Function at 0x40ec93
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
cmp dword [ebp + 0x18], 6
jne 0x410c81
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x40ece3
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x40ed73
push 0x486b77
push dword [0x4ddbd3]
call fcn.0040191b
add esp, 8
cmp eax, 0
jne 0x40ed64
mov eax, 0x4cef3b
push eax
mov ebx, dword [0x4ddbd3]
test ebx, ebx
je 0x40ed36
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [0x4ddbd3], eax
push OleUIBusyA
push 0
mov eax, dword [0x4ddbd3]
test eax, eax
jne 0x40ed51
mov eax, 0x486b77
push eax
push 1
mov ebx, 0x234
call fcn.00464a90
add esp, 0x10
push 1
call fcn.0040764f
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 6
cmp eax, ecx
jl 0x40ed94
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x40edc1
push 0
call fcn.0040764f
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 5
cmp eax, ecx
jl 0x40ede2
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x40fb18
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ee32
push ebx
call fcn.00462d66
add esp, 4
push 0x486b77
push dword [ebp - 0x14]
call fcn.0040191b
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ee60
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x40f038
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 8
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, 0x486b9e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
push 0x20
push 1
mov eax, 0x4cc933
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push 1
push 0
mov eax, 0x4cef48
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40efc2
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40efd2
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40eff0
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40efec
imul eax, dword [ebx]
jmp 0x40efe1
mov ecx, eax
test ecx, ecx
je 0x40f00f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40f008
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40eff6
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f027
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
jmp 0x411b11
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 8
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, 0x486b9e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
push 1
push 0x20
push 1
mov eax, 0x4cef6a
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push 1
push 0
mov eax, 0x4cef75
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40f190
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40f1a0
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40f1be
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40f1ba
imul eax, dword [ebx]
jmp 0x40f1af
mov ecx, eax
test ecx, ecx
je 0x40f1dd
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40f1d6
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40f1c4
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40f1f5
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
push 0x4cc9dd
push dword [0x4ddbd3]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
push OleUIBusyA
push 0
push 0x4cc9e6
push OleUIBusyA
push 0
push 0x4cefaa
push OleUIBusyA
push 0
push 0x4cefb2
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40f253
mov eax, 0x486b77
push eax
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f276
push ebx
call fcn.00462d66
add esp, 4
push 0x4cc9dd
push dword [0x4ddbd3]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
push OleUIBusyA
push 0
push 0x4cc9e6
push OleUIBusyA
push 0
push 0x4cefb2
push OleUIBusyA
push 0
push 0x4cefb2
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40f2c8
mov eax, 0x486b77
push eax
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f2eb
push ebx
call fcn.00462d66
add esp, 4
push 0x4cc9dd
push dword [0x4ddbd3]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40f338
push ebx
call fcn.00462d66
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40f34b
mov eax, 0x486b77
push eax
push OleUIBusyA
push 0
push 0x4cefb6
push OleUIBusyA
push 0
push 0x4cefb2
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40f377
mov eax, 0x486b77
push eax
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f39a
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40f3aa
push ebx
call fcn.00462d66
add esp, 4
push 0x4cc9dd
push dword [0x4ddbd3]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
push OleUIBusyA
push 0
push 0x486b77
push OleUIBusyA
push 0
push 0x4cefbd
push OleUIBusyA
push 0
push 0x4cefb2
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x40f3fc
mov eax, 0x486b77
push eax
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f41f
push ebx
call fcn.00462d66
add esp, 4
push OleUIBusyA
push 0
push 0x4cefc2
push OleUIBusyA
push 0
push 0x4cc9e8
push OleUIBusyA
push 0
push 0x4cc9ef
push OleUIBusyA
push 0
push 0x4cc9f3
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f493
push ebx
call fcn.00462d66
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x40f4a6
mov eax, 0x486b77
push eax
push 1
mov ebx, 0x24c
call fcn.00463e50
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40f4cc
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x18], 1
jne 0x40f4e0
mov dword [0x4ddc1b], 0xffffffff
cmp dword [0x4ddc1b], 0
jle 0x40f8a9
mov ebx, dword [0x4ddc03]
call fcn.00401672
cmp dword [0x4ddc1b], eax
jg 0x40f8a4
mov ebx, dword [0x4ddc03]
call fcn.00401652
push ebx
push ecx
mov eax, dword [0x4ddc1b]
dec eax
jns 0x40f526
push 4
call fcn.00462d6c
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f539
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x10], ebx
push 0x4cefc4
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0x4cefe1
mov ecx, 3
call fcn.00402f22
add esp, 0xc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
push 1
push 2
push 1
mov eax, 0x4cf001
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
push 1
push 0x20
push 1
mov eax, 0x4cc933
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
lea eax, [ebp - 0x14]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40f6a0
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40f6b0
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x48]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40f6ce
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40f6ca
imul eax, dword [ebx]
jmp 0x40f6bf
mov ecx, eax
test ecx, ecx
je 0x40f6ed
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40f6e6
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40f6d4
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40f705
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x60], 0
jne 0x40f89f
mov ebx, dword [0x4ddc03]
call fcn.00401652
push ebx
push ecx
mov eax, dword [0x4ddc1b]
dec eax
jns 0x40f73d
push 4
call fcn.00462d6c
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f750
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x10], ebx
mov ebx, dword [0x4ddc03]
call fcn.00401652
push ebx
push ecx
mov eax, dword [0x4ddc1b]
dec eax
jns 0x40f77f
push 4
call fcn.00462d6c
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f792
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x14], ebx
push 1
push 1
push 1
push 1
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x4ddbd3
push 1
push dword [ebp - 0x14]
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
push dword [ebp - 0x10]
push 0x4ddc23
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40f803
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40f813
push ebx
call fcn.00462d66
add esp, 4
push 0x4ddc0f
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
push 0x4ddc23
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x10]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], esp
push dword [ebp - 0x10]
call dword [0x4ddc77]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 0x14], esp
je 0x40f859
push 6
call fcn.00462d6c
add esp, 4
mov dword [0x4ddc0b], eax
mov dword [ebp - 0x10], esp
push dword [0x4ddc0b]
call dword [0x4ddc7b]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 0x10], esp
je 0x40f886
push 6
call fcn.00462d6c
add esp, 4
mov dword [0x4ddc17], 1
mov dword [0x4ddc27], 1
jmp 0x40f8a4
jmp 0x411b11
jmp 0x40fb09
cmp dword [0x4ddc1b], 0xffffffff
jne 0x40fb09
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40f8e8
push ebx
call fcn.00462d66
add esp, 4
push 0x4cefc4
push dword [ebp - 0x14]
push 0x4cf011
mov ecx, 3
call fcn.00402f22
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40f915
push ebx
call fcn.00462d66
add esp, 4
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
push 2
push 1
mov eax, 0x4cf027
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
push 1
push 0x20
push 1
mov eax, 0x4cc933
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
push 1
push 1
lea eax, [ebp - 0x18]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40fa50
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40fa60
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x4c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40fa7e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40fa7a
imul eax, dword [ebx]
jmp 0x40fa6f
mov ecx, eax
test ecx, ecx
je 0x40fa9d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40fa96
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40fa84
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40fab5
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x64], 0
jne 0x40fb04
mov dword [ebp - 0x10], esp
push 0
push 0
push 0x505
push dword [0x4ddbd7]
call dword [sym.imp.USER32.dll_PostMessageW]
nop
nop
nop
nop
cmp dword [ebp - 0x10], esp
je 0x40faff
push 6
call fcn.00462d6c
add esp, 4
jmp 0x40fb09
jmp 0x411b11
push 2
call fcn.0040764f
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 7
cmp eax, ecx
jl 0x40fb39
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x40fdd4
cmp dword [0x4ddc27], 1
jne 0x40fc9c
mov dword [ebp - 0x10], esp
push dword [0x4ddc0b]
call dword [0x4ddc6f]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 0x10], esp
je 0x40fb8c
push 6
call fcn.00462d6c
add esp, 4
mov dword [0x4ddc27], 2
mov dword [0x4ddc17], 0
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 7
cmp eax, ecx
jl 0x40fbc1
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 1
push 1
push 1
mov eax, 0x4cf037
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, 0x4cf037
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, 0x4cf037
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push 1
mov eax, 0x4cf7a4
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40fc5b
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40fc6b
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40fc7b
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40fc8b
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
call fcn.00462d66
add esp, 4
jmp 0x40fdcf
mov dword [ebp - 0x10], esp
push dword [0x4ddc0b]
call dword [0x4ddc7b]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 0x10], esp
je 0x40fcc4
push 6
call fcn.00462d6c
add esp, 4
mov dword [0x4ddc27], 1
mov dword [0x4ddc17], 1
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 7
cmp eax, ecx
jl 0x40fcf9
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 1
push 1
push 1
mov eax, 0x4c9dcb
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
mov eax, 0x4c9dcb
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, 0x4c9dcb
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push 1
mov eax, 0x4ca4f6
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x100]
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40fd93
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40fda3
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40fdb3
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40fdc3
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
call fcn.00462d66
add esp, 4
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 8
cmp eax, ecx
jl 0x40fdf5
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x40fe7c
mov dword [ebp - 0x10], esp
push dword [0x4ddc0b]
call dword [0x4ddc6f]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 0x10], esp
je 0x40fe3b
push 6
call fcn.00462d6c
add esp, 4
mov dword [0x4ddc1f], 1
mov dword [ebp - 0x10], esp
push dword [0x4ddc0b]
call dword [0x4ddc73]
nop
nop
nop
nop
add esp, 4
cmp dword [ebp - 0x10], esp
je 0x40fe6d
push 6
call fcn.00462d6c
add esp, 4
push 1
call fcn.0040764f
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 3
cmp eax, ecx
jl 0x40fe9d
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x410297
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 2
push 1
mov eax, 0x4cff21
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x20
push 1
mov eax, 0x4cff31
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 1
push 1
mov eax, 0x4cff42
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40fffe
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41000e
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41002c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x410028
imul eax, dword [ebx]
jmp 0x41001d
mov ecx, eax
test ecx, ecx
je 0x41004b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x410044
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410032
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410063
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x5c], 0
jne 0x410292
push OleUIBusyA
push 0
push 0x4cff62
push OleUIBusyA
push 0
push 0x4cc9e8
push OleUIBusyA
push 0
push 0x4cc9ef
push OleUIBusyA
push 0
push 0x4cc9f3
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
call fcn.00409bc8
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 8
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, 0x486b9e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov eax, 0x4cff64
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x410221
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x410231
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41024f
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41024b
imul eax, dword [ebx]
jmp 0x410240
mov ecx, eax
test ecx, ecx
je 0x41026e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x410267
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410255
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410286
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 4
cmp eax, ecx
jl 0x4102b8
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x4106b2
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 2
push 1
mov eax, 0x4cff85
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x20
push 1
mov eax, 0x4cff95
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 1
push 1
mov eax, 0x4cffa6
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x410419
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x410429
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x410447
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x410443
imul eax, dword [ebx]
jmp 0x410438
mov ecx, eax
test ecx, ecx
je 0x410466
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41045f
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41044d
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41047e
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x5c], 0
jne 0x4106ad
push OleUIBusyA
push 0
push 0x4cffd0
push OleUIBusyA
push 0
push 0x4cc9e8
push OleUIBusyA
push 0
push 0x4cc9ef
push OleUIBusyA
push 0
push 0x4cc9f3
push 4
mov ebx, 0x8cc
call fcn.00464790
add esp, 0x34
call fcn.00409bc8
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 8
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, 0x486b9e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov eax, 0x4cffd2
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x41063c
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41064c
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41066a
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x410666
imul eax, dword [ebx]
jmp 0x41065b
mov ecx, eax
test ecx, ecx
je 0x410689
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x410682
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410670
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4106a1
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 1
cmp eax, ecx
jl 0x4106d3
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x410a1c
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 2
push 1
mov eax, 0x4cfff3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x20
push 1
mov eax, 0x4d0003
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 1
push 1
mov eax, 0x4d000c
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x410834
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x410844
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x410862
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41085e
imul eax, dword [ebx]
jmp 0x410853
mov ecx, eax
test ecx, ecx
je 0x410881
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41087a
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410868
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410899
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x5c], 0
jne 0x410a17
push 0x486b77
push dword [0x4ddbd3]
call fcn.0040191b
add esp, 8
cmp eax, 0
jne 0x410912
mov eax, 0x4cef3b
push eax
mov ebx, dword [0x4ddbd3]
test ebx, ebx
je 0x4108e4
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [0x4ddbd3], eax
push OleUIBusyA
push 0
mov eax, dword [0x4ddbd3]
test eax, eax
jne 0x4108ff
mov eax, 0x486b77
push eax
push 1
mov ebx, 0x234
call fcn.00464a90
add esp, 0x10
push 0x4d0049
push dword [0x4ddbd3]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410940
mov eax, 0x486b77
push eax
push 1
mov ebx, 0x234
call fcn.00464a90
add esp, 0x10
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410963
push ebx
call fcn.00462d66
add esp, 4
push 0x4d0052
push dword [0x4ddbd3]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x410991
mov eax, 0x486b77
push eax
push 1
mov ebx, 0x234
call fcn.00464a90
add esp, 0x10
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4109b4
push ebx
call fcn.00462d66
add esp, 4
push OleUIBusyA
push 0
push 0x413893
push 1
mov ebx, 0x9dc
call fcn.00463b10
add esp, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], esp
mov eax, 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 0
push 1
push dword [ebp - 0x10]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x14], esp
je 0x410a17
push 6
call fcn.00462d6c
add esp, 4
jmp 0x410c7c
mov ebx, dword [0x4ddbdf]
call fcn.00401652
mov eax, 2
cmp eax, ecx
jl 0x410a3d
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x410c7c
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push 1
push 2
push 1
mov eax, 0x4d005d
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x20
push 1
mov eax, 0x4d006d
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 1
push 1
mov eax, 0x4d0076
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x410b9e
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x410bae
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x40]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x410bcc
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x410bc8
imul eax, dword [ebx]
jmp 0x410bbd
mov ecx, eax
test ecx, ecx
je 0x410beb
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x410be4
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x410bd2
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x410c03
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
cmp dword [ebp - 0x5c], 0
jne 0x410c7c
push OleUIBusyA
push 0
push 0x413893
push 1
mov ebx, 0x9dc
call fcn.00463b10
add esp, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], esp
mov eax, 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 0
push 2
push dword [ebp - 0x10]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x14], esp
je 0x410c7c
push 6
call fcn.00462d6c
add esp, 4
jmp 0x411b11
cmp dword [ebp + 0x18], 2
jne 0x411365
mov ebx, dword [0x4ddbf7]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x410cac
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x411360
push 1
mov eax, 0x4d00b3
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push 0
call fcn.00411b57
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410cf5
push ebx
call fcn.00462d66
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x410d09
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x486b77
push dword [ebp - 4]
call fcn.0040191b
add esp, 8
cmp eax, 0
je 0x41119c
push 1
mov eax, 0x486b77
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov ebx, eax
test ebx, ebx
je 0x410d55
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410d65
push ebx
call fcn.00462d66
add esp, 4
push 0x4cc706
push dword [ebp - 4]
mov ecx, 2
call fcn.00402f22
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
push dword [ebp - 0x10]
mov eax, 0
call fcn.00463f50
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x410dab
push ebx
call fcn.00462d66
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x410dbf
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x486b77
push dword [ebp - 8]
call fcn.0040191b
add esp, 8
cmp eax, 0
je 0x41119c
push 0x486b77
push dword [ebp - 8]
call fcn.0040191b
add esp, 8
cmp eax, 0
je 0x410ef5
push dword [ebp - 8]
push 0x4cc70d
push dword [ebp - 4]
mov ecx, 3
call fcn.00402f22
add esp, 0xc
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x410e24
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.0040ec8b
push OleUIBusyA
push 0
push 0x4cc70d
push OleUIBusyA
push 0
push 0x4d00c4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x410e69
mov eax, 0x486b77
push eax
push 6
mov ebx, 0x180
call fcn.00464ac0
add esp, 0x4c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x410e93
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
lea eax, [ebp - 0xc]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
lea eax, [ebp - 0x6c]
push eax
push 1
push 0
push 0
mov eax, 0
call fcn.00463f50
add esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x410eec
push ebx
call fcn.00462d66
add esp, 4
pop eax
mov dword [ebp - 8], eax
jmp 0x410ddc
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x410f16
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4be739
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x410f7b
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x410f8b
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 1
cmp eax, ecx
jl 0x410fac
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4bfee1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x411011
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x411021
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 2
cmp eax, ecx
jl 0x411042
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c1664
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x4110a7
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4110b7
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 3
cmp eax, ecx
jl 0x4110d8
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c2ec6
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x41113d
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41114d
push ebx
call fcn.00462d66
add esp, 4
mov dword [0x4ddc1b], 0xffffffff
mov ebx, dword [0x4ddbe3]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x411178
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 1
push 0x24
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
jmp 0x411b11
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 0x10
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 8
call fcn.00462d60
add esp, 4
mov dword [ebp - 0x44], eax
mov edi, eax
mov esi, 0x486b9e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 1
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
push 1
push 0x10
push 1
mov eax, 0x4d00c7
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 1
push 0
mov eax, 0x4d00d2
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
push dword [0x4ddbd7]
call fcn.00409c60
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x4112ef
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4112ff
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41131d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x411319
imul eax, dword [ebx]
jmp 0x41130e
mov ecx, eax
test ecx, ecx
je 0x41133c
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x411335
push ebx
push eax
call fcn.00462d66
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x411323
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x411354
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00462d66
add esp, 4
jmp 0x411b11
cmp dword [ebp + 0x18], 5
jne 0x411416
mov ebx, dword [0x4ddbfb]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x411390
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x411411
push OleUIBusyA
push 0
push 0x4138b2
push 1
mov ebx, 0x9dc
call fcn.00463b10
add esp, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], esp
mov eax, 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push dword [ebp - 0x10]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x14], esp
je 0x411411
push 6
call fcn.00462d6c
add esp, 4
jmp 0x411b11
cmp dword [ebp + 0x18], 4
jne 0x411b11
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x411441
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4be739
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x4114a6
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4114b6
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 1
cmp eax, ecx
jl 0x4114d7
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4bfee1
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x41153c
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41154c
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 2
cmp eax, ecx
jl 0x41156d
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c1664
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x4115d2
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4115e2
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 3
cmp eax, ecx
jl 0x411603
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4c2ec6
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x411668
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x411678
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x411699
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x41175c
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x4116d8
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4d00f0
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x41173d
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41174d
push ebx
call fcn.00462d66
add esp, 4
mov dword [0x4ddc1b], 1
jmp 0x411a03
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 1
cmp eax, ecx
jl 0x41177d
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x411840
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 1
cmp eax, ecx
jl 0x4117bc
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4d229a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x411821
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x411831
push ebx
call fcn.00462d66
add esp, 4
mov dword [0x4ddc1b], 2
jmp 0x411a03
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 2
cmp eax, ecx
jl 0x411861
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x411924
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 2
cmp eax, ecx
jl 0x4118a0
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4d442f
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x411905
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x411915
push ebx
call fcn.00462d66
add esp, 4
mov dword [0x4ddc1b], 3
jmp 0x411a03
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 3
cmp eax, ecx
jl 0x411945
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
cmp dword [ebp + 0xc], eax
jne 0x411a03
mov ebx, dword [0x4ddbeb]
call fcn.00401652
mov eax, 3
cmp eax, ecx
jl 0x411984
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
push 1
mov eax, 0x4d6583
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, eax
test ebx, ebx
je 0x4119e9
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4119f9
push ebx
call fcn.00462d66
add esp, 4
mov dword [0x4ddc1b], 4
cmp dword [0x4ddc1b], 0
jle 0x411a2e
mov ebx, dword [0x4ddc03]
call fcn.00401672
cmp dword [0x4ddc1b], eax
jg 0x411a2e
mov eax, 1
jmp 0x411a30
xor eax, eax
test eax, eax
je 0x411b11
mov ebx, dword [0x4ddc03]
call fcn.00401652
push ebx
push ecx
mov eax, dword [0x4ddc1b]
dec eax
jns 0x411a5a
push 4
call fcn.00462d6c
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411a6d
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 0x4cc70d
push dword [0x4ddbd3]
mov ecx, 3
call fcn.00402f22
add esp, 0xc
mov dword [ebp - 0x14], eax
push 1
lea eax, [ebp - 0x14]
push eax
push 0x4ddbf3
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov ebx, eax
test ebx, ebx
je 0x411ac1
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x411ad1
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [0x4ddbe3]
call fcn.00401652
mov eax, 0
cmp eax, ecx
jl 0x411af2
push 1
call fcn.00462d6c
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push 1
push 0x24
push dword [ebp - 0x10]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push dword [ebp - 0x6c]
mov eax, 1
call fcn.004640a0
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x411b31
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x411b41
push ebx
call fcn.00462d66
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x411b51
push ebx
call fcn.00462d66
add esp, 4
mov esp, ebp
pop ebp
ret 0x14