Function at 0x401d9e
Capabilities:
Get client handle via schannel
Get file size
Get local ipv4 addresses
Get outbound credentials handle via credssp
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1ffc
call fcn.00404ae0
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetDialogBaseUnits]
push edi
mov edi, dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x18], ebx
mov dword [0x45e5c8], eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 8], 0x2d
cmp eax, ebx
jne 0x401e6e
mov edx, dword [0x45e5c4]
mov ecx, dword [0x45e5c0]
mov eax, dword [0x45e5d4]
push edx
push ecx
push ebx
push 1
push eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push ebx
push dword [ebp - 0x3c]
call edi
mov eax, dword [0x45e5d4]
push ebx
push dword [ebp - 8]
push ebx
push eax
call edi
mov edi, dword [0x45e5c0]
call esi
movzx ecx, ax
mov eax, edi
shl eax, 2
cdq
idiv ecx
mov edi, dword [0x45e5c4]
mov dword [ebp - 8], eax
call esi
mov ecx, eax
mov eax, edi
shl eax, 3
cdq
shr ecx, 0x10
idiv ecx
push 0xfe
push 0x45e5e0
mov dword [ebp - 0x18], eax
mov eax, dword [0x45e5c0]
push eax
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x401e6e
mov byte [0x45e5e0], bl
lea eax, [ebp - 0x284]
push eax
push dword [ebp + 8]
push ebx
call dword [sym.imp.COMCTL32.dll_FlatSB_GetScrollInfo]
mov edi, dword [0x45e5d4]
mov ecx, dword [0x45e5c4]
neg eax
sbb eax, eax
and eax, dword [ebp + 8]
mov esi, eax
imul esi, esi, 0x384
add esi, 0x76c
lea edx, [edi + eax + 1]
imul esi, edx
add ecx, eax
imul ecx, dword [0x45e5c0]
mov edx, eax
imul edx, edx, 0x64
add esi, edx
mov dword [0x45e5c0], ecx
lea ecx, [eax + 1]
imul esi, ecx
add esi, 0x51
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], ecx
cmp eax, ebx
je 0x401f5d
push 0x42
pop edi
push edi
lea eax, [ebp - 0x164]
push ebx
push eax
call fcn.00404b10
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x164], edi
xor eax, eax
lea edi, [ebp - 0x8c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
push ecx
mov dword [ebp - 0x150], 0x500
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x8c], 0x14
call dword [sym.imp.GDI32.dll_StartDocA]
mov edi, dword [ebp - 0x2c]
push edi
call dword [sym.imp.GDI32.dll_StartPage]
push 0xd
push 0x41e7ac
push 0x64
push 0x64
push edi
call dword [sym.imp.GDI32.dll_TextOutA]
push edi
call dword [sym.imp.GDI32.dll_EndPage]
push edi
call dword [sym.imp.GDI32.dll_EndDoc]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edi, dword [0x45e5d4]
push 0x23e8
call fcn.004033c0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 8]
imul eax, eax, 0x22
mov dword [ebp - 0x2c], edi
sub edi, eax
imul edi, dword [ebp - 4]
pop ecx
mov dword [ebp - 0x34], edi
mov dword [0x45e5c4], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
add eax, 2
mov dword [ebp - 0x3c], eax
imul eax, eax, 5
mov dword [0x45e5c0], eax
lea eax, [ebp - 0x164]
push eax
push ebx
call dword [sym.imp.USER32.dll_BeginPaint]
xor eax, eax
mov dword [ebp - 0x88], ebx
lea edi, [ebp - 0x84]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x2c]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebp - 8]
mov eax, dword [ebp + 0x14]
push dword [ebp - 0x164]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
add dword [ebp - 0x20], esi
mov dword [0x45e5c0], eax
call edi
push dword [ebp - 4]
push dword [ebp - 0x80]
push dword [ebp - 0x164]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push dword [ebp - 0x164]
mov dword [ebp - 0x24], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
push eax
call edi
call dword [sym.imp.USER32.dll_GetFocus]
cmp dword [ebp - 0x20], ebx
je 0x402047
mov eax, dword [0x45e5c0]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x34]
imul eax, dword [ebp + 0x14]
imul ecx, ecx, 0x65
add eax, ecx
mov ecx, dword [ebp - 4]
lea eax, [eax + ecx*2]
mov dword [0x45e5c4], eax
push dword [ebp - 8]
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CreatePen]
push dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CreatePen]
push 0xe8d2a7
push ebx
push ebx
mov dword [ebp - 0xc], eax
call dword [sym.imp.GDI32.dll_CreatePen]
push dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
push ebx
call edi
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
je 0x4020cd
mov eax, dword [ebp - 0x34]
cmp eax, dword [0x45e5d4]
jbe 0x402092
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x14], eax
mov eax, dword [0x45e5cc]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
sub ecx, eax
add ecx, dword [ebp - 0x10]
lea eax, [eax + edx + 1]
imul eax, dword [0x45e5d0]
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x14]
sub ecx, dword [0x45e5c0]
add ecx, dword [ebp + 0x14]
cmp ecx, eax
jne 0x4020d0
mov eax, dword [0x45e5c0]
add dword [0x45e5c4], eax
jmp 0x4020d0
inc dword [ebp - 8]
mov eax, dword [0x45e5c4]
sub eax, dword [0x45e5c0]
jne 0x4020e7
cmp dword [ebp - 8], ebx
je 0x4020e7
push dword [ebp - 0xc]
jmp 0x4020f0
push 6
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp - 0x164]
call edi
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], eax
je 0x402126
mov ecx, dword [0x45e5c0]
add eax, dword [ebp - 0xc]
add ecx, 3
imul ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
add eax, dword [0x45e5d4]
mov dword [0x45e5c4], ecx
mov dword [0x45e5d8], eax
jmp 0x402151
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov edx, dword [0x45e5c4]
sub eax, ecx
dec eax
add edx, ecx
imul eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [0x45e5c0]
xor edx, edx
add eax, dword [ebp + 0x14]
div dword [ebp - 0x38]
mov dword [ebp - 8], eax
push ebx
mov edi, 0x12b
push edi
push ebx
push dword [ebp - 0x164]
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [ebp - 0x20]
push edi
push dword [ebp - 0x80]
mov dword [0x45e5d0], eax
push dword [ebp - 0x164]
call dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [0x45e5d0]
cmp eax, dword [0x45e5cc]
jbe 0x402240
mov eax, dword [ebp - 0x20]
imul eax, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x28], eax
cmp eax, ebx
jle 0x402240
mov edi, dword [ebp + 8]
cmp dword [0x45e5cc], ebx
jne 0x4021da
inc dword [0x45e5c0]
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movzx edi, word [ebp - 0xb4]
push 1
lea eax, [ebp - 0x50]
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov dword [ebp - 0x2c], eax
jmp 0x4021e5
dec dword [ebp - 8]
cmp dword [0x45e5d4], ebx
jne 0x402240
cmp dword [0x45e5d8], ebx
je 0x402240
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
cdq
lea ecx, [ecx + 0x10]
idiv ecx
cmp eax, ebx
jle 0x40220b
cmp dword [ebp - 4], ebx
je 0x402208
mov ecx, dword [ebp - 0x18]
add dword [ebp - 8], ecx
dec eax
jne 0x4021fd
cmp dword [ebp - 0x48], ebx
je 0x40299c
cmp dword [0x45e5d4], ebx
jne 0x40299c
cmp edi, ebx
jne 0x40299c
cmp dword [ebp - 0x2c], ebx
jne 0x40299c
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x28]
jl 0x4021a5
cmp dword [ebp - 0x20], ebx
je 0x402253
cmp dword [0x45e5d0], ebx
je 0x402253
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
push dword [ebp - 0x18]
push dword [0x45e5d4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
push dword [ebp - 4]
call dword [sym.imp.USER32.dll_ChangeClipboardChain]
mov ecx, dword [ebp - 4]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x14]
lea edx, [ebp + ecx - 0x464]
mov dword [edx + eax], edi
mov edx, dword [ebp - 0x1c]
mov dword [0x45e5c0], ecx
cmp edx, ebx
je 0x402294
mov edi, dword [ebp - 8]
mov dword [ecx], edi
cmp esi, dword [ebp - 8]
jle 0x4022a1
mov esi, dword [ebp - 0x18]
sub esi, eax
add dword [ebp - 8], esi
cmp edx, ecx
jne 0x4022ad
mov dword [0x45e5d4], edx
jmp 0x4022b5
mov eax, dword [ebp + 8]
mov dword [0x45e5d4], eax
xor esi, esi
inc esi
mov eax, esi
mov word [ebp - 0x66], ax
mov word [ebp - 0x68], ax
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x6c], 2
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x74]
mov edi, esi
sub esi, dword [ebp - 0x70]
lea ecx, [eax + 1]
imul esi, ecx
mov ecx, dword [ebp - 0x6c]
add ecx, esi
xor edx, edx
cmp ecx, ebx
jle 0x40230b
mov esi, dword [ebp - 0x24]
cmp esi, dword [ebp - 4]
je 0x40230b
shl edi, 4
inc edx
cmp edx, ecx
jl 0x4022fb
mov ecx, 0x18c
sub ecx, dword [ebp - 4]
mov edx, 0x238
sub edx, dword [ebp - 4]
imul ecx, edi
imul ecx, dword [ebp - 0x38]
imul edx, edi
imul edx, dword [ebp - 0x38]
push 0x20
pop esi
sub esi, eax
mov eax, dword [ebp - 0x70]
add eax, 2
imul esi, eax
mov eax, dword [0x45e5d0]
cmp dword [ebp - 0x24], eax
jle 0x402344
imul esi, edi
cmp eax, ebx
je 0x402355
cmp dword [0x45e5d4], ebx
jne 0x402355
push edx
push ecx
push esi
jmp 0x40235c
push dword [ebp - 0x18]
push dword [ebp - 8]
push ebx
call dword [sym.imp.KERNEL32.dll_HeapCreate]
push dword [ebp - 4]
xor edi, edi
inc edi
push edi
push 2
pop esi
push esi
mov dword [ebp - 0x34], eax
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0xc], eax
mov eax, esi
mov word [ebp - 0xb4], ax
movzx eax, word [0x45e5cc]
push eax
mov dword [ebp - 0xb0], ebx
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0xb2], ax
push 0x10
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.WS2_32.dll_bind]
cmp eax, 0xffffffff
jne 0x4023d1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.bind_failed:__u_n
call fcn.00404810
add eax, 0x40
push eax
call fcn.00404570
add esp, 0xc
push edi
push dword [ebp - 0xc]
call dword [sym.imp.WS2_32.dll_listen]
cmp eax, 0xffffffff
jne 0x4023fd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Listen_failed:__u_n
call fcn.00404810
add eax, 0x40
push eax
call fcn.00404570
add esp, 0xc
cmp dword [ebp - 4], ebx
je 0x40240d
push ebx
push ebx
push dword [ebp - 0xc]
call dword [sym.imp.WS2_32.dll_accept]
push dword [ebp - 0xc]
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x4024f4
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x388]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x10
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x9c], ecx
mov ecx, dword [0x45e5c4]
push ebx
mov dword [ebp - 0x114], ecx
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 8]
mov dword [ebp - 0x10c], ecx
push ebx
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x120]
push eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x110], esi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0x11c], esi
call dword [sym.imp.Secur32.dll_AcceptSecurityContext]
mov esi, 0x90314
cmp eax, 0x90313
je 0x4024c2
cmp eax, esi
jne 0x4024d2
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x50]
push eax
call sub.Secur32.dll_CompleteAuthToken
mov ecx, dword [ebp - 0x114]
mov dword [0x45e5c4], ecx
cmp eax, 0x90312
je 0x4024e9
cmp eax, esi
jne 0x4024eb
xor edi, edi
mov eax, dword [ebp - 4]
mov dword [0x45e5c0], edi
push 0x103
mov byte [ebp - 0x268], al
lea eax, [ebp - 0x267]
push ebx
push eax
call fcn.00404b10
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1ffc]
push eax
mov dword [ebp - 0x2c], 0x1388
call sub.IPHLPAPI.DLL_GetAdaptersInfo
mov edi, dword [sym.imp.WS2_32.dll_inet_addr]
lea esi, [ebp - 0x1ffc]
lea eax, [esi + 0x1b0]
push eax
call edi
cmp dword [ebp + 8], eax
jne 0x402558
lea eax, [esi + 0x1d8]
lea edx, [ebp - 0x268]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x40254e
mov esi, dword [esi]
cmp esi, ebx
jne 0x402532
lea eax, [ebp - 0x268]
push eax
call edi
mov esi, str.abcdef
lea edi, [ebp - 0x50]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [0x45e5c0], eax
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x388]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], ecx
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x10], ebx
cmp eax, ebx
je 0x4026a4
mov edi, dword [ebp - 0xc]
cmp edi, 0x10
jbe 0x40259d
push 0x10
pop edi
push dword [ebp - 0x10]
lea eax, [ebp - 0x108]
push str._4.4x
push 0x64
push eax
call fcn.00404510
add esp, 0x10
xor esi, esi
mov al, 6
cmp edi, ebx
jbe 0x402618
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [esi + ecx]
shr ecx, 4
mov cl, byte [ebp + ecx - 0x50]
movsx edx, al
mov byte [ebp + edx - 0x108], cl
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [esi + ecx]
inc al
and ecx, 0xf
mov cl, byte [ebp + ecx - 0x50]
movsx edx, al
inc al
mov byte [ebp + edx - 0x108], cl
movsx ecx, al
inc al
cmp esi, 7
jne 0x402606
mov byte [ebp + ecx - 0x108], 0x3a
jmp 0x40260e
mov byte [ebp + ecx - 0x108], 0x20
inc esi
cmp esi, edi
jb 0x4025be
cmp esi, 0x10
jae 0x402647
push 0x10
pop ecx
sub ecx, esi
movsx edx, al
inc al
mov byte [ebp + edx - 0x108], 0x20
movsx edx, al
inc al
mov byte [ebp + edx - 0x108], 0x20
movsx edx, al
inc al
dec ecx
mov byte [ebp + edx - 0x108], 0x20
jne 0x40261d
movsx ecx, al
inc al
xor edx, edx
mov byte [ebp + ecx - 0x108], 0x20
cmp edi, ebx
jbe 0x402688
mov ecx, dword [ebp - 0x14]
mov cl, byte [edx + ecx]
cmp cl, 0x20
jb 0x402676
cmp cl, 0x7e
ja 0x402676
movsx esi, al
mov byte [ebp + esi - 0x108], cl
jmp 0x402681
movsx ecx, al
mov byte [ebp + ecx - 0x108], 0x2e
inc al
inc edx
cmp edx, edi
jb 0x40265a
sub dword [ebp - 0xc], edi
add dword [ebp - 0x14], edi
add dword [ebp - 0x10], edi
movsx eax, al
mov byte [ebp + eax - 0x108], bl
cmp dword [ebp - 0xc], ebx
jne 0x402592
cmp dword [ebp - 0x1c], ebx
je 0x402758
lea eax, [ebp - 0x50]
push eax
push 0x59
lea eax, [ebp - 0x58]
push eax
call sub.Secur32.dll_QueryContextAttributesA
test eax, eax
je 0x4026ca
mov eax, dword [0x45e5c4]
mov dword [0x45e5c0], eax
xor eax, eax
push 8
pop ecx
lea edi, [ebp - 0xc4]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xc4], 0x20
mov dword [ebp - 0xc0], str.1.3.6.1.5.5.7.3.2
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb0], eax
xor esi, esi
push esi
lea eax, [ebp - 0xc4]
push eax
push 1
push ebx
push 1
push dword [ebp + 8]
call dword [sym.imp.CRYPT32.dll_CertFindChainInStore]
mov esi, eax
cmp esi, ebx
je 0x4027a7
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xa0]
push eax
push ebx
push ebx
lea eax, [ebp - 0x388]
push eax
push ebx
push 2
push str.Microsoft_Unified_Security_Protocol_Provider
push ebx
call sub.Secur32.dll_AcquireCredentialsHandleA
test eax, eax
jne 0x402705
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.Secur32.dll_FreeCredentialsHandle]
push 0x103
lea eax, [ebp - 0x267]
push ebx
push eax
mov byte [ebp - 0x268], bl
call fcn.00404b10
push 0x41e72c
call fcn.00404430
push 0x41e728
call fcn.00404430
mov edi, eax
lea eax, [ebp - 0x268]
push edi
push eax
call fcn.00403380
add esp, 0x1c
inc eax
cmp dword [ebp - 0x1c], ebx
je 0x4027d3
push edi
push eax
call fcn.00403380
pop ecx
pop ecx
jmp 0x4027cd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error_0x_x_finding_cert_chain_n
call fcn.004042d0
pop ecx
pop ecx
jmp 0x402758
inc esi
push esi
call fcn.00404430
push edi
push esi
call fcn.00403380
add esp, 0xc
mov esi, eax
cmp esi, ebx
jne 0x4027bc
movzx eax, word [0x45e5c0]
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push ebx
call edi
mov esi, dword [sym.imp.USER32.dll_LoadBitmapA]
push eax
call esi
mov dword [ebp - 0xc], eax
movzx eax, word [0x45e5c4]
push eax
push ebx
call edi
push eax
call esi
mov dword [ebp - 0x14], eax
movzx eax, word [ebp - 0x18]
push eax
push ebx
call edi
push eax
call esi
mov ecx, dword [ebp - 4]
dec ecx
mov esi, dword [0x45e5d4]
mov dword [ebp - 0x10], eax
mov eax, dword [0x45e5c0]
je 0x4029af
dec ecx
je 0x4029a3
sub ecx, 3
je 0x402992
sub ecx, 0xa
je 0x4028fe
dec ecx
je 0x4028f2
sub ecx, 0x101
je 0x402881
sub ecx, 0x27
je 0x402867
push dword [0x45e5c4]
push eax
push dword [ebp - 4]
push esi
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x402a4b
push 1
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0xff
push ebx
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
jmp 0x403351
movzx eax, ax
push 7
pop edi
sub eax, edi
je 0x4028dc
dec eax
je 0x4028c0
dec eax
jne 0x402a4b
push ebx
push 9
push dword [0x45e5dc]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 8
jne 0x4028ac
push 8
jmp 0x4028ad
push ebx
push 9
push dword [0x45e5dc]
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x402a41
push ebx
push 8
pop edi
push edi
push dword [0x45e5dc]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 8
jne 0x4028d8
push edi
jmp 0x4028d9
push ebx
push edi
jmp 0x4028af
push ebx
push edi
push dword [0x45e5dc]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 8
jne 0x4028d8
push 8
jmp 0x4028d9
push esi
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x402a4b
lea eax, [ebp - 0x164]
push eax
push esi
call dword [sym.imp.USER32.dll_BeginPaint]
mov esi, dword [sym.imp.GDI32.dll_CreatePen]
mov edi, 0x808080
push edi
push 5
push ebx
mov dword [ebp - 0x10], eax
call esi
push ebx
push 1
push ebx
call esi
mov esi, 0x582630
push esi
push ebx
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
push str.Times_New_Roman
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push ebx
push 0x32
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
push dword [ebp - 0x10]
mov dword [ebp - 0x84], 0x8c
mov dword [ebp - 0x7c], 0x20d
mov dword [ebp - 0x88], 0x19
mov dword [ebp - 0x80], 0x1a9
call dword [sym.imp.GDI32.dll_SetBkColor]
push edi
push dword [ebp - 0x10]
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x402a4b
push 1
push ebx
push esi
call dword [sym.imp.USER32.dll_InvalidateRect]
xor eax, eax
jmp 0x403351
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x402a4b
push esi
call dword [sym.imp.USER32.dll_GetMenu]
push dword [ebp - 0xc]
mov edi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push dword [ebp - 0xc]
mov dword [0x45e5dc], eax
push 4
push dword [0x45e5c0]
push eax
call edi
push dword [ebp - 0x14]
push dword [ebp - 0x14]
push 4
push dword [0x45e5c4]
push dword [0x45e5dc]
call edi
push dword [ebp - 0x10]
push dword [ebp - 0x10]
push 4
push dword [ebp - 0x18]
push dword [0x45e5dc]
call edi
push dword [ebp - 0xc]
push dword [ebp - 0xc]
push 4
push dword [0x45e5c0]
push dword [0x45e5dc]
call edi
push dword [ebp - 0x14]
push dword [ebp - 0x14]
push 4
push dword [0x45e5c4]
push dword [0x45e5dc]
call edi
push dword [ebp - 0x10]
push dword [ebp - 0x10]
push 4
push dword [ebp - 8]
push dword [0x45e5dc]
call edi
push esi
call dword [sym.imp.USER32.dll_DrawMenuBar]
push 1
push ebx
push esi
call dword [sym.imp.USER32.dll_InvalidateRect]
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0xc
mov esi, eax
call edi
push eax
push 0xb
call edi
push eax
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push esi
call edi
push dword [ebp - 4]
mov dword [ebp - 0x2c], eax
push ebx
push ebx
push esi
call dword [sym.imp.USER32.dll_DrawIcon]
push dword [ebp - 0x2c]
push esi
call edi
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0xff6464
call edi
push 0x64ff64
call edi
push 0x6464ff
call edi
push 0x3c
lea eax, [ebp - 0xe0]
push ebx
push eax
call fcn.00404b10
mov eax, dword [0x45e5c0]
add esp, 0xc
push 0x14
push 0x10
mov dword [ebp - 0xdc], eax
mov eax, dword [0x45e5c4]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xb4], eax
pop eax
push eax
push eax
push eax
push eax
push 3
lea eax, [ebp - 0xe0]
push eax
push ebx
push dword [ebp + 8]
mov dword [ebp - 0xe0], ebx
push ebx
push 0xffffffffffffffff
push 0x50800000
push dword [ebp - 0x1c]
mov byte [ebp - 0xd8], 4
mov dword [ebp - 0xcc], 1
mov byte [ebp - 0xc4], 4
mov dword [ebp - 0xb8], 2
mov byte [ebp - 0xb0], 4
call dword [sym.imp.COMCTL32.dll_CreateToolbarEx]
mov ecx, dword [0x45e5c0]
mov esi, dword [sym.imp.USER32.dll_GetIconInfo]
xor eax, eax
lea edi, [ebp - 0xb8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xb8]
push eax
push ecx
call esi
test eax, eax
jne 0x402b5d
mov dword [ebp - 8], ebx
push 0x100
push ebx
push dword [ebp - 4]
call dword [sym.imp.COMCTL32.dll_ImageList_GetIcon]
mov dword [ebp - 0x24], eax
xor eax, eax
lea edi, [ebp - 0x8c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x24]
call esi
test eax, eax
jne 0x402b8f
mov dword [ebp - 8], ebx
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_DestroyIcon]
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, esi
cdq
lea ecx, [ecx + 0x64]
idiv ecx
mov edi, dword [0x45e5cc]
lea edi, [edi + 1]
mov ecx, eax
mov eax, dword [ebp - 0x18]
cdq
idiv edi
mov dword [ebp - 8], eax
lea eax, [esi + esi]
cdq
mov esi, 0x3e8
idiv esi
imul eax, eax, 0x3e8
add eax, 0x448
cmp dword [ebp - 0x1c], ebx
je 0x402be4
add ecx, ecx
imul eax, ecx
push eax
push ebx
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, dword [sym.imp.WINMM.dll_timeBeginPeriod]
push 1
mov dword [ebp - 0x2c], eax
call esi
mov edi, dword [sym.imp.WINMM.dll_timeGetTime]
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
push 1
call esi
call edi
mov eax, dword [ebp + 8]
mov esi, dword [0x45e5d4]
mov dword [ebp - 0x14], eax
mov al, byte [ebp - 4]
mov edi, 0x103
push edi
mov byte [ebp - 0x66c], al
mov dword [ebp - 0x44], esi
push ebx
lea eax, [ebp - 0x66b]
push eax
call fcn.00404b10
mov al, byte [ebp - 4]
push edi
mov byte [ebp - 0x568], al
lea eax, [ebp - 0x567]
push ebx
push eax
call fcn.00404b10
mov ecx, dword [ebp - 4]
lea eax, [ecx + ecx]
mov dword [ebp - 0x28], eax
add eax, 3
mov dword [ebp - 0x18], eax
mov eax, dword [0x45e5cc]
lea edx, [eax + ecx + 1]
mov eax, dword [0x45e5d0]
mov ecx, dword [0x45e5c0]
imul edx, eax
mov edi, ecx
neg edi
add esp, 0x18
cmp edi, edx
jne 0x402cf8
add dword [0x45e5c4], ecx
mov edx, dword [0x45e5c4]
lea esi, [esi*4 + 1]
imul esi, dword [ebp - 0x2c]
sar eax, 8
mov dword [ebp - 0xc], esi
mov esi, 0x41ca50
sub esi, eax
add eax, 0xfffffffc
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x40]
lea ecx, [ecx + edx - 3]
mov dword [0x45e5c0], ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x54], eax
call dword [sym.imp.USER32.dll_GetDialogBaseUnits]
cmp dword [ebp - 0x20], ebx
je 0x402d57
cmp dword [0x45e5d0], ebx
je 0x402d57
cmp dword [ebp - 0x48], ebx
je 0x402d57
mov eax, dword [0x45e5cc]
imul eax, eax, 7
lea eax, [esi + eax + 7]
mov dword [ebp - 0x3c], eax
push ebx
push ebx
push 3
push ebx
push ebx
push bind
lea eax, [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, dword [ebp - 4]
imul edi, dword [ebp - 0x18]
mov esi, dword [ebp - 8]
sub esi, edi
add esi, 4
imul esi, dword [ebp - 0x14]
push ebx
push eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x14], esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, dword [0x45e5c0]
mov ecx, dword [0x45e5c4]
push eax
lea ecx, [edx + ecx - 4]
push 2
mov dword [ebp - 0x34], eax
mov dword [0x45e5c0], ecx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5c], eax
jne 0x402e07
mov eax, dword [ebp - 8]
sub eax, edi
add eax, 4
imul eax, esi
mov esi, dword [ebp - 0x20]
sub esi, dword [ebp - 4]
mov dword [ebp - 0x14], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x44]
imul esi, eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 1]
sub eax, dword [ebp - 0x40]
imul esi, ecx
mov ecx, dword [ebp - 0x28]
imul esi, esi, 3
add esi, dword [ebp - 0x40]
add eax, 0x65
imul eax, dword [ebp + 0x14]
sub eax, dword [ebp - 0x14]
lea eax, [eax + ecx + 1]
mov dword [0x45e5c4], eax
jmp 0x402f10
mov esi, dword [sym.imp.USER32.dll_GetDialogBaseUnits]
call esi
movzx eax, ax
mov dword [ebp - 0x9c], eax
call esi
push ebx
push ebx
push ebx
shr eax, 0x10
push str.DISPLAY
mov dword [ebp - 0x94], eax
call dword [sym.imp.GDI32.dll_CreateICA]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
push edi
call esi
push edi
mov dword [ebp - 0x10], eax
call esi
push edi
mov dword [ebp - 0x44], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
lea eax, [ebp - 0x90]
push eax
push 0x18
push dword [ebp - 4]
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x9c]
cdq
push 6
and edx, 3
pop ecx
lea esi, [ebp - 0x90]
lea edi, [ebp - 0x78]
rep movsd dword es:[edi], dword [esi]
lea ecx, [edx + eax]
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x94]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x70], eax
sar ecx, 2
lea eax, [ecx + 0xf]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
add eax, eax
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x74], ecx
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
push dword [ebp - 4]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x10]
mov edi, eax
call esi
push edi
push dword [ebp - 0x44]
call esi
push 0xcc0020
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
push ebx
push ebx
push dword [ebp - 0x10]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push ebx
push ebx
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_StretchBlt]
push dword [ebp - 0x10]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
call esi
push dword [ebp - 0x44]
call esi
push dword [ebp - 4]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, dword [ebp - 0x54]
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
cmp edi, 1
jge 0x402fa9
xor eax, eax
cmp eax, dword [ebp - 0x38]
jg 0x402f4e
cmp eax, 1
jne 0x402f46
mov ecx, dword [0x45e5c4]
lea ecx, [ecx + ecx - 4]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [0x45e5c4], ecx
inc eax
cmp eax, 3
jle 0x402f26
jmp 0x402fa9
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
add ecx, eax
je 0x402f61
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x20]
cmp dword [ebp - 0x48], ecx
jbe 0x402fa3
cmp eax, ebx
je 0x402f78
mov edx, dword [0x45e5cc]
add edx, 4
jmp 0x402f7a
mov edx, esi
lea ecx, [ebp - 0x464]
cmp dword [ebp - 0x1c], ebx
jne 0x402f88
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x388]
cmp dword [ebp - 0x20], ebx
je 0x402f96
mov eax, dword [ebp - 0xc]
push edx
push ecx
push eax
call fcn.00403f60
add esp, 0xc
jmp 0x402fa9
mov dword [0x45e5c4], ebx
push ebx
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x34]
mov dword [ebp - 0x4c], ebx
push edi
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0x64
mov eax, dword [ebp - 0x18]
jle 0x402fdc
cmp eax, dword [ebp - 8]
jne 0x403034
mov ecx, dword [ebp - 0x48]
add ecx, dword [0x45e5c4]
add dword [0x45e5c0], ecx
jmp 0x403034
add eax, dword [ebp + 0x14]
imul eax, dword [ebp - 0x38]
cmp dword [ebp - 4], eax
je 0x402ff4
movzx eax, byte [ebp - 8]
cmp dword [ebp - 4], eax
jne 0x402ff4
inc dword [ebp - 8]
mov eax, dword [0x45e5d4]
cmp dword [ebp - 4], eax
jne 0x403034
mov ecx, dword [0x45e5d0]
cmp dword [0x45e5d8], ecx
jbe 0x403034
cmp eax, ebx
je 0x403019
mov esi, dword [0x45e5cc]
add esi, 4
lea eax, [ebp - 0x464]
cmp ecx, ebx
je 0x403026
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x40]
add ecx, 5
push ecx
push esi
push eax
call fcn.00401c76
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x24]
push eax
push 1
push dword [ebp - 0x60]
mov dword [ebp - 0x24], ebx
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov ecx, dword [ebp - 4]
cmp eax, ecx
jle 0x403098
mov eax, dword [ebp - 0x1c]
lea esi, [eax + 5]
lea edx, [ecx*4 + 4]
imul edx, esi
dec edx
push 0x14
pop esi
sub esi, ecx
imul edx, esi
sub edx, dword [ebp - 0x48]
add edx, eax
mov eax, dword [0x45e5c0]
lea eax, [eax + edx + 0x1b5]
mov dword [0x45e5c0], eax
neg eax
xor edx, edx
div dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
cmp ecx, ebx
jne 0x4030ad
cmp dword [ebp - 0x1c], ebx
jne 0x4030ad
cmp dword [0x45e5cc], ebx
je 0x40313a
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
je 0x4030bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 4]
mov eax, ecx
imul eax, eax, 0xf
add eax, dword [ebp - 0x18]
imul eax, dword [ebp - 8]
cdq
sub eax, edx
sar eax, 1
add dword [0x45e5c0], eax
lea eax, [ebp - 0x2c]
push eax
push 0x41e7b0
push ebx
push dword [ebp - 0x34]
push dword [ebp - 0x24]
call dword [sym.imp.OLEAUT32.dll_OleCreatePictureIndirect]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
add eax, 0x65
imul eax, dword [ebp + 0x14]
sub eax, dword [ebp - 0x14]
push 0x104
lea eax, [eax + ecx + 1]
mov dword [0x45e5c4], eax
lea eax, [ebp - 0x568]
push eax
lea eax, [ebp - 0x874]
push eax
call fcn.00403b60
add esp, 0xc
lea eax, [ebp - 0x874]
push eax
push dword [ebp - 0x2c]
call dword [sym.imp.OLEAUT32.dll_OleLoadPicturePath]
mov ecx, dword [ebp - 0xc]
lea eax, [ebp + 8]
mov dword [ecx + 1], eax
mov esi, dword [ebp + 8]
mov edi, dword [0x45e5d4]
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x54], 0x40
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push ebx
push esi
push ebx
push edi
push 0x14
push dword [0x45e5c4]
push 0xa
push dword [0x45e5c0]
push 0x50000000
push 0x41e6ec
push str.msctls_hotkey32
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
push edi
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 4
push 3
push 0x403
push edi
call esi
push dword [ebp - 8]
push 0x641
push 0x401
push edi
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, dword [0x45e5d4]
push 0xff0000
call esi
push 0xff00
mov dword [ebp - 0x54], eax
call esi
push 0x3c
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xe0]
push ebx
push eax
call fcn.00404b10
add esp, 0xc
push 2
pop esi
push 3
pop ecx
push 0x14
push 0x10
xor eax, eax
inc eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xcc], eax
pop eax
push eax
push eax
push eax
push eax
push ecx
lea eax, [ebp - 0xe0]
push eax
push dword [0x45e5c0]
mov dword [ebp - 0xe0], ebx
push dword [ebp + 8]
mov byte [ebp - 0xd8], 4
push ecx
push 0xffffffffffffffff
mov dword [ebp - 0xc8], esi
mov byte [ebp - 0xc4], 4
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xb4], ecx
mov byte [ebp - 0xb0], 4
push 0x50800000
push edi
call dword [sym.imp.COMCTL32.dll_CreateToolbarEx]
mov eax, dword [ebp - 4]
sub eax, esi
je 0x403278
dec eax
je 0x403271
sub eax, 0x28
jne 0x403287
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x403287
mov dword [ebp + 0x14], esi
push 1
jmp 0x40327f
xor eax, eax
inc eax
mov dword [ebp + 0x14], eax
push eax
push ebx
push edi
call dword [sym.imp.USER32.dll_InvalidateRect]
lea eax, [ebp - 0x164]
push eax
push edi
call dword [sym.imp.USER32.dll_BeginPaint]
cmp dword [ebp + 0x14], 1
mov dword [ebp - 0x28], eax
jne 0x4032b1
push dword [ebp - 0x54]
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_FillRect]
cmp dword [ebp + 0x14], esi
jne 0x4032cc
push dword [ebp - 0x94]
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_FillRect]
lea eax, [ebp - 0x164]
push eax
push edi
call dword [sym.imp.USER32.dll_EndPaint]
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x268]
push eax
mov esi, 0x3ff
lea eax, [ebp - 0xc74]
push esi
push eax
call fcn.004036a0
add esp, 0x10
lea eax, [ebp - 0xc74]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov edi, dword [ebp - 8]
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0xc74]
push esi
push eax
call fcn.004036a0
add esp, 0x10
cmp dword [ebp - 0x1c], ebx
je 0x40334b
push edi
lea eax, [ebp - 0x770]
push eax
lea eax, [ebp - 0xc74]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_MessageBoxA]
push dword [ebp - 0xc]
call dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret 0x10