Function at 0x409590
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90
push esi
mov dword [ebp - 0x90], 0x1511f
mov dword [ebp - 8], 0x133bd
mov dword [ebp - 0xc], 0x7249
mov dword [ebp - 4], 0xd1f8
mov dword [ebp - 0x10], 0xb8ac
cmp dword [0x4366d8], 0
je 0x4095d3
mov eax, 1
jmp 0x40add1
mov eax, dword [0x435ac8]
add eax, 0x14
mov ecx, dword fs:[eax]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + ecx + 8]
mov dword [ebp - 0x28], eax
jmp 0x40961d
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + edx]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0x18], 0
je 0x409925
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x14]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x78]
add edx, 0x78
mov dword [ebp - 0x7c], edx
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x7c]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x409667
jmp 0x40960c
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x64]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
add eax, dword [edx + 0xc]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.00405830
add esp, 4
cmp eax, 0x52b92d0
jne 0x409920
mov edx, dword [ebp - 0xc]
cmp edx, dword [0x435a44]
jle 0x40991e
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
sub ecx, eax
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00401290
add esp, 4
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sar eax, cl
and eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 8]
sub esi, dword [ebp - 0x10]
sub esi, 0x114ba
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov ecx, eax
sar esi, cl
mov dword [ebp - 0x10], esi
mov ecx, dword [0x435ad8]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x5a72
je 0x409725
cmp dword [ebp - 0x30], 0xa903
je 0x4097f3
cmp dword [ebp - 0x30], 0x131c8
je 0x409850
jmp 0x409919
mov eax, 0x162f8
cdq
idiv dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0xc]
push edx
call fcn.00401d90
add esp, 4
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
cdq
idiv dword [ebp - 0x10]
mov ecx, edx
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
sub ecx, eax
or ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x17ff1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
sar eax, cl
and eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov eax, 0x5e5d
mov ecx, edx
sar eax, cl
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 0x17666
idiv ecx
mov ecx, eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 8]
sub ecx, edx
mov edx, dword [ebp - 8]
sar edx, cl
mov dword [0x435ac4], edx
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
sub ecx, eax
mov dword [ebp - 0xc], ecx
call fcn.00401df0
mov esi, dword [ebp - 0xc]
sub esi, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
mov ecx, eax
shl esi, cl
mov dword [ebp - 0xc], esi
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0xc]
push eax
call fcn.004026b0
add esp, 8
cmp dword [0x435a6c], eax
jne 0x409850
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
shl esi, cl
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
sub eax, dword [ebp - 4]
mov ecx, eax
sar esi, cl
mov dword [0x435a08], esi
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
mov eax, edx
cdq
idiv dword [ebp - 4]
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
mov dword [0x435ac4], edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.004011a0
add esp, 8
imul edx, dword [ebp - 0xc], 0x1050f
add edx, dword [ebp - 4]
imul eax, dword [ebp - 4], 0x11578
add eax, dword [ebp - 4]
and edx, eax
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0xc]
add ecx, 0xb27f
sub ecx, dword [ebp - 4]
add ecx, 0x13a60
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
imul eax, dword [ebp - 0xc], 0x158ac
cdq
idiv dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 0x10]
sub ecx, eax
mov dword [ebp - 0xc], ecx
mov esi, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
shl esi, cl
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 8]
mov ecx, dword [ebp - 8]
sar eax, cl
and esi, eax
or esi, dword [ebp - 0x10]
mov dword [ebp - 4], esi
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.UxTheme.dll_GetThemePosition]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
sub esi, dword [ebp - 8]
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
mov ecx, edx
shl esi, cl
mov dword [ebp - 4], esi
jmp 0x409693
jmp 0x409925
jmp 0x40960c
cmp dword [ebp - 0x18], 0
jne 0x409932
xor eax, eax
jmp 0x40add1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2c], 0x4366dc
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x14]
add edx, dword [ecx + eax*4 - 4]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
cmp ecx, 0x775a
jne 0x40ad8c
mov edx, dword [ebp - 0x68]
push edx
call fcn.00404370
add esp, 4
imul ecx, dword [ebp - 0x1c], 0xc
mov edx, dword [ebp - 0x2c]
mov dword [edx + ecx], eax
mov eax, dword [ebp - 4]
cmp eax, dword [0x435a08]
jge 0x40aaa1
mov ecx, dword [0x435a08]
cmp ecx, dword [ebp - 0xc]
jl 0x409bbe
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0xc]
jl 0x409bbe
mov eax, dword [ebp - 4]
cmp eax, dword [0x4359b4]
jle 0x4099f6
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x10]
jg 0x4099f6
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jg 0x409a02
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x409a90
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x435934]
je 0x409a37
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x34], edx
jmp 0x409a1e
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
cmp ecx, dword [0x435934]
jl 0x409a35
imul edx, dword [ebp - 8], 0x17307
mov dword [ebp - 4], edx
jmp 0x409a15
jmp 0x409a8b
mov eax, dword [0x435a6c]
mov dword [ebp - 0x38], eax
jmp 0x409a4a
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0xc]
jg 0x409a80
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
imul eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x10]
and eax, 0xf84a
mov ecx, 0xd82b
sub ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0xc], eax
jmp 0x409a41
mov edx, dword [0x435a74]
cmp edx, dword [ebp - 4]
jle 0x409a37
jmp 0x409bb9
mov eax, dword [ebp - 8]
cmp eax, dword [0x4359b8]
jl 0x409bb9
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
sar edx, cl
sar edx, 0xda
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 0x1244
idiv ecx
and edx, dword [ebp - 8]
and edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov eax, dword [0x4359bc]
mov dword [ebp - 0x3c], eax
jmp 0x409ae1
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x10]
jge 0x409ba5
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov esi, dword [ebp - 0x10]
sub esi, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 4]
mov ecx, eax
shl esi, cl
mov dword [ebp - 0xc], esi
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov eax, 0x17bdc
cdq
idiv dword [ebp - 8]
imul eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
sar eax, cl
or eax, 0x3f40
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 0xc]
mov eax, 0xce8e
sub eax, edx
mov ecx, dword [ebp - 4]
lea edx, [eax + ecx + 0x1783a]
mov ecx, dword [ebp - 0x10]
shl edx, cl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
cmp eax, dword [0x435a34]
jb 0x409aed
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004011d0
add esp, 0x14
mov eax, dword [ebp - 4]
and eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
lea edx, [eax + ecx + 0xd7d3]
mov dword [ebp - 0xc], edx
jmp 0x409ad8
mov eax, dword [ebp - 0x10]
cmp eax, dword [0x4359b4]
jne 0x409a9f
jmp 0x409a90
jmp 0x40aa9c
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0xc]
je 0x40aa9c
mov edx, dword [ebp - 8]
cmp edx, dword [0x435ad8]
jne 0x40aa9c
mov eax, dword [ebp - 4]
cmp eax, dword [0x4359bc]
jge 0x409bec
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x10]
jne 0x409c00
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x10]
jl 0x409c00
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jne 0x40a297
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x435934]
je 0x409cfa
mov edx, dword [0x435a6c]
cmp edx, dword [ebp - 0x10]
jne 0x409c2e
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 8]
jg 0x409c2e
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 4]
jl 0x409ce6
mov edx, dword [0x435a08]
cmp edx, dword [ebp - 8]
jge 0x409ce6
imul eax, dword [ebp - 8], 0x1fafe478
imul eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
add ecx, 0x11142
sar eax, cl
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
and ecx, edx
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 4]
add eax, dword [ebp - 0x10]
add ecx, eax
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
push 0
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.USER32.dll_GetMenuInfo]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
imul eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, 0x3c8b
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call fcn.004011a0
add esp, 8
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.00401240
add esp, 4
mov eax, 0x1737f
cdq
idiv dword [ebp - 0xc]
or edx, dword [ebp - 0xc]
mov dword [0x4359b8], edx
jmp 0x409c2e
mov edx, dword [ebp - 4]
cmp edx, dword [0x435a74]
jge 0x409c0f
jmp 0x40a292
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 8]
jge 0x409da0
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x10]
jne 0x409da0
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x10]
je 0x409da0
mov eax, dword [0x435a44]
mov dword [ebp - 0x40], eax
jmp 0x409d31
mov ecx, dword [ebp - 0x40]
sub ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
cmp edx, dword [ebp - 0xc]
jge 0x409d91
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 8]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0xc]
push edx
push 0x8cec8
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
add eax, 0x96fa
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
add ecx, 0x18fa
and eax, ecx
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x10]
mov dword [0x4359b4], edx
jmp 0x409d28
mov eax, dword [0x435a30]
cmp eax, dword [ebp - 4]
jbe 0x409d1e
jmp 0x40a292
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x4359b4]
jl 0x40a292
mov edx, dword [0x435a08]
cmp edx, dword [ebp - 0xc]
jg 0x409ffa
mov eax, dword [0x435a08]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x50df
jg 0x409df7
cmp dword [ebp - 0x20], 0x50df
je 0x409edf
cmp dword [ebp - 0x20], 0x46ef
je 0x409ef7
cmp dword [ebp - 0x20], 0x4f08
je 0x409e4f
jmp 0x409ff5
cmp dword [ebp - 0x20], 0x16e4f
je 0x409e05
jmp 0x409ff5
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
shl eax, cl
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
or ecx, eax
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 8]
add edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
jmp 0x409ff5
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.004011d0
add esp, 0x14
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.004010f0
add esp, 0x10
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 0xc]
mov eax, edx
cdq
idiv dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov esi, dword [ebp - 8]
imul esi, dword [ebp - 8]
mov eax, 0x8e93
cdq
idiv dword [ebp - 4]
mov eax, edx
cdq
idiv dword [ebp - 0xc]
mov ecx, eax
sar esi, cl
mov dword [0x4359b4], esi
mov esi, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
shl esi, cl
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
imul edx, dword [ebp - 8]
mov ecx, edx
sar esi, cl
mov dword [ebp - 8], esi
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
jmp 0x409ff5
mov eax, dword [ebp - 8]
cdq
mov ecx, 0x1479c
idiv ecx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
imul eax, dword [ebp - 0x10], 0x9c7a
add eax, 0x4e1c
and eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.USER32.dll_IsChild]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00401d00
add esp, 0xc
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
and ecx, edx
mov dword [ebp - 0xc], ecx
mov esi, dword [ebp - 4]
imul esi, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 0xc]
sub esi, eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
sar esi, cl
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 8]
imul edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov ecx, 0x16321
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
sub ecx, eax
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x429
mov ecx, dword [ebp - 8]
shl eax, cl
mov dword [ebp - 0xc], eax
call dword [sym.imp.UxTheme.dll_IsThemeActive]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0x10]
mov ecx, edx
mov eax, dword [ebp - 0xc]
cdq
mov esi, 0x8a14
idiv esi
imul edx, eax, 0x181d1
add ecx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x10]
cmp eax, dword [0x4359b4]
jg 0x409ef7
jmp 0x40a28d
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
or edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [0x435934]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffff6d8
je 0x40a1f8
cmp dword [ebp - 0x44], 0x20a
je 0x40a213
cmp dword [ebp - 0x44], 0x7457
je 0x40a03f
jmp 0x40a28d
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004026b0
add esp, 8
cmp dword [0x435a70], eax
ja 0x40a089
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004039b0
add esp, 8
cmp dword [0x435ad8], eax
jae 0x40a089
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.UxTheme.dll_EndPanningFeedback]
cmp dword [0x435ad8], eax
jne 0x40a12f
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
or edx, eax
mov dword [0x4359b4], edx
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0x10]
and ecx, edx
mov dword [ebp - 4], ecx
imul ecx, dword [ebp - 4], 0x24a4
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
cdq
mov esi, 0x711c
idiv esi
sub ecx, edx
mov dword [0x4359bc], ecx
mov edx, dword [ebp - 4]
sub edx, 0xabc0
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
push eax
call fcn.00401240
add esp, 4
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov ecx, dword [0x435934]
cmp ecx, dword [ebp - 4]
jg 0x40a089
jmp 0x40a1f3
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
je 0x40a1f3
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004027f0
add esp, 8
cmp eax, dword [ebp - 0x10]
jne 0x40a1f3
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0xc]
push eax
call fcn.004038f0
add esp, 0x14
cmp dword [0x4359b4], eax
jl 0x40a18e
mov ecx, dword [0x435a34]
cmp ecx, dword [ebp - 8]
je 0x40a1be
mov edx, dword [ebp - 4]
cmp edx, dword [0x435ac4]
jle 0x40a1be
mov eax, dword [0x4359b8]
mov dword [ebp - 0x48], eax
jmp 0x40a1a1
mov ecx, dword [ebp - 0x48]
sub ecx, 1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x48]
cmp edx, dword [ebp - 0xc]
jl 0x40a1bc
mov eax, dword [ebp - 8]
or eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 0x10], eax
jmp 0x40a198
jmp 0x40a1f3
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.004011a0
add esp, 8
imul edx, dword [ebp - 4], 0x14aa3
mov dword [ebp - 0x10], edx
imul ecx, dword [ebp - 8], 0xff94
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
sar eax, cl
mov dword [ebp - 4], eax
jmp 0x40a28d
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
mov eax, dword [ebp - 0xc]
sub eax, edx
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0xc]
imul eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
sub edx, eax
add edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xc]
sar eax, 0x62
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
imul edx, dword [ebp - 8]
mov eax, edx
cdq
idiv dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov ecx, 0x41b6
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
lea eax, [ecx + edx + 0x140a5]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0xc]
mov dword [ebp - 4], eax
jmp 0x409da0
jmp 0x40aa9c
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 4]
jl 0x40a2c3
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10]
jne 0x40aa9c
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x10]
jg 0x40aa9c
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0xc]
jge 0x40aa9c
mov eax, dword [ebp - 4]
cmp eax, dword [0x4359b8]
jl 0x40a2d6
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0xc]
jg 0x40a2ee
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0xc]
jle 0x40a3d9
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xc]
jle 0x40a3d9
mov ecx, dword [0x435a44]
mov dword [ebp - 0x4c], ecx
jmp 0x40a302
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 4]
jge 0x40a3d4
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00401d90
add esp, 4
mov edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + eax + 0x124fe]
and edx, dword [ebp - 8]
mov dword [0x435a30], edx
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
shl eax, cl
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004039b0
add esp, 8
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
and ecx, dword [ebp - 8]
imul eax, dword [ebp - 0x10], 0x6c0a
cdq
idiv dword [ebp - 8]
and ecx, edx
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0xc]
or ecx, eax
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0x10]
sub ecx, edx
add ecx, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
cdq
idiv dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x10]
cmp edx, dword [0x435a34]
je 0x40a320
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
jmp 0x40a2f9
jmp 0x40aa9c
mov edx, dword [ebp - 0x10]
cmp edx, dword [0x435a6c]
jbe 0x40a3f8
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 8]
jl 0x40a3f8
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 4]
je 0x40a870
mov edx, dword [0x4359b8]
mov dword [ebp - 0x50], edx
jmp 0x40a40c
mov eax, dword [ebp - 0x50]
sub eax, 1
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 8]
jg 0x40a86b
mov edx, dword [0x4359b8]
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0xfab
je 0x40a65e
cmp dword [ebp - 0x54], 0x60bf
je 0x40a449
cmp dword [ebp - 0x54], 0x1316e
je 0x40a71d
jmp 0x40a832
call fcn.004028b0
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax - 0x174e0]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
sub edx, eax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
or edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [0x435a44]
cmp eax, dword [ebp - 8]
jg 0x40a491
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [0x435a6c]
jae 0x40a4b4
mov edx, dword [0x435ad8]
cmp edx, dword [ebp - 4]
jbe 0x40a4b4
mov eax, dword [ebp - 4]
push eax
call fcn.00403b80
add esp, 4
cmp dword [0x43594c], eax
jb 0x40a589
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
shl edx, cl
and edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 8]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [0x435a74]
cmp edx, dword [ebp - 8]
jge 0x40a501
mov eax, dword [0x4359b8]
cmp eax, dword [ebp - 0x10]
jl 0x40a539
mov eax, dword [ebp - 4]
cdq
mov ecx, 0xfb54
idiv ecx
mov eax, dword [ebp - 0xc]
sub eax, edx
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
imul ecx, dword [ebp - 4], 0x18453
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx + 0x10d8a]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
jmp 0x40a584
mov eax, dword [ebp - 0x10]
and eax, 0xd816
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
sub edx, ecx
and eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 4]
or ecx, eax
mov dword [ebp - 0x10], ecx
imul edx, dword [ebp - 8], 0x152cf
mov eax, dword [ebp - 8]
sub eax, edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
mov dword [ebp - 0xc], eax
jmp 0x40a659
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.USER32.dll_BroadcastSystemMessageA]
mov esi, eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.004026b0
add esp, 8
cmp esi, eax
jb 0x40a5e5
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.00403b40
add esp, 0xc
mov esi, eax
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
cmp esi, eax
je 0x40a659
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
sar edx, cl
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
shl esi, cl
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 4]
mov ecx, dword [ebp - 8]
sub ecx, eax
sar esi, cl
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
mov dword [0x435a74], edx
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
sub ecx, eax
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call fcn.004010f0
add esp, 0x10
mov eax, 0xffffb675
mov ecx, dword [ebp - 4]
sar eax, cl
mov dword [ebp - 0xc], eax
jmp 0x40a866
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00401bd0
add esp, 4
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 4]
imul edx, dword [ebp - 4]
mov eax, edx
cdq
idiv dword [ebp - 8]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0x10]
mov ecx, eax
sub ecx, 0x829c
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 8]
sub ecx, edx
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx + 0x12b34]
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0x10]
sub ecx, edx
or ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
shl eax, cl
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 0x10]
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
and edx, eax
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
imul eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 8]
add eax, ecx
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
call fcn.00401b20
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
and eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
call fcn.00401df0
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
and edx, eax
mov dword [ebp - 0x10], edx
imul ecx, dword [ebp - 4], 0xc61c
or ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [0x43594c]
mov dword [ebp - 0x58], edx
jmp 0x40a75a
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0xc]
jg 0x40a817
mov edx, dword [ebp - 0x10]
push edx
call fcn.00403d10
add esp, 4
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
shl eax, cl
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0x10]
mov ecx, 0x24c9
sub ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
lea ecx, [ecx + edx - 0x1f4b]
shl eax, cl
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
push eax
call fcn.00403b80
add esp, 4
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
imul ecx, dword [ebp - 0x10], 0xc055
add ecx, dword [ebp - 0x10]
shl edx, cl
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_OpenIcon]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x17206
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
sar edx, cl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
mov dword [0x435a34], edx
jmp 0x40a751
mov eax, dword [0x435a34]
cmp eax, dword [ebp - 0xc]
jb 0x40a739
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x10]
mov dword [0x4359bc], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
sub ecx, edx
mov eax, dword [ebp - 0xc]
sar eax, cl
and eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
jmp 0x40a403
jmp 0x40aa9c
mov ecx, dword [0x435a6c]
cmp ecx, dword [ebp - 4]
ja 0x40aa9c
mov edx, dword [ebp - 4]
push edx
call fcn.00401240
add esp, 4
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
cdq
idiv dword [ebp - 0x10]
mov ecx, edx
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
add eax, dword [ebp - 0x10]
and ecx, eax
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
cmp edx, dword [0x435ad8]
jne 0x40a8d0
mov eax, dword [ebp - 8]
cmp eax, dword [0x435a6c]
je 0x40aa97
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x4359b8]
je 0x40aa97
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 8]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0xc], edx
mov ecx, dword [0x4359bc]
cmp ecx, dword [ebp - 8]
je 0x40a907
mov edx, dword [ebp - 8]
cmp edx, dword [0x435a08]
je 0x40a915
mov eax, dword [0x435ac4]
cmp eax, dword [ebp - 0xc]
je 0x40a9bf
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
add ecx, 0xecc4
mov eax, 0x6dd5
shl eax, cl
and edx, eax
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00401290
add esp, 4
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 4]
mov dword [ebp - 8], edx
imul eax, dword [ebp - 0x10], 0x104ca
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.00401790
add esp, 8
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
shl edx, cl
or eax, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0x10], eax
mov edx, dword [0x435a44]
cmp edx, dword [ebp - 0xc]
jne 0x40a930
mov ecx, 0x8f74
sub ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
sar eax, cl
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
and edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
jmp 0x40aa6e
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.004011a0
add esp, 8
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
lea edx, [eax + ecx + 0x492b]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xc]
sub edx, eax
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
mov ecx, edx
mov eax, dword [ebp - 0xc]
cdq
mov esi, 0x18587
idiv esi
imul edx, dword [ebp - 4]
sub ecx, edx
add ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 0x10]
sub ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
cdq
idiv dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov edx, dword [0x435a6c]
cmp edx, dword [ebp - 4]
ja 0x40a9bf
mov eax, dword [ebp - 0xc]
cmp eax, dword [0x435a30]
jne 0x40a8d0
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
and ecx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
jmp 0x40a870
jmp 0x40ad56
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 4]
jl 0x40ab22
mov edx, dword [0x435a74]
mov dword [ebp - 0x5c], edx
jmp 0x40aabd
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 4]
jge 0x40ab1d
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
sub eax, edx
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x60], ecx
jmp 0x40aaeb
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x60]
cmp eax, dword [0x435a74]
jle 0x40ab1b
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
and edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
shl eax, 0xf5
mov dword [ebp - 4], eax
mov ecx, dword [0x435a70]
cmp ecx, dword [ebp - 8]
jbe 0x40aaf6
jmp 0x40aae2
jmp 0x40aab4
jmp 0x40ad56
mov edx, dword [ebp - 8]
cmp edx, dword [0x4359bc]
jle 0x40ad56
mov eax, dword [ebp - 8]
cmp eax, dword [0x435a74]
jg 0x40ab47
mov ecx, dword [0x435a30]
cmp ecx, dword [ebp - 0x10]
je 0x40ab56
mov edx, dword [ebp - 8]
cmp edx, dword [0x435a08]
je 0x40ad51
mov eax, dword [ebp - 8]
mov dword [0x435a34], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.00401790
add esp, 8
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
mov esi, edx
imul ecx, dword [ebp - 8], 0x14efc
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 4]
sub ecx, eax
sar esi, cl
mov dword [ebp - 8], esi
mov ecx, dword [ebp - 0x10]
add ecx, 0x8715
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 4]
imul eax, dword [ebp - 8]
sub ecx, eax
mov dword [ebp - 4], ecx
mov edx, dword [0x435a74]
cmp edx, dword [ebp - 0xc]
jle 0x40ac61
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 8]
imul ecx, eax, 0x2d2
mov eax, dword [ebp - 0x10]
sar eax, cl
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 4]
add ecx, 0x1092d
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x6ddb
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
and edx, eax
mov dword [ebp - 0xc], edx
mov eax, 0x12b91
cdq
idiv dword [ebp - 8]
sub edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
sar edx, cl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
cdq
mov ecx, 0x12162
idiv ecx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
cdq
idiv dword [ebp - 8]
add eax, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov ecx, eax
sar edx, cl
mov eax, dword [ebp - 4]
add eax, 0x3525
and edx, eax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004011d0
add esp, 0x14
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
jmp 0x40ad51
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 8]
je 0x40acb8
mov edx, dword [ebp - 8]
push edx
call fcn.00403d10
add esp, 4
cmp eax, dword [ebp - 4]
jge 0x40ad51
mov eax, dword [ebp - 0xc]
push eax
call fcn.00401eb0
add esp, 4
cmp dword [ebp - 4], eax
jl 0x40ad51
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call fcn.004038f0
add esp, 0x14
cmp eax, dword [ebp - 4]
jge 0x40ad51
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
sar eax, cl
or eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 4]
mov esi, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 4]
add eax, dword [ebp - 0x10]
mov ecx, eax
shl esi, cl
mov dword [ebp - 8], esi
mov esi, dword [ebp - 8]
add esi, 0x5a7d
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebp - 0xc]
mov ecx, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0x10]
add ecx, edx
shl esi, cl
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x10]
cdq
idiv dword [ebp - 4]
add edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
add edx, eax
mov eax, dword [ebp - 8]
mov ecx, edx
shl eax, cl
mov dword [ebp - 4], eax
call fcn.00401b20
mov esi, dword [ebp - 8]
mov ecx, dword [ebp - 4]
sar esi, cl
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
and esi, eax
imul ecx, dword [ebp - 0x10], 0x451d
and esi, ecx
mov dword [ebp - 4], esi
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 8]
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
jmp 0x40ab22
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x88]
movzx edx, word [ecx + eax*2 - 2]
imul eax, dword [ebp - 0x1c], 0xc
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x8c]
mov edx, dword [esi + edx*4]
mov dword [ecx + eax + 4], edx
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x226
jne 0x40ad8c
jmp 0x40ad9b
mov ecx, dword [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x24], ecx
jne 0x409976
mov edx, dword [ebp - 0x1c]
mov dword [0x4366d8], edx
mov eax, dword [0x4366d8]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00407020
add esp, 8
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [0x4366d8]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00407d50
add esp, 0xc
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret