Function at 0x40dba0
Capabilities:
Check for peb beingdebugged flag
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x4bb2ac
mov eax, dword fs:[0]
push eax
sub esp, 0x260
mov eax, dword [0x4e880c]
xor eax, esp
mov dword [esp + 0x25c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e880c]
xor eax, esp
push eax
lea eax, [esp + 0x274]
mov dword fs:[0], eax
mov eax, dword [0x4ec128]
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
push 0xe4
push eax
mov esi, ecx
call edi
mov dword [esi + 0x30], eax
mov ecx, dword [0x4ec128]
push 0xe5
push ecx
call edi
push 0x4caa68
push 0x10
xor ebp, ebp
push ebp
mov edi, dword [sym.imp.GDI32.dll_CreateFontW]
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0xc8
push ebp
push ebp
push ebp
push 0xc
mov dword [esi + 0x34], eax
call edi
push 0x4caa68
push 0x20
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0xc8
push ebp
push ebp
push ebp
mov dword [esi + 0x24], eax
mov ebx, 0x996633
push 0xc
mov dword [esi + 0x20], ebx
call edi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esi + 0x2c], eax
mov edx, dword [esi + 4]
push 0xd8
push edx
mov dword [esi + 0x28], ebx
call edi
mov ebx, dword [sym.imp.USER32.dll_SetWindowPos]
push 4
push 0x16
push 0x42
push 0x60
push 0x49
push ebp
push eax
call ebx
mov eax, dword [esi + 4]
push 0xd9
push eax
call edi
push 4
push 0x16
push 0x30
push 0x60
push 0x90
push ebp
push eax
call ebx
mov ecx, dword [esi + 4]
push 0xd8
push ecx
call edi
lea ebx, [esi + 0x44]
push eax
mov ecx, ebx
call fcn.00488160
mov edx, dword [esi + 0x48]
push str.sQR
push edx
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x996633
mov ecx, ebx
call fcn.00487cd0
push 0xf0
push 0xf0
push 0xef
push 0xee
push 0xf0
mov ecx, ebx
call fcn.00487e30
mov eax, dword [esi + 4]
push 0xd9
push eax
call edi
lea edi, [esi + 0x8c]
push eax
mov ecx, edi
call fcn.00488160
mov ecx, dword [esi + 0x90]
push 0x4caa54
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x996633
mov ecx, edi
call fcn.00487cd0
push 0xf3
push 0xf3
push 0xf2
push 0xf1
push 0xf3
mov ecx, edi
call fcn.00487e30
mov edi, 7
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebp
mov word [esp + 0x50], bp
mov dword [esp + 0x27c], ebp
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebp
mov word [esp + 0x34], bp
push 0x206
lea edx, [esp + 0x6e]
push ebp
push edx
mov byte [esp + 0x288], 1
mov word [esp + 0x74], bp
call fcn.0048c300
add esp, 0xc
push 0x104
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [esp + 0x68]
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bp
jne 0x40dd97
sub eax, ecx
sar eax, 1
push eax
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x38]
call fcn.0040244b
mov eax, dword [esp + 0x44]
lea ebx, [eax - 1]
cmp ebx, eax
jbe 0x40ddc5
call fcn.0048c687
cmp dword [esp + 0x48], 8
mov eax, dword [esp + 0x34]
jae 0x40ddd4
lea eax, [esp + 0x34]
cmp word [eax + ebx*2], 0x5c
je 0x40de2d
push 1
push 0x4caa50
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebp
mov word [esp + 0x20], bp
call fcn.0040244b
push 0xffffffffffffffff
push ebp
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x288], 2
call fcn.0040d400
cmp dword [esp + 0x2c], 8
mov byte [esp + 0x27c], 1
jb 0x40de2d
mov eax, dword [esp + 0x18]
push eax
call fcn.0048c049
add esp, 4
push 0x4caa38
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.0040dae0
add esp, 0xc
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x288], 3
call fcn.0040216a
mov ebx, 8
cmp dword [esp + 0x2c], ebx
mov byte [esp + 0x27c], 1
jb 0x40de79
mov eax, dword [esp + 0x18]
push eax
call fcn.0048c049
add esp, 4
cmp dword [esp + 0x64], ebx
mov eax, dword [esp + 0x50]
jae 0x40de87
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.SetLayeredWindowAttributes
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebp
mov dword [0x4eacd4], eax
je 0x40ded3
mov ecx, dword [esi + 4]
push 0xffffffffffffffec
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [esi + 4]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [esi + 4]
push 1
push ebp
push 0xff00ff
push eax
call dword [0x4eacd4]
cmp dword [esp + 0x48], ebx
jb 0x40dee6
mov ecx, dword [esp + 0x34]
push ecx
call fcn.0048c049
add esp, 4
cmp dword [esp + 0x64], ebx
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebp
mov word [esp + 0x34], bp
jb 0x40df06
mov edx, dword [esp + 0x50]
push edx
call fcn.0048c049
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x274]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x25c]
xor ecx, esp
call fcn.0048c010
add esp, 0x26c
ret 0x10