Function at 0x451880
Capabilities:
Check if file exists
Create thread
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x648]
sub esp, 0x648
push 0xffffffffffffffff
push 0x4b0155
mov eax, dword fs:[0]
push eax
sub esp, 0x1e0
mov eax, dword [0x4d0968]
xor eax, ebp
mov dword [ebp + 0x644], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x650]
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], eax
call fcn.0047a2c0
lea ecx, [ebp - 0xf8]
xor ebx, ebx
push ecx
mov dword [ebp - 4], ebx
call fcn.004717a0
push str.configcustomer.conf
push eax
lea edx, [ebp - 0x114]
push edx
mov byte [ebp - 4], 1
call fcn.00415930
add esp, 0x10
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 2
call fcn.0047b010
mov esi, 0x10
cmp dword [ebp - 0xfc], esi
jb 0x451923
mov eax, dword [ebp - 0x110]
push eax
call fcn.004803bd
add esp, 4
cmp dword [ebp - 0xe0], esi
mov edi, 0xf
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0x100], ebx
mov byte [ebp - 0x110], bl
mov byte [ebp - 4], bl
jb 0x451954
mov ecx, dword [ebp - 0xf4]
push ecx
call fcn.004803bd
add esp, 4
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0xe4], ebx
mov byte [ebp - 0xf4], bl
call fcn.004794c0
test eax, eax
ja 0x4519fd
lea edx, [ebp - 0x184]
push edx
call fcn.004717a0
push str.configcustomer.txt
push eax
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 3
call fcn.00415930
add esp, 0x10
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
call fcn.0047b010
cmp dword [ebp - 0x134], esi
jb 0x4519bf
mov ecx, dword [ebp - 0x148]
push ecx
call fcn.004803bd
add esp, 4
cmp dword [ebp - 0x16c], esi
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x138], ebx
mov byte [ebp - 0x148], bl
mov byte [ebp - 4], bl
jb 0x4519eb
mov edx, dword [ebp - 0x180]
push edx
call fcn.004803bd
add esp, 4
mov dword [ebp - 0x16c], edi
mov dword [ebp - 0x170], ebx
mov byte [ebp - 0x180], bl
lea ecx, [ebp - 0x1a0]
call fcn.00451770
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 5
call fcn.00479ab0
lea ecx, [ebp - 0x1a0]
call fcn.00474ef0
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x4b674f
mov byte [ebp - 4], 6
mov byte [ecx + 4], bl
call fcn.0040bd70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20], esp
push 7
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.Modules
mov byte [ebp - 4], 7
mov byte [ecx + 4], bl
call fcn.0040bd70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48], esp
push 2
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x4b7f44
mov byte [ebp - 4], 8
mov byte [ecx + 4], bl
call fcn.0040bd70
lea ecx, [ebp + 0xf0]
push ecx
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 6
call fcn.00475130
mov edx, dword [ebp + 0x104]
add edx, 1
push edx
mov byte [ebp - 4], 9
call fcn.0047edfd
add esp, 4
cmp dword [ebp + 0x108], esi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xf4]
jae 0x451ad6
lea eax, [ebp + 0xf4]
mov esi, dword [ebp - 0x28]
push eax
mov eax, dword [ebp + 0x104]
add eax, 1
push eax
push esi
call fcn.0048424b
push 0x4b7f40
push esi
call fcn.0048418c
mov esi, eax
add esp, 0x14
cmp esi, ebx
je 0x451b91
mov ecx, esi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], ebx
mov byte [ebp - 0x98], bl
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
add ecx, 1
cmp al, bl
jne 0x451b20
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040bd70
lea ecx, [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa
call fcn.0044d090
cmp dword [ebp - 0x84], 0x10
mov byte [ebp - 4], 9
jb 0x451b67
mov edx, dword [ebp - 0x98]
push edx
call fcn.004803bd
add esp, 4
push 0x4b7f40
push ebx
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], ebx
mov byte [ebp - 0x98], bl
call fcn.0048418c
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x451b02
mov eax, dword [ebp - 0x28]
push eax
call fcn.00480bca
add esp, 4
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x68], ebx
call fcn.00451770
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x68]
push ecx
push ebx
push eax
push 0x42c330
push ebx
push ebx
mov byte [ebp - 4], 0xb
mov dword [eax + 0x5a0], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
je 0x451bda
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x200
lea edx, [ebp + 0x344]
push ebx
push edx
call fcn.00480820
add esp, 0xc
push 0x100
lea eax, [ebp + 0x344]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp + 0x344]
push 0x5c
push ecx
mov esi, str.XunYouPlatform.txt
call fcn.004821d6
add esp, 8
jmp 0x451c20
movzx ecx, word [esi]
mov word [eax], cx
add esi, 2
add eax, 2
cmp cx, bx
jne 0x451c20
lea edx, [ebp + 0x344]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x452a9e
mov edi, 7
lea eax, [ebp + 0x344]
mov dword [ebp + 0x124], edi
mov dword [ebp + 0x120], ebx
mov word [ebp + 0x110], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x451c67
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp + 0x344]
push eax
lea ecx, [ebp + 0x10c]
call fcn.00412d30
lea ecx, [ebp + 0x344]
push 0x5c
push ecx
mov byte [ebp - 4], 0xc
call fcn.004821d6
lea edx, [ebp + 0x344]
push 0x4b7f10
push edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x24], 0x3e8
call fcn.00484129
mov esi, eax
add esp, 0x10
cmp esi, ebx
jne 0x451d65
mov eax, dword [ebp + 0x110]
mov esi, 8
cmp dword [ebp + 0x124], esi
jae 0x451cdc
lea eax, [ebp + 0x110]
push eax
lea eax, [ebp + 0x344]
push 0x4b7eec
push eax
call fcn.00481b0b
add esp, 0xc
cmp dword [ebp + 0x124], esi
jb 0x451d08
mov ecx, dword [ebp + 0x110]
push ecx
call fcn.004803bd
add esp, 4
lea ecx, [ebp - 0xb8]
mov dword [ebp + 0x124], edi
mov dword [ebp + 0x120], ebx
mov word [ebp + 0x110], bx
mov byte [ebp - 4], 9
call fcn.004517f0
cmp dword [ebp + 0x108], 0x10
jb 0x451d42
mov edx, dword [ebp + 0xf4]
push edx
call fcn.004803bd
add esp, 4
lea ecx, [ebp - 0x40]
mov dword [ebp + 0x108], 0xf
mov dword [ebp + 0x104], ebx
mov byte [ebp + 0xf4], bl
call fcn.0043e1f0
jmp 0x452bad
push 2
push ebx
push esi
call fcn.00483758
add esp, 0xc
test eax, eax
jne 0x451e1c
push esi
call fcn.00483ff5
add esp, 4
cmp eax, ebx
mov dword [ebp - 0x10], eax
jle 0x451e1c
add eax, 4
push eax
call fcn.0047edfd
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x451e1c
mov eax, dword [ebp - 0x10]
add eax, 4
push eax
push ebx
push edi
call fcn.00480820
push ebx
push ebx
push esi
call fcn.00483758
mov eax, dword [ebp - 0x10]
push esi
push eax
push 1
push edi
call fcn.00483e42
add esp, 0x28
push edi
lea ecx, [ebp + 0x1c]
call fcn.004146e0
lea ecx, [ebp + 0x1c]
push ecx
lea edx, [ebp]
push edx
mov byte [ebp - 4], 0xd
call fcn.0047d390
sub esp, 0x14
lea eax, [ebp]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xe
call fcn.004138e0
lea ecx, [ebp - 0xb8]
call fcn.00474ef0
push edi
call fcn.00480bca
add esp, 4
lea ecx, [ebp]
call fcn.0040a610
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xc
call fcn.0040a610
push esi
call fcn.00483891
mov esi, dword [ebp - 0x14]
mov ecx, dword [esi + 4]
add esp, 4
push 0x3e8
push ecx
mov dword [esi + 0x59c], 0xffffffff
call dword [sym.imp.USER32.dll_GetDlgItem]
lea edx, [ebp - 0x60]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esi + 4]
mov edi, dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [ebp - 0x60]
push eax
push ecx
call edi
test eax, eax
je 0x451e6a
mov eax, dword [esi + 4]
lea edx, [ebp - 0x58]
push edx
push eax
call edi
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], 1
add eax, 2
add dword [ebp - 0x4c], 2
mov dword [ebp - 0x1c], eax
push 0x100
lea ecx, [ebp + 0x544]
push ebx
push ecx
call fcn.00480820
push 0x200
lea edx, [ebp + 0x144]
push ebx
push edx
call fcn.00480820
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp + 0x544]
push str.XunYouModule_d
push ecx
call fcn.00481d86
add esp, 8
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov edi, 0xf
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x4b674f
mov byte [ecx + 4], bl
call fcn.0040bd70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x11
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.EmbedIntoPlatform
mov byte [ebp - 4], 0xf
mov byte [ecx + 4], bl
call fcn.0040bd70
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
lea eax, [ebp + 0x544]
mov dword [esi + 0x14], ebx
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x10], esp
mov byte [esi + 4], bl
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x451f20
sub eax, edi
push eax
lea edx, [ebp + 0x544]
push edx
mov ecx, esi
call fcn.0040bd70
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xc
call fcn.00475130
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x11
jb 0x451f5f
mov eax, dword [eax + 4]
jmp 0x451f62
add eax, 4
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x451f6d
xor edx, edx
jmp 0x451fb5
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
add edi, 1
cmp edi, 0x3fffffff
jg 0x451fb1
lea eax, [edi + edi]
call fcn.00480be0
mov esi, esp
cmp esi, ebx
je 0x451fb1
mov edx, dword [ebp - 0x10]
push edi
push esi
push 0xffffffffffffffff
push edx
push ebx
push 0x3a8
mov word [esi], bx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
neg eax
sbb eax, eax
and eax, esi
jmp 0x451fb3
xor eax, eax
mov edx, eax
mov edi, 7
mov eax, edx
mov dword [ebp + 0x140], edi
mov dword [ebp + 0x13c], ebx
mov word [ebp + 0x12c], bx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x451fd2
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x128]
call fcn.00412d30
cmp dword [ebp - 0x118], 0x10
mov byte [ebp - 4], 0x13
jb 0x45200a
mov eax, dword [ebp - 0x12c]
push eax
call fcn.004803bd
add esp, 4
mov eax, dword [ebp + 0x13c]
cmp eax, ebx
mov dword [ebp - 0x118], 0xf
mov dword [ebp - 0x11c], ebx
mov byte [ebp - 0x12c], bl
je 0x4529bc
push 1
push 0x4b7ec4
push eax
push ebx
lea ecx, [ebp + 0x128]
call fcn.0042dbe0
mov edi, eax
neg edi
sbb edi, edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x4b674f
add edi, 1
mov byte [ecx + 4], bl
call fcn.0040bd70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push 8
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.PathName
mov byte [ebp - 4], 0x14
mov byte [ecx + 4], bl
call fcn.0040bd70
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x18], esi
lea esi, [ebp + 0x544]
mov dword [ecx + 0x14], ebx
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x10], esp
mov byte [ecx + 4], bl
lea eax, [esi + 1]
jmp 0x4520b0
mov dl, byte [esi]
add esi, 1
cmp dl, bl
jne 0x4520b0
sub esi, eax
push esi
lea edx, [ebp + 0x544]
push edx
call fcn.0040bd70
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x13
call fcn.00475130
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x16
jb 0x4520f0
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10], ecx
jmp 0x4520f6
add eax, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jne 0x4520ff
xor eax, eax
jmp 0x452134
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
add esi, 1
cmp esi, 0x3fffffff
jle 0x45211a
xor eax, eax
jmp 0x452134
lea eax, [esi + esi]
call fcn.00480be0
mov ecx, dword [ebp - 0x10]
mov eax, esp
push 0x3a8
push esi
push ecx
push eax
call fcn.004010f0
mov ecx, eax
lea esi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x452140
sub ecx, esi
sar ecx, 1
push ecx
push eax
lea ecx, [ebp + 0x128]
call fcn.00412d30
cmp dword [ebp - 0x150], 0x10
mov byte [ebp - 4], 0x13
jb 0x452178
mov edx, dword [ebp - 0x164]
push edx
call fcn.004803bd
add esp, 4
cmp dword [ebp + 0x13c], ebx
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], ebx
mov byte [ebp - 0x164], bl
je 0x4529e0
cmp dword [0x4d2384], ebx
je 0x45221c
cmp dword [0x4d2388], 0x10
jb 0x4521bb
mov eax, dword [0x4d2374]
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x4521c2
xor eax, eax
jmp 0x4521f7
mov dword [ebp - 0x10], 0x4d2374
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
add esi, 1
cmp esi, 0x3fffffff
jle 0x4521dd
xor eax, eax
jmp 0x4521f7
lea eax, [esi + esi]
call fcn.00480be0
mov ecx, dword [ebp - 0x10]
mov eax, esp
push 0x3a8
push esi
push ecx
push eax
call fcn.004010f0
cmp dword [ebp + 0x140], 8
mov ecx, dword [ebp + 0x12c]
jae 0x45220c
lea ecx, [ebp + 0x12c]
push ecx
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x452999
cmp dword [ebp + 0x140], 8
mov esi, dword [ebp + 0x12c]
mov ecx, esi
jae 0x452233
lea ecx, [ebp + 0x12c]
mov edx, dword [ebp - 0x4c]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, bx
jne 0x452236
cmp dword [ebp + 0x140], 8
jb 0x45225c
cmp esi, ebx
mov dword [ebp - 0x10], esi
jne 0x452265
mov dword [ebp - 0x44], ebx
jmp 0x45229d
lea edx, [ebp + 0x12c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
cmp eax, 0x3fffffff
jle 0x45227e
mov dword [ebp - 0x44], ebx
jmp 0x45229d
lea esi, [eax + eax]
mov eax, esi
call fcn.00480be0
mov ecx, dword [ebp - 0x10]
mov eax, esp
push 0x3a8
push esi
push ecx
push eax
call fcn.0042ba10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x3c], ebx
je 0x4523f2
mov esi, dword [ebp - 0x38]
mov ecx, esi
sub ecx, dword [ebp - 0x3c]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4523f2
mov eax, dword [ebp - 0x3c]
cmp eax, esi
mov dword [ebp - 0x20], esi
jbe 0x4522dc
call fcn.00481100
mov esi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
cmp eax, esi
mov dword [ebp - 0x10], esi
jbe 0x4522ee
call fcn.00481100
mov esi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
cmp eax, esi
mov dword [ebp - 0x18], eax
jbe 0x4522fa
call fcn.00481100
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x44]
push ecx
push edx
push eax
lea esi, [ebp - 0x40]
mov dword [ebp - 0x7c], eax
call fcn.00431970
add esp, 0xc
cmp esi, ebx
mov dword [ebp - 0x7c], eax
je 0x452321
mov eax, esi
cmp esi, eax
je 0x452326
call fcn.00481100
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [ebp - 0x20]
jne 0x4523f2
lea edx, [ebp + 0x128]
push str.xyxyd.dll
push edx
call fcn.00431810
add esp, 8
test al, al
je 0x452999
mov word [ebp + 0x70], bx
mov dword [ebp + 0x74], ebx
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x7c], ebx
mov dword [ebp + 0x80], ebx
mov dword [ebp + 0x84], ebx
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x90], ebx
mov dword [ebp + 0xac], 0xf
mov dword [ebp + 0xa8], ebx
mov byte [ebp + 0x98], bl
mov eax, dword [ebp - 0x64]
mov esi, dword [ebp - 0x14]
push eax
lea ecx, [ebp + 0x90]
push ecx
lea edx, [ebp + 0x344]
push edx
mov ecx, esi
mov byte [ebp - 4], 0x17
mov dword [ebp + 0x84], edi
call fcn.0043de80
test eax, eax
je 0x4523ea
mov eax, dword [ebp + 0x90]
mov ecx, dword [eax + 8]
mov dword [ebp + 0x88], ecx
mov edx, dword [eax + 8]
push ebx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ax, word [ebp - 0x24]
lea ecx, [ebp + 0x70]
push ecx
lea ecx, [esi + 0x574]
mov word [ebp + 0x70], ax
call fcn.0044f3f0
lea ecx, [ebp + 0x70]
jmp 0x452994
lea edx, [ebp + 0x128]
push str.xyxyd.dll
push edx
call fcn.00431810
add esp, 8
mov dword [ebp + 0xec], 0xf
mov dword [ebp + 0xe8], ebx
mov byte [ebp + 0xd8], bl
lea eax, [ebp + 0x344]
push eax
mov byte [ebp - 4], 0x18
mov dword [ebp + 0xc4], edi
mov dword [ebp + 0xd0], ebx
mov dword [ebp + 0xc8], ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
cmp eax, 0x3fffffff
jle 0x45244d
xor esi, esi
jmp 0x45246e
lea esi, [eax + eax]
mov eax, esi
call fcn.00480be0
mov eax, esp
push 0x3a8
push esi
lea ecx, [ebp + 0x344]
push ecx
push eax
call fcn.0042ba10
mov esi, eax
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
add ecx, 1
cmp al, bl
jne 0x452473
sub ecx, edx
push ecx
push esi
lea ecx, [ebp + 0xd4]
call fcn.0040bd70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x4b6be0
call fcn.004146e0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x4b7ea0
mov byte [ebp - 4], 0x19
call fcn.004146e0
sub esp, 0x1c
lea edx, [ebp + 0x544]
mov ecx, esp
mov dword [ebp - 0x24], esp
push edx
mov byte [ebp - 4], 0x1a
call fcn.004146e0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x18
call fcn.00475130
cmp dword [eax + 0x18], 0x10
jb 0x4524ec
mov eax, dword [eax + 4]
jmp 0x4524ef
add eax, 4
push eax
call fcn.00481ce0
movzx esi, ax
add esp, 4
cmp dword [ebp - 0xc4], 0x10
mov dword [ebp - 0x24], esi
jb 0x452516
mov ecx, dword [ebp - 0xd8]
push ecx
call fcn.004803bd
add esp, 4
cmp si, bx
mov dword [ebp - 0xc4], 0xf
mov dword [ebp - 0xc8], ebx
mov byte [ebp - 0xd8], bl
jbe 0x45298e
add esi, 0x3e8
cmp edi, ebx
mov dword [ebp - 0x24], esi
je 0x4527d4
mov edx, dword [ebp - 0x64]
push edx
lea eax, [ebp + 0xd0]
push eax
lea ecx, [ebp + 0x344]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0043de80
test eax, eax
je 0x45298e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x4b674f
mov dword [ebp - 0x18], ebx
call fcn.004146e0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10], esp
push str.Icon
mov byte [ebp - 4], 0x1b
call fcn.004146e0
sub esp, 0x1c
lea edx, [ebp + 0x544]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push edx
mov byte [ebp - 4], 0x1c
call fcn.004146e0
lea eax, [ebp + 0x54]
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x18
call fcn.00475130
cmp dword [ebp + 0x6c], 0x10
mov byte [ebp - 4], 0x1d
jb 0x4525d4
mov edi, dword [ebp + 0x58]
cmp edi, ebx
jne 0x4525d7
mov dword [ebp - 0x10], ebx
jmp 0x45260a
lea edi, [ebp + 0x58]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
add esi, 1
cmp esi, 0x3fffffff
jle 0x4525f0
mov dword [ebp - 0x10], ebx
jmp 0x45260a
lea eax, [esi + esi]
call fcn.00480be0
mov eax, esp
push 0x3a8
push esi
push edi
push eax
call fcn.004010f0
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0x68], ebx
je 0x452682
mov ecx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov edx, dword [edi + 0x5a4]
push ecx
push edx
mov esi, 0x64
call dword [sym.imp.USER32.dll_LoadBitmapW]
cmp eax, ebx
mov dword [ebp - 0x50], eax
je 0x452675
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x50]
call fcn.004033a0
test al, al
je 0x452656
mov ecx, dword [ebp - 0xc0]
mov eax, 0x55555556
imul ecx
mov esi, edx
shr esi, 0x1f
add esi, edx
mov ecx, dword [ebp - 0x10]
mov edx, dword [edi + 0x5a4]
push 0x2000
push ebx
push 0xffffffffffffffff
push 3
push esi
push ecx
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x50]
call fcn.004065a0
cmp dword [ebp - 0x18], ebx
jne 0x45268f
lea ecx, [ebp + 0x54]
call fcn.0040a610
jmp 0x45298e
sub esp, 0x1c
lea eax, [ebp + 0x54]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
call fcn.004138e0
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x1ec]
push esi
push ecx
call fcn.004391b0
add esp, 0x24
push eax
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x1e
call fcn.00437630
lea edx, [ebp - 0x1c0]
push edx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [edi + 0x638]
mov byte [ebp - 4], 0x1f
call fcn.0043c390
lea ecx, [ebp - 0x1c0]
call fcn.00435280
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x1d
call fcn.00435250
push 0x50
call fcn.00480c61
add esp, 4
cmp eax, ebx
je 0x452711
mov ecx, eax
call fcn.00432800
jmp 0x452713
xor eax, eax
push ebx
push ecx
mov dword [ebp + 0xcc], eax
mov eax, esp
mov dword [ebp - 0x2c], esp
push ebx
push 0x50000000
movzx ecx, si
push ebx
push ecx
mov dword [eax], ecx
mov eax, esp
lea edx, [ebp - 0x60]
mov dword [eax], edx
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 0xcc]
mov dword [ebp - 0x2c], esp
push eax
call fcn.00437be0
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp + 0xcc]
call fcn.0042e340
mov eax, dword [ebp + 0xcc]
mov dword [eax + 0x2c], ebx
mov dword [eax + 0x30], 2
mov dword [eax + 0x34], 1
mov dword [eax + 0x38], ebx
mov ecx, dword [ebp + 0xcc]
mov eax, dword [ecx + 0x24]
or eax, 1
mov dword [ecx + 0x24], eax
cmp dword [edi + 0x59c], 0xffffffff
mov eax, dword [ebp + 0xd0]
mov edx, dword [eax + 8]
mov dword [ebp + 0xc8], edx
jne 0x4527b8
lea ecx, [edi + 0x574]
call fcn.0042c870
lea ecx, [ebp + 0x54]
mov dword [edi + 0x59c], eax
mov byte [ebp - 4], 0x18
call fcn.0040a610
jmp 0x452942
mov eax, dword [eax + 8]
push ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x18
call fcn.0040a610
jmp 0x452942
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp + 0x344]
push edx
mov ecx, edi
mov dword [ebp - 0x48], ebx
call fcn.0042c2d0
test eax, eax
je 0x45298e
push 0x50
call fcn.00480c61
add esp, 4
cmp eax, ebx
je 0x45280b
mov ecx, eax
call fcn.00432800
jmp 0x45280d
xor eax, eax
push ebx
push ecx
mov dword [ebp + 0xcc], eax
mov eax, esp
mov dword [ebp - 0x2c], esp
push ebx
push 0x50000000
movzx ecx, si
push ebx
push ecx
mov dword [eax], ecx
mov eax, esp
lea edx, [ebp - 0x60]
mov dword [eax], edx
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 0xcc]
mov dword [ebp - 0x2c], esp
push eax
call fcn.00437be0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c], esp
push 0x4b674f
call fcn.004146e0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Icon
mov byte [ebp - 4], 0x20
call fcn.004146e0
sub esp, 0x1c
lea edx, [ebp + 0x544]
mov ecx, esp
mov dword [ebp - 0x18], esp
push edx
mov byte [ebp - 4], 0x21
call fcn.004146e0
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x18
call fcn.00475130
cmp dword [ebp + 0x50], 0x10
jb 0x4528a4
mov edi, dword [ebp + 0x3c]
cmp edi, ebx
jne 0x4528a7
xor eax, eax
jmp 0x4528d6
lea edi, [ebp + 0x3c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
add esi, 1
cmp esi, 0x3fffffff
jle 0x4528bf
xor eax, eax
jmp 0x4528d6
lea eax, [esi + esi]
call fcn.00480be0
mov eax, esp
push 0x3a8
push esi
push edi
push eax
call fcn.004010f0
cmp dword [ebp + 0x4c], ebx
je 0x4528fc
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x5a4]
push 0x2000
push ebx
push 0xffffffffffffffff
push 3
push 0x64
push eax
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
cmp eax, ebx
jne 0x4528ff
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp + 0xcc]
push eax
call fcn.0042e340
mov eax, dword [ebp + 0xcc]
mov dword [eax + 0x2c], ebx
mov dword [eax + 0x30], 2
mov dword [eax + 0x34], 1
mov dword [eax + 0x38], ebx
mov ecx, dword [ebp + 0xcc]
mov eax, dword [ecx + 0x24]
or eax, 1
mov dword [ecx + 0x24], eax
lea ecx, [ebp + 0x38]
call fcn.0040a610
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x58]
mov dword [ebp + 0xb8], ecx
lea ecx, [ebp + 0xb0]
mov dword [ebp + 0xb4], eax
mov eax, dword [ebp - 0x54]
push ecx
lea ecx, [edi + 0x574]
mov word [ebp + 0xb0], si
mov dword [ebp + 0xbc], edx
mov dword [ebp + 0xc0], eax
call fcn.0044f3f0
mov edx, dword [ebp - 0x1c]
push ebx
push edx
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea ecx, [ebp + 0xb0]
call fcn.00435040
lea ecx, [ebp + 0x128]
mov byte [ebp - 4], 0xc
call fcn.0040a9d0
mov eax, dword [ebp - 0x28]
add eax, 1
cmp eax, 0x14
mov dword [ebp - 0x28], eax
jl 0x451e81
jmp 0x452a13
cmp dword [ebp + 0x140], 8
mov byte [ebp - 4], 0xc
jb 0x4529d8
mov ecx, dword [ebp + 0x12c]
push ecx
call fcn.004803bd
add esp, 4
mov dword [ebp + 0x140], edi
jmp 0x452a06
cmp dword [ebp + 0x140], 8
mov byte [ebp - 4], 0xc
jb 0x4529fc
mov edx, dword [ebp + 0x12c]
push edx
call fcn.004803bd
add esp, 4
mov dword [ebp + 0x140], 7
mov word [ebp + 0x12c], bx
mov dword [ebp + 0x13c], ebx
mov edi, dword [ebp - 0x14]
mov edx, dword [edi + 0x59c]
cmp edx, ebx
jl 0x452a6f
mov ecx, dword [edi + 0x578]
cmp ecx, ebx
lea esi, [edi + 0x574]
jne 0x452a34
xor eax, eax
jmp 0x452a3c
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 6
cmp edx, eax
jae 0x452a6f
push edx
mov ecx, esi
call fcn.00439ba0
cmp dword [eax + 0x1c], ebx
je 0x452a6f
mov eax, dword [edi + 0x59c]
push eax
mov ecx, esi
call fcn.00439ba0
mov eax, dword [eax + 0x1c]
mov ecx, 2
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], ecx
mov dword [eax + 0x38], ecx
cmp dword [ebp + 0x124], 8
jb 0x452a87
mov ecx, dword [ebp + 0x110]
push ecx
call fcn.004803bd
add esp, 4
mov dword [ebp + 0x124], 7
mov dword [ebp + 0x120], ebx
mov word [ebp + 0x110], bx
mov edi, dword [ebp - 0x14]
mov dword [edi + 0x5a0], ebx
mov eax, dword [edi + 0x57c]
add edi, 0x574
cmp dword [edi + 4], eax
mov dword [ebp - 0x1c], eax
jbe 0x452ac0
call fcn.00481100
mov esi, dword [edi + 4]
cmp esi, dword [edi + 8]
jbe 0x452acd
call fcn.00481100
mov ecx, dword [ebp - 0x1c]
cmp esi, ecx
mov dword [ebp - 0x2c], esi
je 0x452af9
mov edx, 0x736a7978
lea esp, [esp]
cmp dword [esi + 0x14], ebx
je 0x452af2
mov eax, dword [esi + 0x20]
cmp dword [eax + 4], edx
sete al
cmp al, bl
jne 0x452af9
add esi, 0x40
cmp esi, ecx
jne 0x452ae0
mov eax, dword [edi + 8]
cmp dword [edi + 4], eax
mov dword [ebp - 0x1c], eax
jbe 0x452b09
call fcn.00481100
mov eax, edi
cmp eax, ebx
mov dword [ebp - 0x30], eax
je 0x452b16
cmp eax, edi
je 0x452b1e
call fcn.00481100
mov eax, dword [ebp - 0x30]
cmp esi, dword [ebp - 0x1c]
je 0x452b42
cmp eax, ebx
jne 0x452b2f
call fcn.00481100
mov eax, dword [ebp - 0x30]
cmp esi, dword [eax + 8]
jb 0x452b39
call fcn.00481100
mov ecx, dword [esi + 0x18]
mov dword [0x4d1e50], ecx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 9
call fcn.004517f0
cmp dword [ebp + 0x108], 0x10
jb 0x452b69
mov edx, dword [ebp + 0xf4]
push edx
call fcn.004803bd
add esp, 4
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
mov dword [ebp + 0x108], 0xf
mov dword [ebp + 0x104], ebx
mov byte [ebp + 0xf4], bl
je 0x452ba4
mov ecx, dword [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x40]
push edx
push ecx
push eax
call fcn.00439230
mov edx, dword [ebp - 0x3c]
push edx
call fcn.004803bd
add esp, 0x14
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], bl
call fcn.004517f0
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 0xffffffff
call fcn.0047a2d0
lea esp, [ebp - 0x1fc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x644]
xor ecx, ebp
call fcn.00480bcf
add ebp, 0x648
mov esp, ebp
pop ebp
ret 4