Function at 0x401000
Capabilities:
Allocate thread local storage
Hide graphical window
Identify system language via api
Log keystrokes via polling
Query environment variable

Disassembly:
push 0x758
push 0
push 0x1714814
call fcn.00428100
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x1714818], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x1714814], eax
mov eax, 0x554c6c
mov dword [0x17148b8], eax
call fcn.00411d7d
call fcn.00470bd0
call fcn.0046fff7
call fcn.0046fad0
call fcn.0046e270
call fcn.0046c07a
call fcn.0046b790
call fcn.0046b064
call fcn.0046a57f
call fcn.00469420
call fcn.00460a04
call fcn.00460768
call fcn.0045ec70
call fcn.0045e67c
call fcn.0045e012
call fcn.0045cd30
call fcn.0045bcb1
call fcn.0045a58a
call fcn.00458b47
call fcn.00458825
call fcn.00454a16
call fcn.004533fc
call fcn.004528af
call fcn.00451a3f
call fcn.00450ed9
call fcn.004359c0
call fcn.0043570a
call fcn.004349a0
mov edx, 0x5522aa
lea ecx, [0x1714a28]
call fcn.00411008
mov edx, 0x5507a4
lea ecx, [0x1714860]
call fcn.00411008
mov dword [0x17148e8], 0
mov dword [0x171491c], 0
mov dword [0x17148cc], 0
mov dword [0x17149ac], 0x3e3
mov dword [0x17149a4], 0
mov dword [0x1714a44], 0xffffffff
mov dword [0x1714a4c], 0xffffffff
mov dword [0x1714830], 0xffffffff
mov dword [0x1714834], 0xffffffff
mov dword [0x1714a10], 0
push 0x14
push 0x3c
push 0xffffffff
call fcn.004695f6
mov dword [0x1714870], eax
call fcn.00407145
call fcn.004539ec
mov ebp, 0x170d8e9
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171486c], eax
mov ebp, 0x170da36
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714874], eax
mov ebp, 0x170dd79
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714878], eax
mov ebp, 0x170e0f9
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171487c], eax
mov ebp, 0x170e5c1
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714880], eax
mov ebp, 0x170e962
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714884], eax
mov ebp, 0x170ecec
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714888], eax
mov ebp, 0x170f293
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171488c], eax
mov ebp, 0x170f7d9
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714890], eax
mov ebp, 0x170f881
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714894], eax
mov ebp, 0x75397c
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714868], eax
mov ebp, 0x753a1d
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148c4], eax
mov ebp, 0x753c0c
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148c0], eax
mov ebp, 0x170fa70
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148fc], eax
mov ebp, 0x170fd4e
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714944], eax
mov ebp, 0x610b92
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714a54], eax
mov ebp, 0x610ded
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171489c], eax
mov ebp, 0x61176b
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148a4], eax
mov ebp, 0x61196d
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148f0], eax
mov ebp, 0x611039
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148c8], eax
mov ebp, 0x6113db
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171492c], eax
mov ebp, 0x611b85
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714a34], eax
push dword [0x1714a54]
call fcn.00405d49
push dword [0x171489c]
call fcn.00405d49
push dword [0x17148a4]
call fcn.00405d49
push dword [0x17148f0]
call fcn.00405d49
push dword [0x17148c8]
call fcn.00405d49
push dword [0x171492c]
call fcn.00405d49
push dword [0x1714a34]
call fcn.00405d49
push dword [0x17148fc]
call fcn.00405d49
push dword [0x1714944]
call fcn.00405d49
mov dword [0x171499c], 0
mov dword [0x1714994], 0
mov edx, 0x550028
lea ecx, [0x17149b8]
call fcn.00411008
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0x64
call fcn.0046e560
lea eax, [0x1714820]
push eax
call fcn.00470c30
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0xc8
call fcn.0046e560
lea eax, [0x17149bc]
push eax
call fcn.00470c30
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0xc8
call fcn.0046e560
lea eax, [0x1714a38]
push eax
call fcn.00470c30
push 0xc8
mov eax, dword [0x17149bc]
push eax
mov eax, 0x5548e8
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0xc8
mov eax, dword [0x1714a38]
push eax
mov eax, 0x552792
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push 0x64
mov eax, dword [0x1714820]
push eax
mov eax, 0x551a3c
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov edx, 0x550028
lea ecx, [0x1714a1c]
call fcn.00411008
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push 0x3e8
call fcn.0046e560
lea eax, [0x171484c]
push eax
call fcn.00470c30
push 0x3e8
mov eax, dword [0x171484c]
push eax
mov eax, 0x553124
push eax
call sub.KERNEL32.dll_GetEnvironmentVariableW
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c0d4
lea eax, [0x1714848]
push eax
call fcn.00470c30
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.0045c15d
lea eax, [0x1714a14]
push eax
call fcn.00470c30
mov edx, 0x550028
lea ecx, [0x1714914]
call fcn.00411008
push dword [0x17149bc]
mov edx, 0x550dda
pop ecx
call fcn.00411b60
jne 0x401568
push dword [0x1714a38]
mov edx, 0x550dda
pop ecx
call fcn.00411b60
jne 0x401568
jmp 0x40156f
mov eax, 1
jmp 0x401571
xor eax, eax
and eax, eax
je 0x401587
mov edx, 0x55257a
lea ecx, [0x17149b8]
call fcn.00411008
jmp 0x401597
mov edx, 0x553166
lea ecx, [0x17149b8]
call fcn.00411008
call fcn.0045110e
mov ebx, eax
dec ebx
mov dword [0x1714898], ebx
mov ebx, dword [0x1714898]
and ebx, ebx
jl 0x401667
mov dword [0x17149a0], 0
jmp 0x4015bf
mov eax, dword [0x1714898]
cmp eax, dword [0x17149a0]
jl 0x401667
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x17149a0]
call fcn.00451122
call fcn.00411b42
add dword [esp], edx
call fcn.0046e5b0
lea eax, [0x17149c0]
push eax
call fcn.00470c30
push dword [0x17149c0]
mov edx, 0x5519de
mov ecx, dword [esp]
call fcn.00411b60
je 0x40163b
mov edx, 0x552f9e
lea ecx, [0x1714914]
call fcn.00411008
jmp 0x40165a
mov edx, 0x552588
mov ecx, dword [esp]
call fcn.00411b60
je 0x40165a
mov edx, 0x552720
lea ecx, [0x1714914]
call fcn.00411008
pop eax
inc dword [0x17149a0]
jno 0x4015bf
push 0x100
push 1
call fcn.00410b2e
push dword [0x1714914]
mov edx, 0x550028
pop ecx
call fcn.00411b60
je 0x4016b2
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call sub.KERNEL32.dll_GetUserDefaultLangID
cdq
push edx
push eax
call fcn.0046e620
lea eax, [0x1714914]
push eax
call fcn.00470c30
push dword [0x1714914]
mov edx, 0x551e44
pop ecx
call fcn.00411b60
je 0x4016d7
mov edx, 0x551b22
lea ecx, [0x1714914]
call fcn.00411008
jmp 0x40170c
push dword [0x1714914]
mov edx, 0x5522c0
pop ecx
call fcn.00411b60
je 0x4016fc
mov edx, 0x550b52
lea ecx, [0x1714914]
call fcn.00411008
jmp 0x40170c
mov edx, 0x551b22
lea ecx, [0x1714914]
call fcn.00411008
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c28d
call fcn.00470ca0
push 1
push 0
push dword [0x1714a18]
call fcn.00411b42
add dword [esp + 0xc], edx
call sub.KERNEL32.dll_CreateSemaphoreW
call fcn.00411ba0
mov dword [0x171483c], eax
mov ebx, dword [0x171483c]
and ebx, ebx
je 0x401793
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
cmp ebx, 0xb7
jne 0x401793
mov eax, 1
jmp 0x401795
xor eax, eax
and eax, eax
je 0x4017a9
push dword [0x171483c]
call sub.KERNEL32.dll_CloseHandle
jmp 0x40415a
mov dword [0x171495c], 0
mov edx, 0x550028
lea ecx, [0x1714a20]
call fcn.00411008
push 0x100
push 0
call fcn.00410b2e
push edx
call fcn.00470c00
pop edx
push eax
mov eax, 0x550364
push eax
mov eax, 0x550e10
push eax
mov eax, 0x550e6e
push eax
call fcn.0040bf3a
lea eax, [0x1714998]
push eax
call fcn.00470c30
mov eax, 0x550364
push eax
push dword [0x1714998]
call fcn.0046e8e0
mov dword [0x1714a0c], eax
mov ebx, dword [0x1714a0c]
cmp ebx, 1
jge 0x401820
jmp 0x401854
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
mov ebx, dword [0x1714a0c]
dec ebx
push ebx
push 1
push dword [0x1714998]
call fcn.0046e920
lea eax, [0x1714998]
push eax
call fcn.00470c30
push dword [0x1714998]
call fcn.0046e9b0
mov dword [0x1714824], eax
mov ebx, dword [0x1714824]
cmp ebx, 0x2710
jle 0x40187c
mov dword [0x171495c], 1
mov ebx, dword [0x1714824]
cmp ebx, 0x2580
jl 0x40189f
mov edx, 0x55481a
lea ecx, [0x1714a20]
call fcn.00411008
jmp 0x401963
mov ebx, dword [0x1714824]
cmp ebx, 0x23f0
jl 0x4018c2
mov ebx, dword [0x1714824]
cmp ebx, 0x2454
jge 0x4018c2
mov eax, 1
jmp 0x4018c4
xor eax, eax
and eax, eax
je 0x4018dd
mov edx, 0x550412
lea ecx, [0x1714a20]
call fcn.00411008
jmp 0x401963
mov ebx, dword [0x1714824]
cmp ebx, 0x1db0
jl 0x401900
mov ebx, dword [0x1714824]
cmp ebx, 0x1e14
jge 0x401900
mov eax, 1
jmp 0x401902
xor eax, eax
and eax, eax
je 0x401918
mov edx, 0x55040e
lea ecx, [0x1714a20]
call fcn.00411008
jmp 0x401963
mov ebx, dword [0x1714824]
cmp ebx, 0xa28
jl 0x40193b
mov ebx, dword [0x1714824]
cmp ebx, 0xbb8
jge 0x40193b
mov eax, 1
jmp 0x40193d
xor eax, eax
and eax, eax
je 0x401953
mov edx, 0x552582
lea ecx, [0x1714a20]
call fcn.00411008
jmp 0x401963
mov edx, 0x55481a
lea ecx, [0x1714a20]
call fcn.00411008
mov ebx, dword [0x17148e8]
cmp ebx, 7
jne 0x40198a
mov edx, 0x55040e
lea ecx, [0x1714a20]
call fcn.00411008
mov dword [0x171495c], 0
jmp 0x4019af
mov ebx, dword [0x17148e8]
cmp ebx, 0xa
jne 0x4019af
mov edx, 0x55481a
lea ecx, [0x1714a20]
call fcn.00411008
mov dword [0x171495c], 1
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554418
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4019fc
jl 0x4019f8
cmp ebx, 0
ja 0x4019fc
xor eax, eax
jmp 0x401a01
mov eax, 1
or eax, eax
je 0x401a32
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x550f14
push edx
call fcn.00470cc0
lea eax, [0x1714a1c]
push eax
call fcn.00470c30
jmp 0x401a5d
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x55248a
push edx
call fcn.00470cc0
lea eax, [0x1714a1c]
push eax
call fcn.00470c30
push 7
push 0x554c2c
lea eax, [0x1714f04]
push eax
push 0x3c
call fcn.0046a59e
push 7
push 0x554c2c
lea eax, [0x1714f0c]
push eax
push 0x3c
call fcn.0046a59e
mov dword [0x1714a30], 0
call fcn.004539ec
mov dword [0x17148f8], 0xa
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x5539b6
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x5539b6
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x5539b6
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x553ebe
lea ecx, [ebp + 0x18]
call fcn.00411008
mov edx, 0x554764
lea ecx, [ebp + 0x1c]
call fcn.00411008
mov ebp, 0x716bcc
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x55382e
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x55382e
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x5513a4
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x55224e
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x67eaaa
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
mov ebx, dword [0x171495c]
and ebx, ebx
jle 0x401c61
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x5502f8
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x550bf8
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x552ff2
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x5536e8
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x67eaaa
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
jmp 0x401c61
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x553d76
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x553d76
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x553d76
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x55036c
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x552c9c
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x68f2e8
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x551060
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x551060
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x55357e
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x55480a
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x61ccda
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x550b66
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x550b66
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x550b66
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x553eae
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x66fa0c
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x554af6
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x553856
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x553856
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x55045c
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x72740a
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
mov dword [0x17148d4], 0
push edx
call fcn.00470c00
pop edx
push eax
mov eax, 0x550028
push eax
mov eax, 0x550860
push eax
call fcn.00406188
call fcn.00411ba0
call fcn.004539ec
mov ebp, 0x5a3c19
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148bc], eax
push dword [0x171486c]
call fcn.00405d49
push dword [0x1714874]
call fcn.00405d49
push dword [0x1714878]
call fcn.00405d49
push dword [0x1714884]
call fcn.00405d49
push dword [0x1714888]
call fcn.00405d49
call fcn.0045ecdf
mov edx, 0x554964
lea ecx, [0x1714908]
call fcn.00411008
mov ebx, dword [0x1714a44]
cmp ebx, 0xffffffff
je 0x401f2c
mov ebx, dword [0x1714a4c]
cmp ebx, 0xffffffff
je 0x401f2c
mov eax, 1
jmp 0x401f2e
xor eax, eax
and eax, eax
je 0x401f6e
mov ebx, dword [0x1714830]
push 0
call fcn.0045ef66
cmp ebx, eax
jne 0x401f61
mov ebx, dword [0x1714834]
push 0
call fcn.0045ef89
cmp ebx, eax
jne 0x401f61
mov eax, 1
jmp 0x401f63
xor eax, eax
and eax, eax
je 0x401f6e
mov eax, 1
jmp 0x401f70
xor eax, eax
and eax, eax
je 0x401fa7
push 0
push dword [0x1714908]
push dword [0x17148bc]
push 0x1c7
push 0x27d
push dword [0x1714a4c]
push dword [0x1714a44]
call fcn.0040543a
mov dword [0x1714a08], eax
jmp 0x401fd9
mov eax, 1
push eax
push dword [0x1714908]
push dword [0x17148bc]
push 0x1c7
push 0x27d
push dword [0x1714a4c]
push dword [0x1714a44]
call fcn.0040543a
mov dword [0x1714a08], eax
mov eax, 0x552058
push eax
call sub.USER32.dll_RegisterWindowMessageW
mov dword [0x1714928], eax
push dword [0x1714a08]
lea eax, [0x406fe9]
push eax
call fcn.00458bb2
push 0x55
push 0x43
push 0x34
push 0x43
push 0xffffffff
call fcn.00455b10
mov dword [0x171493c], eax
push 1
push dword [0x171493c]
call fcn.00455d4e
push 0
push 0
push 0
call fcn.00460a10
push eax
push dword [0x1714a08]
call fcn.00458c18
push dword [0x17149ac]
push 4
push dword [0x1714a08]
call fcn.00458c75
push dword [0x1714a20]
mov edx, 0x552582
pop ecx
call fcn.00411b60
je 0x4020a0
mov ebp, 0x60e519
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1714a08]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
jmp 0x4020c7
mov ebp, 0x5f4895
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1714a08]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1714908]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x5502b4
push edx
call fcn.00470cc0
mov edx, dword [0x1714a28]
push edx
call fcn.00470cc0
call fcn.00470ca0
push 0
call fcn.00411b42
add dword [esp + 4], edx
call fcn.0045bf81
call fcn.00411ba0
mov ebp, 0x610ad7
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714a24], eax
mov ebp, 0x610b35
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714a64], eax
push dword [0x1714a24]
call fcn.00405d49
push dword [0x1714a64]
call fcn.00405d49
mov dword [0x1714954], 8
push dword [0x1714954]
mov eax, 0x5504b2
push eax
push 0
call fcn.004700f4
and eax, eax
je 0x40217f
xor eax, eax
jmp 0x402184
mov eax, 1
and eax, eax
je 0x4021a3
push 0
mov eax, 0x553d26
push eax
mov eax, 0x5546ac
push eax
call fcn.00435741
jmp 0x40415a
push 0x100
push dword [0x1714954]
mov eax, 0x5504b2
push eax
push 1
call fcn.00470044
and eax, eax
je 0x4021c6
xor eax, eax
jmp 0x4021cb
mov eax, 1
and eax, eax
je 0x4021ea
push 0
mov eax, 0x553d26
push eax
mov eax, 0x5546ac
push eax
call fcn.00435741
jmp 0x40415a
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1714848]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x553772
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402237
jl 0x402233
cmp ebx, 0
ja 0x402237
xor eax, eax
jmp 0x40223c
mov eax, 1
or eax, eax
jne 0x402298
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1714848]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x55269a
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40228d
jl 0x402289
cmp ebx, 0
ja 0x40228d
xor eax, eax
jmp 0x402292
mov eax, 1
or eax, eax
jne 0x402298
jmp 0x40229f
mov eax, 1
jmp 0x4022a1
xor eax, eax
and eax, eax
je 0x402331
push dword [0x1714f0c]
call fcn.0046a630
mov ebp, dword [0x1714f10]
mov edx, 0x55005a
lea ecx, [ebp + 8]
call fcn.00411008
mov edx, 0x55005a
lea ecx, [ebp + 0xc]
call fcn.00411008
mov edx, 0x55005a
lea ecx, [ebp + 0x10]
call fcn.00411008
mov edx, 0x554226
lea ecx, [ebp + 0x14]
call fcn.00411008
mov edx, 0x55364e
lea ecx, [ebp + 0x18]
call fcn.00411008
mov ebp, 0x64e990
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x20]
push dword [0x17148f8]
pop dword [ebp + 0x40]
mov ebx, dword [0x17148f8]
inc ebx
mov dword [0x17148f8], ebx
mov dword [0x17148a8], 0
mov dword [0x1714844], 0
mov dword [0x17149fc], 0
mov dword [0x171485c], 0xa
mov dword [0x17148f4], 0x4e
mov dword [0x17148a0], 0x1c
mov dword [0x1714850], 0
push dword [0x1714f0c]
call fcn.0046a6ce
push dword [0x1714f0c]
call fcn.0046a6e3
or eax, eax
je 0x40256f
mov ebx, dword [0x1714850]
cmp ebx, dword [0x171485c]
jne 0x4023c3
push dword [0x17148f4]
pop dword [0x17149fc]
mov dword [0x17148f4], 0x4e
mov dword [0x1714844], 1
push 1
mov ebp, dword [0x1714f10]
push dword [ebp + 8]
push dword [0x1714890]
push 0x17
push 0xaa
push dword [0x17148f4]
push 0xeb
call fcn.0040632e
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x24]
push 1
push 0x550028
push dword [0x171486c]
push 0x17
push 0x17
push dword [0x17148f4]
push 0x19e
call fcn.0040632e
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x28]
push 1
push 0x550028
push dword [0x1714874]
push 0x17
push 0x17
push dword [0x17148f4]
push 0x1bc
call fcn.0040632e
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x2c]
push 1
push 0x550028
push dword [0x1714878]
push 0x17
push 0x17
push dword [0x17148f4]
push 0x1e4
call fcn.0040632e
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x30]
push 1
push 0x550028
push dword [0x1714884]
push 0x17
push 0x17
push dword [0x17148f4]
push 0x220
call fcn.0040632e
push eax
mov ebp, dword [0x1714f10]
pop dword [ebp + 0x34]
mov ebx, dword [0x1714844]
and ebx, ebx
jne 0x4024f1
push dword [0x17148f4]
mov ebp, dword [0x1714f10]
push dword [ebp + 0x18]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00407ede
jmp 0x40254b
push 1
mov ebp, dword [0x1714f10]
push dword [ebp + 0x24]
call fcn.0040613f
push 1
mov ebp, dword [0x1714f10]
push dword [ebp + 0x24]
call fcn.00455d8d
push 1
push dword [ebp + 0x28]
call fcn.00455d8d
push 1
push dword [ebp + 0x2c]
call fcn.00455d8d
push 1
push dword [ebp + 0x30]
call fcn.00455d8d
push 1
push dword [ebp + 0x34]
call fcn.00455d8d
mov ebx, dword [0x1714850]
inc ebx
mov dword [0x1714850], ebx
mov ebx, dword [0x17148f4]
add ebx, dword [0x17148a0]
mov dword [0x17148f4], ebx
jmp 0x402382
push 1
push 0x550028
push dword [0x1714878]
push 0x17
push 0x17
push 0x14a
push 0x82
call fcn.0040632e
mov dword [0x1714918], eax
jmp 0x4027ec
mov ebp, 0x63dd56
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x1714990], eax
mov ebp, 0x63e152
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x171498c], eax
mov ebp, 0x72a328
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x17148ec], eax
mov ebp, 0x6d4e0e
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x17148d8], eax
mov ebp, 0x6eea92
push ebp
push 0xffffffff
call fcn.00469776
push eax
call fcn.0046978d
mov dword [0x1714838], eax
push 0
call fcn.0045b844
and eax, eax
je 0x402be0
push dword [0x1714914]
mov edx, 0x550b52
pop ecx
call fcn.00411b60
je 0x402996
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x5532c4
push eax
call fcn.0045b8d0
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x5532c4
push eax
push 0x33
call fcn.0045b9ab
push dword [0x17148ec]
mov eax, 0x551380
push eax
push 0x32
call fcn.0045b9ab
push 0x5a
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x55457a
push eax
push 0x31
call fcn.0045b9ab
push 0x58
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x5549d8
push eax
push 0x2f
call fcn.0045b9ab
push 0xa2
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x550cfc
push eax
push 0x2e
call fcn.0045b9ab
push 0xa6
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x552270
push eax
push 0x30
call fcn.0045b9ab
jmp 0x402a8b
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x552d7e
push eax
call fcn.0045b8d0
push 0x23
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x552d7e
push eax
push 0x33
call fcn.0045b9ab
push dword [0x17148ec]
mov eax, 0x551362
push eax
push 0x32
call fcn.0045b9ab
push 0x5a
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x5540ca
push eax
push 0x31
call fcn.0045b9ab
push 0x58
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x550084
push eax
push 0x2f
call fcn.0045b9ab
push 0xa2
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x551270
push eax
push 0x2e
call fcn.0045b9ab
push 0xa6
mov eax, 0x551cdc
push eax
push 0
call sub.SHELL32.dll_ExtractIconW
push eax
mov eax, 0x551b02
push eax
push 0x30
call fcn.0045b9ab
call fcn.0045ba5b
call fcn.0045ba7f
push dword [0x1714f0c]
call fcn.0046a71e
mov ebx, eax
cmp ebx, dword [0x171485c]
jl 0x402b1a
push dword [0x1714914]
mov edx, 0x550b52
pop ecx
call fcn.00411b60
je 0x402aca
mov eax, 0x554ada
push eax
call fcn.0045b99d
jmp 0x402ad5
mov eax, 0x5549be
push eax
call fcn.0045b99d
push dword [0x1714f0c]
call fcn.0046a6ce
push dword [0x1714f0c]
call fcn.0046a6e3
or eax, eax
je 0x402b1a
push dword [0x1714f0c]
call fcn.0046a731
mov ebx, eax
cmp ebx, dword [0x171485c]
jl 0x402b18
mov ebp, dword [0x1714f10]
push dword [ebp + 0x20]
push dword [ebp + 8]
push dword [ebp + 0x40]
call fcn.0045b9ab
jmp 0x402ae0
call fcn.0045ba5b
push dword [0x1714f0c]
call fcn.0046a6ce
push dword [0x1714f0c]
call fcn.0046a6e3
or eax, eax
je 0x402b64
push dword [0x1714f0c]
call fcn.0046a731
mov ebx, eax
cmp ebx, dword [0x171485c]
jge 0x402b62
mov ebp, dword [0x1714f10]
push dword [ebp + 0x20]
push dword [ebp + 8]
push dword [ebp + 0x40]
call fcn.0045b9ab
jmp 0x402b2a
call fcn.0045ba7f
push dword [0x1714914]
mov edx, 0x550b52
pop ecx
call fcn.00411b60
je 0x402baf
push dword [0x17148d8]
mov eax, 0x553440
push eax
push 1
call fcn.0045b9ab
call fcn.0045ba7f
push dword [0x1714990]
mov eax, 0x551f48
push eax
push 3
call fcn.0045b9ab
jmp 0x402be0
push dword [0x17148d8]
mov eax, 0x553dd2
push eax
push 1
call fcn.0045b9ab
call fcn.0045ba7f
push dword [0x1714990]
mov eax, 0x5527c0
push eax
push 3
call fcn.0045b9ab
mov ebx, dword [0x1714844]
and ebx, ebx
jle 0x402c80
push dword [0x17148c4]
call fcn.004697a9
push eax
call fcn.0045efac
push eax
push dword [0x17148c4]
call fcn.004697c7
push eax
call fcn.0045efd0
push eax
push dword [0x17148c4]
call fcn.0046987b
push dword [0x17148c0]
call fcn.004697a9
push eax
call fcn.0045efac
push eax
push dword [0x17148c0]
call fcn.004697c7
push eax
call fcn.0045efd0
push eax
push dword [0x17148c0]
call fcn.0046987b
push dword [0x17148c4]
call fcn.0046978d
push eax
push 0x14
push 0x14
mov ebx, dword [0x17149fc]
add ebx, 0xfffffffd
push ebx
push 0x19e
push 0xffffffff
call fcn.00456350
mov dword [0x1714a2c], eax
push 1
mov eax, 0x550028
push eax
push dword [0x1714880]
push 0x14
push 0x19
push 0xe
push 0x206
call fcn.0040632e
mov dword [0x17149cc], eax
mov eax, 0x550028
push eax
push 0xe
push 0xe
push 0x52
push 0xd4
push 0xffffffff
call fcn.0045661a
mov dword [0x1714934], eax
push 0
push 0x28
push 0x134
push 0x54
push 0xeb
push 0xffffffff
call fcn.00456350
mov dword [0x1714828], eax
mov eax, 0x550028
push eax
push 0xe
push 0xe
push 0x6e
push 0xd4
push 0xffffffff
call fcn.0045661a
mov dword [0x1714938], eax
push 0
push 0x28
push 0x134
push 0x70
push 0xeb
push 0xffffffff
call fcn.00456350
mov dword [0x171482c], eax
push 1
push 0x550028
push dword [0x1714884]
push 0x17
push 0x17
push 0x14a
push 0x46
call fcn.0040632e
mov dword [0x171494c], eax
mov edx, 0x550028
lea ecx, [0x17148d0]
call fcn.00411008
push dword [0x1714914]
mov edx, 0x550b52
pop ecx
call fcn.00411b60
je 0x402e02
push 0
mov eax, 0x55042a
push eax
push dword [0x1714868]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040632e
mov dword [0x171490c], eax
push 0
mov eax, 0x550a64
push eax
push dword [0x1714890]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040632e
mov dword [0x17149b0], eax
jmp 0x402e60
push 0
mov eax, 0x550aae
push eax
push dword [0x1714868]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040632e
mov dword [0x171490c], eax
push 0
mov eax, 0x55460c
push eax
push dword [0x1714890]
push 0x17
push 0x9c
push 0x112
push 0x46
call fcn.0040632e
mov dword [0x17149b0], eax
mov edx, 0x550028
lea ecx, [0x1714a00]
call fcn.00411008
push 9
mov eax, 0x5504b2
push eax
push 0xffffffff
call fcn.004700f4
mov dword [0x17149a8], eax
push 0x14
push 0xb4
push 0xffffffff
call fcn.004695f6
mov dword [0x17149f4], eax
push 0x14
push 0xb4
push 0xffffffff
call fcn.004695f6
mov dword [0x1714960], eax
push dword [0x17149f4]
call fcn.00405d49
push dword [0x1714960]
call fcn.00405d49
push 0x12
push 0x64
push 0x23
call fcn.0045efac
push eax
push dword [0x17148bc]
call fcn.004697c7
mov ebx, eax
add ebx, 0xffffff9c
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
push dword [0x17148bc]
call fcn.00469891
mov dword [0x1714a04], eax
push 0x12
push 0x64
push 0x23
call fcn.0045efac
push eax
push dword [0x17148bc]
call fcn.004697c7
mov ebx, eax
add ebx, 0xffffff9c
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
push dword [0x17148bc]
call fcn.00469891
mov dword [0x17149ec], eax
push dword [0x1714a04]
call fcn.00405d49
push dword [0x17149ec]
call fcn.00405d49
mov edx, dword [0x1714a28]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, dword [0x1714a00]
push edx
call fcn.00470cc0
mov edx, 0x55264a
push edx
call fcn.00470cc0
lea eax, [0x17149f8]
push eax
call fcn.00470c30
push dword [0x17149f4]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x403091
push 1
call fcn.00460ab2
push dword [0x17149a8]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x17149f8]
call fcn.00460ae0
fistp dword [0x1714a40]
push dword [0x17149f8]
call fcn.00460af7
fistp dword [0x1714a3c]
push 0x40
push pe_nt_image_headers32
push 0xff
call fcn.00460a10
mov dword [0x1714988], eax
push 5
push 5
call fcn.00460b0e
mov dword [0x1714840], eax
push dword [0x1714840]
push dword [0x1714988]
push dword [0x17149f8]
push 2
call fcn.0045efac
mov dword [esp - 4], eax
fild dword [esp - 4]
sub esp, 8
fstp qword [esp]
push dword [0x17149f4]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x1714a40]
fadd qword [0x554bfc]
fdiv qword [0x554c04]
sub esp, 8
fstp qword [esp]
call fcn.00460b37
fstp st(0)
call fcn.00460bd8
push dword [0x1714960]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x403175
push 1
call fcn.00460ab2
push dword [0x17149a8]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x17149f8]
call fcn.00460ae0
fistp dword [0x1714a40]
push dword [0x17149f8]
call fcn.00460af7
fistp dword [0x1714a3c]
push 0xfa
push 0xfa
push 0xfa
call fcn.00460a10
mov dword [0x1714988], eax
push 5
push 5
call fcn.00460b0e
mov dword [0x1714840], eax
push dword [0x1714840]
push dword [0x1714988]
push dword [0x17149f8]
push 2
call fcn.0045efac
mov dword [esp - 4], eax
fild dword [esp - 4]
sub esp, 8
fstp qword [esp]
push dword [0x17149f4]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x1714a40]
fadd qword [0x554bfc]
fdiv qword [0x554c04]
sub esp, 8
fstp qword [esp]
call fcn.00460b37
fstp st(0)
call fcn.00460bd8
mov edx, 0x551b6e
lea ecx, [0x17149f8]
call fcn.00411008
push dword [0x1714a04]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x403243
push 1
call fcn.00460ab2
push dword [0x17149a8]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x17149f8]
call fcn.00460ae0
fistp dword [0x1714a40]
push dword [0x17149f8]
call fcn.00460af7
fistp dword [0x1714a3c]
push 0x96
push 0xdc
push 0x96
call fcn.00460a10
mov dword [0x1714988], eax
push dword [0x1714988]
push dword [0x17149f8]
fld qword [0x554bfc]
sub esp, 8
fstp qword [esp]
push dword [0x1714a04]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x1714a40]
fadd qword [0x554bfc]
fdiv qword [0x554c04]
sub esp, 8
fstp qword [esp]
call fcn.00460c20
fstp st(0)
call fcn.00460bd8
push dword [0x17149ec]
call fcn.004699a4
push eax
call fcn.00460a4d
and eax, eax
je 0x403301
push 1
call fcn.00460ab2
push dword [0x17149a8]
call fcn.0047010a
push eax
call fcn.00460ac9
push dword [0x17149f8]
call fcn.00460ae0
fistp dword [0x1714a40]
push dword [0x17149f8]
call fcn.00460af7
fistp dword [0x1714a3c]
push 0xfa
push 0xfa
push 0xfa
call fcn.00460a10
mov dword [0x1714988], eax
push dword [0x1714988]
push dword [0x17149f8]
fld qword [0x554bfc]
sub esp, 8
fstp qword [esp]
push dword [0x17149ec]
call fcn.004697c7
mov dword [esp - 4], eax
fild dword [esp - 4]
fisub dword [0x1714a40]
fadd qword [0x554bfc]
fdiv qword [0x554c04]
sub esp, 8
fstp qword [esp]
call fcn.00460c20
fstp st(0)
call fcn.00460bd8
push dword [0x17149f4]
call fcn.0046978d
push eax
push 0x14
push 0xb4
push 0x1a0
push 0x5f
push 0xffffffff
call fcn.00456350
mov dword [0x1714864], eax
push dword [0x1714a04]
call fcn.0046978d
push eax
push 0x12
push dword [0x1714a40]
push 0x23
push dword [0x17148bc]
call fcn.004697c7
push eax
call fcn.0045eff4
mov ebx, eax
push dword [0x1714a04]
call fcn.004697c7
push eax
call fcn.0045eff4
sub ebx, eax
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0xffffffff
call fcn.00456350
mov dword [0x1714904], eax
push dword [0x1714888]
call fcn.0046978d
push eax
push 0x23
push 0x1a
push 0x194
push 0x3a
push 0xffffffff
call fcn.00456350
mov dword [0x17148e4], eax
push dword [0x17148fc]
call fcn.0046978d
push eax
push 0x23
push 0x1a
push 0x19c
push 0x235
push 0xffffffff
call fcn.00456350
mov dword [0x1714a48], eax
push dword [0x1714914]
mov edx, 0x550b52
pop ecx
call fcn.00411b60
je 0x403412
mov eax, 0x551b92
push eax
push dword [0x1714a48]
call fcn.0045667d
jmp 0x403423
mov eax, 0x552676
push eax
push dword [0x1714a48]
call fcn.0045667d
mov ebx, dword [0x17149a4]
and ebx, ebx
jne 0x40348d
push 1
mov eax, 0x550028
push eax
push dword [0x171487c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.0040632e
mov dword [0x1714980], eax
push 1
mov eax, 0x550028
push eax
push dword [0x171488c]
push 0x14
push 0x22
push 0xe
push 0x22b
call fcn.0040632e
mov dword [0x17148ac], eax
jmp 0x4034fb
push 1
mov eax, 0x550028
push eax
push dword [0x171487c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.0040632e
mov dword [0x1714980], eax
push 1
push dword [0x1714980]
call fcn.00455d4e
push 1
mov eax, 0x550028
push eax
push dword [0x171488c]
push 0x14
push 0x22
push 0xe
push 0x250
call fcn.0040632e
mov dword [0x17148ac], eax
push dword [0x1714914]
mov edx, 0x550b52
pop ecx
call fcn.00411b60
je 0x403550
push 0
mov eax, 0x55341c
push eax
push dword [0x1714890]
push 0x17
push 0xaa
push 0x14a
push 0x18c
call fcn.0040632e
mov dword [0x1714a50], eax
mov eax, 0x553c46
push eax
push dword [0x1714918]
call fcn.0045667d
jmp 0x403590
push 0
mov eax, 0x554248
push eax
push dword [0x1714890]
push 0x17
push 0xaa
push 0x14a
push 0x18c
call fcn.0040632e
mov dword [0x1714a50], eax
mov eax, 0x55165c
push eax
push dword [0x1714918]
call fcn.0045667d
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x1a
push 0x60
push 0xffffffff
call fcn.00456350
mov dword [0x17149c4], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x23
push 0x84
push 0xffffffff
call fcn.00456350
mov dword [0x17149c8], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x3e
push 0x9b
push 0xffffffff
call fcn.00456350
mov dword [0x17149d0], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x5d
push 0xa2
push 0xffffffff
call fcn.00456350
mov dword [0x17149d4], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x7d
push 0x9a
push 0xffffffff
call fcn.00456350
mov dword [0x17149d8], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x96
push 0x81
push 0xffffffff
call fcn.00456350
mov dword [0x17149dc], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0xa0
push 0x5f
push 0xffffffff
call fcn.00456350
mov dword [0x17149e0], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x96
push 0x3e
push 0xffffffff
call fcn.00456350
mov dword [0x17149e4], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x7d
push 0x24
push 0xffffffff
call fcn.00456350
mov dword [0x17149e8], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x5d
push 0x1c
push 0xffffffff
call fcn.00456350
mov dword [0x17149f0], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x3e
push 0x24
push 0xffffffff
call fcn.00456350
mov dword [0x1714964], eax
push dword [0x1714a64]
call fcn.0046978d
push eax
push 6
push 6
push 0x24
push 0x3d
push 0xffffffff
call fcn.00456350
mov dword [0x1714968], eax
mov ebp, 0x72a7b2
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171496c], eax
mov ebp, 0x72ad90
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714970], eax
mov ebp, 0x72b425
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714974], eax
mov ebp, 0x72b81c
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714978], eax
mov ebp, 0x72dcfe
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x171497c], eax
mov ebp, 0x7302ca
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x1714984], eax
push dword [0x171496c]
call fcn.00405d49
push dword [0x1714970]
call fcn.00405d49
push dword [0x1714974]
call fcn.00405d49
push dword [0x1714978]
call fcn.00405d49
push dword [0x171497c]
call fcn.00405d49
push dword [0x1714984]
call fcn.00405d49
call fcn.004548a0
mov ebp, 0x733592
push ebp
push 0xffffffff
call fcn.00469776
mov dword [0x17148b4], eax
push dword [0x1714974]
call fcn.0046978d
push eax
push 0x4e
push 0x4a
push 0x3a
push 0x3e
push 0xffffffff
call fcn.00456350
mov dword [0x1714958], eax
mov ebx, dword [0x1714844]
and ebx, ebx
jle 0x403901
mov dword [0x171491c], 1
push 1
call fcn.0040a71c
mov dword [0x171491c], 0
push 1
call fcn.0040a71c
jmp 0x40390b
push 1
call fcn.0040a71c
push 1
push dword [0x17149cc]
call fcn.00455d4e
push 1
push dword [0x1714a50]
call fcn.00455d4e
push 1
push dword [0x1714a08]
call fcn.00458ca4
push eax
call fcn.004070cd
push 8
push 0x1b3
push 0x168
push 0x64
push 1
push 0
call fcn.00408366
mov ebx, dword [0x17149a4]
and ebx, ebx
jne 0x40398a
push 0
push dword [0x1714a08]
call fcn.00404556
mov dword [0x1714a5c], 0
jmp 0x4039a4
push 1
push dword [0x1714a08]
call fcn.00404556
mov dword [0x1714a5c], 1
push edx
call fcn.00470c00
pop edx
push eax
mov edx, dword [0x1714a14]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x552e98
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c29f
call fcn.00411ba0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4039f1
jl 0x4039ed
cmp ebx, 0
ja 0x4039f1
xor eax, eax
jmp 0x4039f6
mov eax, 1
or eax, eax
je 0x403a38
push edx
call fcn.00470c00
pop edx
push eax
push 2
mov edx, dword [0x1714a14]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x552e98
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c3f6
call fcn.00411ba0
mov ebx, dword [0x17149a4]
and ebx, ebx
jle 0x403a59
push 0
push 1
push dword [0x1714934]
call fcn.0045682a
jmp 0x403a6e
push 0
push 0
push dword [0x1714934]
call fcn.0045682a
mov dword [0x1714910], 0
call fcn.00405d77
push dword [0x1714a08]
call fcn.00458cc0
push 1
push dword [0x17149b0]
call fcn.00455d4e
push 1
push dword [0x171490c]
call fcn.00455d4e
call fcn.00408fdc
call fcn.00458cde
mov dword [0x17149b4], eax
cmp dword [0x17149b4], 0
je 0x404063
push dword [0x17149b4]
call fcn.00405a2e
mov dword [0x17149b4], eax
push 9
call sub.USER32.dll_GetKeyState
mov ebx, eax
cmp ebx, 1
jle 0x403af4
call fcn.00458ce6
mov ebx, eax
cmp ebx, dword [0x1714a08]
jne 0x403af4
call fcn.0045e138
mov ebx, eax
cmp ebx, dword [0x1714a08]
jne 0x403b18
mov ebx, dword [0x17149b4]
cmp ebx, 0x204
jne 0x403b18
mov eax, 1
jmp 0x403b1a
xor eax, eax
and eax, eax
je 0x403b34
push dword [0x1714a08]
call fcn.00458ca4
push eax
push 0
call fcn.0045bacb
mov ebx, dword [0x17149b4]
cmp ebx, 0x201
jne 0x403b62
push 0
push 2
push 0xa1
push dword [0x1714a08]
call fcn.00458ca4
push eax
call sub.USER32.dll_SendMessageW
mov ebx, dword [0x17149b4]
cmp ebx, 0x332c
jne 0x403b86
call fcn.0045e147
mov ebx, eax
cmp ebx, dword [0x17148ac]
jne 0x403b86
mov eax, 1
jmp 0x403b88
xor eax, eax
and eax, eax
je 0x403bbb
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403bbb
push 1
push dword [0x1714a08]
call fcn.00404556
mov dword [0x1714a5c], 1
mov dword [0x17149b4], 0
mov ebx, dword [0x17149b4]
cmp ebx, 0x332c
jne 0x403bdf
call fcn.0045e147
mov ebx, eax
cmp ebx, dword [0x1714a48]
jne 0x403bdf
mov eax, 1
jmp 0x403be1
xor eax, eax
and eax, eax
je 0x403bfb
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403bfb
mov eax, 0x551d94
push eax
call fcn.00451746
mov ebx, dword [0x17149b4]
cmp ebx, 0x332e
jne 0x403cc5
call fcn.0045e156
mov ebx, eax
cmp ebx, 1
jne 0x403c2f
push dword [0x1714a08]
call fcn.00458ca4
push eax
push 0
call fcn.0045bacb
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403cc5
mov ebx, dword [0x1714a5c]
and ebx, ebx
jne 0x403c64
push 1
push dword [0x1714a08]
call fcn.00404556
mov dword [0x1714a5c], 1
jmp 0x403cb0
push 9
push dword [0x1714a08]
call fcn.00458ca4
push eax
call sub.USER32.dll_ShowWindow
push dword [0x1714a08]
call fcn.00458ca4
push eax
call sub.USER32.dll_SetForegroundWindow
push 0
push dword [0x1714a08]
call fcn.00404556
push dword [0x1714a08]
call fcn.00458cc0
mov dword [0x1714a5c], 0
mov dword [0x17149b4], 0
call fcn.00458cde
and eax, eax
je 0x403cc5
jmp 0x403cba
mov ebx, dword [0x17149b4]
cmp ebx, 0x332d
jne 0x403f45
push dword [0x1714f0c]
call fcn.0046a6ce
push dword [0x1714f0c]
call fcn.0046a6e3
or eax, eax
je 0x403d16
call fcn.0045e165
mov ebx, eax
mov ebp, dword [0x1714f10]
cmp ebx, dword [ebp + 0x40]
jne 0x403d14
push dword [0x1714f0c]
call fcn.0046a731
push eax
call fcn.0040a112
jmp 0x403ce2
call fcn.0045e165
push eax
mov ebx, 0x2e
cmp ebx, dword [esp]
jne 0x403d70
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x171484c]
mov eax, 0x553e06
push eax
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554aa2
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f44
mov ebx, 0x2f
cmp ebx, dword [esp]
jne 0x403dc4
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x171484c]
mov eax, 0x5500e2
push eax
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554aa2
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f44
mov ebx, 0x30
cmp ebx, dword [esp]
jne 0x403dde
mov eax, 0x553464
push eax
call fcn.00451746
jmp 0x403f44
mov ebx, 0x31
cmp ebx, dword [esp]
jne 0x403e32
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x171484c]
mov eax, 0x550fca
push eax
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554aa2
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f44
mov ebx, 0x32
cmp ebx, dword [esp]
jne 0x403e86
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x171484c]
mov eax, 0x553f28
push eax
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554aa2
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f44
mov ebx, 0x33
cmp ebx, dword [esp]
jne 0x403ed7
push edx
call fcn.00470c00
pop edx
push eax
push dword [0x171484c]
mov eax, 0x551578
push eax
mov edx, dword [0x171484c]
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470cc0
mov edx, 0x554aa2
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.004511ca
call fcn.00411ba0
jmp 0x403f44
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403f24
push 9
push dword [0x1714a08]
call fcn.00458ca4
push eax
call sub.USER32.dll_ShowWindow
push dword [0x1714a08]
call fcn.00458ca4
push eax
call sub.USER32.dll_SetForegroundWindow
push 0
push dword [0x1714a08]
call fcn.00404556
mov dword [0x1714a5c], 0
jmp 0x403f44
mov ebx, 2
cmp ebx, dword [esp]
jne 0x403f30
jmp 0x403f44
mov ebx, 3
cmp ebx, dword [esp]
jne 0x403f44
mov dword [0x17149b4], 0x333c
pop eax
mov ebx, dword [0x17149b4]
cmp ebx, 0x3336
jne 0x403f66
call fcn.0045e174
mov ebx, eax
cmp ebx, 4
jne 0x403f66
mov eax, 1
jmp 0x403f68
xor eax, eax
and eax, eax
je 0x403f71
call fcn.0040887a
mov ebx, dword [0x17149b4]
cmp ebx, 0x332c
jne 0x403f95
call fcn.0045e147
mov ebx, eax
cmp ebx, dword [0x1714980]
jne 0x403f95
mov eax, 1
jmp 0x403f97
xor eax, eax
and eax, eax
je 0x403fd6
call fcn.0045e156
mov ebx, eax
and ebx, ebx
jne 0x403fd6
mov ebx, dword [0x17149a4]
and ebx, ebx
jne 0x403fbc
mov dword [0x17149b4], 0x333c
jmp 0x403fd6
push 1
push dword [0x1714a08]
call fcn.00404556
mov dword [0x1714a5c], 1
push 0
call fcn.0045c01c
mov ebx, eax
and ebx, ebx
jne 0x404049
push dword [0x1714a20]
mov edx, 0x552582
pop ecx
call fcn.00411b60
je 0x404022
mov ebp, 0x60e519
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1714a08]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
jmp 0x404049
mov ebp, 0x5f4895
push ebp
push 1
call fcn.00469776
push eax
push dword [0x1714a08]
call fcn.00458ca4
push eax
push 0
call fcn.0045bcf6
mov ebx, dword [0x17149b4]
cmp ebx, 0x333c
je 0x404061
mov dword [0x17149b4], 0
jmp 0x404077
mov dword [0x17149b4], 0
push 5
call fcn.0045882e
mov ebx, dword [0x17149b4]
cmp ebx, 0x333c
jne 0x403a88
mov eax, 0x550028
push eax
mov eax, 0x550028
push eax
mov eax, 0x550028
push eax
call fcn.00405147
push edx
call fcn.00470c00
pop edx
push eax
push 2
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c0d4
mov edx, 0x551886
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c3f6
call fcn.00411ba0
push edx
call fcn.00470c00
pop edx
push eax
push 2
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
push edx
call fcn.00470c00
pop edx
push eax
call fcn.00450f08
call fcn.00411b42
add dword [esp], edx
call fcn.0045c0d4
mov edx, 0x550f62
push edx
call fcn.00470cc0
call fcn.00411b42
add dword [esp], edx
call fcn.0045c3f6
call fcn.00411ba0
jmp 0x40415a
push 0
call 0x404179
call fcn.00470bb0
push dword [0x1714814]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00411580
call fcn.0043495e
call fcn.00434b30
call fcn.004359b0
call fcn.00451a2d
call fcn.00452883
call fcn.004533f0
call fcn.004549ba
call sub.ole32.dll_OleUninitialize
call fcn.00458b24
call fcn.0045bca5
call fcn.0045c432
call fcn.0045cd20
call fcn.0045dff4
call fcn.0045ec5f
call fcn.00469414
call fcn.0046b057
call fcn.0046e290
call fcn.00470167
call fcn.004701b1
call fcn.0046fac0
ret