Function at 0x41d220
Capabilities:
Delete file
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4812a0
push eax
mov dword fs:[0], esp
lea eax, [ebp - 0x548]
sub esp, 0x53c
push 0x410
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x548]
push 0x208
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ecx, 0x208
lea eax, [ebp - 0x548]
nop word [eax + eax]
cmp word [eax], 0
je 0x41d28e
add eax, 2
sub ecx, 1
jne 0x41d280
push esi
mov edx, 0x208
mov esi, ecx
mov eax, edx
sub eax, ecx
neg esi
push edi
sbb esi, esi
and esi, eax
test ecx, ecx
jne 0x41d2ba
mov eax, 0x50100001
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x548]
lea ecx, [ecx + esi*2]
mov ax, word [ecx]
lea ecx, [ecx - 2]
cmp ax, 0x5c
jne 0x41d2c3
xor eax, eax
mov word [ecx + 4], ax
mov ecx, edx
lea eax, [ebp - 0x548]
nop dword [eax]
cmp word [eax], 0
je 0x41d2ee
add eax, 2
sub ecx, 1
jne 0x41d2e0
mov eax, edx
mov esi, ecx
sub eax, ecx
neg esi
sbb esi, esi
and esi, eax
test ecx, ecx
je 0x41d33d
lea ecx, [ebp - 0x548]
lea ecx, [ecx + esi*2]
sub edx, esi
je 0x41d330
mov edi, 0x48fe34
mov eax, accept
sub edi, ecx
test eax, eax
je 0x41d330
movzx esi, word [edi + ecx]
test si, si
je 0x41d330
mov word [ecx], si
dec eax
add ecx, 2
sub edx, 1
jne 0x41d317
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
push 1
push 0x40
push 4
lea eax, [ebp - 0x548]
push eax
lea ecx, [ebp - 0x138]
call fcn.0041b030
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], 0
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
test al, al
jne 0x41d37f
mov edi, 0x50100002
jmp 0x41d560
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____thiscall_std::basic_istream_char__struct_std::char_traits_char__::tellg_void_]
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
adc eax, dword [ebp - 0x38]
or ecx, eax
jne 0x41d3d0
lea ecx, [ebp - 0x128]
call fcn.0041d5c0
test eax, eax
jne 0x41d3c6
push eax
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov edi, 0x50100003
jmp 0x41d560
push 0
push 0
push 0
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int_]
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x3c]
push 0x495f60
push ecx
call fcn.00435bb2
mov edx, dword [ebp - 0x34]
add esp, 8
add edx, dword [ebp - 0x3c]
mov edi, eax
mov ecx, dword [ebp - 0x30]
adc ecx, dword [ebp - 0x38]
push ecx
push edx
push edi
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
lea ecx, [ebp - 0x128]
call fcn.0041d5c0
test eax, eax
jne 0x41d43a
push eax
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea eax, [ebp - 0x548]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0xa
push 0
push edi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
push edi
mov esi, eax
call fcn.00435bad
add esp, 0x10
test esi, esi
jne 0x41d46b
mov edi, 0x30100004
jmp 0x41d560
push str.user32.dll
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x24]
push eax
push 0x41d180
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [ebp - 0x24]
test eax, eax
jne 0x41d4b5
mov edi, 0x50100005
jmp 0x41d515
mov edi, dword [ebp - 0x20]
cmp esi, edi
jne 0x41d4c3
mov edi, 0x50100006
jmp 0x41d515
movups xmm0, xmmword [str.This_sentence_is_false.]
lea eax, [ebp - 0x80]
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x40], eax
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x44], 0x30
movups xmm0, xmmword [0x48fe70]
movups xmmword [ebp - 0x70], xmm0
movups xmm0, xmmword [0x48fe80]
movups xmmword [ebp - 0x60], xmm0
mov ecx, dword [esi + 4]
lea eax, [ebp - 0x48]
push eax
push ecx
push 0x4a
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
add esi, 8
cmp esi, edi
jne 0x41d4f8
mov esi, dword [ebp - 0x24]
xor edi, edi
test esi, esi
je 0x41d560
mov ecx, dword [ebp - 0x1c]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffff8
cmp ecx, 0x1000
jb 0x41d541
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d541
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.0043591e
add esp, 8
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x138]
call fcn.0041b660
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret