Function at 0x414720
Capabilities:
Access peb ldr_data
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5362f0
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x575494]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
lea esi, [ebx + 0x2c]
mov dword [ebx + 0x48], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x40], edi
mov dword [esi + 4], edi
mov byte [esi + 0xc], 0
mov eax, dword [ebx + 0x394]
push 1
push eax
mov ecx, esi
call fcn.0051c380
mov eax, dword [ebx + 0x3a0]
test eax, eax
je 0x4147b2
cmp dword [ebx + 0x3a4], 0
je 0x4147b2
push 0x20
push eax
lea ecx, [ebx + 0x3ac]
push 0x20
push ecx
call fcn.0051ed38
mov edx, dword [ebx + 0x3a4]
push 8
push edx
lea eax, [ebx + 0x3cc]
push 8
push eax
call fcn.0051ed38
add esp, 0x20
push 0x8108
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x5776a0
call fcn.00471380
mov dword [esp + 0x38], 0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4147db
mov ecx, 0x54ee24
mov eax, dword [esi + 4]
test eax, eax
je 0x41480b
test ecx, ecx
je 0x41480b
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
test eax, eax
jne 0x414817
mov edx, dword [esi]
mov eax, dword [edx + 4]
add eax, esi
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
jmp 0x414817
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [eax + esi], 0x57
push 0x8100
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 1
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x41484f
push eax
call fcn.0051eadb
add esp, 4
lea esi, [ebx + 0x50]
test edi, edi
je 0x41488f
push 0x3e9
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x41487b
mov ecx, dword [ebp + 8]
push 0x3e9
push ecx
mov edi, eax
call fcn.00435080
mov edi, dword [ebp + 8]
jmp 0x41489f
mov edx, dword [esi + 0x10]
mov eax, dword [edx + 4]
lea esi, [eax + esi + 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi], eax
jmp 0x41489f
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx + 4]
lea esi, [edx + esi + 0x10]
mov dword [esi], 0x57
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4148ac
mov ecx, 0x54ee24
mov eax, dword [ebx + 0x64]
lea esi, [ebx + 0x60]
test eax, eax
je 0x4148df
test ecx, ecx
je 0x4148df
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
test eax, eax
jne 0x4148eb
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
jmp 0x4148eb
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [eax + esi], 0x57
push 0x80ed
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 2
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x414923
push eax
call fcn.0051eadb
add esp, 4
lea esi, [ebx + 0x74]
test edi, edi
je 0x414963
push 0x3ea
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x41494f
mov ecx, dword [ebp + 8]
push 0x3ea
push ecx
mov edi, eax
call fcn.00435080
mov edi, dword [ebp + 8]
jmp 0x414973
mov edx, dword [esi + 0x10]
mov eax, dword [edx + 4]
lea esi, [eax + esi + 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi], eax
jmp 0x414973
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx + 4]
lea esi, [edx + esi + 0x10]
mov dword [esi], 0x57
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x414980
mov ecx, 0x54ee24
mov eax, dword [ebx + 0x88]
lea esi, [ebx + 0x84]
test eax, eax
je 0x4149b9
test ecx, ecx
je 0x4149b9
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
test eax, eax
jne 0x4149c5
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
jmp 0x4149c5
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [eax + esi], 0x57
push 0x80ea
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 3
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4149fd
push eax
call fcn.0051eadb
add esp, 4
lea esi, [ebx + 0x98]
test edi, edi
je 0x414a40
push 0x3eb
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x414a2c
mov ecx, dword [ebp + 8]
push 0x3eb
push ecx
mov edi, eax
call fcn.00435080
mov edi, dword [ebp + 8]
jmp 0x414a50
mov edx, dword [esi + 0x10]
mov eax, dword [edx + 4]
lea esi, [eax + esi + 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi], eax
jmp 0x414a50
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx + 4]
lea esi, [edx + esi + 0x10]
mov dword [esi], 0x57
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x414a5d
mov ecx, 0x54ee24
mov eax, dword [ebx + 0xac]
lea esi, [ebx + 0xa8]
test eax, eax
je 0x414a96
test ecx, ecx
je 0x414a96
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
test eax, eax
jne 0x414aa2
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
mov dword [esp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
jmp 0x414aa2
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [eax + esi], 0x57
cmp dword [ebx + 0x3a0], 0
je 0x415676
cmp dword [ebx + 0x3a4], 0
je 0x415676
cmp dword [ebx + 0x398], 0x16b
mov ecx, edi
jne 0x415305
lea esi, [ebx + 0x368]
mov eax, 0xbc7
mov edx, esi
call fcn.0042c7b0
call fcn.004c87d0
test al, al
je 0x414ca3
push 0x7591
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 4
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
lea edx, [ebx + 0x344]
mov eax, 0x17e9
mov ecx, edi
call fcn.004350e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x414b3c
mov ecx, 0x54ee24
lea eax, [ebx + 0x344]
call fcn.00405d30
call fcn.0042c850
push 0x8d5e
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 5
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x414b89
mov eax, 0x54ee24
push 0
push eax
call fcn.0042c890
push 0x8d5f
lea edx, [esp + 0x24]
push edx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 6
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x414bce
mov eax, 0x54ee24
push 1
push eax
call fcn.0042c890
push 0x8d60
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 7
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x414c13
mov eax, 0x54ee24
push 2
push eax
call fcn.0042c890
push 0x8d61
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 8
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x414c58
mov eax, 0x54ee24
push 3
push eax
call fcn.0042c890
mov edi, ebx
call fcn.004164d0
push eax
mov edx, esi
call fcn.00409270
mov eax, dword [esi + 8]
test eax, eax
je 0x414c89
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.0042c990
mov edi, dword [ebp + 8]
jmp 0x414cc5
mov edx, dword [esi + 0x10]
mov eax, dword [edx + 4]
lea eax, [eax + esi + 0x10]
mov dword [eax], 6
call fcn.0042c990
mov edi, dword [ebp + 8]
jmp 0x414cc5
mov eax, dword [esi + 8]
test eax, eax
je 0x414cb5
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x414cc5
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx + 4]
lea esi, [edx + esi + 0x10]
mov dword [esi], 6
mov eax, 0xbd9
mov ecx, edi
lea edx, [ebx + 0x200]
call fcn.004350e0
lea edx, [ebx + 0x224]
mov eax, 0x7f2
mov ecx, edi
call fcn.004350e0
mov eax, dword [ebx + 0x3a0]
mov ecx, dword [eax + 0x18]
push 0xa
push 0xa
push 0xa
push ecx
call fcn.004c8420
push eax
call fcn.004c84a0
push eax
push 0x20d6
mov eax, edi
lea ecx, [ebx + 0x2d8]
call fcn.00512170
lea edx, [ebx + 0x320]
push 3
mov eax, 0x11a3
mov ecx, edi
call fcn.00444e90
call fcn.004c8320
test al, al
je 0x414ef5
push 0x758f
lea edx, [esp + 0x24]
push edx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 9
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, 0x17e7
mov ecx, edi
lea edx, [ebx + 0xbc]
call fcn.004350e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x414d87
mov ecx, 0x54ee24
lea eax, [ebx + 0xbc]
call fcn.00405d30
push 0x7590
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xa
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, 0x17e8
mov ecx, edi
lea edx, [ebx + 0xe0]
call fcn.004350e0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x414de1
mov eax, 0x54ee24
mov ecx, eax
lea eax, [ebx + 0xe0]
call fcn.00405d30
push 0x84f2
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xb
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x414e2b
mov eax, 0x54ee24
mov ecx, eax
lea eax, [ebx + 0x200]
call fcn.00405d30
movzx edx, byte [ebx + 0x3c0]
push edx
lea eax, [ebx + 0x200]
call fcn.00428640
call fcn.004c83a0
test al, al
je 0x414eb1
push 0x84f3
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xc
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x414e91
mov ecx, 0x54ee24
lea eax, [ebx + 0x224]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3c1]
push ecx
lea eax, [ebx + 0x224]
call fcn.00428640
jmp 0x414edc
mov eax, dword [ebx + 0x22c]
test eax, eax
je 0x414ec6
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x414edc
mov edx, dword [ebx + 0x234]
mov eax, dword [edx + 4]
lea eax, [eax + ebx + 0x234]
mov dword [eax], 6
mov ecx, dword [ebx + 0x3a0]
mov ecx, dword [ecx + 0x18]
lea edx, [ebx + 0x320]
call fcn.00444f30
jmp 0x414f9d
mov eax, dword [ebx + 0x208]
test eax, eax
je 0x414f0c
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
jmp 0x414f28
mov edx, dword [ebx + 0x210]
mov eax, dword [edx + 4]
lea esi, [eax + ebx + 0x210]
mov dword [esi], 6
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebx + 0x22c]
test eax, eax
je 0x414f39
push 0
push eax
call esi
jmp 0x414f4f
mov ecx, dword [ebx + 0x234]
mov edx, dword [ecx + 4]
lea eax, [edx + ebx + 0x234]
mov dword [eax], 6
mov eax, dword [ebx + 0x2e0]
test eax, eax
je 0x414f60
push 0
push eax
call esi
jmp 0x414f76
mov eax, dword [ebx + 0x2e8]
mov ecx, dword [eax + 4]
lea eax, [ecx + ebx + 0x2e8]
mov dword [eax], 6
mov eax, dword [ebx + 0x328]
test eax, eax
je 0x414f87
push 0
push eax
call esi
jmp 0x414f9d
mov edx, dword [ebx + 0x330]
mov eax, dword [edx + 4]
lea eax, [eax + ebx + 0x330]
mov dword [eax], 6
lea edx, [ebx + 0x170]
mov eax, 0x7e4
mov ecx, edi
call fcn.004350e0
mov eax, 0x7f0
mov ecx, edi
lea edx, [ebx + 0x1dc]
call fcn.004350e0
mov ecx, dword [ebx + 0x3a0]
mov edx, dword [ecx + 0x10]
push 1
push 1
push 1
push edx
call fcn.004c85a0
push eax
call fcn.004c8620
push eax
push 0x20d5
mov eax, edi
lea ecx, [ebx + 0x2fc]
call fcn.00512170
call fcn.004c8520
test al, al
push 0x84e2
lea eax, [esp + 0x24]
mov ecx, 0x5776a0
push eax
je 0x41513a
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xd
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415039
mov ecx, 0x54ee24
lea eax, [ebx + 0x1dc]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3b9]
push ecx
lea eax, [ebx + 0x1dc]
call fcn.00428640
push 0x758d
lea edx, [esp + 0x24]
push edx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xe
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, 0x17e5
mov ecx, edi
lea edx, [ebx + 0x104]
call fcn.004350e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4150a6
mov ecx, 0x54ee24
lea eax, [ebx + 0x104]
call fcn.00405d30
push 0x758e
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xf
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, 0x17e6
mov ecx, edi
lea edx, [ebx + 0x128]
call fcn.004350e0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x415100
mov eax, 0x54ee24
mov ecx, eax
lea eax, [ebx + 0x128]
call fcn.00405d30
mov eax, dword [ebx + 0x178]
test eax, eax
je 0x415125
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4151dc
mov ecx, dword [ebx + 0x180]
mov edx, dword [ecx + 4]
lea eax, [edx + ebx + 0x180]
jmp 0x4151d6
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x10
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415168
mov ecx, 0x54ee24
lea eax, [ebx + 0x170]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3ad]
push ecx
lea eax, [ebx + 0x170]
call fcn.00428640
mov eax, dword [ebx + 0x1e4]
test eax, eax
je 0x41519b
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4151b1
mov edx, dword [ebx + 0x1ec]
mov eax, dword [edx + 4]
lea esi, [eax + ebx + 0x1ec]
mov dword [esi], 6
mov eax, dword [ebx + 0x304]
test eax, eax
je 0x4151c6
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4151dc
mov ecx, dword [ebx + 0x30c]
mov edx, dword [ecx + 4]
lea eax, [edx + ebx + 0x30c]
mov dword [eax], 6
mov eax, 0x7e8
mov ecx, edi
lea edx, [ebx + 0x194]
call fcn.004350e0
push 0x84e6
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x11
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x415226
push eax
call fcn.0051eadb
add esp, 4
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415233
mov ecx, 0x54ee24
lea eax, [ebx + 0x194]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3b8]
push ecx
lea eax, [ebx + 0x194]
call fcn.00428640
mov eax, 0x7e5
mov ecx, edi
lea edx, [ebx + 0x1b8]
call fcn.004350e0
call fcn.004c7af0
test al, al
jne 0x4152a8
call fcn.004c7b70
test al, al
jne 0x4152a8
mov eax, dword [ebx + 0x1c0]
test eax, eax
je 0x41528d
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x41566f
mov edx, dword [ebx + 0x1c8]
mov eax, dword [edx + 4]
lea eax, [eax + ebx + 0x1c8]
mov dword [eax], 6
jmp 0x41566f
push 0x84e9
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x12
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4152e0
push eax
call fcn.0051eadb
add esp, 4
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4152ed
mov ecx, 0x54ee24
lea eax, [ebx + 0x1b8]
call fcn.00405d30
movzx edx, byte [ebx + 0x3ac]
push edx
jmp 0x415664
mov eax, 0x7ea
lea edx, [ebx + 0x14c]
call fcn.004350e0
push 0x84ea
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x13
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x41534d
push eax
call fcn.0051eadb
add esp, 4
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x41535a
mov ecx, 0x54ee24
lea eax, [ebx + 0x14c]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3b0]
push ecx
lea eax, [ebx + 0x14c]
call fcn.00428640
push 0x757d
lea edx, [esp + 0x24]
push edx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x14
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4153b0
push eax
call fcn.0051eadb
add esp, 4
mov eax, 0x17cd
mov ecx, edi
lea edx, [ebx + 0x248]
call fcn.004350e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x4153cf
mov ecx, 0x54ee24
lea eax, [ebx + 0x248]
call fcn.00405d30
push 0x757e
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x15
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x415412
push eax
call fcn.0051eadb
add esp, 4
mov eax, 0x17ce
mov ecx, edi
lea edx, [ebx + 0x26c]
call fcn.004350e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415431
mov ecx, 0x54ee24
lea eax, [ebx + 0x26c]
call fcn.00405d30
push 0x757f
lea ecx, [esp + 0x24]
push ecx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x16
call fcn.00508010
mov byte [esp + 0x38], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x415474
push eax
call fcn.0051eadb
add esp, 4
mov eax, 0x17d0
mov ecx, edi
lea edx, [ebx + 0x290]
call fcn.004350e0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415493
mov ecx, 0x54ee24
lea eax, [ebx + 0x290]
call fcn.00405d30
mov eax, dword [ebx + 0x3b4]
cmp eax, 0x40
jg 0x4154ad
xor eax, eax
jmp 0x4154ba
xor edx, edx
cmp eax, 0xc0
setge dl
lea eax, [edx + 1]
push 1
push 1
push 1
push eax
push 2
push 0
push 0x20d4
lea ecx, [ebx + 0x2b4]
mov eax, edi
call fcn.00512170
cmp dword [ebx + 0x398], 0x148
jne 0x41566f
mov eax, 0x7e4
mov ecx, edi
lea edx, [ebx + 0x170]
call fcn.004350e0
push 0x84e2
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x17
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415536
mov ecx, 0x54ee24
lea eax, [ebx + 0x170]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3ad]
push ecx
lea eax, [ebx + 0x170]
call fcn.00428640
mov eax, 0x7e8
mov ecx, edi
lea edx, [ebx + 0x194]
call fcn.004350e0
push 0x84e6
lea edx, [esp + 0x24]
push edx
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x18
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4155a3
mov eax, 0x54ee24
mov ecx, eax
lea eax, [ebx + 0x194]
call fcn.00405d30
movzx eax, byte [ebx + 0x3b8]
push eax
lea eax, [ebx + 0x194]
call fcn.00428640
mov eax, 0x7e5
mov ecx, edi
lea edx, [ebx + 0x1b8]
call fcn.004350e0
call fcn.004c7af0
test al, al
jne 0x415614
call fcn.004c7b70
test al, al
jne 0x415614
mov eax, dword [ebx + 0x1c0]
test eax, eax
je 0x4155fc
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x41566f
mov ecx, dword [ebx + 0x1c8]
mov edx, dword [ecx + 4]
lea eax, [edx + ebx + 0x1c8]
mov dword [eax], 6
jmp 0x41566f
push 0x84e9
lea eax, [esp + 0x24]
push eax
mov ecx, 0x5776a0
call fcn.00471380
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0x19
call fcn.00508010
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0
call fcn.00445e70
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x415651
mov ecx, 0x54ee24
lea eax, [ebx + 0x1b8]
call fcn.00405d30
movzx ecx, byte [ebx + 0x3ac]
push ecx
lea eax, [ebx + 0x1b8]
call fcn.00428640
mov edi, ebx
call fcn.004156b0
mov dword [esp + 0x38], 0xffffffff
mov eax, dword [esp + 0x14]
test eax, eax
je 0x41568f
push eax
call fcn.0051eadb
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc