Function at 0x40f070
Capabilities:
Check for unmoving mouse cursor
Get session information
Hide graphical window

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0x74
push 0xffffffffffffffff
push 0x431f73
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1864
call fcn.0042fad0
push esi
mov dword [ebp - 0x40], 0
cmp dword [ebp + 0x7c], 0
jne 0x40f2f0
mov eax, dword [0x446e60]
mov dword [ebp - 0x30c], eax
mov ecx, dword [0x446790]
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x698], 0x3c
mov dword [ebp - 0x334], 0
mov edx, dword [0x446e44]
mov dword [ebp - 0x338], edx
mov eax, dword [0x446a1c]
add eax, 1
mov dword [ebp + 8], eax
mov ecx, dword [0x43e8b0]
add ecx, dword [0x446e70]
mov dword [ebp - 0x33c], ecx
mov edx, dword [0x4467a0]
sub edx, dword [0x446790]
mov dword [ebp - 0x340], edx
mov eax, dword [0x446e60]
mov dword [ebp - 0x1c0], eax
mov ecx, dword [0x446a1c]
mov dword [ebp - 0x344], ecx
mov edx, dword [0x43e8b0]
mov dword [ebp - 0x318], edx
push str.SCROLLBAR
mov eax, dword [ebp - 0x1c0]
push eax
call dword [sym.imp.UxTheme.dll_OpenThemeData]
mov dword [ebp - 0x1c4], eax
push 2
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp + 0x30], eax
push 3
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp + 0x34], eax
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp - 0xc4]
mov dword [ebp + 0x14], edx
mov eax, dword [ebp - 0xc0]
mov dword [ebp + 0x18], eax
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + 0x1c], ecx
mov edx, dword [ebp - 0xc0]
sub edx, dword [ebp + 0x30]
mov dword [ebp + 0x10], edx
mov eax, dword [ebp + 0x14]
add eax, dword [ebp + 0x34]
mov dword [ebp + 0x1c], eax
mov ecx, dword [ebp - 0xbc]
sub ecx, dword [ebp + 0x34]
mov dword [ebp + 0x1c], ecx
mov edx, dword [ebp + 0x1c]
sub edx, dword [ebp + 0x34]
mov dword [ebp + 0x14], edx
mov eax, dword [ebp - 0xc8]
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + 0x14], ecx
mov edx, dword [ebp - 0xc0]
mov dword [ebp + 0x18], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp + 0x1c], eax
mov ecx, dword [ebp - 0xbc]
sub ecx, dword [ebp + 0x34]
mov dword [ebp + 0x14], ecx
mov edx, dword [ebp + 0x10]
add edx, dword [ebp + 0x30]
mov dword [ebp + 0x18], edx
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp + 0x30]
mov dword [ebp + 0x18], eax
mov ecx, dword [ebp + 0x18]
sub ecx, dword [ebp + 0x30]
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp - 0x1c4]
push edx
call dword [sym.imp.UxTheme.dll_CloseThemeData]
cmp dword [0x446e60], 0
je 0x40f2f0
lea eax, [ebp - 0x3e4]
mov dword [ebp + 0x4c], eax
mov ecx, dword [0x446a1c]
mov dword [ebp - 0x31c], ecx
lea edx, [ebp - 0x42c]
mov dword [ebp - 0x320], edx
mov eax, dword [0x446e44]
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0x244]
push ecx
mov edx, dword [ebp + 0x4c]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp + 0x4c]
cmp dword [ecx + 4], 0
je 0x40f2db
mov edx, dword [0x4467a0]
mov dword [ebp - 0x5c], edx
mov eax, dword [0x446790]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.UxTheme.dll_IsThemeBackgroundPartiallyTransparent]
test eax, eax
je 0x40f2af
lea edx, [ebp - 0x244]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x4c]
mov edx, dword [ecx]
push edx
call dword [sym.imp.UxTheme.dll_DrawThemeParentBackground]
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x244]
push ecx
mov edx, dword [ebp - 0xb8]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0x4c]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.UxTheme.dll_DrawThemeBackground]
jmp 0x40f2f0
push 0x10
push 4
lea ecx, [ebp - 0x244]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_DrawFrameControl]
cmp dword [ebp + 0x7c], 0
jne 0x40f744
mov eax, dword [0x446e60]
mov dword [ebp - 0x34c], eax
mov ecx, dword [0x446790]
mov dword [ebp - 0x350], ecx
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x6d4], 0x3c
mov dword [ebp - 0x3bc], 0
mov edx, dword [0x446e44]
mov dword [ebp - 0x268], edx
mov eax, dword [0x446a1c]
add eax, 1
mov dword [ebp - 0x26c], eax
mov ecx, dword [0x43e8b0]
add ecx, dword [0x446e70]
mov dword [ebp - 0x270], ecx
mov edx, dword [0x4467a0]
sub edx, dword [0x446790]
mov dword [ebp - 0x274], edx
mov eax, dword [0x446e60]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [0x446778]
mov dword [ebp - 0x64], ecx
mov dword [ebp + 4], 0
push 0
push 0
push 0x188
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x40f458
lea eax, [ebp - 0xa4c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
push 0x189
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 1
imul ecx, eax, 0xa
mov byte [ebp + ecx - 0xa4c], 0
mov edx, 1
shl edx, 1
lea eax, [ebp + edx - 0xa4c]
push eax
push 0x439260
lea ecx, [ebp - 0x84c]
push ecx
call fcn.0040ebd0
add esp, 0xc
lea edx, [ebp + 4]
push edx
push str._08lX
lea eax, [ebp - 0x84c]
push eax
call fcn.0040ec40
add esp, 0xc
mov ecx, dword [ebp + 4]
push ecx
push str.0x_08lX
lea edx, [ebp - 0x84c]
push edx
call fcn.0040ebd0
add esp, 0xc
cmp dword [0x44677c], 0
je 0x40f458
push 4
push str.Module
lea eax, [ebp - 0x84c]
push eax
mov ecx, dword [ebp - 0x1c8]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x40f458
mov edx, dword [ebp + 4]
push edx
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov eax, dword [0x446778]
mov dword [ebp + 0x48], eax
mov ecx, dword [0x44677c]
mov dword [ebp - 0x1cc], ecx
mov edx, dword [0x4467a0]
mov dword [ebp - 0x78], edx
mov eax, dword [0x446790]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [0x446790]
push ecx
mov edx, dword [ebp + 0x48]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp + 0x48]
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [ebp + 0x60], edx
cmp dword [ebp + 0x60], 0x110
ja 0x40f4e4
cmp dword [ebp + 0x60], 0x110
je 0x40f503
cmp dword [ebp + 0x60], 3
je 0x40f692
cmp dword [ebp + 0x60], 0x10
je 0x40f658
cmp dword [ebp + 0x60], 0x4e
je 0x40f5e2
jmp 0x40f744
cmp dword [ebp + 0x60], 0x111
je 0x40f6f4
cmp dword [ebp + 0x60], 0x402
je 0x40f5ab
jmp 0x40f744
mov dword [ebp + 0x2c], 0
jmp 0x40f515
mov eax, dword [ebp + 0x2c]
add eax, 1
mov dword [ebp + 0x2c], eax
cmp dword [ebp + 0x2c], 5
jge 0x40f541
mov dword [ebp - 0x400], 1
lea ecx, [ebp - 0x400]
push ecx
mov edx, dword [ebp + 0x2c]
push edx
push 0x1307
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x40f50c
lea ecx, [ebp - 0x3cc]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x3cc]
add eax, 5
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x3c8]
add ecx, 0x19
mov dword [ebp - 0x70], ecx
mov dword [ebp + 0x28], 0
jmp 0x40f57c
mov edx, dword [ebp + 0x28]
add edx, 1
mov dword [ebp + 0x28], edx
cmp dword [ebp + 0x28], 5
jge 0x40f59c
push 0
mov eax, dword [ebp + 0x28]
push eax
push 0x402
mov ecx, dword [ebp - 0x1d0]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x40f573
mov dword [ebp - 0xe4], 0
jmp 0x40f744
cmp dword [ebp - 0x78], 0
jne 0x40f5c2
push 5
mov edx, dword [0x446778]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x40f5d0
push 0
mov eax, dword [0x446778]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x446778]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x40f744
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1d8], ecx
cmp dword [ebp - 0x1d8], 0xfffffdd9
je 0x40f605
jmp 0x40f653
push 0
push 0
push 0x130b
mov edx, dword [ebp - 0x68]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x40f649
push 0
mov ecx, dword [0x446778]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0xe4], edx
push 5
mov eax, dword [0x446778]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
jmp 0x411156
jmp 0x40f744
mov dword [ebp], 0
jmp 0x40f66a
mov ecx, dword [ebp]
add ecx, 1
mov dword [ebp], ecx
cmp dword [ebp], 5
jge 0x40f681
push 0
mov edx, dword [0x446778]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x40f661
push 0
mov eax, dword [ebp + 0x48]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x40f744
lea ecx, [ebp - 0x3dc]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x3dc]
add eax, 5
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x3d8]
add ecx, 0x19
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x14], 0
jmp 0x40f6cd
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 5
jge 0x40f6f2
push 1
push 0
push 0
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
push 0
mov edx, dword [0x446778]
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x40f6c4
jmp 0x40f744
mov eax, dword [ebp - 0x78]
and eax, 0xffff
movzx ecx, ax
mov dword [ebp - 0xe8], ecx
cmp dword [ebp - 0xe8], 8
je 0x40f710
jmp 0x40f744
mov dword [ebp - 0x18], 0
jmp 0x40f722
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 5
jge 0x40f738
push 0
mov eax, dword [0x446e60]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x40f719
push 0
mov ecx, dword [ebp + 0x48]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
cmp dword [ebp + 0x7c], 0
jne 0x40f81d
mov edx, dword [0x446e60]
mov dword [ebp - 0x27c], edx
mov eax, dword [0x446790]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x710], 0x3c
mov dword [ebp - 0x288], 0
mov ecx, dword [0x446e44]
mov dword [ebp - 0x28c], ecx
mov edx, dword [0x446a1c]
add edx, 1
mov dword [ebp - 0x290], edx
mov eax, dword [0x43e8b0]
add eax, dword [0x446e70]
mov dword [ebp - 0x294], eax
mov ecx, dword [0x4467a0]
sub ecx, dword [0x446790]
mov dword [ebp - 0x298], ecx
push 0x12
push 0
push 0
push 0x4393c8
call dword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsA]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x41c], 0x1c
mov dword [ebp - 0x1c], 0
jmp 0x40f7f1
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
lea eax, [ebp - 0x41c]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
push 0x4393c8
push 0
mov edx, dword [ebp - 0x7c]
push edx
call dword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInterfaces]
test eax, eax
je 0x40f813
jmp 0x40f7e8
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x120], 1
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0xf0], ecx
mov edx, dword [ebp + 0x7c]
mov dword [ebp - 0x29c], edx
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x10c], 0x64
mov dword [ebp - 0x2a8], 0x10
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2b0], 1
mov byte [ebp - 0x94c], 0
push 0xff
push 0
lea eax, [ebp - 0x94b]
push eax
call fcn.0041abe0
add esp, 0xc
mov dword [ebp - 0x368], 0
xor ecx, ecx
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x360], ecx
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x378], 0
xor edx, edx
mov dword [ebp - 0x374], edx
mov dword [ebp - 0x370], edx
mov dword [ebp - 0x36c], edx
mov dword [ebp - 0x388], 0
xor eax, eax
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], eax
movzx ecx, byte [0x446798]
mov eax, ecx
lea edx, [ebp - 0x94c]
imul eax, edx
mov ecx, dword [0x446794]
add ecx, 0x51
cdq
idiv ecx
imul eax, dword [0x4467a4]
cmp eax, dword [0x446e60]
jl 0x40f93b
mov edx, dword [0x446e60]
sub edx, dword [0x446794]
add edx, dword [0x446790]
mov dword [0x446790], edx
push 0
push 0
push 0
push 0
call dword [sym.imp.dxva2.dll_GetMonitorContrast]
mov dword [0x446e44], eax
mov dword [ebp - 0xec], 0
push 0
lea eax, [ebp - 0x1668]
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.USER32.dll_DdeCreateStringHandleW]
mov dword [0x44677c], eax
mov dword [ebp - 0x20], 0
jmp 0x40f985
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0x4d
jge 0x40f9ce
cmp dword [0x446e44], 0
je 0x40f9b1
cmp dword [0x446e60], 0
je 0x40f9b1
lea eax, [ebp - 0x1870]
push eax
mov ecx, dword [ebp - 0x2b4]
push ecx
call dword [sym.imp.OLEAUT32.dll_OleLoadPicturePath]
cmp dword [ebp - 0xf0], 0
jne 0x40f9cc
mov edx, dword [0x446774]
sub edx, dword [0x4467ac]
mov dword [0x446774], edx
jmp 0x40f97c
lea eax, [ebp - 0x460]
push eax
mov ecx, dword [ebp - 0x2b8]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetFileInformationByHandle]
cvtsi2ss xmm0, dword [0x446a24]
movss dword [ebp - 0xf4], xmm0
cvtss2sd xmm0, dword [ebp - 0xf4]
call fcn.00431170
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0xf8], xmm0
cvtsi2ss xmm0, dword [0x4467a0]
addss xmm0, dword [ebp - 0xf8]
movzx eax, byte [ebp - 0x84]
cdq
mov ecx, 0xa
idiv ecx
cvtsi2ss xmm1, eax
addss xmm0, xmm1
mov edx, dword [ebp - 0x93e]
mov dword [ebp - 0x80], edx
cvtsi2sd xmm1, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x4393e0]
movsd qword [ebp - 0x328], xmm1
cvtsd2ss xmm1, qword [ebp - 0x328]
addss xmm0, xmm1
mov ecx, 0x446918
movzx edx, cx
cvtsi2ss xmm1, edx
subss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [0x446790], eax
lea ecx, [ebp - 0xd0]
call fcn.00414970
mov dword [ebp - 4], 0
mov dword [ebp - 0x104], 0x68
mov dword [ebp - 0xfc], 0x39
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x100]
mov eax, dword [edx]
mov dword [ebp - 0x214], eax
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x108], ecx
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
mov dword [ebp - 0x210], eax
lea ecx, [ebp - 0x214]
push ecx
lea edx, [ebp - 0x2bc]
push edx
lea ecx, [ebp - 0xd0]
call fcn.00417970
mov eax, dword [0x446774]
imul eax, dword [0x446e70]
imul eax, dword [0x446e60]
imul ecx, dword [ebp - 0x10c], 5
lea edx, [eax + ecx + 1]
mov dword [0x446e64], edx
mov al, byte [0x446a20]
mov byte [ebp + 0x67], al
lea ecx, [ebp + 0x67]
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x110], 0x43e8b0
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x11c]
mov cl, byte [eax]
mov byte [ebp - 0x218], cl
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00417970
movzx ecx, byte [0x446a20]
movzx edx, word [0x446790]
cmp ecx, edx
jge 0x40fba3
mov eax, dword [0x446a20]
add eax, dword [0x446e60]
sub eax, dword [ebp - 0x120]
mov dword [0x4467a0], eax
mov ecx, dword [0x44679c]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x130], 0x446e64
lea edx, [ebp - 0x124]
mov dword [ebp - 0x128], edx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ecx]
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx]
mov dword [ebp - 0x220], edx
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0xd0]
call fcn.00417970
push 8
mov edx, dword [0x4467a0]
push edx
mov eax, dword [0x446e44]
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 0
push 0
mov ecx, dword [ebp - 0x84]
push ecx
mov edx, dword [0x446e60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.004148d0
mov eax, dword [0x446a20]
cdq
mov ecx, 0x2a
idiv ecx
sub eax, dword [0x4467a8]
add eax, dword [0x43e8b0]
mov dword [0x43e8b0], eax
mov edx, 4
imul eax, edx, 0
mov dword [eax + 0x4467b0], 0x43927c
movzx ecx, byte [0x446778]
mov edx, dword [0x446e60]
imul edx, dword [0x446a20]
sub ecx, edx
add ecx, dword [0x446790]
mov dword [0x446790], ecx
mov eax, dword [0x446e70]
cdq
mov ecx, 0xa
idiv ecx
movzx edx, byte [0x446788]
add eax, edx
movzx ecx, word [0x44690c]
sub eax, ecx
movzx edx, word [0x44677c]
add edx, 0x446a28
cmp eax, edx
jne 0x40fcf9
mov ecx, dword [0x44677c]
add ecx, 0x4b
mov eax, dword [0x446788]
cdq
idiv ecx
movzx edx, byte [0x446914]
imul eax, edx
add eax, dword [0x44690c]
mov dword [0x44690c], eax
cmp dword [0x4468d8], 0
je 0x40fd15
mov eax, dword [0x446e64]
imul eax, dword [0x4467a0]
mov dword [0x446e70], eax
jmp 0x40fd3c
mov ecx, dword [0x446e70]
sub ecx, dword [0x43e8b0]
mov eax, dword [0x446e64]
cdq
mov esi, 0xe
idiv esi
sub ecx, eax
add ecx, dword [0x446790]
mov dword [0x446e70], ecx
cmp dword [0x446e70], 0
jne 0x40fd51
mov edx, dword [0x446798]
mov dword [0x446798], edx
mov eax, dword [0x4467a4]
sub eax, dword [0x44679c]
cmp eax, dword [0x446794]
jl 0x40fd87
mov ecx, dword [0x446774]
imul ecx, dword [0x446e70]
add ecx, dword [0x4467a4]
mov edx, dword [0x446774]
sub edx, ecx
mov dword [0x446774], edx
jmp 0x40fdbb
mov eax, dword [0x446e70]
add eax, dword [0x446e64]
add eax, dword [0x43e8b0]
mov ecx, dword [0x446e60]
imul ecx, dword [0x4467a0]
sub eax, ecx
sub eax, dword [0x4467ac]
mov edx, dword [0x446e6c]
sub edx, eax
mov dword [0x446e6c], edx
cmp dword [0x446e44], 0
je 0x4101e2
mov eax, dword [0x446e60]
mov dword [ebp - 0x2c8], eax
mov ecx, dword [0x446790]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x74c], 0x3c
mov dword [ebp - 0x2d4], 0
mov edx, dword [0x446e44]
mov dword [ebp - 0x2d8], edx
mov eax, dword [0x446a1c]
add eax, 1
mov dword [ebp - 0x2dc], eax
mov ecx, dword [0x43e8b0]
add ecx, dword [0x446e70]
mov dword [ebp - 0x2e0], ecx
mov edx, dword [0x4467a0]
sub edx, dword [0x446790]
mov dword [ebp - 0x2e4], edx
mov byte [ebp - 0xb50], 0
push 0x103
push 0
lea eax, [ebp - 0xb4f]
push eax
call fcn.0041abe0
add esp, 0xc
mov ecx, dword [0x446e44]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x65c], 0x1fc
mov dword [ebp - 0x654], 0
push 0x80
lea edx, [ebp - 0xb50]
push edx
lea eax, [ebp - 0x644]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpynA]
mov ecx, dword [0x446e60]
mov dword [ebp - 0x658], ecx
mov dword [ebp - 0x650], 7
mov edx, dword [0x4467a0]
mov dword [ebp - 0x64c], edx
mov eax, dword [0x4467a0]
mov dword [ebp + 0x24], eax
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 3
ja case.default.0x40fed6
mov edx, dword [ebp - 0x88]
jmp dword [edx*4 + 0x411168]
lea eax, [ebp - 0x65c]
push eax
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
jmp case.default.0x40fed6
mov ecx, dword [0x446790]
mov dword [ebp - 0x13c], ecx
mov dword [ebp + 0x24], 0
jmp case.default.0x40fed6
mov edx, dword [0x43e8b0]
mov dword [ebp - 0x13c], edx
mov dword [ebp + 0x24], 1
jmp case.default.0x40fed6
mov dword [ebp + 0x24], 1
movzx eax, word [0x43e8b0]
push eax
push 0xfffffffffffffffa
mov ecx, dword [0x446e60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x648], eax
lea edx, [ebp - 0x65c]
push edx
mov eax, dword [ebp + 0x24]
push eax
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
mov ecx, dword [0x446e60]
mov dword [ebp - 0x24], ecx
mov edx, dword [0x446e44]
mov dword [ebp - 0x140], edx
mov eax, dword [0x43e8b0]
mov dword [ebp - 0x28], eax
mov ecx, dword [0x4467a0]
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp + 0x7c]
mov dword [ebp - 0x144], edx
mov eax, dword [ebp - 0x140]
mov dword [ebp + 0x54], eax
cmp dword [ebp + 0x54], 0x2b
ja 0x40ffb0
cmp dword [ebp + 0x54], 0x2b
je 0x410054
cmp dword [ebp + 0x54], 2
je 0x40ffcb
cmp dword [ebp + 0x54], 0x10
je 0x40ffe5
jmp 0x4100ff
cmp dword [ebp + 0x54], 0x110
je 0x40fff4
cmp dword [ebp + 0x54], 0x111
je 0x410059
jmp 0x4100ff
mov ecx, dword [0x446fd8]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x410109
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x410109
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0
push 1
push 9
push 0x20
push 0x20
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x446fd8], eax
mov eax, dword [0x446e70]
push eax
mov ecx, dword [ebp - 0x144]
push ecx
call dword [sym.imp.USER32.dll_LoadBitmapA]
mov dword [ebp - 0x8c], eax
push 0xff00
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [0x446fd8]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
mov ecx, dword [ebp - 0x8c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
jmp 0x411156
jmp 0x410109
mov edx, dword [ebp - 0x28]
and edx, 0xffff
movzx eax, dx
cmp eax, dword [0x446790]
jne 0x4100c0
mov ecx, dword [0x4467a0]
push ecx
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x410095
mov dword [ebp - 0x90], 1
jmp 0x41009f
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [0x446e70]
push ecx
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4100fd
mov eax, dword [ebp - 0x28]
and eax, 0xffff
movzx ecx, ax
cmp ecx, dword [0x43e8b0]
jne 0x4100fd
mov edx, dword [ebp - 0x28]
shr edx, 0x10
and edx, 0xffff
movzx eax, dx
cmp eax, 5
jne 0x4100fd
push 0
push 0
push 0x201
mov ecx, dword [ebp - 0x148]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x410109
mov dword [0x43e8b0], 0
cmp dword [0x446e44], 0
je 0x4101e2
mov dword [ebp + 0x44], 0x4467a0
mov dword [ebp + 0x20], 0
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp + 0x20], eax
mov edx, dword [ebp + 0x20]
push edx
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x1460]
push eax
push 0x100
push 0
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x150], eax
mov dword [ebp + 0x50], 0
mov dword [ebp - 0x94], 0
jmp 0x41018b
mov edx, dword [ebp + 0x50]
add edx, 1
mov dword [ebp + 0x50], edx
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp + 0x50]
cmp ecx, dword [ebp - 0x150]
jge 0x4101d0
mov edx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x50]
mov cl, byte [ebp + eax*4 - 0x1460]
mov byte [edx + 2], cl
mov edx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x50]
mov cl, byte [ebp + eax*4 - 0x145f]
mov byte [edx + 1], cl
mov edx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x50]
mov cl, byte [ebp + eax*4 - 0x145e]
mov byte [edx], cl
mov edx, dword [ebp + 0x44]
add edx, 4
mov dword [ebp + 0x44], edx
jmp 0x410173
cmp dword [ebp + 0x20], 0
je 0x4101e2
mov eax, dword [ebp + 0x20]
push eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
movzx ecx, byte [0x446e48]
cmp ecx, dword [0x446788]
jne 0x41020c
mov edx, dword [0x446e54]
imul edx, dword [0x446798]
add edx, dword [0x446e44]
mov dword [0x446914], edx
jmp 0x410230
mov ecx, dword [0x446794]
add ecx, 0x58
mov eax, dword [0x44677c]
cdq
idiv ecx
imul eax, dword [0x446790]
imul eax, dword [0x446e44]
mov dword [0x446e4c], eax
mov ecx, dword [0x4467a8]
sub ecx, dword [0x446e44]
mov eax, dword [0x4467a0]
cdq
mov esi, 0x2f
idiv esi
add ecx, eax
sub ecx, dword [0x446e68]
add ecx, dword [0x446e64]
add ecx, dword [0x44677c]
add ecx, dword [0x446e6c]
mov edx, dword [0x4467a0]
sub edx, ecx
mov dword [0x4467a0], edx
mov eax, dword [0x43e8b0]
imul eax, dword [0x446e58]
imul eax, dword [0x446798]
sub eax, dword [0x446e68]
mov dword [0x4468d8], eax
mov ecx, dword [0x44677c]
add ecx, 0x4e
mov eax, dword [0x446e5c]
cdq
idiv ecx
imul eax, dword [0x446e70]
cdq
mov ecx, 0x29
idiv ecx
movzx edx, word [0x446778]
sub eax, edx
add eax, dword [0x446e44]
mov ecx, dword [0x446e5c]
sub ecx, eax
mov dword [0x446e5c], ecx
mov edx, dword [0x4467a4]
cmp edx, dword [0x4467ac]
jg 0x4102e4
mov eax, dword [0x43e8b0]
mov dword [0x446798], eax
mov ecx, dword [0x446e48]
imul ecx, dword [0x44679c]
mov eax, 0x446a28
cdq
mov esi, 0x15
idiv esi
mov edx, dword [0x4467ac]
imul edx, dword [0x446e70]
add eax, edx
cmp ecx, eax
je 0x41031b
mov eax, dword [0x4467a0]
mov dword [0x4468d8], eax
cmp dword [0x446e6c], 0
jne 0x410350
movzx ecx, byte [0x44679c]
mov esi, dword [0x44677c]
add esi, 0x49
mov eax, dword [0x4468d8]
cdq
idiv esi
sub ecx, eax
add ecx, dword [0x43e8b0]
sub ecx, dword [0x446e60]
mov dword [0x43e8b0], ecx
movzx edx, word [0x44677c]
movzx eax, word [0x446e5c]
imul eax, dword [0x446e70]
sub edx, eax
sub edx, dword [0x4467a8]
movzx ecx, byte [0x446e68]
sub edx, ecx
mov dword [0x446e68], edx
mov dword [ebp - 0x30], 0
mov dword [ebp + 0x6c], 1
mov edx, dword [ebp - 0x40]
mov dword [ebp + 0x58], edx
mov eax, dword [ebp + 0x7c]
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x5c], 0
mov dword [ebp + 0x70], 1
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x358], 0
mov byte [ebp - 0xc50], 0
push 0xff
push 0
lea ecx, [ebp - 0xc4f]
push ecx
call fcn.0041abe0
add esp, 0xc
mov dword [ebp - 0xe0], 0
xor edx, edx
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0x1e8], 0
xor eax, eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1f8], 0
xor ecx, ecx
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0x1ec], ecx
xor edx, edx
mov word [ebp - 0xe58], dx
push 0x206
push 0
lea eax, [ebp - 0xe56]
push eax
call fcn.0041abe0
add esp, 0xc
mov ecx, dword [ebp + 0x58]
add ecx, dword [ebp + 0x70]
je 0x41046d
mov edx, dword [0x44679c]
add edx, dword [0x446e70]
add edx, dword [0x43e8b0]
mov dword [ebp + 0x5c], edx
jmp 0x4104a7
mov ecx, dword [ebp + 0x5c]
add ecx, dword [ebp + 0x6c]
sub ecx, dword [0x446e70]
movzx eax, word [ebp + 0x70]
movzx edx, word [0x44679c]
imul eax, edx
cdq
mov esi, 0x22
idiv esi
sub ecx, eax
mov eax, dword [0x43e8b0]
imul eax, dword [0x446774]
sub ecx, eax
mov edx, dword [ebp + 0x6c]
sub edx, ecx
mov dword [ebp + 0x6c], edx
mov ecx, dword [0x446e60]
add ecx, dword [0x446794]
movzx eax, word [0x446e64]
imul eax, dword [0x446a24]
mov esi, dword [0x446778]
add esi, 0x61
cdq
idiv esi
imul eax, dword [0x43e8b0]
mov edx, dword [0x446e70]
sub edx, eax
cmp ecx, edx
jne 0x4104e9
movzx eax, word [ebp + 0x58]
mov dword [0x43e8b0], eax
push str.labs
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x2c], 0x3c
mov dword [ebp - 0x158], 0
mov ecx, dword [0x44677c]
mov dword [ebp - 0x154], ecx
lea edx, [ebp - 0x154]
push edx
push 8
mov eax, dword [ebp - 0x158]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov ecx, dword [0x446794]
add ecx, 0x4f
mov eax, dword [0x4467ac]
cdq
idiv ecx
mov ecx, eax
imul ecx, dword [0x44677c]
sub ecx, dword [0x446798]
mov eax, dword [0x4467a0]
cdq
mov esi, 3
idiv esi
sub ecx, eax
add ecx, dword [0x4467a4]
mov dword [0x446774], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 1
mov dword [ebp - 0x2c], edx
jne 0x410507
mov dword [ebp + 0x40], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 0x58], 0
xor eax, eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
movzx eax, word [0x4467a0]
mov ecx, dword [0x446778]
add ecx, 0x56
cdq
idiv ecx
cmp eax, dword [0x446e70]
jl 0x4105f4
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, 0x23
div ecx
mov ecx, eax
movzx eax, word [ebp - 0x1f8]
cdq
mov esi, 0xa
idiv esi
sub ecx, eax
add ecx, dword [0x4467a4]
add ecx, dword [0x4467a0]
mov dword [0x4467a0], ecx
jmp 0x41060e
mov edx, dword [ebp - 0x1e8]
imul edx, dword [0x446e60]
imul edx, dword [ebp - 0xd4]
mov dword [ebp - 0x1f4], edx
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
movzx ecx, word [0x446a20]
mov edx, dword [0x44677c]
sub edx, ecx
je 0x410639
movzx eax, word [0x4467a4]
imul eax, dword [ebp + 0x68]
mov dword [ebp + 0x68], eax
jmp 0x410665
mov ecx, dword [0x446e60]
sub ecx, dword [0x446e70]
mov eax, dword [0x4467a0]
cdq
mov esi, 0x27
idiv esi
add ecx, eax
movzx edx, word [0x446774]
sub ecx, edx
mov eax, dword [ebp + 0x5c]
sub eax, ecx
mov dword [ebp + 0x5c], eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [ebp + 0x70]
mov dword [ebp - 0x15c], edx
call dword [sym.imp.USER32.dll_GetDialogBaseUnits]
and eax, 0xffff
movzx ecx, ax
mov eax, 4
cdq
idiv ecx
add eax, dword [ebp - 0x15c]
mov dword [0x43e8b0], eax
cmp dword [0x446e44], 0
je 0x4106ab
mov edx, dword [0x4467a0]
mov dword [ebp + 0x6c], edx
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x50]
jne 0x4106bb
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [ebp - 0x4c]
je 0x410708
movzx edx, word [ebp - 0xe0]
test edx, edx
jne 0x4106d8
mov eax, dword [0x446774]
sub eax, dword [0x446798]
mov dword [0x446774], eax
jmp 0x4106f1
mov eax, dword [0x446774]
xor edx, edx
mov ecx, 0xf
div ecx
add eax, dword [0x44677c]
mov dword [0x446798], eax
mov edx, dword [ebp + 0x40]
add edx, 1
mov dword [ebp + 0x40], edx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ecx
jmp 0x410787
mov eax, dword [0x4467a0]
cdq
mov ecx, 0x1a
idiv ecx
sub eax, dword [0x446e70]
add eax, dword [ebp + 0x5c]
mov edx, dword [0x4467a0]
sub edx, eax
mov dword [0x4467a0], edx
mov eax, dword [0x446778]
add eax, dword [0x43e8b0]
add eax, dword [0x4467a4]
movzx ecx, word [0x446a20]
sub eax, ecx
sub eax, dword [0x4467a0]
movzx edx, byte [0x446774]
sub eax, edx
movzx ecx, word [0x446a24]
add eax, ecx
mov dword [ebp + 0x68], eax
movzx edx, byte [ebp + 0x5c]
mov eax, dword [0x4467a0]
sub eax, edx
sub eax, dword [0x446e44]
sub eax, dword [0x446790]
add eax, dword [0x446a24]
add eax, dword [0x446774]
mov dword [ebp + 0x58], eax
mov ecx, dword [0x446794]
add ecx, 0x51
mov eax, dword [0x446e70]
cdq
idiv ecx
add eax, dword [0x4467ac]
cmp eax, dword [0x43e8b0]
jle 0x4107b4
mov edx, dword [ebp + 0x68]
add edx, 0x446a28
mov dword [ebp + 0x68], edx
jmp 0x4107e4
mov eax, dword [0x446e44]
imul eax, dword [ebp + 0x70]
add eax, dword [0x446a20]
add eax, dword [0x43e8b0]
mov ecx, dword [0x446e70]
imul ecx, dword [0x44677c]
add eax, ecx
movzx edx, byte [ebp + 0x68]
add edx, dword [ebp + 0x58]
add edx, eax
mov dword [ebp + 0x58], edx
cmp dword [ebp + 0x40], 0
je 0x410843
mov dword [ebp - 0x254], 0
xor eax, eax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x248], eax
cmp dword [0x44677c], 0
je 0x41083a
cmp dword [0x446e60], 0
je 0x41083a
push 0
lea ecx, [ebp - 0x254]
push ecx
push 5
push 1
mov edx, dword [0x43e8b0]
push edx
mov eax, dword [0x446e44]
push eax
call dword [sym.imp.UxTheme.dll_DrawThemeBackground]
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
movzx edx, word [0x446774]
cmp edx, dword [0x4467a0]
jle 0x410864
mov eax, dword [0x446e70]
add eax, dword [0x44677c]
mov dword [0x4467a0], eax
jmp 0x410875
mov ecx, dword [0x446790]
sub ecx, dword [ebp - 0x30]
mov edx, dword [ebp + 0x68]
sub edx, ecx
mov dword [ebp + 0x68], edx
mov eax, dword [ebp - 0xd8]
imul eax, dword [0x4467a4]
imul eax, dword [0x4467a0]
mov ecx, dword [0x4467ac]
sub ecx, eax
mov dword [0x4467a0], ecx
cmp dword [ebp + 0x40], 1
jbe 0x4108a2
jmp 0x41099b
mov ecx, dword [0x44679c]
imul ecx, dword [ebp + 0x6c]
add ecx, dword [ebp + 0x68]
mov esi, dword [0x446e64]
add esi, 0x53
mov eax, dword [ebp - 0x30]
xor edx, edx
div esi
movzx edx, byte [ebp + 0x70]
imul eax, edx
sub ecx, eax
sub ecx, dword [0x446a20]
sub ecx, dword [ebp + 0x58]
mov eax, dword [ebp + 0x6c]
sub eax, ecx
mov dword [ebp + 0x6c], eax
mov ecx, dword [ebp - 0x160]
add ecx, 4
cmp dword [ebp - 0x34], ecx
jne 0x410939
movzx edx, word [ebp + 0x6c]
add edx, dword [0x446794]
movzx eax, word [0x44677c]
add edx, eax
mov ecx, dword [ebp + 0x70]
add ecx, dword [0x44679c]
cmp edx, ecx
jb 0x410918
movzx edx, byte [0x44677c]
mov eax, dword [ebp + 0x70]
sub eax, edx
mov dword [ebp + 0x70], eax
jmp 0x410935
mov eax, dword [0x44693c]
xor edx, edx
mov ecx, 0x13
div ecx
add eax, dword [0x446e70]
sub eax, dword [ebp + 0x6c]
add eax, dword [ebp + 0x70]
mov dword [ebp + 0x70], eax
jmp 0x41099b
mov dword [ebp - 0x264], 0
xor edx, edx
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x258], edx
push 0x4210
push 4
lea eax, [ebp - 0x264]
push eax
mov ecx, dword [0x446e44]
push ecx
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov edx, dword [0x446e44]
add edx, 0xbb9
push edx
mov eax, dword [ebp - 0x164]
push eax
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
jne 0x410618
lea edx, [ebp - 0xb4]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], 0
mov edx, dword [ebp - 0x3c]
mov dword [edx + 4], 0
mov eax, dword [ebp - 0x3c]
mov dword [eax + 8], 0
mov dword [ebp - 4], 1
mov cx, word [0x446e64]
mov word [ebp - 0x46], cx
lea edx, [ebp - 0x46]
push edx
lea ecx, [ebp - 0xb4]
call fcn.00414510
mov eax, dword [ebp - 0xdc]
cdq
mov ecx, 0x2e
idiv ecx
mov ecx, eax
mov esi, dword [0x446778]
add esi, 0x32
mov eax, dword [0x446e60]
cdq
idiv esi
sub ecx, eax
movzx eax, byte [ebp + 0x6c]
mov esi, dword [0x446e60]
add esi, 0x4b
cdq
idiv esi
imul eax, dword [0x446798]
sub eax, dword [ebp - 0x1dc]
cmp ecx, eax
jge 0x410a41
mov edx, dword [ebp + 0x5c]
add edx, dword [0x446778]
mov dword [0x4467a0], edx
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x170], ecx
mov edx, dword [ebp - 0x170]
add edx, 8
mov dword [ebp - 0x2e8], edx
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x178], ecx
mov edx, dword [ebp - 0x178]
mov dword [ebp - 0x2ec], edx
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0xb4]
call fcn.00414810
mov cx, word [0x43e8b0]
mov word [ebp + 0xe], cx
lea edx, [ebp + 0xe]
push edx
lea ecx, [ebp - 0xb4]
call fcn.00414510
mov ax, word [0x446e70]
mov word [ebp + 0xc], ax
lea ecx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.00414510
mov ecx, dword [0x446e64]
add ecx, 0x3e
mov eax, dword [0x446a20]
cdq
idiv ecx
add eax, dword [ebp + 0x68]
movzx edx, word [ebp + 0x58]
add eax, edx
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0xd4]
imul ecx, dword [0x446790]
sub ecx, dword [0x446774]
mov eax, dword [0x446798]
cdq
mov esi, 7
idiv esi
sub ecx, eax
add ecx, dword [ebp + 0x70]
mov edx, dword [ebp - 0x1e0]
sub edx, ecx
mov dword [ebp - 0x1e0], edx
lea ecx, [ebp - 0xb4]
call fcn.00414480
push 0xfffffffffffffffa
mov eax, dword [0x446e60]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xb4]
call fcn.004158b0
mov dword [ebp - 4], 0xffffffff
movzx ecx, byte [0x446e5c]
imul ecx, dword [0x446e70]
test ecx, ecx
je 0x410b7a
mov edx, dword [0x446e70]
mov dword [0x43e8b0], edx
mov eax, 0x446c30
movzx ecx, ax
sub ecx, dword [0x446794]
je 0x410bb5
mov eax, dword [0x446a20]
cdq
mov ecx, 3
idiv ecx
mov edx, 0x446a28
movzx ecx, dl
add eax, ecx
sub eax, dword [0x44679c]
movzx edx, word [0x4468d8]
sub eax, edx
mov dword [0x446e58], eax
cmp dword [0x44690c], 0
jne 0x410beb
movzx eax, word [0x44690c]
movzx ecx, word [0x4467a8]
sub eax, ecx
sub eax, dword [0x446a24]
movzx edx, word [0x4468d8]
add eax, edx
mov ecx, dword [0x446e58]
sub ecx, eax
mov dword [0x446e58], ecx
mov edx, dword [0x446e70]
sub edx, dword [0x446e6c]
mov dword [0x446e68], edx
mov dword [ebp + 0x38], 0
mov dword [ebp + 0x3c], 1
mov eax, dword [ebp + 0x7c]
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x1a0], ecx
mov edx, dword [0x446e60]
mov dword [ebp - 0x2f8], edx
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x180], 6
mov dword [ebp - 0x19c], 0x96
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x398], 0
xor eax, eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x3a8], 0
xor ecx, ecx
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x3a0], ecx
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x3b8], 0
xor edx, edx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0x3ac], edx
xor eax, eax
mov word [ebp - 0x1060], ax
push 0x206
push 0
lea ecx, [ebp - 0x105e]
push ecx
call fcn.0041abe0
add esp, 0xc
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x4467a4], eax
lea edx, [ebp - 0x304]
push edx
lea eax, [ebp - 0x308]
push eax
push 0xe
push 0xffffffffffffffff
push 0
call dword [sym.imp.WTSAPI32.dll_WTSQuerySessionInformationA]
mov dword [ebp - 0x44], 0x5f
mov dword [ebp - 0x17c], 0
push 0x5a
mov ecx, dword [ebp - 0x17c]
push ecx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
imul eax, eax, 0xb4
cdq
mov ecx, 0x48
idiv ecx
mov dword [0x446e70], eax
mov ecx, dword [0x446e64]
add ecx, 0x35
mov eax, dword [0x446a20]
cdq
idiv ecx
add eax, dword [0x43e8b0]
movzx edx, byte [0x44679c]
imul edx, dword [0x446e60]
sub eax, edx
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x44]
sub eax, 1
mov dword [ebp - 0x44], eax
jne 0x410d0a
push 0
lea ecx, [ebp - 0x98]
push ecx
push 0
mov edx, dword [ebp + 0x38]
push edx
call dword [sym.imp.NTDSAPI.dll_DsQuoteRdnValueA]
imul eax, eax, 0x39
imul eax, dword [ebp - 0x180]
shl eax, 8
mov dword [0x446a20], eax
mov dword [ebp - 0x198], 0
mov ecx, dword [0x4467a0]
mov dword [ebp - 0x194], ecx
mov edx, dword [0x446790]
mov dword [ebp - 0x190], edx
mov eax, dword [0x446e44]
mov dword [ebp - 0x18c], eax
mov ecx, dword [0x446e44]
add ecx, 2
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x184], 0
push 0xcc0020
push 0x12
push 0x16
push 5
push 5
mov edx, dword [ebp - 0x184]
push edx
mov eax, dword [ebp - 0x188]
push eax
mov ecx, dword [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0x190]
push edx
mov eax, dword [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x198]
push ecx
call dword [sym.imp.GDI32.dll_StretchBlt]
push 0x80
push 0xffffffffffffffec
mov edx, dword [0x446e60]
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [ebp - 0x234], 0
xor eax, eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov ecx, dword [0x43e8b0]
push ecx
mov edx, dword [0x446790]
push edx
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push 0
mov ecx, dword [0x446e44]
push ecx
call dword [sym.imp.NTDSAPI.dll_DsRemoveDsDomainA]
imul edx, eax, 0xed
imul edx, dword [ebp - 0x19c]
mov dword [0x44679c], edx
mov eax, 0x446918
cdq
mov ecx, 0x29
idiv ecx
sub eax, dword [0x4467a0]
cmp eax, dword [0x446e64]
jg 0x410eb8
mov edx, 0x446918
movzx eax, dx
mov ecx, dword [0x4467a0]
sub ecx, eax
mov dword [ebp - 0x1a0], ecx
movzx edx, byte [0x44677c]
movzx eax, word [0x4467a0]
add edx, eax
movzx ecx, byte [0x446790]
sub edx, ecx
mov dword [0x43e8b0], edx
mov edx, dword [0x446790]
imul edx, dword [0x446e44]
add edx, dword [0x446e64]
add edx, dword [0x4467a4]
mov dword [0x4467a4], edx
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x1a4]
call fcn.004149f0
mov dword [ebp - 4], 3
push 0x446a24
lea ecx, [ebp - 0x20c]
call fcn.00415540
push 0x4467a4
lea ecx, [ebp - 0x20c]
call fcn.00415540
push 0x446794
lea ecx, [ebp - 0x20c]
call fcn.00415540
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1ac]
add eax, 0x10
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ecx]
mov dword [ebp - 0x1b4], edx
cmp dword [ebp - 0x1b4], 0
je 0x411010
cvtsi2sd xmm0, dword [0x44677c]
cvtsi2sd xmm1, dword [0x4467a0]
movsd qword [ebp - 0x330], xmm0
movaps xmm0, xmm1
call fcn.00431420
movsd xmm1, qword [ebp - 0x330]
mulsd xmm1, xmm0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x9c], eax
cvtsi2sd xmm0, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4393e0]
mulsd xmm1, xmm0
mov edx, dword [0x446774]
mov dword [ebp - 0xa0], edx
cvtsi2sd xmm0, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4393e0]
addsd xmm0, xmm1
call fcn.004304d1
mov dword [0x446774], eax
mov eax, dword [0x4467a0]
cdq
mov ecx, 0x1b
idiv ecx
mov edx, dword [ebp + 0x3c]
sub edx, eax
movzx eax, word [ebp + 0x38]
cmp edx, eax
jae 0x411055
mov eax, dword [ebp + 0x3c]
imul eax, dword [0x44677c]
mov ecx, dword [0x446e64]
add ecx, 0x32
xor edx, edx
div ecx
movzx edx, byte [ebp + 0x38]
add eax, edx
mov ecx, dword [0x4467a0]
sub ecx, eax
mov dword [0x4467a0], ecx
movzx edx, byte [0x44679c]
imul edx, dword [0x44677c]
mov eax, dword [ebp + 0x3c]
sub eax, edx
mov dword [ebp + 0x3c], eax
mov ecx, dword [0x4467a4]
add ecx, dword [0x446e44]
mov dword [0x446794], ecx
movzx ecx, byte [ebp - 0x1b8]
movzx eax, byte [0x446a20]
imul eax, dword [0x44677c]
mov esi, dword [0x446e64]
add esi, 0x41
cdq
idiv esi
sub ecx, eax
mov edx, dword [0x4467ac]
imul edx, dword [0x446778]
cmp ecx, edx
jg 0x4110c1
mov eax, dword [0x446a20]
sub eax, dword [0x44677c]
mov dword [0x446e70], eax
mov ecx, dword [0x446774]
mov dword [ebp - 0x1bc], ecx
lea edx, [ebp - 0x1bc]
push edx
lea ecx, [ebp - 0x20c]
call fcn.00415540
lea ecx, [ebp - 0x20c]
call fcn.00415790
mov eax, dword [0x4467a0]
push eax
push 0
push 0
mov ecx, dword [0x446e44]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
cmp dword [ebp - 0xa4], 0
jne 0x411119
mov edx, dword [0x446798]
sub edx, dword [ebp + 0x38]
mov dword [0x446798], edx
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x20c]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0xa8]
call fcn.00415360
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xa8]
call fcn.00415af0
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
add ebp, 0x74
mov esp, ebp
pop ebp
ret