Function at 0x4717c4
Capabilities:
Resolve function by parsing pe exports
Resume thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1a0
movdqa xmm0, xmmword [0xaaeca0]
xor eax, eax
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x168]
push esi
push edi
mov dword [esp + 0x18], eax
mov esi, edx
xor edi, edi
mov dword [esp + 0x4c], esi
push dword [esp + 0x4c]
inc edi
mov dword [esp + 0x9c], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x18], 5
mov dword [esp + 0x18], 0xffffffff
push ecx
mov dword [esp + 0x1c], 0xfffffffc
lea ecx, [esp + 0x168]
mov dword [esp + 0x1c], 0x34de6f88
mov dword [esp + 0x1c], edi
push ecx
mov dword [esp + 0x1c], 0x7974498b
lea ecx, [esp + 0xa4]
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x20], 0xc34ccbb2
push eax
movdqu xmmword [esp + 0x170], xmm0
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
call fcn.00434fa3
mov dword [esp + 0x18], 0
jmp 0x4719a4
push edi
lea ecx, [esp + 0xb4]
call fcn.00434e60
mov dword [esp + 0x14], 0
lea ecx, [esp + 0x12c]
mov dword [esp + 0x14], 0xc46ddcd1
push edi
call fcn.00434e60
mov dword [esp + 0x14], 3
xor eax, eax
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0xc], eax
jmp 0x4718d5
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xb0]
mov dword [ecx + edx*4], edi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x4718c3
mov dword [esp + 0xc], eax
jmp 0x4718f7
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x12c]
mov dword [ecx + edx*4], 0xfffffff9
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x4718e1
mov dword [esp + 0xc], eax
jmp 0x471916
mov ecx, dword [esp + 0xc]
mov dword [esp + ecx*4 + 0x18c], 0xf8cd3bed
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x471903
mov ecx, dword [esp + 0xb0]
push 2
pop edx
mov dword [ecx], eax
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], 0x352f
mov dword [esp + 0x10], eax
jmp 0x471956
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x178], 0xfffffffa
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x471943
inc dword [esp + 0x20]
mov ecx, dword [esp + 0xb0]
dec dword [ecx]
cmp dword [ecx], 0xfffffff0
jne 0x471929
mov dword [esp + 0x10], eax
jmp 0x471982
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], eax
jne 0x471988
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jne 0x471974
lea ecx, [esp + 0x12c]
call fcn.00434f32
lea ecx, [esp + 0xb0]
call fcn.00434f32
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffff3
jge 0x471879
lea ecx, [esp + 0x98]
call fcn.00434f32
mov dword [esp + 0xc], 0x1a049fe3
xor eax, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], eax
jmp 0x471a58
mov dword [esp + 0x10], 0x22124f84
mov dword [esp + 0x20], 0x2509e71b
mov dword [esp + 0x10], 2
jmp 0x471a4d
xor edx, edx
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0xc]
cmp ecx, 0xd9dc
setge dl
add edx, 0x69ac
cmp edx, dword [esp + 0xc]
jne 0x471a17
mov ecx, eax
cmp dword [esp + 0x28], eax
je 0x471a19
mov ecx, edi
mov dword [esp + 0x20], ecx
mov edx, 0xafa9b64f
mov ecx, dword [esp + 0x20]
cmp edx, ecx
sbb ecx, ecx
neg ecx
add ecx, dword [esp + 0xc]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x20]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [esp + 0x28]
add ecx, dword [esp + 0xc]
mov dword [esp + 0x14], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jge 0x4719f0
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0x15
jne 0x4719d6
mov ecx, dword [0xab6230]
test cl, 1
jne 0x471af3
push eax
or ecx, edi
mov dword [0xab6210], eax
push eax
mov dword [0xab6230], ecx
mov dword [0xab6214], eax
call fcn.00403ff4
mov ecx, eax
mov dword [0xab622c], 0x3f800000
mov dword [0xab6210], ecx
xor eax, eax
mov dword [esp + 0x84], ecx
lea ecx, [esp + 0x84]
push ecx
push 0x10
push eax
mov dword [0xab6218], eax
mov ecx, 0xab6218
mov dword [0xab6220], eax
mov dword [0xab621c], eax
lea eax, [esp + 0x128]
push eax
call fcn.00403d2a
push 0x4bb693
mov dword [0xab6224], 7
mov dword [0xab6228], 8
call fcn.0049795f
pop ecx
xor eax, eax
imul ecx, dword [esp + 0x40], 0x2710
add ecx, esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], 0x7858f9c2
mov dword [esp + 0x14], 0xb4af
mov dword [esp + 0x10], eax
jmp 0x471b2e
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x180], 0xfff9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x471b1b
push 2
mov dword [esp + 0x1c], eax
pop esi
jmp 0x471b9c
mov dword [esp + 0xc], 0x5ce96b77
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x20], eax
jne 0x471b70
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
mov ecx, eax
cmp dword [esp + 0xc], eax
je 0x471b7a
mov ecx, edi
cmp ecx, dword [esp + 0xc]
je 0x471b84
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
xor edx, edx
mov ecx, dword [esp + 0xc]
cmp ecx, 0xffffffff
setle dl
mov dword [esp + 0x14], edx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jle 0x471b3e
lea eax, [esp + 0x44]
push eax
call fcn.00472a99
push esi
mov eax, dword [eax]
test eax, eax
je 0x471cfc
mov dword [esp + 0x10], 0xf0aa6e6f
lea ecx, [esp + 0x70]
mov dword [esp + 0x24], esi
mov dword [esp + 0x1c], 0x2530a9bc
mov dword [esp + 0x7c], eax
call fcn.00434e60
mov dword [esp + 0x24], 0x667120dd
xor eax, eax
mov dword [esp + 0x2c], 0x6a4137d6
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], 0xc2fb
mov dword [esp + 0x14], 0xa2f725dc
mov dword [esp + 0x10], eax
jmp 0x471c17
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x6c]
mov dword [ecx + edx*4], 0x7f4039ee
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x471c04
mov dword [esp + 0xc], 0x91c5
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0xc]
sub ecx, 5
neg ecx
push 0
sbb ecx, ecx
inc ecx
imul ecx, ecx, 0xffff
sub ecx, dword [esp + 0x10]
mov dword [esp + 0x1c], ecx
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
cmp edx, ecx
mov ecx, dword [esp + 0x70]
pop edx
setne dl
push 6
mov dword [ecx], edx
mov ecx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x70]
pop ecx
sub ecx, dword [esi + 4]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x6c]
cmp dword [ecx], eax
je 0x471cc1
cmp dword [esp + 0x18], eax
jne 0x471cc3
mov edi, eax
xor ecx, ecx
cmp edi, 0x747c914a
sete cl
xor edx, edx
sub ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
sub ecx, 3
cmp ecx, eax
mov eax, dword [esp + 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [esi + 4], ecx
lea ecx, [esp + 0x6c]
call fcn.00434f32
jmp 0x472a18
mov dword [esp + 0x24], 0xffff
lea ecx, [esp + 0xf8]
mov dword [esp + 0x28], 0x837a
mov dword [esp + 0x1c], 0x78470ed9
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x18], 0xffffffff
call fcn.00434e60
mov dword [esp + 0x28], 0xa922
xor eax, eax
mov dword [esp + 0x10], 0xfffffffb
mov dword [esp + 0x14], 0xd8b26de0
mov dword [esp + 0xc], eax
jmp 0x471d63
mov ecx, dword [esp + 0xc]
mov dword [esp + ecx*4 + 0xe8], 0xc0233fd5
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x471d50
mov dword [esp + 0xc], eax
jmp 0x471d86
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xf4]
mov dword [ecx + edx*4], 3
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x471d70
mov dword [esp + 0x18], 0xbd13
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x20]
mov dword [esp + 0xc], ecx
jne 0x471db0
cmp dword [esp + 0xc], eax
jne 0x471db0
mov ecx, eax
cmp dword [esp + 0x18], eax
je 0x471db2
mov ecx, edi
mov dword [esp + 0xf0], ecx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0xf4]
push 0
mov dword [ecx], 6
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
cmp ecx, edx
mov ecx, dword [esp + 0x24]
pop edx
setg dl
sub ecx, edx
sub ecx, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0xfffffffb
cmp dword [esp + 0x10], 0x1d
je 0x471f0c
mov dword [esp + 0x18], 0xfffffffa
mov dword [esp + 0x14], 0xfffffffc
mov dword [esp + 0x20], 0xd29d3eaf
cmp dword [esp + 0x18], 0x919d6b80
push 0
sbb ecx, ecx
xor edx, edx
neg ecx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
imul ecx, dword [esp + 0x1c]
cmp ecx, 0x84d2
mov ecx, dword [esp + 0x1c]
setle dl
cmp edx, ecx
mov ecx, dword [esp + 0xf4]
pop edx
setge dl
imul edx, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], edx
xor edx, edx
cmp ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
setge dl
mov dword [esp + 0x14], edx
xor edx, edx
cmp dword [esp + 0x14], ecx
setne dl
xor ecx, ecx
cmp edx, 0x16691cfe
setge cl
xor edx, edx
sub ecx, 0x100f
imul ecx, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x14], ecx
setg dl
add edx, 0x7dfb07d6
mov dword [esp + 0x20], edx
mov ecx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], 0xef7b6068
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], ecx
jne 0x471efa
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x14], eax
jne 0x471efa
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffffa
je 0x471ede
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x1d
jne 0x471e1f
push 2
pop esi
lea ecx, [esp + 0xf4]
call fcn.00434f32
mov eax, dword [0xab6230]
test al, 2
jne 0x471f9e
or eax, esi
mov dword [0xab6230], eax
xor eax, eax
push eax
push eax
mov dword [0xab61f0], eax
mov dword [0xab61f4], eax
call fcn.00403ff4
mov ecx, eax
mov dword [0xab620c], 0x3f800000
mov dword [0xab61f0], ecx
xor eax, eax
mov dword [esp + 0x88], ecx
lea ecx, [esp + 0x88]
push ecx
push 0x10
push eax
mov dword [0xab61f8], eax
mov ecx, 0xab61f8
mov dword [0xab6200], eax
mov dword [0xab61fc], eax
lea eax, [esp + 0x54]
push eax
call fcn.00403d2a
push 0x4bb68e
mov dword [0xab6204], 7
mov dword [0xab6208], 8
call fcn.0049795f
pop ecx
mov dword [esp + 0xc], 3
mov dword [esp + 0x14], 0xfffffffb
mov dword [esp + 0xc], 0xfffffff7
jmp 0x47202d
mov dword [esp + 0x10], 4
mov dword [esp + 0x10], 0xffffffe5
jmp 0x472013
mov dword [esp + 0x18], 4
mov dword [esp + 0x18], 0x12
jmp 0x472008
mov byte [esp + 0x1f], 0
cmp byte [esp + 0x1f], 0
je 0x472004
push 0x371
push 0xb96
push 0x1748
push 0x485
push 0
call dword [sym.imp.USER32.dll_SetRect]
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffe7
jne 0x471fdc
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x18
je 0x471fca
mov eax, dword [esp + 0x10]
xor ecx, ecx
test eax, eax
setg cl
mov dword [esp + 0x14], ecx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0x1d
jle 0x471fb8
lea eax, [esp + 0x40]
xorps xmm0, xmm0
push eax
movdqu xmmword [esp + 0x60], xmm0
call fcn.00472afb
mov esi, dword [eax]
mov dword [esp + 0x24], esi
mov dword [esp + 0x10], 0
jmp 0x47206a
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x170], 0x56834504
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x472057
mov byte [esp + 0x1f], 0
cmp byte [esp + 0x1f], 0
je 0x47208a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov byte [esp + 0x1f], 0
cmp byte [esp + 0x1f], 0
je 0x4720c3
push 0x1844
push 0x1361
push 0x1dd3
push 0x152f
push 0x1259
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
mov al, byte [ebp + 0xc]
test al, al
jne 0x4720d2
test esi, esi
jne 0x47251d
mov dword [esp + 0x18], edi
mov dword [esp + 0x18], 0
jmp 0x472110
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x10], 0
jmp 0x472105
mov dword [esp + 0x14], 0xe7e55059
cmp dword [esp + 0x14], 0
jne 0x47210c
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 9
jge 0x4720f2
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffe3
jg 0x4720e0
lea ecx, [esp + 0x198]
mov dl, al
push ecx
mov ecx, dword [esp + 0x44]
call fcn.004351d3
mov esi, eax
lea edi, [esp + 0x60]
xor eax, eax
pop ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [esp + 0xc], eax
inc edi
jmp 0x47214c
mov ecx, dword [esp + 0xc]
mov dword [esp + ecx*4 + 0x30], edi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x472140
mov dword [esp + 0xc], eax
jmp 0x47216b
mov ecx, dword [esp + 0xc]
mov dword [esp + ecx*4 + 0xd4], 0x5047c4d1
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x472158
mov dword [esp + 0x30], 0xffffffeb
jmp 0x47219f
mov byte [esp + 0x1f], al
cmp byte [esp + 0x1f], 0
je 0x47219b
push 0x14f9
push eax
push 0x11c8
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
xor eax, eax
inc dword [esp + 0x30]
cmp dword [esp + 0x30], 9
jge 0x47217c
cmp dword [esp + 0x30], eax
jne 0x4721bf
mov dword [esp + 0xd4], 0x7b5b
mov ecx, dword [esp + 0x30]
mov ecx, dword [esp + 0x30]
cmp byte [ebp + 0xc], 0
mov ecx, dword [esp + 0x30]
mov ecx, dword [esp + 0x30]
mov ecx, dword [esp + 0xd4]
mov dword [esp + 0x30], ecx
je 0x472519
cmp dword [esp + 0x64], 0
je 0x472519
push 3
pop esi
mov dword [esp + 0xc], esi
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 0xb
je 0x472267
mov dword [esp + 0x14], 0x68
mov dword [esp + 0x2c], 0x3b01d91e
mov dword [esp + 0x20], 0x4df6f978
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0xc], ecx
jl 0x472227
mov esi, edi
cmp dword [esp + 0xc], eax
jne 0x472229
mov esi, eax
mov ecx, dword [esp + 0x2c]
xor edx, edx
cmp esi, ecx
mov ecx, dword [esp + 0xc]
push 0xfffffffffffffff8
setl dl
pop esi
sub esi, edx
xor edx, edx
cmp esi, ecx
setge dl
xor ecx, ecx
cmp edx, 0xacd79536
setne cl
mov dword [esp + 0x20], ecx
cmp dword [esp + 0xc], eax
jne 0x472264
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0xb
jne 0x4721f9
push 3
pop esi
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xc], 0xade1
mov dword [esp + 0x2c], 0xf8a6ebbf
mov dword [esp + 0x14], eax
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
imul edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
push 0
cmp ecx, edx
mov ecx, dword [esp + 0x10]
pop edx
setge dl
cmp edx, ecx
mov ecx, dword [esp + 0xc]
push 0
pop edx
setle dl
cmp ecx, edx
push 0
pop ecx
setle cl
xor edx, edx
cmp ecx, 0x310c13fe
mov ecx, dword [esp + 0xc]
setne dl
mov dword [esp + 0x14], edx
xor edx, edx
cmp dword [esp + 0x14], ecx
setl dl
cmp dword [esp + 0xc], edx
jg 0x4722ff
mov byte [esp + 0x1f], al
cmp byte [esp + 0x1f], 0
je 0x4724bb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
jmp 0x4724b9
push dword [esp + 0x48]
movdqa xmm0, xmmword [0xaaec70]
lea ecx, [esp + 0x164]
push ecx
lea ecx, [esp + 0x158]
mov dword [esp + 0xac], eax
push ecx
push eax
lea ecx, [esp + 0xb4]
mov dword [esp + 0xb8], eax
movdqu xmmword [esp + 0x160], xmm0
mov dword [esp + 0xbc], eax
call fcn.00434fa3
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
jmp 0x472365
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0x138], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x472352
mov dword [esp + 0xc], eax
jmp 0x4724a2
mov dword [esp + 0x10], 0xca27289f
mov dword [esp + 0x14], 0xa276ac11
mov dword [esp + 0x10], esi
cmp dword [esp + 0x10], eax
jl 0x47249e
push dword [esp + 0x48]
movdqa xmm0, xmmword [0xaaec90]
lea ecx, [esp + 0x154]
push ecx
lea ecx, [esp + 0x148]
mov dword [esp + 0x58], eax
push ecx
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x64], eax
movdqu xmmword [esp + 0x150], xmm0
mov dword [esp + 0x68], eax
call fcn.00434fa3
mov dword [esp + 0x14], 0xb4415e40
mov dword [esp + 0x14], 0xb364fef5
mov dword [esp + 0x18], 0
jmp 0x4723fb
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x120], 0xfffffffb
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jl 0x4723e8
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x50]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x10]
xor eax, eax
cmp dword [ecx + 0xc], 0xe6a0
setg al
xor edx, edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
cmp eax, 0xfffffffc
mov eax, dword [esp + 0x2c]
setg dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x50]
mov eax, 0xbaaa
mov dword [esp + 0x138], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
cmp eax, dword [ecx + 8]
jge 0x472460
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], edi
xor ecx, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x124]
cmp eax, 0xfff9
setne cl
mov dword [esp + 0x124], ecx
lea ecx, [esp + 0x50]
call fcn.00434f32
dec dword [esp + 0x10]
push 0
pop eax
jns 0x472393
dec dword [esp + 0xc]
cmp dword [esp + 0xc], 0xfffffff8
jge 0x472375
lea ecx, [esp + 0xa4]
call fcn.00434f32
xor eax, eax
mov byte [esp + 0x1f], al
cmp byte [esp + 0x1f], 0
je 0x47250e
push eax
push 0xb83
push 0x19a8
push 0x620
push 0x1688
push 0x23f4
push 0xa62
push 0xe02
push 0x246b
push 0x1fee
push 0x2474
push 0xa72
push 0x1333
push 0x20d0
call dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x80], eax
mov esi, dword [esp + 0x24]
mov dword [esp + 0x10], 0xfffffffa
lea ecx, [esp + 0x110]
push 4
call fcn.00434e60
xor eax, eax
mov dword [esp + 0x14], 0xc9ca3191
mov dword [esp + 0x10], eax
jmp 0x472555
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x110]
mov dword [ecx + edx*4], eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x472543
dec dword [esp + 0x14]
mov dword [esp + 0x10], eax
jmp 0x47257e
mov byte [esp + 0x1f], al
cmp byte [esp + 0x1f], 0
je 0x47257a
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
je 0x472566
lea ecx, [esp + 0x110]
call fcn.00434f32
test esi, esi
jne 0x472628
cmp dword [esp + 0x5c], esi
jle 0x472628
push 3
lea ecx, [esp + 0xe0]
call fcn.00434e60
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x4725ce
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xdc]
mov dword [ecx + edx*4], 0x9dada439
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x4725b8
mov ecx, dword [esp + 0xdc]
mov dword [ecx + 8], edi
mov byte [esp + 0x1f], al
cmp byte [esp + 0x1f], al
je 0x4725f6
push eax
push 0x2453
push eax
call dword [sym.imp.ADVAPI32.dll_ControlService]
lea ecx, [esp + 0xdc]
call fcn.00434f32
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x472628
cmp dword [esp + 0x5c], 0
je 0x472628
call fcn.00471018
mov esi, eax
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x28], esi
call fcn.00472afb
mov dword [eax], esi
mov dword [esp + 0x28], 0x2a8d
lea ecx, [esp + 0xc8]
push 4
call fcn.00434e60
push 3
lea ecx, [esp + 0xc0]
call fcn.00434e60
mov dword [esp + 0x14], 0xa4c5706b
xor eax, eax
mov dword [esp + 0x18], 0x271d
mov dword [esp + 0x20], 0xd3ed
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], eax
jmp 0x472686
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xc8]
mov dword [ecx + edx*4], eax
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x472674
mov dword [esp + 0xc], eax
jmp 0x4726a9
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0xbc]
mov dword [ecx + edx*4], 0x1a05132d
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x472693
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x2c], ecx
cmp dword [ecx + 4], eax
je 0x4726d6
dec dword [esp + 0x18]
dec dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x28]
je 0x4726d6
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0xbc]
neg ecx
mov dword [esp + 0x10], esi
sbb ecx, ecx
neg ecx
cmp ecx, dword [esi + 8]
jge 0x4726fc
mov edx, eax
cmp dword [esp + 0x20], eax
je 0x4726fe
mov edx, edi
mov ecx, dword [esp + 0x28]
imul ecx, edx
xor edx, edx
cmp ecx, dword [esi + 8]
setge dl
xor ecx, ecx
cmp edx, 0xffffffff
setg cl
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x20]
jne 0x47272b
mov ecx, eax
cmp dword [esp + 0x18], eax
je 0x47272d
mov ecx, edi
mov esi, dword [esp + 0x2c]
add ecx, 0x7ee0041a
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [esi + 4]
mov ecx, dword [esp + 0xbc]
setge dl
mov dword [esp + 0x14], edx
xor edx, edx
mov esi, dword [esp + 0x14]
cmp esi, dword [ecx + 4]
mov esi, dword [esp + 0x2c]
setle dl
imul ecx, edx, 0xb064
xor edx, edx
cmp ecx, dword [esi + 4]
mov ecx, dword [esp + 0x10]
setg dl
mov dword [ecx + 8], edx
mov dword [esp + 0x18], eax
jmp 0x47278e
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0xc8]
cmp dword [ecx + edx*4], eax
jne 0x472795
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 3
jle 0x47277a
lea ecx, [esp + 0xbc]
call fcn.00434f32
lea ecx, [esp + 0xc8]
call fcn.00434f32
lea ecx, [esp + 0x5c]
call fcn.004363c2
mov dword [esp + 0x10], 0x3b4e1a36
mov dword [esp + 0x14], 0x7e17f759
mov dword [esp + 0x14], 0xb0cb8ce3
mov dword [esp + 0x10], 0x18
jmp 0x47281a
mov byte [esp + 0x1f], 0
cmp byte [esp + 0x1f], 0
je 0x472816
push 0x2129
push 0xfda
push 0x809
push 0x5e2
push 0x26ae
push 0xa4a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 9
jg 0x4727d8
dec dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x472848
mov edx, dword [esp + 0x4c]
call fcn.004715b5
mov esi, eax
lea eax, [esp + 0x44]
push eax
mov dword [esp + 0x7c], esi
call fcn.00472a99
mov dword [eax], esi
mov dword [esp + 0x18], 0x30f94f37
push 2
pop esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x14], 0x49f0dc4b
mov dword [esp + 0x20], 0xd0f12afb
mov dword [esp + 0x2c], 5
push 0xfffffffffffffffa
pop eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], eax
mov dword [esp + 0x24], 0
jmp 0x4728a8
mov eax, dword [esp + 0x24]
mov dword [esp + eax*4 + 0x34], 0xec2e0cf5
inc dword [esp + 0x24]
cmp dword [esp + 0x24], 3
jl 0x472898
mov dword [esp + 0x18], esi
cmp dword [esp + 0x18], 0
jl 0x472975
push 3
lea ecx, [esp + 0x90]
call fcn.00434e60
xor eax, eax
mov dword [esp + 0x10], 5
mov dword [esp + 0x24], eax
jmp 0x4728f2
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x8c]
mov dword [ecx + edx*4], 0xfffffffa
inc dword [esp + 0x24]
cmp dword [esp + 0x24], 3
jl 0x4728dc
mov ecx, dword [esp + 0x8c]
mov dword [ecx], esi
mov dword [esp + 0x14], 0xffffffff
dec dword [esp + 0x14]
mov ecx, dword [esp + 0x8c]
dec dword [ecx]
jns 0x472902
mov dword [esp + 0x10], eax
jmp 0x472959
mov dword [esp + 0x20], 0xea5223fa
mov dword [esp + 0x20], esi
cmp dword [esp + 0x20], eax
jl 0x472955
mov dword [esp + 0x24], edi
mov dword [esp + 0x24], eax
jmp 0x472949
mov ecx, dword [esp + 0x10]
cmp dword [esp + ecx*4 + 0x34], eax
jne 0x47294f
inc dword [esp + 0x24]
cmp dword [esp + 0x24], esi
jle 0x47293b
dec dword [esp + 0x20]
jns 0x472931
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jle 0x47291f
lea ecx, [esp + 0x8c]
call fcn.00434f32
dec dword [esp + 0x18]
jns 0x4728be
mov eax, dword [esp + 0x3c]
xor edx, edx
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x34]
cmp ecx, eax
mov eax, dword [esp + 0x38]
setne dl
sub edx, eax
mov eax, dword [esp + 0x3c]
imul eax, edx
sub eax, 0x22cb
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
je 0x4729c1
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
xor edx, edx
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
setge dl
mov dword [esp + 0x18], edx
xor edx, edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
mov dword [esp + 0x2c], 5
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x3c]
cmp ecx, eax
mov eax, dword [esp + 0x2c]
setg dl
add eax, edx
mov dword [esp + 0x108], eax
mov eax, dword [ebp + 8]
lea esi, [esp + 0x78]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov esp, ebp
pop ebp
ret