Function at 0x40f1ec
Capabilities:
Set console window title

Disassembly:
push 0x3c0
mov eax, 0x44098d
call fcn.0042bb26
mov eax, dword [ebp + 8]
push 4
mov dword [ebp - 0x2e0], eax
call fcn.0042a938
xor ebx, ebx
pop ecx
cmp eax, ebx
je 0x40f21c
lea ecx, [ebp - 0x2dc]
mov dword [eax], ecx
jmp 0x40f21e
xor eax, eax
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2c8], ebx
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov dword [ebp - 4], 1
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0x24
push 0x448ab4
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 2
call fcn.004273d9
mov byte [ebp - 4], 3
cmp dword [eax + 0x18], 0x10
jb 0x40f27e
mov eax, dword [eax + 4]
jmp 0x40f281
add eax, 4
push eax
lea ecx, [ebp - 0x258]
call fcn.00403193
sub esp, 0x18
mov byte [ebp - 4], 4
mov eax, esp
mov dword [ebp - 0x2bc], esp
lea ecx, [ebp - 0x258]
push ecx
push eax
call fcn.00417fa5
lea eax, [ebp - 0x274]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2c4], esp
push 0xb
push 0x448adc
mov byte [ebp - 4], 5
call fcn.004081ed
lea edi, [ebp - 0x3cc]
call fcn.00427366
mov byte [ebp - 4], 6
call fcn.004274a1
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 0x10
jb 0x40f2ee
mov eax, dword [eax + 4]
jmp 0x40f2f1
add eax, 4
push eax
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 9
call fcn.00419f67
add esp, 0x1c
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00419fa6
lea eax, [ebp - 0x2ac]
push eax
lea esi, [ebp - 0x2dc]
mov byte [ebp - 4], 0xb
call fcn.0041835b
lea edi, [ebp - 0x2ac]
call fcn.004101cb
lea esi, [ebp - 0x238]
call fcn.00408999
push dword [ebp - 0x238]
call fcn.004295ef
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.004035bd
lea esi, [ebp - 0x3cc]
call fcn.00404654
push ebx
push 1
lea ecx, [ebp - 0x258]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0x2f
push 0x448ae8
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0xc
call fcn.004273d9
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 0x10
jb 0x40f3d3
mov eax, dword [eax + 4]
jmp 0x40f3d6
add eax, 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403193
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0xe
call fcn.0041831b
add eax, 0x1c
call fcn.00408485
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
push ebx
call fcn.0042a8e7
pop ecx
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0x38
push 0x448b18
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0xf
call fcn.004273d9
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x18], 0x10
jb 0x40f473
mov eax, dword [eax + 4]
jmp 0x40f476
add eax, 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403193
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x11
call fcn.0041831b
add eax, 0x1c
call fcn.00408485
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x274]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 2
push 0x448b54
call fcn.004081ed
lea edi, [ebp - 0x3cc]
call fcn.00427366
mov byte [ebp - 4], 0x12
call fcn.004273d9
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x18], 0x10
jb 0x40f50c
mov eax, dword [eax + 4]
jmp 0x40f50f
add eax, 4
push eax
lea ecx, [ebp - 0x258]
call fcn.00403193
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov eax, esp
mov dword [ebp - 0x2bc], esp
lea ecx, [ebp - 0x258]
push ecx
push eax
call fcn.00417fa5
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2c4], esp
push 7
push 0x448b58
mov byte [ebp - 4], 0x15
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
push eax
mov byte [ebp - 4], 0x16
call fcn.00427738
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x18], 0x10
jb 0x40f57d
mov eax, dword [eax + 4]
jmp 0x40f580
add eax, 4
push eax
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x19
call fcn.00419f67
add esp, 0x1c
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.00419fa6
lea eax, [ebp - 0x2ac]
push eax
lea esi, [ebp - 0x2dc]
mov byte [ebp - 4], 0x1b
call fcn.0041835b
lea edi, [ebp - 0x2ac]
call fcn.004101cb
lea esi, [ebp - 0x238]
call fcn.00408999
push dword [ebp - 0x238]
call fcn.004295ef
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
call fcn.00404654
push ebx
push 1
lea ecx, [ebp - 0x258]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.004035bd
lea esi, [ebp - 0x3cc]
mov byte [ebp - 4], 1
call fcn.00404654
call fcn.004295cd
cdq
push 0xa
pop ecx
idiv ecx
mov esi, edx
call fcn.004295cd
cdq
push 0xa
pop ecx
idiv ecx
cmp esi, edx
setl al
cmp al, bl
je 0x40f664
movzx eax, al
mov dword [ebp - 0x2bc], eax
fild dword [ebp - 0x2bc]
call fcn.004397d0
fstp dword [ebp - 0x2bc]
fld dword [ebp - 0x2bc]
jmp 0x40f677
fldz
call fcn.004396a0
fstp dword [ebp - 0x2bc]
fld dword [ebp - 0x2bc]
call fcn.004398c0
dec eax
jne 0x40f696
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
call fcn.0040a109
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0xd
push str.27__J_F_
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0x1c
call fcn.00427546
mov byte [ebp - 4], 0x1d
cmp dword [eax + 0x18], 0x10
jb 0x40f6d7
mov eax, dword [eax + 4]
jmp 0x40f6da
add eax, 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403193
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x1e
call fcn.0041831b
add eax, 0x1c
call fcn.00408485
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x274]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 2
push 0x448b70
call fcn.004081ed
lea edi, [ebp - 0x3cc]
call fcn.00427366
mov byte [ebp - 4], 0x1f
call fcn.00427546
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x18], 0x10
jb 0x40f770
mov eax, dword [eax + 4]
jmp 0x40f773
add eax, 4
push eax
lea ecx, [ebp - 0x258]
call fcn.00403193
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov eax, esp
mov dword [ebp - 0x2bc], esp
lea ecx, [ebp - 0x258]
push ecx
push eax
call fcn.00417fa5
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2c4], esp
push 0xa
push 0x448b74
mov byte [ebp - 4], 0x22
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0x23
call fcn.004273d9
mov byte [ebp - 4], 0x24
cmp dword [eax + 0x18], 0x10
jb 0x40f7e0
mov eax, dword [eax + 4]
jmp 0x40f7e3
add eax, 4
push eax
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x26
call fcn.00419f67
add esp, 0x1c
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.00419fa6
lea eax, [ebp - 0x2ac]
push eax
lea esi, [ebp - 0x2dc]
mov byte [ebp - 4], 0x28
call fcn.0041835b
lea edi, [ebp - 0x2ac]
call fcn.004101cb
lea esi, [ebp - 0x238]
call fcn.00408999
push dword [ebp - 0x238]
call fcn.004295ef
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
call fcn.00404654
push ebx
push 1
lea ecx, [ebp - 0x258]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.004035bd
lea esi, [ebp - 0x3cc]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0xa
push 0x448b80
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0x29
call fcn.004274a1
mov byte [ebp - 4], 0x2a
cmp dword [eax + 0x18], 0x10
jb 0x40f8c5
mov eax, dword [eax + 4]
jmp 0x40f8c8
add eax, 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403193
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x2b
call fcn.0041831b
add eax, 0x1c
call fcn.00408485
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0x15
push str.Sy__a
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
push eax
mov byte [ebp - 4], 0x2c
call fcn.00427738
mov byte [ebp - 4], 0x2d
cmp dword [eax + 0x18], 0x10
jb 0x40f95f
mov eax, dword [eax + 4]
jmp 0x40f962
add eax, 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403193
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x2e
call fcn.0041831b
add eax, 0x1c
call fcn.00408485
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x274]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 2
push 0x448ba4
call fcn.004081ed
lea edi, [ebp - 0x3cc]
call fcn.00427366
push eax
mov byte [ebp - 4], 0x2f
call fcn.00427738
mov byte [ebp - 4], 0x30
cmp dword [eax + 0x18], 0x10
jb 0x40f9f9
mov eax, dword [eax + 4]
jmp 0x40f9fc
add eax, 4
push eax
lea ecx, [ebp - 0x258]
call fcn.00403193
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov eax, esp
mov dword [ebp - 0x2bc], esp
lea ecx, [ebp - 0x258]
push ecx
push eax
call fcn.00417fa5
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2c4], esp
push 0xf
push 0x448ba8
mov byte [ebp - 4], 0x32
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0x33
call fcn.00427546
mov byte [ebp - 4], 0x34
cmp dword [eax + 0x18], 0x10
jb 0x40fa69
mov eax, dword [eax + 4]
jmp 0x40fa6c
add eax, 4
push eax
lea edi, [ebp - 0x23c]
mov byte [ebp - 4], 0x36
call fcn.00419f67
add esp, 0x1c
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.00419fa6
lea eax, [ebp - 0x2ac]
push eax
lea esi, [ebp - 0x2dc]
mov byte [ebp - 4], 0x38
call fcn.0041835b
lea edi, [ebp - 0x2ac]
call fcn.004101cb
lea esi, [ebp - 0x238]
call fcn.00408999
push dword [ebp - 0x238]
call fcn.004295ef
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
call fcn.00404654
push ebx
push 1
lea ecx, [ebp - 0x258]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.004035bd
lea esi, [ebp - 0x3cc]
mov byte [ebp - 4], 1
call fcn.00404654
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0xd
push str.27__J_F_
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0x39
call fcn.00427546
mov byte [ebp - 4], 0x3a
cmp dword [eax + 0x18], 0x10
jb 0x40fb4e
mov eax, dword [eax + 4]
jmp 0x40fb51
add eax, 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403193
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x3b
call fcn.0041831b
add eax, 0x1c
call fcn.00408485
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
mov byte [ebp - 4], 1
call fcn.00404654
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push ebx
shr esi, 0x18
call fcn.0042a8e7
imul eax, eax, 0x63
pop ecx
cmp esi, eax
jbe 0x40fbe0
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
call fcn.0040a162
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
mov esi, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2d0]
mov eax, esi
sub eax, edi
push 0x34
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x2c0], ebx
test eax, eax
jbe 0x410170
push ebx
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x25c], 0xf
call fcn.00403957
push dword [ebp - 0x2c0]
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x3c
lea edi, [ebp - 0x274]
call fcn.004182c9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push eax
call fcn.004031b5
call fcn.004101e9
mov edi, eax
call fcn.004295cd
cdq
push 0x14
pop ecx
idiv ecx
mov esi, edx
inc esi
call fcn.004295cd
cdq
idiv esi
cmp edx, esi
jg 0x40fc70
mov eax, esi
cdq
idiv esi
cmp edx, ebx
je 0x40fcb3
push 0x103
lea eax, [ebp - 0x117]
push ebx
push eax
mov byte [ebp - 0x118], bl
call fcn.00431920
add esp, 0xc
push 0x104
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleTitleA]
test eax, eax
je 0x40fcae
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.0040a202
cmp edi, ebx
jge 0x40fd65
push dword [ebp - 0x2c0]
lea eax, [ebp - 0x2dc]
call fcn.004182c9
cmp dword [eax + 0x18], 0x10
jb 0x40fcd7
mov eax, dword [eax + 4]
jmp 0x40fcda
add eax, 4
push eax
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0x21
push 0x448bb8
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
push eax
mov byte [ebp - 4], 0x3d
call fcn.00427738
mov byte [ebp - 4], 0x3e
cmp dword [eax + 0x18], 0x10
jb 0x40fd1d
mov eax, dword [eax + 4]
jmp 0x40fd20
add eax, 4
mov ebx, dword [ebp - 0x2e0]
push eax
push 1
call fcn.0040eded
add esp, 0xc
push 0
push 1
lea ecx, [ebp - 0x2fc]
call fcn.004035bd
lea esi, [ebp - 0x364]
call fcn.00404654
push 0
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.004035bd
xor ebx, ebx
jmp 0x410148
sub esp, 0x1c
lea eax, [ebp - 0x274]
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push eax
call fcn.004031b5
call fcn.0040f0a8
cmp eax, ebx
jge 0x40fe19
cmp dword [ebp - 0x25c], 0x10
mov eax, dword [ebp - 0x270]
jae 0x40fd9e
lea eax, [ebp - 0x270]
push eax
push dword [ebp - 0x2c0]
lea eax, [ebp - 0x2dc]
call fcn.004182c9
cmp dword [eax + 0x18], 0x10
jb 0x40fdbb
mov eax, dword [eax + 4]
jmp 0x40fdbe
add eax, 4
push eax
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x2bc], esp
push 0x22
push 0x448bdc
call fcn.004081ed
lea edi, [ebp - 0x364]
call fcn.00427366
mov byte [ebp - 4], 0x3f
call fcn.00427666
mov byte [ebp - 4], 0x40
cmp dword [eax + 0x18], 0x10
jb 0x40fe00
mov eax, dword [eax + 4]
jmp 0x40fe03
add eax, 4
mov ebx, dword [ebp - 0x2e0]
push eax
push 1
call fcn.0040eded
add esp, 0x10
jmp 0x40fd31
push dword [ebp - 0x2c0]
lea eax, [ebp - 0x2dc]
mov dword [ebp - 0x2c4], ebx
call fcn.004182c9
mov ecx, eax
mov eax, dword [ecx + 0x2c]
sub eax, dword [ecx + 0x28]
add ecx, 0x1c
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
jbe 0x410136
push dword [ebp - 0x2c4]
lea eax, [ebp - 0x2dc]
push ecx
push dword [ebp - 0x2c0]
call fcn.004182c9
add esp, 4
add eax, 0x1c
call fcn.0040841c
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x258]
push eax
call fcn.00419fdb
add esp, 0xc
push ebx
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x224], 0xf
call fcn.00403957
sub esp, 0x1c
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x258]
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push eax
call fcn.004031b5
call fcn.0040f0a8
cmp eax, ebx
jge 0x40fed3
push ebx
push 1
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push 1
jmp 0x4100f3
push 0x103
lea eax, [ebp - 0x117]
push ebx
push eax
mov byte [ebp - 0x118], bl
call fcn.00431920
mov eax, dword [ebp - 0x254]
add esp, 0xc
cmp dword [ebp - 0x240], 0x10
jae 0x40ff03
lea eax, [ebp - 0x254]
mov esi, 0x104
push esi
lea ecx, [ebp - 0x118]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp eax, ebx
je 0x40ff31
cmp eax, esi
jae 0x40ff31
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x23c]
call fcn.00403575
push ebx
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x2a0], 0xf
call fcn.00403957
lea esi, [ebp - 0x29c]
call fcn.00403180
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x43
call fcn.004034e3
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x23c]
push eax
mov ecx, esi
call fcn.004034e3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
mov esi, eax
call fcn.0042a8e7
mov dword [ebp - 0x2bc], esi
fild dword [ebp - 0x2bc]
pop ecx
mov edi, eax
test esi, esi
jge 0x40ffa3
fadd qword [0x44b078]
call fcn.004396a0
mov dword [ebp - 0x2bc], edi
fild dword [ebp - 0x2bc]
test edi, edi
jge 0x40ffbe
fadd qword [0x44b078]
fcompp
fnstsw ax
test ah, 5
jp 0x40ffd7
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
call fcn.0041f338
mov edi, dword [ebp - 0x2e0]
mov ecx, dword [edi + 0x2cc]
add edi, 0x2c0
xor esi, esi
inc esi
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], esi
cmp ecx, ebx
jne 0x410000
xor eax, eax
jmp 0x410008
mov eax, dword [edi + 0x14]
sub eax, ecx
sar eax, 6
mov edx, dword [edi + 0x10]
sub edx, ecx
sar edx, 6
cmp edx, eax
jae 0x41002c
lea eax, [ebp - 0x2b8]
push eax
push esi
push dword [edi + 0x10]
call fcn.004187da
mov dword [edi + 0x10], eax
jmp 0x4100ca
mov ebx, dword [edi + 0x10]
lea esi, [ebp - 0x304]
call fcn.00419c39
mov ebx, dword [edi + 0xc]
mov eax, dword [edi + 0x10]
sub eax, ebx
test eax, 0xffffffc0
jne 0x410052
and dword [ebp - 0x2bc], 0
jmp 0x410089
lea esi, [ebp - 0x30c]
call fcn.00419c39
mov eax, dword [ebp - 0x304]
test eax, eax
je 0x41006f
cmp eax, dword [ebp - 0x30c]
je 0x410074
call fcn.004294c3
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x308]
sar eax, 6
mov dword [ebp - 0x2bc], eax
push dword [ebp - 0x300]
lea eax, [ebp - 0x2b8]
push dword [ebp - 0x304]
mov ecx, edi
push eax
call fcn.00418d93
mov ebx, dword [edi + 0xc]
lea esi, [ebp - 0x36c]
call fcn.00419c39
mov ecx, dword [ebp - 0x2bc]
lea eax, [ebp - 0x374]
push eax
mov eax, esi
call fcn.00418bb7
xor esi, esi
xor ebx, ebx
inc esi
push ebx
push esi
lea ecx, [ebp - 0x29c]
call fcn.004035bd
push ebx
push esi
lea ecx, [ebp - 0x2b8]
call fcn.004035bd
push ebx
push esi
lea ecx, [ebp - 0x23c]
call fcn.004035bd
push ebx
push esi
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x3c
call fcn.004035bd
push dword [ebp - 0x2c0]
inc dword [ebp - 0x2c4]
lea eax, [ebp - 0x2dc]
call fcn.004182c9
mov ecx, eax
mov eax, dword [ecx + 0x2c]
sub eax, dword [ecx + 0x28]
add ecx, 0x1c
push 0x1c
cdq
pop ecx
idiv ecx
cmp dword [ebp - 0x2c4], eax
jb 0x40fe49
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.004035bd
mov esi, dword [ebp - 0x2cc]
mov edi, dword [ebp - 0x2d0]
mov eax, esi
sub eax, edi
push 0x34
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x2c0]
cmp dword [ebp - 0x2c0], eax
jb 0x40fc04
cmp edi, ebx
je 0x41018e
jmp 0x41017e
call fcn.004101cb
add edi, 0x34
cmp edi, esi
jne 0x410176
push dword [ebp - 0x2d0]
call fcn.004295ef
pop ecx
push dword [ebp - 0x2dc]
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2c8], ebx
call fcn.004295ef
pop ecx
xor eax, eax
call fcn.0042bba9
ret 4