Function at 0x401000
Capabilities:
Allocate thread local storage
Hide graphical window
Identify system language via api
Log keystrokes via polling
Query environment variable

Disassembly:
push 0x754
push 0
push 0x2196524
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x2196528], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x2196524], eax
mov eax, 0x4aaca0
mov dword [0x21965c8], eax
call fcn.0041219b
call fcn.0044cd90
call fcn.0044c194
call fcn.0044bca0
call fcn.0044a470
call fcn.004483a4
call fcn.00447b30
call fcn.0044738f
call fcn.004468eb
call fcn.00445679
call fcn.0043cdcb
call fcn.0043cb46
call fcn.0043b4e2
call fcn.0043af1c
call fcn.0043a8bd
call fcn.004395d0
call fcn.004370fb
call fcn.0043273e
call fcn.0043116c
call fcn.0042f90a
call fcn.0042f046
call fcn.0042e2bc
call fcn.0042d7c1
call fcn.00413610
call fcn.0041336e
call fcn.00412425
call fcn.004122fe
mov edx, 0x4a6084
lea ecx, [0x2196734]
call fcn.00411008
mov edx, 0x4aabc6
lea ecx, [0x2196570]
call fcn.00411008
mov dword [0x21965f4], 0
mov dword [0x2196628], 0
mov dword [0x21965dc], 0
mov dword [0x21966b8], 0x3e3
mov dword [0x21966b0], 0
mov dword [0x2196750], 0xffffffff
mov dword [0x2196758], 0xffffffff
mov dword [0x2196540], 0xffffffff
mov dword [0x2196544], 0xffffffff
mov dword [0x219671c], 0
push 0x14
push 0x3c
push 0xffffffff
call fcn.0044584f
mov dword [0x2196580], eax
call fcn.0040728e
call fcn.00431766
mov ebp, 0x2190561
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x219657c], eax
mov ebp, 0x21907f5
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196584], eax
mov ebp, 0x2190c9d
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196588], eax
mov ebp, 0x219115f
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x219658c], eax
mov ebp, 0x2191627
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196590], eax
mov ebp, 0x21919c8
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196594], eax
mov ebp, 0x2191e12
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196598], eax
mov ebp, 0x21923b9
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x219659c], eax
mov ebp, 0x21928ff
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965a0], eax
mov ebp, 0x2192993
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965a4], eax
mov ebp, 0x663e8a
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196578], eax
mov ebp, 0x663f2b
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965d4], eax
mov ebp, 0x664040
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965d0], eax
mov ebp, 0x2192aa8
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196608], eax
mov ebp, 0x2192d86
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196650], eax
mov ebp, 0x566bc6
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196760], eax
mov ebp, 0x566e21
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965ac], eax
mov ebp, 0x56779f
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965b4], eax
mov ebp, 0x5679a1
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965fc], eax
mov ebp, 0x56706d
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965d8], eax
mov ebp, 0x56740f
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196638], eax
mov ebp, 0x567bb9
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196740], eax
push dword [0x2196760]
call fcn.00405d8c
push dword [0x21965ac]
call fcn.00405d8c
push dword [0x21965b4]
call fcn.00405d8c
push dword [0x21965fc]
call fcn.00405d8c
push dword [0x21965d8]
call fcn.00405d8c
push dword [0x2196638]
call fcn.00405d8c
push dword [0x2196740]
call fcn.00405d8c
push dword [0x2196608]
call fcn.00405d8c
push dword [0x2196650]
call fcn.00405d8c
mov dword [0x21966a8], 0
mov dword [0x21966a0], 0
mov edx, 0x4a6028
lea ecx, [0x21966c4]
call fcn.00411008
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push 0x64
call fcn.0044a720
lea eax, [0x2196530]
push eax
call fcn.0044ce20
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push 0xc8
call fcn.0044a720
lea eax, [0x21966c8]
push eax
call fcn.0044ce20
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push 0xc8
call fcn.0044a720
lea eax, [0x2196744]
push eax
call fcn.0044ce20
push 0xc8
mov eax, dword [0x21966c8]
push eax
mov eax, 0x4aa8ea
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x2196744]
push eax
mov eax, 0x4a8796
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x2196530]
push eax
mov eax, 0x4a7a66
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov edx, 0x4a6028
lea ecx, [0x2196728]
call fcn.00411008
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push 0x3e8
call fcn.0044a720
lea eax, [0x219655c]
push eax
call fcn.0044ce20
push 0x3e8
mov eax, dword [0x219655c]
push eax
mov eax, 0x4a9150
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
call fcn.0042d7f0
call fcn.00411b92
add dword [esp], edx
call fcn.004389f0
lea eax, [0x2196558]
push eax
call fcn.0044ce20
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
call fcn.00438a6f
lea eax, [0x2196720]
push eax
call fcn.0044ce20
mov edx, 0x4a6028
lea ecx, [0x2196620]
call fcn.00411008
push dword [0x21966c8]
mov edx, 0x4a6dd2
pop ecx
call fcn.00411bb0
jne 0x401563
push dword [0x2196744]
mov edx, 0x4a6dd2
pop ecx
call fcn.00411bb0
jne 0x401563
jmp 0x40156a
mov eax, 1
jmp 0x40156c
xor eax, eax
and eax, eax
je 0x401582
mov edx, 0x4a857e
lea ecx, [0x21966c4]
call fcn.00411008
jmp 0x401592
mov edx, 0x4a9192
lea ecx, [0x21966c4]
call fcn.00411008
call fcn.0042d9b6
mov ebx, eax
dec ebx
mov dword [0x21965a8], ebx
mov ebx, dword [0x21965a8]
and ebx, ebx
jl 0x401662
mov dword [0x21966ac], 0
jmp 0x4015ba
mov eax, dword [0x21965a8]
cmp eax, dword [0x21966ac]
jl 0x401662
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push dword [0x21966ac]
call fcn.0042d9ca
call fcn.00411b92
add dword [esp], edx
call fcn.0044a770
lea eax, [0x21966cc]
push eax
call fcn.0044ce20
push dword [0x21966cc]
mov edx, 0x4a7a08
mov ecx, dword [esp]
call fcn.00411bb0
je 0x401636
mov edx, 0x4a8fa2
lea ecx, [0x2196620]
call fcn.00411008
jmp 0x401655
mov edx, 0x4a858c
mov ecx, dword [esp]
call fcn.00411bb0
je 0x401655
mov edx, 0x4a8724
lea ecx, [0x2196620]
call fcn.00411008
pop eax
inc dword [0x21966ac]
jno 0x4015ba
push 0x100
push 1
call fcn.00410c90
push dword [0x2196620]
mov edx, 0x4a6028
pop ecx
call fcn.00411bb0
je 0x4016ad
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
call sub.KERNEL32.dll_GetUserDefaultLangID
cdq
push edx
push eax
call fcn.0044a7e0
lea eax, [0x2196620]
push eax
call fcn.0044ce20
push dword [0x2196620]
mov edx, 0x4a7e6e
pop ecx
call fcn.00411bb0
je 0x4016d2
mov edx, 0x4a7b4c
lea ecx, [0x2196620]
call fcn.00411008
jmp 0x401707
push dword [0x2196620]
mov edx, 0x4a82c4
pop ecx
call fcn.00411bb0
je 0x4016f7
mov edx, 0x4a6b4a
lea ecx, [0x2196620]
call fcn.00411008
jmp 0x401707
mov edx, 0x4a7b4c
lea ecx, [0x2196620]
call fcn.00411008
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
call fcn.0042d7f0
call fcn.00411b92
add dword [esp], edx
call fcn.00438b67
call fcn.0044ceb0
push 1
push 0
push dword [0x2196724]
call fcn.00411b92
add dword [esp + 0xc], edx
call sub.KERNEL32.dll_CreateSemaphoreW
call fcn.00411bf0
mov dword [0x219654c], eax
mov ebx, dword [0x219654c]
and ebx, ebx
je 0x40178e
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
cmp ebx, 0xb7
jne 0x40178e
mov eax, 1
jmp 0x401790
xor eax, eax
and eax, eax
je 0x4017a4
push dword [0x219654c]
call sub.KERNEL32.dll_CloseHandle
jmp 0x4040ca
mov dword [0x2196668], 0
mov edx, 0x4a6028
lea ecx, [0x219672c]
call fcn.00411008
push 0x100
push 0
call fcn.00410c90
push edx
call fcn.0044cde0
pop edx
push eax
mov eax, 0x4a63b4
push eax
mov eax, 0x4a6e08
push eax
mov eax, 0x4a6e66
push eax
call fcn.0040c096
lea eax, [0x21966a4]
push eax
call fcn.0044ce20
mov eax, 0x4a63b4
push eax
push dword [0x21966a4]
call fcn.0044aa00
mov dword [0x2196718], eax
mov ebx, dword [0x2196718]
cmp ebx, 1
jge 0x40181b
jmp 0x40184f
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
mov ebx, dword [0x2196718]
dec ebx
push ebx
push 1
push dword [0x21966a4]
call fcn.0044aa20
lea eax, [0x21966a4]
push eax
call fcn.0044ce20
push dword [0x21966a4]
call fcn.0044aab0
mov dword [0x2196534], eax
mov ebx, dword [0x2196534]
cmp ebx, 0x2710
jle 0x401877
mov dword [0x2196668], 1
mov ebx, dword [0x2196534]
cmp ebx, 0x2580
jl 0x40189a
mov edx, 0x4aa80c
lea ecx, [0x219672c]
call fcn.00411008
jmp 0x40195e
mov ebx, dword [0x2196534]
cmp ebx, 0x23f0
jl 0x4018bd
mov ebx, dword [0x2196534]
cmp ebx, 0x2454
jge 0x4018bd
mov eax, 1
jmp 0x4018bf
xor eax, eax
and eax, eax
je 0x4018d8
mov edx, 0x4a644c
lea ecx, [0x219672c]
call fcn.00411008
jmp 0x40195e
mov ebx, dword [0x2196534]
cmp ebx, 0x1db0
jl 0x4018fb
mov ebx, dword [0x2196534]
cmp ebx, 0x1e14
jge 0x4018fb
mov eax, 1
jmp 0x4018fd
xor eax, eax
and eax, eax
je 0x401913
mov edx, 0x4a6448
lea ecx, [0x219672c]
call fcn.00411008
jmp 0x40195e
mov ebx, dword [0x2196534]
cmp ebx, 0xa28
jl 0x401936
mov ebx, dword [0x2196534]
cmp ebx, 0xbb8
jge 0x401936
mov eax, 1
jmp 0x401938
xor eax, eax
and eax, eax
je 0x40194e
mov edx, 0x4a8586
lea ecx, [0x219672c]
call fcn.00411008
jmp 0x40195e
mov edx, 0x4aa80c
lea ecx, [0x219672c]
call fcn.00411008
mov ebx, dword [0x21965f4]
cmp ebx, 7
jne 0x401985
mov edx, 0x4a6448
lea ecx, [0x219672c]
call fcn.00411008
mov dword [0x2196668], 0
jmp 0x4019aa
mov ebx, dword [0x21965f4]
cmp ebx, 0xa
jne 0x4019aa
mov edx, 0x4aa80c
lea ecx, [0x219672c]
call fcn.00411008
mov dword [0x2196668], 1
push edx
call fcn.0044cde0
pop edx
push eax
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4aa41e
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438b79
call fcn.00411bf0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4019f7
jl 0x4019f3
cmp ebx, 0
ja 0x4019f7
xor eax, eax
jmp 0x4019fc
mov eax, 1
or eax, eax
je 0x401a2d
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a6f0c
push edx
call fcn.0044cee0
lea eax, [0x2196728]
push eax
call fcn.0044ce20
jmp 0x401a58
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a848e
push edx
call fcn.0044cee0
lea eax, [0x2196728]
push eax
call fcn.0044ce20
push 7
push 0x4aac60
lea eax, [0x2196c10]
push eax
push 0x3c
call fcn.0044690a
push 7
push 0x4aac60
lea eax, [0x2196c18]
push eax
push 0x3c
call fcn.0044690a
mov dword [0x219673c], 0
call fcn.00431766
mov dword [0x2196604], 0xa
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a99e2
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a99e2
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a99e2
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a9ee2
lea ecx, [ebp + 0x18]
call fcn.00411008
mov edx, 0x4aa76a
lea ecx, [ebp + 0x1c]
call fcn.00411008
mov ebp, 0x6270da
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a985a
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a985a
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a73ce
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a8c08
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x5d4ade
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
mov ebx, dword [0x2196668]
and ebx, ebx
jle 0x401c5a
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a6348
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a6bf0
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a8ff6
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a9f0e
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x5d4ade
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a903e
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a6156
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a6f40
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a9760
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x572d0e
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a707a
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a707a
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a95aa
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a6f98
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x572d0e
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a6b5e
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a6b5e
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a6b5e
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4aa81a
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x5c5a40
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4aaaf8
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a9882
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a9882
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a7104
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x637918
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
push edx
call fcn.0044cde0
pop edx
push eax
mov eax, 0x4a6028
push eax
mov eax, 0x4a6854
push eax
call fcn.00406229
call fcn.00411bf0
call fcn.00431766
mov ebp, 0x4f9c4d
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965cc], eax
push dword [0x219657c]
call fcn.00405d8c
push dword [0x2196584]
call fcn.00405d8c
push dword [0x2196588]
call fcn.00405d8c
push dword [0x2196594]
call fcn.00405d8c
push dword [0x2196598]
call fcn.00405d8c
call fcn.0043b553
mov edx, 0x4aa966
lea ecx, [0x2196614]
call fcn.00411008
mov ebx, dword [0x2196750]
cmp ebx, 0xffffffff
je 0x401f1b
mov ebx, dword [0x2196758]
cmp ebx, 0xffffffff
je 0x401f1b
mov eax, 1
jmp 0x401f1d
xor eax, eax
and eax, eax
je 0x401f5d
mov ebx, dword [0x2196540]
push 0
call fcn.0043b6d5
cmp ebx, eax
jne 0x401f50
mov ebx, dword [0x2196544]
push 0
call fcn.0043b6f8
cmp ebx, eax
jne 0x401f50
mov eax, 1
jmp 0x401f52
xor eax, eax
and eax, eax
je 0x401f5d
mov eax, 1
jmp 0x401f5f
xor eax, eax
and eax, eax
je 0x401f96
push 0
push dword [0x2196614]
push dword [0x21965cc]
push 0x1c7
push 0x27d
push dword [0x2196758]
push dword [0x2196750]
call fcn.004054cc
mov dword [0x2196714], eax
jmp 0x401fc8
mov eax, 1
push eax
push dword [0x2196614]
push dword [0x21965cc]
push 0x1c7
push 0x27d
push dword [0x2196758]
push dword [0x2196750]
call fcn.004054cc
mov dword [0x2196714], eax
mov eax, 0x4a8082
push eax
call sub.USER32.dll_RegisterWindowMessageW
mov dword [0x2196634], eax
push dword [0x2196714]
lea eax, [0x407132]
push eax
call fcn.00437166
push 0x55
push 0x43
push 0x34
push 0x43
push 0xffffffff
call fcn.004337bc
mov dword [0x2196648], eax
push 1
push dword [0x2196648]
call fcn.004339ec
push 0
push 0
push 0
call fcn.0043cdd7
push eax
push dword [0x2196714]
call fcn.004371cc
push dword [0x21966b8]
push 4
push dword [0x2196714]
call fcn.0043722b
push dword [0x219672c]
mov edx, 0x4a8586
pop ecx
call fcn.00411bb0
je 0x40208f
mov ebp, 0x56454d
push ebp
push 1
call fcn.004459d0
push eax
push dword [0x2196714]
call fcn.0043725a
push eax
push 0
call fcn.00412439
jmp 0x4020b6
mov ebp, 0x54a8c9
push ebp
push 1
call fcn.004459d0
push eax
push dword [0x2196714]
call fcn.0043725a
push eax
push 0
call fcn.00412439
push edx
call fcn.0044cde0
pop edx
push eax
mov edx, dword [0x2196614]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a6304
push edx
call fcn.0044cee0
mov edx, dword [0x2196734]
push edx
call fcn.0044cee0
call fcn.0044ceb0
push 0
call fcn.00411b92
add dword [esp + 4], edx
call fcn.0041255f
call fcn.00411bf0
mov ebp, 0x566b0b
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196730], eax
mov ebp, 0x566b69
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196770], eax
push dword [0x2196730]
call fcn.00405d8c
push dword [0x2196770]
call fcn.00405d8c
mov dword [0x2196660], 9
push dword [0x2196660]
mov eax, 0x4a64dc
push eax
push 0
call fcn.0044c2aa
and eax, eax
je 0x40216e
xor eax, eax
jmp 0x402173
mov eax, 1
and eax, eax
je 0x402192
push 0
mov eax, 0x4a9d7e
push eax
mov eax, 0x4aa6b2
push eax
call fcn.004133a7
jmp 0x4040ca
push 0x100
push dword [0x2196660]
mov eax, 0x4a64dc
push eax
push 1
call fcn.0044c1e1
and eax, eax
je 0x4021b5
xor eax, eax
jmp 0x4021ba
mov eax, 1
and eax, eax
je 0x4021d9
push 0
mov eax, 0x4a9d7e
push eax
mov eax, 0x4aa6b2
push eax
call fcn.004133a7
jmp 0x4040ca
push edx
call fcn.0044cde0
pop edx
push eax
mov edx, dword [0x2196558]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a979e
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438b79
call fcn.00411bf0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402226
jl 0x402222
cmp ebx, 0
ja 0x402226
xor eax, eax
jmp 0x40222b
mov eax, 1
or eax, eax
jne 0x402287
push edx
call fcn.0044cde0
pop edx
push eax
mov edx, dword [0x2196558]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a869e
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438b79
call fcn.00411bf0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40227c
jl 0x402278
cmp ebx, 0
ja 0x40227c
xor eax, eax
jmp 0x402281
mov eax, 1
or eax, eax
jne 0x402287
jmp 0x40228e
mov eax, 1
jmp 0x402290
xor eax, eax
and eax, eax
je 0x402320
push dword [0x2196c18]
call fcn.0044699c
mov ebp, dword [0x2196c1c]
mov edx, 0x4a605a
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x4a605a
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x4a605a
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x4aa22c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x4a967a
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x5a49c4
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x20]
push dword [0x2196604]
pop dword [ebp + 0x40]
mov ebx, dword [0x2196604]
inc ebx
mov dword [0x2196604], ebx
mov dword [0x21965b8], 0
mov dword [0x2196554], 0
mov dword [0x2196708], 0
mov dword [0x219656c], 0xa
mov dword [0x2196600], 0x4e
mov dword [0x21965b0], 0x1c
mov dword [0x2196560], 0
push dword [0x2196c18]
call fcn.00446a3a
push dword [0x2196c18]
call fcn.00446a4f
or eax, eax
je 0x40255e
mov ebx, dword [0x2196560]
cmp ebx, dword [0x219656c]
jne 0x4023b2
push dword [0x2196600]
pop dword [0x2196708]
mov dword [0x2196600], 0x4e
mov dword [0x2196554], 1
push 1
mov ebp, dword [0x2196c1c]
push dword [ebp + 8]
push dword [0x21965a0]
push 0x17
push 0xaa
push dword [0x2196600]
push 0xeb
call fcn.004063cf
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x24]
push 1
push 0x4a6028
push dword [0x219657c]
push 0x17
push 0x17
push dword [0x2196600]
push 0x19e
call fcn.004063cf
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x28]
push 1
push 0x4a6028
push dword [0x2196584]
push 0x17
push 0x17
push dword [0x2196600]
push 0x1bc
call fcn.004063cf
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x2c]
push 1
push 0x4a6028
push dword [0x2196588]
push 0x17
push 0x17
push dword [0x2196600]
push 0x1e4
call fcn.004063cf
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x30]
push 1
push 0x4a6028
push dword [0x2196594]
push 0x17
push 0x17
push dword [0x2196600]
push 0x220
call fcn.004063cf
push eax
mov ebp, dword [0x2196c1c]
pop dword [ebp + 0x34]
mov ebx, dword [0x2196554]
and ebx, ebx
jne 0x4024e0
push dword [0x2196600]
mov ebp, dword [0x2196c1c]
push dword [ebp + 0x18]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00408016
jmp 0x40253a
push 1
mov ebp, dword [0x2196c1c]
push dword [ebp + 0x24]
call fcn.004061e0
push 1
mov ebp, dword [0x2196c1c]
push dword [ebp + 0x24]
call fcn.00433a2a
push 1
push dword [ebp + 0x28]
call fcn.00433a2a
push 1
push dword [ebp + 0x2c]
call fcn.00433a2a
push 1
push dword [ebp + 0x30]
call fcn.00433a2a
push 1
push dword [ebp + 0x34]
call fcn.00433a2a
mov ebx, dword [0x2196560]
inc ebx
mov dword [0x2196560], ebx
mov ebx, dword [0x2196600]
add ebx, dword [0x21965b0]
mov dword [0x2196600], ebx
jmp 0x402371
push 1
push 0x4a6028
push dword [0x2196588]
push 0x17
push 0x17
push 0x14a
push 0x82
call fcn.004063cf
mov dword [0x2196624], eax
jmp 0x4027db
mov ebp, 0x593d8a
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
mov dword [0x219669c], eax
mov ebp, 0x594186
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
mov dword [0x2196698], eax
mov ebp, 0x63a836
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
mov dword [0x21965f8], eax
mov ebp, 0x5e531c
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
mov dword [0x21965e4], eax
mov ebp, 0x5fefa0
push ebp
push 0xffffffff
call fcn.004459d0
push eax
call fcn.004459e7
mov dword [0x2196548], eax
push 0
call fcn.00430a7d
and eax, eax
je 0x402bcf
push dword [0x2196620]
mov edx, 0x4a6b4a
pop ecx
call fcn.00411bb0
je 0x402985
push 0x23
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a92f0
push eax
call fcn.00430b0b
push 0x23
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a92f0
push eax
push 0x33
call fcn.00430be4
push dword [0x21965f8]
mov eax, 0x4a73aa
push eax
push 0x32
call fcn.00430be4
push 0x5a
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4aa580
push eax
push 0x31
call fcn.00430be4
push 0x58
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4aa9da
push eax
push 0x2f
call fcn.00430be4
push 0xa2
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a6cf4
push eax
push 0x2e
call fcn.00430be4
push 0xa6
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a828a
push eax
push 0x30
call fcn.00430be4
jmp 0x402a7a
push 0x23
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a8d82
push eax
call fcn.00430b0b
push 0x23
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a8d82
push eax
push 0x33
call fcn.00430be4
push dword [0x21965f8]
mov eax, 0x4a738c
push eax
push 0x32
call fcn.00430be4
push 0x5a
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4aa0d0
push eax
push 0x31
call fcn.00430be4
push 0x58
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a609a
push eax
push 0x2f
call fcn.00430be4
push 0xa2
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a729a
push eax
push 0x2e
call fcn.00430be4
push 0xa6
mov eax, 0x4a7d06
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x4a7b2c
push eax
push 0x30
call fcn.00430be4
call fcn.00430c8d
call fcn.00430cb1
push dword [0x2196c18]
call fcn.00446a83
mov ebx, eax
cmp ebx, dword [0x219656c]
jl 0x402b09
push dword [0x2196620]
mov edx, 0x4a6b4a
pop ecx
call fcn.00411bb0
je 0x402ab9
mov eax, 0x4aaadc
push eax
call fcn.00430bd6
jmp 0x402ac4
mov eax, 0x4aa9c0
push eax
call fcn.00430bd6
push dword [0x2196c18]
call fcn.00446a3a
push dword [0x2196c18]
call fcn.00446a4f
or eax, eax
je 0x402b09
push dword [0x2196c18]
call fcn.00446a8d
mov ebx, eax
cmp ebx, dword [0x219656c]
jl 0x402b07
mov ebp, dword [0x2196c1c]
push dword [ebp + 0x20]
push dword [ebp + 8]
push dword [ebp + 0x40]
call fcn.00430be4
jmp 0x402acf
call fcn.00430c8d
push dword [0x2196c18]
call fcn.00446a3a
push dword [0x2196c18]
call fcn.00446a4f
or eax, eax
je 0x402b53
push dword [0x2196c18]
call fcn.00446a8d
mov ebx, eax
cmp ebx, dword [0x219656c]
jge 0x402b51
mov ebp, dword [0x2196c1c]
push dword [ebp + 0x20]
push dword [ebp + 8]
push dword [ebp + 0x40]
call fcn.00430be4
jmp 0x402b19
call fcn.00430cb1
push dword [0x2196620]
mov edx, 0x4a6b4a
pop ecx
call fcn.00411bb0
je 0x402b9e
push dword [0x21965e4]
mov eax, 0x4a946c
push eax
push 1
call fcn.00430be4
call fcn.00430cb1
push dword [0x219669c]
mov eax, 0x4a7f72
push eax
push 3
call fcn.00430be4
jmp 0x402bcf
push dword [0x21965e4]
mov eax, 0x4a9e06
push eax
push 1
call fcn.00430be4
call fcn.00430cb1
push dword [0x219669c]
mov eax, 0x4a87c4
push eax
push 3
call fcn.00430be4
mov ebx, dword [0x2196554]
and ebx, ebx
jle 0x402c6d
push dword [0x21965d4]
call fcn.00445a03
push eax
call fcn.0043b71b
push eax
push dword [0x21965d4]
call fcn.00445a21
push eax
call fcn.0043b73f
push eax
push dword [0x21965d4]
call fcn.00445ad6
push dword [0x21965d0]
call fcn.00445a03
push eax
call fcn.0043b71b
push eax
push dword [0x21965d0]
call fcn.00445a21
push eax
call fcn.0043b73f
push eax
push dword [0x21965d0]
call fcn.00445ad6
push dword [0x21965d4]
call fcn.004459e7
push eax
push 0x14
push 0x17
mov ebx, dword [0x2196708]
inc ebx
push ebx
push 0x19e
push 0xffffffff
call fcn.00434231
mov dword [0x2196738], eax
push 1
mov eax, 0x4a6028
push eax
push dword [0x2196590]
push 0x14
push 0x19
push 0xe
push 0x206
call fcn.004063cf
mov dword [0x21966d8], eax
mov eax, 0x4a6028
push eax
push 0xe
push 0xe
push 0x52
push 0xd4
push 0xffffffff
call fcn.0043459c
mov dword [0x2196640], eax
push 0
push 0x28
push 0x134
push 0x54
push 0xeb
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196538], eax
mov eax, 0x4a6028
push eax
push 0xe
push 0xe
push 0x6e
push 0xd4
push 0xffffffff
call fcn.0043459c
mov dword [0x2196644], eax
push 0
push 0x28
push 0x134
push 0x70
push 0xeb
push 0xffffffff
call fcn.00434ba1
mov dword [0x219653c], eax
push 1
push 0x4a6028
push dword [0x2196594]
push 0x17
push 0x17
push 0x14a
push 0x46
call fcn.004063cf
mov dword [0x2196658], eax
mov edx, 0x4a6028
lea ecx, [0x21965e0]
call fcn.00411008
push dword [0x2196620]
mov edx, 0x4a6b4a
pop ecx
call fcn.00411bb0
je 0x402def
push 0
mov eax, 0x4a6464
push eax
push dword [0x2196578]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.004063cf
mov dword [0x2196618], eax
push 0
mov eax, 0x4a6a5c
push eax
push dword [0x21965a0]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.004063cf
mov dword [0x21966bc], eax
jmp 0x402e4d
push 0
mov eax, 0x4a6aa6
push eax
push dword [0x2196578]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.004063cf
mov dword [0x2196618], eax
push 0
mov eax, 0x4aa612
push eax
push dword [0x21965a0]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.004063cf
mov dword [0x21966bc], eax
mov edx, 0x4a6028
lea ecx, [0x219670c]
call fcn.00411008
push 9
mov eax, 0x4a64dc
push eax
push 0xffffffff
call fcn.0044c2aa
mov dword [0x21966b4], eax
push 0x14
push 0xb4
push 0xffffffff
call fcn.0044584f
mov dword [0x2196700], eax
push 0x14
push 0xb4
push 0xffffffff
call fcn.0044584f
mov dword [0x219666c], eax
push dword [0x2196700]
call fcn.00405d8c
push dword [0x219666c]
call fcn.00405d8c
push 0x12
push 0x64
push 0x23
call fcn.0043b71b
push eax
push dword [0x21965cc]
call fcn.00445a21
mov ebx, eax
add ebx, 0xffffff9c
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
push dword [0x21965cc]
call fcn.00445aec
mov dword [0x2196710], eax
push 0x12
push 0x64
push 0x23
call fcn.0043b71b
push eax
push dword [0x21965cc]
call fcn.00445a21
mov ebx, eax
add ebx, 0xffffff9c
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
push dword [0x21965cc]
call fcn.00445aec
mov dword [0x21966f8], eax
push dword [0x2196710]
call fcn.00405d8c
push dword [0x21966f8]
call fcn.00405d8c
mov edx, dword [0x2196734]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, dword [0x219670c]
push edx
call fcn.0044cee0
mov edx, 0x4a864e
push edx
call fcn.0044cee0
lea eax, [0x2196704]
push eax
call fcn.0044ce20
push dword [0x2196700]
call fcn.00445bfd
push eax
call fcn.0043ce14
and eax, eax
je 0x403062
push 1
call fcn.0043ce79
push dword [0x21966b4]
call fcn.0044c2c0
push eax
call fcn.0043ce90
push dword [0x2196704]
call fcn.0043cea7
mov dword [0x219674c], eax
push dword [0x2196704]
call fcn.0043cebe
mov dword [0x2196748], eax
push 0x40
push pe_nt_image_headers32
push 0xff
call fcn.0043cdd7
mov dword [0x2196694], eax
push 5
push 5
call fcn.0043ced5
mov dword [0x2196550], eax
push dword [0x2196550]
push dword [0x2196694]
push dword [0x2196704]
push 2
call fcn.0043b71b
push eax
push dword [0x2196700]
call fcn.00445a21
mov ebx, eax
sub ebx, dword [0x219674c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.0043cefe
call fcn.0043cf83
push dword [0x219666c]
call fcn.00445bfd
push eax
call fcn.0043ce14
and eax, eax
je 0x40312a
push 1
call fcn.0043ce79
push dword [0x21966b4]
call fcn.0044c2c0
push eax
call fcn.0043ce90
push dword [0x2196704]
call fcn.0043cea7
mov dword [0x219674c], eax
push dword [0x2196704]
call fcn.0043cebe
mov dword [0x2196748], eax
push 0xfa
push 0xfa
push 0xfa
call fcn.0043cdd7
mov dword [0x2196694], eax
push 5
push 5
call fcn.0043ced5
mov dword [0x2196550], eax
push dword [0x2196550]
push dword [0x2196694]
push dword [0x2196704]
push 2
call fcn.0043b71b
push eax
push dword [0x2196700]
call fcn.00445a21
mov ebx, eax
sub ebx, dword [0x219674c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.0043cefe
call fcn.0043cf83
mov edx, 0x4a7b98
lea ecx, [0x2196704]
call fcn.00411008
push dword [0x2196710]
call fcn.00445bfd
push eax
call fcn.0043ce14
and eax, eax
je 0x4031e2
push 1
call fcn.0043ce79
push dword [0x21966b4]
call fcn.0044c2c0
push eax
call fcn.0043ce90
push dword [0x2196704]
call fcn.0043cea7
mov dword [0x219674c], eax
push dword [0x2196704]
call fcn.0043cebe
mov dword [0x2196748], eax
push 0x96
push 0xdc
push 0x96
call fcn.0043cdd7
mov dword [0x2196694], eax
push dword [0x2196694]
push dword [0x2196704]
push 0
push dword [0x2196710]
call fcn.00445a21
mov ebx, eax
sub ebx, dword [0x219674c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.0043cfcb
call fcn.0043cf83
push dword [0x21966f8]
call fcn.00445bfd
push eax
call fcn.0043ce14
and eax, eax
je 0x40328a
push 1
call fcn.0043ce79
push dword [0x21966b4]
call fcn.0044c2c0
push eax
call fcn.0043ce90
push dword [0x2196704]
call fcn.0043cea7
mov dword [0x219674c], eax
push dword [0x2196704]
call fcn.0043cebe
mov dword [0x2196748], eax
push 0xfa
push 0xfa
push 0xfa
call fcn.0043cdd7
mov dword [0x2196694], eax
push dword [0x2196694]
push dword [0x2196704]
push 0
push dword [0x21966f8]
call fcn.00445a21
mov ebx, eax
sub ebx, dword [0x219674c]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
call fcn.0043cfcb
call fcn.0043cf83
push dword [0x2196700]
call fcn.004459e7
push eax
push 0x14
push 0xb4
push 0x1a0
push 0x5f
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196574], eax
push dword [0x2196710]
call fcn.004459e7
push eax
push 0x12
push dword [0x219674c]
push 0x23
push dword [0x21965cc]
call fcn.00445a21
push eax
call fcn.0043b763
mov ebx, eax
push dword [0x2196710]
call fcn.00445a21
push eax
call fcn.0043b763
sub ebx, eax
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196610], eax
push dword [0x2196598]
call fcn.004459e7
push eax
push 0x23
push 0x1a
push 0x194
push 0x3a
push 0xffffffff
call fcn.00434ba1
mov dword [0x21965f0], eax
push dword [0x2196608]
call fcn.004459e7
push eax
push 0x23
push 0x1a
push 0x19c
push 0x235
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196754], eax
push dword [0x2196620]
mov edx, 0x4a6b4a
pop ecx
call fcn.00411bb0
je 0x40339b
mov eax, 0x4a7bbc
push eax
push dword [0x2196754]
call fcn.00434be9
jmp 0x4033ac
mov eax, 0x4a867a
push eax
push dword [0x2196754]
call fcn.00434be9
mov ebx, dword [0x21966b0]
and ebx, ebx
jne 0x403416
push 1
mov eax, 0x4a6028
push eax
push dword [0x219658c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.004063cf
mov dword [0x219668c], eax
push 1
mov eax, 0x4a6028
push eax
push dword [0x219659c]
push 0x14
push 0x22
push 0xe
push 0x22b
call fcn.004063cf
mov dword [0x21965bc], eax
jmp 0x403484
push 1
mov eax, 0x4a6028
push eax
push dword [0x219658c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.004063cf
mov dword [0x219668c], eax
push 1
push dword [0x219668c]
call fcn.004339ec
push 1
mov eax, 0x4a6028
push eax
push dword [0x219659c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.004063cf
mov dword [0x21965bc], eax
push dword [0x2196620]
mov edx, 0x4a6b4a
pop ecx
call fcn.00411bb0
je 0x4034d9
push 0
mov eax, 0x4a9448
push eax
push dword [0x21965a0]
push 0x17
push 0xaa
push 0x14a
push 0x18c
call fcn.004063cf
mov dword [0x219675c], eax
mov eax, 0x4a9c9e
push eax
push dword [0x2196624]
call fcn.00434be9
jmp 0x403519
push 0
mov eax, 0x4aa24e
push eax
push dword [0x21965a0]
push 0x17
push 0xaa
push 0x14a
push 0x18c
call fcn.004063cf
mov dword [0x219675c], eax
mov eax, 0x4a7686
push eax
push dword [0x2196624]
call fcn.00434be9
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x1a
push 0x60
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966d0], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x23
push 0x84
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966d4], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x3e
push 0x9b
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966dc], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x5d
push 0xa2
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966e0], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x7d
push 0x9a
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966e4], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x96
push 0x81
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966e8], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0xa0
push 0x5f
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966ec], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x96
push 0x3e
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966f0], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x7d
push 0x24
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966f4], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x5d
push 0x1c
push 0xffffffff
call fcn.00434ba1
mov dword [0x21966fc], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x3e
push 0x24
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196670], eax
push dword [0x2196770]
call fcn.004459e7
push eax
push 6
push 6
push 0x24
push 0x3d
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196674], eax
mov ebp, 0x63acc0
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196678], eax
mov ebp, 0x63b29e
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x219667c], eax
mov ebp, 0x63b933
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196680], eax
mov ebp, 0x63bd2a
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196684], eax
mov ebp, 0x63e20c
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196688], eax
mov ebp, 0x6407d8
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x2196690], eax
push dword [0x2196678]
call fcn.00405d8c
push dword [0x219667c]
call fcn.00405d8c
push dword [0x2196680]
call fcn.00405d8c
push dword [0x2196684]
call fcn.00405d8c
push dword [0x2196688]
call fcn.00405d8c
push dword [0x2196690]
call fcn.00405d8c
call fcn.004325d0
mov ebp, 0x643aa0
push ebp
push 0xffffffff
call fcn.004459d0
mov dword [0x21965c4], eax
push dword [0x2196680]
call fcn.004459e7
push eax
push 0x4e
push 0x4a
push 0x3a
push 0x3e
push 0xffffffff
call fcn.00434ba1
mov dword [0x2196664], eax
mov ebx, dword [0x2196554]
and ebx, ebx
jle 0x40388a
mov dword [0x2196628], 1
push 1
call fcn.0040a88c
mov dword [0x2196628], 0
push 1
call fcn.0040a88c
jmp 0x403894
push 1
call fcn.0040a88c
push 1
push dword [0x21966d8]
call fcn.004339ec
push 1
push dword [0x219675c]
call fcn.004339ec
push 1
push dword [0x2196714]
call fcn.0043725a
push eax
call fcn.00407216
push 8
push 0x1b3
push 0x168
push 0x64
push 1
push 0
call fcn.0040849e
mov ebx, dword [0x21966b0]
and ebx, ebx
jne 0x403913
push 0
push dword [0x2196714]
call fcn.004045e8
mov dword [0x2196768], 0
jmp 0x40392d
push 1
push dword [0x2196714]
call fcn.004045e8
mov dword [0x2196768], 1
push edx
call fcn.0044cde0
pop edx
push eax
mov edx, dword [0x2196720]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a8e9c
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438b79
call fcn.00411bf0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40397a
jl 0x403976
cmp ebx, 0
ja 0x40397a
xor eax, eax
jmp 0x40397f
mov eax, 1
or eax, eax
je 0x4039c1
push edx
call fcn.0044cde0
pop edx
push eax
push 2
mov edx, dword [0x2196720]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4a8e9c
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438cd0
call fcn.00411bf0
mov ebx, dword [0x21966b0]
and ebx, ebx
jle 0x4039dd
push 1
push dword [0x2196640]
call fcn.00434d96
jmp 0x4039ed
push 0
push dword [0x2196640]
call fcn.00434d96
mov dword [0x219661c], 0
call fcn.00405e27
push dword [0x2196714]
call fcn.00437276
push 1
push dword [0x21966bc]
call fcn.004339ec
push 1
push dword [0x2196618]
call fcn.004339ec
call fcn.004091ee
call fcn.00437294
mov dword [0x21966c0], eax
cmp dword [0x21966c0], 0
je 0x403fdd
push dword [0x21966c0]
call fcn.00405b03
push 9
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x403a6e
call fcn.0043729c
mov ebx, eax
cmp ebx, dword [0x2196714]
jne 0x403a6e
call fcn.0043a9d7
mov ebx, eax
cmp ebx, dword [0x2196714]
jne 0x403a92
mov ebx, dword [0x21966c0]
cmp ebx, 0x204
jne 0x403a92
mov eax, 1
jmp 0x403a94
xor eax, eax
and eax, eax
je 0x403aae
push dword [0x2196714]
call fcn.0043725a
push eax
push 0
call fcn.00430cfd
mov ebx, dword [0x21966c0]
cmp ebx, 0x201
jne 0x403adc
push 0
push 2
push 0xa1
push dword [0x2196714]
call fcn.0043725a
push eax
call sub.USER32.dll_SendMessageW
mov ebx, dword [0x21966c0]
cmp ebx, 0x332c
jne 0x403b00
call fcn.0043a9e6
mov ebx, eax
cmp ebx, dword [0x21965bc]
jne 0x403b00
mov eax, 1
jmp 0x403b02
xor eax, eax
and eax, eax
je 0x403b35
call fcn.0043a9f5
mov ebx, eax
and ebx, ebx
jne 0x403b35
push 1
push dword [0x2196714]
call fcn.004045e8
mov dword [0x2196768], 1
mov dword [0x21966c0], 0
mov ebx, dword [0x21966c0]
cmp ebx, 0x332c
jne 0x403b59
call fcn.0043a9e6
mov ebx, eax
cmp ebx, dword [0x2196754]
jne 0x403b59
mov eax, 1
jmp 0x403b5b
xor eax, eax
and eax, eax
je 0x403b75
call fcn.0043a9f5
mov ebx, eax
and ebx, ebx
jne 0x403b75
mov eax, 0x4a7dbe
push eax
call fcn.0042dfbc
mov ebx, dword [0x21966c0]
cmp ebx, 0x332e
jne 0x403c3f
call fcn.0043a9f5
mov ebx, eax
cmp ebx, 1
jne 0x403ba9
push dword [0x2196714]
call fcn.0043725a
push eax
push 0
call fcn.00430cfd
call fcn.0043a9f5
mov ebx, eax
and ebx, ebx
jne 0x403c3f
mov ebx, dword [0x2196768]
and ebx, ebx
jne 0x403bde
push 1
push dword [0x2196714]
call fcn.004045e8
mov dword [0x2196768], 1
jmp 0x403c2a
push 9
push dword [0x2196714]
call fcn.0043725a
push eax
call sub.USER32.dll_ShowWindow
push dword [0x2196714]
call fcn.0043725a
push eax
call sub.USER32.dll_SetForegroundWindow
push 0
push dword [0x2196714]
call fcn.004045e8
push dword [0x2196714]
call fcn.00437276
mov dword [0x2196768], 0
mov dword [0x21966c0], 0
call fcn.00437294
and eax, eax
je 0x403c3f
jmp 0x403c34
mov ebx, dword [0x21966c0]
cmp ebx, 0x332d
jne 0x403ebf
push dword [0x2196c18]
call fcn.00446a3a
push dword [0x2196c18]
call fcn.00446a4f
or eax, eax
je 0x403c90
call fcn.0043aa04
mov ebx, eax
mov ebp, dword [0x2196c1c]
cmp ebx, dword [ebp + 0x40]
jne 0x403c8e
push dword [0x2196c18]
call fcn.00446a8d
push eax
call fcn.0040a27f
jmp 0x403c5c
call fcn.0043aa04
push eax
mov ebx, 0x2e
cmp ebx, dword [esp]
jne 0x403cea
push edx
call fcn.0044cde0
pop edx
push eax
push dword [0x219655c]
mov eax, 0x4a9e3a
push eax
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4aaaa4
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.0042da56
call fcn.00411bf0
jmp 0x403ebe
mov ebx, 0x2f
cmp ebx, dword [esp]
jne 0x403d3e
push edx
call fcn.0044cde0
pop edx
push eax
push dword [0x219655c]
mov eax, 0x4a60f8
push eax
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4aaaa4
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.0042da56
call fcn.00411bf0
jmp 0x403ebe
mov ebx, 0x30
cmp ebx, dword [esp]
jne 0x403d58
mov eax, 0x4a9490
push eax
call fcn.0042dfbc
jmp 0x403ebe
mov ebx, 0x31
cmp ebx, dword [esp]
jne 0x403dac
push edx
call fcn.0044cde0
pop edx
push eax
push dword [0x219655c]
mov eax, 0x4a6fe4
push eax
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4aaaa4
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.0042da56
call fcn.00411bf0
jmp 0x403ebe
mov ebx, 0x32
cmp ebx, dword [esp]
jne 0x403e00
push edx
call fcn.0044cde0
pop edx
push eax
push dword [0x219655c]
mov eax, 0x4a9f5c
push eax
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4aaaa4
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.0042da56
call fcn.00411bf0
jmp 0x403ebe
mov ebx, 0x33
cmp ebx, dword [esp]
jne 0x403e51
push edx
call fcn.0044cde0
pop edx
push eax
push dword [0x219655c]
mov eax, 0x4a75a2
push eax
mov edx, dword [0x219655c]
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cee0
mov edx, 0x4aaaa4
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.0042da56
call fcn.00411bf0
jmp 0x403ebe
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403e9e
push 9
push dword [0x2196714]
call fcn.0043725a
push eax
call sub.USER32.dll_ShowWindow
push dword [0x2196714]
call fcn.0043725a
push eax
call sub.USER32.dll_SetForegroundWindow
push 0
push dword [0x2196714]
call fcn.004045e8
mov dword [0x2196768], 0
jmp 0x403ebe
mov ebx, 2
cmp ebx, dword [esp]
jne 0x403eaa
jmp 0x403ebe
mov ebx, 3
cmp ebx, dword [esp]
jne 0x403ebe
mov dword [0x21966c0], 0x333c
pop eax
mov ebx, dword [0x21966c0]
cmp ebx, 0x3336
jne 0x403ee0
call fcn.0043aa13
mov ebx, eax
cmp ebx, 4
jne 0x403ee0
mov eax, 1
jmp 0x403ee2
xor eax, eax
and eax, eax
je 0x403eeb
call fcn.00408ac8
mov ebx, dword [0x21966c0]
cmp ebx, 0x332c
jne 0x403f0f
call fcn.0043a9e6
mov ebx, eax
cmp ebx, dword [0x219668c]
jne 0x403f0f
mov eax, 1
jmp 0x403f11
xor eax, eax
and eax, eax
je 0x403f50
call fcn.0043a9f5
mov ebx, eax
and ebx, ebx
jne 0x403f50
mov ebx, dword [0x21966b0]
and ebx, ebx
jne 0x403f36
mov dword [0x21966c0], 0x333c
jmp 0x403f50
push 1
push dword [0x2196714]
call fcn.004045e8
mov dword [0x2196768], 1
push 0
call fcn.004125e8
mov ebx, eax
and ebx, ebx
jne 0x403fc3
push dword [0x219672c]
mov edx, 0x4a8586
pop ecx
call fcn.00411bb0
je 0x403f9c
mov ebp, 0x56454d
push ebp
push 1
call fcn.004459d0
push eax
push dword [0x2196714]
call fcn.0043725a
push eax
push 0
call fcn.00412439
jmp 0x403fc3
mov ebp, 0x54a8c9
push ebp
push 1
call fcn.004459d0
push eax
push dword [0x2196714]
call fcn.0043725a
push eax
push 0
call fcn.00412439
mov ebx, dword [0x21966c0]
cmp ebx, 0x333c
je 0x403fdb
mov dword [0x21966c0], 0
jmp 0x403fe7
push 5
call fcn.00436dd2
mov ebx, dword [0x21966c0]
cmp ebx, 0x333c
jne 0x403a07
mov eax, 0x4a6028
push eax
mov eax, 0x4a6028
push eax
mov eax, 0x4a6028
push eax
call fcn.004051d9
push edx
call fcn.0044cde0
pop edx
push eax
push 2
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
call fcn.0042d7f0
call fcn.00411b92
add dword [esp], edx
call fcn.004389f0
mov edx, 0x4a78b0
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438cd0
call fcn.00411bf0
push edx
call fcn.0044cde0
pop edx
push eax
push 2
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
push edx
call fcn.0044cde0
pop edx
push eax
call fcn.0042d7f0
call fcn.00411b92
add dword [esp], edx
call fcn.004389f0
mov edx, 0x4a6f6c
push edx
call fcn.0044cee0
call fcn.00411b92
add dword [esp], edx
call fcn.00438cd0
call fcn.00411bf0
jmp 0x4040ca
push 0
call 0x4040e9
call fcn.0044cdc0
push dword [0x2196524]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00411580
call fcn.004122bc
call fcn.00412419
call fcn.004129ac
call fcn.00413600
call fcn.0042e2aa
call fcn.0042f016
call fcn.00431160
call fcn.004326e8
call fcn.004370d8
call fcn.00438d0c
call fcn.004395c0
call fcn.0043a89f
call fcn.0043b4e1
call fcn.0044566d
call fcn.0044738e
call fcn.0044a490
call fcn.0044c31d
call fcn.0044c367
call fcn.0044bc90
ret