Function at 0x574310
Capabilities:
Create thread
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6623e7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f0
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push str.DB38160B_3B06_47e9_8E90_5F354255DE02
push 0
push 1
push 0
mov esi, ecx
call edi
push 0
push 0
push 1
push 0
mov dword [esi + 0x3188], eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_CreateMutexW]
push str.4C144B6B_BECD_4b53_81DD_42E8BB978A9E
push 0
push 0
mov dword [esi + 0x3184], eax
call ebx
push 0
push 0
push 0
push 0
mov dword [esi + 0x3190], eax
call edi
xor edi, edi
push edi
push edi
push edi
mov dword [esi + 0x318c], eax
call ebx
push edi
push 0x3e8
mov dword [esi + 0x3194], eax
mov eax, dword [esi + 4]
push edi
push eax
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.005bc840
xor ecx, ecx
push 0x17
mov ebx, eax
mov word [ebp - 0x30], cx
push 0x679a64
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], edi
call fcn.00407940
mov dword [ebp - 4], edi
push edi
lea edx, [ebp - 0x30]
push edx
push 1
mov ecx, ebx
call fcn.005bc3b0
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1c], 8
jb 0x5743f7
mov eax, dword [ebp - 0x30]
push eax
call fcn.0060faf6
add esp, 4
mov edx, dword [esi + 4]
xor ecx, ecx
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], cx
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x48], edi
jle 0x57443f
lea eax, [ebp - 0x44]
push eax
push 4
lea ecx, [ebp - 0x4c]
push ecx
push 0x566990
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x3144], eax
cmp eax, edi
je 0x57443f
cmp eax, 0xffffffff
je 0x57443f
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov edx, dword [esi + 0x30f0]
mov ecx, dword [esi + 0x30f4]
push esi
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esi + 0x30f8]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x30fc]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov ecx, dword [esi + 0x30ec]
call fcn.004392a0
mov edx, dword [esi + 0x30f0]
mov ecx, dword [esi + 0x30f4]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esi + 0x30f8]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x30fc]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov ecx, dword [esi + 0x30ec]
add ecx, 0x21c
call fcn.005aa710
mov edx, dword [esi + 0x3100]
lea ebx, [esi + 0x3100]
mov edi, eax
mov dword [ebp - 0x44], edi
cmp edx, dword [0x699a58]
jne 0x5744ea
mov eax, dword [ebx + 4]
cmp eax, dword [0x699a5c]
jne 0x5744ea
mov ecx, dword [ebx + 8]
cmp ecx, dword [0x699a60]
jne 0x5744ea
mov edx, dword [ebx + 0xc]
cmp edx, dword [0x699a64]
je 0x574575
push ebx
lea eax, [ebp - 0x14]
push eax
lea ecx, [edi + 0xef8]
call fcn.0043aff0
mov eax, dword [ebp - 0x14]
cmp eax, dword [edi + 0xefc]
je 0x574526
add eax, 0x20
lea ecx, [esi + 0x31a4]
push eax
call fcn.004078d0
lea eax, [esi + 0x31a4]
lea ecx, [edi + 0xf08]
push eax
call fcn.004078d0
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
push esi
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebx + 8]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x30f0]
mov dword [eax + 0xc], edx
mov edx, dword [esi + 0x30f4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 0x30f8]
mov dword [eax + 4], edx
mov edx, dword [esi + 0x30fc]
mov dword [eax + 8], ecx
mov ecx, dword [esi + 0x30ec]
mov dword [eax + 0xc], edx
call fcn.0043b2f0
mov eax, dword [edi + 0xc4]
lea ebx, [esi + 0x1a4]
mov dword [ebx + 0x30], eax
lea eax, [ebp - 0x14]
add edi, 0x5f
mov dword [ebp - 0x74], eax
mov dword [ebx + 0x2c], edi
mov eax, dword [esi + 0x31a4]
sub eax, 0x10
push eax
call fcn.004011f0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 2
lea edx, [ebp - 0x14]
lea ecx, [esi + 0x1b8]
push edx
call fcn.004078d0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x5745e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push ecx
mov ecx, dword [esi + 4]
push edx
mov edx, dword [esi + 0x28]
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_CallWindowProcW]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [eax], 1
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
mov ecx, 0x700724
call eax
add eax, 0x10
mov dword [ebp + 0x10], eax
mov dword [ebp - 4], 5
mov ecx, dword [esi + 4]
push ecx
lea edx, [ebp + 0x10]
push str.ActivityView_u
push edx
call fcn.00405ab0
push 0x600
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 6
test edi, edi
je 0x574675
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x57466b
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.00595040
jmp 0x574677
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [esi + 4]
push ecx
lea edx, [ebp + 0x10]
push 0x67b9d8
push edx
mov dword [esi + 0x3140], eax
call fcn.00405ab0
push 0x7ac
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 7
test edi, edi
je 0x5746cf
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x5746c5
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.005541f0
jmp 0x5746d1
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [esi + 4]
push ecx
lea edx, [ebp + 0x10]
push str.ProcessView_u
push edx
mov dword [esi + 0x3114], eax
call fcn.00405ab0
push 0x308
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 8
test edi, edi
je 0x574736
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x57471f
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
mov ecx, dword [esi + 0x3180]
add ecx, 0xb54
push ecx
push eax
mov ecx, edi
call fcn.00548b30
jmp 0x574738
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3118], eax
lea eax, [ebp + 0x10]
push str.InternetView_u
push eax
call fcn.00405ab0
push 0x348
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 9
test edi, edi
je 0x574790
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x574786
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004ecb90
jmp 0x574792
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3110], eax
lea eax, [ebp + 0x10]
push str.QueriesView_u
push eax
call fcn.00405ab0
push 0x334
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0xa
test edi, edi
je 0x5747ea
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x5747e0
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.00556350
jmp 0x5747ec
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3138], eax
lea eax, [ebp + 0x10]
push str.IMView_u
push eax
call fcn.00405ab0
push 0x370
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0xb
test edi, edi
je 0x574844
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x57483a
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004d8c20
jmp 0x574846
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x311c], eax
lea eax, [ebp + 0x10]
push str.SNView_u
push eax
call fcn.00405ab0
push 0x398
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0xc
test edi, edi
je 0x57489e
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x574894
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.00561ee0
jmp 0x5748a0
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x313c], eax
lea eax, [ebp + 0x10]
push str.KbdLogView_u
push eax
call fcn.00405ab0
push 0x3c0
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0xd
test edi, edi
je 0x5748f8
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x5748ee
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004f4840
jmp 0x5748fa
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3124], eax
lea eax, [ebp + 0x10]
push str.FilespyView_u
push eax
call fcn.00405ab0
push 0x33c
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0xe
test edi, edi
je 0x574952
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x574948
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004cd700
jmp 0x574954
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3128], eax
lea eax, [ebp + 0x10]
push str.USBShadowspyView_u
push eax
call fcn.00405ab0
push 0x35c
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0xf
test edi, edi
je 0x5749ac
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x5749a2
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.00598e20
jmp 0x5749ae
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3130], eax
lea eax, [ebp + 0x10]
push str.EmailspyView_u
push eax
call fcn.00405ab0
push 0x628
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0x10
test edi, edi
je 0x574a06
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x5749fc
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004c5e10
jmp 0x574a08
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x312c], eax
lea eax, [ebp + 0x10]
push str.ClipboardContentView_u
push eax
call fcn.00405ab0
push 0x38c
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0x11
test edi, edi
je 0x574a60
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x574a56
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004b43f0
jmp 0x574a62
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [esi + 4]
push edx
mov dword [esi + 0x3134], eax
lea eax, [ebp + 0x10]
push str.LoginView_u
push eax
call fcn.00405ab0
push 0x2f4
call fcn.00611c8b
mov edi, eax
add esp, 0x10
mov dword [ebp + 0xc], edi
mov byte [ebp - 4], 0x12
test edi, edi
je 0x574aba
mov eax, dword [ebp + 0x10]
cmp dword [eax - 4], 1
jle 0x574ab0
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [ebp + 0x10]
call fcn.00401370
mov eax, dword [ebp + 0x10]
push eax
mov ecx, edi
call fcn.004fa930
jmp 0x574abc
xor eax, eax
mov byte [ebp - 4], 5
mov dword [esi + 0x3120], eax
cmp dword [0x71476c], 0
jne 0x574b0b
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
push 0
push ecx
mov dword [eax], 0x4d2
mov eax, esp
mov dword [eax], 0
mov edx, dword [esi + 4]
mov dword [ebp + 0xc], esp
push edx
lea ecx, [esi + 0x154]
call fcn.0056ec70
push 1
lea ecx, [esi + 0x154]
call fcn.00467750
mov ecx, dword [esi + 4]
lea eax, [ebp - 0x60]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x54]
push 2
add edx, 0xc8
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov dword [ebp - 0x60], edx
mov edx, dword [ebp - 0x5c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x58]
add ecx, 0xfa
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov eax, dword [esi + 4]
mov dword [ebp - 0x54], ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00573770
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov ecx, dword [esi + 4]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, dword [esi + 0x3140]
call fcn.0056e830
mov edx, dword [esi + 0x3140]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [edx + 0x274], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x3114]
mov dword [ebp + 0xc], esp
push eax
call fcn.0056e670
mov ecx, dword [esi + 0x3114]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [ecx + 0x5b4], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0x3118]
mov dword [ebp + 0xc], esp
push edx
call fcn.0056e6f0
mov eax, dword [esi + 0x3118]
push 0
push ecx
mov dword [eax + 0x2a4], ebx
mov dword [ebp + 0xc], esp
mov eax, esp
push 0
push 0
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov ecx, dword [esi + 4]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, dword [esi + 0x3110]
call fcn.0056e530
mov edx, dword [esi + 0x3110]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [edx + 0x2e0], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x3138]
mov dword [ebp + 0xc], esp
push eax
call fcn.0056f0b0
mov ecx, dword [esi + 0x3138]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [ecx + 0x2d4], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0x311c]
mov dword [ebp + 0xc], esp
push edx
call fcn.0056e8b0
mov eax, dword [esi + 0x311c]
push 0
push ecx
mov dword [eax + 0x2e4], ebx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov ecx, dword [esi + 4]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, dword [esi + 0x313c]
call fcn.0056eb30
mov edx, dword [esi + 0x313c]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
push 0
mov dword [edx + 0x2e4], ebx
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [ebp + 0xc], esp
mov dword [eax], 0
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x3124]
push eax
call fcn.0056ee30
mov ecx, dword [esi + 0x3124]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [ecx + 0x2e4], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0x3134]
mov dword [ebp + 0xc], esp
push edx
call fcn.0056e9f0
mov eax, dword [esi + 0x3134]
push 0
push ecx
mov dword [eax + 0x2d8], ebx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov ecx, dword [esi + 4]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, dword [esi + 0x3128]
call fcn.0056f330
mov edx, dword [esi + 0x3128]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [edx + 0x2d4], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x3130]
mov dword [ebp + 0xc], esp
push eax
call fcn.0056f1f0
mov ecx, dword [esi + 0x3130]
push 0
push ecx
mov eax, esp
mov dword [ebp + 0xc], esp
push 0
push 0
mov dword [ecx + 0x2d8], ebx
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0x312c]
mov dword [ebp + 0xc], esp
push edx
call fcn.0056ef70
mov eax, dword [esi + 0x312c]
push 0
push ecx
mov dword [eax + 0x248], ebx
mov dword [ebp + 0xc], esp
mov eax, esp
push 0
push 0
push 0
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [eax], 0
mov ecx, dword [esi + 4]
mov dword [ebp + 0xc], esp
push ecx
mov ecx, dword [esi + 0x3120]
call fcn.0056ecf0
mov edx, dword [esi + 0x3120]
push 0x80
lea eax, [ebp - 0x174]
push eax
mov dword [edx + 0x2d4], ebx
mov ecx, dword [0x716738]
mov ebx, dword [sym.imp.USER32.dll_LoadStringW]
push 0xefe1
push ecx
call ebx
mov edx, dword [0x716738]
push edx
push ecx
mov eax, esp
mov dword [eax], 0x1c3
mov eax, dword [esi + 0x3140]
mov eax, dword [eax + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x315c], eax
mov eax, dword [0x716738]
push 0x8f
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x12c
mov edx, dword [esi + 0x3114]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x314c], eax
mov eax, dword [0x716738]
push 0x90
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x131
mov edx, dword [esi + 0x3118]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
mov dword [esi + 0x3150], eax
push 0x80
lea edx, [ebp - 0x174]
mov eax, dword [0x716738]
push edx
push 0xda
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0xe4
mov edx, dword [esi + 0x3110]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3154], eax
mov eax, dword [0x716738]
push 0x140
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x151
mov edx, dword [esi + 0x3138]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3148], eax
mov eax, dword [0x716738]
push 0x145
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x154
mov edx, dword [esi + 0x313c]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3158], eax
mov eax, dword [0x716738]
push 0xb7
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0xdc
mov edx, dword [esi + 0x311c]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3160], eax
mov eax, dword [0x716738]
push 0xe7
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x135
mov edx, dword [esi + 0x3124]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3164], eax
mov eax, dword [0x716738]
push 0x13a
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x148
mov edx, dword [esi + 0x3134]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3168], eax
mov eax, dword [0x716738]
push 0xf0
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x133
mov edx, dword [esi + 0x3128]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3170], eax
mov eax, dword [0x716738]
push 0x124
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x13b
mov edx, dword [esi + 0x3130]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
mov dword [ebp + 0xc], esp
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3178], eax
mov eax, dword [0x716738]
push 0x11f
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x137
mov edx, dword [esi + 0x312c]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x80
lea edx, [ebp - 0x174]
push edx
mov dword [esi + 0x3174], eax
mov eax, dword [0x716738]
push 0x7d4
push eax
call ebx
mov ecx, dword [0x716738]
push ecx
push ecx
mov eax, esp
mov dword [eax], 0x139
mov edx, dword [esi + 0x3120]
mov eax, dword [edx + 4]
mov dword [ebp + 0xc], esp
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00574290
push 0x13
xor edx, edx
push str.StaffcopSelectedTab
lea ecx, [ebp - 0x30]
mov dword [esi + 0x316c], eax
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], dx
call fcn.00407940
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x50]
push 0
lea eax, [ebp - 0x30]
push eax
push 1
call fcn.005bc3b0
mov dword [ebp + 0xc], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1c], 8
jb 0x57527a
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0060faf6
add esp, 4
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi + 0x64]
xor edx, edx
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
mov word [ebp - 0x30], dx
mov dword [ebp + 0xc], ecx
cmp ecx, eax
je 0x575397
cmp ecx, dword [esi + 0x74]
jl 0x5752a7
mov dword [ebp + 0xc], eax
mov dword [ebp + 0x14], eax
mov eax, dword [esi + 0x44]
push eax
mov dword [ebp - 0x30], eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x2c], eax
or eax, 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x44]
push eax
mov dword [ebp - 0x28], 0xfffffdd8
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
call dword [sym.imp.USER32.dll_GetParent]
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x30]
push ecx
push edx
push 0x4e
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
je 0x575397
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x64], eax
test eax, eax
js 0x57535f
test dword [esi + 0xec], 6
je 0x57535f
cmp eax, dword [esi + 0x74]
jge 0x57535f
mov ecx, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x70]
push eax
push ecx
lea ecx, [esi + 0x40]
call fcn.005671e0
mov eax, dword [esi + 0x90]
mov ecx, dword [ebp - 0x70]
cmp ecx, eax
jge 0x575347
sub eax, ecx
add eax, 0x14
jmp 0x575359
mov eax, dword [esi + 0x98]
mov ecx, dword [ebp - 0x68]
cmp ecx, eax
jle 0x57535f
sub eax, ecx
sub eax, 0x14
add dword [esi + 0xe8], eax
lea ecx, [esi + 0x40]
call fcn.0056b8a0
mov edx, dword [esi + 0x44]
push 1
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 0x44]
push eax
mov dword [ebp - 0x28], 0xfffffdd9
call dword [sym.imp.USER32.dll_GetParent]
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x30]
push ecx
push edx
push 0x4e
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x716738]
push 0x80
lea eax, [ebp - 0x174]
push eax
push 0x800d
push ecx
call ebx
mov edx, dword [esi + 0x3114]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov eax, dword [0x716738]
push 0x80
lea edx, [ebp - 0x174]
push edx
push 0x8016
push eax
call ebx
mov ecx, dword [esi + 0x313c]
mov eax, dword [ecx + 4]
lea edx, [ebp - 0x174]
push edx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov ecx, dword [0x716738]
push 0x80
lea eax, [ebp - 0x174]
push eax
push 0x800e
push ecx
call ebx
mov edx, dword [esi + 0x3118]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov eax, dword [0x716738]
push 0x80
lea edx, [ebp - 0x174]
push edx
push 0x800f
push eax
call ebx
mov ecx, dword [esi + 0x3110]
mov eax, dword [ecx + 4]
lea edx, [ebp - 0x174]
push edx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov ecx, dword [0x716738]
push 0x80
lea eax, [ebp - 0x174]
push eax
push 0xb8
push ecx
call ebx
mov edx, dword [esi + 0x311c]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov eax, dword [0x716738]
push 0x80
lea edx, [ebp - 0x174]
push edx
push 0x7d5
push eax
call ebx
mov ecx, dword [esi + 0x3120]
mov eax, dword [ecx + 4]
lea edx, [ebp - 0x174]
push edx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov ecx, dword [0x716738]
push 0x80
lea eax, [ebp - 0x174]
push eax
push 0x7d6
push ecx
call ebx
mov edx, dword [esi + 0x3128]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov eax, dword [0x716738]
push 0x80
lea edx, [ebp - 0x174]
push edx
push 0x120
push eax
call ebx
mov ecx, dword [esi + 0x312c]
mov eax, dword [ecx + 4]
lea edx, [ebp - 0x174]
push edx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov ecx, dword [0x716738]
push 0x80
lea eax, [ebp - 0x174]
push eax
push 0x125
push ecx
call ebx
mov edx, dword [esi + 0x3130]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov eax, dword [0x716738]
push 0x80
lea edx, [ebp - 0x174]
push edx
push 0x8011
push eax
call ebx
mov ecx, dword [esi + 0x3124]
mov eax, dword [ecx + 4]
lea edx, [ebp - 0x174]
push edx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov ecx, dword [0x716738]
push 0x80
lea eax, [ebp - 0x174]
push eax
push 0x8012
push ecx
call ebx
mov edx, dword [esi + 0x3134]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
mov eax, dword [0x716738]
push 0x80
lea edx, [ebp - 0x174]
push edx
push 0x8013
push eax
call ebx
mov ecx, dword [esi + 0x3138]
mov eax, dword [ecx + 4]
lea edx, [ebp - 0x174]
push edx
push eax
lea ecx, [esi + 0x40]
call fcn.00571190
push 0x80
lea eax, [ebp - 0x174]
push eax
mov dword [esi + 0x1a0], 1
mov ecx, dword [0x716738]
push 0x92
push ecx
call ebx
mov ecx, dword [ebp - 0x44]
lea edx, [ebp - 0x30]
push edx
call fcn.0043b4b0
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x575631
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040bea0
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x1c], 8
jb 0x575650
mov eax, dword [ebp - 0x30]
push eax
call fcn.0060faf6
add esp, 4
xor ecx, ecx
push 3
mov word [ebp - 0x30], cx
push 0x670c2c
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], 0
call fcn.00401710
lea eax, [ebp - 0x174]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x575680
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x174]
push edx
lea ecx, [ebp - 0x10]
call fcn.00401710
mov eax, dword [ebp - 0x10]
cmp dword [eax - 4], 1
jle 0x5756b7
mov eax, dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x10]
call fcn.00401370
mov eax, dword [ebp - 0x10]
mov ecx, dword [esi + 4]
push eax
push ecx
mov edi, eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov edx, dword [esi + 4]
mov eax, dword [0x712b5c]
mov ecx, dword [esi + 8]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push edx
push eax
push ecx
call ebx
lea ecx, [esi + 0x124]
call fcn.00567920
mov edx, dword [0x716738]
push 0x2040
push 0
push 0xff000000
push 1
push 0x10
push 0xe5
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
push 0
push 1
mov ecx, esi
mov dword [esi + 0x150], eax
call fcn.0056d310
mov eax, dword [esi + 0x3128]
test eax, eax
je 0x57572b
add eax, 4
mov dword [ebp - 0x40], eax
jmp 0x575732
mov dword [ebp - 0x40], 0
mov eax, dword [esi + 0x3110]
xor edi, edi
cmp eax, edi
je 0x575746
add eax, 4
mov dword [ebp - 0x3c], eax
jmp 0x575749
mov dword [ebp - 0x3c], edi
mov eax, dword [esi + 0x3138]
cmp eax, edi
je 0x57575b
add eax, 4
mov dword [ebp - 0x38], eax
jmp 0x57575e
mov dword [ebp - 0x38], edi
mov eax, dword [esi + 0x311c]
cmp eax, edi
je 0x575770
add eax, 4
mov dword [ebp - 0x34], eax
jmp 0x575773
mov dword [ebp - 0x34], edi
mov eax, dword [esi + 0x313c]
cmp eax, edi
je 0x575785
add eax, 4
mov dword [ebp - 0x30], eax
jmp 0x575788
mov dword [ebp - 0x30], edi
mov eax, dword [esi + 0x3124]
cmp eax, edi
je 0x57579a
add eax, 4
mov dword [ebp - 0x2c], eax
jmp 0x57579d
mov dword [ebp - 0x2c], edi
mov eax, dword [esi + 0x3134]
cmp eax, edi
je 0x5757af
add eax, 4
mov dword [ebp - 0x28], eax
jmp 0x5757b2
mov dword [ebp - 0x28], edi
mov eax, dword [esi + 0x3120]
cmp eax, edi
je 0x5757c4
add eax, 4
mov dword [ebp - 0x24], eax
jmp 0x5757c7
mov dword [ebp - 0x24], edi
mov eax, dword [esi + 0x3118]
cmp eax, edi
je 0x5757d9
add eax, 4
mov dword [ebp - 0x20], eax
jmp 0x5757dc
mov dword [ebp - 0x20], edi
mov eax, dword [esi + 0x3130]
cmp eax, edi
je 0x5757ee
add eax, 4
mov dword [ebp - 0x1c], eax
jmp 0x5757f1
mov dword [ebp - 0x1c], edi
push 0x11
mov dword [ebp - 0x18], edi
call dword [sym.imp.GDI32.dll_GetStockObject]
lea ecx, [ebp - 0x1fc]
push ecx
push 0x5c
push eax
mov dword [esi + 0x31a0], eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push str.Calibri
lea edx, [ebp - 0x1e0]
push 0x20
push edx
call fcn.00611c28
sub dword [ebp - 0x1fc], 2
add esp, 0xc
lea eax, [ebp - 0x1fc]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x31a0], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp + 0xc], edi
cmp eax, edi
je 0x5758e9
mov edi, eax
mov eax, dword [esi + 0x31a0]
mov ecx, dword [edi]
push 1
push eax
push 0x30
push ecx
call ebx
mov edx, dword [edi]
push 0x18433
push 0
push 0x1036
push edx
call ebx
mov eax, dword [edi]
push 0
push 0
push 0x104e
push eax
call ebx
push 0x12c
push 0
push 0x418
push eax
mov dword [ebp + 0x14], eax
call ebx
mov ecx, dword [ebp + 0x14]
mov edx, dword [edi]
push 0
push ecx
push 0x104a
push edx
call ebx
mov eax, dword [edi]
push 0
push 0
push 0x101f
push eax
call ebx
lea ecx, [ebp - 0x1a0]
push ecx
push 0
push 0x120c
push eax
mov dword [ebp - 0x1a0], 0x80
mov dword [ebp - 0x180], 0
call ebx
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + eax*4 - 0x3c]
inc eax
mov dword [ebp + 0xc], eax
test edi, edi
jne 0x575852
mov edx, dword [esi + 4]
push 0
push 0xe803
push 0x111
push edx
mov byte [esi + 0x198], 0
call ebx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x575925
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x57594b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10