Function at 0x401930
Capabilities:
Enumerate gui resources
Get file size
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6dc
mov eax, dword [0x414320]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword fs:[0x2c]
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov dword [ebp - 0x6d8], eax
mov dword [0x415168], eax
mov eax, dword [0x4151c4]
mov eax, dword [ecx + eax*4]
push edi
xor edi, edi
mov ecx, 1
add dword [eax + 4], ecx
push edi
lea edx, [ebp - 0x688]
push edx
lea eax, [ebp - 0x6d0]
push eax
mov dword [ebp - 0x6ac], ebx
mov dword [ebp - 0x6b4], edi
mov dword [ebp - 0x6b0], edi
mov dword [ebp - 0x6a8], 0x9e
mov dword [ebp - 0x688], ecx
mov dword [ebp - 0x684], edi
mov dword [ebp - 0x680], edi
mov dword [ebp - 0x67c], edi
call sub.gdiplus.dll_GdiplusStartup
push 0x48
xor eax, eax
lea ecx, [ebp - 0x1ec]
push edi
push ecx
mov dword [ebp - 0x6c4], edi
mov dword [ebp - 0x6bc], eax
mov dword [ebp - 0x6b8], eax
call fcn.00405430
push edi
mov dword [ebp - 0x6c0], edi
mov dword [ebp - 0x6a4], edi
call fcn.00405396
mov edx, dword [0x415160]
add esp, 0x10
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x6ac]
push edi
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.USER32.dll_GetWindowDC]
mov esi, eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [ebp - 0x6a4]
push ecx
lea edx, [ebp - 0x6c0]
push edx
call sub.gdiplus.dll_GdipGetImageEncodersSize
cmp esi, edi
je 0x401a3b
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
lea eax, [ebp - 0x6c4]
push eax
push 1
push 0
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
lea ecx, [ebp - 0x66c]
push ecx
push 0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x6d0]
push edx
call sub.gdiplus.dll_GdiplusShutdown
mov ecx, dword [0x415168]
lea eax, [ebp - 0x6a0]
push eax
inc ecx
push ecx
call dword [sym.imp.GDI32.dll_GetClipBox]
mov edi, eax
mov dword [ebp - 0x6d0], edi
test edi, edi
jle 0x401a94
mov edx, dword [0x415168]
mov dword [edx], 0
cmp dword [0x415164], 0
je 0x401aa9
lea eax, [ebx + 0x9e]
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6d8], 0
jne 0x401ace
push ebx
call fcn.004052bd
add esp, 4
test eax, eax
je 0x401ace
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.00405200
add esp, 4
test edi, edi
jns 0x401ae6
xor edi, edi
mov dword [ebp - 0x6a8], 0x237
mov dword [ebp - 0x6d0], edi
jmp 0x401af0
add dword [ebp - 0x6b4], 0x196
mov eax, dword [0x415164]
mov edx, dword [0x415160]
sub eax, 2
mov dword [0x415164], eax
lea eax, [edx + eax + 1]
mov dword [0x415160], eax
test edi, edi
je 0x401b3a
lea ecx, [ebp - 0x690]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x100
lea edx, [ebp - 0x324]
push edx
push 0x10
call sub.OLEACC.dll_GetStateTextA
mov dword [0x415164], 0xfffffbcb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
je 0x401b52
add dword [ebp - 0x6a8], 0xd6
jmp 0x401b5c
add dword [ebp - 0x6b4], 0x136
mov dword [0x415170], esi
add esi, 0x7a9
lea ecx, [ebp - 0x6a4]
push ecx
lea eax, [esi - 0x509]
push esi
mov dword [ebp - 0x6cc], esi
mov dword [0x415160], eax
mov dword [ebp - 0x6a4], 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
inc eax
push eax
call fcn.00403dcb
add esp, 4
test eax, eax
je 0x401bab
mov edx, dword [ebp - 0x6b4]
add dword [ebp - 0x6a8], edx
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x688]
push eax
mov dword [ebp - 0x6a4], 0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0x6b4]
lea ecx, [ebp - 0x688]
push ecx
mov ecx, dword [ebp - 0x6a8]
lea edx, [ebp - 0x6a4]
push edx
push eax
push ecx
push 0
call sub.OLEACC.dll_AccessibleObjectFromEvent
mov edx, dword [str.search_does_not_include]
mov eax, dword [0x40d294]
mov ecx, dword [0x40d298]
inc dword [ebp - 0x6a8]
push 0x12
mov dword [ebp - 0x1a4], edx
mov edx, dword [0x40d29c]
push 0
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x1a0], eax
mov eax, dword [0x40d2a0]
mov dword [ebp - 0x19c], ecx
mov ecx, dword [0x40d2a4]
push 0
lea edx, [ebp - 0x66c]
push edx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], ecx
call dword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsA]
test eax, eax
je 0x401c5a
mov dword [ebp - 0x6b0], 1
cmp dword [0x415170], 0
je 0x401c9c
push esi
call dword [sym.imp.USER32.dll_UnhookWinEvent]
test eax, eax
je 0x401c74
add dword [ebp - 0x6b0], esi
lea eax, [ebp - 0x1a4]
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x401c96
mov ecx, dword [ebp - 0x6b4]
lea edx, [ebx + ecx]
add dword [ebp - 0x6b0], edx
dec dword [ebp - 0x6a8]
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0
push 0
call dword [sym.imp.OPENGL32.dll_wglMakeCurrent]
test eax, eax
je 0x401cbc
mov eax, dword [ebp - 0x6b4]
add dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6b0]
push ecx
call dword [sym.imp.OPENGL32.dll_wglDeleteContext]
test eax, eax
jne 0x401da9
add dword [ebp - 0x6b0], 0x14
push 0x7f00
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
test eax, eax
jne 0x401cee
inc dword [ebp - 0x6b4]
mov edx, dword [ebp - 0x6b4]
mov ecx, dword [ebp - 0x6a8]
push 0x1f
push edx
mov edx, dword [0x415160]
push ecx
lea eax, [edi - 1]
push eax
push edx
push edi
mov dword [ebp - 0x6c0], eax
call dword [sym.imp.COMCTL32.dll_ImageList_Draw]
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test esi, esi
je 0x401d35
test eax, eax
je 0x401d35
mov esi, dword [ebp - 0x6cc]
add dword [ebp - 0x6b0], esi
jmp 0x401d42
add dword [ebp - 0x6b0], 0xa
mov esi, dword [ebp - 0x6cc]
mov eax, dword [0x415160]
mov ecx, dword [0x415164]
mov edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x6c0]
push eax
push 0
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x684], edx
call dword [sym.imp.USER32.dll_ReleaseDC]
lea ecx, [esi + 0x2f]
push ecx
mov ecx, dword [0x415160]
lea edx, [esi + 0x38]
push edx
mov dword [ebp - 0x6a4], eax
mov eax, dword [0x415164]
push eax
push ecx
lea edx, [ebp - 0x688]
push edx
call dword [sym.imp.USER32.dll_SetRect]
test eax, eax
je 0x401db0
cmp dword [ebp - 0x6a4], 0
je 0x401db0
push 0
call fcn.00405198
add dword [ebp - 0x6b0], 4
cmp dword [ebp - 0x6a8], 0x7a9
jge 0x401dcf
mov eax, dword [ebp - 0x6b4]
add dword [ebp - 0x6a8], eax
mov edx, dword [ebp - 0x6b4]
mov ecx, dword [ebp - 0x6d8]
mov eax, dword [ebp - 0x6a8]
push 0
push ebx
push 0
push ebx
push edx
mov edx, dword [0x415160]
push 0xdc
push eax
mov dword [ebp + ebx - 0x300], ecx
mov ecx, dword [0x415164]
push ecx
push edx
lea ecx, [ebp - 0x52c]
push ecx
mov edx, ecx
push edx
push eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x6c8], eax
mov dword [0x415174], eax
mov dword [0x415170], esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [0x415178], eax
mov eax, esi
cdq
add edi, 4
idiv edi
xor ebx, ebx
mov edi, eax
mov eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, 0x3a
cdq
idiv edi
mov edx, dword [ebp - 0x6a4]
test edi, edi
jle 0x401ee6
cmp ebx, 0xab
jne 0x401e7e
lea ecx, [eax + eax + 1]
mov edx, eax
shl edx, cl
lea ecx, [eax + 1]
test ecx, ecx
jle 0x401edd
mov edi, edi
imul edx, eax
add edx, edx
add edx, edx
add edx, edx
dec ecx
jne 0x401e70
jmp 0x401edd
cmp ebx, 0xe4
jne 0x401eab
mov ecx, edi
sub ecx, dword [ebp - 0x6b0]
lea esi, [eax + 1]
add ecx, ecx
test esi, esi
jle 0x401ea3
imul ecx, eax
add ecx, ecx
add ecx, ecx
add ecx, ecx
dec esi
jne 0x401e97
mov dword [ebp - 0x6c4], ecx
jmp 0x401ed7
cmp ebx, 0x187
jne 0x401edd
mov ecx, edi
sub ecx, dword [ebp - 0x6b0]
lea esi, [eax + 1]
lea ecx, [ecx + ecx*2]
test esi, esi
jle 0x401ed1
imul ecx, eax
add ecx, ecx
add ecx, ecx
add ecx, ecx
dec esi
jne 0x401ec5
mov dword [ebp - 0x6a4], ecx
mov esi, dword [ebp - 0x6cc]
inc ebx
cmp ebx, edi
jl 0x401e57
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [ebp - 0x6c4]
push eax
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_HeapCreate]
push 1
lea edx, [ebp - 0x688]
mov edi, eax
mov eax, dword [ebp - 0x6c0]
push edx
push eax
call dword [sym.imp.GDI32.dll_GetBoundsRect]
mov ebx, dword [ebp - 0x6b0]
test eax, eax
jne 0x401f22
add ebx, 0x1c
jmp 0x401f25
add ebx, 0x2e
lea ecx, [ebp - 0x690]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea edx, [ebp - 0x690]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp dword [ebp - 0x684], 0
je 0x40380d
cmp dword [ebp - 0x688], 0
jne 0x401f65
add ebx, esi
mov dword [ebp - 0x6b0], ebx
jmp 0x401f7b
lea eax, [ebp - 0x690]
add ebx, 6
push eax
mov dword [ebp - 0x6b0], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x6c8], 0
mov eax, 0x10
jne 0x401f8e
mov eax, 0x10000
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x6dc], eax
xor eax, eax
mov dword [ebp - 0x688], esi
mov dword [ebp - 0x684], 0x4a
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x67c], eax
test ebx, ebx
jne 0x401fca
push 0x11
call dword [sym.imp.USER32.dll_GetSysColorBrush]
jmp 0x401fd0
mov eax, dword [ebp - 0x6ac]
mov ebx, dword [ebp - 0x6ac]
lea ecx, [esi*8]
sub ecx, esi
add ecx, ecx
add ecx, ecx
cmp dword [ebp - 0x6a8], ecx
jge 0x402011
push eax
lea edx, [ebp - 0x688]
push edx
lea eax, [ebx - 1]
push eax
call dword [sym.imp.USER32.dll_FillRect]
mov edx, dword [ebp - 0x6c8]
lea ecx, [ebp - 0x688]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x6c8]
mov edi, dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x1e4]
push eax
push ecx
call edi
inc dword [ebp - 0x6a8]
lea edx, [esi - 0x7d]
cmp edx, 0x3c
jbe 0x40380d
cmp dword [ebp - 0x6b0], 0
je 0x402052
push 6
lea ecx, [ebp - 0x688]
push ecx
push eax
call dword [sym.imp.GDI32.dll_Polyline]
mov eax, dword [ebp - 0x6c8]
lea edx, [ebp - 0x1e4]
push edx
push eax
call edi
mov ecx, dword [ebp - 0x6c8]
push 0xd
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
test eax, eax
je 0x402084
mov edx, dword [ebp - 0x6b0]
lea eax, [edx + edx]
mov dword [ebp - 0x6a8], eax
inc dword [ebp - 0x6b4]
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
lea ecx, [ebp - 0x1a4]
push ecx
mov edi, eax
call fcn.00404f0a
add esp, 4
push 0x401040
push 0xa4
push 0x81
push edi
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
jne 0x4020e8
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x6c8], 0
je 0x4020e8
push 0
push 0x104
lea edx, [ebp - 0x1a4]
push edx
push 0
push eax
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp dword [ebp - 0x6c8], 0
je 0x402109
dec dword [ebp - 0x6a8]
jmp 0x402113
mov dword [ebp - 0x6b4], 0x23
cmp esi, 0x21
jne 0x402142
lea eax, [ebp - 0x1a4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402121
mov ecx, dword [ebp - 0x6b0]
sub eax, edx
push eax
lea eax, [ebp - 0x1a4]
push eax
push 0xa
push ecx
push ebx
call dword [sym.imp.GDI32.dll_TextOutA]
push 0xbc
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x4c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402176
sub eax, ecx
push eax
lea edx, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ebx, dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x353535
call ebx
push eax
mov eax, dword [0x415160]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x6ac]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ecx
push 0
push edx
push eax
call edi
mov edx, dword [0x41516c]
push 0x17
lea ecx, [ebp - 0x4c]
push ecx
push 0x449
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [ebp - 0x6a4]
push eax
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402227
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00403f8c
add esp, 4
push 0xe4
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x68]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
jmp 0x402260
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402260
sub eax, ecx
push eax
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov edx, dword [ebp - 0x6ac]
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0xe
lea ecx, [ebp - 0x66c]
push ecx
push edx
call esi
mov eax, dword [0x41516c]
push 0
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
push 0xd6d6d6
call ebx
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x41516c]
push 0x19
lea edx, [ebp - 0x68]
push edx
push 0x5b7
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
cmp dword [0x415160], 0
je 0x4022fc
mov ecx, dword [0x415168]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402323
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xbc
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x58]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402357
sub eax, edx
push eax
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ebx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
cmp dword [0x415160], 0
je 0x4023a1
mov ecx, dword [0x415168]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
mov edx, dword [0x41516c]
push 0
push edx
call dword [sym.imp.USER32.dll_EndDialog]
mov ecx, dword [0x41516c]
push 0x34
lea eax, [ebp - 0x58]
push eax
push 0x460
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402410
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0x98
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x64]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402444
sub eax, edx
push eax
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
cmp dword [0x415160], 0
je 0x402473
mov edx, dword [0x415168]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x6a4]
push eax
call ebx
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
mov edx, dword [0x41516c]
push 0x2b
lea ecx, [ebp - 0x64]
push ecx
push 0x473
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov edx, dword [ebp - 0x6a4]
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0xe
lea ecx, [ebp - 0x66c]
push ecx
push edx
call esi
mov eax, dword [0x41516c]
push 0
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov ecx, dword [ebp - 0x6a4]
push ecx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4024fc
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0xe8
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402530
sub eax, edx
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov edx, dword [0x41516c]
push 0x26
lea ecx, [ebp - 0x5c]
push ecx
push 0x9f6
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
cmp dword [0x415160], 0
je 0x402576
mov eax, dword [0x415168]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
mov eax, dword [ebp - 0x6a4]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x6a4]
push ecx
call ebx
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4025d9
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xcc
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x54]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402610
sub eax, ecx
push eax
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov edx, dword [ebp - 0x6a4]
push edx
call ebx
mov eax, dword [0x415164]
mov ecx, dword [0x415160]
mov edx, dword [0x41516c]
push eax
push 0
push ecx
push edx
call edi
mov eax, dword [0x41516c]
push 0
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, dword [ebp - 0x6a4]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x6a4]
push ecx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x40269a
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0xe8
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x68]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4026d0
sub eax, ecx
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0x3d3d3d
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ecx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ecx
call esi
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x40275c
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xd8
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402790
sub eax, ecx
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov edx, dword [0x41516c]
push 0
push edx
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, dword [0x415164]
mov ecx, dword [0x415160]
mov edx, dword [0x41516c]
push eax
push 0
push ecx
push edx
call edi
mov edx, dword [ebp - 0x6a4]
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0xe
lea ecx, [ebp - 0x66c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x6a4]
push eax
call ebx
mov ecx, dword [ebp - 0x6a4]
push ecx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x40281b
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0xe8
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402850
sub eax, ecx
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ecx, dword [0x41516c]
push 0
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ecx, dword [ebp - 0x6a4]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ecx
call esi
mov edx, dword [ebp - 0x6a4]
push edx
call ebx
mov eax, dword [ebp - 0x6a4]
push eax
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4028db
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00403f8c
add esp, 4
push 0xe8
call fcn.00403dcb
mov ebx, eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
jmp 0x402910
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402910
sub eax, ecx
push eax
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov edx, dword [ebp - 0x6ac]
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0xe
lea ecx, [ebp - 0x66c]
push ecx
push edx
call esi
mov eax, dword [0x415164]
mov ecx, dword [0x415160]
mov edx, dword [0x41516c]
push eax
push 0
push ecx
push edx
call edi
push 0x292929
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
mov eax, dword [0x415160]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x41516c]
push 0
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
push ebx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4029a4
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0x98
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x50]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4029d8
sub eax, ecx
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xb3b3b3
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ebx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x6a4]
push ecx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402a6b
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0xe8
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402aa0
sub eax, edx
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov edx, dword [0x41516c]
push 0x34
lea ecx, [ebp - 0x5c]
push ecx
push 0xb49
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
cmp dword [0x415160], 0
je 0x402ae6
mov eax, dword [0x415168]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
mov eax, dword [ebp - 0x6a4]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
mov ebx, dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0xf7f7f7
call ebx
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x6a4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x6a4]
push eax
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402b68
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00403f8c
add esp, 4
push 0xb4
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x64]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402ba0
sub eax, ecx
push eax
lea edx, [ebp - 0x64]
push edx
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xe2e2e2
call ebx
push eax
mov eax, dword [0x415160]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x6ac]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
mov edx, dword [0x41516c]
push 0x2d
lea ecx, [ebp - 0x64]
push ecx
push 0x568
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [ebp - 0x6a4]
push eax
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402c3f
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00403f8c
add esp, 4
push 0x8c
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x60]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402c73
sub eax, ecx
push eax
lea edx, [ebp - 0x60]
push edx
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xbcbcbc
call ebx
push eax
mov eax, dword [0x415160]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
mov eax, dword [ebp - 0x6ac]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
mov ecx, dword [0x41516c]
push 0
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402d09
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0x90
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402d40
sub eax, edx
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
cmp dword [0x415160], 0
je 0x402d6f
mov edx, dword [0x415168]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [0x41516c]
push 0x2b
lea eax, [ebp - 0x5c]
push eax
push 0x302
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ebx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x41516c]
push 0
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402df7
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0x8c
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x50]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
jmp 0x402e30
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402e30
sub eax, ecx
push eax
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ebx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x4f4f4f
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402ec3
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xc8
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x60]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402ef7
sub eax, ecx
push eax
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ebx, dword [ebp - 0x6ac]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
mov ecx, dword [0x415164]
mov edx, dword [0x415160]
mov eax, dword [0x41516c]
push ecx
push 0
push edx
push eax
call edi
mov edx, dword [0x41516c]
push 0x36
lea ecx, [ebp - 0x60]
push ecx
push 0x963
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [0x41516c]
push 0
push eax
call dword [sym.imp.USER32.dll_EndDialog]
push 0xc7c7c7
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x402fb0
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xa4
call fcn.00403dcb
mov ebx, eax
lea eax, [ebp - 0x50]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402fe0
sub eax, ecx
push eax
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0x393939
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, dword [0x415160]
push eax
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x415164]
mov ecx, dword [0x415160]
mov edx, dword [0x41516c]
push eax
push 0
push ecx
push edx
call edi
mov edx, dword [ebp - 0x6ac]
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0xe
lea ecx, [ebp - 0x66c]
push ecx
push edx
call esi
push ebx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x403066
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xa8
call fcn.00403dcb
mov ebx, eax
lea eax, [ebp - 0x64]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403096
sub eax, edx
push eax
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
cmp dword [0x415160], 0
je 0x4030c5
mov edx, dword [0x415168]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [0x41516c]
push 0x34
lea eax, [ebp - 0x64]
push eax
push 0x770
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ecx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ecx
call esi
push ebx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x403131
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0x78
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x5c]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403162
sub eax, ecx
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xa0a0a
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ebx, dword [ebp - 0x6ac]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
cmp dword [0x415160], 0
je 0x4031e4
mov ecx, dword [0x415168]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x40320b
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xe4
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x54]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403240
sub eax, ecx
push eax
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xc5c5c5
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, dword [0x415160]
push eax
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x415164]
mov ecx, dword [0x415160]
mov edx, dword [0x41516c]
push eax
push 0
push ecx
push edx
call edi
mov ebx, dword [ebp - 0x6ac]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x41516c]
push 0
push eax
call dword [sym.imp.USER32.dll_EndDialog]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push ebx
call esi
cmp dword [0x415160], 0
je 0x4032cf
mov eax, dword [0x415168]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x6a4]
push ecx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4032f6
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0x7c
call fcn.00403dcb
mov ebx, eax
lea eax, [ebp - 0x60]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403323
sub eax, ecx
push eax
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xd2d2d2
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov ecx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ecx
call esi
push ebx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4033a9
mov edx, dword [ebp - 0x65c]
push edx
call fcn.00403f8c
add esp, 4
push 0x7c
call fcn.00403dcb
mov ebx, eax
lea eax, [ebp - 0x58]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4033d6
sub eax, edx
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x65c]
call fcn.00401810
push 0xc1c1c1
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x415160]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov edx, dword [0x41516c]
push 0
push edx
call dword [sym.imp.USER32.dll_EndDialog]
cmp dword [0x415160], 0
je 0x403444
mov eax, dword [0x415168]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x6ac]
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0xe
lea edx, [ebp - 0x66c]
push edx
push eax
call esi
push ebx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x403480
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00403f8c
add esp, 4
push pe_nt_image_headers32
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x54]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4034b4
sub eax, ecx
push eax
lea edx, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ebx, dword [ebp - 0x6ac]
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0xe
lea ecx, [ebp - 0x66c]
push ecx
push ebx
call esi
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x40352e
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0xc4
call fcn.00403dcb
mov dword [ebp - 0x6a4], eax
lea eax, [ebp - 0x50]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403562
sub eax, edx
push eax
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ebx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ebx
call esi
cmp dword [0x415160], 0
je 0x4035ac
mov ecx, dword [0x415168]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
push 0xc7c7c7
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, dword [0x415160]
push eax
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x41516c]
push 0x1d
lea eax, [ebp - 0x50]
push eax
push 0x537
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov edx, dword [ebp - 0x6a4]
push edx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x403623
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00403f8c
add esp, 4
push 0x80
call fcn.00403dcb
mov ebx, eax
lea eax, [ebp - 0x68]
add esp, 4
mov dword [ebp - 0x648], 0xf
mov dword [ebp - 0x64c], 0
mov byte [ebp - 0x65c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403653
sub eax, edx
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x65c]
call fcn.00401810
mov ecx, dword [ebp - 0x6ac]
push 0
lea edx, [ebp - 0x6b8]
push edx
push 0xe
lea eax, [ebp - 0x66c]
push eax
push ecx
call esi
mov edx, dword [0x415164]
mov eax, dword [0x415160]
mov ecx, dword [0x41516c]
push edx
push 0
push eax
push ecx
call edi
mov edx, dword [0x41516c]
push 0
push edx
call dword [sym.imp.USER32.dll_EndDialog]
cmp dword [0x415160], 0
je 0x4036c3
mov eax, dword [0x415168]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push ebx
call fcn.00403f8c
add esp, 4
cmp dword [ebp - 0x648], 0x10
jb 0x4036e4
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00403f8c
add esp, 4
xor ebx, ebx
mov dword [ebp - 0x6c4], 0
mov esi, 2
cmp dword [ebp - 0x6cc], ebx
jne 0x403702
call sub.AVIFIL32.dll_AVIFileInit
mov edi, dword [ebp - 0x6a8]
add edi, dword [ebp - 0x6cc]
test edi, edi
jle 0x40375a
mov dword [ebp - 0x6c0], edi
jmp 0x403720
mov ecx, dword [ebp - 0x6a8]
cmp ecx, dword [ebp - 0x6b4]
jle 0x40372f
inc esi
cmp esi, dword [ebp - 0x6cc]
jne 0x403746
mov edx, dword [ebp - 0x6c8]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ebx, eax
test ebx, ebx
je 0x403752
mov eax, dword [ebp - 0x6d0]
mov dword [eax], esi
dec dword [ebp - 0x6c0]
jne 0x403720
push 0x67
lea ecx, [ebp - 0x6b]
push 0
push ecx
call fcn.00405430
add esp, 0xc
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x6e6977
push edx
mov word [ebp - 0x69], 0x6d6d
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x40378f
mov dword [ebp - 0x6c4], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test edi, edi
jle 0x4037f0
mov dword [ebp - 0x6c0], edi
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x4037b0
mov eax, dword [ebp - 0x6a8]
cmp eax, dword [ebp - 0x6b4]
jle 0x4037bf
inc esi
cmp esi, dword [ebp - 0x6cc]
jne 0x4037d2
mov ecx, dword [ebp - 0x6c8]
push ecx
call edi
mov ebx, eax
test ebx, ebx
je 0x4037e8
mov edx, dword [ebp - 0x6d0]
mov dword [edx], esi
mov dword [ebp - 0x6c4], 0
dec dword [ebp - 0x6c0]
jne 0x4037b0
cmp dword [ebp - 0x6c4], 0
je 0x403822
mov eax, dword [0x415168]
mov ecx, dword [0x415160]
mov edx, dword [0x41516c]
mov dword [edx + eax], ecx
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00404906
mov esp, ebp
pop ebp
ret 0x10
cmp dword [ebp - 0x6c8], 0
je 0x403833
mov ecx, dword [ebp - 0x6d8]
jmp 0x40383f
mov ecx, dword [ebp - 0x6d0]
add ecx, dword [ebp - 0x6dc]
mov eax, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0x6b0]
lea edi, [edx + eax*2]
add edi, eax
push edi
push str.Qu5m
push ecx
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x6b8], edi
call fcn.00404310
add esp, 0xc
xor ebx, ebx
xor esi, esi
test edi, edi
jle 0x403950
mov eax, dword [ebp - 0x6b0]
add eax, 0x78
mov cl, al
add cl, cl
mov dword [ebp - 0x6c0], eax
sub eax, dword [ebp - 0x6c4]
mov byte [ebp - 0x6d1], cl
mov dword [ebp - 0x6dc], eax
lea esp, [esp]
mov eax, dword [ebp - 0x6c4]
mov ecx, dword [ebp - 0x6dc]
lea edi, [esi + eax]
lea edx, [edi + ecx]
mov ecx, dword [0x415174]
add edx, ecx
je 0x4038cc
mov eax, dword [ebp - 0x6c0]
sub eax, ecx
mov dword [ebp - 0x6a4], eax
jmp 0x4038d2
mov dword [ebp - 0x6a4], ebx
mov ecx, dword [0x41516c]
lea eax, [esi + ebx]
lea ecx, [eax + ecx + 1]
mov eax, dword [ebp - 0x6b0]
add eax, 0x78
cdq
idiv ecx
sub al, byte [ebp - 0x6a4]
add al, byte [ebp - 0x6d1]
add al, bl
add al, byte [0x415174]
add al, byte [0x41516c]
xor byte [edi], al
mov edx, dword [0x415160]
mov ecx, dword [0x415174]
push edx
lea eax, [ebp - 0x66c]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetUpdateRect]
lea edx, [esi + ebx*4]
and edx, 0x800000ff
jns 0x403935
dec edx
or edx, 0xffffff00
inc edx
add ebx, edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
dec dword [ebp - 0x6c0]
inc esi
cmp esi, dword [ebp - 0x6b8]
jl 0x4038a0
mov ecx, dword [ebp - 0x6c4]
lea eax, [ebp - 0x6d8]
mov dword [ecx + 1], eax
lea eax, [ebp - 0x224]
mov dword [ebp - 0x6a4], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403972
movzx ecx, word [ebp - 0x6b4]
sub eax, edx
movzx edx, byte [ebp - 0x6a8]
push 0
lea esi, [ebp + eax - 0x224]
movzx eax, byte [0x415164]
push 0
shl edx, 0x10
or edx, eax
push edx
mov edx, dword [ebp - 0x6d8]
push 0x1e
push 0xe6
push ecx
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageA]
mov ebx, dword [ebp - 0x6c8]
mov edi, eax
push edi
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
test eax, eax
je 0x4039df
mov eax, dword [ebp - 0x6ac]
push eax
call fcn.00404f0a
add esp, 4
mov dword [ebp - 0x6b8], eax
mov ecx, dword [str.behave_identically]
mov edx, dword [0x40d2b0]
mov eax, dword [0x40d2b4]
mov dword [esi], ecx
mov ecx, dword [0x40d2b8]
mov dword [esi + 4], edx
mov dx, word [0x40d2bc]
mov dword [esi + 8], eax
mov al, byte [0x40d2be]
mov dword [esi + 0xc], ecx
mov ecx, dword [ebp - 0x6ac]
push ecx
mov word [esi + 0x10], dx
push ebx
mov byte [esi + 0x12], al
call dword [sym.imp.USER32.dll_ShowWindow]
xor esi, esi
test ebx, ebx
jne 0x403a46
mov eax, dword [ebp - 0x6b8]
push 1
push esi
lea edx, [ebp - 0x6a4]
push edx
push eax
lea ecx, [ebp - 0x640]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconExA]
lea edx, [ebp - 0x40]
push edx
push ebx
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x415164]
jne 0x403a68
mov ecx, dword [0x415160]
add dword [ebp - 0x6b4], ecx
mov eax, dword [ebp - 0x6a4]
cmp eax, esi
je 0x403a81
push eax
push 0xffffffffffffffff
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
cmp eax, 0xffffffff
jne 0x403a95
lea edx, [ebp - 0x2a3]
push str.application
push edx
call fcn.004048ef
add esp, 8
xor eax, eax
mov word [ebp - 0x678], ax
lea eax, [ebp - 0x52c]
mov dword [ebp - 0x664], 7
mov dword [ebp - 0x668], esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x403ab7
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x52c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.00401630
cmp dword [ebp - 0x664], 8
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x6a4], esi
mov dword [ebp - 0x6b8], esi
mov dword [ebp - 0x6ac], esi
jae 0x403b00
lea eax, [ebp - 0x678]
lea edx, [ebp - 0x6a4]
push edx
push eax
call sub.ADVAPI32.dll_ConvertStringSidToSidW
test eax, eax
je 0x403b29
push 0x52
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.00404dd0
add esp, 0xc
mov eax, dword [ebp - 0x6a8]
mov edi, dword [ebp - 0x6b4]
lea edx, [ebp - 0xa0]
push edx
push esi
push eax
push edi
push ebx
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov ecx, dword [ebp - 0x67c]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
test eax, eax
je 0x403b5e
add dword [0x415160], edi
push 5
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, dword [ebp - 0x6cc]
xor ecx, ecx
lea eax, [edi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00403dcb
add esp, 4
cmp dword [0x415174], 0
mov dword [ebp - 0x6dc], eax
je 0x403bcd
mov ecx, dword [ebp - 0x6d0]
lea eax, [ebp - 0xa0]
push eax
add ecx, 2
push ecx
push 0
push ebx
call sub.MSVFW32.dll_MCIWndCreateA
add esp, 0x10
cmp dword [0x415174], 0
je 0x403bcd
push 0
push 0
push 0x806
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x6d0]
mov dword [ebp - 0xa0], edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
test eax, eax
je 0x403c0f
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x403c0f
cmp dword [ebp - 0x664], 8
jb 0x40380d
mov eax, dword [ebp - 0x678]
push eax
call fcn.00403f8c
add esp, 4
jmp 0x40380d
lea ecx, [ebp - 0x1e4]
push ecx
push ebx
call dword [sym.imp.USER32.dll_BeginPaint]
mov esi, eax
test esi, esi
je 0x403c2a
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
test edi, edi
je 0x403c58
mov ecx, dword [ebp - 0x6b4]
mov eax, edi
cdq
lea ecx, [ecx + 1]
idiv ecx
mov ecx, dword [ebp - 0x6d8]
lea edx, [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x6b0]
push edx
push eax
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
lea edx, [ebp - 0x6c0]
push edx
mov edx, dword [ebp - 0x6a4]
lea eax, [ebp - 0x6ac]
push eax
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0
push edx
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
test ebx, ebx
je 0x403c94
lea eax, [ebp - 0x690]
push eax
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [ebp - 0x6dc]
test eax, eax
je 0x403ca7
push eax
call fcn.00404dc5
add esp, 4
cmp dword [ebp - 0x664], 8
jb 0x403cbf
mov ecx, dword [ebp - 0x678]
push ecx
call fcn.00403f8c
add esp, 4
mov edx, dword [0x415160]
mov eax, dword [ebp - 0x6c4]
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_EnumDesktopsA]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00404906
mov esp, ebp
pop ebp
ret 0x10