Function at 0x57242c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xf0
mov eax, 0x5eb75d
call fcn.00523519
mov ebx, dword [ebp + 8]
mov edi, dword [0x71f704]
xor esi, esi
mov dword [ebx + 4], esi
mov dword [ebx + 0x14], esi
mov dword [ebp - 0xfc], ebx
mov dword [ebx + 0x18], esi
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], edi
mov dword [ebp - 4], esi
mov dword [ebx + 0x24], vtable.WTL::CMessageFilter.0
mov dword [ebx + 0x28], vtable.IBuddyList.0
mov dword [ebx], vtable.TeamViewer::CBuddyWindow.0
mov dword [ebx + 0x24], vtable.TeamViewer::CBuddyWindow.1.0
mov dword [ebx + 0x28], vtable.TeamViewer::CBuddyWindow.2.0
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x38], esi
mov dword [ebx + 0x3c], esi
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], esi
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x4c], esi
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x68], esi
mov dword [ebx + 0x6c], esi
mov dword [ebx + 0x70], esi
lea eax, [ebx + 0x450]
push eax
lea eax, [ebx + 0x74]
push eax
mov byte [ebp - 4], 3
call fcn.00575eb0
lea eax, [ebx + 0x450]
push eax
mov byte [ebp - 4], 4
call fcn.00578172
lea eax, [ebx + 0x488]
push eax
mov byte [ebp - 4], 5
call fcn.005b369f
mov byte [ebp - 4], 6
call fcn.004295fc
lea ecx, [ebx + 0x4b8]
mov dword [ecx], eax
mov byte [eax + 0x1d], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
mov dword [ebx + 0x4bc], esi
mov dword [ebx + 0x4c0], esi
mov dword [ebx + 0x4c4], esi
mov dword [ebx + 0x4c8], esi
lea ecx, [ebx + 0x4cc]
call fcn.0041212f
lea ecx, [ebx + 0x4e8]
call fcn.0041212f
lea ecx, [ebx + 0x508]
call fcn.0041212f
lea ecx, [ebx + 0x524]
call fcn.0041212f
lea ecx, [ebx + 0x540]
call fcn.0041212f
mov dword [ebx + 0x560], esi
mov dword [ebx + 0x570], esi
mov ecx, vtable.TeamViewer::CTVEditT_class_ATL::CWindow_.0
mov dword [ebx + 0x574], esi
mov dword [ebx + 0x578], esi
mov dword [ebx + 0x57c], edi
mov dword [ebx + 0x55c], ecx
lea eax, [ebx + 0x584]
mov dword [eax + 4], esi
mov dword [eax + 0x14], esi
mov dword [eax + 0x18], esi
mov dword [eax + 0x1c], esi
mov dword [eax + 0x20], edi
mov dword [eax], ecx
mov dword [ebx + 0x5ac], esi
mov dword [ebx + 0x5b0], esi
mov dword [ebx + 0x5b4], esi
mov dword [ebx + 0x5b8], esi
mov dword [ebx + 0x5bc], esi
lea eax, [ebx + 0x5c4]
mov dword [ebx + 0x5c0], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax], 0
mov dword [eax + 4], esi
mov dword [eax + 8], esi
lea eax, [ebx + 0x5d8]
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax], 0
mov dword [eax + 4], esi
mov dword [eax + 8], esi
lea eax, [ebx + 0x5ec]
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov byte [eax], 0
mov dword [eax + 4], esi
mov dword [eax + 8], esi
push fcn.0044869c
push fcn.0041212f
push 7
lea eax, [ebx + 0x604]
push 0x1c
mov byte [ebp - 4], 0x14
push eax
mov dword [ebx + 0x600], esi
call fcn.0051e813
push fcn.0054ac77
lea eax, [ebx + 0x6c8]
mov byte [ebp - 4], 0x15
mov edi, fcn.0054ab5e
push edi
mov dword [eax], esi
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
push 5
mov esi, 0xb4
lea eax, [ebx + 0x6d8]
push esi
push eax
call fcn.0051e813
push fcn.0054ac77
push edi
push 5
push esi
lea eax, [ebx + 0xa5c]
push eax
mov byte [ebp - 4], 0x16
call fcn.0051e813
mov byte [ebp - 4], 0x17
mov eax, 0x447fc8
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7463e0
movsd dword es:[edi], dword [esi]
call fcn.004473f5
push 0x28
pop ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x4f97cf
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
lea esi, [ebp - 0xa0]
lea edi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc0]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0043f440
test al, al
pop ecx
jne 0x5726e9
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xb0], 0x717c10
jmp 0x5726f0
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x18
call fcn.004475da
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x17
call fcn.00447074
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447feb
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x746420
movsd dword es:[edi], dword [esi]
call fcn.00447456
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fb4
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7464e0
movsd dword es:[edi], dword [esi]
call fcn.004474b7
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fcd
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x746500
movsd dword es:[edi], dword [esi]
call fcn.004474b7
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fbe
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x746480
movsd dword es:[edi], dword [esi]
call fcn.004473f5
push 0x28
pop ecx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x98], ebx
sub esp, 0x10
mov eax, 0x447fe1
mov dword [ebp - 0xa0], eax
lea esi, [ebp - 0xa0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x746460
call fcn.00447518
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447ff5
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x746440
movsd dword es:[edi], dword [esi]
call fcn.00447518
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fe6
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7464c0
movsd dword es:[edi], dword [esi]
call fcn.00447456
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fd7
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7464a0
movsd dword es:[edi], dword [esi]
call fcn.00447456
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fdc
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x746520
movsd dword es:[edi], dword [esi]
call fcn.00447579
push 0x28
pop ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x447ff0
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
lea esi, [ebp - 0xa0]
lea edi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc0]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0043f440
test al, al
pop ecx
jne 0x572931
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xb0], 0x717c38
jmp 0x572938
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x19
call fcn.0044767c
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x17
call fcn.00447074
push 0x28
pop ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fb9
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
lea esi, [ebp - 0xa0]
lea edi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc0]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0043f440
test al, al
pop ecx
jne 0x5729ae
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xb0], 0x717c40
jmp 0x5729b5
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004476cd
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x17
call fcn.00447074
push 0x28
pop ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fd2
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
lea esi, [ebp - 0xa0]
lea edi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc0]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0043f440
test al, al
pop ecx
jne 0x572a2b
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xb0], 0x717c48
jmp 0x572a32
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0044771e
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x17
call fcn.00447074
push 0x28
pop ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fa7
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
lea esi, [ebp - 0xa0]
lea edi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc0]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0043f440
test al, al
pop ecx
jne 0x572aa8
lea esi, [ebp - 0xc0]
lea edi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xb0], 0x717c50
jmp 0x572aaf
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x1c
call fcn.0044776f
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x17
call fcn.00447074
push 0x28
pop ecx
sub esp, 0x10
mov dword [ebp - 0x9c], ecx
mov eax, 0x447fc3
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], ebx
mov edi, esp
lea esi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x7465c0
movsd dword es:[edi], dword [esi]
call fcn.00447579
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0xd0], esp
push 0x277e
push eax
call fcn.004b9340
pop ecx
pop ecx
lea ecx, [ebx + 0x488]
call fcn.005b366e
xor edi, edi
lea eax, [ebp - 0xcc]
push 0x2931
inc edi
xor esi, esi
push eax
mov byte [ebx + 0x2c], 0
mov dword [ebx + 0x30], edi
mov dword [ebx + 0x54], esi
mov dword [ebx + 0x58], 3
mov byte [ebx + 0x5c], 0
call fcn.004b9340
push eax
lea eax, [ebp - 0x2c]
push str._lng
push eax
mov byte [ebp - 4], 0x1d
call fcn.00413e1f
add esp, 0x14
push esi
push edi
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x1f
call fcn.00410779
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xac]
push str.http:__login.teamviewer.com_requestpassword.aspx
push eax
call fcn.00413e1f
add esp, 0xc
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x508]
mov byte [ebp - 4], 0x20
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x1f
call fcn.00410779
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xac]
push str.http:__login.teamviewer.com_register.aspx
push eax
call fcn.00413e1f
add esp, 0xc
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x524]
mov byte [ebp - 4], 0x21
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x1f
call fcn.00410779
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xac]
push str.http:__login.teamviewer.com_
push eax
call fcn.00413e1f
add esp, 0xc
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x540]
mov byte [ebp - 4], 0x22
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xac]
call fcn.00410779
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0x90]
push ecx
push 0x5c
push eax
mov byte [ebp - 4], 0x23
call dword [0x71f604]
mov edi, dword [0x71f5f8]
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x76], 3
call edi
mov dword [ebx + 0x4c0], eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x7b], 1
call edi
mov dword [ebx + 0x4c4], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x80], 0x2bc
call edi
push 0x29ef
lea edi, [ebx + 0x5c4]
mov dword [ebx + 0x4c8], eax
call fcn.0054c19e
push 0x29ed
lea edi, [ebx + 0x5d8]
call fcn.0054c19e
push 0x29ee
lea edi, [ebx + 0x5ec]
call fcn.0054c19e
mov edi, dword [0x69c770]
mov esi, dword [0x69c774]
lea eax, [edi + 0x9b]
mov dword [ebp - 0xd8], eax
lea eax, [esi + 0x24]
push 0x20
mov dword [ebp - 0xe0], 0x9b
mov dword [ebp - 0xdc], 0x24
mov dword [ebp - 0xd4], eax
call fcn.0051d97d
pop ecx
mov dword [ebp - 0xe4], eax
test eax, eax
mov byte [ebp - 4], 0x24
je 0x572d16
push esi
push edi
push 0x69a5b8
push eax
call fcn.0054c6cf
mov esi, eax
jmp 0x572d18
xor esi, esi
sub esp, 0x1c
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0xe4], esp
push 0x69dd8c
call fcn.004120e9
push esi
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xe0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0xd2c]
push eax
movsd dword es:[edi], dword [esi]
call fcn.0054ae49
push 0
push 1
sub esp, 0x1c
lea eax, [ebx + 0x540]
mov ecx, esp
mov dword [ebp - 0xe4], esp
push eax
call fcn.0041186e
push 0
mov byte [ebp - 4], 0x25
push dword [ebx + 0x4c0]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xf8], esp
push 0x69dd8c
call fcn.004120e9
lea esi, [ebx + 0xd2c]
mov byte [ebp - 4], 0x23
call fcn.0054b26f
push dword [0x69c754]
mov dword [ebp - 0xf4], 7
push dword [0x69c750]
mov dword [ebp - 0xf0], 0x49
mov dword [ebp - 0xec], 0x1d
mov dword [ebp - 0xe8], 0x5f
lea esi, [ebp - 0xf4]
lea edi, [ebp - 0xe0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xf4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x6995b8
lea eax, [ebx + 0x6d8]
movsd dword es:[edi], dword [esi]
call fcn.0054ae1d
push 0
push 0x24
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push dword [0x69c74c]
lea esi, [ebp - 0xe0]
push dword [0x69c748]
lea eax, [ebx + 0x78c]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x6991b8
movsd dword es:[edi], dword [esi]
call fcn.0054ae1d
push 0
push 0x24
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push dword [0x69c75c]
lea esi, [ebp - 0xe0]
push dword [0x69c758]
lea eax, [ebx + 0x840]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x6999b8
movsd dword es:[edi], dword [esi]
call fcn.0054ae1d
push 0
push 0x24
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push dword [0x69c764]
lea esi, [ebp - 0xe0]
push dword [0x69c760]
lea eax, [ebx + 0x8f4]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x699db8
movsd dword es:[edi], dword [esi]
call fcn.0054ae1d
push 0
push 0x24
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push dword [0x69c76c]
lea esi, [ebp - 0xe0]
push dword [0x69c768]
lea eax, [ebx + 0x9a8]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x69a1b8
movsd dword es:[edi], dword [esi]
call fcn.0054ae1d
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebx + 0x6c8]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
lea eax, [ebp - 0xcc]
push 0x2909
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
xor esi, esi
push esi
push eax
lea ecx, [ebx + 0x604]
mov byte [ebp - 4], 0x26
call fcn.004106e6
xor edi, edi
push esi
inc edi
push edi
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x23
call fcn.00410779
lea eax, [ebp - 0xcc]
push 0x2896
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x620]
mov byte [ebp - 4], 0x27
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x23
call fcn.00410779
lea eax, [ebp - 0xcc]
push 0x289d
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x63c]
mov byte [ebp - 4], 0x28
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x23
call fcn.00410779
lea eax, [ebp - 0xcc]
push 0x28d5
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x658]
mov byte [ebp - 4], 0x29
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x23
call fcn.00410779
lea eax, [ebp - 0xcc]
push 0x2879
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x674]
mov byte [ebp - 4], 0x2a
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x23
call fcn.00410779
lea eax, [ebp - 0xcc]
push 0x28d0
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x690]
mov byte [ebp - 4], 0x2b
call fcn.004106e6
push esi
mov byte [ebp - 4], 0x23
push edi
lea ecx, [ebp - 0xcc]
call fcn.00410779
lea eax, [ebp - 0xcc]
push 0x2a06
push eax
call fcn.004b9340
pop ecx
pop ecx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebx + 0x6ac]
mov byte [ebp - 4], 0x2c
call fcn.004106e6
push esi
push edi
lea ecx, [ebp - 0xcc]
call fcn.00410779
cmp dword [ebp - 0xd0], esi
je 0x57309c
push dword [ebp - 0xd0]
call dword [sym.imp.GDI32.dll_DeleteObject]
push esi
push edi
lea ecx, [ebp - 0x2c]
call fcn.00410779
mov eax, ebx
call fcn.0052359c
ret 4