Function at 0x510530
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get graphical window text
Get number of processors
Get process heap flags
Hide graphical window
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x546699
mov eax, dword fs:[0]
push eax
sub esp, 0x194
mov eax, dword [0x577018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x40
mov dword [ebp - 0x4c], 0
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x40
push 0
push esi
mov dword [ebp - 4], 0
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x1b6
push 6
push dword [edi + 4]
call fcn.004e7330
sub esp, 0x18
mov dword [ebp - 4], 0xffffffff
mov ecx, esp
mov dword [edi + 0x64], eax
push 9
push 0x56767c
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
mov ecx, dword [edi + 0x64]
call fcn.004e75b0
sub esp, 0x18
mov ecx, esp
push 0xd
push str._Proxy_Socks
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
mov ecx, dword [edi + 0x64]
call fcn.004e75b0
sub esp, 0x18
mov ecx, esp
push 0xb
push str._Passwords
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
mov ecx, dword [edi + 0x64]
call fcn.004e75b0
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 1
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0xaa
push 0x29
push 0x19
push str.Max_Connections_per_Download
push dword [edi + 4]
call fcn.004e4f10
mov dword [ebp - 4], 0xffffffff
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0x68], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x44], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x510694
mov eax, dword [ebp - 0x4c]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x51069e
lea eax, [ebp - 0x44]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 2
call fcn.00519680
add esp, 0x10
push 0x14
push ecx
push 0x26
push 0xc8
push dword [edi + 4]
mov ecx, esi
call fcn.004e4370
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x6c], eax
call fcn.004ec6e0
mov edx, dword [edi + 0x6c]
mov cl, al
mov dword [ebp - 0x48], 0x8040201
xor eax, eax
mov dword [ebp - 0x44], 0x2018100c
cmp cl, byte [ebp + eax - 0x48]
je 0x510704
inc eax
cmp eax, 8
jb 0x5106f6
jmp 0x510709
cmp eax, 0xffffffff
jne 0x51070e
mov eax, 3
push 0
push eax
push 0x14e
push dword [edx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0x6c]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x51074c
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510756
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x58
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x58
push 0
push esi
mov dword [ebp - 4], 3
call fcn.00519680
add esp, 0x10
push 0
push 0x12
push 0xb4
push 0x28
push 0x109
sub esp, 0x18
mov ecx, esp
push 0x19
push str.8_Connections_Recommended
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
push dword [edi + 4]
mov ecx, esi
call fcn.004e5030
push 0x101
push 0
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x70], eax
push 0
push dword [eax + 0xc]
mov dword [eax + 0x44], 0xf77834
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [edi + 0x70]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510805
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x51080f
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x58
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x58
push 0
push esi
mov dword [ebp - 4], 4
call fcn.00519680
add esp, 0x10
push 0
push 0x12
push 0x15e
push 0x53
push 0x1c
sub esp, 0x18
mov ecx, esp
push 0x2d
push str.When_first_Connection_Starts_Downloading____:
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
push dword [edi + 4]
mov ecx, esi
call fcn.004e5030
push 0x101
push 0
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x74], eax
push 0
push dword [eax + 0xc]
mov dword [eax + 0x44], 0xf77834
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [edi + 0x74]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x5108bb
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x5108c5
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 5
call fcn.00519680
add esp, 0x10
push 1
push ecx
push 0x12c
push 0x67
push 0x21
push str.Create_Additional_Connections_All_at_Once
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov dword [ebp - 4], 0xffffffff
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0x78], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x510934
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x51093e
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 6
call fcn.00519680
add esp, 0x10
push 1
push ecx
push 0x12c
push 0x7d
push 0x21
push str.Create_Additional_Connections_One_by_One
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov dword [ebp - 4], 0xffffffff
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0x7c], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x5109ad
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x5109b7
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
sub esp, 0x18
mov ecx, esp
push 0x11
push str.ConnectionsAtOnce
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
xor ecx, ecx
call fcn.004ebb30
add esp, 0x18
push 0
push 1
push 0xf1
cmp eax, 2
jge 0x5109f9
mov eax, dword [edi + 0x78]
jmp 0x5109fc
mov eax, dword [edi + 0x7c]
push dword [eax + 0xc]
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
call eax
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 7
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0xc0
push 0xaa
push 0x19
push str.Bandwidth_Limit_per_Download__KB_s_
push dword [edi + 4]
call fcn.004e4f10
mov dword [ebp - 4], 0xffffffff
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0x80], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x510a78
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x510a82
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 8
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x46
push 0xaa
push 0xdc
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
mov esi, eax
mov dword [ebp - 4], 0xffffffff
push 0xfffffffffffffff0
mov dword [edi + 0x84], esi
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x2000
push eax
push 0xfffffffffffffff0
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [edi + 0x84]
push 0
push 6
push 0xc5
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 0x18
mov ecx, esp
push 0xe
push str.BandWidthLimit
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
xor ecx, ecx
call fcn.004ebb30
mov edx, eax
mov ecx, esp
call fcn.00409900
mov ecx, dword [edi + 0x84]
call fcn.004e4830
mov eax, dword [edi + 0x84]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510b72
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510b7c
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x58
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x58
push 0
push esi
mov dword [ebp - 4], 9
call fcn.00519680
add esp, 0x10
push 0
push 0x12
push 0x78
push 0xaa
push 0x127
sub esp, 0x18
mov ecx, esp
push 0x18
push str.0_or_blank_for_No_limit
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
push dword [edi + 4]
mov ecx, esi
call fcn.004e5030
push 0x101
push 0
mov dword [ebp - 4], 0xffffffff
mov dword [edi + 0x88], eax
push 0
push dword [eax + 0xc]
mov dword [eax + 0x44], 0xf77834
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [edi + 0x88]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510c31
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510c3b
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 0xa
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x6a
push 0xd7
push 0x19
push str.Default_User_Agent
push dword [edi + 4]
call fcn.004e4f10
mov dword [ebp - 4], 0xffffffff
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0x8c], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x510caa
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x510cb4
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov dword [ebp - 4], 0xb
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x118
push 0xd7
push 0x88
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
push 0
push 0x100
mov dword [ebp - 4], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xc5
mov dword [edi + 0x90], eax
push dword [eax + 0xc]
call esi
sub esp, 0x18
mov ecx, esp
call fcn.004ecb70
lea ecx, [ebp - 0x40]
call fcn.004157a0
add esp, 0x18
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
mov eax, dword [edi + 0x90]
cmovae ecx, dword [ebp - 0x40]
push ecx
push 0
push 0xc
push dword [eax + 0xc]
call esi
mov eax, dword [edi + 0x90]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510d7f
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510d89
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0xd
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x10
push 0x28
push 0xd8
push 0x1a2
push str.Reset
push dword [edi + 4]
call fcn.004e3f80
push 1
mov byte [ebp - 4], 0xc
push dword [0x57ac24]
mov dword [edi + 0x94], eax
push 0x30
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0x94]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510e10
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510e1a
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0xe
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0xe
push 0x190
push 0xec
push 0x1c
push str.Use_this_UA_for_both_Manual_and_Browser_Sent_Downloads___Be_Careful__
push dword [edi + 4]
call fcn.004e4130
mov byte [ebp - 4], 0xc
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [0x57ac24]
mov dword [edi + 0x98], eax
push 0x30
push dword [eax + 0xc]
call esi
sub esp, 0x18
mov ecx, esp
push 9
push str.UseUAgent
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
mov ecx, 2
call fcn.004ebb30
mov ecx, dword [edi + 0x98]
add esp, 0x18
mov ecx, dword [ecx + 0xc]
push 0
cmp eax, 2
jge 0x510eb9
push 1
jmp 0x510ebb
push 0
push 0xf1
push ecx
call esi
mov eax, dword [edi + 0x98]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510ef3
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510efd
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x58
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x58
push 0
push esi
mov byte [ebp - 4], 0xf
call fcn.00519680
add esp, 0x10
push 0
push 0x14
push 0xc8
push 0x106
push 0x8b
sub esp, 0x18
mov ecx, esp
push 0
push 0x559640
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
push dword [edi + 4]
mov ecx, esi
call fcn.004e5030
push 0x101
push 0
mov byte [ebp - 4], 0xc
mov dword [edi + 0xb4], eax
push 0
push dword [eax + 0xc]
mov dword [eax + 0x44], 0x101fa
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [edi + 0xb4]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x510faf
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x510fb9
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x10
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x6a
push 0x116
push 0x19
push str.Download_Directory
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0xc
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0x9c], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x511022
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x51102c
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x11
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x118
push 0x116
push 0x88
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
push 0
push 0x1fe
mov byte [ebp - 4], 0xc
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xc5
mov dword [edi + 0xa4], eax
push dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x64]
call fcn.004ed0b0
cmp dword [eax + 0x14], 8
jb 0x51109a
mov eax, dword [eax]
mov ecx, dword [edi + 0xa4]
push eax
push 0
push 0xc
push dword [ecx + 0xc]
call esi
mov ecx, dword [ebp - 0x50]
cmp ecx, 8
jb 0x5110e4
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x5110da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x512ad0
push ecx
push edx
call fcn.00517162
add esp, 8
mov eax, dword [edi + 0xa4]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x511114
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x51111e
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x12
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x16
push 0x116
push 0x1a2
push 0x564f54
push dword [edi + 4]
call fcn.004e3f80
push 1
mov byte [ebp - 4], 0xc
push dword [0x57ac24]
mov dword [edi + 0xac], eax
push 0x30
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xac]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x5111a5
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x5111af
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x13
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0xe
push 0x12c
push 0x12b
push 0x1c
push str.Create_Category_Folders___e.g.__Video__Document__...___
push dword [edi + 4]
call fcn.004e4130
mov byte [ebp - 4], 0xc
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [0x57ac24]
mov dword [edi + 0xc8], eax
push 0x30
push dword [eax + 0xc]
call esi
sub esp, 0x18
mov ecx, esp
push 0xf
push str.CategoryFolders
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
mov ecx, 2
call fcn.004ebb30
mov ecx, dword [edi + 0xc8]
add esp, 0x18
mov ecx, dword [ecx + 0xc]
push 0
cmp eax, 2
jge 0x51124e
push 1
jmp 0x511250
push 0
push 0xf1
push ecx
call esi
mov eax, dword [edi + 0xc8]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x511288
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x511292
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x58
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x58
push 0
push esi
mov byte [ebp - 4], 0x14
call fcn.00519680
add esp, 0x10
push 0
push 0x14
push 0xc8
push 0x13d
push 0x8b
sub esp, 0x18
mov ecx, esp
push 0
push 0x559640
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.00408270
push dword [edi + 4]
mov ecx, esi
call fcn.004e5030
push 0x101
push 0
mov byte [ebp - 4], 0xc
mov dword [edi + 0xb8], eax
push 0
push dword [eax + 0xc]
mov dword [eax + 0x44], 0x101fa
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [edi + 0xb8]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x511344
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x51134e
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x15
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x6a
push 0x14d
push 0x19
push str.Temporary_Directory
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0xc
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0xa0], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x5113b7
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x5113c1
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x16
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x118
push 0x14d
push 0x88
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
push 0
push 0x1fe
mov byte [ebp - 4], 0xc
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xc5
mov dword [edi + 0xa8], eax
push dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x28]
call fcn.004edd90
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x18], 0
jne 0x5114a9
lea ecx, [ebp - 0x64]
call fcn.004edef0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x44], eax
cmp ecx, eax
je 0x51146f
call fcn.00408210
mov eax, dword [ebp - 0x44]
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x50]
cmp ecx, 8
jb 0x5114a9
mov edx, dword [ebp - 0x64]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x51149f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x512ad5
push ecx
push edx
call fcn.00517162
add esp, 8
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov eax, dword [edi + 0xa8]
cmovae ecx, dword [ebp - 0x28]
push ecx
push 0
push 0xc
push dword [eax + 0xc]
call esi
mov eax, dword [edi + 0xa8]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x5114f4
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x5114fe
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x18
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x16
push 0x14d
push 0x1a2
push 0x564f54
push dword [edi + 4]
call fcn.004e3f80
push 1
mov byte [ebp - 4], 0x17
push dword [0x57ac24]
mov dword [edi + 0xb0], eax
push 0x30
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xb0]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x511585
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x51158f
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x19
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x14
push 0x12c
push 0x16f
push 0x19
push str.Get_File_Creation_Date_From_Server
push dword [edi + 4]
call fcn.004e4130
sub esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [edi + 0xc4], eax
push 0x12
push str.ServerCreationDate
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
mov ecx, 2
call fcn.004ebb30
mov ecx, dword [edi + 0xc4]
add esp, 0x18
mov ecx, dword [ecx + 0xc]
push 0
cmp eax, 2
jge 0x511619
push 1
jmp 0x51161b
push 0
push 0xf1
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xc4]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x511657
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x511661
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x1a
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x14
push 0x12c
push 0x186
push 0x19
push str.Show_Download_Completion_Dialog
push dword [edi + 4]
call fcn.004e4130
sub esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [edi + 0xbc], eax
push 0x10
push str.CompletionDialog
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
xor ecx, ecx
call fcn.004ebb30
mov ecx, dword [edi + 0xbc]
add esp, 0x18
mov ecx, dword [ecx + 0xc]
push 0
cmp eax, 2
jge 0x5116e8
push 1
jmp 0x5116ea
push 0
push 0xf1
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xbc]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x511726
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x511730
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x1b
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x14
push 0x12c
push 0x19d
push 0x19
push str.Start_Application_on_System_Startup___Recommended__
push dword [edi + 4]
call fcn.004e4130
sub esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [edi + 0xc0], eax
push 0xc
push str.AppAutoStart
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
xor ecx, ecx
call fcn.004ebb30
mov ecx, dword [edi + 0xc0]
add esp, 0x18
mov ecx, dword [ecx + 0xc]
push 0
cmp eax, 2
jge 0x5117b7
push 1
jmp 0x5117b9
push 0
push 0xf1
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0xc0]
mov esi, dword [edi + 0x64]
push 0
mov dword [ebp - 0x44], eax
push dword [eax + 0xc]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x5117f5
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x5117ff
lea edx, [ebp - 0x4c]
push edx
push eax
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x1c
call fcn.00519680
add esp, 0x10
push 0
push ecx
push 0x64
push 0x28
push 0x19
push str.No_Proxy_Socks
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov byte [ebp - 4], 0x17
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0xcc], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
add ecx, 0xc
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x51186b
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x511875
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x1d
call fcn.00519680
add esp, 0x10
push 0
push ecx
push 0x50
push 0x48
push 0x19
push str.HTTP_Proxy
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov byte [ebp - 4], 0x17
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0xd0], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
add ecx, 0xc
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x5118e1
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x5118eb
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x1e
call fcn.00519680
add esp, 0x10
push 0
push ecx
push 0x50
push 0x68
push 0x19
push str.Socks_Proxy
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov byte [ebp - 4], 0x17
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0xd4], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
add ecx, 0xc
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x511957
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x511961
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x1f
call fcn.00519680
add esp, 0x10
push 0
push ecx
push 0x48
push 0x7b
push 0x2e
push str.Socks_V5
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov byte [ebp - 4], 0x17
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0xdc], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
add ecx, 0xc
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x5119cd
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x5119d7
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x20
call fcn.00519680
add esp, 0x10
push 0
push ecx
push 0x48
push 0x7b
push 0x7a
push str.Socks_V4
push dword [edi + 4]
mov ecx, esi
call fcn.004e6070
mov byte [ebp - 4], 0x17
mov esi, dword [edi + 0x64]
push 0
mov dword [edi + 0xd8], eax
push dword [eax + 0xc]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x30]
add ecx, 0xc
mov edx, dword [ecx + 4]
cmp edx, dword [ecx + 8]
je 0x511a43
mov eax, dword [ebp - 0x44]
mov dword [edx], eax
add dword [ecx + 4], 4
jmp 0x511a4d
lea eax, [ebp - 0x4c]
push eax
push edx
call fcn.004e3e70
mov edx, 1
lea ecx, [ebp - 0x1a0]
call fcn.004ed3f0
push 0x2c
mov byte [ebp - 4], 0x21
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x22
call fcn.00519680
add esp, 0x10
lea eax, [ebp - 0x198]
push 0x12
push 0x69
push 0x58
push 0x78
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402a10
lea ecx, [ebp - 0x64]
call fcn.004157a0
add esp, 0x18
mov byte [ebp - 4], 0x23
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x4c], 1
jb 0x511ab5
mov eax, dword [eax]
push eax
push dword [edi + 4]
mov ecx, esi
call fcn.004e7e80
lea ecx, [ebp - 0x64]
mov dword [edi + 0xf4], eax
mov dword [ebp - 4], 0x21
call fcn.00408210
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0xf4]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x25
call fcn.00519680
movzx edx, word [ebp - 0x180]
lea ecx, [ebp - 0x64]
add esp, 0x10
call fcn.00410210
mov byte [ebp - 4], 0x26
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x4c], 2
jb 0x511b24
mov eax, dword [eax]
push 0x12
push 0x28
push 0x58
push 0xeb
push eax
push dword [edi + 4]
mov ecx, esi
call fcn.004e7e80
lea ecx, [ebp - 0x64]
mov dword [edi + 0xf8], eax
mov dword [ebp - 4], 0x21
call fcn.00408210
mov esi, dword [edi + 0xf8]
push 0xfffffffffffffff0
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x2000
push eax
push 0xfffffffffffffff0
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [edi + 0xf8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 5
push 0xc5
push dword [eax + 0xc]
call esi
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0xf8]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov dword [ebp - 0x44], eax
push 0x2c
push 0
push eax
mov byte [ebp - 4], 0x28
call fcn.00519680
add esp, 0x10
lea eax, [ebp - 0x17c]
push 0x12
push 0x50
push 0x58
push 0x11d
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402a10
lea ecx, [ebp - 0x64]
call fcn.004157a0
add esp, 0x18
mov byte [ebp - 4], 0x29
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x4c], 4
jb 0x511bf0
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
push eax
push dword [edi + 4]
call fcn.004e7e80
lea ecx, [ebp - 0x64]
mov dword [edi + 0xfc], eax
mov dword [ebp - 4], 0x21
call fcn.00408210
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0xfc]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov dword [ebp - 0x44], eax
push 0x2c
push 0
push eax
mov byte [ebp - 4], 0x2b
call fcn.00519680
add esp, 0x10
lea eax, [ebp - 0x164]
push 0x12
push 0x50
push 0x58
push 0x177
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402a10
lea ecx, [ebp - 0x64]
call fcn.004157a0
add esp, 0x18
mov byte [ebp - 4], 0x2c
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x4c], 8
jb 0x511c76
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
push eax
push dword [edi + 4]
call fcn.004e7e80
lea ecx, [ebp - 0x64]
mov dword [edi + 0x100], eax
mov dword [ebp - 4], 0x21
call fcn.00408210
mov eax, dword [edi + 0x100]
push 0
push 0x2a
push 0xcc
push dword [eax + 0xc]
call esi
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0x100]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x2e
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0x46
push 0x96
push str.Address
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0xe0], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x2f
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x28
push 0x46
push 0xf3
push 0x567bfc
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0xe4], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x30
call fcn.00519680
add esp, 0xc
push 0x3c
push 0x46
push 0x13b
push str.User
push dword [edi + 4]
mov ecx, esi
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0xe8], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x31
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0x46
push 0x186
push str.Password
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0xec], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x32
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 5
push 0x58
push 0xe4
push 0x567bf8
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0xf0], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x33
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x5a
push 0xc8
push 0x17
push str.https_Protocol
push dword [edi + 4]
call fcn.004e4130
push 1
mov byte [ebp - 4], 0x21
mov dword [edi + 0x14c], eax
push eax
mov ecx, dword [edi + 0x64]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x34
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x69
push 0xc8
push 0x78
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x118], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x35
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x28
push 0xc8
push 0xeb
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
mov esi, eax
mov byte [ebp - 4], 0x21
push 0xfffffffffffffff0
mov dword [edi + 0x11c], esi
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x2000
push eax
push 0xfffffffffffffff0
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [edi + 0x11c]
push 0
push 5
push 0xc5
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0x11c]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x36
call fcn.00519680
add esp, 0x10
push 0x12
push 0x50
push 0xc8
push 0x11d
push 0x559640
push dword [edi + 4]
mov ecx, esi
call fcn.004e7e80
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x120], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x37
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x50
push 0xc8
push 0x177
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
push 0
push 0x2a
mov byte [ebp - 4], 0x21
push 0xcc
mov dword [edi + 0x124], eax
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0x124]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x38
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0xb6
push 0x96
push str.Address
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x104], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x39
call fcn.00519680
add esp, 0xc
push 0x28
push 0xb6
push 0xf3
push 0x567bfc
push dword [edi + 4]
mov ecx, esi
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x108], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x3a
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0xb6
push 0x13b
push str.User
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x10c], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x3b
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0xb6
push 0x186
push str.Password
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x110], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x3c
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 5
push 0xc8
push 0xe4
push 0x567bf8
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x114], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x3d
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x5a
push 0x109
push 0x17
push str.ftp_Protocol
push dword [edi + 4]
call fcn.004e4130
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x150], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x3e
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x69
push 0x109
push 0x78
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x13c], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x3f
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x28
push 0x109
push 0xeb
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
mov esi, eax
mov byte [ebp - 4], 0x21
push 0xfffffffffffffff0
mov dword [edi + 0x140], esi
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x2000
push eax
push 0xfffffffffffffff0
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [edi + 0x140]
push 0
push 5
push 0xc5
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0x140]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x40
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x50
push 0x109
push 0x11d
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x144], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x41
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x12
push 0x50
push 0x109
push 0x177
push 0x559640
push dword [edi + 4]
call fcn.004e7e80
push 0
push 0x2a
mov byte [ebp - 4], 0x21
push 0xcc
mov dword [edi + 0x148], eax
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0x148]
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x42
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0xf7
push 0x96
push str.Address
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x128], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x43
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x28
push 0xf7
push 0xf3
push 0x567bfc
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x12c], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x44
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0xf7
push 0x13b
push str.User
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x130], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x45
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 0x3c
push 0xf7
push 0x186
push str.Password
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x134], eax
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x46
call fcn.00519680
add esp, 0xc
mov ecx, esi
push 5
push 0x109
push 0xe4
push 0x567bf8
push dword [edi + 4]
call fcn.004e4f10
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 1
push eax
mov dword [edi + 0x138], eax
call fcn.004e7730
push 0x58
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x58
push 0
push esi
mov byte [ebp - 4], 0x47
call fcn.00519680
add esp, 0x10
push 0
push 0x14
push 0xc8
push 0x13b
push 0xb4
sub esp, 0x18
mov ecx, esp
push 0x559640
call fcn.00409680
push dword [edi + 4]
mov ecx, esi
call fcn.004e5030
push 0x101
push 0
mov byte [ebp - 4], 0x21
mov dword [edi + 0x154], eax
push 0
push dword [eax + 0xc]
mov dword [eax + 0x44], 0x101fa
call dword [sym.imp.USER32.dll_RedrawWindow]
mov ecx, dword [edi + 0x64]
push 1
push dword [edi + 0x154]
call fcn.004e7730
mov eax, dword [edi + 0xd8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0xf1
push dword [eax + 0xc]
call esi
mov eax, dword [edi + 0xdc]
push 0
push 0
push 0xf1
push dword [eax + 0xc]
call esi
call fcn.004ec7c0
push 0
push 1
push 0xf1
cmp al, 4
jne 0x5125a1
mov eax, dword [edi + 0xd8]
jmp 0x5125a7
mov eax, dword [edi + 0xdc]
push dword [eax + 0xc]
call esi
cmp byte [ebp - 0x19c], 0
mov ecx, edi
mov edx, dword [edi]
push 0
push 0
je 0x512656
cmp dword [ebp - 0x1a0], 0
jne 0x51264e
mov eax, dword [edi + 0xd0]
push dword [eax + 8]
call dword [edx + 0x1c]
sub esp, 0x18
mov ecx, esp
push 0xe
push str.HTTPS_IsActive
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
call fcn.004ebed0
mov ecx, dword [edi + 0x14c]
add esp, 0x18
push eax
call fcn.004e42d0
sub esp, 0x18
mov ecx, esp
push 0xc
push str.FTP_IsActive
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.00402bc0
call fcn.004ebed0
mov ecx, dword [edi + 0x150]
add esp, 0x18
push eax
call fcn.004e42d0
jmp 0x512662
mov eax, dword [edi + 0xd4]
jmp 0x51265c
mov eax, dword [edi + 0xcc]
push dword [eax + 8]
call dword [edx + 0x1c]
mov edx, 2
lea ecx, [ebp - 0x14c]
call fcn.004ed3f0
sub esp, 0x18
mov byte [ebp - 4], 0x48
lea eax, [ebp - 0x144]
mov ecx, esp
push eax
call fcn.00402a10
mov ecx, dword [edi + 0x118]
call fcn.004e4830
movzx edx, word [ebp - 0x12c]
lea ecx, [ebp - 0x64]
call fcn.00410210
cmp dword [eax + 0x14], 8
jb 0x5126a9
mov eax, dword [eax]
mov ecx, dword [edi + 0x11c]
push eax
push 0
push 0xc
push dword [ecx + 0xc]
call esi
lea ecx, [ebp - 0x64]
call fcn.00408210
sub esp, 0x18
lea eax, [ebp - 0x128]
mov ecx, esp
push eax
call fcn.00402a10
mov ecx, dword [edi + 0x120]
call fcn.004e4830
sub esp, 0x18
lea eax, [ebp - 0x110]
mov ecx, esp
push eax
call fcn.00402a10
mov ecx, dword [edi + 0x124]
call fcn.004e4830
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x21
call fcn.004bdab0
mov edx, 3
lea ecx, [ebp - 0xf8]
call fcn.004ed3f0
sub esp, 0x18
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0xf0]
mov ecx, esp
push eax
call fcn.00402a10
mov ecx, dword [edi + 0x13c]
call fcn.004e4830
movzx edx, word [ebp - 0xd8]
lea ecx, [ebp - 0x90]
call fcn.00410210
cmp dword [eax + 0x14], 8
jb 0x512752
mov eax, dword [eax]
mov ecx, dword [edi + 0x140]
push eax
push 0
push 0xc
push dword [ecx + 0xc]
call esi
lea ecx, [ebp - 0x90]
call fcn.00408210
sub esp, 0x18
lea eax, [ebp - 0xd4]
mov ecx, esp
push eax
call fcn.00402a10
mov ecx, dword [edi + 0x144]
call fcn.004e4830
sub esp, 0x18
lea eax, [ebp - 0xbc]
mov ecx, esp
push eax
call fcn.00402a10
mov ecx, dword [edi + 0x148]
call fcn.004e4830
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x21
call fcn.004bdab0
push 0x3c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x3c
push 0
push esi
mov byte [ebp - 4], 0x4a
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0
push 1
push 0
push 0xff
push 0x18e
push 0x32
push 0x30
push dword [edi + 4]
call fcn.004e57c0
push 1
push dword [0x57ac28]
mov dword [esi], vtable.NeatCredsTable.0
push 0x30
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
movsd xmm0, qword [0x577b80]
mulsd xmm0, qword [0x5682b8]
mov byte [esi + 0x2d], 0
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], 0x566124
cvttsd2si eax, xmm0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0xa4]
push eax
push 0
push 0x1061
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
movsd xmm0, qword [0x577b80]
xor eax, eax
mulsd xmm0, qword [0x568340]
mov edx, 2
cmp byte [esi + 0x2d], al
mov dword [ebp - 0x78], 0xf
cmovne eax, edx
mov dword [ebp - 0x6c], str.Target
mov dword [ebp - 0x74], eax
cvttsd2si ecx, xmm0
mov dword [ebp - 0x70], ecx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x64], 1
push eax
push 1
push 0x1061
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
movsd xmm0, qword [0x577b80]
xor eax, eax
cmp byte [esi + 0x2d], al
mov edx, 2
mulsd xmm0, qword [0x5682e0]
cmovne eax, edx
mov dword [ebp - 0xd0], 0xf
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xd0]
push eax
push edx
cvttsd2si ecx, xmm0
push 0x1061
mov dword [ebp - 0xc4], str.User
mov dword [ebp - 0xbc], edx
push dword [esi + 0xc]
mov dword [ebp - 0xc8], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
movsd xmm0, qword [0x577b80]
xor eax, eax
cmp byte [esi + 0x2d], al
mov edx, 2
mulsd xmm0, qword [0x5682e0]
cmovne eax, edx
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x124]
push eax
push 3
cvttsd2si ecx, xmm0
push 0x1061
mov dword [ebp - 0x118], str.Password
mov dword [ebp - 0x110], 3
push dword [esi + 0xc]
mov dword [ebp - 0x11c], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 2
push esi
mov dword [edi + 0x15c], esi
call fcn.004e7730
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x4b
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x1c
push 0x46
push 0x140
push 0xd6
push str.Remove
push dword [edi + 4]
call fcn.004e3f80
mov byte [ebp - 4], 0x21
mov ecx, dword [edi + 0x64]
push 2
push eax
mov dword [edi + 0x158], eax
call fcn.004e7730
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x44], eax
mov ecx, dword [edi + 0x60]
push eax
mov ecx, dword [ecx + 0x6c]
call fcn.0041e400
mov ecx, dword [edi + 0x15c]
call fcn.004f3560
mov ecx, dword [edi + 0x64]
call fcn.004e77a0
push 0x2c
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x4c
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x1c
push 0x5a
push 0x1c8
push 0x8c
push 0x56555c
push dword [edi + 4]
call fcn.004e3f80
mov byte [ebp - 4], 0x21
push 0x2c
mov dword [edi + 0x160], eax
call fcn.00517390
mov esi, eax
mov dword [ebp - 0x44], esi
push 0x2c
push 0
push esi
mov byte [ebp - 4], 0x4d
call fcn.00519680
add esp, 0x10
mov ecx, esi
push 0x1c
push 0x5a
push 0x1c8
push 0x10e
push str.Cancel
push dword [edi + 4]
call fcn.004e3f80
lea ecx, [ebp - 0x1a0]
mov dword [edi + 0x164], eax
call fcn.004bdab0
lea ecx, [ebp - 0x28]
call fcn.00408210
lea ecx, [ebp - 0x40]
call fcn.00408210
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00517154
mov esp, ebp
pop ebp
ret
call fcn.0051eb64
call fcn.0051eb64
int3