on windows

Disassembly:
call 0x401005
pop eax
sub eax, 5
mov dword [0x43df38], eax
push 0x43a160
call sub.KERNEL32.dll_LoadLibraryA
cmp eax, 0
je 0x4139a0
mov dword [0x43a064], eax
push 0x43a074
push dword [0x43a064]
call sub.KERNEL32.dll_GetProcAddress
mov dword [0x43a030], eax
push 0x43a175
call sub.KERNEL32.dll_LoadLibraryA
cmp eax, 0
je 0x4139a0
mov dword [0x43a06c], eax
push 0x43a11b
push dword [0x43a06c]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a038], eax
push 0x43a12e
push dword [0x43a06c]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a03c], eax
push 0x43a143
push dword [0x43a06c]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a040], eax
push 0x43a16c
call sub.KERNEL32.dll_LoadLibraryA
cmp eax, 0
je 0x4139a0
mov dword [0x43a068], eax
push 0x43a089
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a034], eax
push 0x43a098
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a044], eax
push 0x43a0a8
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a048], eax
push 0x43a0be
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a04c], eax
push 0x43a0cd
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a050], eax
push 0x43a0d5
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a054], eax
push 0x43a0df
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a058], eax
push 0x43a0f0
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a05c], eax
push 0x43a102
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a060], eax
push 0x43a10e
push dword [0x43a068]
call sub.KERNEL32.dll_GetProcAddress
cmp eax, 0
je 0x4139a0
mov dword [0x43a070], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
call sub.KERNEL32.dll_GetCurrentThreadId
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43e54f], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x4451ab
push 0x445646
call sub.user32.dll_FindWindowA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x40126f
mov dword [0x44481f], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 9
push dword [0x44481f]
call sub.user32.dll_ShowWindow
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x44481f]
call sub.user32.dll_SetForegroundWindow
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
call sub.KERNEL32.dll_ExitProcess
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push 0
push 0
push 0
push 0x43a020
call sub.GDI32.dll_CreateDCA
mov dword [0x43a01c], eax
push 8
push dword [0x43a01c]
call sub.GDI32.dll_GetDeviceCaps
mov dword [0x43a028], eax
push 0xa
push dword [0x43a01c]
call sub.GDI32.dll_GetDeviceCaps
mov dword [0x43a02c], eax
push dword [0x43a01c]
call sub.GDI32.dll_DeleteDC
push 0
push 0x447bce
push 0
push 0x30
call sub.user32.dll_SystemParametersInfoA
mov eax, dword [0x447bce]
mov dword [0x4447e1], eax
mov eax, dword [0x447bd2]
mov dword [0x4447e5], eax
mov eax, dword [0x447bd6]
mov dword [0x4447e9], eax
mov eax, dword [0x447bda]
mov dword [0x4447ed], eax
mov eax, dword [0x447bd6]
mov dword [0x4447f1], eax
mov eax, dword [0x447bce]
sub dword [0x4447f1], eax
inc dword [0x4447f1]
mov eax, dword [0x447bda]
mov dword [0x4447f5], eax
mov eax, dword [0x447bd2]
sub dword [0x4447f5], eax
inc dword [0x4447f5]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x31
call sub.user32.dll_GetSystemMetrics
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b417], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xb
call sub.user32.dll_GetSystemMetrics
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b41b], eax
push 0
call sub.ole32.dll_CoInitialize
cmp eax, 0
jne 0x4139a0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0
call sub.KERNEL32.dll_CreateMutexA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43ccb8], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43ccb4
push 0
push 0x4478d6
push 0x4116a3
push 0x3e8
push 0
call sub.KERNEL32.dll_CreateThread
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x4139a0
push 0x12c
push 0x446b28
push 0
call sub.KERNEL32.dll_GetModuleFileNameA
mov ebx, 0x446b28
add ebx, 0x12c
pushal
push ebx
mov ebx, 0x5c
pop edi
cmp byte [edi], bl
je 0x4013da
dec edi
jmp 0x4013d3
mov dword [0x44478f], edi
popal
mov edi, dword [0x44478f]
mov byte [edi], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x446b28
call sub.KERNEL32.dll_SetCurrentDirectoryA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x1a
push 0x446da8
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 1
jne 0x40146b
push 0x445526
push 0x446da8
call fcn.004382bb
push 0x4475d9
push 0x446da8
call fcn.004382bb
pushal
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x446da8
call sub.KERNEL32.dll_CreateFileA
mov dword [0x445193], eax
popal
cmp dword [0x445193], 0xffffffff
jne 0x401497
pushal
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x4475d9
call sub.KERNEL32.dll_CreateFileA
mov dword [0x445193], eax
popal
cmp dword [0x445193], 0xffffffff
je 0x4014c0
pushal
push 0
push 0x445197
push 0x18b2
push 0x441433
push dword [0x445193]
call sub.KERNEL32.dll_ReadFile
popal
push dword [0x445193]
call sub.KERNEL32.dll_CloseHandle
push 0
push 0x4485c9
push 0x4447b7
call sub.gdiplus.dll_GdiplusStartup
cmp eax, 0
jne 0x4139a0
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
mov dword [0x444727], eax
push 0x7f01
push 0
call sub.user32.dll_LoadCursorA
mov dword [0x44472b], eax
push 0x7f89
push 0
call sub.user32.dll_LoadCursorA
mov dword [0x44472f], eax
mov dword [0x447b2e], 0x12
mov byte [0x447b45], 1
mov byte [0x447b46], 0
mov byte [0x447b47], 0
mov byte [0x447b48], 1
mov byte [0x447b49], 2
pushal
push 0x20
push 0x447b4a
push 0x447820
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
push 0x447b2e
call sub.GDI32.dll_CreateFontIndirectA
mov dword [0x444763], eax
mov dword [0x447b2e], 0x10
mov byte [0x447b45], 1
mov byte [0x447b46], 0
mov byte [0x447b47], 0
mov byte [0x447b48], 1
mov byte [0x447b49], 1
pushal
push 0x20
push 0x447b4a
push 0x44787b
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
push 0x447b2e
call sub.GDI32.dll_CreateFontIndirectA
mov dword [0x444767], eax
mov dword [0x447b2e], 0x14
mov byte [0x447b45], 1
mov byte [0x447b46], 0
mov byte [0x447b47], 0
mov byte [0x447b48], 1
mov byte [0x447b49], 1
pushal
push 0x20
push 0x447b4a
push 0x447883
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
push 0x447b2e
call sub.GDI32.dll_CreateFontIndirectA
mov dword [0x44476b], eax
push 4
push 0x1000
push 0xfa0
push 0
call sub.KERNEL32.dll_VirtualAlloc
mov dword [0x444757], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x444717], eax
mov eax, dword [0x444717]
mov dword [0x447a62], eax
push 0x10
push 0x10
push 0x10
push 1
push 0x447083
push 0
call sub.user32.dll_LoadImageA
mov dword [0x447a7a], eax
push 0x10
push dword [0x43b41b]
push dword [0x43b41b]
push 1
push 0x447083
push 0
call sub.user32.dll_LoadImageA
mov dword [0x447a66], eax
push 0x447a4e
call sub.user32.dll_RegisterClassExA
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 8
push 0x43b704
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 1
je 0x4016a8
push 0x30
push 0x43a197
push 0x43a19d
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
pushal
push 0x12c
push 0x43bc04
push 0x43b704
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
pushal
push 0x43bc04
mov ebx, 0
pop edi
mov ecx, 0
mov al, byte [edi]
inc edi
inc ecx
cmp al, bl
jne 0x4016d0
dec ecx
mov dword [0x444787], ecx
mov dword [0x44478b], edi
popal
mov eax, dword [0x444787]
mov dword [0x43b6bc], eax
mov edi, dword [0x44478b]
dec edi
mov byte [edi], 0x5c
mov byte [edi + 1], 0x2a
mov byte [edi + 2], 0
cmp dword [0x43a030], 0
je 0x401730
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43c6d0
push 0
push 0
push 0x447a3e
call dword [0x43a030]
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x40173c
mov dword [0x43c6b4], 0
jmp 0x4017a9
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0x12c
push 0x43ca5c
push 0xffffffffffffffff
push dword [0x43c6d0]
push 0
push 0
call sub.KERNEL32.dll_WideCharToMultiByte
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
push 0x12c
push 0x43c930
push 0x43ca5c
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
pushal
push 0x43ca5c
mov ebx, 0
pop edi
cmp byte [edi], bl
je 0x401791
inc edi
jmp 0x40178a
mov dword [0x44478f], edi
popal
mov edi, dword [0x44478f]
mov byte [edi], 0x5c
mov byte [edi + 1], 0x2a
mov byte [edi + 2], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0
push 0x43c6d8
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 1
je 0x4017d6
mov dword [0x43c6b8], 0
jmp 0x401818
pushal
push 0x12c
push 0x43c804
push 0x43c6d8
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
pushal
push 0x43c804
mov ebx, 0
pop edi
cmp byte [edi], bl
je 0x401800
inc edi
jmp 0x4017f9
mov dword [0x44478f], edi
popal
mov edi, dword [0x44478f]
mov byte [edi], 0x5c
mov byte [edi + 1], 0x2a
mov byte [edi + 2], 0
pushal
push dword [0x43a7b2]
push 0x43b223
pop edi
pop edx
cmp edx, 0
jl 0x401846
add byte [edi], dl
jae 0x401832
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x40183b
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401844
mov byte [edi + 2], 0xff
jmp 0x401877
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401853
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401863
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401874
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push dword [0x43a7b6]
push 0x43b227
pop edi
pop edx
cmp edx, 0
jl 0x4018a6
add byte [edi], dl
jae 0x401892
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x40189b
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x4018a4
mov byte [edi + 2], 0xff
jmp 0x4018d7
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x4018b3
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x4018c3
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x4018d4
mov bl, 0
mov byte [edi + 2], bl
popal
mov dword [0x43b1db], 0x88d0
mov dword [0x43b3b7], 0x5d93ca
mov dword [0x43b3bb], 0x9486c1
pushal
push 0xffffffffffffffc8
push 0x43b1db
pop edi
pop edx
cmp edx, 0
jl 0x401920
add byte [edi], dl
jae 0x40190c
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401915
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x40191e
mov byte [edi + 2], 0xff
jmp 0x401951
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x40192d
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x40193d
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x40194e
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xfffffffffffffff6
push 0x43b3bb
pop edi
pop edx
cmp edx, 0
jl 0x40197c
add byte [edi], dl
jae 0x401968
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401971
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x40197a
mov byte [edi + 2], 0xff
jmp 0x4019ad
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401989
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401999
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x4019aa
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0
push 0x43b3c3
pop edi
pop edx
cmp edx, 0
jl 0x4019d8
add byte [edi], dl
jae 0x4019c4
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x4019cd
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x4019d6
mov byte [edi + 2], 0xff
jmp 0x401a09
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x4019e5
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x4019f5
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401a06
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xffffffffffffffec
push 0x43b3bf
pop edi
pop edx
cmp edx, 0
jl 0x401a34
add byte [edi], dl
jae 0x401a20
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401a29
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401a32
mov byte [edi + 2], 0xff
jmp 0x401a65
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401a41
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401a51
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401a62
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xfffffffffffffff6
push 0x43b2d7
pop edi
pop edx
cmp edx, 0
jl 0x401a90
add byte [edi], dl
jae 0x401a7c
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401a85
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401a8e
mov byte [edi + 2], 0xff
jmp 0x401ac1
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401a9d
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401aad
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401abe
mov bl, 0
mov byte [edi + 2], bl
popal
mov dword [0x43b47b], 0xc3e2fe
pushal
push 0xffffffffffffffec
push 0x43b47f
pop edi
pop edx
cmp edx, 0
jl 0x401af6
add byte [edi], dl
jae 0x401ae2
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401aeb
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401af4
mov byte [edi + 2], 0xff
jmp 0x401b27
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401b03
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401b13
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401b24
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xfffffffffffffff6
push 0x43b56e
pop edi
pop edx
cmp edx, 0
jl 0x401b52
add byte [edi], dl
jae 0x401b3e
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401b47
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401b50
mov byte [edi + 2], 0xff
jmp 0x401b83
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401b5f
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401b6f
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401b80
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xfffffffffffffff0
push 0x43b576
pop edi
pop edx
cmp edx, 0
jl 0x401bae
add byte [edi], dl
jae 0x401b9a
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401ba3
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401bac
mov byte [edi + 2], 0xff
jmp 0x401bdf
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401bbb
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401bcb
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401bdc
mov bl, 0
mov byte [edi + 2], bl
popal
mov dword [0x43e6f6], 0xe0dedd
mov dword [0x43e712], 0x9098a0
mov dword [0x43e7a6], 0x9098a0
mov dword [0x43e732], 0xaaaaaa
mov dword [0x43e786], 0xaaaaaa
pushal
push 3
push 0x43e6f6
pop edi
pop edx
cmp edx, 0
jl 0x401c3c
add byte [edi], dl
jae 0x401c28
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401c31
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401c3a
mov byte [edi + 2], 0xff
jmp 0x401c6d
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401c49
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401c59
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401c6a
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xffffffffffffffd2
push 0x43e712
pop edi
pop edx
cmp edx, 0
jl 0x401c98
add byte [edi], dl
jae 0x401c84
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401c8d
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401c96
mov byte [edi + 2], 0xff
jmp 0x401cc9
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401ca5
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401cb5
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401cc6
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xffffffffffffffda
push 0x43e7a6
pop edi
pop edx
cmp edx, 0
jl 0x401cf4
add byte [edi], dl
jae 0x401ce0
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401ce9
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401cf2
mov byte [edi + 2], 0xff
jmp 0x401d25
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401d01
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401d11
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401d22
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xffffffffffffffe2
push 0x43e732
pop edi
pop edx
cmp edx, 0
jl 0x401d50
add byte [edi], dl
jae 0x401d3c
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401d45
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401d4e
mov byte [edi + 2], 0xff
jmp 0x401d81
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401d5d
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401d6d
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401d7e
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xfffffffffffffff6
push 0x43e786
pop edi
pop edx
cmp edx, 0
jl 0x401dac
add byte [edi], dl
jae 0x401d98
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401da1
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401daa
mov byte [edi + 2], 0xff
jmp 0x401ddd
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401db9
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401dc9
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401dda
mov bl, 0
mov byte [edi + 2], bl
popal
pushal
push 0xfffffffffffffff6
push 0x43e5dd
pop edi
pop edx
cmp edx, 0
jl 0x401e08
add byte [edi], dl
jae 0x401df4
mov byte [edi], 0xff
add byte [edi + 1], dl
jae 0x401dfd
mov byte [edi + 1], 0xff
add byte [edi + 2], dl
jae 0x401e06
mov byte [edi + 2], 0xff
jmp 0x401e39
mov ebx, 0
mov bl, byte [edi]
add ebx, edx
jns 0x401e15
mov bl, 0
mov byte [edi], bl
mov ebx, 0
mov bl, byte [edi + 1]
add ebx, edx
jns 0x401e25
mov bl, 0
mov byte [edi + 1], bl
mov ebx, 0
mov bl, byte [edi + 2]
add ebx, edx
jns 0x401e36
mov bl, 0
mov byte [edi + 2], bl
popal
mov eax, 0xf
mov dword [0x447b6a], eax
mov eax, 0x2bc
mov dword [0x447b6e], eax
mov eax, dword [0x43b22b]
mov dword [0x447b72], eax
mov eax, dword [0x43b223]
mov dword [0x447b76], eax
mov eax, dword [0x43b233]
mov dword [0x447b86], eax
call fcn.00435932
mov dword [0x43b22f], eax
mov eax, dword [0x4447e1]
mov dword [0x43a7be], eax
sub dword [0x43a7be], 1
mov eax, dword [0x4447e5]
mov dword [0x43a7c2], eax
sub dword [0x43a7c2], 1
mov eax, dword [0x4447f1]
mov dword [0x43a7c6], eax
add dword [0x43a7c6], 1
mov eax, dword [0x4447f5]
mov dword [0x43a7ca], eax
add dword [0x43a7ca], 1
jmp 0x401ee6
pushal
push 0
push dword [0x444717]
push 0
push 0
push dword [0x43a7ca]
push dword [0x43a7c6]
push dword [0x43a7c2]
push dword [0x43a7be]
push 0x808b0000
push 0x401ebc
push 0x401ecb
push 0x40000
call sub.user32.dll_CreateWindowExA
mov dword [0x44471b], eax
popal
jmp 0x401f4c
pushal
push 0
push dword [0x444717]
push 0
push 0
push 0x104
push 0x708
push 0x64
push 0x64
push 0x20000
push 0x401f2c
push 0x401f31
push 8
call sub.user32.dll_CreateWindowExA
mov dword [0x444723], eax
popal
push dword [0x44471b]
call sub.user32.dll_GetDC
mov dword [0x43a7e2], eax
mov eax, dword [0x4447f1]
mov dword [0x43a7ce], eax
mov eax, dword [0x4447f5]
mov dword [0x43a7d2], eax
push 0x43a7de
push 0x43a7da
push 0x43a7d6
push dword [0x43a7d2]
push dword [0x43a7ce]
call fcn.00435e04
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov dword [0x44873b], 0
mov dword [0x44873f], 0
mov dword [0x448743], 0x708
mov dword [0x448747], 0x104
mov dword [0x44877b], 0xdcdbd3
mov dword [0x4487c7], 2
mov dword [0x4488d3], 1
mov eax, dword [0x444723]
mov dword [0x4487d3], eax
push 0x444fcb
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x444fcb]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x44476b]
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x4447e1]
mov dword [0x44873b], eax
mov eax, dword [0x4447e5]
mov dword [0x44873f], eax
mov eax, dword [0x4447f1]
mov dword [0x448743], eax
mov eax, dword [0x4447f5]
mov dword [0x448747], eax
mov dword [0x44877b], 0xffffff
mov dword [0x44885f], 0
mov dword [0x4487c7], 2
mov dword [0x4488d3], 1
mov eax, dword [0x44471b]
mov dword [0x4487d3], eax
push 0x444fc7
push 0x44873b
call fcn.00430ca3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x1a
push 0x446da8
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 1
jne 0x40253a
push 0x445526
push 0x446da8
call fcn.004382bb
push 0x4475ea
push 0x446da8
call fcn.004382bb
pushal
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x446da8
call sub.KERNEL32.dll_CreateFileA
mov dword [0x43a7ee], eax
popal
cmp dword [0x43a7ee], 0xffffffff
jne 0x4025d9
pushal
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x4475ea
call sub.KERNEL32.dll_CreateFileA
mov dword [0x43a7ee], eax
popal
cmp dword [0x43a7ee], 0xffffffff
jne 0x4025d9
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x26
push 0x446ee8
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 1
jne 0x4034c7
push 0x445535
push 0x446ee8
call fcn.004382bb
push 0x4475ea
push 0x446ee8
call fcn.004382bb
pushal
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x446ee8
call sub.KERNEL32.dll_CreateFileA
mov dword [0x43a7ee], eax
popal
cmp dword [0x43a7ee], 0xffffffff
je 0x4034c7
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push dword [0x43a7ee]
call sub.KERNEL32.dll_GetFileSize
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
add eax, 0x12c
add eax, 0x12c
add eax, 0x12c
mov dword [0x43a7ea], eax
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43a7ea]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43a7e6], eax
popal
pushal
push 0
push 0x445197
push dword [0x43a7ea]
push dword [0x43a7e6]
push dword [0x43a7ee]
call sub.KERNEL32.dll_ReadFile
popal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x43a7ee]
call sub.KERNEL32.dll_CloseHandle
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push 0
push 0x44148f
push 0x43a85e
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441493
push 0x43a86c
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441497
push 0x43a878
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44149b
push 0x43a884
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44149f
push 0x43a890
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414a3
push 0x43a89c
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414a7
push 0x43a8a8
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414ab
push 0x43a8b4
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414af
push 0x43a8c0
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414b3
push 0x43a8cc
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414b7
push 0x43a8d8
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414cf
push 0x43a8e5
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414d3
push 0x43a8f4
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414d7
push 0x43a901
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414db
push 0x43a90e
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414df
push 0x43a91b
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414e3
push 0x43a928
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414e7
push 0x43a935
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414eb
push 0x43a942
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414ef
push 0x43a94f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414f3
push 0x43a95c
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 1
push 0x4414f7
push 0x43a969
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441527
push 0x43a977
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x44158e
push 0x43a985
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4415fb
push 0x43a991
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441665
push 0x43a99d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4416ce
push 0x43a9a9
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441737
push 0x43a9b5
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4417a6
push 0x43a9c1
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441815
push 0x43a9cd
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441884
push 0x43a9d9
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4418f3
push 0x43a9e5
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441962
push 0x43a9f1
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4419e0
push 0x43a9fe
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441b71
push 0x43aa10
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441cd3
push 0x43aa22
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441e15
push 0x43aa34
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x441f89
push 0x43aa46
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4420c9
push 0x43aa58
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442209
push 0x43aa6a
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442349
push 0x43aa7c
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442489
push 0x43aa8e
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x4425c9
push 0x43aaa0
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442709
push 0x43aab3
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442835
push 0x43aac7
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442961
push 0x43aadb
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442a8d
push 0x43aaef
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 3
push 0x442bb9
push 0x43ab03
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414bb
push 0x43ab17
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414bf
push 0x43ab26
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4414c7
push 0x43ab37
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441473
push 0x43ab45
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444597
push 0x43ab50
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44459b
push 0x43ab68
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445a3
push 0x43ab82
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445ab
push 0x43ab98
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445af
push 0x43abab
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445b3
push 0x43abc1
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445bb
push 0x43abd9
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445c3
push 0x43abed
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445c7
push 0x43abff
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445cb
push 0x43ac15
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445d3
push 0x43ac2d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445db
push 0x43ac41
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445df
push 0x43ac53
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445e3
push 0x43ac69
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445eb
push 0x43ac81
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445f3
push 0x43ac95
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445f7
push 0x43aca7
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4445fb
push 0x43acbd
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444603
push 0x43acd5
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44460b
push 0x43ace9
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44460f
push 0x43acfb
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444613
push 0x43ad11
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44461b
push 0x43ad29
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444623
push 0x43ad3d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444627
push 0x43ad4f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44462b
push 0x43ad65
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444633
push 0x43ad7d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44463b
push 0x43ad91
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44463f
push 0x43ada3
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444643
push 0x43adb9
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44464b
push 0x43add1
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444653
push 0x43ade5
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444657
push 0x43adf7
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44465b
push 0x43ae0d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444663
push 0x43ae25
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44466b
push 0x43ae39
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44466f
push 0x43ae4b
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444673
push 0x43ae61
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44467b
push 0x43ae79
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444683
push 0x43ae8d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444687
push 0x43ae9f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44468b
push 0x43aeb6
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444693
push 0x43aecf
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44469b
push 0x43aee4
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44469f
push 0x43aef7
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446a3
push 0x43af0e
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446ab
push 0x43af27
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446b3
push 0x43af3c
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446b7
push 0x43af4f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446bb
push 0x43af66
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446c3
push 0x43af7f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446cb
push 0x43af94
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446cf
push 0x43afa7
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446d3
push 0x43afbe
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446db
push 0x43afd7
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446e3
push 0x43afec
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446e7
push 0x43afff
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446eb
push 0x43b016
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446f3
push 0x43b02f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446fb
push 0x43b044
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x4446ff
push 0x43b057
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444703
push 0x43b06e
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44470b
push 0x43b087
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x444713
push 0x43b09c
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441477
push 0x43b0af
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44147b
push 0x43b0bf
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44147f
push 0x43b0cf
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441487
push 0x43b0e2
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441483
push 0x43b0f6
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441467
push 0x43b10f
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44146b
push 0x43b126
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44146f
push 0x43b13d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x441443
push 0x43b153
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 0
push 0x44143f
push 0x43b15d
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
push 2
push 0x44144b
push 0x43b169
push dword [0x43a7ea]
push dword [0x43a7e6]
call fcn.00437a08
cmp dword [0x44143f], 1
jne 0x4034f0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x44144b
call sub.KERNEL32.dll_GetSystemTimeAsFileTime
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x44143f], 0
mov dword [0x43b1af], 0x895440
mov dword [0x43b17f], 0x895440
mov dword [0x43b183], 0x895440
mov dword [0x43b187], 0x895440
mov ebx, 0x2710
push ebx
push 0x158
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
mov dword [0x43b1c3], ebx
mov ebx, 0x7530
push ebx
push 0x158
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
mov dword [0x43b1b3], ebx
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x2dc6c0
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b684], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x2dc6c0
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b67c], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x2dc6c0
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b177], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b680], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43b17f]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b688], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x2dc6c0
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b1ab], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43b183]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b68c], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b197], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b19b], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b694], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b690], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b18b], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b1a3], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43b187]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b193], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x895440
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43c684], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43b1b3]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43c688], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43b1af]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b1b7], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b6a0], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b17b], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b69c], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b19f], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b18f], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push dword [0x43b1b3]
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b1bb], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b1a7], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x2710
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x44482f], eax
popal
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0x8ca0
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43b1bf], eax
popal
mov eax, dword [0x43a7c6]
mov dword [0x43b1c7], eax
mov eax, dword [0x43a7ca]
mov eax, eax
mov dword [0x43b1cb], eax
mov eax, dword [0x43b1c7]
sub eax, dword [0x43b397]
sub eax, dword [0x43b397]
sub eax, 1
sub eax, 1
mov dword [0x43b39f], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x446b28
call sub.KERNEL32.dll_SetCurrentDirectoryA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov dword [0x44873b], 0
mov dword [0x44873f], 0
mov eax, dword [0x43b1c7]
mov dword [0x448743], eax
mov eax, dword [0x43b1cb]
mov dword [0x448747], eax
mov dword [0x44877b], 0xffffff
mov dword [0x4487c7], 2
mov dword [0x4488d3], 1
mov dword [0x4488cf], 0x41595c
mov eax, dword [0x44471b]
mov dword [0x4487d3], eax
push 0x44507f
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b1c7]
sub eax, 2
mov dword [0x43b1cf], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b1d7]
mov dword [0x44873b], eax
mov eax, dword [0x43b1d7]
mov dword [0x44873f], eax
mov eax, dword [0x43b1cf]
mov dword [0x448743], eax
mov eax, dword [0x43b1d3]
mov dword [0x448747], eax
mov eax, dword [0x43b1db]
mov dword [0x44877b], eax
mov dword [0x448793], 4
mov dword [0x44877f], 0xffffff
mov eax, dword [0x43b1db]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 2
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x44526d
mov dword [0x448807], 0x447875
mov dword [0x4487c7], 0x1006
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450af
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b1c7]
sub eax, dword [0x43b1ef]
sub eax, dword [0x43b397]
sub eax, 4
mov dword [0x43b1df], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b1df]
mov dword [0x44873b], eax
mov eax, dword [0x43b1e3]
mov dword [0x44873f], eax
mov eax, dword [0x43b1e7]
mov dword [0x448743], eax
mov eax, dword [0x43b1eb]
mov dword [0x448747], eax
mov dword [0x44875b], 2
mov dword [0x44875f], 3
mov eax, dword [0x43b1ef]
mov dword [0x448763], eax
mov dword [0x448767], 0x12
mov dword [0x448827], 0x447154
mov dword [0x4489e3], 0x447154
mov dword [0x4489e7], 0x44717a
mov dword [0x4489ff], 4
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x10
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x4450af]
mov dword [0x448863], eax
push 0x43b1f3
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b1df]
sub eax, dword [0x43b1ff]
mov dword [0x43b1f7], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b1f7]
mov dword [0x44873b], eax
mov eax, dword [0x43b1fb]
mov dword [0x44873f], eax
mov eax, dword [0x43b1ff]
mov dword [0x448743], eax
mov eax, dword [0x43b203]
mov dword [0x448747], eax
mov dword [0x44875b], 0
mov dword [0x44875f], 3
mov dword [0x448763], 0x1c
mov dword [0x448767], 0x12
mov dword [0x448827], 0x4470f6
mov dword [0x4489e3], 0x4470f6
mov dword [0x4489e7], 0x44711f
mov dword [0x4489ff], 4
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x10
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x4450af]
mov dword [0x448863], eax
push 0x43b207
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b397]
mov dword [0x43b20b], eax
mov eax, dword [0x43b1d7]
add eax, dword [0x43b1d3]
add eax, dword [0x43b213]
mov dword [0x43b20f], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b20b]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x4a
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414cf]
mov dword [0x448783], eax
mov dword [0x448877], 1
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x441527
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414cf]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414cf]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414cf]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450c7
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x4450c7]
mov eax, dword [0x43b20b]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b237], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b237]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x5e
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414d3]
mov dword [0x448783], eax
mov dword [0x448877], 1
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x44158e
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414d3]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414d3]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414d3]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450cb
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x4450cb]
mov eax, dword [0x43b237]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b243], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b243]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x6e
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414d7]
mov dword [0x448783], eax
mov dword [0x448877], 1
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x4415fb
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414d7]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414d7]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414d7]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450cf
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x4450cf]
mov eax, dword [0x43b243]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b24f], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b24f]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x4a
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414db]
mov dword [0x448783], eax
mov dword [0x448877], 1
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x441665
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414db]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414db]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414db]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450d3
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x4450d3]
mov eax, dword [0x43b24f]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b25b], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b25b]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x4a
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414df]
mov dword [0x448783], eax
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x448877], 1
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x4416ce
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414df]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414df]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414df]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450d7
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x4450d7]
mov eax, dword [0x43b25b]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b267], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b267]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x4a
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414e3]
mov dword [0x448783], eax
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x448877], 1
mov dword [0x4487cb], 0x441737
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414e3]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414e3]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414e3]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b273
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x43b273]
mov eax, dword [0x43b267]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b28b], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b28b]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x4a
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414e7]
mov dword [0x448783], eax
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x448877], 1
mov dword [0x4487cb], 0x4417a6
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414e7]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414e7]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414e7]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b277
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x43b277]
mov eax, dword [0x43b28b]
add eax, dword [edi + 8]
add eax, 4
mov dword [0x43b297], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b297]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov dword [0x448743], 0x4a
mov dword [0x448747], 0x1c
mov eax, 0x4a
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, 0x12c
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b21f]
mov dword [0x44877f], eax
mov eax, dword [0x4414eb]
mov dword [0x448783], eax
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x448877], 1
mov dword [0x4487cb], 0x441815
mov eax, dword [0x43b233]
mov dword [0x448807], eax
mov eax, dword [0x4414eb]
mov dword [0x4489a7], eax
mov eax, dword [0x43b21f]
mov dword [0x4489bb], eax
mov eax, dword [0x4414eb]
mov dword [0x4489bf], eax
mov eax, dword [0x43b223]
mov dword [0x448987], eax
mov eax, dword [0x43b22b]
mov dword [0x44899b], eax
mov eax, dword [0x43b223]
mov dword [0x44899f], eax
mov eax, dword [0x43b22f]
mov dword [0x4489a3], eax
mov dword [0x448a03], 0xa
mov dword [0x44875b], 0
mov dword [0x44875f], 0
mov dword [0x448763], 0x64
mov dword [0x448767], 0x1c
mov eax, dword [0x4414eb]
mov dword [0x44890b], eax
mov dword [0x448827], 0x447440
mov dword [0x4489ff], 2
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x4114
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b27b
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov eax, dword [0x43b2a3]
mov dword [0x448743], eax
mov eax, dword [0x43b2a7]
mov dword [0x448747], eax
mov eax, dword [0x43b2a3]
mov dword [0x448763], eax
mov eax, dword [0x43b2a7]
mov dword [0x448767], eax
mov dword [0x448827], 0x447206
mov dword [0x4489e3], 0x447206
mov dword [0x4489ef], 0x44723c
mov dword [0x4489ff], 0x1c
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x810
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b2af
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov eax, dword [0x43b2a3]
mov dword [0x448743], eax
mov eax, dword [0x43b2a7]
mov dword [0x448747], eax
mov eax, dword [0x43b2a3]
mov dword [0x448763], eax
mov eax, dword [0x43b2a7]
mov dword [0x448767], eax
mov dword [0x448827], 0x447273
mov dword [0x4489e3], 0x447273
mov dword [0x4489ef], 0x4472a5
mov dword [0x4489ff], 0x1c
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x810
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b2b3
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov eax, dword [0x43b2a3]
mov dword [0x448743], eax
mov eax, dword [0x43b2a7]
mov dword [0x448747], eax
mov eax, dword [0x43b2a3]
mov dword [0x448763], eax
mov eax, dword [0x43b2a7]
mov dword [0x448767], eax
mov dword [0x448827], 0x4472d8
mov dword [0x4489e3], 0x4472d8
mov dword [0x4489ef], 0x447310
mov dword [0x4489ff], 0xc
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x810
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b2b7
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov eax, dword [0x43b2a3]
mov dword [0x448743], eax
mov eax, dword [0x43b2a7]
mov dword [0x448747], eax
mov eax, dword [0x43b2a3]
mov dword [0x448763], eax
mov eax, dword [0x43b2a7]
mov dword [0x448767], eax
mov dword [0x448827], 0x447349
mov dword [0x4489e3], 0x447349
mov dword [0x4489ef], 0x44737d
mov dword [0x4489ff], 0xc
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x810
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b2bb
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b20f]
add eax, dword [0x43b2cb]
mov dword [0x43b2bf], eax
mov eax, 0x1c
sub eax, dword [0x43b2cb]
sub eax, dword [0x43b2cb]
mov dword [0x43b2c7], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, dword [0x43b2bf]
mov dword [0x44873f], eax
mov eax, dword [0x43b2c3]
mov dword [0x448743], eax
mov eax, dword [0x43b2c7]
mov dword [0x448747], eax
mov eax, 0x1e
mov dword [0x44874b], eax
mov eax, 0x1c
mov dword [0x44874f], eax
mov eax, dword [0x43b2c3]
mov dword [0x448753], eax
mov eax, 0x1c
mov dword [0x448757], eax
mov eax, dword [0x43b2d3]
mov dword [0x44877b], eax
mov dword [0x448787], 2
mov eax, dword [0x43b2d7]
mov dword [0x4487ff], eax
mov eax, dword [0x43b2d7]
mov dword [0x4487f7], eax
mov eax, dword [0x43b2db]
mov dword [0x4487fb], eax
mov eax, dword [0x43b2d7]
mov dword [0x448803], eax
mov eax, 8
mov dword [0x44878f], eax
mov dword [0x44877f], 0
mov eax, dword [0x43b2d3]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x448877], 0
mov dword [0x4487d7], 1
mov dword [0x4487f3], 4
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov eax, 0
mov dword [0x4487bf], eax
mov eax, 0x64
mov dword [0x448867], eax
mov dword [0x4487e7], 0
mov dword [0x44886b], 0x64
mov dword [0x44886f], 0x64
mov dword [0x4487cb], 0x43b2e3
mov dword [0x448807], 0x4478a0
mov dword [0x44880f], 0xa
mov dword [0x4487c7], 0x166
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b2df
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x43b2df]
mov ebx, dword [edi + 0x94]
mov dword [0x444737], ebx
cmp dword [0x441473], 2
jne 0x406f9a
mov eax, dword [0x43b373]
mov dword [0x43b35b], eax
mov eax, dword [0x43b377]
mov dword [0x43b35f], eax
mov eax, 0x44529a
mov dword [0x43b363], eax
jmp 0x406fc1
cmp dword [0x441473], 1
jne 0x406fc1
mov eax, dword [0x43b36b]
mov dword [0x43b35b], eax
mov eax, dword [0x43b36f]
mov dword [0x43b35f], eax
mov eax, 0x44529e
mov dword [0x43b363], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, dword [0x43b2bf]
mov dword [0x44873f], eax
mov eax, dword [0x43b367]
mov dword [0x448743], eax
mov eax, 0x1c
mov dword [0x448747], eax
mov eax, dword [0x43b35b]
mov dword [0x44878f], eax
mov eax, dword [0x43b35f]
mov dword [0x448793], eax
mov eax, 0x333333
mov dword [0x44877f], eax
mov eax, 0xcccccc
mov dword [0x448783], eax
mov dword [0x448797], 0xf
mov dword [0x44880b], 0x190
mov dword [0x4487d7], 1
mov dword [0x4487ef], 1
mov dword [0x448877], 1
mov eax, dword [0x43b363]
mov dword [0x4487cb], eax
mov dword [0x448807], 0x44788c
mov eax, dword [0x43b367]
mov dword [0x448763], eax
mov eax, 0x1c
mov dword [0x448767], eax
mov dword [0x448827], 0x4473b2
mov dword [0x4489e3], 0x4473b2
mov dword [0x4489ef], 0x4473e4
mov dword [0x4489ff], 4
mov dword [0x44880f], 9
mov dword [0x4487c7], 0x814
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b37b
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b397]
add eax, dword [0x43b39f]
sub eax, dword [0x43b383]
mov dword [0x43b37f], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b37f]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov eax, dword [0x43b383]
mov dword [0x448743], eax
mov eax, dword [0x43b383]
mov dword [0x448747], eax
mov eax, dword [0x43b383]
mov dword [0x448763], eax
mov eax, dword [0x43b383]
mov dword [0x448767], eax
mov dword [0x448827], 0x4470d3
mov dword [0x4487c7], 0x10
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450db
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b37f]
sub eax, dword [0x43b387]
sub eax, dword [0x43b38f]
inc eax
mov dword [0x43b38b], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b38b]
mov dword [0x44873b], eax
mov eax, dword [0x43b20f]
mov dword [0x44873f], eax
mov eax, dword [0x43b38f]
mov dword [0x448743], eax
mov eax, dword [0x43b38f]
mov dword [0x448747], eax
mov eax, dword [0x43b38f]
mov dword [0x448763], eax
mov eax, dword [0x43b38f]
mov dword [0x448767], eax
mov dword [0x448827], 0x4471db
mov dword [0x4487c7], 0x10
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b393
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b20f]
add eax, 0x1c
add eax, dword [0x43b213]
mov dword [0x43b39b], eax
mov eax, dword [0x43b39b]
add eax, 0x1a
mov dword [0x43b3e7], eax
mov eax, dword [0x43b1cb]
shr eax, 1
mov dword [0x43b3ef], eax
mov eax, dword [0x43b3e7]
add eax, dword [0x43b3ef]
add eax, dword [0x43b4fe]
mov dword [0x43b4fa], eax
mov eax, dword [0x43b4fa]
add eax, 0x1a
mov dword [0x43b506], eax
mov eax, dword [0x43b1cb]
sub eax, dword [0x43b4fa]
sub eax, 0x1a
sub eax, dword [0x43b522]
sub eax, 3
mov dword [0x43b50e], eax
mov eax, dword [0x43b3ef]
add eax, dword [0x43b4fe]
add eax, 0x1a
add eax, dword [0x43b50e]
mov dword [0x43b3f3], eax
mov eax, dword [0x43b39f]
sub eax, 0x258
shr eax, 1
mov dword [0x43b3a7], eax
mov edx, 0
mov eax, 0x1a
sub eax, dword [0x43b3a3]
mov ebx, 2
idiv ebx
add eax, edx
mov dword [0x43b3ab], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b397]
mov dword [0x44873b], eax
mov eax, dword [0x43b39b]
mov dword [0x44873f], eax
mov eax, dword [0x43b39f]
mov dword [0x448743], eax
mov eax, 0x1a
mov dword [0x448747], eax
mov eax, dword [0x43b3b7]
mov dword [0x44877b], eax
mov dword [0x448787], 2
mov eax, dword [0x43b3b7]
mov dword [0x4487ff], eax
mov eax, dword [0x43b3b7]
mov dword [0x4487f7], eax
mov eax, dword [0x43b3b7]
mov dword [0x4487fb], eax
mov eax, dword [0x43b3b7]
mov dword [0x448803], eax
mov dword [0x448793], 5
mov eax, dword [0x43b3b3]
mov dword [0x44877f], eax
mov dword [0x448783], 0xffffff
mov dword [0x448797], 0x10
mov dword [0x448877], 1
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 2
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x44527e
mov dword [0x448807], 0x4477f0
mov eax, dword [0x43b3a7]
mov dword [0x44875b], eax
mov eax, dword [0x43b3ab]
mov dword [0x44875f], eax
mov dword [0x448763], 0x258
mov dword [0x448767], 0x1a
mov dword [0x448827], 0x4470ae
mov eax, dword [0x44472f]
mov dword [0x44890f], eax
mov dword [0x4487c7], 0x36
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450b3
push 0x44873b
call fcn.00430ca3
mov ebx, dword [0x43b39f]
sub ebx, 2
mov edx, 0x1a
dec edx
pushal
push dword [0x4450b3]
push dword [0x43b3b7]
push 1
push edx
push ebx
push edx
push 2
pop dword [0x445137]
pop dword [0x44513b]
pop dword [0x44513f]
pop dword [0x445143]
pop dword [0x445147]
pop dword [0x44514b]
pop dword [0x44514f]
mov edi, dword [0x44514f]
push ebx
mov eax, dword [0x44514b]
mov bl, al
shr eax, 8
mov bh, ah
mov ah, bl
shl eax, 8
mov al, bh
pop ebx
mov dword [0x44514b], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x44514b]
push dword [0x445147]
push 0
call sub.GDI32.dll_CreatePen
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x445153], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x445157], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push dword [0x44513b]
push dword [0x445137]
push dword [edi + 0x68]
call sub.GDI32.dll_MoveToEx
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x445143]
push dword [0x44513f]
push dword [edi + 0x68]
call sub.GDI32.dll_LineTo
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x445157]
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x445153]
call sub.GDI32.dll_DeleteObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
popal
pushal
mov edi, dword [0x4450b3]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [edi + 0x68]
push dword [edi + 0xc]
push dword [edi + 8]
push 0
push 0
push dword [edi + 0x64]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov esi, dword [edi + 0x128]
cmp esi, 0
jne 0x407d51
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
jmp 0x407d84
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x447bae
push dword [0x44471b]
push dword [esi + 0x94]
call sub.user32.dll_MapWindowPoints
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [0x43a7d6]
push dword [0x43a7d2]
push dword [0x43a7ce]
push dword [0x447bb2]
push dword [0x447bae]
call fcn.00434d99
popal
mov eax, 0x1a
mov dword [0x43b3cb], eax
mov eax, dword [0x43b39f]
sub eax, dword [0x43b3cb]
mov dword [0x43b3c7], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b3c7]
mov dword [0x44873b], eax
mov eax, 0
mov dword [0x44873f], eax
mov eax, dword [0x43b3cb]
mov dword [0x448743], eax
mov eax, dword [0x43b3cb]
mov dword [0x448747], eax
mov eax, dword [0x43b3cf]
mov dword [0x44875b], eax
mov eax, dword [0x43b3d3]
mov dword [0x44875f], eax
mov eax, dword [0x43b3d7]
mov dword [0x448763], eax
mov eax, dword [0x43b3d7]
mov dword [0x448767], eax
mov dword [0x448827], 0x4471ac
mov eax, dword [0x44472f]
mov dword [0x44890f], eax
mov dword [0x4487c7], 0x10
mov eax, dword [0x4450b3]
mov dword [0x448863], eax
push 0x43b3db
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b39f]
mov dword [0x43b3eb], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b397]
mov dword [0x44873b], eax
mov eax, dword [0x43b3e7]
mov dword [0x44873f], eax
mov eax, dword [0x43b3eb]
mov dword [0x448743], eax
mov eax, dword [0x43b3ef]
mov dword [0x448747], eax
mov eax, dword [0x43b3eb]
mov dword [0x44874b], eax
mov eax, dword [0x43b3ef]
mov dword [0x44874f], eax
mov eax, dword [0x43b3eb]
mov dword [0x448753], eax
mov eax, dword [0x43b3f3]
mov dword [0x448757], eax
mov eax, dword [0x43b3fb]
mov dword [0x44877b], eax
mov eax, dword [0x43b3f7]
mov dword [0x448787], eax
mov eax, dword [0x43b3fb]
mov dword [0x4487ff], eax
mov eax, dword [0x43b3bf]
mov dword [0x4487f7], eax
mov eax, dword [0x43b3c3]
mov dword [0x4487fb], eax
mov eax, dword [0x43b3bf]
mov dword [0x448803], eax
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x122
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b3ff
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b3f7]
mov dword [0x43b403], eax
mov eax, dword [0x43b417]
sub eax, 0x10
mov ebx, dword [0x43b40f]
add ebx, eax
mov dword [0x43b40b], ebx
mov eax, dword [0x43b3ef]
sub eax, dword [0x43b3f7]
sub eax, dword [0x43b3f7]
mov dword [0x43b43b], eax
mov eax, dword [0x43b3f3]
sub eax, dword [0x43b3f7]
sub eax, dword [0x43b3f7]
mov dword [0x43b43f], eax
mov eax, dword [0x43b417]
shr eax, 2
mov dword [0x43b423], eax
mov eax, dword [0x43b417]
add eax, dword [0x43b423]
mov dword [0x43b473], eax
mov dword [0x43b46b], eax
mov ebx, dword [0x43b43b]
push edx
push ebx
push dword [0x43b473]
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
sub ebx, 1
mov dword [0x43b463], ebx
mov edx, dword [0x43b43b]
mov ebx, dword [0x43b463]
push ebx
push dword [0x43b473]
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
sub ebx, dword [0x43b423]
sub edx, ebx
mov ecx, dword [0x43b473]
shl ecx, 1
cmp edx, ecx
jb 0x408404
inc dword [0x43b463]
mov edx, dword [0x43b43b]
mov ebx, dword [0x43b473]
push ebx
push dword [0x43b463]
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
sub ebx, dword [0x43b423]
sub edx, ebx
shr edx, 1
mov dword [0x43b447], edx
mov ebx, dword [0x43b43f]
push edx
push ebx
push dword [0x43b473]
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
sub ebx, 1
mov dword [0x43b467], ebx
mov edx, dword [0x43b43f]
mov ebx, dword [0x43b467]
push ebx
push dword [0x43b473]
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
sub ebx, dword [0x43b423]
sub edx, ebx
mov ecx, dword [0x43b473]
shl ecx, 1
cmp edx, ecx
jb 0x408488
inc dword [0x43b467]
mov edx, dword [0x43b43f]
mov ebx, dword [0x43b473]
push ebx
push dword [0x43b467]
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
sub ebx, dword [0x43b423]
sub edx, ebx
shr edx, 1
mov dword [0x43b44b], edx
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b403]
mov dword [0x44873b], eax
mov eax, dword [0x43b407]
mov dword [0x44873f], eax
mov eax, dword [0x43b40b]
mov dword [0x448743], eax
mov eax, dword [0x43b43b]
mov dword [0x448747], eax
mov eax, dword [0x43b40b]
mov dword [0x44874b], eax
mov eax, dword [0x43b43b]
mov dword [0x44874f], eax
mov eax, dword [0x43b40b]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x3102
mov eax, dword [0x43b3ff]
mov dword [0x448863], eax
push 0x43b42b
push 0x44873b
call fcn.00430ca3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0x447b2e
push 0x3c
push 0x1f
call sub.user32.dll_SystemParametersInfoA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
push 0x20
push 0x43b487
push 0x447b4a
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
mov eax, dword [0x447b2e]
mov dword [0x43b477], eax
mov eax, dword [0x43b403]
add eax, dword [0x43b40b]
mov dword [0x43b42f], eax
mov eax, dword [0x43b3eb]
sub eax, dword [0x43b40b]
sub eax, dword [0x43b4ab]
sub eax, dword [0x43b55a]
sub eax, dword [0x43b4e2]
sub eax, dword [0x43b4da]
mov dword [0x43b437], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b42f]
mov dword [0x44873b], eax
mov eax, dword [0x43b407]
mov dword [0x44873f], eax
mov eax, dword [0x441487]
mov dword [0x448743], eax
mov eax, dword [0x43b43b]
mov dword [0x448747], eax
mov eax, dword [0x43b433]
mov dword [0x44874b], eax
mov eax, dword [0x43b43b]
mov dword [0x44874f], eax
mov eax, dword [0x43b437]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov dword [0x44877f], 0
mov dword [0x448783], 0xffffff
mov eax, dword [0x43b477]
mov dword [0x448797], eax
mov dword [0x44880b], 0x190
mov eax, dword [0x43b443]
mov dword [0x44878f], eax
mov eax, dword [0x43b44f]
mov dword [0x448793], eax
mov eax, dword [0x43b688]
mov dword [0x4487cb], eax
mov eax, 0
mov dword [0x4487d7], eax
mov eax, dword [0x43b45b]
mov dword [0x4487db], eax
mov eax, dword [0x43b46f]
mov dword [0x44892f], eax
mov eax, 0
mov dword [0x448943], eax
mov eax, dword [0x43b47b]
mov dword [0x448947], eax
mov eax, dword [0x43b47f]
mov dword [0x44894b], eax
mov dword [0x448933], 0x7530
mov dword [0x448953], 1
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x43b483]
mov dword [0x448807], eax
mov eax, dword [0x43b46b]
mov dword [0x44892b], eax
mov dword [0x44880f], 2
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x3106
mov eax, dword [0x43b3ff]
mov dword [0x448863], eax
push 0x4450bb
push 0x44873b
call fcn.00430ca3
mov edi, dword [0x4450bb]
mov dword [0x43b427], 0
mov eax, dword [0x43b417]
sub eax, dword [edi + 0x5c]
js 0x408b3b
mov ebx, 2
xor edx, edx
div ebx
add eax, edx
add eax, 1
mov dword [0x43b427], eax
mov eax, dword [0x43b447]
add eax, dword [0x43b427]
mov dword [0x43b453], eax
mov eax, dword [0x43b44b]
add eax, dword [0x43b427]
mov dword [0x43b457], eax
mov eax, dword [0x43b463]
mov dword [0x43b45b], eax
mov eax, dword [0x43b447]
mov dword [0x43b413], eax
mov eax, dword [0x43b453]
mov dword [0x43b44f], eax
mov eax, dword [0x43b42f]
add eax, dword [0x441487]
mov dword [0x43b4a7], eax
mov edi, dword [0x4450bb]
push dword [edi + 0x1a4]
push 0
push 0x43b4bb
call fcn.00437867
mov dword [0x43b4ab], eax
mov eax, dword [0x43b4af]
add dword [0x43b4ab], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b4a7]
mov dword [0x44873b], eax
mov eax, dword [0x43b407]
mov dword [0x44873f], eax
mov eax, dword [0x43b4ab]
mov dword [0x448743], eax
mov eax, dword [0x43b43b]
mov dword [0x448747], eax
mov eax, dword [0x43b4ab]
mov dword [0x44874b], eax
mov eax, dword [0x43b43b]
mov dword [0x44874f], eax
mov eax, dword [0x43b4ab]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov eax, dword [0x43b4e6]
mov dword [0x44877f], eax
mov dword [0x448783], 0xffffff
mov eax, dword [0x43b477]
mov dword [0x448797], eax
mov dword [0x44880b], 0x190
mov eax, dword [0x43b4af]
mov dword [0x44878f], eax
mov eax, dword [0x43b44f]
mov dword [0x448793], eax
mov eax, dword [0x43b197]
mov dword [0x4487cb], eax
mov eax, 0
mov dword [0x4487d7], eax
mov eax, dword [0x43b45b]
mov dword [0x4487db], eax
mov eax, dword [0x43b46f]
mov dword [0x44892f], eax
mov eax, dword [0x43b4f2]
mov dword [0x448943], eax
mov eax, dword [0x43b47b]
mov dword [0x448947], eax
mov eax, dword [0x43b47f]
mov dword [0x44894b], eax
mov dword [0x448933], 0x7530
mov dword [0x448953], 8
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x43b483]
mov dword [0x448807], eax
mov eax, dword [0x43b46b]
mov dword [0x44892b], eax
mov dword [0x44880f], 2
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x3106
mov eax, dword [0x43b3ff]
mov dword [0x448863], eax
push 0x43b4b7
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b4a7]
add eax, dword [0x43b4ab]
mov dword [0x43b4d2], eax
mov eax, dword [0x43b3eb]
sub eax, dword [0x43b40b]
sub eax, dword [0x441487]
sub eax, dword [0x43b4ab]
sub eax, dword [0x43b55a]
sub eax, dword [0x43b4e2]
cmp eax, dword [0x43b4da]
jge 0x408f44
mov eax, dword [0x43b4da]
mov dword [0x43b4d6], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b4d2]
mov dword [0x44873b], eax
mov eax, dword [0x43b407]
mov dword [0x44873f], eax
mov eax, dword [0x43b4d6]
mov dword [0x448743], eax
mov eax, dword [0x43b43b]
mov dword [0x448747], eax
mov eax, dword [0x43b4da]
mov dword [0x44874b], eax
mov eax, dword [0x43b43b]
mov dword [0x44874f], eax
mov eax, dword [0x43b3eb]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov eax, dword [0x43b4ee]
mov dword [0x44877f], eax
mov dword [0x448783], 0xffffff
mov eax, dword [0x43b477]
mov dword [0x448797], eax
mov dword [0x44880b], 0x190
mov eax, dword [0x43b4de]
mov dword [0x44878f], eax
mov eax, dword [0x43b44f]
mov dword [0x448793], eax
mov eax, dword [0x43b694]
mov dword [0x4487cb], eax
mov eax, 0
mov dword [0x4487d7], eax
mov eax, dword [0x43b45b]
mov dword [0x4487db], eax
mov eax, dword [0x43b46f]
mov dword [0x44892f], eax
mov eax, dword [0x43b4f2]
mov dword [0x448943], eax
mov eax, dword [0x43b47b]
mov dword [0x448947], eax
mov eax, dword [0x43b47f]
mov dword [0x44894b], eax
mov dword [0x448933], 0x7530
mov dword [0x448953], 2
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x43b483]
mov dword [0x448807], eax
mov eax, dword [0x43b46b]
mov dword [0x44892b], eax
mov dword [0x44880f], 2
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x3106
mov eax, dword [0x43b3ff]
mov dword [0x448863], eax
push 0x43b4f6
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b397]
mov dword [0x44873b], eax
mov eax, dword [0x43b4fa]
mov dword [0x44873f], eax
mov eax, dword [0x43b39f]
mov dword [0x448743], eax
mov eax, 0x1a
mov dword [0x448747], eax
mov eax, dword [0x43b3b7]
mov dword [0x44877b], eax
mov dword [0x448787], 2
mov eax, dword [0x43b3b7]
mov dword [0x4487ff], eax
mov eax, dword [0x43b3b7]
mov dword [0x4487f7], eax
mov eax, dword [0x43b3b7]
mov dword [0x4487fb], eax
mov eax, dword [0x43b3b7]
mov dword [0x448803], eax
mov dword [0x448793], 5
mov eax, dword [0x43b3b3]
mov dword [0x44877f], eax
mov dword [0x448783], 0xffffff
mov dword [0x448797], 0x10
mov dword [0x448877], 1
mov dword [0x44880b], 0x2bc
mov dword [0x4487d7], 1
mov dword [0x4487f3], 2
mov dword [0x4487ef], 1
mov dword [0x4487cb], 0x445284
mov dword [0x448807], 0x4477f0
mov eax, dword [0x43b3a7]
mov dword [0x44875b], eax
mov eax, dword [0x43b3ab]
mov dword [0x44875f], eax
mov dword [0x448763], 0x258
mov dword [0x448767], 0x1a
mov dword [0x448827], 0x4470ae
mov eax, dword [0x44472f]
mov dword [0x44890f], eax
mov dword [0x4487c7], 0x36
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x4450b7
push 0x44873b
call fcn.00430ca3
mov ebx, dword [0x43b39f]
sub ebx, 2
mov edx, 0x1a
dec edx
pushal
push dword [0x4450b7]
push dword [0x43b3b7]
push 1
push edx
push ebx
push edx
push 2
pop dword [0x445137]
pop dword [0x44513b]
pop dword [0x44513f]
pop dword [0x445143]
pop dword [0x445147]
pop dword [0x44514b]
pop dword [0x44514f]
mov edi, dword [0x44514f]
push ebx
mov eax, dword [0x44514b]
mov bl, al
shr eax, 8
mov bh, ah
mov ah, bl
shl eax, 8
mov al, bh
pop ebx
mov dword [0x44514b], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x44514b]
push dword [0x445147]
push 0
call sub.GDI32.dll_CreatePen
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x445153], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x445157], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push dword [0x44513b]
push dword [0x445137]
push dword [edi + 0x68]
call sub.GDI32.dll_MoveToEx
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x445143]
push dword [0x44513f]
push dword [edi + 0x68]
call sub.GDI32.dll_LineTo
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x445157]
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x445153]
call sub.GDI32.dll_DeleteObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
popal
pushal
mov edi, dword [0x4450b7]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [edi + 0x68]
push dword [edi + 0xc]
push dword [edi + 8]
push 0
push 0
push dword [edi + 0x64]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov esi, dword [edi + 0x128]
cmp esi, 0
jne 0x409747
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
jmp 0x40977a
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x447bae
push dword [0x44471b]
push dword [esi + 0x94]
call sub.user32.dll_MapWindowPoints
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [0x43a7d6]
push dword [0x43a7d2]
push dword [0x43a7ce]
push dword [0x447bb2]
push dword [0x447bae]
call fcn.00434d99
popal
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b3c7]
mov dword [0x44873b], eax
mov eax, 0
mov dword [0x44873f], eax
mov eax, dword [0x43b3cb]
mov dword [0x448743], eax
mov eax, dword [0x43b3cb]
mov dword [0x448747], eax
mov eax, dword [0x43b3cf]
mov dword [0x44875b], eax
mov eax, dword [0x43b3d3]
mov dword [0x44875f], eax
mov eax, dword [0x43b3d7]
mov dword [0x448763], eax
mov eax, dword [0x43b3d7]
mov dword [0x448767], eax
mov dword [0x448827], 0x4471ac
mov eax, dword [0x44472f]
mov dword [0x44890f], eax
mov dword [0x4487c7], 0x10
mov eax, dword [0x4450b7]
mov dword [0x448863], eax
push 0x43b3df
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b397]
mov dword [0x44873b], eax
mov eax, dword [0x43b506]
mov dword [0x44873f], eax
mov eax, dword [0x43b3eb]
mov dword [0x448743], eax
mov eax, dword [0x43b50e]
mov dword [0x448747], eax
mov eax, dword [0x43b3eb]
mov dword [0x44874b], eax
mov eax, dword [0x43b50e]
mov dword [0x44874f], eax
mov eax, dword [0x43b3eb]
mov dword [0x448753], eax
mov eax, dword [0x43b3f3]
mov dword [0x448757], eax
mov eax, dword [0x43b3fb]
mov dword [0x44877b], eax
mov eax, dword [0x43b3f7]
mov dword [0x448787], eax
mov eax, dword [0x43b3fb]
mov dword [0x4487ff], eax
mov eax, dword [0x43b3bf]
mov dword [0x4487f7], eax
mov eax, dword [0x43b3c3]
mov dword [0x4487fb], eax
mov eax, dword [0x43b3bf]
mov dword [0x448803], eax
mov dword [0x4488f3], 2
mov dword [0x4487c7], 0x122
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b516
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b50e]
sub eax, dword [0x43b526]
sub eax, 2
mov dword [0x43b51e], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov dword [0x44873b], 2
mov eax, dword [0x43b526]
mov dword [0x44873f], eax
mov eax, dword [0x43b40b]
mov dword [0x448743], eax
mov eax, dword [0x43b51e]
mov dword [0x448747], eax
mov eax, dword [0x43b40b]
mov dword [0x44874b], eax
mov eax, dword [0x43b51e]
mov dword [0x44874f], eax
mov eax, dword [0x43b40b]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov dword [0x4488f3], 2
mov dword [0x4487c7], 0x3102
mov eax, dword [0x43b516]
mov dword [0x448863], eax
push 0x43b52a
push 0x44873b
call fcn.00430ca3
mov ebx, dword [0x43b51e]
push edx
push ebx
push dword [0x43b473]
push ebx
pop eax
pop ebx
xor edx, edx
idiv ebx
pop ebx
pop edx
mov ebx, eax
sub ebx, 1
mov dword [0x43b536], ebx
mov edx, dword [0x43b51e]
mov ebx, dword [0x43b536]
push ebx
push dword [0x43b473]
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
sub ebx, dword [0x43b423]
sub edx, ebx
mov ecx, dword [0x43b473]
shl ecx, 1
cmp edx, ecx
jb 0x40a010
inc dword [0x43b536]
mov edx, dword [0x43b51e]
mov ebx, dword [0x43b473]
push ebx
push dword [0x43b536]
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
sub ebx, dword [0x43b423]
sub edx, ebx
shr edx, 1
mov dword [0x43b53e], edx
mov eax, dword [0x43b53e]
mov dword [0x43b53a], eax
mov eax, dword [0x43b542]
mov dword [0x43b52e], eax
mov eax, dword [0x43b536]
mov dword [0x43b532], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b42f]
mov dword [0x44873b], eax
mov eax, dword [0x43b526]
mov dword [0x44873f], eax
mov eax, dword [0x441487]
mov dword [0x448743], eax
mov eax, dword [0x43b51e]
mov dword [0x448747], eax
mov eax, dword [0x43b433]
mov dword [0x44874b], eax
mov eax, dword [0x43b51e]
mov dword [0x44874f], eax
mov eax, dword [0x43b437]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov dword [0x44877f], 0
mov dword [0x448783], 0xffffff
mov eax, dword [0x43b477]
mov dword [0x448797], eax
mov dword [0x44880b], 0x190
mov eax, dword [0x43b443]
mov dword [0x44878f], eax
mov eax, dword [0x43b52e]
mov dword [0x448793], eax
mov eax, dword [0x43b680]
mov dword [0x4487cb], eax
mov eax, 0
mov dword [0x4487d7], eax
mov eax, dword [0x43b532]
mov dword [0x4487db], eax
mov eax, dword [0x43b46f]
mov dword [0x44892f], eax
mov eax, 0
mov dword [0x448943], eax
mov eax, dword [0x43b47b]
mov dword [0x448947], eax
mov eax, dword [0x43b47f]
mov dword [0x44894b], eax
mov dword [0x448933], 0x7530
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x43b483]
mov dword [0x448807], eax
mov eax, dword [0x43b46b]
mov dword [0x44892b], eax
mov dword [0x448953], 1
mov dword [0x44880f], 2
mov dword [0x4488f3], 2
mov dword [0x4487c7], 0x3106
mov eax, dword [0x43b516]
mov dword [0x448863], eax
push 0x43b546
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b53e]
add eax, dword [0x43b427]
mov dword [0x43b542], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b4a7]
mov dword [0x44873b], eax
mov eax, dword [0x43b526]
mov dword [0x44873f], eax
mov eax, dword [0x43b4ab]
mov dword [0x448743], eax
mov eax, dword [0x43b51e]
mov dword [0x448747], eax
mov eax, dword [0x43b4ab]
mov dword [0x44874b], eax
mov eax, dword [0x43b51e]
mov dword [0x44874f], eax
mov eax, dword [0x43b4ab]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov eax, dword [0x43b4e6]
mov dword [0x44877f], eax
mov dword [0x448783], 0xffffff
mov eax, dword [0x43b477]
mov dword [0x448797], eax
mov dword [0x44880b], 0x190
mov eax, dword [0x43b4af]
mov dword [0x44878f], eax
mov eax, dword [0x43b52e]
mov dword [0x448793], eax
mov eax, dword [0x43b19b]
mov dword [0x4487cb], eax
mov eax, 0
mov dword [0x4487d7], eax
mov eax, dword [0x43b532]
mov dword [0x4487db], eax
mov eax, dword [0x43b46f]
mov dword [0x44892f], eax
mov eax, dword [0x43b4f2]
mov dword [0x448943], eax
mov eax, dword [0x43b47b]
mov dword [0x448947], eax
mov eax, dword [0x43b47f]
mov dword [0x44894b], eax
mov dword [0x448933], 0x7530
mov dword [0x448953], 8
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x43b483]
mov dword [0x448807], eax
mov eax, dword [0x43b46b]
mov dword [0x44892b], eax
mov dword [0x44880f], 2
mov dword [0x4488f3], 2
mov dword [0x4487c7], 0x3106
mov eax, dword [0x43b516]
mov dword [0x448863], eax
push 0x43b54a
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b4d2]
mov dword [0x44873b], eax
mov eax, dword [0x43b526]
mov dword [0x44873f], eax
mov eax, dword [0x43b4d6]
mov dword [0x448743], eax
mov eax, dword [0x43b51e]
mov dword [0x448747], eax
mov eax, dword [0x43b4da]
mov dword [0x44874b], eax
mov eax, dword [0x43b51e]
mov dword [0x44874f], eax
mov eax, dword [0x43b3eb]
mov dword [0x448753], eax
mov eax, dword [0x43b43f]
mov dword [0x448757], eax
mov dword [0x44877b], 0xffffff
mov dword [0x448787], 2
mov dword [0x4487ff], 0xffffff
mov dword [0x4487f7], 0xffffff
mov dword [0x4487fb], 0xffffff
mov eax, dword [0x43b3bf]
mov dword [0x448803], eax
mov eax, dword [0x43b4ee]
mov dword [0x44877f], eax
mov dword [0x448783], 0xffffff
mov eax, dword [0x43b477]
mov dword [0x448797], eax
mov dword [0x44880b], 0x190
mov eax, dword [0x43b4de]
mov dword [0x44878f], eax
mov eax, dword [0x43b52e]
mov dword [0x448793], eax
mov eax, dword [0x43b690]
mov dword [0x4487cb], eax
mov eax, 0
mov dword [0x4487d7], eax
mov eax, dword [0x43b532]
mov dword [0x4487db], eax
mov eax, dword [0x43b46f]
mov dword [0x44892f], eax
mov eax, dword [0x43b4f2]
mov dword [0x448943], eax
mov eax, dword [0x43b47b]
mov dword [0x448947], eax
mov eax, dword [0x43b47f]
mov dword [0x44894b], eax
mov dword [0x448933], 0x7530
mov eax, dword [0x44507f]
mov dword [0x44893f], eax
mov eax, dword [0x43b483]
mov dword [0x448807], eax
mov eax, dword [0x43b46b]
mov dword [0x44892b], eax
mov dword [0x448953], 2
mov dword [0x44880f], 2
mov dword [0x4488f3], 2
mov dword [0x4487c7], 0x3106
mov eax, dword [0x43b516]
mov dword [0x448863], eax
push 0x43b54e
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43b3eb]
sub eax, dword [0x43b55a]
mov dword [0x43b552], eax
mov eax, dword [0x43b43b]
add eax, 2
mov dword [0x43b55e], eax
mov eax, dword [0x43b3f3]
mov dword [0x43b562], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b552]
mov dword [0x44873b], eax
mov eax, 0
mov dword [0x44873f], eax
mov eax, dword [0x43b55a]
mov dword [0x448743], eax
mov eax, dword [0x43b55e]
mov dword [0x448747], eax
mov eax, dword [0x43b55a]
mov dword [0x44874b], eax
mov eax, dword [0x43b55e]
mov dword [0x44874f], eax
mov eax, dword [0x43b55a]
mov dword [0x448753], eax
mov eax, dword [0x43b562]
mov dword [0x448757], eax
mov dword [0x448787], 1
mov eax, dword [0x43b56e]
mov dword [0x44877b], eax
mov eax, dword [0x43b56e]
mov dword [0x4487ff], eax
mov eax, dword [0x43b572]
mov dword [0x4487f7], eax
mov eax, dword [0x43b572]
mov dword [0x4487fb], eax
mov eax, dword [0x43b572]
mov dword [0x448803], eax
mov eax, 0
mov dword [0x44896b], eax
mov eax, dword [0x43b45f]
mov dword [0x44896f], eax
mov eax, 0
mov dword [0x448973], eax
mov eax, dword [0x43b56a]
mov dword [0x4488ef], eax
mov eax, dword [0x44507f]
mov dword [0x4488eb], eax
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x122
mov dword [0x44880f], 6
mov eax, dword [0x43b3ff]
mov dword [0x448863], eax
push 0x43b58a
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov dword [0x44873b], 0
mov dword [0x44873f], 0
mov eax, dword [0x43b55a]
mov dword [0x448743], eax
mov eax, dword [0x43b566]
mov dword [0x448747], eax
mov eax, dword [0x43b55a]
mov dword [0x44874b], eax
mov eax, dword [0x43b56a]
mov dword [0x44874f], eax
mov eax, dword [0x43b55a]
mov dword [0x448753], eax
mov eax, dword [0x43b562]
mov dword [0x448757], eax
mov dword [0x448787], 1
mov eax, dword [0x43b576]
mov dword [0x44877b], eax
mov eax, dword [0x43b57a]
mov dword [0x4487ff], eax
mov eax, dword [0x43b586]
mov dword [0x4487f7], eax
mov eax, dword [0x43b586]
mov dword [0x4487fb], eax
mov eax, dword [0x43b582]
mov dword [0x448803], eax
mov eax, dword [0x43b57a]
mov dword [0x44897f], eax
mov eax, dword [0x43b582]
mov dword [0x448983], eax
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x122
mov dword [0x44880f], 7
mov eax, dword [0x43b58a]
mov dword [0x448863], eax
push 0x43b58e
push 0x44873b
call fcn.00430ca3
pushal
mov edi, dword [0x43b58a]
mov esi, dword [edi + 0x128]
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [esi + 0x114]
push dword [esi + 0x1c]
push dword [esi + 0x18]
push dword [edi + 4]
push dword [edi]
call fcn.00434d99
popal
mov eax, dword [0x43b3eb]
sub eax, dword [0x43b55a]
mov dword [0x43b592], eax
mov eax, dword [0x43b50e]
mov dword [0x43b59e], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43b592]
mov dword [0x44873b], eax
mov eax, 0
mov dword [0x44873f], eax
mov eax, dword [0x43b55a]
mov dword [0x448743], eax
mov eax, dword [0x43b59e]
mov dword [0x448747], eax
mov eax, dword [0x43b55a]
mov dword [0x44874b], eax
mov eax, dword [0x43b59e]
mov dword [0x44874f], eax
mov eax, dword [0x43b55a]
mov dword [0x448753], eax
mov eax, dword [0x43b562]
mov dword [0x448757], eax
mov dword [0x448787], 1
mov eax, dword [0x43b56e]
mov dword [0x44877b], eax
mov eax, dword [0x43b56e]
mov dword [0x4487ff], eax
mov eax, dword [0x43b572]
mov dword [0x4487f7], eax
mov eax, dword [0x43b572]
mov dword [0x4487fb], eax
mov eax, dword [0x43b572]
mov dword [0x448803], eax
mov eax, 0
mov dword [0x44896b], eax
mov eax, dword [0x43b45f]
mov dword [0x44896f], eax
mov eax, 0
mov dword [0x448973], eax
mov eax, dword [0x43b56a]
mov dword [0x4488ef], eax
mov eax, dword [0x44507f]
mov dword [0x4488eb], eax
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x122
mov dword [0x44880f], 6
mov eax, dword [0x43b516]
mov dword [0x448863], eax
push 0x43b5b6
push 0x44873b
call fcn.00430ca3
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov dword [0x44873b], 0
mov dword [0x44873f], 0
mov eax, dword [0x43b55a]
mov dword [0x448743], eax
mov eax, dword [0x43b566]
mov dword [0x448747], eax
mov eax, dword [0x43b55a]
mov dword [0x44874b], eax
mov eax, dword [0x43b56a]
mov dword [0x44874f], eax
mov eax, dword [0x43b55a]
mov dword [0x448753], eax
mov eax, dword [0x43b562]
mov dword [0x448757], eax
mov dword [0x448787], 1
mov eax, dword [0x43b576]
mov dword [0x44877b], eax
mov eax, dword [0x43b57a]
mov dword [0x4487ff], eax
mov eax, dword [0x43b586]
mov dword [0x4487f7], eax
mov eax, dword [0x43b586]
mov dword [0x4487fb], eax
mov eax, dword [0x43b582]
mov dword [0x448803], eax
mov eax, dword [0x43b57a]
mov dword [0x44897f], eax
mov eax, dword [0x43b57e]
mov dword [0x448983], eax
mov dword [0x4488f3], 1
mov dword [0x4487c7], 0x122
mov dword [0x44880f], 7
mov eax, dword [0x43b5b6]
mov dword [0x448863], eax
push 0x43b5ba
push 0x44873b
call fcn.00430ca3
pushal
mov edi, dword [0x43b5b6]
mov esi, dword [edi + 0x128]
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [esi + 0x114]
push dword [esi + 0x1c]
push dword [esi + 0x18]
push dword [edi + 4]
push dword [edi]
call fcn.00434d99
popal
mov dword [0x4414cb], 0
cmp dword [0x4414bb], 1
je 0x40b7b4
mov esi, dword [0x43b2af]
mov dword [esi + 0xb0], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [esi + 0x2b8]
push dword [esi + 0x2c]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov edi, dword [0x43b2b3]
mov dword [edi + 0xb0], 1
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [edi + 0x2c0]
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x40b832
mov edi, dword [0x43b2af]
mov dword [edi + 0xb0], 1
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [edi + 0x2c0]
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov esi, dword [0x43b2b3]
mov dword [esi + 0xb0], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [esi + 0x2b8]
push dword [esi + 0x2c]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [0x4414bf], 1
je 0x40b87c
mov esi, dword [0x43b2b7]
mov dword [esi + 0xb0], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [esi + 0x2b8]
push dword [esi + 0x2c]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x40b8bb
mov esi, dword [0x43b2b7]
mov dword [esi + 0xb0], 1
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [esi + 0x2c0]
push dword [esi + 0x2c]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [0x4414c7], 1
je 0x40b905
mov esi, dword [0x43b2bb]
mov dword [esi + 0xb0], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [esi + 0x2b8]
push dword [esi + 0x2c]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x40b944
mov esi, dword [0x43b2bb]
mov dword [esi + 0xb0], 1
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [esi + 0x2c0]
push dword [esi + 0x2c]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x6c]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [0x441457], 1
jne 0x40b959
call fcn.00418fba
call fcn.00418dae
jmp 0x40b97d
cmp dword [0x44145b], 1
jne 0x40b96e
call fcn.00419221
call fcn.00418e3d
jmp 0x40b97d
call fcn.00418ecc
call fcn.00419133
call fcn.00418dae
call fcn.0042f4f5
push 5
push dword [0x44471b]
call sub.user32.dll_ShowWindow
pushal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [0x43a7de]
push dword [0x43a7d2]
push dword [0x43a7ce]
push 0
push 0
push dword [0x43a7e2]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
popal
pushal
mov edi, dword [0x44507f]
mov eax, dword [0x444733]
mov dword [edi + 0x1e4], eax
mov eax, dword [0x444737]
mov dword [edi + 0x1e8], eax
mov eax, dword [0x4447f9]
mov dword [edi + 0x1ec], eax
mov eax, edi
mov dword [0x444733], eax
popal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x44471b]
call sub.user32.dll_SetForegroundWindow
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x444823], 1
call fcn.004302b3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0x8013
push dword [0x43ccb4]
call sub.user32.dll_PostThreadMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
call fcn.0040db62
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0x8014
push dword [0x43ccb4]
call sub.user32.dll_PostThreadMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0xa
mov dword [0x44873b], eax
mov eax, 0xa
mov dword [0x44873f], eax
mov eax, 0x780
mov dword [0x448743], eax
mov eax, 0x438
mov dword [0x448747], eax
mov eax, dword [0x43e5c1]
mov dword [0x44877b], eax
mov eax, dword [0x43e5b5]
mov dword [0x448787], eax
mov eax, dword [0x43e5c5]
mov dword [0x4487ff], eax
mov eax, dword [0x43e5c5]
mov dword [0x4487f7], eax
mov eax, dword [0x43e5c5]
mov dword [0x4487fb], eax
mov eax, dword [0x43e5c5]
mov dword [0x448803], eax
mov dword [0x44885f], 1
mov dword [0x4488d3], 2
mov dword [0x4487c7], 0x22
mov eax, dword [0x44507f]
mov dword [0x448863], eax
mov dword [0x43e128], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43e12c
push 0
push 0x4478d6
push 0x41131f
push 0x3e8
push 0
call sub.KERNEL32.dll_CreateThread
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [0x43e130], eax
cmp eax, 0
je 0x4139a0
cmp dword [0x43c6b4], 1
jne 0x40bd78
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43c698
push 0
push 0x4478d6
push 0x41144d
push 0x3e8
push 0
call sub.KERNEL32.dll_CreateThread
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x4139a0
cmp dword [0x43c6b8], 1
jne 0x40bdb3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x43c69c
push 0
push 0x4478d6
push 0x411503
push 0x3e8
push 0
call sub.KERNEL32.dll_CreateThread
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x4139a0
cmp dword [0x441443], 1
je 0x40caa3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x444815
call sub.KERNEL32.dll_GetSystemTimeAsFileTime
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
wait
fninit
wait
fnstcw word [0x44481d]
or word [0x44481d], 0xc00
fldcw word [0x44481d]
fild qword [0x444815]
fild qword [0x44144b]
fsubp st(1)
fild qword [0x43b640]
fdivp st(1)
fistp dword [0x43b648]
mov eax, dword [0x43b638]
sub eax, dword [0x43b648]
cmp eax, dword [0x43b63c]
jg 0x40caa3
mov dword [0x43b64c], eax
cmp dword [0x43b64c], 0
jg 0x40be44
mov dword [0x441447], 1
call fcn.004197a2
jmp 0x40caa3
mov edi, 0x44534c
add edi, dword [0x445374]
mov eax, dword [0x43b64c]
add eax, 0x30
mov byte [edi], al
mov eax, dword [0x4447f1]
sub eax, dword [0x43e5ad]
shr eax, 1
mov dword [0x43e5a5], eax
mov eax, dword [0x4447f5]
sub eax, dword [0x43e5b1]
shr eax, 1
mov dword [0x43e5a9], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43e5a5]
mov dword [0x44873b], eax
mov eax, dword [0x43e5a9]
mov dword [0x44873f], eax
mov eax, dword [0x43e5ad]
mov dword [0x448743], eax
mov eax, dword [0x43e5b1]
mov dword [0x448747], eax
mov eax, dword [0x43e5c1]
mov dword [0x44877b], eax
mov eax, dword [0x43e5b5]
mov dword [0x448787], eax
mov eax, dword [0x43e5c5]
mov dword [0x4487ff], eax
mov eax, dword [0x43e5c5]
mov dword [0x4487f7], eax
mov eax, dword [0x43e5c5]
mov dword [0x4487fb], eax
mov eax, dword [0x43e5c5]
mov dword [0x448803], eax
mov eax, dword [0x43e5c9]
mov dword [0x44878f], eax
mov dword [0x448793], 0x46
mov dword [0x44877f], 0
mov eax, dword [0x43e5c1]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487ef], 1
mov dword [0x4487d7], 1
mov dword [0x448877], 1
mov dword [0x44880b], 0x190
mov dword [0x4487f3], 2
mov dword [0x4487cb], 0x44534c
mov dword [0x448807], 0x44788c
mov dword [0x44885f], 0
mov dword [0x4488d3], 2
mov dword [0x4487c7], 0x26
mov eax, dword [0x44507f]
mov dword [0x448863], eax
push 0x43b650
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43e5ad]
sub eax, 0
mov dword [0x43e5d1], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, 0
mov dword [0x44873b], eax
mov eax, 0
mov dword [0x44873f], eax
mov eax, dword [0x43e5d1]
mov dword [0x448743], eax
mov eax, dword [0x43e5d5]
mov dword [0x448747], eax
mov eax, dword [0x43e5dd]
mov dword [0x44877b], eax
mov dword [0x448787], 2
mov dword [0x44877f], 0xffffff
mov eax, dword [0x43e5dd]
mov dword [0x448783], eax
mov eax, dword [0x43e5d9]
mov dword [0x448797], eax
mov dword [0x4487ef], 1
mov dword [0x4487d7], 1
mov dword [0x448877], 0
mov dword [0x44880b], 0x2bc
mov dword [0x4487f3], 6
mov dword [0x4487cb], 0x4452fa
mov dword [0x448807], 0x44788c
mov dword [0x4487c7], 6
mov eax, dword [0x43b650]
mov dword [0x448863], eax
push 0x43b654
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43e5ad]
sub eax, dword [0x43e5f9]
sub eax, dword [0x43e611]
sub eax, dword [0x43e619]
shr eax, 1
mov dword [0x43e5f1], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x446b28
call sub.KERNEL32.dll_SetCurrentDirectoryA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43e5f1]
mov dword [0x44873b], eax
mov eax, dword [0x43b660]
mov dword [0x44873f], eax
mov eax, dword [0x43e5f9]
mov dword [0x448743], eax
mov eax, dword [0x43e5fd]
mov dword [0x448747], eax
mov dword [0x44877f], 0
mov eax, dword [0x43e5c1]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov dword [0x4487cb], 0x445378
mov dword [0x448807], 0x44788c
mov eax, dword [0x43e5f9]
mov dword [0x448763], eax
mov eax, dword [0x43e5fd]
mov dword [0x448767], eax
mov dword [0x448827], 0x4474c4
mov dword [0x4487c7], 0x14
mov eax, dword [0x43b650]
mov dword [0x448863], eax
push 0x43b658
push 0x44873b
call fcn.00430ca3
mov eax, dword [0x43e5f1]
add eax, dword [0x43e5f9]
add eax, dword [0x43e619]
mov dword [0x43e615], eax
pushal
mov edi, 0x44873b
mov dword [edi + 0x4c], 1
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0xf4], 0xffffffff
mov dword [edi + 0x9c], 0xffffffff
mov dword [edi + 0xa0], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0x12c], 0xffffffff
mov dword [edi + 0x88], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xd0], 0x190
mov dword [edi + 0xb8], 1
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0xe4], 0
mov dword [edi + 0xf8], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 1
mov dword [edi + 0x128], 0
mov dword [edi + 0x138], 0
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x214], 0xffffffff
mov dword [edi + 0x1f4], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x2c4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0x1fc], 0
mov dword [edi + 0x2dc], 0
mov dword [edi + 0x2a8], 0
mov dword [edi + 0x2ac], 0
mov dword [edi + 0x2b0], 0
mov dword [edi + 0x2b4], 0
mov dword [edi + 0x1d4], 0
mov dword [edi + 0x220], 0
popal
mov eax, dword [0x43e615]
mov dword [0x44873b], eax
mov eax, dword [0x43b660]
mov dword [0x44873f], eax
mov eax, dword [0x43e611]
mov dword [0x448743], eax
mov eax, dword [0x43e5fd]
mov dword [0x448747], eax
mov dword [0x44877f], 0
mov eax, dword [0x43e5c1]
mov dword [0x448783], eax
mov dword [0x448797], 0x10
mov dword [0x4487d7], 1
mov dword [0x4487f3], 6
mov dword [0x4487ef], 1
mov dword [0x44880b], 0x190
mov dword [0x4487cb], 0x445307
mov dword [0x448807], 0x44788c
mov eax, dword [0x43e611]
mov dword [0x448763], eax
mov eax, dword [0x43e5fd]
mov dword [0x448767], eax
mov dword [0x448827], 0x4474c4
mov dword [0x4487c7], 0x14
mov eax, dword [0x43b650]
mov dword [0x448863], eax
push 0x43b65c
push 0x44873b
call fcn.00430ca3
push dword [0x43b650]
call fcn.00433d45
pushal
mov edi, dword [0x43b650]
mov eax, dword [0x444733]
mov dword [edi + 0x1e4], eax
mov eax, dword [0x444737]
mov dword [edi + 0x1e8], eax
mov eax, dword [0x4447f9]
mov dword [edi + 0x1ec], eax
mov eax, edi
mov dword [0x444733], eax
popal
jmp 0x411bd3
push 0
push 0
push 0
push 0x449e1b
call sub.user32.dll_GetMessageA
cmp dword [0x449e1f], 0x200
je 0x41226d
cmp dword [0x449e1f], 0x201
je 0x412451
cmp dword [0x449e1f], 0x20a
je 0x4124d2
test eax, eax
je 0x41382a
cmp dword [0x449e1f], 0x800c
je 0x411d14
cmp dword [0x449e1f], 0x800d
je 0x411d7a
cmp dword [0x449e1f], 0x8002
je 0x4126ae
cmp dword [0x449e1f], 0x8006
je 0x4127c6
cmp dword [0x449e1f], 0x8017
je 0x4126ae
cmp dword [0x449e1f], 0x8015
je 0x41276d
cmp dword [0x449e1f], 0x8016
je 0x412777
cmp dword [0x449e1f], 0x8018
je 0x412797
cmp dword [0x449e1f], 0x100
je 0x412505
cmp dword [0x449e1f], 0x101
je 0x4125d0
cmp dword [0x449e1f], 0x102
je 0x412656
push 0x449e1b
call sub.user32.dll_TranslateMessage
push 0x449e1b
call sub.user32.dll_DispatchMessageA
jmp 0x411bd3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x445673
push dword [0x444737]
call sub.user32.dll_GetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x413c3e
mov edi, eax
cmp edi, dword [0x43b2df]
jne 0x411d75
mov eax, 0x2e
cmp dword [0x449e23], eax
jne 0x411d75
call fcn.0040db62
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0x8014
push dword [0x43ccb4]
call sub.user32.dll_PostThreadMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x411bd3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x445673
push dword [0x444737]
call sub.user32.dll_GetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x413c3e
mov edi, eax
cmp edi, dword [0x43b2df]
jne 0x411dce
call fcn.0040db62
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0x8014
push dword [0x43ccb4]
call sub.user32.dll_PostThreadMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x411bd3
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x445673
push dword [0x449e1b]
call sub.user32.dll_GetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x411bd3
mov edi, eax
cmp edi, dword [0x4447f9]
je 0x412343
cmp dword [0x4447f9], 0
je 0x4122c4
mov eax, dword [0x4447f9]
mov dword [0x444747], eax
mov esi, dword [0x4447f9]
mov eax, dword [esi + 0x94]
mov dword [0x444743], eax
mov eax, edi
mov dword [0x4447f9], eax
cmp dword [0x444747], 0
je 0x412343
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x445673
push dword [0x444743]
call sub.user32.dll_GetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x412343
mov esi, dword [0x444733]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push dword [0x444747]
push 0x8008
push dword [esi + 0x94]
call sub.user32.dll_PostMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push dword [0x444747]
push 0x8008
push dword [0x444743]
call sub.user32.dll_PostMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [edi + 0xd4], 0xa
jne 0x412365
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x44472b]
call sub.user32.dll_SetCursor
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x4123a0
cmp dword [edi + 0x1d4], 0
je 0x412387
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x1d4]
call sub.user32.dll_SetCursor
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x4123a0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x444727]
call sub.user32.dll_SetCursor
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x4123a0
mov dword [0x44482b], 0
mov eax, dword [0x445107]
mov dword [0x44510f], eax
mov eax, dword [0x449e27]
and eax, 0xffff
mov dword [0x445107], eax
mov eax, dword [0x44510b]
mov dword [0x445113], eax
mov eax, dword [0x449e27]
shr eax, 0x10
mov dword [0x44510b], eax
mov eax, dword [0x4447a3]
mov dword [0x4447ab], eax
mov eax, dword [0x4447a7]
mov dword [0x4447af], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x447bae
call sub.user32.dll_GetCursorPos
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov eax, dword [0x447bae]
mov dword [0x4447a3], eax
mov eax, dword [0x447bb2]
mov dword [0x4447a7], eax
cmp dword [0x4447ab], 0
jne 0x41242e
cmp dword [0x4447af], 0
je 0x411bd3
mov eax, dword [0x4447ab]
cmp dword [0x4447a3], eax
jne 0x41244c
mov eax, dword [0x4447af]
cmp dword [0x4447a7], eax
je 0x411bd3
jmp 0x411ccb
mov edi, dword [0x444733]
cmp dword [edi + 0x198], 3
jne 0x411cfb
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x445673
push dword [0x449e1b]
call sub.user32.dll_GetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
je 0x411cfb
mov esi, eax
mov eax, dword [esi + 0xf0]
cmp dword [edi + 0xf0], eax
je 0x411cfb
mov eax, dword [0x444733]
pushal
mov edi, eax
mov eax, dword [edi + 0x1e4]
mov dword [0x444733], eax
mov eax, dword [edi + 0x1e8]
mov dword [0x444737], eax
mov eax, dword [edi + 0x1ec]
mov dword [0x4447f9], eax
popal
push eax
call fcn.004316ca
jmp 0x411bd3
mov edi, dword [0x444733]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x449e27]
push dword [0x449e23]
push 0x20a
push dword [edi + 0x94]
call sub.user32.dll_SendMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x411bd3
cmp dword [0x449e23], 0x1b
jne 0x412539
mov dword [0x444783], 0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push 0x8006
push 0
call sub.user32.dll_PostMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x411bd3
mov edi, dword [0x444733]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x449e27]
push dword [0x449e23]
push pe_nt_image_headers32
push dword [edi + 0x94]
call sub.user32.dll_SendMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [0x444737], 0
je 0x411bd3
mov edi, dword [0x444733]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [0x449e27]
push dword [0x449e23]
push 0x101
push dword [edi + 0x94]
call sub.user32.dll_SendMessageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [0x444737], 0
je 0x411bd3
pushal
mov edi, dword [0x449e23]
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push 0
push 0
push dword [edi + 0x68]
push dword [edi + 0xc]
push dword [edi + 8]
push 0
push 0
push dword [edi + 0x64]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov esi, dword [edi + 0x128]
cmp esi, 0
jne 0x4126fb
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
jmp 0x41272e
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x447bae
push dword [0x44471b]
push dword [esi + 0x94]
call sub.user32.dll_MapWindowPoints
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 0x114]
push dword [edi + 0x1c]
push dword [edi + 0x18]
push 0
push 0
push dword [0x43a7d6]
push dword [0x43a7d2]
push dword [0x43a7ce]
push dword [0x447bb2]
push dword [0x447bae]
call fcn.00434d99
popal
jmp 0x411bd3
call fcn.0041640d
jmp 0x411bd3
call fcn.00418c06
jmp 0x411bd3
mov eax, dword [0x44507f]
cmp dword [0x444733], eax
je 0x4128b2
mov eax, dword [0x445067]
cmp dword [0x444733], eax
je 0x413809
mov eax, dword [0x44508b]
cmp dword [0x444733], eax
je 0x413813
mov eax, dword [0x43e5cd]
cmp dword [0x444733], eax
je 0x413818
call fcn.00418d6f
cmp dword [0x43b664], 0
je 0x4128c5
call fcn.004300a1
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x1a
push 0x446da8
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 1
jne 0x41292c
push 0x445526
push 0x446da8
call fcn.004382bb
push 0x4475d9
push 0x446da8
call fcn.004382bb
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push 0x446da8
call sub.KERNEL32.dll_CreateFileA
cmp eax, 0xffffffff
je 0x41292c
push 0x446b28
call sub.KERNEL32.dll_SetCurrentDirectoryA
cmp eax, 0
je 0x41390a
call fcn.00434499
jmp 0x411bd3
jmp 0x411bd3
push 0
call sub.KERNEL32.dll_ExitProcess
push 0x30
push 0x445545
push 0x413846
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
push 0x30
push 0x445545
push 0x4139b8
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
pop edi
pop esi
pop ebx
pop ebp
jmp 0x4396e7
jmp dword [sym.imp.user32.dll_DefWindowProcA]