Function at 0x406ac0
Capabilities:
Delete file
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x294
lea eax, [esp + 0x28]
push ebx
push ebp
push esi
push edi
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [esp + 0x38]
push 0x41d32c
push ecx
call fcn.00412111
mov ebx, eax
add esp, 8
test ebx, ebx
mov dword [esp + 0x18], ebx
jne 0x406b22
mov eax, dword [0x42301c]
lea edx, [esp + 0x38]
push 0x40101
push edx
push eax
call fcn.00403230
add esp, 0xc
cmp eax, 2
jne 0x406adc
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x294
ret
mov ecx, dword [esp + 0x2a8]
push 0
push ecx
push ebx
call fcn.00412065
add esp, 0xc
test eax, eax
push ebx
jne 0x40752a
push 4
push 1
push 0x422ed0
call fcn.00411f7d
mov eax, dword [0x422ed0]
mov ecx, dword [0x425600]
add eax, 0x64
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
and eax, 0xffff
add esp, 0x10
shl eax, 0x10
push eax
push 0
push 0x401
push ecx
call ebp
mov edi, 0x422ed4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x20], ecx
cmp byte [ecx + 0x422ed3], 0x5c
je 0x406bc8
mov edi, 0x41d280
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x422ed4
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x20]
mov ecx, edx
and ecx, 3
inc eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x20], eax
push 0
push 0x422ed4
call fcn.00411ce0
add esp, 8
cmp eax, 0xffffffff
jne 0x406cd0
push 0
push 0
push 0
push 0x422ed4
call fcn.00408210
add esp, 0x10
test eax, eax
jne 0x406cd0
push ebx
call fcn.00411f27
mov eax, dword [0x42301c]
push 0x50106
push 0x422ed4
push eax
call fcn.00403230
mov ecx, dword [0x422eb4]
add esp, 0x10
push 0x14a
push 0x424088
push 0x7e
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x422ed4
push 0x424088
push 0x425210
call fcn.00411c30
mov edx, dword [0x4255f4]
add esp, 0xc
push 0x425210
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push eax
call ebp
mov ecx, dword [0x4255fc]
push 0
push 0
push 0x18b
push ecx
call ebp
mov ecx, dword [0x4255fc]
mov esi, eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
push 1
push ecx
call dword [sym.imp.USER32.dll_GetScrollRange]
mov edx, dword [esp + 0x10]
mov eax, dword [0x4255fc]
push 1
push edx
push 1
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov ecx, dword [0x4255fc]
dec esi
push 0
push esi
push 0x197
push ecx
call ebp
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x294
ret
mov edx, dword [0x422eb4]
mov ebx, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x424088
push 0x74
push edx
call ebx
push 0x422ed4
push 0x424088
push 0x425210
call fcn.00411c30
mov eax, dword [0x4255f4]
mov esi, dword [sym.imp.USER32.dll_SetWindowTextA]
add esp, 0xc
push 0x425210
push eax
call esi
mov ecx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push ecx
call ebp
mov edx, dword [0x4255fc]
push 0
push 0
push 0x18b
push edx
call ebp
mov edx, dword [0x4255fc]
mov edi, dword [sym.imp.USER32.dll_GetScrollRange]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
push 1
push edx
call edi
mov eax, dword [esp + 0x10]
mov ecx, dword [0x4255fc]
push 1
push eax
push 1
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [esp + 0x14]
mov eax, dword [0x4255fc]
dec edx
push 0
push edx
push 0x197
push eax
call ebp
mov ecx, dword [0x425600]
push 0
push 0xa
push 0x402
push ecx
call ebp
push 0x41a288
push 0x422ed4
lea edx, [esp + 0x40]
push 0x41d048
push edx
call fcn.00411c30
lea eax, [esp + 0x48]
push 0
push eax
call fcn.00411ce0
add esp, 0x18
test eax, eax
jne 0x406eba
lea ecx, [esp + 0x38]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [esp + 0x38]
push edx
call fcn.00402b20
add esp, 4
test al, al
je 0x406eba
mov eax, dword [esp + 0x18]
push eax
call fcn.00411f27
mov edx, dword [0x42301c]
lea ecx, [esp + 0x3c]
push 0x50107
push ecx
push edx
call fcn.00403230
mov eax, dword [0x422eb4]
add esp, 0x10
push 0x14a
push 0x424088
push 0x7f
push eax
call ebx
lea ecx, [esp + 0x38]
push ecx
push 0x424088
push 0x425210
call fcn.00411c30
mov edx, dword [0x4255f4]
add esp, 0xc
push 0x425210
push edx
call esi
mov eax, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push eax
call ebp
mov ecx, dword [0x4255fc]
push 0
push 0
push 0x18b
push ecx
call ebp
mov ecx, dword [0x4255fc]
mov esi, eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
push 1
push ecx
call edi
mov edx, dword [esp + 0x10]
mov eax, dword [0x4255fc]
push 1
push edx
push 1
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov ecx, dword [0x4255fc]
dec esi
push 0
push esi
push 0x197
push ecx
call ebp
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x294
ret
mov ecx, dword [0x422ed0]
mov eax, 1
cmp ecx, eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x2c], eax
jl 0x40730b
mov esi, dword [esp + 0x18]
lea edx, [esp + 0x13c]
push esi
push 0x64
push 1
push edx
call fcn.00411f7d
push 0x68
call fcn.00411c82
mov edx, eax
add esp, 0x14
test edx, edx
je 0x40732e
lea edi, [esp + 0x13c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x24]
mov dword [edx + 0x64], 0
test ecx, ecx
je 0x406f51
mov eax, dword [ecx + 0x64]
test eax, eax
je 0x406f4c
mov dword [esp + 0x24], eax
mov eax, dword [eax + 0x64]
test eax, eax
jne 0x406f3d
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x64], edx
jmp 0x406f57
mov dword [0x422c10], edx
lea ecx, [esp + 0x13c]
mov dword [esp + 0x24], edx
push ecx
push 0x422ed4
lea edx, [esp + 0x40]
push 0x41d048
push edx
call fcn.00411c30
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x14c]
lea ecx, [esp + 0x1b0]
push eax
push ecx
lea eax, [esp + 0x50]
push edx
push eax
call fcn.00408210
add esp, 0x20
sub eax, 0
je 0x40742b
dec eax
jne 0x40705e
mov ecx, dword [0x422eb4]
push 0x14a
push 0x424088
push 0x75
push ecx
call ebx
lea edx, [esp + 0x1a0]
push edx
push 0x424088
push 0x425210
call fcn.00411c30
mov eax, dword [0x4255f4]
mov esi, dword [sym.imp.USER32.dll_SetWindowTextA]
add esp, 0xc
push 0x425210
push eax
call esi
mov ecx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push ecx
call ebp
mov edx, dword [0x4255fc]
push 0
push 0
push 0x18b
push edx
call ebp
mov edx, dword [0x4255fc]
mov edi, dword [sym.imp.USER32.dll_GetScrollRange]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
push 1
push edx
call edi
mov eax, dword [esp + 0x10]
mov ecx, dword [0x4255fc]
push 1
push eax
push 1
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [esp + 0x14]
mov eax, dword [0x4255fc]
dec edx
push 0
push edx
push 0x197
push eax
call ebp
jmp 0x40706a
mov esi, dword [sym.imp.USER32.dll_SetWindowTextA]
mov edi, dword [sym.imp.USER32.dll_GetScrollRange]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x28]
push ecx
push 4
push 1
push edx
call fcn.00411f7d
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x40]
push eax
push ecx
call fcn.004122df
lea edx, [esp + 0x50]
push 0
push edx
call fcn.00411ce0
add esp, 0x20
test eax, eax
jne 0x4070c4
lea eax, [esp + 0x38]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x38]
push ecx
call fcn.00402b20
add esp, 4
test al, al
jne 0x406ded
lea edx, [esp + 0x38]
push 0x41d39c
push edx
call fcn.00412111
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
jne 0x40710b
mov ecx, dword [0x42301c]
lea eax, [esp + 0x38]
push 0x50108
push eax
push ecx
call fcn.00403230
add esp, 0xc
sub eax, 3
je 0x40737c
sub eax, 2
je 0x4071fa
jmp 0x4070c4
mov edx, dword [esp + 0x18]
push edx
push eax
call fcn.00408340
mov ecx, dword [esp + 0x30]
add esp, 8
cmp eax, ecx
jne 0x407334
mov eax, dword [esp + 0x14]
push eax
call fcn.00411f27
mov ecx, dword [0x422eb4]
add esp, 4
push 0x14a
push 0x424088
push 0x76
push ecx
call ebx
lea edx, [esp + 0x13c]
push edx
push 0x424088
push 0x425210
call fcn.00411c30
mov eax, dword [0x4255f4]
add esp, 0xc
push 0x425210
push eax
call esi
mov ecx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push ecx
call ebp
mov edx, dword [0x4255fc]
push 0
push 0
push 0x18b
push edx
call ebp
mov edx, dword [0x4255fc]
mov esi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
push 1
push edx
call edi
mov eax, dword [esp + 0x10]
mov ecx, dword [0x4255fc]
push 1
push eax
push 1
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [0x4255fc]
dec esi
push 0
push esi
push 0x197
push edx
call ebp
mov eax, dword [0x425600]
push 0
push 0
push 0x408
push eax
call ebp
mov ecx, dword [0x425600]
inc eax
push 0
push eax
push 0x402
push ecx
jmp 0x4072bc
mov edx, dword [0x422eb4]
push 0x14a
push 0x424088
push 0x7a
push edx
call ebx
lea eax, [esp + 0x13c]
push eax
push 0x424088
push 0x425210
call fcn.00411c30
mov ecx, dword [0x4255f4]
add esp, 0xc
push 0x425210
push ecx
call esi
mov edx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push edx
call ebp
mov eax, dword [0x4255fc]
push 0
push 0
push 0x18b
push eax
call ebp
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
mov esi, eax
mov eax, dword [0x4255fc]
push ecx
push edx
push 1
push eax
call edi
mov ecx, dword [esp + 0x10]
mov edx, dword [0x4255fc]
push 1
push ecx
push 1
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [0x4255fc]
dec esi
push 0
push esi
push 0x197
push eax
call ebp
mov ecx, dword [0x425600]
push 0
push 0
push 0x408
push ecx
call ebp
mov edx, dword [0x425600]
inc eax
push 0
push eax
push 0x402
push edx
call ebp
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x30]
push eax
push esi
call fcn.004122c7
mov ecx, dword [esp + 0x30]
push 1
push ecx
push esi
call fcn.00412065
mov al, byte [esi + 0xc]
add esp, 0x14
test al, 0x10
jne 0x407405
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x422ed0]
inc eax
cmp eax, ecx
mov dword [esp + 0x2c], eax
jle 0x406ed9
mov esi, dword [sym.imp.USER32.dll_SetWindowTextA]
mov edi, dword [sym.imp.USER32.dll_GetScrollRange]
mov eax, dword [esp + 0x18]
push 0
push 0
push eax
call fcn.00412065
add esp, 0xc
test eax, eax
je 0x40750a
mov ecx, dword [esp + 0x18]
push ecx
jmp 0x40752a
push esi
jmp 0x40752a
mov edx, dword [esp + 0x14]
push edx
call fcn.00411f27
mov eax, dword [esp + 0x1c]
push eax
call fcn.00411f27
add esp, 8
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [0x42301c]
lea edx, [esp + 0x38]
push 0x50109
push edx
push eax
call fcn.00403230
add esp, 0xc
push 0x14a
push 0x424088
push 0x7e
jmp 0x407395
mov eax, dword [esp + 0x18]
push eax
call fcn.00411f27
add esp, 4
push 0x14a
push 0x424088
push 0x7f
mov ecx, dword [0x422eb4]
push ecx
call ebx
lea edx, [esp + 0x38]
push edx
push 0x424088
push 0x425210
call fcn.00411c30
mov eax, dword [0x4255f4]
add esp, 0xc
push 0x425210
push eax
call esi
mov ecx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push ecx
call ebp
mov edx, dword [0x4255fc]
push 0
push 0
push 0x18b
push edx
call ebp
mov edx, dword [0x4255fc]
mov esi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
push 1
push edx
call edi
jmp 0x4074d5
push esi
call fcn.00411f27
mov eax, dword [0x42301c]
push 0x50101
push eax
call fcn.00402e10
add esp, 0xc
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x294
ret
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00411f27
mov eax, dword [0x42301c]
lea edx, [esp + 0x1a4]
push 0x50106
push edx
push eax
call fcn.00403230
mov ecx, dword [0x422eb4]
add esp, 0x10
push 0x14a
push 0x424088
push 0x82
push ecx
call ebx
lea edx, [esp + 0x1a0]
push edx
push 0x424088
push 0x425210
call fcn.00411c30
mov eax, dword [0x4255f4]
add esp, 0xc
push 0x425210
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push ecx
call ebp
mov edx, dword [0x4255fc]
push 0
push 0
push 0x18b
push edx
call ebp
mov edx, dword [0x4255fc]
mov esi, eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
push 1
push edx
call dword [sym.imp.USER32.dll_GetScrollRange]
mov eax, dword [esp + 0x10]
mov ecx, dword [0x4255fc]
push 1
push eax
push 1
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [0x4255fc]
dec esi
push 0
push esi
push 0x197
push edx
call ebp
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x294
ret
call fcn.00408470
mov eax, dword [0x41d324]
push eax
call fcn.00411c82
mov ecx, dword [esp + 0x1c]
add esp, 4
test eax, eax
mov dword [esp + 0x20], eax
push ecx
jne 0x407550
call fcn.00411f27
mov edx, dword [0x42301c]
push 0x50101
push edx
call fcn.00402e10
add esp, 0xc
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x294
ret
mov edx, dword [0x41d324]
push edx
push 1
push eax
call fcn.00411f7d
mov ecx, dword [0x41d324]
add esp, 0x10
cmp eax, ecx
je 0x4075a1
mov eax, dword [esp + 0x20]
push eax
call fcn.004122bc
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00411f27
mov edx, dword [0x42301c]
push 0x50101
push edx
call fcn.00402e10
add esp, 0x10
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x294
ret
push 0x41a288
push 0x422ed4
lea eax, [esp + 0x1a8]
push 0x41d048
push eax
call fcn.00411c30
mov ecx, dword [0x41d324]
mov edx, dword [esp + 0x30]
push ecx
lea eax, [esp + 0x1b4]
push edx
push eax
call fcn.004099d0
add esp, 0x1c
test al, al
je 0x4076ce
lea ecx, [esp + 0x1a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
or al, 2
lea edx, [esp + 0x1a0]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [0x422eb4]
push 0x14a
push 0x424088
push 0x78
push eax
call ebx
lea ecx, [esp + 0x1a0]
push ecx
push 0x424088
push 0x425210
call fcn.00411c30
mov edx, dword [0x4255f4]
add esp, 0xc
push 0x425210
push edx
call esi
mov eax, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push eax
call ebp
mov ecx, dword [0x4255fc]
push 0
push 0
push 0x18b
push ecx
call ebp
mov ecx, dword [0x4255fc]
mov dword [esp + 0x14], eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
push 1
push ecx
call edi
mov edx, dword [esp + 0x10]
mov eax, dword [0x4255fc]
push 1
push edx
push 1
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov ecx, dword [esp + 0x14]
mov edx, dword [0x4255fc]
dec ecx
push 0
push ecx
push 0x197
push edx
call ebp
mov eax, dword [0x425600]
push 0
push 0
push 0x408
push eax
call ebp
mov ecx, dword [0x425600]
add eax, 0xa
push 0
push eax
push 0x402
push ecx
jmp 0x40778e
lea edx, [esp + 0x1a0]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [0x422eb4]
push 0x14a
push 0x425210
push 0x80
push eax
call ebx
mov ecx, dword [0x4255f4]
push 0x425210
push ecx
call esi
mov edx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push edx
call ebp
mov eax, dword [0x4255fc]
push 0
push 0
push 0x18b
push eax
call ebp
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [0x4255fc]
push ecx
push edx
push 1
push eax
call edi
mov ecx, dword [esp + 0x10]
mov edx, dword [0x4255fc]
push 1
push ecx
push 1
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4255fc]
dec eax
push 0
push eax
push 0x197
push ecx
call ebp
mov edx, dword [0x425600]
push 0
push 0
push 0x408
push edx
call ebp
add eax, 0xa
push 0
push eax
mov eax, dword [0x425600]
push 0x402
push eax
call ebp
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004122bc
mov edx, dword [esp + 0x1c]
push edx
call fcn.00411f27
add esp, 8
call fcn.00409f30
test al, al
je 0x407882
call fcn.0040a0d0
test al, al
je 0x407882
call fcn.0040a430
test al, al
je 0x407882
mov eax, dword [0x422eb4]
push 0x14a
push 0x425210
push 0x79
push eax
call ebx
mov ecx, dword [0x4255f4]
push 0x425210
push ecx
call esi
mov edx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push edx
call ebp
mov eax, dword [0x4255fc]
push 0
push 0
push 0x18b
push eax
call ebp
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [0x4255fc]
push ecx
push edx
push 1
push eax
call edi
mov ecx, dword [esp + 0x10]
mov edx, dword [0x4255fc]
push 1
push ecx
push 1
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4255fc]
dec eax
push 0
push eax
push 0x197
push ecx
call ebp
mov edx, dword [0x425600]
push 0
push 0
push 0x408
push edx
call ebp
add eax, 0xa
push 0
push eax
mov eax, dword [0x425600]
push 0x402
push eax
jmp 0x407935
mov ecx, dword [0x422eb4]
push 0x14a
push 0x425210
push 0x81
push ecx
call ebx
mov edx, dword [0x4255f4]
push 0x425210
push edx
call esi
mov eax, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push eax
call ebp
mov ecx, dword [0x4255fc]
push 0
push 0
push 0x18b
push ecx
call ebp
mov ecx, dword [0x4255fc]
mov dword [esp + 0x14], eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
push 1
push ecx
call edi
mov edx, dword [esp + 0x10]
mov eax, dword [0x4255fc]
push 1
push edx
push 1
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov ecx, dword [esp + 0x14]
mov edx, dword [0x4255fc]
dec ecx
push 0
push ecx
push 0x197
push edx
call ebp
mov eax, dword [0x425600]
push 0
push 0
push 0x408
push eax
call ebp
mov ecx, dword [0x425600]
add eax, 0xa
push 0
push eax
push 0x402
push ecx
call ebp
call fcn.0040a4f0
test al, al
je 0x407a3b
call fcn.0040aa40
test al, al
je 0x407a3b
call fcn.0040ab80
test al, al
je 0x407a3b
call fcn.0040acf0
test al, al
je 0x407a3b
call fcn.0040ae80
test al, al
je 0x407a3b
call fcn.0040b010
test al, al
je 0x407a3b
mov edx, dword [0x422eb4]
push 0x14a
push 0x425210
push 0x7c
push edx
call ebx
mov eax, dword [0x4255f4]
push 0x425210
push eax
call esi
mov ecx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push ecx
call ebp
mov edx, dword [0x4255fc]
push 0
push 0
push 0x18b
push edx
call ebp
mov edx, dword [0x4255fc]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
push 1
push edx
call edi
mov eax, dword [esp + 0x10]
mov ecx, dword [0x4255fc]
push 1
push eax
push 1
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [esp + 0x14]
mov eax, dword [0x4255fc]
dec edx
push 0
push edx
push 0x197
push eax
call ebp
mov ecx, dword [0x425600]
push 0
push 0
push 0x408
push ecx
call ebp
mov edx, dword [0x425600]
add eax, 0xa
push 0
push eax
push 0x402
push edx
jmp 0x407aed
mov eax, dword [0x422eb4]
push 0x14a
push 0x425210
push 0x86
push eax
call ebx
mov ecx, dword [0x4255f4]
push 0x425210
push ecx
call esi
mov edx, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push edx
call ebp
mov eax, dword [0x4255fc]
push 0
push 0
push 0x18b
push eax
call ebp
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [0x4255fc]
push ecx
push edx
push 1
push eax
call edi
mov ecx, dword [esp + 0x10]
mov edx, dword [0x4255fc]
push 1
push ecx
push 1
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4255fc]
dec eax
push 0
push eax
push 0x197
push ecx
call ebp
mov edx, dword [0x425600]
push 0
push 0
push 0x408
push edx
call ebp
add eax, 0xa
push 0
push eax
mov eax, dword [0x425600]
push 0x402
push eax
call ebp
call fcn.0040b090
mov ecx, dword [0x422eb4]
push 0x14a
push 0x425210
push 0x5d
push ecx
call ebx
mov edx, dword [0x4255f4]
push 0x425210
push edx
call esi
mov eax, dword [0x4255fc]
push 0x425210
push 0
push 0x180
push eax
call ebp
mov ecx, dword [0x4255fc]
push 0
push 0
push 0x18b
push ecx
call ebp
mov ecx, dword [0x4255fc]
mov esi, eax
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
push 1
push ecx
call edi
mov edx, dword [esp + 0x10]
mov eax, dword [0x4255fc]
push 1
push edx
push 1
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov ecx, dword [0x4255fc]
dec esi
push 0
push esi
push 0x197
push ecx
call ebp
mov edx, dword [0x422ed0]
mov eax, dword [0x425600]
add edx, 0x64
push 0
push edx
push 0x402
push eax
call ebp
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x294
ret